last executing test programs: 13.129549532s ago: executing program 3 (id=170): r0 = socket(0x1a, 0x80000, 0x10000000000002) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/14, &(0x7f0000000040)=0xe) connect$rxrpc(r0, &(0x7f0000000780)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000840)=0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000004000000e27f00000100000001000000", @ANYRES32, @ANYBLOB="ff0f000000000800008264c6877142581482c0a3c2a06100ecffffff08fa1724", @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r3, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000001c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000600001018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001100)={0x2c, &(0x7f0000000d40)={0x20, 0x30, 0x20, {0x20, 0xa, "c9ede508b5c7e1553f1ac6582a1bca8c0ead37bfcb47b4634f3c1dd58b47"}}, &(0x7f0000000d80)={0x0, 0x3, 0xf2, @string={0xf2, 0x3, "0c1d705cd8e95b3f78a3ed4cc71ef4c885b8a4450b3ccaf5caab4eab8e14f321795bf8122fcc99f252606ac38099024a5636994eeecdef6b577835a4a8ae744dbfedcfe4200f57fca0ac7d58bc41fdd6af93cca37c5b035ad30c5f7ea0f4f5311ad42381946e18a1dd1079ab841f09a561803d1c274a1f29d2bd4af226a8e9a27f41ad3eacfdfbfd111f867587de35109be98988c26f335ae4a3f7640fb742d3f3a4d7fc11285aa55312825324e7969617bc6436445afd3354d06e3c5dce30fcf9b61fcf7113a556fda385591342667add337ae20b6d02f211d3bb97e3dd1048c90c1e17a98549bca175ac7775492c13"}}, &(0x7f0000000e80)={0x0, 0xf, 0x15f, {0x5, 0xf, 0x15f, 0x4, [@generic={0x69, 0x10, 0xb, "aac7e26dfc75e68fe8d5028e5d220395c0196002561f8800f83c97a03651ed1754def28e1ec3503be86dd8448aac87b1b483902852759e4f80a106a21b9d167d53d826fd59c222251f972bc3c256d7948246577f3e284463e5bcd2953db99bf7b527c0ed3c7b"}, @generic={0xdf, 0x10, 0x1, "779d0c9e6e833230d402df9d3ad4a3dcdb3676d0187a920514d02de03f00f956abf4055cd6eace30fe8f585abc685850be5d6729b637982830487b1233a7585ffd649ba05887dd4e440ebdfc860207da8c5c845f2a4b9b65f35d6a7059b88e92fd07667d4b83cbc2986e664d519e998c45ef33cadd6a47fa31bee62a242a8b98f1440e2571613d6cb60aabf7bfadc45374f09b012ebf243575828981baec7dad7991828712929267786e37a4b7cebec1f9df48efe3c623105a0fe26744a7598c7bb40ec1e8d022937d5207a435e3708b52374717f53f9da0221144c2"}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x7, 0x7, 0x1}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0x4, 0x80, 0x5, 0x7}]}}, &(0x7f0000001080)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5d, 0x8, 0x6, 0xa9, "16853090", "e37c4152"}}, &(0x7f00000010c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x78, 0x3, 0x5, 0x7, 0x0, 0x7fff, 0x7}}}, &(0x7f0000001580)={0x84, &(0x7f0000001140)={0x40, 0x4, 0x58, "100295406c3844e6db977eb1e3b467ca1fb09d5f833c7b6c69d4ec0cf994662a9e0e4764cccad90e40b8d90dc6aa94789cf96b56c46bc770a0d698de0bcb3ce2bd6f7f6ad6f125f6e8583b5ee7136e7d976f85cdc62cf725"}, &(0x7f00000011c0)={0x0, 0xa, 0x1, 0xeb}, &(0x7f0000001200)={0x0, 0x8, 0x1, 0x2b}, &(0x7f0000001240)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000001280)={0x20, 0x0, 0x4, {0x200, 0x20}}, &(0x7f00000012c0)={0x40, 0x7, 0x2, 0x6}, 0x0, &(0x7f0000001340)={0x40, 0xb, 0x2, "d28e"}, &(0x7f0000001380)={0x40, 0xf, 0x2, 0x101}, 0x0, &(0x7f0000001400)={0x40, 0x17, 0x6, @random="cde351f2d16b"}, &(0x7f0000001440)={0x40, 0x19, 0x2, "e157"}, &(0x7f0000001480)={0x40, 0x1a, 0x2, 0x5}, &(0x7f00000014c0)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000001500)={0x40, 0x1e, 0x1, 0x2}, 0x0}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) syz_usb_connect$uac3(0x4, 0x12b, &(0x7f0000000a00)=ANY=[@ANYRES32=r2], &(0x7f0000000440)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x310, 0x2, 0x7, 0x4, 0x40, 0xf}, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x2, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3421}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x416}}]}) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000140)={&(0x7f0000001680)=[{0x7, 0x0, 0x1, &(0x7f00000001c0)="ce"}], 0x1}) syz_io_uring_setup(0x17, &(0x7f0000000140)={0x0, 0xb9c4, 0x21000, 0x3, 0x361}, 0x0, 0x0, &(0x7f0000000240)) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x1f, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000540)={0x14, &(0x7f0000000480)={0x40, 0x21, 0x47, {0x47, 0x20, "c790968a4b7e242d68252076bc5caef354fde8b7ded9ae0505d3bde7005e540c2cee5668e76c7ad54b5e6fca17bb860837226ce6478554d9855f2a392d8c5c1f3a1ec1d525"}}, &(0x7f0000000500)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000007c0)={0x44, &(0x7f0000000b40)=ANY=[@ANYBLOB="40186100000016c081fb9a30b046119bfe8a5f905d48ec2c374516a2dfd5d95eb3a327b621a00bebb3ba6e66f07c45d63b69e0c0b9c979876f8b017c7e4534d9323a3e292ac97290c58a991ee8b5edcdd180635073544f15a1b65697821be7257768968da0d54202123694427a6c843f37d86a21e788b5665d6628f53656bcd578c2905109709c135e3e3f3fd78705f8fc0a7bcd6da50710a90f1ce434c367c9cf0fa3b0775b41530000b36f12355d4b570003f73c02257317deb40bfac6cc078e1411fa0e843a23cdb3218a7348cf7c5750931dc3d55518b5"], &(0x7f0000000600)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000000680)={0x20, 0x80, 0x1c, {0xfff1, 0x6, 0xfffffffd, 0x0, 0xe414, 0x1, 0x6, 0x10000, 0x1, 0x7, 0x4, 0x4}}, &(0x7f00000006c0)={0x20, 0x85, 0x4, 0xdb71}, &(0x7f0000000700)={0x20, 0x83, 0x2}, &(0x7f0000000740)={0x20, 0x87, 0x2}, 0x0}) 8.123987536s ago: executing program 3 (id=185): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x84) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) setns(0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000fff000/0x1000)=nil, &(0x7f000012a000/0x2000)=nil, &(0x7f000012a000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000041d000/0x4000)=nil, &(0x7f0000217000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00003d1000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000400), 0x0, r2}, 0x68) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0136f464b7db2c87a756c7ab0000000e0000002f49b0fd35247d1781e2580f059d62da1ad151127ab8925790db1b8972c6c3d12c4a8bfecf50447793bd61ccd5c955971105e2e105689991d84524a4352ad3fedeaf3f21abf89153ec55faa14a8d4b6b0d35463909e6da384ef3fc1cfb72", @ANYRESHEX=r3, @ANYBLOB='\x00'/18, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/27], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r8, 0x0, &(0x7f0000000580)=""/24}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a00010025bd7000000000000a001400000000000008000005001b00110000005b"], 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x1901, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 7.171171175s ago: executing program 3 (id=189): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = socket(0x1e, 0x5, 0x0) accept4$inet6(r3, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000001040)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0xb}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 6.409723084s ago: executing program 2 (id=190): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xc8}}, 0x0) 6.308517705s ago: executing program 0 (id=192): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r7, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) write$tun(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd0000110005000000a60c6b63851e0f982c"], 0xfce) 6.287015349s ago: executing program 2 (id=193): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x188}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000300)={0x7f, 0x4d, 0x2ba8}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x7, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe5, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x8, 0xd, 0x800, 0x3, 0x6, 0x4, 0x100002, 0xc7, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0xc, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0x1ff, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x3, 0x1000000, 0x489, 0x7ff, 0x4, 0x80000001, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0xfffffff7, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0xa, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf781, 0x80000001, 0x5, 0x2, 0x489, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee48, 0x2000004, 0x1, 0x10, 0x6, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x8, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0xa, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x3, 0x10010, 0xfffffffd, 0x5, 0xfffffffe], [0xc, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x4, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0xa0, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xea1, 0x428, 0x5, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13fff, 0x1, 0x1]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0xfffffffffffffffa, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xa, 0x5, 0xa, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 6.106259137s ago: executing program 3 (id=194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r6, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r3, {0xb, 0x6}, {0xffff, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0xfff, 0x10000000, 0x7, 0xccb}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) write$tun(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd0000110005000000a60c6b63851e0f982c"], 0xfce) 6.037525901s ago: executing program 0 (id=195): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x24000009) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4.94019484s ago: executing program 3 (id=198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, &(0x7f0000000a40)) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) sendmmsg$inet(r3, 0x0, 0x0, 0x200040c4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001ddf8208c0071215223000000001"], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x7a, 0x0, &(0x7f0000000880)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x310, 0x5, 0x8, 0x2, 0x40, 0x40}, 0x2a, &(0x7f0000000540)={0x5, 0xf, 0x2a, 0x5, [@wireless={0xb, 0x10, 0x1, 0x2, 0x10, 0xff, 0x25, 0x8, 0x80}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x7, 0xa2, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x0, 0x5}, @generic={0x3, 0x10, 0x3}]}, 0x3, [{0x2, &(0x7f0000000640)=@string={0x2}}, {0x2, &(0x7f00000007c0)=@string={0x2}}, {0x5d, &(0x7f0000000800)=@string={0x5d, 0x3, "b7bec5fd70f11421892464b2402788235d2427a7c632249283f286d3bc8faa05e62a5e9d9aaa07dd238d18255a190742271bcd83adc24f9ea1932c4d51f9b029321e6640ed7ce904ac0e3383b48a98fe90a9074336b8faef1aa3e5"}}]}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 4.89362174s ago: executing program 0 (id=199): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x84) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) setns(0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000fff000/0x1000)=nil, &(0x7f000012a000/0x2000)=nil, &(0x7f000012a000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000041d000/0x4000)=nil, &(0x7f0000217000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00003d1000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000400), 0x0, r2}, 0x68) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0136f464b7db2c87a756c7ab0000000e0000002f49b0fd35247d1781e2580f059d62da1ad151127ab8925790db1b8972c6c3d12c4a8bfecf50447793bd61ccd5c955971105e2e105689991d84524a4352ad3fedeaf3f21abf89153ec55faa14a8d4b6b0d35463909e6da384ef3fc1cfb72", @ANYRESHEX=r3, @ANYBLOB='\x00'/18, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/27], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r8, 0x0, &(0x7f0000000580)=""/24}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a00010025bd7000000000000a001400000000000008000005001b00110000005b"], 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x1901, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4.787329132s ago: executing program 2 (id=200): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x24040051}, 0x4c840) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x44060) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.786651762s ago: executing program 4 (id=201): gettid() r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000100)="0400c811fe37db1ba91d3305a782", 0x0, 0x975, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x2882) r5 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x48f, &(0x7f00000000c0)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x100000000000000) rt_sigtimedwait(&(0x7f00000000c0)={[0x4000000a]}, 0x0, 0x0, 0x8) 4.020767502s ago: executing program 0 (id=202): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40854}, 0x4844) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x24000009) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.93418042s ago: executing program 1 (id=203): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xc8}}, 0x0) 3.8364431s ago: executing program 1 (id=204): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = socket(0x1e, 0x5, 0x0) accept4$inet6(r3, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000001040)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0xb}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3.773265653s ago: executing program 4 (id=205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0xb, 0x6}, {0xffff, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0xfff, 0x10000000, 0x7, 0xccb}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) write$tun(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd0000110005000000a60c6b63851e0f982c"], 0xfce) 3.747327319s ago: executing program 2 (id=206): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.508680669s ago: executing program 4 (id=207): gettid() r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x2882) r4 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x48f, &(0x7f00000000c0)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x100000000000000) 3.301287182s ago: executing program 0 (id=208): syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3286dd6018232500202c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0802020900"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6018232500102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000201"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x5a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c) accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x0, 0x800) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x44080}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711805000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x8841) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xfffffdff, 0xffffffff, 0xffffffff, 0xfffffbff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x7, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x3ffc, 0x0, 0x0, 0x1}, {0x0, 0xf4241, 0x0, 0x0, 0x1}]}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x6000, 0x2000001, 0x13, r3, 0x33a0e000) preadv2(0xffffffffffffffff, &(0x7f00000017c0)=[{0x0}, {&(0x7f0000000380)=""/251, 0xfb}], 0x2, 0x7, 0x4, 0x1) 2.772318012s ago: executing program 1 (id=209): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x6f, 0x10080, 0xfffffffe, 0x83f2, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0x0, 0x81, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xb, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xcf4, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67ab, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0xfffffffe, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x1ff, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x19, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x8000, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x4, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0xdddd1000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.657342166s ago: executing program 4 (id=210): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x188}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000300)={0x7f, 0x4d, 0x2ba8}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x7, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x7, 0xe5, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x8, 0xd, 0x800, 0x3, 0x6, 0x4, 0x100002, 0xc7, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0xc, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0x1ff, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x3, 0x1000000, 0x489, 0x7ff, 0x4, 0x80000001, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0xfffffff7, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0xa, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf781, 0x80000001, 0x5, 0x2, 0x489, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee48, 0x2000004, 0x1, 0x10, 0x6, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x8, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0xa, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x5, 0x9, 0x3, 0x10010, 0xfffffffd, 0x5, 0xfffffffe], [0xc, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x4, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0xa0, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xea1, 0x428, 0x5, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13fff, 0x1, 0x1]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0xfffffffffffffffa, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xa, 0x5, 0xa, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.793283286s ago: executing program 3 (id=211): syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3286dd6018232500202c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0802020900"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000880)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6018232500102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa000201"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x5a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c) accept4$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, 0x0, 0x800) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x44080}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711805000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_ACL_POLICY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x8841) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000200)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xfffffdff, 0xffffffff, 0xffffffff, 0xfffffbff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x7, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x3ffc, 0x0, 0x0, 0x1}, {0x0, 0xf4241, 0x0, 0x0, 0x1}]}) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x6000, 0x2000001, 0x13, r3, 0x33a0e000) preadv2(0xffffffffffffffff, &(0x7f00000017c0)=[{0x0}, {&(0x7f0000000380)=""/251, 0xfb}], 0x2, 0x7, 0x4, 0x1) 1.63260263s ago: executing program 4 (id=212): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x84) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) setns(0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000fff000/0x1000)=nil, &(0x7f000012a000/0x2000)=nil, &(0x7f000012a000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000041d000/0x4000)=nil, &(0x7f0000217000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00003d1000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000400), 0x0, r2}, 0x68) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$EVIOCGABS0(0xffffffffffffffff, 0x80184540, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0136f464b7db2c87a756c7ab0000000e0000002f49b0fd35247d1781e2580f059d62da1ad151127ab8925790db1b8972c6c3d12c4a8bfecf50447793bd61ccd5c955971105e2e105689991d84524a4352ad3fedeaf3f21abf89153ec55faa14a8d4b6b0d35463909e6da384ef3fc1cfb72", @ANYRESHEX=r3, @ANYBLOB='\x00'/18, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/27], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r8, 0x0, &(0x7f0000000580)=""/24}, 0x20) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001a00010025bd7000000000000a001400000000000008000005001b00110000005b"], 0x24}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x1901, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.547997937s ago: executing program 2 (id=213): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x5c}}, 0x0) 1.430759572s ago: executing program 1 (id=214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xcc}}, 0x0) 1.077183125s ago: executing program 1 (id=215): gettid() r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000100)="0400c811fe37db1ba91d3305a782", 0x0, 0x975, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) epoll_create1(0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x2882) r5 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x48f, &(0x7f00000000c0)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x100000000000000) rt_sigtimedwait(&(0x7f00000000c0)={[0x4000000a]}, 0x0, 0x0, 0x8) 1.076350596s ago: executing program 2 (id=216): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x24040051}, 0x4c840) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x44060) ioctl$KVM_RUN(r3, 0xae80, 0x0) 807.574432ms ago: executing program 4 (id=217): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0xb, 0x6}, {0xffff, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0xfff, 0x10000000, 0x7, 0xccb}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) write$tun(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd0000110005000000a60c6b63851e0f982c"], 0xfce) 28.346484ms ago: executing program 1 (id=218): sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40854}, 0x4844) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x24000009) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 0s ago: executing program 0 (id=219): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = socket(0x1e, 0x5, 0x0) accept4$inet6(r3, 0x0, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ppoll(&(0x7f00000003c0)=[{r0}], 0x1, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000001040)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@binder={0x73622a85, 0xb}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.77' (ED25519) to the list of known hosts. [ 45.154927][ T4174] cgroup: Unknown subsys name 'net' [ 45.258838][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 46.464059][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 47.808118][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 47.849147][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 47.885543][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 47.981136][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.988209][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.996683][ T4187] device bridge_slave_0 entered promiscuous mode [ 48.008883][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.016201][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.024346][ T4187] device bridge_slave_1 entered promiscuous mode [ 48.051898][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 48.064768][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 48.091415][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.109890][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.117261][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.125497][ T4186] device bridge_slave_0 entered promiscuous mode [ 48.138109][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.145705][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.153782][ T4186] device bridge_slave_1 entered promiscuous mode [ 48.162116][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.176771][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.184138][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.192389][ T4194] device bridge_slave_0 entered promiscuous mode [ 48.226261][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.233650][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.241626][ T4194] device bridge_slave_1 entered promiscuous mode [ 48.275918][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.287345][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.298159][ T4187] team0: Port device team_slave_0 added [ 48.324650][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.335873][ T4187] team0: Port device team_slave_1 added [ 48.365035][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.384733][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.392056][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.399676][ T4192] device bridge_slave_0 entered promiscuous mode [ 48.407006][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.414691][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.422575][ T4188] device bridge_slave_0 entered promiscuous mode [ 48.431817][ T4186] team0: Port device team_slave_0 added [ 48.437783][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.445687][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.453597][ T4188] device bridge_slave_1 entered promiscuous mode [ 48.471339][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.478302][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.504542][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.516347][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.523970][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.532203][ T4192] device bridge_slave_1 entered promiscuous mode [ 48.540426][ T4186] team0: Port device team_slave_1 added [ 48.553838][ T4194] team0: Port device team_slave_0 added [ 48.566894][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.573913][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.599962][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.627873][ T4194] team0: Port device team_slave_1 added [ 48.635222][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.658088][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.679754][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.686932][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.713495][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.726477][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.738041][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.765517][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.772702][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.798786][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.829669][ T4187] device hsr_slave_0 entered promiscuous mode [ 48.837447][ T4187] device hsr_slave_1 entered promiscuous mode [ 48.850897][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.857883][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.884054][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.901160][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.908167][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.934163][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.951154][ T4192] team0: Port device team_slave_0 added [ 48.959260][ T4188] team0: Port device team_slave_0 added [ 48.982340][ T4186] device hsr_slave_0 entered promiscuous mode [ 48.989778][ T4186] device hsr_slave_1 entered promiscuous mode [ 48.997023][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.004917][ T4186] Cannot create hsr debugfs directory [ 49.012342][ T4192] team0: Port device team_slave_1 added [ 49.036151][ T4188] team0: Port device team_slave_1 added [ 49.072304][ T4194] device hsr_slave_0 entered promiscuous mode [ 49.079081][ T4194] device hsr_slave_1 entered promiscuous mode [ 49.086359][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.094091][ T4194] Cannot create hsr debugfs directory [ 49.142408][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.149394][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.176079][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.191129][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.198089][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.224360][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.239509][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.246502][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.272410][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.289993][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.297110][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.323293][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.414869][ T4188] device hsr_slave_0 entered promiscuous mode [ 49.422503][ T4188] device hsr_slave_1 entered promiscuous mode [ 49.429016][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.437000][ T4188] Cannot create hsr debugfs directory [ 49.451600][ T4192] device hsr_slave_0 entered promiscuous mode [ 49.458560][ T4192] device hsr_slave_1 entered promiscuous mode [ 49.465469][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 49.473173][ T4192] Cannot create hsr debugfs directory [ 49.562304][ T1107] Bluetooth: hci0: command 0x0409 tx timeout [ 49.571902][ T1107] Bluetooth: hci1: command 0x0409 tx timeout [ 49.571983][ T2239] Bluetooth: hci2: command 0x0409 tx timeout [ 49.591009][ T2239] Bluetooth: hci3: command 0x0409 tx timeout [ 49.597613][ T2239] Bluetooth: hci4: command 0x0409 tx timeout [ 49.697372][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.708963][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.728308][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.740207][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.762339][ T4187] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.778610][ T4187] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.787290][ T4187] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.803277][ T4187] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.857532][ T4192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.879685][ T4192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.900464][ T4192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.927936][ T4192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.952295][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.989877][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.013901][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.023969][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 50.033379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.044941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.054192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.062664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.072676][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.092594][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 50.105890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.115172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.126252][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.133614][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.142815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.152254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.162274][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.169366][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.177120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.186456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.195266][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.202384][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.210544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.219739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.228961][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.236090][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.243774][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.251942][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.272386][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 50.283691][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 50.293602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.303065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.348217][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.358680][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.368007][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.378424][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.387195][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.395967][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.404695][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.413977][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.422960][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.432148][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.440542][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.449099][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.461776][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.473021][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.485184][ T4194] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 50.499075][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.508684][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.517611][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.527731][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.547724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.556685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.565680][ T4194] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 50.577141][ T4194] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 50.586486][ T4194] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 50.603323][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.612352][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.644946][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.667467][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.690782][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.700547][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.724536][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.786362][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.794238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.807131][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.815946][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.823029][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.831729][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.862991][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.872434][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.883464][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.890551][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.899221][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.908704][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.917484][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.932966][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.941611][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.966061][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.980312][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.998664][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.010263][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.018387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.028530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.037312][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.045094][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.052696][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.067242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.076610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.085476][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.092575][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.109647][ T4192] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.120158][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.147128][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.156071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.164779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.174398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.183212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.191987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.200786][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.210030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.218468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.227429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.236423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.245829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.254905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.280201][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.288141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.298032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.307842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.316728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.325663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.334965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.348166][ T4186] device veth0_vlan entered promiscuous mode [ 51.357533][ T4187] device veth0_vlan entered promiscuous mode [ 51.369056][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.384610][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.394787][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.410813][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.419646][ T1230] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.426743][ T1230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.448562][ T4187] device veth1_vlan entered promiscuous mode [ 51.463777][ T4186] device veth1_vlan entered promiscuous mode [ 51.471095][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.479683][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.489732][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.498450][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.507284][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.517332][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.526768][ T1230] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.533910][ T1230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.542253][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.550808][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.559336][ T1230] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.566433][ T1230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.574733][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.593903][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.602392][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 51.629613][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.639869][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.648378][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.656772][ T4234] Bluetooth: hci4: command 0x041b tx timeout [ 51.663339][ T4234] Bluetooth: hci3: command 0x041b tx timeout [ 51.664071][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.669429][ T4234] Bluetooth: hci2: command 0x041b tx timeout [ 51.678836][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.683247][ T4234] Bluetooth: hci1: command 0x041b tx timeout [ 51.692221][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 51.696695][ T4234] Bluetooth: hci0: command 0x041b tx timeout [ 51.708697][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.719100][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.744095][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.766011][ T4186] device veth0_macvtap entered promiscuous mode [ 51.775198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.784432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 51.794946][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 51.803708][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.814184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.822642][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 51.831323][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 51.839911][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.848637][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.857280][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.866037][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.874756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.884406][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.893350][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 51.901415][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.910690][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.919680][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.934952][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 51.948394][ T4186] device veth1_macvtap entered promiscuous mode [ 51.956750][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.965961][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.975564][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.002803][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.013789][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.022542][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.031333][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.043776][ T4187] device veth0_macvtap entered promiscuous mode [ 52.055188][ T4187] device veth1_macvtap entered promiscuous mode [ 52.065656][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.096802][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.114012][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.130147][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.146275][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.157329][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.171090][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.183939][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.194431][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.212508][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.222469][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.231995][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.246079][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.254992][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.272283][ T4192] device veth0_vlan entered promiscuous mode [ 52.282553][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.295718][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.305579][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.316263][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.328292][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.339105][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.350674][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.367051][ T4187] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.376021][ T4187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.385299][ T4187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.394732][ T4187] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.407071][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.419424][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.429717][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.446031][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.465398][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.472947][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.510225][ T4192] device veth1_vlan entered promiscuous mode [ 52.534218][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 52.546243][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.554083][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.564489][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.601816][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.651722][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 52.659854][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.674663][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.696356][ T4192] device veth0_macvtap entered promiscuous mode [ 52.721609][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 52.736367][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.746879][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.768436][ T4192] device veth1_macvtap entered promiscuous mode [ 52.822662][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.824717][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.840572][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.861203][ T1239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.869054][ T1239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.871847][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.884960][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.897413][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.909942][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.922033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.930062][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.943145][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.951467][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.960008][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.970049][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.978833][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.987914][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.996399][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.014685][ T4194] device veth0_vlan entered promiscuous mode [ 53.027669][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.039166][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.049325][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.060185][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.072041][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.105612][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.116276][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.125377][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.135282][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.146994][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.156424][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.166090][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.175132][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.195012][ T4194] device veth1_vlan entered promiscuous mode [ 53.212308][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.220155][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.241941][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.249946][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.258990][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.269354][ T1239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.272106][ T4194] device veth0_macvtap entered promiscuous mode [ 53.290904][ T4188] device veth0_vlan entered promiscuous mode [ 53.301030][ T1239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.321958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.331447][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.339938][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.352262][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.365784][ T4194] device veth1_macvtap entered promiscuous mode [ 53.380374][ T4188] device veth1_vlan entered promiscuous mode [ 53.397622][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.407948][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.417072][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.426066][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.446329][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.457516][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.473313][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.487534][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.523616][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.534607][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.546225][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.574733][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.585621][ T4267] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 53.589664][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.608334][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.627251][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.639806][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.662240][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.687616][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.699855][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.709471][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.722753][ T4234] Bluetooth: hci0: command 0x040f tx timeout [ 53.726051][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.729052][ T4234] Bluetooth: hci1: command 0x040f tx timeout [ 53.743727][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.753231][ T4266] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 53.770750][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.771785][ T4234] Bluetooth: hci2: command 0x040f tx timeout [ 53.819191][ T4194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.828139][ T4234] Bluetooth: hci3: command 0x040f tx timeout [ 53.834379][ T4234] Bluetooth: hci4: command 0x040f tx timeout [ 53.843301][ T4194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.861767][ T4194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.882380][ T4194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.984966][ T4188] device veth0_macvtap entered promiscuous mode [ 53.997956][ T4270] loop0: detected capacity change from 0 to 32768 [ 54.012533][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.024643][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.055799][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.070521][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.071928][ T4270] JBD2: Ignoring recovery information on journal [ 54.081394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.093079][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.108808][ T4270] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75 [ 54.113815][ T4188] device veth1_macvtap entered promiscuous mode [ 54.119465][ T4270] JBD2: bad block at offset 32 [ 54.183324][ T4270] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 54.237101][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.256715][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.279270][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.302313][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.313815][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.328397][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.338989][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.350074][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.360250][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.378486][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.390958][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.411879][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.419725][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.433833][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.443555][ T4187] ocfs2: Unmounting device (7,0) on (node local) [ 54.446969][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.458678][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.467682][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.479256][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.490028][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.500284][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.517268][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.529082][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.544669][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.555843][ T4235] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 54.568011][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.586142][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.599975][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.625996][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.642985][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.662629][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.677392][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.687013][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.696653][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.713989][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.736426][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.760920][ T4281] loop3: detected capacity change from 0 to 512 [ 54.789986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.821757][ T4235] usb 2-1: Using ep0 maxpacket: 16 [ 54.836372][ T4281] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 54.850429][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.882255][ T4281] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 54.892437][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.897285][ T4281] System zones: 1-12 [ 54.912498][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.941187][ T4235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 54.947937][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.957393][ T4281] EXT4-fs error (device loop3): ext4_quota_enable:6440: comm syz.3.4: Bad quota inum: 2934046720, type: 1 [ 54.961080][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.980356][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.002402][ T4281] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=2934046720). Please run e2fsck to fix. [ 55.033912][ T4281] EXT4-fs (loop3): mount failed [ 55.047951][ T4232] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 55.098037][ T4287] loop4: detected capacity change from 0 to 512 [ 55.125782][ T4287] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 55.131243][ T4235] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 55.146830][ T4287] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 55.159370][ T4287] System zones: 1-12 [ 55.166876][ T4287] EXT4-fs error (device loop4): ext4_quota_enable:6440: comm syz.4.5: Bad quota inum: 2934046720, type: 1 [ 55.201638][ T4287] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=2934046720). Please run e2fsck to fix. [ 55.224277][ T4235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.240314][ T4287] EXT4-fs (loop4): mount failed [ 55.250235][ T4235] usb 2-1: Product: syz [ 55.261310][ T4235] usb 2-1: Manufacturer: syz [ 55.265953][ T4235] usb 2-1: SerialNumber: syz [ 55.302024][ T4235] usb 2-1: config 0 descriptor?? [ 55.345725][ T4235] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 55.386135][ T4235] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 55.392908][ T7] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 56.250862][ C1] sched: RT throttling activated [ 56.960902][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 56.991924][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 57.002196][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 57.017583][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 57.026312][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 57.033124][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 57.080912][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 57.090911][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 57.191430][ T4232] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 14385, setting to 1024 [ 57.203406][ T4232] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 57.213776][ T4232] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 57.251766][ T4235] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 57.331102][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 14385, setting to 1024 [ 57.342658][ T7] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 57.352728][ T7] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 57.401761][ T4232] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 57.411145][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 57.419256][ T4232] usb 1-1: Product: syz [ 57.423720][ T4232] usb 1-1: Manufacturer: syz [ 57.428314][ T4232] usb 1-1: SerialNumber: syz [ 57.451119][ T4247] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 57.460610][ T4279] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 57.467985][ T4236] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 57.521084][ T7] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 57.530248][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 57.538518][ T7] usb 3-1: Product: syz [ 57.542821][ T7] usb 3-1: Manufacturer: syz [ 57.547401][ T7] usb 3-1: SerialNumber: syz [ 57.572509][ T4284] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 57.627013][ T4232] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 57.650326][ T4232] usb 1-1: USB disconnect, device number 2 [ 57.678850][ T4301] loop0: detected capacity change from 0 to 512 [ 57.681920][ T4232] usblp0: removed [ 57.731612][ T4247] usb 5-1: Using ep0 maxpacket: 16 [ 57.761720][ T4235] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 57.775863][ T4301] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 57.791545][ T4235] em28xx 2-1:0.0: board has no eeprom [ 57.793113][ T4301] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 57.810323][ T4301] System zones: 1-12 [ 57.813297][ T7] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 57.817584][ T4301] EXT4-fs error (device loop0): ext4_quota_enable:6440: comm syz.0.10: Bad quota inum: 2934046720, type: 1 [ 57.831197][ T4236] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 14385, setting to 1024 [ 57.856422][ T4301] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=2934046720). Please run e2fsck to fix. [ 57.859274][ T4236] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 57.880643][ T4247] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 57.884854][ T4301] EXT4-fs (loop0): mount failed [ 57.917692][ T4236] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 58.071512][ T4247] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 58.087838][ T4247] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.176457][ T4247] usb 5-1: Product: syz [ 58.180668][ T4247] usb 5-1: Manufacturer: syz [ 58.185726][ T4247] usb 5-1: SerialNumber: syz [ 58.211774][ T4236] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 58.223120][ T4247] usb 5-1: config 0 descriptor?? [ 58.229249][ T4236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 58.237487][ T4236] usb 4-1: Product: syz [ 58.241783][ T4236] usb 4-1: Manufacturer: syz [ 58.246392][ T4236] usb 4-1: SerialNumber: syz [ 58.255136][ T4294] usb 3-1: USB disconnect, device number 2 [ 58.406423][ T4247] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 58.940893][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 58.950877][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 58.960876][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 58.970877][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 58.980878][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 58.990874][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 59.000879][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 59.011913][ T4297] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 59.025651][ T4284] usblp0: removed [ 59.048198][ T4247] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 59.100991][ T4235] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 59.109211][ T4235] em28xx 2-1:0.0: dvb set to bulk mode. [ 59.143144][ T4235] em28xx 2-1:0.0: Binding DVB extension [ 59.354084][ T4236] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 60.171170][ T4277] em28xx 2-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 60.244583][ T4230] usb 2-1: USB disconnect, device number 2 [ 60.271181][ T4235] em28xx 2-1:0.0: Registering input extension [ 60.284146][ T4230] em28xx 2-1:0.0: Disconnecting em28xx [ 60.300248][ T4230] em28xx 2-1:0.0: Closing input extension [ 60.371431][ T4247] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 60.377639][ T4232] usb 4-1: USB disconnect, device number 2 [ 60.388313][ T4230] em28xx 2-1:0.0: Freeing device [ 60.399254][ T4297] usblp0: removed [ 60.581014][ T4235] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 60.801065][ T4230] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 60.820942][ T4235] usb 3-1: Using ep0 maxpacket: 16 [ 60.901151][ T4247] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 60.909196][ T4247] em28xx 5-1:0.0: board has no eeprom [ 60.941601][ T4235] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 61.111051][ T4235] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 61.130442][ T4235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.149062][ T4235] usb 3-1: Product: syz [ 61.157644][ T4235] usb 3-1: Manufacturer: syz [ 61.170573][ T4235] usb 3-1: SerialNumber: syz [ 61.181696][ T4230] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 14385, setting to 1024 [ 61.185211][ T4235] usb 3-1: config 0 descriptor?? [ 61.193171][ T4230] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 61.222616][ T4230] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 61.243375][ T4235] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 61.265075][ T4235] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 61.371371][ T4247] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 61.380207][ T4247] em28xx 5-1:0.0: dvb set to bulk mode. [ 61.387536][ T4232] em28xx 5-1:0.0: Binding DVB extension [ 61.411718][ T4230] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 61.423292][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 61.440645][ T4230] usb 2-1: Product: syz [ 61.445155][ T4230] usb 2-1: Manufacturer: syz [ 61.449775][ T4230] usb 2-1: SerialNumber: syz [ 61.492375][ T4326] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 61.610986][ T2239] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 61.740788][ T4230] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 61.880973][ T2239] usb 4-1: Using ep0 maxpacket: 32 [ 61.901019][ T4230] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 61.901077][ T4235] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 62.020472][ T1107] usb 2-1: USB disconnect, device number 3 [ 62.032533][ T2239] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.048391][ T4326] usblp0: removed [ 62.063269][ T2239] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 62.074034][ T2239] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 62.083307][ T2239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.096523][ T2239] usb 4-1: config 0 descriptor?? [ 62.331147][ T4299] em28xx 5-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 62.331169][ T4230] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 14385, setting to 1024 [ 62.351390][ T1107] usb 5-1: USB disconnect, device number 2 [ 62.358409][ T1107] em28xx 5-1:0.0: Disconnecting em28xx [ 62.362680][ T4230] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 62.389076][ T4230] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 62.419947][ T4343] loop4: detected capacity change from 0 to 512 [ 62.426857][ T4235] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 62.427019][ T4232] em28xx 5-1:0.0: Registering input extension [ 62.435645][ T4235] em28xx 3-1:0.0: board has no eeprom [ 62.451030][ T1107] em28xx 5-1:0.0: Closing input extension [ 62.461378][ T1107] em28xx 5-1:0.0: Freeing device [ 62.505506][ T4343] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 62.519702][ T4343] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 62.535780][ T4343] System zones: 1-12 [ 62.544535][ T4343] EXT4-fs error (device loop4): ext4_quota_enable:6440: comm syz.4.20: Bad quota inum: 2934046720, type: 1 [ 62.556595][ T4343] EXT4-fs warning (device loop4): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=2934046720). Please run e2fsck to fix. [ 62.573229][ T4343] EXT4-fs (loop4): mount failed [ 62.591253][ T4230] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 62.608152][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 62.622572][ T4230] usb 1-1: Product: syz [ 62.626786][ T4230] usb 1-1: Manufacturer: syz [ 62.638325][ T2239] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 62.645339][ T4348] loop1: detected capacity change from 0 to 512 [ 62.651952][ T4230] usb 1-1: SerialNumber: syz [ 62.657495][ T2239] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 62.669171][ T2239] ft260 0003:0403:6030.0001: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 62.681975][ T4339] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 62.699259][ T4348] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 62.716898][ T4348] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 62.741094][ T4348] System zones: 1-12 [ 62.746343][ T4348] EXT4-fs error (device loop1): ext4_quota_enable:6440: comm syz.1.21: Bad quota inum: 2934046720, type: 1 [ 62.759600][ T4348] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=2934046720). Please run e2fsck to fix. [ 62.820970][ T4235] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 62.830487][ T4235] em28xx 3-1:0.0: dvb set to bulk mode. [ 62.841061][ T2239] ft260 0003:0403:6030.0001: failed to retrieve chip version [ 62.864729][ T2239] ft260: probe of 0003:0403:6030.0001 failed with error -71 [ 62.883245][ T4235] em28xx 3-1:0.0: Binding DVB extension [ 62.901898][ T4348] EXT4-fs (loop1): mount failed [ 62.944694][ T4230] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 62.957545][ T2239] usb 4-1: USB disconnect, device number 3 [ 63.150378][ T4350] fido_id[4350]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 63.237200][ T2239] usb 1-1: USB disconnect, device number 3 [ 63.258951][ T4339] usblp0: removed [ 63.308478][ T4232] usb 3-1: USB disconnect, device number 3 [ 63.323582][ T4232] em28xx 3-1:0.0: Disconnecting em28xx [ 63.376086][ T4235] em28xx 3-1:0.0: Registering input extension [ 63.387882][ T4232] em28xx 3-1:0.0: Closing input extension [ 63.428365][ T4232] em28xx 3-1:0.0: Freeing device [ 63.496266][ T4357] loop3: detected capacity change from 0 to 512 [ 63.587490][ T4357] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #2: comm syz.3.22: missing EA_INODE flag [ 63.633382][ T4357] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.22: error while reading EA inode 2 err=-117 [ 63.664826][ T4357] EXT4-fs (loop3): 1 orphan inode deleted [ 63.670608][ T4357] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 63.946730][ T4362] Zero length message leads to an empty skb [ 66.971031][ T4235] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 67.251181][ T4235] usb 1-1: Using ep0 maxpacket: 16 [ 67.402073][ T4235] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 67.661287][ T4235] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 67.702487][ T4235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.710527][ T4235] usb 1-1: Product: syz [ 67.785159][ T4235] usb 1-1: Manufacturer: syz [ 67.789806][ T4235] usb 1-1: SerialNumber: syz [ 67.844597][ T4235] usb 1-1: config 0 descriptor?? [ 67.893262][ T4235] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 67.911319][ T4235] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 68.060414][ T4390] ODEBUG: Out of memory. ODEBUG disabled [ 68.141588][ T4294] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 68.149220][ T1107] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 68.275357][ T4236] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 68.461115][ T4294] usb 5-1: Using ep0 maxpacket: 16 [ 68.466365][ T1107] usb 3-1: Using ep0 maxpacket: 16 [ 68.491818][ T4236] usb 4-1: device descriptor read/64, error -71 [ 68.551135][ T4235] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 68.591223][ T4294] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 68.601138][ T1107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 68.730975][ T4229] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 68.761345][ T4236] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 68.771296][ T4294] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 68.780400][ T4294] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.788590][ T1107] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 68.797762][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.806194][ T4294] usb 5-1: Product: syz [ 68.810375][ T4294] usb 5-1: Manufacturer: syz [ 68.815080][ T1107] usb 3-1: Product: syz [ 68.819249][ T1107] usb 3-1: Manufacturer: syz [ 68.823892][ T4294] usb 5-1: SerialNumber: syz [ 68.828925][ T1107] usb 3-1: SerialNumber: syz [ 68.836280][ T4294] usb 5-1: config 0 descriptor?? [ 68.842586][ T1107] usb 3-1: config 0 descriptor?? [ 68.882705][ T4294] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 68.894220][ T1107] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 68.903645][ T4294] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 68.909779][ T1107] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 68.960985][ T4236] usb 4-1: device descriptor read/64, error -71 [ 68.981048][ T4229] usb 2-1: Using ep0 maxpacket: 16 [ 69.061147][ T4235] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 69.069278][ T4235] em28xx 1-1:0.0: board has no eeprom [ 69.085061][ T4236] usb usb4-port1: attempt power cycle [ 69.141824][ T4229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 69.321182][ T4229] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 69.330537][ T4229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.338578][ T4229] usb 2-1: Product: syz [ 69.342863][ T4229] usb 2-1: Manufacturer: syz [ 69.347483][ T4229] usb 2-1: SerialNumber: syz [ 69.354053][ T4229] usb 2-1: config 0 descriptor?? [ 69.392602][ T4229] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 69.409148][ T4229] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 69.421062][ T4235] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 69.429268][ T4235] em28xx 1-1:0.0: dvb set to bulk mode. [ 69.436027][ T4233] em28xx 1-1:0.0: Binding DVB extension [ 69.491051][ T4236] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 69.521102][ T1107] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 69.531063][ T4294] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 69.541830][ T4230] usb 1-1: USB disconnect, device number 4 [ 69.548010][ T4230] em28xx 1-1:0.0: Disconnecting em28xx [ 69.578313][ T4233] em28xx 1-1:0.0: Registering input extension [ 69.584740][ T4236] usb 4-1: device descriptor read/8, error -71 [ 69.591194][ T4230] em28xx 1-1:0.0: Closing input extension [ 69.609669][ T4230] em28xx 1-1:0.0: Freeing device [ 69.860999][ T4236] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 69.951075][ T4236] usb 4-1: device descriptor read/8, error -71 [ 70.042333][ T4294] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 70.050411][ T4294] em28xx 5-1:0.0: board has no eeprom [ 70.051576][ T4229] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 70.055966][ T1107] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 70.070215][ T1107] em28xx 3-1:0.0: board has no eeprom [ 70.075896][ T4236] usb usb4-port1: unable to enumerate USB device [ 70.430972][ T4294] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 70.438965][ T4294] em28xx 5-1:0.0: dvb set to bulk mode. [ 70.445086][ T4236] em28xx 5-1:0.0: Binding DVB extension [ 70.511003][ T1107] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 70.518965][ T1107] em28xx 3-1:0.0: dvb set to bulk mode. [ 70.553083][ T1107] usb 5-1: USB disconnect, device number 3 [ 70.565223][ T1107] em28xx 5-1:0.0: Disconnecting em28xx [ 70.586300][ T4236] em28xx 5-1:0.0: Registering input extension [ 70.593904][ T4294] em28xx 3-1:0.0: Binding DVB extension [ 70.601221][ T4229] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 70.609499][ T4229] em28xx 2-1:0.0: board has no eeprom [ 71.837087][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.849839][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.881087][ T4388] em28xx 3-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 71.920993][ T4403] em28xx 3-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 71.924207][ T7] usb 3-1: USB disconnect, device number 4 [ 71.940251][ T7] em28xx 3-1:0.0: Disconnecting em28xx [ 71.951010][ T4229] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 71.958979][ T4229] em28xx 2-1:0.0: dvb set to bulk mode. [ 72.349523][ T4229] usb 2-1: USB disconnect, device number 4 [ 72.501640][ T4229] em28xx 2-1:0.0: Disconnecting em28xx [ 72.795938][ T4294] em28xx 3-1:0.0: Registering input extension [ 72.927604][ T1107] em28xx 5-1:0.0: Closing input extension [ 72.933721][ T4295] em28xx 2-1:0.0: Binding DVB extension [ 73.321942][ T1107] em28xx 5-1:0.0: Freeing device [ 73.333382][ T4295] em28xx 2-1:0.0: Registering input extension [ 73.339660][ T7] em28xx 3-1:0.0: Closing input extension [ 73.345457][ T4229] em28xx 2-1:0.0: Closing input extension [ 73.462612][ T7] em28xx 3-1:0.0: Freeing device [ 73.469899][ T4229] em28xx 2-1:0.0: Freeing device [ 73.689034][ T4446] loop4: detected capacity change from 0 to 512 [ 74.018712][ T4446] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #2: comm syz.4.42: missing EA_INODE flag [ 74.169219][ T4446] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.42: error while reading EA inode 2 err=-117 [ 74.295652][ T4446] EXT4-fs (loop4): 1 orphan inode deleted [ 74.301761][ T4446] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,nogrpid,,errors=continue. Quota mode: writeback. [ 74.706712][ T4434] loop1: detected capacity change from 0 to 32768 [ 74.753758][ T4471] loop2: detected capacity change from 0 to 512 [ 75.432048][ T4471] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 75.457264][ T4434] JBD2: Ignoring recovery information on journal [ 75.509928][ T4434] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75 [ 75.557169][ T4471] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 75.606033][ T4434] JBD2: bad block at offset 32 [ 75.613462][ T4471] System zones: 1-12 [ 75.635121][ T4477] loop0: detected capacity change from 0 to 512 [ 75.665396][ T4471] EXT4-fs error (device loop2): ext4_quota_enable:6440: comm syz.2.49: Bad quota inum: 2934046720, type: 1 [ 75.682693][ T4434] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 75.757047][ T4471] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=2934046720). Please run e2fsck to fix. [ 75.807278][ T4186] ocfs2: Unmounting device (7,1) on (node local) [ 75.815103][ T4229] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 75.842740][ T4477] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 75.866593][ T4471] EXT4-fs (loop2): mount failed [ 75.933053][ T4477] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 75.953681][ T4477] System zones: 1-12 [ 76.000119][ T4477] EXT4-fs error (device loop0): ext4_quota_enable:6440: comm syz.0.50: Bad quota inum: 2934046720, type: 1 [ 76.014833][ T4477] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=2934046720). Please run e2fsck to fix. [ 76.034258][ T4477] EXT4-fs (loop0): mount failed [ 76.131007][ T4229] usb 4-1: Using ep0 maxpacket: 8 [ 76.319850][ T4229] usb 4-1: no configurations [ 76.370050][ T4229] usb 4-1: can't read configurations, error -22 [ 76.472519][ T1324] cfg80211: failed to load regulatory.db [ 76.565879][ T4229] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 76.726111][ T2239] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 76.810982][ T4229] usb 4-1: Using ep0 maxpacket: 8 [ 76.852018][ T4229] usb 4-1: no configurations [ 76.858319][ T4229] usb 4-1: can't read configurations, error -22 [ 76.916195][ T4229] usb usb4-port1: attempt power cycle [ 77.101222][ T2239] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 14385, setting to 1024 [ 77.135816][ T2239] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 77.221351][ T2239] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 77.361214][ T4229] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 77.471489][ T4229] usb 4-1: Using ep0 maxpacket: 8 [ 77.481945][ T2239] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 77.511918][ T4229] usb 4-1: no configurations [ 77.520189][ T2239] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 77.532225][ T4229] usb 4-1: can't read configurations, error -22 [ 77.613524][ T2239] usb 2-1: Product: syz [ 77.652547][ T2239] usb 2-1: Manufacturer: syz [ 77.722310][ T2239] usb 2-1: SerialNumber: syz [ 77.751035][ T4229] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 77.935277][ T4482] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 78.132739][ T4229] usb 4-1: device not accepting address 11, error -71 [ 78.271526][ T4229] usb usb4-port1: unable to enumerate USB device [ 78.893863][ T2239] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 79.417602][ T4232] usb 2-1: USB disconnect, device number 5 [ 79.460980][ T2239] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 80.248707][ T4482] usblp0: removed [ 80.501001][ T2239] usb 5-1: Using ep0 maxpacket: 32 [ 80.626151][ T2239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.658991][ T2239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.689408][ T2239] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 80.709616][ T2239] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.749464][ T2239] usb 5-1: config 0 descriptor?? [ 81.220950][ T4232] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 81.532205][ T2239] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 81.823599][ T2239] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 81.834548][ T2239] ft260 0003:0403:6030.0002: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 81.931084][ T2239] ft260 0003:0403:6030.0002: failed to retrieve chip version [ 81.952828][ T2239] ft260: probe of 0003:0403:6030.0002 failed with error -71 [ 81.975547][ T2239] usb 5-1: USB disconnect, device number 4 [ 82.136807][ T4547] fido_id[4547]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 82.551191][ T4232] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 14385, setting to 1024 [ 82.570896][ T4232] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 82.587104][ T4232] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 82.650990][ T26] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 82.658706][ T4247] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 83.605588][ T4232] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 83.620986][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 83.629402][ T4232] usb 4-1: Product: syz [ 83.634156][ T4232] usb 4-1: Manufacturer: syz [ 83.638776][ T4232] usb 4-1: SerialNumber: syz [ 83.661292][ T4532] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 83.691202][ T4247] usb 2-1: Using ep0 maxpacket: 16 [ 83.696641][ T26] usb 3-1: Using ep0 maxpacket: 8 [ 83.741326][ T26] usb 3-1: no configurations [ 83.745998][ T26] usb 3-1: can't read configurations, error -22 [ 83.841299][ T4247] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 83.914659][ T4232] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 83.925682][ T26] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 84.051094][ T4247] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 84.060813][ T4247] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.069589][ T4247] usb 2-1: Product: syz [ 84.074304][ T4247] usb 2-1: Manufacturer: syz [ 84.079611][ T4247] usb 2-1: SerialNumber: syz [ 84.091211][ T4247] usb 2-1: config 0 descriptor?? [ 84.134571][ T4247] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 84.144155][ T4247] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 84.181988][ T26] usb 3-1: Using ep0 maxpacket: 8 [ 84.187361][ T1324] usb 4-1: USB disconnect, device number 12 [ 84.204093][ T4532] usblp0: removed [ 84.231058][ T26] usb 3-1: no configurations [ 84.235707][ T26] usb 3-1: can't read configurations, error -22 [ 84.247205][ T26] usb usb3-port1: attempt power cycle [ 84.670977][ T26] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 85.471036][ T4247] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 85.491430][ T26] usb 3-1: device descriptor read/8, error -71 [ 85.920989][ T1324] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 86.171205][ T1324] usb 4-1: Using ep0 maxpacket: 16 [ 86.232531][ T4247] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 86.291435][ T1324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 86.308337][ T4247] em28xx 2-1:0.0: board has no eeprom [ 86.459018][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 86.511683][ T1324] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 86.541877][ T1324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.555164][ T1324] usb 4-1: Product: syz [ 86.559467][ T1324] usb 4-1: Manufacturer: syz [ 86.972141][ T1324] usb 4-1: SerialNumber: syz [ 86.986064][ T1324] usb 4-1: config 0 descriptor?? [ 87.021154][ T4584] em28xx 2-1:0.0: write to i2c device at 0xe failed with unknown error (status=1) [ 87.036430][ T1324] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 87.047460][ T1324] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 87.076509][ T4612] loop2: detected capacity change from 0 to 512 [ 87.091641][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 87.131097][ T7] usb 1-1: no configurations [ 87.135802][ T7] usb 1-1: can't read configurations, error -22 [ 87.161165][ T4612] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 87.191013][ T4247] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 87.221934][ T4247] em28xx 2-1:0.0: dvb set to bulk mode. [ 87.276292][ T4612] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 87.340228][ T2239] em28xx 2-1:0.0: Binding DVB extension [ 87.379369][ T4612] System zones: 1-12 [ 87.398153][ T4247] usb 2-1: USB disconnect, device number 6 [ 87.489867][ T4612] EXT4-fs error (device loop2): ext4_quota_enable:6440: comm syz.2.84: Bad quota inum: 2934046720, type: 1 [ 87.561604][ T4247] em28xx 2-1:0.0: Disconnecting em28xx [ 87.667256][ T4612] EXT4-fs warning (device loop2): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=2934046720). Please run e2fsck to fix. [ 87.731000][ T1324] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 87.973318][ T4612] EXT4-fs (loop2): mount failed [ 88.023676][ T2239] em28xx 2-1:0.0: Registering input extension [ 88.030491][ T4247] em28xx 2-1:0.0: Closing input extension [ 88.069631][ T4247] em28xx 2-1:0.0: Freeing device [ 88.111029][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 88.311203][ T1324] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 88.355188][ T1324] em28xx 4-1:0.0: board has no eeprom [ 88.381160][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 88.421330][ T7] usb 1-1: no configurations [ 88.426034][ T7] usb 1-1: can't read configurations, error -22 [ 89.092398][ T7] usb usb1-port1: attempt power cycle [ 89.211668][ T1324] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 89.361407][ T4247] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 89.651114][ T4247] usb 2-1: Using ep0 maxpacket: 16 [ 89.771324][ T4247] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 89.952015][ T4247] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 89.968964][ T4247] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.038863][ T1324] em28xx 4-1:0.0: dvb set to bulk mode. [ 90.040927][ T4247] usb 2-1: Product: syz [ 90.050421][ T4294] em28xx 4-1:0.0: Binding DVB extension [ 90.098768][ T4247] usb 2-1: Manufacturer: syz [ 90.127708][ T4247] usb 2-1: SerialNumber: syz [ 90.146249][ T4247] usb 2-1: config 0 descriptor?? [ 90.193290][ T4247] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 90.201227][ T4236] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 90.210979][ T4247] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 90.421138][ T4588] em28xx 4-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 90.429142][ T4229] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 90.468375][ T1324] usb 4-1: USB disconnect, device number 13 [ 90.478000][ T1324] em28xx 4-1:0.0: Disconnecting em28xx [ 90.496501][ T4294] em28xx 4-1:0.0: Registering input extension [ 90.508911][ T1324] em28xx 4-1:0.0: Closing input extension [ 90.557822][ T1324] em28xx 4-1:0.0: Freeing device [ 90.571126][ T4236] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 14385, setting to 1024 [ 90.590293][ T4236] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 90.601171][ T4236] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.111984][ T4247] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 91.181315][ T4236] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 91.191999][ T4236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 91.198458][ T4660] loop3: detected capacity change from 0 to 512 [ 91.200103][ T4236] usb 5-1: Product: syz [ 91.200119][ T4236] usb 5-1: Manufacturer: syz [ 91.200131][ T4236] usb 5-1: SerialNumber: syz [ 91.229191][ T4662] loop0: detected capacity change from 0 to 512 [ 91.231026][ T4229] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 14385, setting to 1024 [ 91.236146][ T4631] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 91.254137][ T4229] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 91.284438][ T4662] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 91.285003][ T4229] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.310187][ T4660] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 91.340130][ T4662] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 91.349819][ T4662] System zones: 1-12 [ 91.362085][ T4660] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 91.371224][ T4660] System zones: 1-12 [ 91.377261][ T4662] EXT4-fs error (device loop0): ext4_quota_enable:6440: comm syz.0.99: Bad quota inum: 2934046720, type: 1 [ 91.384507][ T4660] EXT4-fs error (device loop3): ext4_quota_enable:6440: comm syz.3.98: Bad quota inum: 2934046720, type: 1 [ 91.406356][ T4662] EXT4-fs warning (device loop0): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=2934046720). Please run e2fsck to fix. [ 91.413169][ T4660] EXT4-fs warning (device loop3): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=2934046720). Please run e2fsck to fix. [ 91.423354][ T4662] EXT4-fs (loop0): mount failed [ 91.451982][ T4660] EXT4-fs (loop3): mount failed [ 91.470996][ T4236] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 91.506041][ T4236] usb 5-1: USB disconnect, device number 5 [ 91.571043][ T4229] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 91.708005][ T4236] usblp0: removed [ 92.372739][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 92.381099][ T4229] usb 3-1: Product: syz [ 92.385292][ T4229] usb 3-1: Manufacturer: syz [ 92.389911][ T4229] usb 3-1: SerialNumber: syz [ 92.421086][ T4247] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 92.429457][ T4644] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 92.436744][ T4247] em28xx 2-1:0.0: board has no eeprom [ 94.674353][ T4247] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 94.692283][ T4229] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 94.710997][ T4247] em28xx 2-1:0.0: dvb set to bulk mode. [ 94.729455][ T4229] usb 3-1: USB disconnect, device number 9 [ 94.745225][ T4247] usb 2-1: USB disconnect, device number 7 [ 94.761067][ T26] em28xx 2-1:0.0: Binding DVB extension [ 94.782545][ T4229] usblp0: removed [ 94.804592][ T4247] em28xx 2-1:0.0: Disconnecting em28xx [ 95.070956][ T4236] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 95.690052][ T26] em28xx 2-1:0.0: Registering input extension [ 95.702287][ T4247] em28xx 2-1:0.0: Closing input extension [ 95.746112][ T4247] em28xx 2-1:0.0: Freeing device [ 95.880977][ T4236] usb 4-1: Using ep0 maxpacket: 8 [ 95.921249][ T4236] usb 4-1: no configurations [ 95.925919][ T4236] usb 4-1: can't read configurations, error -22 [ 96.391046][ T4236] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 96.419435][ T1324] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 96.641049][ T4236] usb 4-1: Using ep0 maxpacket: 8 [ 96.691999][ T4236] usb 4-1: no configurations [ 96.697311][ T4236] usb 4-1: can't read configurations, error -22 [ 96.749266][ T4236] usb usb4-port1: attempt power cycle [ 96.791389][ T1324] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 14385, setting to 1024 [ 96.838669][ T1324] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 96.906860][ T1324] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.181530][ T1324] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 97.221131][ T4236] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 97.265566][ T1324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 97.341280][ T4236] usb 4-1: Using ep0 maxpacket: 8 [ 97.359030][ T1324] usb 5-1: Product: syz [ 97.381264][ T4236] usb 4-1: no configurations [ 97.385949][ T4236] usb 4-1: can't read configurations, error -22 [ 97.432921][ T1324] usb 5-1: Manufacturer: syz [ 97.452761][ T1324] usb 5-1: SerialNumber: syz [ 97.511256][ T4702] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 97.522911][ T4729] loop1: detected capacity change from 0 to 512 [ 97.583475][ T4729] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 97.609216][ T4729] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 97.611024][ T4236] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 97.632614][ T4729] System zones: 1-12 [ 97.658103][ T4729] EXT4-fs error (device loop1): ext4_quota_enable:6440: comm syz.1.114: Bad quota inum: 2934046720, type: 1 [ 97.685138][ T4729] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=2934046720). Please run e2fsck to fix. [ 97.705428][ T4729] EXT4-fs (loop1): mount failed [ 97.751050][ T4236] usb 4-1: device descriptor read/8, error -71 [ 97.760027][ T1324] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 97.897338][ T4236] usb usb4-port1: unable to enumerate USB device [ 99.113310][ T4758] binder: 4750:4758 ioctl 4018620d 0 returned -22 [ 99.127544][ T4236] usb 5-1: USB disconnect, device number 6 [ 99.149355][ T4702] usblp0: removed [ 101.070967][ T2239] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 101.081269][ T26] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 101.960074][ T4814] binder: 4812:4814 ioctl 4018620d 0 returned -22 [ 101.986426][ T26] usb 4-1: Using ep0 maxpacket: 8 [ 102.058071][ T26] usb 4-1: no configurations [ 102.066544][ T26] usb 4-1: can't read configurations, error -22 [ 102.509032][ T2239] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 14385, setting to 1024 [ 102.535046][ T2239] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 102.545954][ T26] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 102.554521][ T2239] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 102.731316][ T2239] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 102.761639][ T2239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 102.830559][ T2239] usb 5-1: Product: syz [ 102.831372][ T26] usb 4-1: Using ep0 maxpacket: 8 [ 102.841579][ T2239] usb 5-1: Manufacturer: syz [ 102.923677][ T2239] usb 5-1: SerialNumber: syz [ 102.954763][ T26] usb 4-1: no configurations [ 102.961590][ T26] usb 4-1: can't read configurations, error -22 [ 103.042779][ T26] usb usb4-port1: attempt power cycle [ 103.053464][ T4793] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 103.678388][ T2239] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 104.508416][ T2239] usb 5-1: USB disconnect, device number 7 [ 104.534116][ T2239] usblp0: removed [ 105.185935][ T4865] binder: 4860:4865 ioctl 4018620d 0 returned -22 [ 105.261022][ T4294] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 105.511037][ T4294] usb 3-1: Using ep0 maxpacket: 16 [ 105.631508][ T4294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 105.841772][ T4294] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 105.884320][ T4294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.013055][ T4294] usb 3-1: Product: syz [ 106.068560][ T4294] usb 3-1: Manufacturer: syz [ 106.125563][ T4294] usb 3-1: SerialNumber: syz [ 106.176104][ T4294] usb 3-1: config 0 descriptor?? [ 106.234020][ T4294] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 106.281302][ T4294] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 106.771087][ T4236] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 106.891657][ T4294] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 107.051460][ T4236] usb 2-1: Using ep0 maxpacket: 8 [ 107.091658][ T4236] usb 2-1: no configurations [ 107.108108][ T4236] usb 2-1: can't read configurations, error -22 [ 107.340946][ T4236] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 107.544508][ T4294] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 107.558995][ T4294] em28xx 3-1:0.0: board has no eeprom [ 107.682876][ T4236] usb 2-1: Using ep0 maxpacket: 8 [ 107.841101][ T4236] usb 2-1: no configurations [ 107.846083][ T4236] usb 2-1: can't read configurations, error -22 [ 107.867265][ T4236] usb usb2-port1: attempt power cycle [ 107.991066][ T4294] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 108.014382][ T4294] em28xx 3-1:0.0: dvb set to bulk mode. [ 108.161710][ T4294] em28xx 3-1:0.0: Binding DVB extension [ 108.247250][ T4925] binder: 4920:4925 ioctl c0306201 0 returned -14 [ 108.331026][ T4236] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 108.951020][ T4855] em28xx 3-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 109.141079][ T4236] usb 2-1: device descriptor read/8, error -71 [ 109.193323][ T1324] usb 3-1: USB disconnect, device number 10 [ 109.200199][ T1324] em28xx 3-1:0.0: Disconnecting em28xx [ 109.211916][ T4294] em28xx 3-1:0.0: Registering input extension [ 109.218339][ T1324] em28xx 3-1:0.0: Closing input extension [ 109.237536][ T1324] em28xx 3-1:0.0: Freeing device [ 109.651387][ T4294] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 109.911122][ T4294] usb 4-1: Using ep0 maxpacket: 16 [ 109.941367][ T4236] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 110.041998][ T4294] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 110.184043][ T4236] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 14385, setting to 1024 [ 110.241736][ T4294] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 110.269395][ T4236] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 110.294470][ T4294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.382819][ T4294] usb 4-1: Product: syz [ 110.387262][ T4236] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 110.416969][ T4294] usb 4-1: Manufacturer: syz [ 110.425004][ T4294] usb 4-1: SerialNumber: syz [ 110.548734][ T4294] usb 4-1: config 0 descriptor?? [ 110.903686][ T4294] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 110.916724][ T4294] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 110.941259][ T4236] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 110.970956][ T4236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 111.018015][ T4236] usb 2-1: Product: syz [ 111.054054][ T4236] usb 2-1: Manufacturer: syz [ 111.105224][ T4236] usb 2-1: SerialNumber: syz [ 111.241185][ T4940] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 111.391282][ T4294] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 111.441111][ T4233] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 112.001522][ T4972] binder: 4969:4972 ioctl c0306201 0 returned -14 [ 112.011026][ T4294] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 112.028811][ T4294] em28xx 4-1:0.0: board has no eeprom [ 112.126515][ T4233] usb 1-1: Using ep0 maxpacket: 32 [ 112.134149][ T4236] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 112.282558][ T4233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.294839][ T4233] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.304986][ T4233] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 112.314093][ T4233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.340355][ T4233] usb 1-1: config 0 descriptor?? [ 112.361560][ T1324] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 112.408649][ T7] usb 2-1: USB disconnect, device number 11 [ 112.418588][ T4940] usblp0: removed [ 112.462733][ T4294] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 112.470624][ T4294] em28xx 4-1:0.0: dvb set to bulk mode. [ 112.488651][ T4236] em28xx 4-1:0.0: Binding DVB extension [ 112.621020][ T1324] usb 5-1: Using ep0 maxpacket: 8 [ 112.821693][ T4233] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 112.831155][ T1324] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 112.846209][ T1324] usb 5-1: can't read configurations, error -61 [ 112.853844][ T4233] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 112.868715][ T4233] ft260 0003:0403:6030.0003: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 113.021264][ T4233] ft260 0003:0403:6030.0003: chip code: 0000 0000 [ 113.028020][ T1324] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 113.231180][ T4233] ft260 0003:0403:6030.0003: failed to retrieve system status [ 113.243251][ T4233] ft260: probe of 0003:0403:6030.0003 failed with error -71 [ 113.256509][ T4233] usb 1-1: USB disconnect, device number 8 [ 113.280991][ T1324] usb 5-1: Using ep0 maxpacket: 8 [ 113.345051][ T4987] fido_id[4987]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 113.441347][ T4943] em28xx 4-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 113.457186][ T4294] usb 4-1: USB disconnect, device number 21 [ 113.464277][ T1324] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 113.472169][ T7] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 113.482273][ T4294] em28xx 4-1:0.0: Disconnecting em28xx [ 113.489016][ T1324] usb 5-1: can't read configurations, error -61 [ 113.501364][ T1324] usb usb5-port1: attempt power cycle [ 113.528314][ T4236] em28xx 4-1:0.0: Registering input extension [ 113.536113][ T4294] em28xx 4-1:0.0: Closing input extension [ 113.551866][ T4294] em28xx 4-1:0.0: Freeing device [ 113.721117][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 113.865715][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 113.911252][ T1324] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 114.021597][ T1324] usb 5-1: Using ep0 maxpacket: 8 [ 114.071977][ T7] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 114.117949][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.203436][ T1324] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 114.223508][ T7] usb 2-1: Product: syz [ 114.261192][ T1324] usb 5-1: can't read configurations, error -61 [ 114.293243][ T7] usb 2-1: Manufacturer: syz [ 114.368790][ T7] usb 2-1: SerialNumber: syz [ 114.518646][ T7] usb 2-1: config 0 descriptor?? [ 114.525014][ T1324] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 114.785488][ T1324] usb 5-1: Using ep0 maxpacket: 8 [ 114.792167][ T7] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 114.802242][ T7] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 115.141055][ T1324] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 115.148692][ T1324] usb 5-1: can't read configurations, error -71 [ 115.185731][ T1324] usb usb5-port1: unable to enumerate USB device [ 115.561743][ T7] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 115.761783][ T5017] binder: 5014:5017 ioctl c0306201 0 returned -14 [ 116.101165][ T7] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 116.112464][ T7] em28xx 2-1:0.0: board has no eeprom [ 116.540982][ T7] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 116.554808][ T7] em28xx 2-1:0.0: dvb set to bulk mode. [ 116.602002][ T7] em28xx 2-1:0.0: Binding DVB extension [ 117.541133][ T4986] em28xx 2-1:0.0: writing to i2c device at 0xe failed (error=-5) [ 117.550901][ T4295] usb 2-1: USB disconnect, device number 12 [ 117.563149][ T4295] em28xx 2-1:0.0: Disconnecting em28xx [ 117.757882][ T7] em28xx 2-1:0.0: Registering input extension [ 117.777864][ T4295] em28xx 2-1:0.0: Closing input extension [ 117.807673][ T4295] em28xx 2-1:0.0: Freeing device [ 118.690926][ T26] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 118.942143][ T26] usb 4-1: Using ep0 maxpacket: 8 [ 119.071179][ T7] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 119.101053][ T26] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 119.108766][ T26] usb 4-1: can't read configurations, error -61 [ 119.381151][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 119.501917][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.543106][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.637882][ T7] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 119.720892][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.832889][ T7] usb 3-1: config 0 descriptor?? [ 119.961157][ T26] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 120.221031][ T26] usb 4-1: Using ep0 maxpacket: 8 [ 120.401092][ T26] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 120.412150][ T26] usb 4-1: can't read configurations, error -61 [ 120.415765][ T7] usbhid 3-1:0.0: can't add hid device: -71 [ 120.431869][ T26] usb usb4-port1: attempt power cycle [ 120.437529][ T7] usbhid: probe of 3-1:0.0 failed with error -71 [ 120.465852][ T7] usb 3-1: USB disconnect, device number 11 [ 122.542663][ T5125] ================================================================== [ 122.551114][ T5125] BUG: KASAN: use-after-free in tcf_ct_act+0x361f/0x3b40 [ 122.558288][ T5125] Write of size 4 at addr ffff88802006ae54 by task syz.4.217/5125 [ 122.566128][ T5125] [ 122.568487][ T5125] CPU: 0 PID: 5125 Comm: syz.4.217 Not tainted syzkaller #0 [ 122.576027][ T5125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.586251][ T5125] Call Trace: [ 122.589568][ T5125] [ 122.592526][ T5125] dump_stack_lvl+0x188/0x250 [ 122.597244][ T5125] ? show_regs_print_info+0x20/0x20 [ 122.602551][ T5125] ? load_image+0x410/0x410 [ 122.607129][ T5125] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 122.612637][ T5125] ? ipv6_defrag+0x3a0/0x3a0 [ 122.617286][ T5125] print_address_description+0x60/0x2d0 [ 122.622875][ T5125] ? tcf_ct_act+0x361f/0x3b40 [ 122.627594][ T5125] kasan_report+0xdf/0x130 [ 122.632059][ T5125] ? tcf_ct_act+0x361f/0x3b40 [ 122.636797][ T5125] tcf_ct_act+0x361f/0x3b40 [ 122.641361][ T5125] ? tunnel_key_exit_net+0x100/0x100 [ 122.646904][ T5125] ? __lock_acquire+0x13dc/0x7b50 [ 122.652409][ T5125] ? skb_copy_bits+0x310/0x740 [ 122.657211][ T5125] ? skb_zerocopy+0x198/0x10a0 [ 122.662022][ T5125] ? rcu_lockdep_current_cpu_online+0x35/0x130 [ 122.668212][ T5125] ? rcu_read_lock_held+0x40/0x40 [ 122.673343][ T5125] tcf_action_exec+0x177/0x570 [ 122.678148][ T5125] tcf_classify+0x218/0xad0 [ 122.682703][ T5125] __netif_receive_skb_core+0x1cd8/0x3670 [ 122.688482][ T5125] ? set_rps_cpu+0x660/0x660 [ 122.693106][ T5125] ? ktime_get_with_offset+0xff/0x320 [ 122.698516][ T5125] ? read_lock_is_recursive+0x10/0x10 [ 122.703976][ T5125] ? lock_chain_count+0x20/0x20 [ 122.708851][ T5125] ? do_user_addr_fault+0x69f/0xc90 [ 122.714090][ T5125] __netif_receive_skb+0x74/0x290 [ 122.719962][ T5125] ? ktime_get_with_offset+0x2d7/0x320 [ 122.725562][ T5125] netif_receive_skb+0x19e/0x700 [ 122.730552][ T5125] ? __bpf_trace_softirq+0x10/0x10 [ 122.735716][ T5125] ? netif_receive_skb_core+0x210/0x210 [ 122.741718][ T5125] tun_rx_batched+0x606/0x760 [ 122.746436][ T5125] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 122.752460][ T5125] ? local_bh_enable+0x20/0x20 [ 122.757343][ T5125] ? __local_bh_enable_ip+0x136/0x1c0 [ 122.762761][ T5125] ? read_lock_is_recursive+0x10/0x10 [ 122.768187][ T5125] ? __local_bh_enable_ip+0x136/0x1c0 [ 122.773599][ T5125] ? _local_bh_enable+0xa0/0xa0 [ 122.778500][ T5125] tun_get_user+0x2bf4/0x3b10 [ 122.783245][ T5125] ? tun_ring_recv+0xc90/0xc90 [ 122.788057][ T5125] ? rcu_lock_release+0x5/0x20 [ 122.792891][ T5125] ? __lock_acquire+0x7b50/0x7b50 [ 122.797973][ T5125] tun_chr_write_iter+0x112/0x1e0 [ 122.803023][ T5125] vfs_write+0x748/0xd70 [ 122.807328][ T5125] ? file_end_write+0x250/0x250 [ 122.812196][ T5125] ? __fget_files+0x402/0x470 [ 122.816887][ T5125] ? __fdget_pos+0x1e2/0x370 [ 122.821475][ T5125] ? ksys_write+0x70/0x260 [ 122.825892][ T5125] ksys_write+0x153/0x260 [ 122.830232][ T5125] ? __ia32_sys_read+0x80/0x80 [ 122.835004][ T5125] ? lockdep_hardirqs_on+0x94/0x140 [ 122.840478][ T5125] do_syscall_64+0x4c/0xa0 [ 122.844910][ T5125] ? clear_bhb_loop+0x30/0x80 [ 122.849732][ T5125] ? clear_bhb_loop+0x30/0x80 [ 122.854677][ T5125] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.860611][ T5125] RIP: 0033:0x7f797573e159 [ 122.865032][ T5125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.884638][ T5125] RSP: 002b:00007f7973996028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 122.893135][ T5125] RAX: ffffffffffffffda RBX: 00007f79759c5fa0 RCX: 00007f797573e159 [ 122.901205][ T5125] RDX: 0000000000000fce RSI: 0000200000001280 RDI: 0000000000000003 [ 122.909181][ T5125] RBP: 00007f79757d506b R08: 0000000000000000 R09: 0000000000000000 [ 122.917154][ T5125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.925140][ T5125] R13: 00007f79759c6038 R14: 00007f79759c5fa0 R15: 00007ffe3ea3e3d8 [ 122.933216][ T5125] [ 122.936240][ T5125] [ 122.938576][ T5125] Allocated by task 5125: [ 122.942903][ T5125] __kasan_slab_alloc+0x92/0xc0 [ 122.947761][ T5125] slab_post_alloc_hook+0x4c/0x380 [ 122.952873][ T5125] kmem_cache_alloc_node+0x184/0x2c0 [ 122.958169][ T5125] __alloc_skb+0xf4/0x750 [ 122.962499][ T5125] alloc_skb_with_frags+0xa7/0x720 [ 122.967607][ T5125] sock_alloc_send_pskb+0x87f/0x9a0 [ 122.972816][ T5125] tun_get_user+0x8f7/0x3b10 [ 122.977409][ T5125] tun_chr_write_iter+0x112/0x1e0 [ 122.982438][ T5125] vfs_write+0x748/0xd70 [ 122.986716][ T5125] ksys_write+0x153/0x260 [ 122.991055][ T5125] do_syscall_64+0x4c/0xa0 [ 122.995490][ T5125] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.001381][ T5125] [ 123.003700][ T5125] Freed by task 5125: [ 123.007674][ T5125] kasan_set_track+0x4b/0x70 [ 123.012273][ T5125] kasan_set_free_info+0x1f/0x40 [ 123.017211][ T5125] ____kasan_slab_free+0xd5/0x110 [ 123.022374][ T5125] slab_free_freelist_hook+0xec/0x170 [ 123.028720][ T5125] kmem_cache_free+0x8f/0x210 [ 123.033404][ T5125] nf_ct_frag6_gather+0x1002/0x1da0 [ 123.038609][ T5125] tcf_ct_act+0xc8d/0x3b40 [ 123.043134][ T5125] tcf_action_exec+0x177/0x570 [ 123.048293][ T5125] tcf_classify+0x218/0xad0 [ 123.052963][ T5125] __netif_receive_skb_core+0x1cd8/0x3670 [ 123.058704][ T5125] __netif_receive_skb+0x74/0x290 [ 123.063739][ T5125] netif_receive_skb+0x19e/0x700 [ 123.069243][ T5125] tun_rx_batched+0x606/0x760 [ 123.073935][ T5125] tun_get_user+0x2bf4/0x3b10 [ 123.078617][ T5125] tun_chr_write_iter+0x112/0x1e0 [ 123.083668][ T5125] vfs_write+0x748/0xd70 [ 123.087928][ T5125] ksys_write+0x153/0x260 [ 123.092262][ T5125] do_syscall_64+0x4c/0xa0 [ 123.096701][ T5125] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.102607][ T5125] [ 123.104930][ T5125] The buggy address belongs to the object at ffff88802006adc0 [ 123.104930][ T5125] which belongs to the cache skbuff_head_cache of size 232 [ 123.119517][ T5125] The buggy address is located 148 bytes inside of [ 123.119517][ T5125] 232-byte region [ffff88802006adc0, ffff88802006aea8) [ 123.132802][ T5125] The buggy address belongs to the page: [ 123.138460][ T5125] page:ffffea0000801a80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2006a [ 123.148621][ T5125] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 123.156207][ T5125] raw: 00fff00000000200 dead000000000100 dead000000000122 ffff888144bf2140 [ 123.164810][ T5125] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000 [ 123.173392][ T5125] page dumped because: kasan: bad access detected [ 123.180028][ T5125] page_owner tracks the page as allocated [ 123.185749][ T5125] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 3851, ts 27631735516, free_ts 26022200226 [ 123.201842][ T5125] get_page_from_freelist+0x24f6/0x2670 [ 123.207423][ T5125] __alloc_pages+0x1ee/0x480 [ 123.212038][ T5125] new_slab+0xc0/0x4b0 [ 123.216136][ T5125] ___slab_alloc+0x807/0xdd0 [ 123.220722][ T5125] kmem_cache_alloc_node+0x118/0x2c0 [ 123.226142][ T5125] __alloc_skb+0xf4/0x750 [ 123.230545][ T5125] alloc_skb_with_frags+0xa7/0x720 [ 123.235653][ T5125] sock_alloc_send_pskb+0x87f/0x9a0 [ 123.240868][ T5125] unix_dgram_sendmsg+0x6f8/0x19c0 [ 123.246901][ T5125] sock_write_iter+0x2a6/0x3a0 [ 123.251715][ T5125] do_iter_readv_writev+0x47d/0x5f0 [ 123.256913][ T5125] do_iter_write+0x1f8/0x7a0 [ 123.261862][ T5125] do_writev+0x281/0x480 [ 123.266099][ T5125] do_syscall_64+0x4c/0xa0 [ 123.270686][ T5125] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.276759][ T5125] page last free stack trace: [ 123.281687][ T5125] free_unref_page_prepare+0x637/0x6c0 [ 123.287583][ T5125] free_unref_page+0x8f/0x2a0 [ 123.292260][ T5125] qlist_free_all+0x35/0x90 [ 123.297394][ T5125] kasan_quarantine_reduce+0x150/0x160 [ 123.303623][ T5125] __kasan_slab_alloc+0x2f/0xc0 [ 123.308506][ T5125] slab_post_alloc_hook+0x4c/0x380 [ 123.313657][ T5125] kmem_cache_alloc+0x15d/0x280 [ 123.318519][ T5125] getname_flags+0xb7/0x4f0 [ 123.323030][ T5125] user_path_at_empty+0x2a/0x190 [ 123.327974][ T5125] vfs_statx+0x107/0x4c0 [ 123.332232][ T5125] __x64_sys_newfstatat+0x15f/0x200 [ 123.337432][ T5125] do_syscall_64+0x4c/0xa0 [ 123.341850][ T5125] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.347756][ T5125] [ 123.350091][ T5125] Memory state around the buggy address: [ 123.355735][ T5125] ffff88802006ad00: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 123.363805][ T5125] ffff88802006ad80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 123.371863][ T5125] >ffff88802006ae00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 123.379928][ T5125] ^ [ 123.386608][ T5125] ffff88802006ae80: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 123.394675][ T5125] ffff88802006af00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 123.402734][ T5125] ================================================================== [ 123.410784][ T5125] Disabling lock debugging due to kernel taint [ 123.417270][ T5125] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 123.424483][ T5125] CPU: 0 PID: 5125 Comm: syz.4.217 Tainted: G B syzkaller #0 [ 123.433179][ T5125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 123.444572][ T5125] Call Trace: [ 123.447877][ T5125] [ 123.450818][ T5125] dump_stack_lvl+0x188/0x250 [ 123.455517][ T5125] ? show_regs_print_info+0x20/0x20 [ 123.460913][ T5125] ? load_image+0x410/0x410 [ 123.465431][ T5125] panic+0x2f8/0x850 [ 123.469337][ T5125] ? bpf_jit_dump+0xd0/0xd0 [ 123.473840][ T5125] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 123.479745][ T5125] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 123.485648][ T5125] ? _raw_spin_unlock+0x40/0x40 [ 123.490505][ T5125] ? tcf_ct_act+0x361f/0x3b40 [ 123.496153][ T5125] check_panic_on_warn+0x80/0xa0 [ 123.501382][ T5125] ? tcf_ct_act+0x361f/0x3b40 [ 123.506083][ T5125] end_report+0x6d/0xf0 [ 123.510252][ T5125] kasan_report+0x102/0x130 [ 123.514779][ T5125] ? tcf_ct_act+0x361f/0x3b40 [ 123.520237][ T5125] tcf_ct_act+0x361f/0x3b40 [ 123.524989][ T5125] ? tunnel_key_exit_net+0x100/0x100 [ 123.530322][ T5125] ? __lock_acquire+0x13dc/0x7b50 [ 123.535459][ T5125] ? skb_copy_bits+0x310/0x740 [ 123.540235][ T5125] ? skb_zerocopy+0x198/0x10a0 [ 123.545048][ T5125] ? rcu_lockdep_current_cpu_online+0x35/0x130 [ 123.551444][ T5125] ? rcu_read_lock_held+0x40/0x40 [ 123.556479][ T5125] tcf_action_exec+0x177/0x570 [ 123.561245][ T5125] tcf_classify+0x218/0xad0 [ 123.565844][ T5125] __netif_receive_skb_core+0x1cd8/0x3670 [ 123.571580][ T5125] ? set_rps_cpu+0x660/0x660 [ 123.576184][ T5125] ? ktime_get_with_offset+0xff/0x320 [ 123.581566][ T5125] ? read_lock_is_recursive+0x10/0x10 [ 123.586959][ T5125] ? lock_chain_count+0x20/0x20 [ 123.591827][ T5125] ? do_user_addr_fault+0x69f/0xc90 [ 123.597040][ T5125] __netif_receive_skb+0x74/0x290 [ 123.602109][ T5125] ? ktime_get_with_offset+0x2d7/0x320 [ 123.607575][ T5125] netif_receive_skb+0x19e/0x700 [ 123.612516][ T5125] ? __bpf_trace_softirq+0x10/0x10 [ 123.617633][ T5125] ? netif_receive_skb_core+0x210/0x210 [ 123.623185][ T5125] tun_rx_batched+0x606/0x760 [ 123.628447][ T5125] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 123.634440][ T5125] ? local_bh_enable+0x20/0x20 [ 123.639210][ T5125] ? __local_bh_enable_ip+0x136/0x1c0 [ 123.644577][ T5125] ? read_lock_is_recursive+0x10/0x10 [ 123.649955][ T5125] ? __local_bh_enable_ip+0x136/0x1c0 [ 123.655333][ T5125] ? _local_bh_enable+0xa0/0xa0 [ 123.660184][ T5125] tun_get_user+0x2bf4/0x3b10 [ 123.664880][ T5125] ? tun_ring_recv+0xc90/0xc90 [ 123.669646][ T5125] ? rcu_lock_release+0x5/0x20 [ 123.674767][ T5125] ? __lock_acquire+0x7b50/0x7b50 [ 123.679980][ T5125] tun_chr_write_iter+0x112/0x1e0 [ 123.685117][ T5125] vfs_write+0x748/0xd70 [ 123.689370][ T5125] ? file_end_write+0x250/0x250 [ 123.694288][ T5125] ? __fget_files+0x402/0x470 [ 123.698973][ T5125] ? __fdget_pos+0x1e2/0x370 [ 123.704783][ T5125] ? ksys_write+0x70/0x260 [ 123.709215][ T5125] ksys_write+0x153/0x260 [ 123.713556][ T5125] ? __ia32_sys_read+0x80/0x80 [ 123.718318][ T5125] ? lockdep_hardirqs_on+0x94/0x140 [ 123.723531][ T5125] do_syscall_64+0x4c/0xa0 [ 123.727957][ T5125] ? clear_bhb_loop+0x30/0x80 [ 123.732660][ T5125] ? clear_bhb_loop+0x30/0x80 [ 123.737354][ T5125] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.743507][ T5125] RIP: 0033:0x7f797573e159 [ 123.747958][ T5125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.768483][ T5125] RSP: 002b:00007f7973996028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 123.776906][ T5125] RAX: ffffffffffffffda RBX: 00007f79759c5fa0 RCX: 00007f797573e159 [ 123.784881][ T5125] RDX: 0000000000000fce RSI: 0000200000001280 RDI: 0000000000000003 [ 123.792854][ T5125] RBP: 00007f79757d506b R08: 0000000000000000 R09: 0000000000000000 [ 123.800839][ T5125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.808820][ T5125] R13: 00007f79759c6038 R14: 00007f79759c5fa0 R15: 00007ffe3ea3e3d8 [ 123.816802][ T5125] [ 123.819956][ T5125] Kernel Offset: disabled [ 123.824294][ T5125] Rebooting in 86400 seconds..