last executing test programs: 32.605932784s ago: executing program 0 (id=36): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = syz_open_dev$loop(0x0, 0xffffffff7ffffffd, 0x160862) pwritev(r0, &(0x7f0000000500), 0x0, 0x5, 0xfffffff9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) remap_file_pages(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x0, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xa7}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x3}}}, @TCF_EM_META={0xc, 0x2}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) socket(0x10, 0x80002, 0x0) 21.581837796s ago: executing program 0 (id=50): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)}}, {}], 0x3, 0x1c000) io_setup(0x2, &(0x7f0000000540)) memfd_secret(0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) sendfile(r0, r0, 0x0, 0xc) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x21, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000280)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(r4, 0x5b03, 0x0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 20.82327021s ago: executing program 2 (id=51): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4028800) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 20.432691633s ago: executing program 2 (id=52): r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000140)=""/185) 19.538737614s ago: executing program 2 (id=56): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4000065}, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockname(r2, &(0x7f00000000c0)=@l2tp6, &(0x7f0000000000)=0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, r4, 0x601}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e23, 0x1, @local, 0x53b9}}, 0xfffffffd, 0x0, 0x400, 0x0, 0xb2}, 0x9c) bind$inet6(r2, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x1a0, 0x2b8, 0x25c, 0x1a0, 0x7, 0x268, 0x3a8, 0x3a8, 0x268, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0x110, 0x178, 0xa010000, {}, [@common=@unspec=@physdev={{0x68}, {'vxcan1\x00', {0xff}, 'bridge_slave_1\x00', {0xff}, 0x13, 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0x0, 0x0, 0x14, 'syz1\x00', 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [], [], 'sit0\x00', 'ipvlan0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 16.718504333s ago: executing program 0 (id=61): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0xf8, 0x65, 0x100, 0x170bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0xb8, 0x2, [@TCA_BPF_ACT={0xac, 0x1, [@m_skbedit={0xa8, 0x11, 0x0, 0x0, {{0xc}, {0x4}, {0x79, 0x6, "30cbb705b416ba0830f20a58294437adf387be2c5c0be289398c099b2e0fad0a4e749a52e1f5a75d291f8d128db69182792fc2d2dbf61c190aa5138085d5d1951d7457c5c0b4920793d96054893043f112825e710e6e179fa7d28f3c6acd5d743d405349005c0f6844ffcfe048e388a1892a78b936"}, {0xc}, {0xc, 0x8, {0x2}}}}]}, @TCA_BPF_FD={0x8}]}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x80}, 0x200400a0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 15.858363219s ago: executing program 0 (id=62): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4028800) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 15.258426925s ago: executing program 0 (id=63): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2404c000) r2 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x2f7}) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 12.498790066s ago: executing program 3 (id=65): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x4001, 0x800) r3 = eventfd2(0x4, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r3, 0x7, 0x2, r2}) 12.011081152s ago: executing program 1 (id=66): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x4, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000140)=""/185) 11.619236649s ago: executing program 3 (id=67): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x304, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0xa, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002207000000851f82"], 0x0}, 0x0) 11.487443466s ago: executing program 2 (id=68): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000380)={&(0x7f0000000100)=[{0x6, 0x10, 0x0, 0x0}, {0x2, 0x4000, 0x0, 0x0}], 0x2}) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="440000001800010000000000000000000a0000000000000000000000180016000d0001000700000000000000000010000000000008000400", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 10.08437077s ago: executing program 4 (id=70): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) writev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000400)="c68d61faac0c3cba0b9fa74d8db5c4c98d1e2e216b00ce71e6bcd30eac308dcc5e5b3c36bfbf10a647ac268ec44c3aa2ab33a61b3f0261d5679d1aa92f37e2d0f72d52b9f5a9b32fd8fa2498d058f07fb4", 0x51}, {&(0x7f0000000c00)="705260c0eee20448fc57bcd29f0472183043b113226f295ea60429c28cefe8e8acdbb7925c14190b48882fc07d5dc662dd88a204de45ba651aafa59a71abc243b35944e37425334350857b8d07513f5b7ec8c5488f7e922b75325957dcba61835eea8bfd283904fb72ba102f929fe7c20329ece3613fda24b2a9a5ca0fd85f2f0162cea0ed2a611a789263faab036f4100a4b1d71fe434c53fa9e8d5a84240637a7b3d2f3c35c412cec30f71961ab05ffb56847e7134f52058080f39c0186bf0e53d7d6d65634f9a12ffaf24e4e4bd2add30baee15847fcb74d607173af5ace5b4ef8a21ef3c6a29f031bf3294a479ef99eda42f5c17d2679a85eb5775231fa2adca515f76e090e03f2de048445f19f55061170e90f5d7f4f753a1872a14b1aa23a521ba1e1b689f8b557348df94d575322393e6c662b4c98f11dc025805fd785611a8d6316558b927de75bc0c3456e03143ee4384d8192d552e1bde6522782ccd21b00e63be6f089a217688a842e9f81963adf7a1499340a30d263b57b56e7cb1c65086844b78673cdd2692bab0b0b8de3ec6418db92b3e68eb599cd28c2a35e365fc2aedf1f80308b9d29ae5ee0703f0a62fd8daafd9d79adf7a3431833d00125de3c3ce72ab9fbaf55d1b793b7e241b8a965efcc49a38dd8e0e3d68a63fbc5a66068992c4f8e942acf13b1fe580337a27637d91eb7d07c34c5dd339a9f8950870ccae9987bc5875a32771cc571a38d6fa76463e8ea035c7b7ff6cbf4baa3dd1baed96199b90b8a5cbfbe40f0ff18e6a79a1faab054eab41db971868fd0c2790f13b4cc651f7dcb408982de0a8a7bde9a87268c5146aa0b67e9a475c11a76e1074f40166f40177d35957de6b550b61d8a8d9436a77d87a502250370505084cd6a205b2d6e604f85b53b2c1ad0378b1300b0b33fbaa7fbbb7c159b3990bf00c36a7030ed10b4c56b49a45b1788cedad94cef1f95227f5f375c3ca012d85d5ca061a93123a1a89fd8a448444440ae36d01742c83b1f9d3c6174d5858c77dabbf25bf3c6e7de0f960778776e3e5aae7a236d6a436c6c8880ab705bb63d23996df2fd0abe2eec6e19d60cc5c5d9fc36231b5599eb090c137578e63dce789384700755367dca98d29b33576dce3517d75886d8ca8031b9966048fade335dabcf5a57ef49b9137152e3edd010d2bbce1eca5143421986398b89262a05f0e51ff4b55873a07e94956f5a9cd97c7dfa77506f8cf288384f63de8f9cb75e081f21cff2e07f963f75ed31764d0c36b2fccdb7a3a706988cc148baf930a37550bc6aa7ccfc3d8e13d995464a6992c7d66e8f0ec214f24eb88e7ea38a184cf79aad3f1b9bacf44dc54b8c22f9015ec4b7243177eef2db312345bcd5a2d0bb180dcfab286943452fbb1cf29600fa33edf120878358afeeb01c927a91f614cd123486f10e0cb0732009228becb91c48aa0a151da3c86855ea98592c89d7c7dda008ee1ddc4758f991d6d233b60f14ceb7f5623075c638a0bb263a0913ad0ef74153bc71382a8b081e9021b5af06fcde2712c7db41df28b3ad446d4b576f415e1e2ba1f20f12d368a112c656b38214ffe814577ea8bbc61cc04872a52b2d8b2bdbf9c1f86f68ec4c659f091e4aa69a8a8f40efcac7e593f67dcd32dd8020b2cacb64f1e0c68649ca26436b36e6765773541a75104f41a243474d9778f5efd954425517ce9620c08dbaee4ffde529163a88846cc903c80b2652451784c6454913365e81a5fc6b580bd732ddf7264b7a03f86f75b4ee417d1fdf2791ef8856b3102fad2d473ffd4fc92829bd55dbe7499f92c53b91eb141548e8cce2727a442a01871e4a01bc527c1021e4598c44ac6e9bc1cce66f701783ea54346d4cec78123c77a304499a53d8fb82699ef713370a693aadb034f1e3aae6ce4bc3bb1391f4078c45ff25f527dbee798740a37e72c4eb491737c57787f9113719a64ad6bad75b6da2ad3a19dc1333eb05505a0db20645bc0db35868b853ba8fc33ac868a295e433a2b242beb5c5a4c9299b41a7e173f4d441ae8d69fca04fcb1b635ffc3efa07f1e8bfd46adc2b1ec131b4e7d882d2518c81c8f64e22d81db5ca100ff0d598ac6a0e61ae3f40d441e95f02df386d4be1a007a73caf3d0edd6c839d85b422790817c1f4bbff47e444e63da690a19d5901c8ae1bc0d1583a4753c558d8e188db9754ee415e9aec62da001cfe6a516d2f6b24dccb2fa49d0d841df18f71f597e18e56decf7c606a5b71eb84cbf0959c56d2490a1d963faf20eb20196aad03d3ba3a625d29acee0e2c54f0d36967837bf7ee9fe562790dbd058be757951ceac76c56b21b4afdd49c46b106995a2c011f6b9271a7a6f99a8df04e7833ae73f70ca947a9687efb82e3b0725aa178d9df5570bcf70b7e0411d76962e92674e2b0f94f82208643ada03d555162817216e2012ed21c5967688030f8fb5743e6e01563aeae4b5e8a385f3a7f3dacced85ab68b5027fd59d93993d337420f1c3c92ffeb38175691e86dc2f8f73520c7ca83fc1b95dd228ce2340d919b2b828db6ac707af19b66e06cb1f19105e52593c34df207b3641bc1a74526a612c52f17a1b4afaa7055b9a682c78b0ca8e4b6ebf8b5bd6f9bd9edcc83bdcded7a3a997d64444758ac767f76515d838f684914ed6f36845d634cff9dff04b103471511d345d3bbad7d8efce9e72edb79dd276040d3d9b949632e23a87abb1558869af573e64694235bd33575e1314d738972b8073ac1ab0165d3f569ad70df3dd", 0x7b0}], 0x2) 9.228571576s ago: executing program 1 (id=71): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)}}, {}], 0x3, 0x1c000) io_setup(0x2, &(0x7f0000000540)) memfd_secret(0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) sendfile(r0, r0, 0x0, 0xc) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x21, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000280)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(r4, 0x5b03, 0x0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 9.130162568s ago: executing program 3 (id=72): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334b, 0x10, 0x3, 0x312}, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r1, 0x7277, 0x0, 0x28, 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) 8.772993757s ago: executing program 4 (id=73): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24841}, 0x4028800) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8.036611602s ago: executing program 4 (id=74): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000001c0), 0x0, 0x40004) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f00000004c0)=0x8, 0x4) splice(r2, 0x0, r4, 0x0, 0x5, 0x1) lseek(r1, 0x9, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0xfffffe2f, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r5], 0x38}}, 0x10) 7.934677576s ago: executing program 3 (id=75): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0xb95f21cbbdb8d258}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 7.669693288s ago: executing program 2 (id=76): r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockname(r0, 0x0, &(0x7f0000000100)) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8), 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000380)={0xca, 0x2, 0x5, 0x401}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0xc, 0x0, 0xfffffdfffffffffe, 0xfa11, 0xffffffff}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x20004, r4, 0x80000}) syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) r6 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0x14004, 0x100000, 0x10, 0x1, 0xfe}, {0x0, 0x2000, 0xf, 0xfe, 0x0, 0x0, 0x0, 0xff, 0x8, 0x0, 0x5}, {0xd000, 0x2, 0x0, 0x80, 0xf9, 0x0, 0x0, 0x2, 0x23, 0x0, 0x4}, {0x5000, 0x2, 0xf, 0x41, 0x0, 0x2, 0x1, 0xfc, 0x0, 0x3}, {0x4000, 0xeeef0000, 0xc, 0x1, 0x3, 0x10, 0xc0, 0x0, 0x1, 0x0, 0x4}, {0x0, 0x100000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff}, {0x8000000, 0x2000, 0xa, 0x0, 0x2, 0xfd, 0x0, 0x7, 0x3a, 0x2, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x2, 0x0, 0x6, 0x7, 0x0, 0xfe, 0x0, 0xfe, 0x5}, {0x0, 0x400}, {}, 0xddf8ffdb, 0x0, 0x0, 0x100, 0x7, 0x8000, 0xffff1000, [0x400000000000000, 0x10000000020, 0x2]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r8, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) 6.711402054s ago: executing program 3 (id=77): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x7, 0x2, r2}) 6.601899885s ago: executing program 0 (id=78): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4000065}, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockname(r2, &(0x7f00000000c0)=@l2tp6, &(0x7f0000000000)=0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x14, r4, 0x601}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e23, 0x1, @local, 0x53b9}}, 0xfffffffd, 0x0, 0x400, 0x0, 0xb2}, 0x9c) bind$inet6(r2, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x1a0, 0x2b8, 0x25c, 0x1a0, 0x7, 0x268, 0x3a8, 0x3a8, 0x268, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0x110, 0x178, 0xa010000, {}, [@common=@unspec=@physdev={{0x68}, {'vxcan1\x00', {0xff}, 'bridge_slave_1\x00', {0xff}, 0x13, 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0x0, 0x0, 0x14, 'syz1\x00', 'syz0\x00'}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [], [], 'sit0\x00', 'ipvlan0\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 6.023962207s ago: executing program 3 (id=79): socket$inet(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xd1a0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000062c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x80000}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000970700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000019000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x400000000000, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) readv(r5, &(0x7f0000000380)=[{&(0x7f0000000340)=""/5, 0x5}], 0x1) 4.730358576s ago: executing program 1 (id=80): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40182, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, 0x0) 4.244005776s ago: executing program 1 (id=81): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x4, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000140)=""/185) 4.169150352s ago: executing program 4 (id=82): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000005c0)={"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"}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000001c0)={"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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x1, 0x87, '\x00', 0x6}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x5, 0xf5, '\x00', 0xf}, {0x3, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0xd, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xf9, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0x3}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x1, 0x1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7e}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x81, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000, 0x8, &(0x7f0000ffb000/0x1000)=nil) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r5, 0x0, 0x0) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) 2.182525816s ago: executing program 4 (id=83): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) writev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000400)="c68d61faac0c3cba0b9fa74d8db5c4c98d1e2e216b00ce71e6bcd30eac308dcc5e5b3c36bfbf10a647ac268ec44c3aa2ab33a61b3f0261d5679d1aa92f37e2d0f72d52b9f5a9b32fd8fa2498d058f07fb4", 0x51}, {&(0x7f0000000c00)="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", 0x7b0}], 0x2) 1.547501416s ago: executing program 1 (id=84): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24841}, 0x4028800) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.29062226s ago: executing program 4 (id=85): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201109"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_PEC(r1, 0x708, 0x7) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000200)={0x1, 0xd7, 0x4, &(0x7f0000000040)={0x8, "80051fa603b5678bdb1a00db17702fb9a7f77d0404007100000000e400"}}) 734.607946ms ago: executing program 1 (id=86): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000380)={&(0x7f0000000100)=[{0x6, 0x10, 0x0, 0x0}, {0x2, 0x4000, 0x0, 0x0}], 0x2}) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="440000001800010000000000000000000a0000000000000000000000180016000d0001000700000000000000000010000000000008000400", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 0s ago: executing program 2 (id=87): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000540)={0x1, 0x0, [{0xc0000080}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.210' (ED25519) to the list of known hosts. [ 166.095276][ T5777] cgroup: Unknown subsys name 'net' [ 166.242887][ T5777] cgroup: Unknown subsys name 'cpuset' [ 166.263068][ T5777] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 171.800501][ T5777] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 176.814725][ T5797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 176.834622][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 176.845330][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 176.857805][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 176.868540][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 176.885429][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 176.903961][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 176.925349][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 176.968287][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 176.984223][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 177.035047][ T5800] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 177.043084][ T5799] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 177.053791][ T5800] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 177.063238][ T5800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 177.074895][ T5800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 177.086031][ T5800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 177.095171][ T5800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 177.108432][ T5800] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 177.128300][ T5809] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 177.133924][ T5800] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 177.141131][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 177.151719][ T5809] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 177.163461][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 177.218837][ T5797] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 177.230229][ T5797] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 178.668829][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 178.803046][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 178.897061][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 178.940965][ T5797] Bluetooth: hci0: command tx timeout [ 179.102683][ T5797] Bluetooth: hci1: command tx timeout [ 179.108079][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 179.230242][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 179.252949][ T5797] Bluetooth: hci2: command tx timeout [ 179.323051][ T5797] Bluetooth: hci3: command tx timeout [ 179.328719][ T5799] Bluetooth: hci4: command tx timeout [ 179.927260][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.934940][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.943733][ T5805] bridge_slave_0: entered allmulticast mode [ 179.953135][ T5805] bridge_slave_0: entered promiscuous mode [ 179.968866][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.976499][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.986780][ T5794] bridge_slave_0: entered allmulticast mode [ 179.997156][ T5794] bridge_slave_0: entered promiscuous mode [ 180.052279][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.060423][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.068319][ T5794] bridge_slave_1: entered allmulticast mode [ 180.077796][ T5794] bridge_slave_1: entered promiscuous mode [ 180.128580][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.136178][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.143860][ T5805] bridge_slave_1: entered allmulticast mode [ 180.153202][ T5805] bridge_slave_1: entered promiscuous mode [ 180.192659][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.200122][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.207828][ T5798] bridge_slave_0: entered allmulticast mode [ 180.217159][ T5798] bridge_slave_0: entered promiscuous mode [ 180.349601][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.357119][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.364766][ T5798] bridge_slave_1: entered allmulticast mode [ 180.373214][ T5798] bridge_slave_1: entered promiscuous mode [ 180.496148][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.504854][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.512658][ T5803] bridge_slave_0: entered allmulticast mode [ 180.522149][ T5803] bridge_slave_0: entered promiscuous mode [ 180.546161][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.555807][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.566490][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.574318][ T5803] bridge_slave_1: entered allmulticast mode [ 180.583530][ T5803] bridge_slave_1: entered promiscuous mode [ 180.621607][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.631600][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.639217][ T5806] bridge_slave_0: entered allmulticast mode [ 180.647486][ T5806] bridge_slave_0: entered promiscuous mode [ 180.665893][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.684829][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.746719][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.755727][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.763442][ T5806] bridge_slave_1: entered allmulticast mode [ 180.771571][ T5806] bridge_slave_1: entered promiscuous mode [ 180.789208][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.895343][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.998268][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.008209][ T5797] Bluetooth: hci0: command tx timeout [ 181.016663][ T5794] team0: Port device team_slave_0 added [ 181.030804][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.077145][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.094760][ T5794] team0: Port device team_slave_1 added [ 181.134565][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.177452][ T5797] Bluetooth: hci1: command tx timeout [ 181.192640][ T5805] team0: Port device team_slave_0 added [ 181.207187][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.285826][ T5798] team0: Port device team_slave_0 added [ 181.325141][ T5797] Bluetooth: hci2: command tx timeout [ 181.342272][ T5805] team0: Port device team_slave_1 added [ 181.357487][ T5803] team0: Port device team_slave_0 added [ 181.407221][ T5797] Bluetooth: hci3: command tx timeout [ 181.413867][ T5797] Bluetooth: hci4: command tx timeout [ 181.438089][ T5798] team0: Port device team_slave_1 added [ 181.486547][ T5803] team0: Port device team_slave_1 added [ 181.570031][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.577386][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.604352][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.684900][ T5806] team0: Port device team_slave_0 added [ 181.757947][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.766174][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.793390][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.807600][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.815867][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.843249][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.863711][ T5806] team0: Port device team_slave_1 added [ 181.871616][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.878943][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.905734][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.919485][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.926756][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.952970][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.981543][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.989167][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.015546][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.029502][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.036651][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.062967][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.110885][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.118158][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.144804][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.307121][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.315375][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.343087][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.359954][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.367220][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 182.393540][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.426621][ T5794] hsr_slave_0: entered promiscuous mode [ 182.435819][ T5794] hsr_slave_1: entered promiscuous mode [ 182.588611][ T5803] hsr_slave_0: entered promiscuous mode [ 182.598081][ T5803] hsr_slave_1: entered promiscuous mode [ 182.606194][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 182.612074][ T5803] Cannot create hsr debugfs directory [ 182.788710][ T5805] hsr_slave_0: entered promiscuous mode [ 182.798607][ T5805] hsr_slave_1: entered promiscuous mode [ 182.806620][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 182.812558][ T5805] Cannot create hsr debugfs directory [ 182.830121][ T5798] hsr_slave_0: entered promiscuous mode [ 182.840132][ T5798] hsr_slave_1: entered promiscuous mode [ 182.848340][ T5798] debugfs: 'hsr0' already exists in 'hsr' [ 182.854236][ T5798] Cannot create hsr debugfs directory [ 182.870639][ T5806] hsr_slave_0: entered promiscuous mode [ 182.879487][ T5806] hsr_slave_1: entered promiscuous mode [ 182.887700][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 182.893653][ T5806] Cannot create hsr debugfs directory [ 183.084473][ T5799] Bluetooth: hci0: command tx timeout [ 183.255569][ T5799] Bluetooth: hci1: command tx timeout [ 183.404523][ T5799] Bluetooth: hci2: command tx timeout [ 183.482894][ T5799] Bluetooth: hci4: command tx timeout [ 183.488519][ T5797] Bluetooth: hci3: command tx timeout [ 184.218239][ T5803] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 184.237500][ T5803] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 184.269248][ T5803] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 184.303372][ T5803] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 184.451409][ T5794] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 184.482700][ T5794] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 184.502039][ T5794] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 184.523015][ T5794] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 184.647540][ T5798] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 184.750811][ T5798] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 184.799014][ T5798] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 184.832008][ T5806] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 184.857535][ T5806] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 184.889349][ T5798] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 184.920308][ T5806] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 184.946232][ T5806] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 185.140139][ T5805] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 185.163306][ T5797] Bluetooth: hci0: command tx timeout [ 185.189626][ T5805] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 185.234318][ T5805] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 185.291647][ T5805] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 185.334217][ T5797] Bluetooth: hci1: command tx timeout [ 185.482727][ T5797] Bluetooth: hci2: command tx timeout [ 185.539245][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.564441][ T5797] Bluetooth: hci3: command tx timeout [ 185.570076][ T5799] Bluetooth: hci4: command tx timeout [ 185.645682][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.727816][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.735348][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.758177][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.802624][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.810061][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.930806][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.061386][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.068925][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.189650][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.197165][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.309628][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.387594][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.457186][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.566869][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.574383][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.648888][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.659228][ T5803] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 186.717705][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.725220][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.889687][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.907125][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.914674][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.934386][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.941879][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.027878][ T5798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.083847][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.190393][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.197928][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.220103][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.227648][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.288884][ T5806] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 187.299698][ T5806] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.621857][ T5805] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 188.242713][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.701534][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.759859][ T5794] veth0_vlan: entered promiscuous mode [ 188.840116][ T5794] veth1_vlan: entered promiscuous mode [ 189.052335][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.111340][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.173204][ T5803] veth0_vlan: entered promiscuous mode [ 189.225328][ T5794] veth0_macvtap: entered promiscuous mode [ 189.283960][ T5803] veth1_vlan: entered promiscuous mode [ 189.334911][ T5794] veth1_macvtap: entered promiscuous mode [ 189.399786][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.494287][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.544322][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.566429][ T5798] veth0_vlan: entered promiscuous mode [ 189.705435][ T3011] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.742798][ T3011] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.798232][ T5798] veth1_vlan: entered promiscuous mode [ 189.812175][ T3011] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.827759][ T5803] veth0_macvtap: entered promiscuous mode [ 189.874021][ T3011] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.924579][ T5803] veth1_macvtap: entered promiscuous mode [ 190.047841][ T5806] veth0_vlan: entered promiscuous mode [ 190.146669][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.217467][ T5798] veth0_macvtap: entered promiscuous mode [ 190.245507][ T5806] veth1_vlan: entered promiscuous mode [ 190.271014][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.340572][ T5798] veth1_macvtap: entered promiscuous mode [ 190.393655][ T2129] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.477104][ T2129] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.527257][ T2129] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.573551][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.594914][ T197] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.648497][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.737479][ T2129] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.765717][ T2129] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.797824][ T5806] veth0_macvtap: entered promiscuous mode [ 190.822388][ T2129] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.878366][ T5806] veth1_macvtap: entered promiscuous mode [ 190.902919][ T2129] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.054269][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.161765][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.252324][ T1133] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.298583][ T1133] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.368723][ T1133] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.426467][ T1133] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.617565][ T5805] veth0_vlan: entered promiscuous mode [ 191.735735][ T5805] veth1_vlan: entered promiscuous mode [ 192.114743][ T5805] veth0_macvtap: entered promiscuous mode [ 192.215165][ T5805] veth1_macvtap: entered promiscuous mode [ 192.364461][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.473278][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.560211][ T197] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.611861][ T1120] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.645252][ T1120] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.685772][ T1120] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.827746][ T2129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.835940][ T2129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.995908][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.004232][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.168302][ T1120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.176601][ T1120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.285619][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.295410][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.358500][ T5794] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 196.526401][ T197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.534698][ T197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.742124][ T1880] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.750338][ T1880] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.245484][ T1133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.253919][ T1133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.547282][ T2129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.555589][ T2129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.029526][ T5992] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 198.855083][ T6002] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 198.871671][ T794] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 198.899104][ T794] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 198.923122][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 199.161977][ T6000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6'. [ 199.203651][ T2129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.211638][ T2129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.435596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 199.468577][ T5991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 199.714898][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.723075][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.256379][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 200.364375][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 200.542956][ T32] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 200.667485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 200.923711][ T32] usb 3-1: Using ep0 maxpacket: 8 [ 200.951880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 200.974635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c0!!! [ 200.998055][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 201.024022][ T32] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.034445][ T32] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 201.046194][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 201.057222][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 201.067135][ T32] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 201.175960][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 201.226876][ T5799] Bluetooth: hci4: unexpected event 0x09 length: 6 > 3 [ 201.235431][ T32] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 201.254136][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 201.263521][ T32] usb 3-1: Product: syz [ 201.267863][ T32] usb 3-1: Manufacturer: syz [ 201.273531][ T32] usb 3-1: SerialNumber: syz [ 201.306907][ T32] usb 3-1: config 0 descriptor?? [ 201.484658][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 201.582009][ T32] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 201.596052][ T32] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 202.263651][ T32] usb 3-1: USB disconnect, device number 2 [ 202.281314][ T5966] udevd[5966]: setting owner of /dev/bus/usb/003/002 to uid=0, gid=0 failed: No such file or directory [ 203.542747][ T32] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 203.805518][ T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.817425][ T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.827717][ T32] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 203.840306][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.985168][ T32] usb 5-1: config 0 descriptor?? [ 204.498096][ T32] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 204.505790][ T32] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 204.581338][ T32] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0002/input/input5 [ 204.648888][ T32] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 204.847187][ T32] usb 5-1: USB disconnect, device number 2 [ 206.220137][ T6035] fido_id[6035]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 209.021363][ T6057] kvm: pic: non byte read [ 209.027826][ T6057] kvm: pic: non byte read [ 212.984946][ T32] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 213.172191][ T32] usb 2-1: Using ep0 maxpacket: 32 [ 213.208958][ T32] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 213.220881][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 213.232179][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 213.242343][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 213.253878][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 213.473697][ T32] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 213.483112][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.491247][ T32] usb 2-1: Product: syz [ 213.495643][ T32] usb 2-1: Manufacturer: syz [ 213.500352][ T32] usb 2-1: SerialNumber: syz [ 213.558352][ T32] usb 2-1: config 0 descriptor?? [ 213.838844][ T32] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 213.893227][ T32] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 213.954514][ T32] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 213.961507][ T32] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 213.983095][ T32] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 214.015875][ T32] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 214.023646][ T32] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 214.040740][ T32] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 214.072971][ T32] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 214.112555][ T32] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 214.143014][ T32] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 214.203094][ T32] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 214.222963][ T32] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 214.272958][ T32] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 214.325307][ T32] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 214.353486][ T32] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 214.410932][ T32] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 214.443298][ T32] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 214.472872][ T32] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 214.528368][ T32] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 214.534840][ T32] input input6: Timeout waiting for response from device. [ 214.654913][ T32] usb 2-1: USB disconnect, device number 2 [ 216.962828][ T11] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 217.203969][ T11] usb 3-1: Using ep0 maxpacket: 32 [ 217.263031][ T11] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 217.272391][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.280971][ T11] usb 3-1: Product: syz [ 217.285439][ T11] usb 3-1: Manufacturer: syz [ 217.290199][ T11] usb 3-1: SerialNumber: syz [ 217.400242][ T11] usb 3-1: config 0 descriptor?? [ 217.681074][ T11] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 217.786934][ T794] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 217.902735][ T32] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 218.075882][ T794] usb 5-1: Using ep0 maxpacket: 16 [ 218.098957][ T32] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 218.108060][ T32] usb 1-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 218.118699][ T32] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 218.130775][ T32] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 218.235643][ T794] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.247320][ T794] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 218.256752][ T794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.288241][ T794] usb 5-1: config 0 descriptor?? [ 218.361091][ T32] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 218.370807][ T32] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 218.383564][ T32] usb 1-1: Product: syz [ 218.387914][ T32] usb 1-1: Manufacturer: syz [ 218.569858][ T32] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 218.716110][ T11] gspca_topro: reg_w err -71 [ 218.781730][ T11] gspca_topro: Sensor soi763a [ 218.915025][ T794] usbhid 5-1:0.0: can't add hid device: -71 [ 218.921718][ T794] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 218.947148][ T11] usb 3-1: USB disconnect, device number 3 [ 219.013984][ T794] usb 5-1: USB disconnect, device number 3 [ 219.049448][ T6115] mmap: syz.0.36 (6115) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 219.388093][ T6115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.36'. [ 220.233473][ T794] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 220.737844][ T794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.750556][ T794] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.761234][ T794] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 220.771583][ T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.987961][ T794] usb 3-1: config 0 descriptor?? [ 221.439414][ T794] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 221.446969][ T794] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 221.520550][ T794] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0003/input/input7 [ 221.735196][ T794] cm6533_jd 0003:0D8C:0022.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 221.844185][ T794] usb 3-1: USB disconnect, device number 4 [ 222.444573][ T6125] fido_id[6125]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 224.555634][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.562222][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 227.275547][ T32] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 227.452335][ T32] usb 2-1: Using ep0 maxpacket: 16 [ 227.528637][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.540026][ T32] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 227.549414][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.750746][ T32] usb 2-1: config 0 descriptor?? [ 227.874502][ T794] usb 1-1: USB disconnect, device number 2 [ 228.402798][ T32] usbhid 2-1:0.0: can't add hid device: -71 [ 228.409120][ T32] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 228.549616][ T32] usb 2-1: USB disconnect, device number 3 [ 229.125480][ T794] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 229.358852][ T794] usb 1-1: Using ep0 maxpacket: 8 [ 229.415142][ T794] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 229.423863][ T794] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 229.434202][ T794] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 229.446205][ T794] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 229.457257][ T794] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 229.470637][ T794] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 229.479834][ T794] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.715417][ T794] usb 1-1: usb_control_msg returned -32 [ 229.721477][ T794] usbtmc 1-1:16.0: can't read capabilities [ 230.717457][ T6168] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 232.805741][ T32] usb 1-1: USB disconnect, device number 3 [ 238.123165][ T32] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 238.384047][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.395337][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.405485][ T32] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 238.414829][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.477478][ T32] usb 2-1: config 0 descriptor?? [ 238.521995][ T5866] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 238.744388][ T5866] usb 4-1: Using ep0 maxpacket: 8 [ 238.787684][ T5866] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.797919][ T5866] usb 4-1: New USB device found, idVendor=056a, idProduct=0304, bcdDevice= 0.00 [ 238.807305][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.826599][ T5866] usb 4-1: config 0 descriptor?? [ 238.913268][ T5848] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 238.943164][ T32] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 238.950780][ T32] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0 [ 239.026683][ T32] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0004/input/input8 [ 239.077672][ T5848] usb 3-1: Using ep0 maxpacket: 32 [ 239.102911][ T5848] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 239.111239][ T5848] usb 3-1: config 0 has no interface number 0 [ 239.191167][ T32] cm6533_jd 0003:0D8C:0022.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 239.294555][ T5848] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 239.304025][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.312130][ T5848] usb 3-1: Product: syz [ 239.316626][ T5848] usb 3-1: Manufacturer: syz [ 239.321383][ T5848] usb 3-1: SerialNumber: syz [ 239.333265][ T5866] wacom 0003:056A:0304.0005: unknown main item tag 0x0 [ 239.340295][ T5866] wacom 0003:056A:0304.0005: unknown main item tag 0x0 [ 239.355837][ T32] usb 2-1: USB disconnect, device number 4 [ 239.485333][ T5866] wacom 0003:056A:0304.0005: hidraw1: USB HID v0.00 Device [HID 056a:0304] on usb-dummy_hcd.3-1/input0 [ 239.537397][ T5848] usb 3-1: config 0 descriptor?? [ 239.578525][ T5848] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 239.588710][ T5848] usb 3-1: selecting invalid altsetting 1 [ 239.594821][ T5848] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 239.624560][ T5866] usb 4-1: USB disconnect, device number 2 [ 239.750745][ T5848] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 239.761707][ T5848] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 239.770380][ T5848] usb 3-1: media controller created [ 239.916102][ T6214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.68'. [ 239.931078][ T6212] fido_id[6212]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 240.025816][ T5848] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 240.413345][ T6213] fido_id[6213]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 240.928124][ T6209] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 240.999169][ T5848] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 241.011507][ T5848] zl10353_read_register: readreg error (reg=127, ret==-71) [ 241.063813][ T5848] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 241.403169][ T11] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 241.633955][ T11] usb 2-1: Using ep0 maxpacket: 8 [ 241.676875][ T11] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 241.686985][ T11] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 241.697437][ T11] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 241.707424][ T11] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 241.717604][ T11] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 241.733258][ T11] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 241.743531][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.821055][ T5848] usb 3-1: USB disconnect, device number 5 [ 242.162099][ T11] usb 2-1: usb_control_msg returned -32 [ 242.168159][ T11] usbtmc 2-1:16.0: can't read capabilities [ 243.067654][ T6237] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 243.798657][ T5848] usb 2-1: USB disconnect, device number 5 [ 245.940449][ T6257] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2861214133 (366235409024 ns) > initial count (60293855360 ns). Using initial count to start timer. [ 246.002657][ T11] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 246.277607][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.295591][ T11] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.307326][ T11] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 246.316551][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.439733][ T11] usb 2-1: config 0 descriptor?? [ 246.931983][ T11] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 246.939704][ T11] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 247.070381][ T11] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0006/input/input12 [ 247.220310][ T11] cm6533_jd 0003:0D8C:0022.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 247.336129][ T11] usb 2-1: USB disconnect, device number 6 [ 247.911719][ T6259] fido_id[6259]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 248.992716][ T11] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 249.253005][ T11] usb 5-1: Using ep0 maxpacket: 32 [ 249.352932][ T11] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 249.362112][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.410278][ T11] usb 5-1: config 0 descriptor?? [ 249.572870][ T794] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 249.673067][ T11] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 249.721999][ T11] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 249.798834][ T11] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 249.806267][ T11] usb 5-1: media controller created [ 249.811713][ T794] usb 2-1: Using ep0 maxpacket: 32 [ 249.879597][ T6265] ===================================================== [ 249.888647][ T6265] BUG: KMSAN: uninit-value in __i2c_smbus_xfer+0x2353/0x2eb0 [ 249.896657][ T6265] __i2c_smbus_xfer+0x2353/0x2eb0 [ 249.901830][ T6265] i2c_smbus_xfer+0x2cd/0x460 [ 249.906865][ T6265] i2cdev_ioctl_smbus+0x4a1/0x660 [ 249.911991][ T6265] compat_i2cdev_ioctl+0x48f/0xb40 [ 249.920713][ T6265] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 249.927576][ T6265] ia32_sys_call+0x25d9/0x4340 [ 249.932786][ T6265] __do_fast_syscall_32+0x154/0x330 [ 249.938174][ T6265] do_fast_syscall_32+0x38/0x80 [ 249.943264][ T6265] do_SYSENTER_32+0x1f/0x30 [ 249.947868][ T6265] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 249.954532][ T6265] [ 249.956978][ T6265] Local variable msgbuf1.i created at: [ 249.963108][ T6265] __i2c_smbus_xfer+0x830/0x2eb0 [ 249.968134][ T6265] i2c_smbus_xfer+0x2cd/0x460 [ 249.973182][ T6265] [ 249.975623][ T6265] CPU: 0 UID: 0 PID: 6265 Comm: syz.4.85 Not tainted syzkaller #0 PREEMPT(none) [ 249.984929][ T6265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 249.995402][ T6265] ===================================================== [ 250.002368][ T6265] Disabling lock debugging due to kernel taint [ 250.008702][ T6265] Kernel panic - not syncing: kmsan.panic set ... [ 250.015214][ T6265] CPU: 0 UID: 0 PID: 6265 Comm: syz.4.85 Tainted: G B syzkaller #0 PREEMPT(none) [ 250.025982][ T6265] Tainted: [B]=BAD_PAGE [ 250.030169][ T6265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 250.040293][ T6265] Call Trace: [ 250.043615][ T6265] [ 250.046591][ T6265] __dump_stack+0x26/0x30 [ 250.051010][ T6265] dump_stack_lvl+0x50/0x1c0 [ 250.055679][ T6265] ? dump_stack+0x12/0x25 [ 250.060085][ T6265] dump_stack+0x1e/0x25 [ 250.064310][ T6265] vpanic+0x435/0xd30 [ 250.068380][ T6265] panic+0x15d/0x160 [ 250.072385][ T6265] kmsan_report+0x31c/0x320 [ 250.076983][ T6265] ? __msan_warning+0x1b/0x30 [ 250.081739][ T6265] ? __i2c_smbus_xfer+0x2353/0x2eb0 [ 250.087047][ T6265] ? i2c_smbus_xfer+0x2cd/0x460 [ 250.091992][ T6265] ? i2cdev_ioctl_smbus+0x4a1/0x660 [ 250.097302][ T6265] ? compat_i2cdev_ioctl+0x48f/0xb40 [ 250.102681][ T6265] ? __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 250.108484][ T6265] ? ia32_sys_call+0x25d9/0x4340 [ 250.113519][ T6265] ? __do_fast_syscall_32+0x154/0x330 [ 250.119030][ T6265] ? do_fast_syscall_32+0x38/0x80 [ 250.124184][ T6265] ? do_SYSENTER_32+0x1f/0x30 [ 250.129049][ T6265] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 250.135665][ T6265] ? az6027_i2c_xfer+0x2bdf/0x2c40 [ 250.140890][ T6265] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 250.147356][ T6265] ? kmsan_get_metadata+0xfb/0x160 [ 250.152584][ T6265] ? kmsan_get_metadata+0xfb/0x160 [ 250.157797][ T6265] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 250.163743][ T6265] ? i2c_smbus_msg_pec+0x678/0x6c0 [ 250.168948][ T6265] __msan_warning+0x1b/0x30 [ 250.173582][ T6265] __i2c_smbus_xfer+0x2353/0x2eb0 [ 250.178724][ T6265] ? kmsan_get_metadata+0xfb/0x160 [ 250.183954][ T6265] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 250.190120][ T6265] ? rt_mutex_lock+0x3e/0x70 [ 250.194810][ T6265] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 250.200639][ T6265] i2c_smbus_xfer+0x2cd/0x460 [ 250.205393][ T6265] i2cdev_ioctl_smbus+0x4a1/0x660 [ 250.210530][ T6265] compat_i2cdev_ioctl+0x48f/0xb40 [ 250.215804][ T6265] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 250.221540][ T6265] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 250.227214][ T6265] ? kmsan_get_metadata+0xfb/0x160 [ 250.232518][ T6265] ? kmsan_get_metadata+0xfb/0x160 [ 250.237752][ T6265] ia32_sys_call+0x25d9/0x4340 [ 250.242624][ T6265] __do_fast_syscall_32+0x154/0x330 [ 250.247940][ T6265] do_fast_syscall_32+0x38/0x80 [ 250.252890][ T6265] do_SYSENTER_32+0x1f/0x30 [ 250.257486][ T6265] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 250.263917][ T6265] RIP: 0023:0xf70bd539 [ 250.268040][ T6265] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 250.287720][ T6265] RSP: 002b:00000000f54ad55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 250.296226][ T6265] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 250.304251][ T6265] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000 [ 250.312295][ T6265] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 250.320319][ T6265] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 250.328447][ T6265] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 250.336673][ T6265] [ 250.340213][ T6265] Kernel Offset: disabled [ 250.344593][ T6265] Rebooting in 86400 seconds..