last executing test programs: 9.005509982s ago: executing program 1 (id=199): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x9, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d66bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x10, 0x9]}}) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77f0", 0x9, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000540), 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c00000002060108000000000000000001000000050005000a000000050001000700040005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000001c00078008001340000000020800124000000b3108000840"], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe800000"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000580)={r4, 0xbeb7, {0x0, 0x0, 0x0, 0x7fffffff, 0x4, 0x0, 0x1, 0xf, 0x1, "2c457b70f48908956554d3696b19f90f9bea069ad2f1f8344472125a963df535c1ab57322bc7bb72d389040acc94ede453b2fa232edb93f6efaccca62d75fa78", "dc35e11c1b6b4e4a9685f2ff7a1c616300c210632d79771665d6ea08f629d97522570322a10ab380b28d4ca7a8199525182ebb8240beef70a50cf9c9372f37ae", "6873001b1844b4bc3640976417ce41b8da45e0fd8293750be1abae682b1d0f92", [0x5, 0x6]}}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0x400000000008, 0x8, 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000000), 0x5, 0x1) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, &(0x7f00000000c0)={0x1}) 8.217370777s ago: executing program 1 (id=204): openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) unshare(0x22020600) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 8.056879023s ago: executing program 1 (id=206): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) r1 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) syz_clone(0xc0000, 0x0, 0x19, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) fcntl$setownex(r2, 0xf, &(0x7f0000000040)) write$vga_arbiter(r2, &(0x7f0000000140)=@other={'decodes', ' ', 'none'}, 0xd) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7000001) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000004e0001"], 0x38}, 0x1, 0x0, 0x0, 0x4c084}, 0x4020) syz_usb_control_io$printer(r0, 0x0, 0x0) r4 = openat$vmci(0xffffff9c, &(0x7f0000001780), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f00000017c0)={@hyper, 0x2}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x84) shutdown(r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x4, 0x8}, @nested={0x4, 0x8}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) sendto$inet6(r5, &(0x7f0000000080)='%', 0x1, 0x800, &(0x7f00000000c0)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x2}, 0x1c) close(r5) 6.915297539s ago: executing program 2 (id=222): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x40800) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xec, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@rand_addr=0x64010102, @in=@empty, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2b, 0x4, 0x0, 0x3504, 0xa, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x21, 0x2, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r4, 0x1) r5 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0xffffff7f, 0x80000000, 0x47504a50, 0x1, 0xc, [{0x9, 0x48256d1d}, {0x3, 0xb}, {0x400, 0x5}, {0x4, 0x9}, {0x8, 0x6}, {0x2, 0x1}, {0x9, 0x9}, {0x3ff, 0x5}], 0xe, 0x3, 0x4, 0x2, 0x6}}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha3-512)\x00'}, 0x58) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) 6.698140646s ago: executing program 0 (id=225): prctl$PR_SET_NAME(0x4, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r1 = socket(0x15, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080), 0x0) unshare(0x6020400) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) getsockopt(r1, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x803, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) 5.215459763s ago: executing program 2 (id=228): syz_usb_connect(0x6, 0x0, 0x0, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r1, &(0x7f00000012c0)="a5", 0x1) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x80000003) writev(r1, &(0x7f0000002440)=[{&(0x7f00000024c0)="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", 0x1189}, {&(0x7f00000000c0)="a1f2064bb51fde106630c971a2ae4a935795c0391c75e87d02ce215288315aa4a1b9c26d47a33679b51db0e665386e3280aa9f6ffef53052e1f74a77f012a1789fd7fdae33edde1b227e14480e37afa250d47bb49595257266d2d717", 0x5c}, {&(0x7f0000001300)="5e8fa61a2dc66918b2421633c62380cd3bf6ccd8259e2bf3d6aea26c25b86e57651c4fbaabb8909b6928cf22876bff1a3d5ce8b1a5366f48e9e5ff7cfe004276e66108fc5f48ee6b1550306a917b2a4d4eabed6b81982fb21b9d48c158a112933afbbfd702de65103c5fbd5651cc6a3b2e17795c858e5b9fa21f640c55f8cdfa616de21395c9e58d05c925de5d99247de8287a9651693f1bae65a3f654ece99804491ce14f4dbd2f86b7617a6487365b5a6fd5bc79eee2160d70368d525f3ca12951eb6dbc6b59eb4248c7a60ca7ff4c4d9192ef04468c374f73a42b4fa88ece1c93d19743673244f6eeec2c2e56ee02ba8fb3f7243a1473c8a817be3cdbd929250d7deb1f4ef5970ef435d2854b3d25f7f012924899b706bca5fd36c3e81446a1cbd82bd5affa707db348bbbceafe8ca1fa2e059de12dff7b75febed7d8cc263fede21edd299fe160065ac3b30a3838f79cc594462de7efdc84767da99226b14bc230f3f2e24e4dcd6ab500711c2c6930c25771a851df931cd6b6aac2c7fc02516aaa7d70c12d5f25861c66c44941c698877fe93817b6e727714447bf572de6f81fa7615c8d82f5fcf4fa7b846d69dfb8effe222ed2c17dc7aff119d1c9e57a13c567f3f10e493141ead812da07f818a0a5dc0ffa1e71f165af9ccf661e25fecf678fedc8f4283c39e663f88e99701a9b360f78471eb2945bd0dd8891aff64ba3ac95fead441924daf8728960ea266d81bbceb70895367399dd15885bb7a5e2c7b1b380d9eccf30bbd955e39bfb5746c64c6a472acae04c5175fdbfacce8b772c79f7dc398bbf4821fa8946cd0e886f77136997b3734e124833de72cddf0b97c89db7f25aaf459a32f3b73da12a6062a7189b55911dd624fc6fd6dbb8df7391857f7c032938ec49bcecf83d15c2e2395f3a1c4fb4e009174524031a6606bf2727a184df322782cc3758dcd6c2e9a57c91e68a29f98b3f9d9244b6521c9700a3db77c7010194e3fddd850542e53b0414918d22ed814caeeb50a6f72d0aa7015a8583b972d8e0ab76bb8a8dfa688b9c0e274afde057070fd6a1dddcb7e478327563b8185fc5054d384bbc4a4110c70a51bb79690fed8f5a26941086c5e99d8b4fbe6c288b23618079bc6084212f5b04f3735aa1b8c666231fa46005a58c2aca73da98e4aeae5c0fd63b3da12c169ad14607e0711c174dfe87f138b8c622a638ad7df4ff88e5a90a5c067d0663bd0a050388db30ff8b11b5023f2f297b25b670022d804370058b8e53d7442a92c5b76c158bb4841ae4573868bebaabd016e2e921274158f97953c16a1d9fe8b6259f3fb7c4ec35ca0c19175e50add68668e99bf03fc2d97d0b47d90d074844286f4800306632e96f53e128ffd4932fc80ae23e567f3c0a93aeaeacd3726d0cbb774c6d9ae1056cf1898fc7d3e700d14d519571952dceab596edafc0bcb9b5860254d58ea6462db4731878315e83dd61c0bf6421d17226d5a1e36c19c116d2361cce1b62cf49a7b23a99453e5285830ea405459d35a034769acefa25c060758933ffd4465aae9112ccc61f06aa618c632db0de675f29ddf1e603172d88063c119b04914b9684bac071d1b1da33a1c05611a62edccb43b5b0aeb5b4271dc9413c5777cfc374e98c76d3be5d8dfc8d504d661502f998f8390bda5a49f5963480178de9e52603590d80c6cc7660a9dfc12b596313607557bdf8f7a52b3495208eb77b0c84b4309da176a9be16bd57cdd23fd08e3da85afe33613a8402ae4ebcdd1458bec1c9d919b8cbe73b7c5f2f8758872c23774953b65e59f190b5bfe2bc4d69436f612037bb8f7a5e5ad778f5082ed75f825f133622b64dcdb1485609bee7fbc580f0ad3aa390fefa7cc221142089a2d09ce3b3bb0ad0d5404550a0f6fb6529876dc63801e58e39f70bbc54339e3bf3d0c7172a81dc248d7321a993c27f15ad6fae65ea1ef5cadccaeba5807e90728aab73b98d22591d6cf699e95da04be3e35bc1f56612656f322710f7be6d1e13a9fef41f0d7d0334676c94abb131d6a011b7132963779019fa80ba32c90921c0e231f174ccf553418bdb676246c88a35fcfc09b34bee3867b6ba13055f3797c83102e21ca79c34c4a1df62935431aa770e9b574f8653934fd1b6ae0a8e89e969de828740d43dfe99505123521e392e02bad1201ef38827030f1b8306aacac014a3e7ed2e751c5543603ecbeba7fd894aa5dbef85658664b9bb7bd031459f3cab78a9e96668a10b5cdbe9e54a0947e4ec4127a77681c411c9f96e4cb28f20f4103a42ee872904fc9b151796dc791df9244e48b645bd70af8097a5fb530827afd0d65cc3c0475c35db7cb03705669740c68f58c6d678d6da1b58064bc83bd3234a97e8a15f2b0646ebfa011136c81ed2a75799c34a69bc0e15f12d7bab5612ce39ddd2857a889d45820ffd97d7cacf45435be6d33d0b51b013c36d9d31a5e898d057a32ad68e9fa3e9067c7e3a131888c41fa8d2a5819118aba8602cf08fd181f7ed13ae40d88e8caf1a3bf0a3a0c319f0f7c867ad442d3b7f601cc783fbfe0a495c1de490944b46200aa446c79bcb49779fa07c916f02cddbfd1e55894375dfc92b240987e063b9d5e44f8e8e80026c5104276ba34f7269c7340756446980906c18649ee0ca48226bbb9a13fca53b6e5d63a9b40ebed49466f97fff0fc1714cd073c0a7c98bd036ed5e58ee515cb70f9b96675d710afafd34c5e98268199720f3a71c4c7a9173b7af5b9d56ecbf37385cd1f5bed961008470d2f5bd757a664ac6781ea0fdcc45d09b9922d71f7dd5386ba97c386f897e68125ceba318465b41cffedfa0506f647f1d1a5d46eae1e1cc7c3c19a880e8e3fee61017642c97312c22c313c7d02294d570183d1bde326681a3aef04d01b87898872fc46eb9bcd283fc32e93d34a2a77ec75ac78f1e5c7634074555c1308ecca30cda2db9960f23837a8a71bd242d93c77fab5fa1b9bafdecde5472739feb83a39b8c925a0d08797c4ad39b684fe14e1bba185759747d87934b4d38738278f14b21874e90cec77550024540c8292b1427f4a5b55ba70d5acbe2ac53460d5ff089e2693e9a33e0996278358fddb6220647c91eab339ba00e73621b4e92de3ea34da11d985fd60da34762afb07cd7ee5daba99879d23693638a990f2e645e6e7bd668318475df371db60ec87d4c7fcbcf49d4d293f119bf9711c128b5a62927497fc713562582ce153c5464dd78d3972fdff8e7215e3c4b79d873bc966e218c20aac6ad83e861f0f0905f76247ad5af0e0aa874c7ac3988f215dfe30616388652bb3234f80924f6e5568baa603c4fc022b5b9794857dcbe87f7a3235d274eb5364f7fdfd850318b4ce5c9f1f2c35c2e6822cdc77d35fac0226a64034b48bc6d2cbd7bc6efdb457287c0ef6931c917ddcf1155d5de163c9a00fcefa2b1d2273be8f015130b4e9f1cdd13f716a5eb267119c67e31e7bd1a365cea66afa1332d388bdd7bd074ef9d1c407a9bc6ba3f5d16611f093b319505116c00bb0c53cf2bbc72c49519978993b7d0340e59b6f7f03e955934c12fd5d28646b95c7615fe576ab9041fce54fc0aa0d08ab8ed652047acdef8cb647a32d4b9f6720e5a23a6d9e41ba0b2fea4a6d892963040926d843a776ccc43e974a35647296c49dbbe9404541720579427dff294cac204bf836685acf57fc59f7be2eb16c361829552f11533cf18c5d0ed74ff0ddabacac6eb3d49d38ab657aceba682980ce094ca4f048bd4b6ff52923636e2dd541ead4d307feb53ebf4183355fe27cba68f06452a7257d480cbeb738f6415502d8b77616fe60fcaf358ab74b4b5099d09bb78699a45c6aa14a543008bf4c583a2a7bdf207e1246b4435e5d329f96d14bf9bc7c44a4ca85e61929657dbf05c8a717e45fbd48cea4fd4776a5a654e86fe83c2e0619fc447e0c887c2635b53c66be8ceeedc43dc106db28222baf1f0ac192442960770336efafa800663c4504088016911cec6fb95278fb5492cc0eb3a3c2d2f4f7f06bbf2a64dd4fdc86f53da73fd3824b7182e5fc3adfbf2eb85419f89b69beaca65bc8dcf1ccc931bb4fea0f05327c6601e26884503b80fe72f19c068e65e7751251cc97a8e5163eb955da773386c56c93514b389df6f641a3e7fcfe4e32401a36378f64e1f1e29103c8af51d12223976717a428a8a3a3533db6c12ad57c0bed488ae9b460a632873c4f6404682c3ad7b3ce6642edcd27cc03686c4e7fe06aaf93ac45e4128b00cd5be7f6be4e59ef5099d521a676fb768646e088a6d77611107ce0bb8c34fe99a75a9045b54027ad9964cc63551b736b9aa10659a23465f6e901f6114ac3b3e5297aa9f1cfc93b0194036dd59c00a03cb37f8d971bc88bc75758df2a817fc24ded0a664930a702b78f666f6fa880f82962dae31da212d49ae4ab57f9918c7bdba57e78fe270046f895feaad596cb7e8310d5e89b8a7625171fa16e80a93f5b6a6b48df7bc56a936f0d4e55f842636c24ae88efb94d0df8238055d3968caaa26f39bfa31049aa6f7e39509e915fbbdd4bda4f32791b87ea4c78c6796ae0193400b22b8da69fd5822879a01d28225fc6210142a478e5d37178dec8fb8bb2b1e3f64a307295419069b53eb6926183a4530e352c3e63b1263ebd42f7bf5369b335b3af7d87368a7e8eec280edddc6bc2beb5e5f2aa2a1650f8ae463dc03704a06fa47359ee5f93ccb0451667133cc58d221017c9107b3cc886b84638cef2bbb62a05b97385553e32adea859f268328c8f568f441f2d5316cd508d18cabed7b31fc1e5e181649dc2e01c25e226c5ed4b9afa78bc4883a916b2aa770993599843fcce4bf55d9f11ba10841038f5ac1f8a593ee3779fb833d985f8a5f790d805d20b349aaa3c696f920904395033bd0d06b6ad1278dd89babb3691b2494197b832c840f062a3a417e4e04504d5a2efdbb1c9a3373a4c7943405bcf73bcb6cb4d0087605db571c1cac6b99de0c30133428a8a8249a312d70e474d084eb7546f6427587e512fedb8f35d349d5255a9be7fb0d5789f1653fb10b07897b35b3f8913d12f545f23456af92428bcf6115a30324d2c73ca8dbc53cde74375fd9c3acf84e518eef6cffbfcfc995b8d6521b5a7569b72cb04b9afc2b2cb444bd67655ab3b826629dc28587a816591a6e6d9def0008ef9c96c06571b87e4125eac35533b622879fd82134b55704cc6dbeaade6ed29a247c80644decf4baa7695f9ae2badb40bbf381f89dc22c2a4050eff1cee8b600564a15238ec168a9cdbb75efecfdcd5d4b470f4fa08cff9cf2abff1ace69b04702af94e4efc6c5b8a46523f1bcdad83c1787057c521f8dfec774c94691c4af173c2d248dca11692aa48e1a33e0c6a0decb17e2e43d42761b53f20ad48a07a6b220c062354477f7162020c29c9ec57b00300d09b47e0cde878d30031c52db1bf10434f68796ac3b8203bb69975ca156b507c9116c1a7106cd472975166b242f9da25fc41caa6370f60853fbcd116fc3289e6bdc2ed3d087aabba16ccc4441c67576dc478f6caf9df80e0761ac2dd4f4a0789310f0aec404852e873c51d791f8444498b7a232aff1208a85b3f778d02a88c42935f3e9a22b266791eefec066e2a43623e7c3eb72f4980049217b9cbc63e8fc74a82e39d79e97aa901a975c4bd1870cf3d3d4d8da1d6bc6991c985068eeef14e66feabee0e166c0e669b24b7ed37ed005be7f77d55c265d52d342541122d0ca86d8c753610a8abae8231d6fb0970c49", 0x1000}, {&(0x7f0000002300)="bcd9ed2a846f169eee068bd33630c68c6f86f6451b706e1ccb9b80989b6481ad7c1241e343856bce8906ab2467090f4da4b359a61be1c799ab90cafe5d2c64439a8b557a9ecc15eb5d6267a4248772c2f83999443fde785568f86bd17f275c416d85dc8e3436d61fc5d67fd8", 0x6c}, {&(0x7f0000002380)="41e084de68765030f9c668b53bebb5eaa379bc8e60fffed0e049d234", 0x1c}, {&(0x7f00000011c0)="017987d861d7cf516b25f95359741f0806d3e56c4b93894db26fb6bf6a9cc5528493340e9ff255dfbc94546fca126d5826e514088930dfead98544fa062202126b944bbcd7b29a89cf20804c6c27bf8f7152fe5c42a300"/99, 0x63}], 0x6) r2 = dup2(r0, r0) read$FUSE(r2, &(0x7f00000063c0)={0x2020}, 0x2020) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.961119611s ago: executing program 3 (id=229): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f00000003c0)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000080)=0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) r4 = syz_open_dev$media(&(0x7f0000000080), 0x2, 0x40001) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x3, @private0={0xfc, 0x0, '\x00', 0x3}, 0x7ff}, {0xa, 0x4e23, 0x7, @private1, 0x8001}, 0xffffffffffffffff, 0x7}}, 0x48) syz_usb_connect$uac2(0x3, 0x9d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000040fa04014240000102030109028b00030107600b080b010101ff20050904000080010120000924010600031500070c24030501035d02008700ff08040100000102200009040101010102200006240281033e10040005c403030000000309000000cd090501090800000c0d08250183330202000904020000010220000904020101010220000905820900000401f3082501030c0001"], &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) r7 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d0001000060000904008002030000000921060400012205000905810320000908070905020340"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(r4, 0x24, &(0x7f0000000380)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r8, 0x1, &(0x7f0000000040), 0x0) syz_usb_ep_read(r7, 0x2, 0x0, 0x0) r9 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r9, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x1, &(0x7f0000000000)=[{}], 0x0}, &(0x7f0000000240)=0x50) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000400)=0x1, r6, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x1, @loopback, 0x2}, {0xa, 0x4e22, 0x7, @remote, 0x9f93}, r6, 0x7}}, 0x48) connect$pppl2tp(r0, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x3, 0x3, 0x0, 0x0, {0xa, 0x4e21, 0xb, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}}, 0x32) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, 0x0, 0x20) 4.275725083s ago: executing program 0 (id=231): r0 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x1, 0x19c87445, 0x8, 0x0, 0x7, 0x0, 0x0, 0x0, 0x40, 0x8000000}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00'}) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r3, &(0x7f00000003c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r10, 0x4048aecb, &(0x7f0000000000)) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r11, &(0x7f0000000140)={0xa, 0x4e20, 0x7, @empty}, 0x1c) 4.128357848s ago: executing program 1 (id=233): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000008c0)=[{0x0, 0x0, 0x0}, {0x0, 0x0, 0x0}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=[@assoc={0x10, 0x117, 0x4, 0xb}], 0x10, 0x4000004}], 0x3, 0x0) 3.978685693s ago: executing program 1 (id=235): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="91100400000000009500000000000000ab89becd60798ba0c7b340b02956c1c3822c3f572da76a3b992d243e0b89f6b734d5fdf6cb7955ac9702e4a18821040f9856a1bf21bf5e9b77a91e739c3ee223bb727fb18bc991da02854893b585f4465da763f2ac1d5e22ab728ef23681fe8fdf16f570082bdfadcd7f48aa86c2c12a78db90a7781fa547451f272ad46f8e5733fb606f040417634328cbf1b47957851ce3cbc4eb683cc45e48df30ead552a32564e7d1ab13b4aa22e4dd4970134ec08873d32468bed08369a2ec7cef09ea5af2dfc3dbf2f13954a41a3e02b5e2fd65c37b0f22ce"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$evdev(0x0, 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000100)={0x54, 0x0, 0x0, {0xffff, 0x1}, {0x50, 0x2}, @cond=[{0x8, 0x5388, 0x8, 0x800, 0xc9, 0x7}, {0x0, 0x5, 0x1, 0x3, 0x8000, 0x9}]}) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2250) setrlimit(0x8, &(0x7f0000000300)={0x4, 0x7}) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x2c, 0x24044000, &(0x7f0000000380)={0x2, 0x4e22, @remote}, 0x10) r4 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) r5 = socket(0x2d, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@empty, 0x57}) shmctl$IPC_RMID(r4, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00') preadv(r6, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r6, 0xc0105303, 0x0) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r7, 0x4c80, 0xffffffffffffffb6) 3.481074099s ago: executing program 4 (id=236): socket$inet6(0xa, 0x80002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x800000, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @broadcast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200504, 0x0) close(r4) r5 = socket$unix(0x1, 0x5, 0x0) socket$unix(0x1, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x7b2d2bff, 0x4, 0x2bfe, 0x6, 0x9, 0x3, 0x5, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffc, {0x0, 0x0, 0x0, r8, {0x0, 0xf}, {0x2, 0xb}, {0x9, 0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0e9}, 0x4000010) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.375961732s ago: executing program 2 (id=237): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x80001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004044}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xb, 0xa}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.261139456s ago: executing program 4 (id=238): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x421, 0x0, 0x2, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}]}, 0x40}}, 0x4c000) 3.000983244s ago: executing program 1 (id=239): socket(0xa, 0x3, 0xff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x4, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) modify_ldt$write2(0x11, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x306, @local}, 0x10, {0x2, 0x4e20, @rand_addr=0x64010104}}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa02, 0x0) dup(r4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r5, &(0x7f0000000080)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x10, @dev={0xfe, 0x80, '\x00', 0x32}, 0x5}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x20048001}, 0xc851) recvmsg(r5, &(0x7f0000002080)={0x0, 0x18, 0x0, 0x3d, 0x0, 0xfcc7}, 0x100) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) bind$can_raw(r6, &(0x7f0000000340), 0x97) r7 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r7, 0x402c5639, &(0x7f0000000040)={0x1, 0x5, 0x4}) close(r6) setsockopt$inet_int(r2, 0x0, 0x1, &(0x7f0000000000)=0x2000006, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 2.835780799s ago: executing program 2 (id=240): socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x80503d0a, &(0x7f0000000200)={{0xa4}, {0x0, 0x80000001}, 0x1322, 0x1}) r1 = gettid() tgkill(r1, r1, 0x12) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}]}]}, 0x44}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r5, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 2.777322871s ago: executing program 3 (id=241): prctl$PR_SET_NAME(0x4, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) socket(0x15, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080), 0x0) unshare(0x6020400) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x803, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) 2.656398795s ago: executing program 3 (id=242): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0xfffffffffffff001, 0xff, 0xffff, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f0000000d80)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x108, 0x0, 0x0, 0x0, 0x81}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(r9, &(0x7f0000000440)="36d9a32e92c131d730b1abaedb51eb66fd2d5b1f7eda4f0e859fdaf294bad70673813533d8bf1c6a77b65a7afdc01b29e73571071a68d5def5d7df839810da130b9348f4d9d407eb478d5bfb298c552a498271af70914e14ba9476fd2a0e47984c25ea20afab3064a748add27a7149e9c4705475bda2ecec9ec30214f28c5e16fd3f50f604f20232c534409e52bff64fc6ca0f5e254083aec2794b7216e002e87caf3d0fa7d04ff9e3b03e81595a04979594ff6ea888bf13de8e8f74c6178e31e47593732ae1a501ad3641d423195a788efdb643f50a8c8b9794a62f7b8dfa0fa7da9d391b92ce2a7f9fe0f9d584a3775f", 0x703d59595f6742a8, 0x800, 0x0, 0x0) recvfrom(r9, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x1, 0x0, 0xffffffffffffffb5) ioctl$int_in(r6, 0x5452, &(0x7f0000000180)=0x2) fcntl$setsig(r6, 0xa, 0x12) ppoll(&(0x7f0000000140)=[{r7, 0x8002}], 0x1, 0x0, 0x0, 0x0) r10 = dup2(r6, r7) fcntl$setown(r10, 0x8, r5) tkill(r5, 0x13) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) 2.592981687s ago: executing program 2 (id=243): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000140)='3', 0x1}, {&(0x7f0000000180)=' E', 0x2}], 0x2) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = eventfd(0x1) setresuid(0x0, 0xee00, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r3, &(0x7f0000000340)={&(0x7f0000000080)={0xa, 0x4e1e, 0x80000, @dev={0xfe, 0x80, '\x00', 0x44}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000029000000360000002f00000f00000000"], 0x18}, 0xc4) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0xa3) 1.469155113s ago: executing program 4 (id=244): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000180)=0x4, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 1.345731467s ago: executing program 4 (id=245): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f00000000c0)={0x7, "38f3ff8322df967119ae7fbb582686a5bd5822ba00"}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x40001000000004, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1f, 0x6900, 0x5, 0x9, 0x3, 0x2], 0x10000, 0x203}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.25048146s ago: executing program 2 (id=246): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000380)="02", 0x1}], 0x1) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000000904000001030000000921050000012205000905810300"], 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="0000080000000804"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000280)={0x0, 0x10, 0x2, &(0x7f00000000c0)={0x13, "c2ba2cdddf96c2d905bd4296ce341591ddc08dbe750690648bd79a7fbf3d4cefc6"}}) 1.028869277s ago: executing program 4 (id=247): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000002c0)={0x1, r0, 0x80000}) mkdirat(r4, &(0x7f0000000400)='./file0\x00', 0x81) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) socketpair(0x2b, 0x2, 0x2c, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000140)) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f00000003c0)={0xffffffffffffff3d, 0x0, 0x0}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) close(r10) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x2, 0x3, 0xfffc}, {0x4, 0x80, 0x2, 0x9}}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180)='veth1_to_bridge\x00', 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000006080)=""/241, &(0x7f0000000280)=0xf1) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000203030000ee4db0f9000000000000000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000010301"], 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 961.593629ms ago: executing program 0 (id=248): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, 0x0) 747.153656ms ago: executing program 4 (id=249): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x40, 0x2, 0x3}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@typed={0x5, 0x4, 0x0, 0x0, @str='\x00'}, @generic="3104d072"]}]}, @typed={0x8, 0x2, 0x0, 0x0, @uid}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000002c0)='s\xefurce', &(0x7f0000000300)='\xb0\xfb\xd9\x9a\xbe\r\xcc:\x9b\xd0}\xe8\xff\xff\xff\xff\xff\xff\xff\x7f\xce\xf5\x1a\x01\xd6\a\xfe\xb8\x92~wS\x87\xd9\x9e0y\xc9\x8cw-zu(ht\xa1~\x9a\x8d^+\x9f\xee\x9a(&W\\\xbb\xd5W\xeb\x06\x9dva\x06\xe3\x97\xa1\x88\x83W{\x00\xff\xff\xff\xff\xff\xff\xff\xe9\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00)o\b~\xe3t`\xc9=;o\xe5\xb4T)\x04\xf9k\xfb%t\xa7\x80c\xbb\xeb\x10\xb8\x01', 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120120029ee0a508f00a57d105fe0102030109021b00010700a0020904460991740dcd7bd4b2be52394b5d8701a2471f0209050210ef030e4204584713ed0e5b7a0576e91b6bfb"], 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}]}, 0x34}}, 0x4000080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x40, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {0x8}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0x400}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x3, 0xe, 0xf9}, @void}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r7, 0x1, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80084}, 0x340488c0) userfaultfd(0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r9, 0x8955, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x10, 0xa, 0x5, 0xfff, 0xf, 0x8, 0x9, 0x1001, 0x92e}}) syz_open_procfs(0xffffffffffffffff, 0x0) 588.933011ms ago: executing program 0 (id=250): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000000c0)={0x1ff, 0x34565559, 0x3, @discrete={0x9, 0x5}}) 534.464852ms ago: executing program 3 (id=251): connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x3}}, 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x18, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x400000000000220, 0x1c000) 451.919375ms ago: executing program 0 (id=252): prctl$PR_SET_NAME(0x4, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) socket(0x15, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080), 0x0) unshare(0x6020400) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070011000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x803, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) 277.127391ms ago: executing program 3 (id=253): io_setup(0x400, &(0x7f0000000000)=0x0) io_destroy(r0) io_setup(0x7f, &(0x7f0000000100)) 234.507852ms ago: executing program 0 (id=254): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) r4 = socket(0x10, 0x3, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff}, 0x80) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000dd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000013b000/0x4000)=nil, &(0x7f00009f3000/0x3000)=nil, &(0x7f0000c6a000/0x1000)=nil, &(0x7f0000336000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000300)="cb9daff006a1df670c5cadec3743609b6d08c7133f586e15dacdba0d1fb4f5b45b20e68874c7569db11e35de30f2518dbe57879f8421227893f06e65bdc82ffdbae4817af96726b2b5f11c", 0x4b, r5}, 0x64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x66, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) 0s ago: executing program 3 (id=255): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005f40)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000002280)="c4", 0x1}, {0x0}], 0x2}}], 0x1, 0x4050000) userfaultfd(0x80001) userfaultfd(0x801) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) r1 = socket(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0x24, 0x0, 0x0) r2 = add_key$user(0x0, &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r2, r2, r2}, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x24) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000) preadv2(r4, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x0, 0x0, 0x3) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x80000}, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) socket$nl_generic(0x10, 0x3, 0x10) r6 = getpid() process_vm_readv(r6, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) syz_open_procfs(r6, &(0x7f0000000340)='timerslack_ns\x00') kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.30' (ED25519) to the list of known hosts. [ 63.773088][ T4178] cgroup: Unknown subsys name 'net' [ 63.915358][ T4178] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.455606][ T4178] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 66.840749][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 67.000832][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.009021][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.017750][ T4192] device bridge_slave_0 entered promiscuous mode [ 67.031406][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.038705][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.046833][ T4192] device bridge_slave_1 entered promiscuous mode [ 67.062764][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 67.090750][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 67.122253][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.153685][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.207518][ T4201] chnl_net:caif_netlink_parms(): no params data found [ 67.221147][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 67.231096][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.238179][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.247039][ T4191] device bridge_slave_0 entered promiscuous mode [ 67.257321][ T4192] team0: Port device team_slave_0 added [ 67.269896][ T4192] team0: Port device team_slave_1 added [ 67.289213][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.296294][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.304739][ T4191] device bridge_slave_1 entered promiscuous mode [ 67.371755][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.379075][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.405158][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.424466][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.433704][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.459988][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.479599][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.500979][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.508084][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.516281][ T4197] device bridge_slave_0 entered promiscuous mode [ 67.525573][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.556072][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.563627][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.571893][ T4197] device bridge_slave_1 entered promiscuous mode [ 67.623505][ T4201] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.630836][ T4201] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.639544][ T4201] device bridge_slave_0 entered promiscuous mode [ 67.651653][ T4192] device hsr_slave_0 entered promiscuous mode [ 67.659096][ T4192] device hsr_slave_1 entered promiscuous mode [ 67.665977][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.673265][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.681464][ T4193] device bridge_slave_0 entered promiscuous mode [ 67.695523][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.703442][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.711557][ T4193] device bridge_slave_1 entered promiscuous mode [ 67.727156][ T4191] team0: Port device team_slave_0 added [ 67.733517][ T4201] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.742418][ T4201] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.750500][ T4201] device bridge_slave_1 entered promiscuous mode [ 67.766388][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.784527][ T4191] team0: Port device team_slave_1 added [ 67.805516][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.816525][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.851173][ T4201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.862766][ T4201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.879716][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.903468][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.910606][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.937040][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.956147][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.963449][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.995492][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.020054][ T4197] team0: Port device team_slave_0 added [ 68.041708][ T4193] team0: Port device team_slave_0 added [ 68.056837][ T4193] team0: Port device team_slave_1 added [ 68.067227][ T4197] team0: Port device team_slave_1 added [ 68.076027][ T4201] team0: Port device team_slave_0 added [ 68.102587][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.109870][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.135974][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.154658][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.162242][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.188257][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.200920][ T4201] team0: Port device team_slave_1 added [ 68.248879][ T4191] device hsr_slave_0 entered promiscuous mode [ 68.256024][ T4191] device hsr_slave_1 entered promiscuous mode [ 68.263282][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.271422][ T4191] Cannot create hsr debugfs directory [ 68.277301][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.284759][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.311022][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.334177][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.341310][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.367598][ T4201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.392834][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.399981][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.426768][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.449491][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.456487][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.483362][ T4201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.505861][ T4193] device hsr_slave_0 entered promiscuous mode [ 68.512936][ T4193] device hsr_slave_1 entered promiscuous mode [ 68.519996][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.527573][ T4193] Cannot create hsr debugfs directory [ 68.619746][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 68.626464][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 68.629049][ T1327] Bluetooth: hci3: command 0x0409 tx timeout [ 68.642877][ T1327] Bluetooth: hci2: command 0x0409 tx timeout [ 68.652702][ T4197] device hsr_slave_0 entered promiscuous mode [ 68.659960][ T4197] device hsr_slave_1 entered promiscuous mode [ 68.666632][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.674400][ T4197] Cannot create hsr debugfs directory [ 68.688362][ T4201] device hsr_slave_0 entered promiscuous mode [ 68.695805][ T4201] device hsr_slave_1 entered promiscuous mode [ 68.702275][ T1327] Bluetooth: hci4: command 0x0409 tx timeout [ 68.709588][ T4201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.717181][ T4201] Cannot create hsr debugfs directory [ 68.942153][ T4192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.971450][ T4192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.987627][ T4192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.004172][ T4192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 69.043179][ T4191] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.056886][ T4191] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.069931][ T4191] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.079217][ T4191] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.144391][ T4193] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.154568][ T4193] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.169819][ T4193] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.188204][ T4193] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.212890][ T4201] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.234803][ T4201] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.260472][ T4201] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.273395][ T4201] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.297784][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.362296][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.373243][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.397599][ T4197] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.412949][ T4197] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.429375][ T4197] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.453071][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.464065][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.474070][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.481788][ T4197] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.511606][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.520608][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.528485][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.538170][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.547586][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.554930][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.564194][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.578214][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.588235][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.597916][ T3085] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.605081][ T3085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.619986][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.629192][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.637960][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.665873][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.684634][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.695388][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.704557][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.713876][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.722878][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.732538][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.741600][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.748995][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.756782][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.765706][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.774245][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.781353][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.790630][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.801372][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.809714][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.825898][ T4201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.847134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.856933][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.866175][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.878462][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.887847][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.897181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.906842][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.914012][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.924046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.932853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.941470][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.950886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.961070][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.968131][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.976094][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.016818][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.026266][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.036271][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.047196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.057037][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.066384][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.079495][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.100174][ T4201] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.114959][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.133798][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.157379][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.172208][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.183213][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.191362][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.204797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.214525][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.224837][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.235203][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.246806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.256589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.265853][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.272993][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.321120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.340016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.353169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.374894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.394726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.410103][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.417223][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.425894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.436532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.446046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.455449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.466463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.475449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.484970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.495303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.506133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.519083][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.538853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.548155][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.566933][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.577197][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.607794][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.620122][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.627738][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.667510][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.677603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.693470][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.706290][ T4238] Bluetooth: hci2: command 0x041b tx timeout [ 70.715050][ T4238] Bluetooth: hci3: command 0x041b tx timeout [ 70.724030][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.726005][ T4238] Bluetooth: hci0: command 0x041b tx timeout [ 70.740721][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.748404][ T4238] Bluetooth: hci1: command 0x041b tx timeout [ 70.759805][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.768419][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.789040][ T4235] Bluetooth: hci4: command 0x041b tx timeout [ 70.805406][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.831879][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.841066][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.869804][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.877333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.907279][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.937059][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.969292][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.984137][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.991291][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.007625][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.016784][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.033784][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.040967][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.081129][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.097779][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.126656][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.155917][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.166117][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.181111][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.194271][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.207145][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.216545][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.226282][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.234428][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.242277][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.251136][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.263317][ T1424] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.270096][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.276581][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.294214][ T4197] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.306043][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.335051][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.345787][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.354870][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.365410][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.377089][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.406540][ T4191] device veth0_vlan entered promiscuous mode [ 71.429754][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.437331][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.456736][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.467582][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.492368][ T4201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.506577][ T4192] device veth0_vlan entered promiscuous mode [ 71.521226][ T4192] device veth1_vlan entered promiscuous mode [ 71.529153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.537680][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.546010][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.555219][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.564398][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.591758][ T4191] device veth1_vlan entered promiscuous mode [ 71.635316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.644321][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.659179][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.667211][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.683607][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.692261][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.702972][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.713004][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.722334][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.747569][ T4193] device veth0_vlan entered promiscuous mode [ 71.763242][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.773162][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.783144][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.791666][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.807037][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.817779][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.832511][ T4193] device veth1_vlan entered promiscuous mode [ 71.844470][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.853452][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.863778][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.876975][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.885236][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.900324][ T4192] device veth0_macvtap entered promiscuous mode [ 71.923655][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.935102][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.943912][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.952503][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.962669][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.970924][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.981208][ T4201] device veth0_vlan entered promiscuous mode [ 71.993220][ T4192] device veth1_macvtap entered promiscuous mode [ 72.004116][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.012302][ T4191] device veth0_macvtap entered promiscuous mode [ 72.025683][ T4201] device veth1_vlan entered promiscuous mode [ 72.036802][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.047586][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.056259][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.065700][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.074735][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.097732][ T4191] device veth1_macvtap entered promiscuous mode [ 72.113646][ T4193] device veth0_macvtap entered promiscuous mode [ 72.135373][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.149855][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.163937][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.177376][ T4193] device veth1_macvtap entered promiscuous mode [ 72.194289][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.209184][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.218104][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.229093][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.237836][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.250104][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.261830][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.270834][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.282003][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.296736][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.311728][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.324683][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.335385][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.347334][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.357296][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.381093][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.394600][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.431719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.441287][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.451757][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.461292][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.472968][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.484278][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.496359][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.512051][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.522632][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.532624][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.543999][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.555808][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.568368][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.579318][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.589508][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.598044][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.608381][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.617731][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.629764][ T4201] device veth0_macvtap entered promiscuous mode [ 72.641812][ T4193] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.650707][ T4193] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.660251][ T4193] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.669327][ T4193] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.685284][ T4197] device veth0_vlan entered promiscuous mode [ 72.697323][ T4201] device veth1_macvtap entered promiscuous mode [ 72.705407][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.715897][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.724305][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.733656][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.743642][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.751868][ T3085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.775609][ T4191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.788081][ T4191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.791484][ T4272] Bluetooth: hci1: command 0x040f tx timeout [ 72.802987][ T4191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.811765][ T4191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.827120][ T4197] device veth1_vlan entered promiscuous mode [ 72.838345][ T4272] Bluetooth: hci0: command 0x040f tx timeout [ 72.845203][ T4272] Bluetooth: hci3: command 0x040f tx timeout [ 72.851635][ T4272] Bluetooth: hci2: command 0x040f tx timeout [ 72.869742][ T4236] Bluetooth: hci4: command 0x040f tx timeout [ 72.927221][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.938267][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.949435][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.959953][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.969880][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.980504][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.992625][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.017006][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.030944][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.043878][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.052995][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.057068][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.070919][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.080306][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.098649][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.113911][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.124145][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.136618][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.147237][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.158018][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.170584][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.193539][ T4197] device veth0_macvtap entered promiscuous mode [ 73.201459][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.211965][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.224561][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.233442][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.242483][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.264541][ T4201] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.273912][ T4201] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.283254][ T4201] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.292046][ T4201] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.314513][ T4197] device veth1_macvtap entered promiscuous mode [ 73.355002][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.364999][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.398327][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.414633][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.425153][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.437662][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.449694][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.460774][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.471064][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.482009][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.493693][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.503551][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.513502][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.522406][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.552255][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.564481][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.575994][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.590088][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.600825][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.611857][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.621995][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.632718][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.642903][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.657928][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.673932][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.686795][ T4197] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.695679][ T4197] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.704832][ T4197] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.714124][ T4197] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.726589][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.735294][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.747173][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.776845][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.792761][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.852536][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.874023][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.884151][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.892234][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.900042][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.914032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.923939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.027595][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.031163][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.068690][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.071669][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.091774][ T4277] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 74.132058][ T4277] device vlan2 entered promiscuous mode [ 74.137674][ T4277] device batadv0 entered promiscuous mode [ 74.231313][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.240540][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.269827][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.293356][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.321666][ T4279] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 74.335688][ T4279] device vlan2 entered promiscuous mode [ 74.409083][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.471832][ T4279] Zero length message leads to an empty skb [ 74.491273][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.512829][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.559953][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.865331][ T4238] Bluetooth: hci3: command 0x0419 tx timeout [ 74.878792][ T4238] Bluetooth: hci0: command 0x0419 tx timeout [ 74.992898][ T4238] Bluetooth: hci1: command 0x0419 tx timeout [ 74.998401][ T4302] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.8' sets config #0 [ 75.111740][ T4238] Bluetooth: hci4: command 0x0419 tx timeout [ 75.125781][ T4238] Bluetooth: hci2: command 0x0419 tx timeout [ 75.158832][ T4237] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.390349][ T4317] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 75.529372][ T4237] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 75.576885][ T4237] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.647919][ T4237] usb 1-1: config 0 descriptor?? [ 75.848872][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.934836][ T4294] syz.0.1: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 75.955223][ T4294] CPU: 0 PID: 4294 Comm: syz.0.1 Not tainted syzkaller #0 [ 75.962455][ T4294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 75.972533][ T4294] Call Trace: [ 75.975817][ T4294] [ 75.978755][ T4294] dump_stack_lvl+0x188/0x250 [ 75.983475][ T4294] ? rcu_lock_release+0x5/0x20 [ 75.988249][ T4294] ? show_regs_print_info+0x20/0x20 [ 75.993452][ T4294] ? load_image+0x400/0x400 [ 75.997964][ T4294] warn_alloc+0x243/0x320 [ 76.002295][ T4294] ? rcu_lock_release+0x20/0x20 [ 76.007157][ T4294] ? zone_watermark_ok_safe+0x240/0x240 [ 76.012714][ T4294] ? dvb_demux_do_ioctl+0x313/0x530 [ 76.017918][ T4294] ? kfree+0xef/0x2a0 [ 76.021905][ T4294] __vmalloc_node_range+0x2b1/0x8b0 [ 76.027110][ T4294] ? mutex_lock_io_nested+0x60/0x60 [ 76.032322][ T4294] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 76.038200][ T4294] vmalloc+0x75/0x80 [ 76.042120][ T4294] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 76.047974][ T4294] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 76.053623][ T4294] dvb_demux_do_ioctl+0x450/0x530 [ 76.058665][ T4294] dvb_usercopy+0x191/0x2b0 [ 76.063190][ T4294] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 76.068746][ T4294] ? dvb_generic_ioctl+0xb0/0xb0 [ 76.073727][ T4294] ? dvb_demux_poll+0x210/0x210 [ 76.078591][ T4294] dvb_demux_ioctl+0x25/0x30 [ 76.083202][ T4294] __se_sys_ioctl+0xfa/0x170 [ 76.087808][ T4294] do_syscall_64+0x4c/0xa0 [ 76.092224][ T4294] ? clear_bhb_loop+0x30/0x80 [ 76.096905][ T4294] ? clear_bhb_loop+0x30/0x80 [ 76.101584][ T4294] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 76.107488][ T4294] RIP: 0033:0x7f6abb001e59 [ 76.111904][ T4294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 76.131550][ T4294] RSP: 002b:00007f6ab925b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 76.139981][ T4294] RAX: ffffffffffffffda RBX: 00007f6abb27afa0 RCX: 00007f6abb001e59 [ 76.147979][ T4294] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000008 [ 76.156040][ T4294] RBP: 00007f6abb097d6f R08: 0000000000000000 R09: 0000000000000000 [ 76.164021][ T4294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 76.172001][ T4294] R13: 00007f6abb27b038 R14: 00007f6abb27afa0 R15: 00007ffe79a578e8 [ 76.179990][ T4294] [ 76.220779][ T23] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 76.293225][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.354056][ T23] usb 2-1: config 0 descriptor?? [ 76.378702][ T4294] Mem-Info: [ 76.383223][ T4294] active_anon:273 inactive_anon:6158 isolated_anon:0 [ 76.383223][ T4294] active_file:4490 inactive_file:36597 isolated_file:0 [ 76.383223][ T4294] unevictable:768 dirty:1716 writeback:0 [ 76.383223][ T4294] slab_reclaimable:20170 slab_unreclaimable:91394 [ 76.383223][ T4294] mapped:31502 shmem:1631 pagetables:620 bounce:0 [ 76.383223][ T4294] kernel_misc_reclaimable:0 [ 76.383223][ T4294] free:1396128 free_pcp:6635 free_cma:0 [ 76.438649][ T4294] Node 0 active_anon:1060kB inactive_anon:24224kB active_file:17760kB inactive_file:146388kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126008kB dirty:6844kB writeback:0kB shmem:4448kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10568kB pagetables:2480kB all_unreclaimable? no [ 76.602405][ T4294] Node 1 active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:20kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 76.648777][ T23] [drm] vendor descriptor length:6 data:06 5f 6c 66 00 00 00 00 00 00 00 [ 76.667669][ T23] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 76.708818][ T4294] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 76.806314][ T4294] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 76.835744][ T4294] Node 0 DMA32 free:1657984kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1060kB inactive_anon:26788kB active_file:17760kB inactive_file:146560kB unevictable:1536kB writepending:6936kB present:3129332kB managed:2606544kB mlocked:0kB bounce:0kB free_pcp:11244kB local_pcp:9648kB free_cma:0kB [ 76.878682][ T23] [drm:udl_init] *ERROR* Selecting channel failed [ 76.920873][ T23] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 3 [ 76.948617][ T23] [drm] Initialized udl on minor 3 [ 76.968769][ T23] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 76.977629][ T4294] lowmem_reserve[]: 0 0 0 0 0 [ 76.987807][ T4294] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 77.020077][ T23] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 77.079275][ T23] usb 2-1: USB disconnect, device number 2 [ 77.111964][ T4274] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 77.134458][ T4274] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 77.156678][ T4294] lowmem_reserve[]: 0 0 0 0 0 [ 77.180154][ T4274] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 77.194504][ T4294] Node 1 Normal free:3909240kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:20kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:13828kB local_pcp:5804kB free_cma:0kB [ 77.339245][ T4294] lowmem_reserve[]: 0 0 0 0 0 [ 77.357748][ T4294] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 77.397648][ T4294] Node 0 DMA32: 2*4kB (UE) 2*8kB (UM) 1*16kB (U) 2*32kB (UE) 1*64kB (U) 2*128kB (ME) 1*256kB (M) 5*512kB (UM) 1*1024kB (M) 4*2048kB (UME) 401*4096kB (M) = 1654952kB [ 77.446296][ T4294] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 77.485419][ T4294] Node 1 Normal: 63*4kB (UME) 32*8kB (UME) 29*16kB (UME) 42*32kB (UME) 28*64kB (UE) 19*128kB (UE) 5*256kB (UM) 2*512kB (U) 1*1024kB (E) 2*2048kB (UM) 951*4096kB (M) = 3909260kB [ 77.538825][ T4294] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 77.668803][ T4294] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 77.759477][ T4325] tipc: Started in network mode [ 77.770375][ T4294] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 77.778215][ T4325] tipc: Node identity 4a7921993a49, cluster identity 4711 [ 77.814153][ T4325] tipc: Enabled bearer , priority 0 [ 77.821790][ T4294] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 77.875558][ T4329] device syzkaller0 entered promiscuous mode [ 77.917415][ T4294] 42778 total pagecache pages [ 77.955388][ T4294] 0 pages in swap cache [ 77.976440][ T4294] Swap cache stats: add 0, delete 0, find 0/0 [ 78.011601][ T4325] tipc: Resetting bearer [ 78.048713][ T4294] Free swap = 124996kB [ 78.052940][ T4294] Total swap = 124996kB [ 78.061829][ T4324] tipc: Resetting bearer [ 78.098701][ T4294] 2097051 pages RAM [ 78.102561][ T4294] 0 pages HighMem/MovableOnly [ 78.107256][ T4294] 411492 pages reserved [ 78.130917][ T4294] 0 pages cma reserved [ 78.169532][ T4324] tipc: Disabling bearer [ 78.259144][ T4237] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 78.278049][ T4237] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 78.358681][ T4237] [drm:udl_init] *ERROR* Selecting channel failed [ 78.410849][ T4237] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 78.446524][ T4237] [drm] Initialized udl on minor 2 [ 78.488996][ T4237] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 78.518663][ T4330] tc_dump_action: action bad kind [ 78.525565][ T4237] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 78.584160][ T4237] usb 1-1: USB disconnect, device number 2 [ 78.615716][ T4274] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 78.638980][ T4274] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 78.668792][ T4274] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 79.979130][ T4365] netlink: 76 bytes leftover after parsing attributes in process `syz.4.24'. [ 79.988085][ T4362] syz.1.25 uses obsolete (PF_INET,SOCK_PACKET) [ 80.186651][ T4367] program syz.2.28 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.455667][ T4376] binder: 4338:4376 ioctl c0306201 0 returned -14 [ 80.648656][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 80.968666][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 81.128804][ T13] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 81.173630][ T13] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 81.374607][ T13] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 81.391574][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 81.436790][ T13] usb 5-1: SerialNumber: syz [ 81.514369][ T13] usb 5-1: 0:2 : does not exist [ 81.539920][ T13] usb 5-1: unit 5 not found! [ 81.758650][ T4374] tipc: Started in network mode [ 81.763602][ T4374] tipc: Node identity 2d030000000005002e2e, cluster identity 4711 [ 82.011445][ T4274] usb 5-1: USB disconnect, device number 2 [ 83.478676][ T13] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 83.910753][ T13] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.961011][ T13] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 83.981867][ T13] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 84.013934][ T13] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 84.035180][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.099039][ T4395] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 84.119485][ T13] hub 3-1:1.0: bad descriptor, ignoring hub [ 84.125414][ T13] hub: probe of 3-1:1.0 failed with error -5 [ 84.143001][ T13] cdc_wdm 3-1:1.0: skipping garbage [ 84.162623][ T13] cdc_wdm 3-1:1.0: skipping garbage [ 84.196739][ T13] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 84.228620][ T13] cdc_wdm 3-1:1.0: Unknown control protocol [ 84.659621][ T13] usb 3-1: USB disconnect, device number 2 [ 85.202711][ T4364] syz.3.26 (4364): drop_caches: 3 [ 85.825675][ T4426] process 'syz.0.44' launched './file0' with NULL argv: empty string added [ 86.098755][ T4238] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 86.139103][ T4180] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 86.398733][ T4180] usb 1-1: Using ep0 maxpacket: 32 [ 86.498816][ T4238] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 86.536095][ T4238] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.558677][ T4180] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.587282][ T4238] usb 2-1: config 0 descriptor?? [ 86.598570][ T4180] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 86.623761][ T1108] cfg80211: failed to load regulatory.db [ 86.673631][ T4238] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 86.870464][ T4180] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 86.879702][ T4237] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 86.888748][ T4238] gp8psk: usb in 128 operation failed. [ 86.908597][ T4180] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.945401][ T4180] usb 1-1: Product: syz [ 86.955562][ T4180] usb 1-1: Manufacturer: syz [ 86.986679][ T4180] usb 1-1: SerialNumber: syz [ 87.020678][ T4180] usb 1-1: config 0 descriptor?? [ 87.108700][ T4237] usb 5-1: device descriptor read/64, error -71 [ 87.148708][ T4238] gp8psk: usb in 146 operation failed. [ 87.154290][ T4238] gp8psk: failed to get FW version [ 87.218864][ T4238] gp8psk: FPGA Version = 52 [ 87.378655][ T4237] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 87.422655][ T4425] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.608638][ T4237] usb 5-1: device descriptor read/64, error -71 [ 87.698665][ T4238] gp8psk: usb in 138 operation failed. [ 87.704221][ T4238] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 87.740168][ T4237] usb usb5-port1: attempt power cycle [ 87.748649][ T4238] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 87.807753][ T4238] usb 2-1: USB disconnect, device number 3 [ 88.124134][ T4446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.52'. [ 88.168663][ T4237] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 88.288842][ T4237] usb 5-1: device descriptor read/8, error -71 [ 88.344860][ T4450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.53'. [ 88.602963][ T4237] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 88.619650][ T4180] usb 1-1: USB disconnect, device number 3 [ 88.728828][ T4237] usb 5-1: device descriptor read/8, error -71 [ 88.850124][ T4237] usb usb5-port1: unable to enumerate USB device [ 90.168991][ T4488] tipc: Enabled bearer , priority 0 [ 90.209456][ T4488] device syzkaller0 entered promiscuous mode [ 90.308699][ T4488] tipc: Resetting bearer [ 90.342469][ T4487] tipc: Resetting bearer [ 90.368899][ T4487] tipc: Disabling bearer [ 91.309337][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 91.528563][ T23] usb 3-1: device descriptor read/64, error -71 [ 91.808724][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 91.998604][ T23] usb 3-1: device descriptor read/64, error -71 [ 92.119733][ T23] usb usb3-port1: attempt power cycle [ 92.538923][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 92.648768][ T23] usb 3-1: device descriptor read/8, error -71 [ 92.938588][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 93.009491][ T4547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.89'. [ 93.049542][ T23] usb 3-1: device descriptor read/8, error -71 [ 93.179260][ T23] usb usb3-port1: unable to enumerate USB device [ 93.397279][ T4563] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 94.954503][ T4600] netlink: 12 bytes leftover after parsing attributes in process `syz.4.102'. [ 95.448714][ T13] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 95.589224][ T4274] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 95.688643][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 95.758795][ T4180] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.808826][ T13] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 95.817437][ T13] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 95.826523][ T13] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 95.835884][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 95.845918][ T13] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 95.855893][ T13] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 95.869209][ T13] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 95.878699][ T4274] usb 5-1: Using ep0 maxpacket: 32 [ 95.884470][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.901778][ T13] usb 1-1: config 0 descriptor?? [ 95.998624][ T4180] usb 4-1: Using ep0 maxpacket: 8 [ 96.069243][ T4274] usb 5-1: unable to get BOS descriptor or descriptor too short [ 96.148879][ T4180] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.162187][ T4180] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.162972][ T13] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 96.174399][ T4180] usb 4-1: config 0 interface 0 has no altsetting 0 [ 96.190232][ T4274] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 96.198891][ T4274] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 96.207337][ T4180] usb 4-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 96.216920][ T4274] usb 5-1: config 14 has no interface number 0 [ 96.224643][ T4180] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.233065][ T4274] usb 5-1: config 14 has no interface number 1 [ 96.247522][ T13] usb 1-1: USB disconnect, device number 4 [ 96.255082][ T4274] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 96.279497][ T4180] usb 4-1: config 0 descriptor?? [ 96.289440][ T4274] usb 5-1: config 14 interface 228 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 96.305072][ T4274] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 96.311010][ T13] usblp0: removed [ 96.322288][ T4274] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.337086][ T4274] usb 5-1: config 14 interface 57 has no altsetting 0 [ 96.349739][ T4274] usb 5-1: config 14 interface 228 has no altsetting 0 [ 96.508781][ T4274] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 96.521558][ T4274] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.532084][ T4274] usb 5-1: Product: syz [ 96.536465][ T4274] usb 5-1: Manufacturer: syz [ 96.543964][ T4274] usb 5-1: SerialNumber: syz [ 96.729292][ T4238] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 96.771581][ T4180] smartjoyplus 0003:6666:8804.0001: unknown main item tag 0x2 [ 96.779016][ T13] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 96.782726][ T4180] smartjoyplus 0003:6666:8804.0001: item fetching failed at offset 4/5 [ 96.804514][ T4180] smartjoyplus 0003:6666:8804.0001: parse failed [ 96.811240][ T4180] smartjoyplus: probe of 0003:6666:8804.0001 failed with error -22 [ 96.972418][ T4180] usb 4-1: USB disconnect, device number 2 [ 97.039956][ T4274] legousbtower 5-1:14.57: interrupt endpoints not found [ 97.048845][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 97.148874][ T4238] usb 2-1: unable to get BOS descriptor or descriptor too short [ 97.178766][ T13] usb 1-1: config index 0 descriptor too short (expected 5924, got 36) [ 97.187087][ T13] usb 1-1: config 250 has an invalid interface number: 228 but max is -1 [ 97.196319][ T13] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 97.208135][ T13] usb 1-1: config 250 has no interface number 0 [ 97.214759][ T13] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.225780][ T13] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 97.236220][ T13] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 97.250814][ T4238] usb 2-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 97.261236][ T13] usb 1-1: config 250 interface 228 has no altsetting 0 [ 97.268315][ T4238] usb 2-1: config 66 has 0 interfaces, different from the descriptor's value: 2 [ 97.273819][ T4274] legousbtower 5-1:14.228: interrupt endpoints not found [ 97.337913][ T4626] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 97.391071][ T13] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 97.403567][ T4628] tipc: Enabled bearer , priority 0 [ 97.411928][ T13] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 97.420954][ T4628] device syzkaller0 entered promiscuous mode [ 97.427100][ T13] usb 1-1: Product: syz [ 97.431682][ T4238] usb 2-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 97.440925][ T13] usb 1-1: SerialNumber: syz [ 97.446503][ T4238] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.463519][ T4238] usb 2-1: Product: syz [ 97.470421][ T4628] tipc: Resetting bearer [ 97.477196][ T4238] usb 2-1: Manufacturer: syz [ 97.485003][ T4627] tipc: Resetting bearer [ 97.493524][ T4238] usb 2-1: SerialNumber: syz [ 97.500550][ T13] hub 1-1:250.228: bad descriptor, ignoring hub [ 97.526521][ T13] hub: probe of 1-1:250.228 failed with error -5 [ 97.539734][ T4627] tipc: Disabling bearer [ 97.710665][ T13] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 5 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 97.749465][ T4632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.113'. [ 97.811230][ T1108] usb 2-1: USB disconnect, device number 4 [ 98.361654][ T4603] usb 1-1: reset high-speed USB device number 5 using dummy_hcd [ 98.867851][ T4671] tipc: Enabled bearer , priority 0 [ 98.884650][ T4671] device syzkaller0 entered promiscuous mode [ 98.912629][ T4671] tipc: Resetting bearer [ 98.925361][ T4670] tipc: Resetting bearer [ 98.956793][ T4670] tipc: Disabling bearer [ 99.047879][ T13] usb 5-1: USB disconnect, device number 7 [ 99.286242][ T4180] usb 1-1: USB disconnect, device number 5 [ 99.308204][ T4180] usblp0: removed [ 99.315055][ T4675] netlink: 12 bytes leftover after parsing attributes in process `syz.4.126'. [ 99.538732][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 99.788892][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 99.908806][ T23] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.931606][ T23] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.951364][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 99.975215][ T23] usb 4-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 99.993228][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.014831][ T23] usb 4-1: config 0 descriptor?? [ 100.117552][ T4704] tipc: Started in network mode [ 100.128659][ T4704] tipc: Node identity 067fc11a716d, cluster identity 4711 [ 100.156448][ T4704] tipc: Enabled bearer , priority 0 [ 100.191872][ T4706] device syzkaller0 entered promiscuous mode [ 100.256887][ T4704] tipc: Resetting bearer [ 100.317707][ T4702] tipc: Resetting bearer [ 100.374474][ T4702] tipc: Disabling bearer [ 100.558804][ T23] usbhid 4-1:0.0: can't add hid device: -71 [ 100.565946][ T23] usbhid: probe of 4-1:0.0 failed with error -71 [ 100.615624][ T23] usb 4-1: USB disconnect, device number 3 [ 100.746999][ T4722] netlink: 14 bytes leftover after parsing attributes in process `syz.1.141'. [ 101.688580][ T4180] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 101.723010][ T4756] tipc: Enabled bearer , priority 0 [ 101.734358][ T4756] device syzkaller0 entered promiscuous mode [ 101.802740][ T4756] tipc: Resetting bearer [ 101.853055][ T4753] tipc: Resetting bearer [ 101.877851][ T4753] tipc: Disabling bearer [ 102.000817][ T4762] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 102.098793][ T4180] usb 2-1: config 0 has no interfaces? [ 102.278699][ T4180] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 102.293064][ T4180] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.318799][ T4180] usb 2-1: Product: syz [ 102.328312][ T4180] usb 2-1: Manufacturer: syz [ 102.346393][ T4180] usb 2-1: SerialNumber: syz [ 102.368307][ T4180] usb 2-1: config 0 descriptor?? [ 102.437769][ T4770] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.445887][ T4770] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.625699][ T4274] usb 2-1: USB disconnect, device number 5 [ 102.780402][ T13] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 102.810898][ T13] Bluetooth: hci4: Injecting HCI hardware error event [ 102.819500][ T4203] Bluetooth: hci4: hardware error 0x00 [ 103.598611][ T4238] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 104.049044][ T4238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.090706][ T4238] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.118654][ T4238] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 104.149945][ T4238] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 104.178784][ T4238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.219891][ T4238] usb 5-1: config 0 descriptor?? [ 104.588814][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 104.758841][ T4238] usbhid 5-1:0.0: can't add hid device: -71 [ 104.766117][ T4238] usbhid: probe of 5-1:0.0 failed with error -71 [ 104.783698][ T4238] usb 5-1: USB disconnect, device number 8 [ 104.828719][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 104.958843][ T23] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.985589][ T23] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.018784][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 105.025514][ T23] usb 4-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 105.098809][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.139552][ T23] usb 4-1: config 0 descriptor?? [ 105.678812][ T23] usbhid 4-1:0.0: can't add hid device: -71 [ 105.685130][ T23] usbhid: probe of 4-1:0.0 failed with error -71 [ 105.693898][ T23] usb 4-1: USB disconnect, device number 4 [ 106.278742][ T4238] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 106.552761][ T4845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.181'. [ 106.680255][ T4238] usb 3-1: unable to get BOS descriptor or descriptor too short [ 106.768782][ T4238] usb 3-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 106.785904][ T4238] usb 3-1: config 66 has 1 interface, different from the descriptor's value: 2 [ 106.807374][ T4238] usb 3-1: config 66 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 106.845947][ T4238] usb 3-1: config 66 interface 0 has no altsetting 0 [ 106.868614][ T23] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 107.018943][ T4238] usb 3-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 107.042354][ T4238] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.083134][ T4238] usb 3-1: Product: syz [ 107.087450][ T4238] usb 3-1: Manufacturer: syz [ 107.092545][ T4238] usb 3-1: SerialNumber: syz [ 107.264984][ T4855] tipc: Enabled bearer , priority 0 [ 107.272887][ T4855] device syzkaller0 entered promiscuous mode [ 107.293584][ T4855] tipc: Resetting bearer [ 107.304249][ T4854] tipc: Resetting bearer [ 107.309409][ T23] usb 4-1: config 8 has an invalid interface number: 137 but max is 0 [ 107.318353][ T23] usb 4-1: config 8 has no interface number 0 [ 107.341682][ T4854] tipc: Disabling bearer [ 107.436368][ T4238] ati_remote2 3-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 107.467205][ T4238] usb 3-1: USB disconnect, device number 7 [ 107.624328][ T23] usb 4-1: string descriptor 0 read error: -22 [ 107.647917][ T23] usb 4-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=14.6e [ 107.652051][ T1327] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 107.658845][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.726685][ T23] ttusb_dec_send_command: command bulk message failed: error -22 [ 107.755656][ T23] ttusb-dec: probe of 4-1:8.137 failed with error -22 [ 107.908675][ T1327] usb 1-1: Using ep0 maxpacket: 32 [ 107.931695][ T4845] syz.3.181 sent an empty control message without MSG_MORE. [ 107.966370][ T4871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.191'. [ 107.968964][ T4180] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 108.020910][ T4274] usb 4-1: USB disconnect, device number 5 [ 108.029136][ T1327] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.058327][ T4871] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.089705][ T1327] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.109545][ T1327] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 108.127731][ T1327] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.177008][ T1327] usb 1-1: config 0 descriptor?? [ 108.278577][ T4180] usb 5-1: Using ep0 maxpacket: 16 [ 108.718854][ T1327] usbhid 1-1:0.0: can't add hid device: -71 [ 108.725095][ T1327] usbhid: probe of 1-1:0.0 failed with error -71 [ 108.771717][ T1327] usb 1-1: USB disconnect, device number 6 [ 109.148884][ T4180] usb 5-1: unable to get BOS descriptor or descriptor too short [ 109.156629][ T4180] usb 5-1: no configurations [ 109.166782][ T4180] usb 5-1: can't read configurations, error -22 [ 109.284670][ T4893] tipc: Enabled bearer , priority 0 [ 109.304261][ T4893] device syzkaller0 entered promiscuous mode [ 109.339421][ T4893] tipc: Resetting bearer [ 109.360752][ T4891] tipc: Resetting bearer [ 109.405915][ T4891] tipc: Disabling bearer [ 109.627761][ T4900] block device autoloading is deprecated and will be removed. [ 109.848658][ T4274] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 109.868335][ T4894] netlink: 48 bytes leftover after parsing attributes in process `syz.1.199'. [ 110.069042][ T4906] Set syz0 is full, maxelem 0 reached [ 110.248842][ T4274] usb 1-1: unable to get BOS descriptor or descriptor too short [ 110.306618][ T4912] netlink: 'syz.4.207': attribute type 10 has an invalid length. [ 110.338786][ T4274] usb 1-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 110.368613][ T4274] usb 1-1: config 66 has 1 interface, different from the descriptor's value: 2 [ 110.397747][ T4274] usb 1-1: config 66 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 110.418689][ T4237] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 110.436428][ T4274] usb 1-1: config 66 interface 0 has no altsetting 0 [ 110.558888][ T4918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.210'. [ 110.628908][ T4274] usb 1-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 110.654368][ T4274] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.686867][ T4274] usb 1-1: Product: syz [ 110.697012][ T4274] usb 1-1: Manufacturer: syz [ 110.707032][ T4274] usb 1-1: SerialNumber: syz [ 110.741672][ T4922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 110.791119][ T4237] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 110.803314][ T4237] usb 2-1: config 0 has no interface number 0 [ 110.820205][ T4237] usb 2-1: config 0 interface 41 has no altsetting 0 [ 110.859694][ T4929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.215'. [ 110.922618][ T4934] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 110.988967][ T4237] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 111.031798][ T4237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.048683][ T4237] usb 2-1: Product: syz [ 111.060025][ T4274] ati_remote2 1-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 111.070596][ T4237] usb 2-1: Manufacturer: syz [ 111.156682][ T4274] usb 1-1: USB disconnect, device number 7 [ 111.181881][ T4237] usb 2-1: SerialNumber: syz [ 111.182344][ T4206] Bluetooth: hci4: unexpected event for opcode 0x2039 [ 111.200248][ T4940] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 111.209371][ T4237] usb 2-1: config 0 descriptor?? [ 112.760989][ T4908] netlink: 36 bytes leftover after parsing attributes in process `syz.1.206'. [ 113.529405][ T1327] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 113.819379][ T4976] device syzkaller0 entered promiscuous mode [ 113.953809][ T1327] usb 4-1: unable to get BOS descriptor or descriptor too short [ 114.064381][ T1327] usb 4-1: config 1 has an invalid interface descriptor of length 8, skipping [ 114.095749][ T1327] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.117398][ T1327] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.138770][ T1327] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 128, using maximum allowed: 30 [ 114.177488][ T1327] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 114.359750][ T1327] usb 4-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 114.379258][ T1327] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.387338][ T1327] usb 4-1: Product: syz [ 114.424282][ T1327] usb 4-1: Manufacturer: syz [ 114.436474][ T1327] usb 4-1: SerialNumber: syz [ 114.692101][ T4974] udc-core: couldn't find an available UDC or it's busy [ 114.709646][ T4974] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 114.759223][ T4995] tipc: Enabled bearer , priority 0 [ 114.777671][ T4995] device syzkaller0 entered promiscuous mode [ 114.814875][ T4995] tipc: Resetting bearer [ 114.825499][ T4993] tipc: Resetting bearer [ 114.877747][ T4993] tipc: Disabling bearer [ 114.907367][ T4999] device syzkaller0 entered promiscuous mode [ 114.994211][ T1327] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 115.036949][ T1327] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 115.056078][ T1327] usb 4-1: USB disconnect, device number 6 [ 115.289495][ T4618] udevd[4618]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.505898][ T5008] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 115.541361][ T5008] tipc: Enabled bearer , priority 10 [ 116.660662][ T4180] tipc: Node number set to 1882202521 [ 116.759234][ T5023] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 116.850964][ T5015] syz.2.243 (5015): drop_caches: 3 [ 117.308906][ T5031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.247'. [ 117.318668][ T23] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 117.578830][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 117.698779][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.739642][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.778674][ T23] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 117.803289][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.848709][ T23] usb 3-1: config 0 descriptor?? [ 118.152614][ T4237] CoreChips: probe of 2-1:0.41 failed with error -110 [ 118.352033][ T23] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 118.373129][ T23] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 118.411223][ T23] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 118.437231][ T23] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 118.551026][ T5029] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 118.562785][ T5029] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 118.571281][ T5029] CPU: 1 PID: 5029 Comm: syz.2.246 Not tainted syzkaller #0 [ 118.578662][ T5029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 118.588727][ T5029] RIP: 0010:mcp_smbus_xfer+0x59/0x1070 [ 118.594207][ T5029] Code: c3 a8 01 00 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 66 9d 55 fa 48 8b 1b 48 89 d8 48 c1 e8 03 48 89 44 24 08 <42> 80 3c 38 00 74 08 48 89 df e8 48 9d 55 fa 4c 8b 3b 4d 8d a7 70 [ 118.613819][ T5029] RSP: 0018:ffffc900034879a0 EFLAGS: 00010246 [ 118.619899][ T5029] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 118.627887][ T5029] RDX: ffffc90005e31000 RSI: 0000000000000bc9 RDI: 0000000000000bca [ 118.635860][ T5029] RBP: 0000000000000010 R08: 0000000000000010 R09: 0000000000000002 [ 118.643829][ T5029] R10: dffffc0000000000 R11: fffffbfff1b13f06 R12: dffffc0000000000 [ 118.651815][ T5029] R13: 0000000000000000 R14: 0000000000000002 R15: dffffc0000000000 [ 118.660006][ T5029] FS: 00007f509e05d6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 118.668953][ T5029] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 118.675560][ T5029] CR2: 0000001b32e1dff8 CR3: 000000007700a000 CR4: 00000000003526e0 [ 118.683562][ T5029] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 118.691534][ T5029] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 118.699509][ T5029] Call Trace: [ 118.702799][ T5029] [ 118.705751][ T5029] __i2c_smbus_xfer+0x7b4/0x1dc0 [ 118.710704][ T5029] ? mcp_i2c_xfer+0x420/0x420 [ 118.715574][ T5029] ? i2c_smbus_write_i2c_block_data+0x1d0/0x1d0 [ 118.721871][ T5029] ? rt_mutex_lock_nested+0x1a4/0x210 [ 118.727279][ T5029] ? i2c_smbus_xfer+0x120/0x3b0 [ 118.732146][ T5029] ? rwsem_down_read_slowpath+0x9d0/0x9d0 [ 118.737891][ T5029] ? __might_fault+0xb7/0x110 [ 118.742591][ T5029] i2c_smbus_xfer+0x272/0x3b0 [ 118.747288][ T5029] ? i2c_smbus_read_byte+0x1d0/0x1d0 [ 118.752586][ T5029] ? __might_fault+0xb3/0x110 [ 118.757286][ T5029] i2cdev_ioctl_smbus+0x432/0x680 [ 118.762330][ T5029] ? i2cdev_ioctl_rdwr+0x6d0/0x6d0 [ 118.767457][ T5029] ? __might_fault+0xb3/0x110 [ 118.772146][ T5029] ? _copy_from_user+0x111/0x170 [ 118.777106][ T5029] i2cdev_ioctl+0x583/0x7b0 [ 118.781622][ T5029] ? i2cdev_write+0x120/0x120 [ 118.786317][ T5029] ? bpf_lsm_file_ioctl+0x5/0x10 [ 118.791273][ T5029] ? security_file_ioctl+0x7c/0xa0 [ 118.796404][ T5029] ? i2cdev_write+0x120/0x120 [ 118.801090][ T5029] __se_sys_ioctl+0xfa/0x170 [ 118.805703][ T5029] do_syscall_64+0x4c/0xa0 [ 118.810134][ T5029] ? clear_bhb_loop+0x30/0x80 [ 118.814835][ T5029] ? clear_bhb_loop+0x30/0x80 [ 118.819525][ T5029] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 118.825433][ T5029] RIP: 0033:0x7f509fe03e59 [ 118.829866][ T5029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.849485][ T5029] RSP: 002b:00007f509e05d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.857909][ T5029] RAX: ffffffffffffffda RBX: 00007f50a007cfa0 RCX: 00007f509fe03e59 [ 118.865889][ T5029] RDX: 0000200000000280 RSI: 0000000000000720 RDI: 0000000000000005 [ 118.873869][ T5029] RBP: 00007f509fe99d6f R08: 0000000000000000 R09: 0000000000000000 [ 118.881850][ T5029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.889835][ T5029] R13: 00007f50a007d038 R14: 00007f50a007cfa0 R15: 00007ffd7fc6f3f8 [ 118.897819][ T5029] [ 118.900858][ T5029] Modules linked in: [ 119.146681][ T5029] ---[ end trace f8522cdf6501030b ]--- [ 119.152711][ T5029] RIP: 0010:mcp_smbus_xfer+0x59/0x1070 [ 119.162785][ T5029] Code: c3 a8 01 00 00 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 66 9d 55 fa 48 8b 1b 48 89 d8 48 c1 e8 03 48 89 44 24 08 <42> 80 3c 38 00 74 08 48 89 df e8 48 9d 55 fa 4c 8b 3b 4d 8d a7 70 [ 119.217591][ T5029] RSP: 0018:ffffc900034879a0 EFLAGS: 00010246 [ 119.226175][ T13] usb 2-1: USB disconnect, device number 6 [ 119.248000][ T5029] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 119.283596][ T5051] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 119.287293][ T5029] RDX: ffffc90005e31000 RSI: 0000000000000bc9 RDI: 0000000000000bca [ 119.332741][ T5029] RBP: 0000000000000010 R08: 0000000000000010 R09: 0000000000000002 [ 119.364956][ T5029] R10: dffffc0000000000 R11: fffffbfff1b13f06 R12: dffffc0000000000 [ 119.394165][ T5029] R13: 0000000000000000 R14: 0000000000000002 R15: dffffc0000000000 [ 119.419745][ T5029] FS: 00007f509e05d6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 119.432991][ T5029] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.442113][ T5029] CR2: 00007f97f635d2f8 CR3: 000000007700a000 CR4: 00000000003506f0 [ 119.450499][ T5029] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 119.460777][ T5029] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 119.469283][ T5029] Kernel panic - not syncing: Fatal exception [ 119.475713][ T5029] Kernel Offset: disabled [ 119.480095][ T5029] Rebooting in 86400 seconds..