last executing test programs: 11.63208373s ago: executing program 3 (id=7): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000240)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) semget$private(0x0, 0x5, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) recvmmsg(r0, &(0x7f0000006100), 0x0, 0x10100, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) 11.447784236s ago: executing program 4 (id=5): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x3fe, 0x0, 0x2, 0x0, 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x7, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa1c92000) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r2 = openat$sw_sync_info(0xffffff9c, &(0x7f00000000c0), 0x155001, 0x0) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000080)="268292", 0xff95}], 0x1) syz_open_dev$sndctrl(&(0x7f0000000d40), 0x2, 0x800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$SNDRV_TIMER_IOCTL_CREATE(r2, 0xc02054a5, 0x0) fchmodat(0xffffffffffffffff, 0x0, 0xffffffa2) r3 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x0, 0x5c, 0x160, 0x134, 0x3e0, 0x240, 0x228, 0x25a, 0x240, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [0x0, 0xffffff00], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xec, 0x134, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x24}, {0x0, "d176"}}, @common=@unspec=@state={{0x24}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2={0xfc, 0x2, '\x00', 0x4}, [0x0, 0x0, 0xff000000], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x364) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20000004) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r3) r4 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) getegid() preadv2(r4, 0x0, 0x0, 0x2, 0x10000, 0x11) lseek(r4, 0x7, 0x3) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000180)="81dafa5ddc815ded8a30f5d9db3373055c8959213e2c75b591d3c2409e21bd616aeddf96616914c80a33ff8bcdccac280568cfc48324ae8b50b32b62685dc734e2385a093c22b1d5b357fbc5231e1a758a3f4c60f375abdaafcd35b93fceb1a0a9d955084f987d5f919de9783f1ce0b2fd575e482994955fb178adfd3b4fbe0f151115f3f1ecbbc902216b752fa1d2", 0x8f}, {&(0x7f0000000440)="1991fedc54a616f95223c5c4458141c2e407733bfb3cb28cf99538e77dd678b7b11160c5d5348edec508162b3bb5816a310ec4a1334347d88674858ddbe6609eea9e5f6ce7fec43bfbedfae33254a0faddf9ceee9b95bf05fd398ed56acbe1011845bf7f049ae7ee288c08af0c0ff796700a3138a9a7941f0b9a7a5f7aeb22334e5e685855c21932b2570945c581edf7cc61bd28ed55482d93a37a7056a75102a3bfbaf7514de993dc96983b", 0xac}], 0x2) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={0x0}, 0x1, 0x0, 0x0, 0xc081}, 0xc010) r5 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) ioctl$VIDIOC_S_OUTPUT(r5, 0xc004562f, &(0x7f0000000000)=0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x434, 0x2dc, 0xc4, 0x1a8, 0x2dc, 0x0, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x6, &(0x7f00000005c0), {[{{@uncond, 0x0, 0x94, 0xc4, 0x0, {}, [@common=@icmp={{0x24}, {0x8, "df47", 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x80, 0x0, @multicast2, 0x4e22}}}, {{@uncond, 0x0, 0xc0, 0xe4, 0x0, {}, [@common=@unspec=@realm={{0x2c}, {0xee25, 0x6807, 0x1}}, @common=@ttl={{0x24}, {0x3, 0x7}}]}, @ECN={0x24, 'ECN\x00', 0x0, {0x18, 0x8, 0x1}}}, {{@ip={@private=0xa010102, @remote, 0xffffffff, 0xff000000, 'vlan1\x00', 'ipvlan1\x00', {}, {}, 0x8, 0x1}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xff, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22}}}, {{@ip={@local, @broadcast, 0xffffffff, 0x0, 'bond_slave_0\x00', 'bond_slave_1\x00', {}, {0xff}, 0x4, 0x6, 0x4}, 0x0, 0x70, 0x94}, @inet=@DSCP={0x24, 'DSCP\x00', 0x0, {0x29}}}, {{@ip={@private=0xa010102, @multicast1, 0xffffff00, 0xff000000, 'netpci0\x00', 'pim6reg0\x00', {0xff}, {}, 0xffb95638b137cf04, 0x1, 0x42}, 0x0, 0x9c, 0xc4, 0x0, {}, [@common=@addrtype={{0x2c}, {0xd25, 0x246, 0x0, 0x1}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x2, 0x2}, {0x0, 0x0, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x490) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000001100)={0x0, @bt={0x500, 0x2d0, 0x1, 0x280000, 0xdd9f83, 0x1, 0x9, 0x1d, 0x2, 0x4, 0x722, 0x13, 0x7, 0x7f, 0x37, 0xb763599953cb093c, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8400000000000000}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x20008844) 11.30298991s ago: executing program 0 (id=8): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = memfd_create(&(0x7f0000000b40)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\xbd/\xd0J\xce=\x924\xc0\x17\x871N:\xb4\xea \x8e\xdelV\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8H\x7fsk\x9cD\xb3w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N', 0x6) fcntl$addseals(r2, 0x409, 0x27) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$FIOCLEX(r1, 0x5451) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000002c0)="69fcc5d5", 0x4}], 0x1) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000180)="0f0948b8c90e0000000000000f23c00f21f835030006000f23f8c42202f5ccb92b020000b89b000000ba000000000f30660fc7b500c000008f0868eeee006766480f7e7b962e0f009815e40000f30f1efab805000000b9ab1100000f01c1", 0x5e}], 0x1, 0x4a, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x15) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x7c1}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}, 0x2}) madvise(&(0x7f0000967000/0x1000)=nil, 0x1000, 0x15) mq_timedreceive(r5, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) timer_settime(r4, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000100)) ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xfffffffffffffffe, 0x1f8, 0x2, 0xffffffffefffff19, 0x3, 0x567, 0x401, 0xe4]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10.654989891s ago: executing program 3 (id=9): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbb67960a2a35d3597b4500002800000000000690780a0101"], 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone3(&(0x7f0000001540)={0x300002c00, 0x0, 0x0, &(0x7f00000013c0), {0x6}, &(0x7f0000001400)=""/207, 0xcf, &(0x7f0000001600)=""/216, &(0x7f0000001500)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x5}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0xf, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa14, 0x7612}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff) r6 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) write$apparmor_current(r6, &(0x7f0000001940)=ANY=[@ANYBLOB='chajgehat 0x000000\x00'/33], 0x21) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r7, 0x25, &(0x7f0000002380)) preadv(r7, &(0x7f0000001e80)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 9.580261165s ago: executing program 4 (id=11): socket$inet6(0xa, 0x1, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b5"], 0xc8) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f03f, 0x6e}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x34, 0x71, 0x10, 0x33}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x5c}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140), &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x1, 0x0, 0x337740ff}, {0x6, 0x1, 0x12, 0xffffffff}]}, 0x8) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x42901, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x20}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB], 0xfdef) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 9.310662894s ago: executing program 2 (id=13): openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x2d) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket(0x1000000010, 0x80002, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4cc, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x404, 0x3d8, 0x3d8, 0x404, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x3f, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@loopback, @private0, [0x0, 0x0, 0xffffff, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'veth0_to_team\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x1, 0xc, 0x0, 'syz1\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x528) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x8, 0xffff, 0x3fd, 0x0, 0xb2, 0x2, 0x6}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x2) syz_usb_connect(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040001000010000904b8070259d1ca000905060200020d00060905820200020d320ca0dd6ca2e0f78c14008db45e3f86e911489248b400660ceb55"], 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000010000), 0x20080, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r4, 0x400454d1, &(0x7f00000000c0)={0x0, 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000140)={'vlan1\x00', 0x200}) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000080)={0x4, r6, 0x2c, {0x6, 0xd377}, 0x43}, 0x1) ioctl$USBDEVFS_CONTROL(r6, 0xc0105500, &(0x7f00000003c0)={0x80, 0xa, 0x1, 0x9, 0x0, 0x7, 0x0}) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) write$dsp(r7, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) 9.204265377s ago: executing program 4 (id=14): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0d01000009"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r1) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000000040)={0x40, 0x1, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044085}, 0x8004) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000010000000000fedbdf25070000001300000008000000", @ANYRES32, @ANYBLOB="10001a80080002000100000004002d"], 0x30}], 0x1}, 0x0) r3 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0xe41, 0x5058, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x87, 0x10, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x6}}}}}]}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000), 0x6, 0x1016c1) ioctl$VIDIOC_G_FMT(r5, 0xc0cc5604, &(0x7f0000000280)={0x5, @vbi={0x8e1d, 0x1, 0x3, 0x20323159, [0x5, 0x3], [0x1, 0x5], 0x1}}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0xb, &(0x7f0000002a80)) fchmod(r9, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0xfff2, 0x7}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x26044028}, 0x0) syz_emit_ethernet(0x98, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x9, 0x6, "140080", 0x62, 0x2f, 0x100, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x16, 0x0, [0x8], "9663314781836769bd12b544a7da8401a03ebca6acd0"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x7, 0x8, 0x1]}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x104, {{0x6, 0x1, 0x2c, 0x0, 0x1, 0x3, 0x7, 0xfb}, 0x1, {0x7f}}}, {0x8, 0x22eb, 0x1, {{0x9, 0x2, 0x1, 0x3, 0x0, 0x2, 0x4, 0x9}, 0x2, {0x8, 0xc1, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}}, 0x0) syz_usb_control_io$rtl8150(r3, &(0x7f00000004c0)={0xc, &(0x7f0000000380)={0x0, 0xc, 0xb7, {0xb7, 0xc, "6e74ffcf823dbc36c095c3588d11c241f294d54f63b1df440f14ca5b119f7d48f745ea170b1cf8b68c493512d67777d1d819be216301321717788dcf7ab2c46e90c143ed3d8380a30d9ce105ff3cfdaebcc50e9f79c4ea890809eee329bb45ff11f6264191f338e995531c92866f000d6ad9b4eaa958c9f4d60c30fd29947e160cbb50a919b309ea7216ed432dfdac279c4431acf5b986ee6d42093cb603e3998dab8c5b369bd40691ce5f622e03ab5604279859bf"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180a}}}, &(0x7f0000000800)={0x18, &(0x7f0000000600)={0x40, 0x5, 0xbc, "1a49062c8c77eb0362cd7d5ee8ff9c0a106ab69fbe261e2291fa942fb058a210f70ce9100e4cb97ceee248c109f75a7c469623dfd9910025c60a4e2598676935d932580b443f8d75881e7a85257998180cedfcca89c6c22a007ddb051fcd71b8c05633b4929e003e606e8ff5068aa7965f8ddaabf01f9473892696978ff7dadf783c7d404f8a23dfb951321d72e0728c5b1b4d3a81b0dc2a0df761b16c9fdab356010c82497f7b7d97c0892baebe35ce4dc69b9e15edd9be20201e5b"}, &(0x7f0000000700)={0x0, 0xa, 0x1}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x69}, &(0x7f0000000780), &(0x7f00000007c0)}) 8.807367639s ago: executing program 3 (id=16): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000003c0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 7.895618729s ago: executing program 0 (id=17): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x403, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) 6.959196299s ago: executing program 0 (id=18): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000000)=0x40000008, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x6}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) unshare(0xe060400) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/time_for_children\x00') fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, 0x0) r1 = gettid() clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) rt_sigqueueinfo(r1, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000100)={0x40000000, 0x100, "2712db36f3c964c0cdd68849d8e85f0130b1fb723f0eb00fc8a12fd500025269", 0x0, 0xfffffffffffffffb, 0x4a10875b, 0x0, 0x0, 0xf, 0x7fff, 0x5, [0x0, 0x9, 0x7, 0x9ae]}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000080)={0x1, @pix_mp={0x97, 0x8, 0x47314356, 0x33565348, 0x3, [{0x9, 0x9}, {0x5, 0x7f75}, {0x0, 0x2001}, {0x89d, 0x2b5}, {0x7, 0x2}, {0x80000001, 0x200}, {0xffffff01, 0x8000}, {0x1, 0x4}], 0x8, 0x8, 0x8, 0x0, 0x7}}) 6.758017885s ago: executing program 0 (id=20): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x1c, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f00000006c0)={0x40, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 6.315586429s ago: executing program 1 (id=21): unshare(0x68040200) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@ipv6_deladdrlabel={0x38, 0x48, 0x20, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2}, [@IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @IFAL_LABEL={0x8, 0x2, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4004000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x84080000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x0, 0x7, 0x6fa4c6f3995bc2f2, 0x0, 0x0, {0x5}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0xc000) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f00000001c0)={0x1, 0x0, [{0x1, 0x40, 0x4, 0x8, 0xd6a, 0xffffffff, 0x10000}]}) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x49323de44ee88a26, 0x0, 0x49, 0x1, 0x7, 0x4, 0xe, 0x0, 0x0, 0xb2, 0x2}, {0xf000, 0xdddd0000, 0x4, 0x5, 0xbb, 0x5, 0x38, 0x8, 0x7, 0xfd, 0xd9, 0x2}, {0xeeef0000, 0x26000, 0xd, 0xe4, 0x3, 0xd, 0x6, 0x9, 0x0, 0x5, 0x42, 0xa}, {0x0, 0x8000000, 0xc, 0x9, 0x44, 0xcb, 0x5, 0x9, 0x40, 0x9, 0x0, 0x5}, {0xffff1000, 0x2000, 0xb, 0x7, 0xe, 0x2, 0x6, 0x8f, 0x1, 0xd, 0x5, 0x1}, {0x80a0001, 0x80a0000, 0xb, 0x5, 0x61, 0x18, 0x7, 0xfc, 0xc, 0x9, 0x6, 0x4}, {0x7002, 0xeeee0000, 0x1b, 0xff, 0xbc, 0x80, 0x1, 0x4, 0x5, 0x0, 0xbf, 0x9}, {0x8000000, 0x2000, 0xf, 0x3, 0x4, 0x6, 0x9, 0xfa, 0x7, 0xc6, 0x0, 0x81}, {0xf000, 0x3}, {0x15000, 0x8}, 0x14, 0x0, 0xeeee8000, 0x40020, 0x0, 0x4801, 0x33339800, [0x9, 0x1ff, 0x86d, 0x8001]}) syz_usb_control_io(r1, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="402c040000000ed816f3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) sendmsg$tipc(r8, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r9 = dup3(r7, r8, 0x0) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r9, 0x10f, 0x88) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'sit0\x00', 0x4}, 0x18) 6.156114644s ago: executing program 4 (id=22): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}]}, &(0x7f00000002c0)=0xc) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={r2, 0x1, 0xe35}, &(0x7f0000000180)=0x8) 6.049269188s ago: executing program 4 (id=23): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x24, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.743684167s ago: executing program 2 (id=24): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) 4.532483686s ago: executing program 3 (id=25): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000001c0)={0x24, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.979102313s ago: executing program 2 (id=26): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x94}}, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000200)=@req={0x28, &(0x7f00000001c0)={'macsec0\x00', @ifru_mtu=0xfffffffc}}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xfffffffc) r5 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_clone(0x1300211, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000080)={[0x5]}, 0x8) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=r0, @ANYBLOB="8eb0e3fa4ae4a6f0a836f19bd20f8bc6829cd746fb5099d3785bdf88cf0a5e0615c679f8d3a31e842d6741b3049c1888fccffc26e07d018f29447a253c0e0331fe"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300000200000000fbdbdf257f000001000000000000000000000000fe8000000000000000000000000000aa", @ANYRESDEC=r9, @ANYRES32=0xee01, @ANYBLOB="000019000000000004000000000000000000004000000000000000fdffffffffffffff02000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000426676b800000900000000000040000105df28a5267d39c7a19623ba28d34ef829ea15c42bf3ce55e9fc301400beaa43438c"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) 3.656175504s ago: executing program 1 (id=27): creat(0x0, 0x1) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000180)=0x2, 0x4) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001640)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x68, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, {[@rr={0x7, 0x3, 0x1f}]}}, {0x4e20, 0x4e20, 0x50, 0x0, @gue={{0x1, 0x0, 0x3, 0xe4, 0x0, @void}, "238e0c5f2dc26dd30ea88dfaac3df5fccdca524421ba58859cc962952d81ec59917086c22f91c0061dca507ba1eba2eaf327a76823fd739c93079345a53e4fcd0bba31e3"}}}}, 0x76) 3.303470945s ago: executing program 1 (id=28): socket(0x10, 0x3, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) mknodat(0xffffffffffffff9c, 0x0, 0x8000, 0x103) socket$kcm(0x11, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) r1 = socket$inet6(0x10, 0x3, 0x0) memfd_create(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x40}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x510}]}, 0x34}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 2.985062435s ago: executing program 0 (id=29): inotify_init1(0x0) rt_sigprocmask(0x0, &(0x7f0000000080)={[0xffffffff]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0xb, &(0x7f0000000480)={0x0, 0x0, 0x3}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000009, 0x31, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) ptrace$poke(0x5, r2, 0x0, 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fchdir(0xffffffffffffffff) r3 = inotify_init() r4 = inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x80000006) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r5, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x7f00, @in={0x2, 0x4e23, @empty}}}, 0x90) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r6, 0x0, 0x60, 0x0, &(0x7f0000000480)=0x44) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000019300), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000019340)={'wlan1\x00', 0x0}) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="3b08040420000700000000001671f2a90000ffffe0000002fe880000000000000000000000000001fc010000000000000000000000000001200100"/70], 0x48) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f000001a6c0)={0x0, 0x0, &(0x7f000001a680)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r8, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64=r9, @ANYBLOB="240023c0060003004d00020006000a00008000495a779900115519b8331a013379e718b02e80ed986bc319fd9a70e2598a3b47bc1e5a58e21e23306c5d8cffef1c6d57fc05d20cce3b2b9be928b4e8b0ab920a4c42b82082cb6fe434ce2ed99ece711c1c819b6857b80000a5e7d06388f8d540223eeaca22", @ANYBLOB="a1f78d124b043a0cba52ce882c17ea8669bae92bd1ac15257c1a049d949907eea9b22c6e456bb38e07b5e2c655256ee5456f569d8600986192a286bbb1bb2f1f27976ff727b9d6234ef76439", @ANYRESHEX=r4], 0x48}, 0x1, 0x0, 0x0, 0x200000c0}, 0x480c0) 2.946876646s ago: executing program 4 (id=30): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0xb, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d81cd4a524bd3ffe70c7f3f04002f7b6aa54cc50a1fcaed1e15ee3748", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}}) r0 = syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f010008000000000000000424020009058103"], 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[], 0x0) 2.899461008s ago: executing program 2 (id=31): keyctl$dh_compute(0x17, 0x0, 0x0, 0x1, &(0x7f0000000080)={&(0x7f0000000040)={'sha256\x00'}}) ioctl$VIDIOC_ENUMAUDIO(0xffffffffffffffff, 0xc0345641, &(0x7f0000000080)={0x8, "b5ed0423753b6a03af25124a57ce9ad88d2556119a9a3d48e0cc1f7d25e249d7", 0x1, 0x1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000580)="240000001e005f031400ff01000000f80700", 0x12) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000003c0)={@mcast1, 0x0, 0x0, 0x2, 0x1, 0x5, 0xb}, 0x20) sched_setattr(0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR2(r5, 0xc02464bb, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r6, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000040)={0x1, 0x8, 0x2, 0x8, 0x7, 0x5, 0x3, 0x0, 0x2, 0x5, 0x36, 0x2, 0x5}, 0xe) close_range(r7, 0xffffffffffffffff, 0x0) 2.609232667s ago: executing program 0 (id=32): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000380)={&(0x7f0000000200)=[{0x1e, 0x0, 0x1, &(0x7f0000000100)='C'}, {0x0, 0x6000, 0x0, 0x0}], 0x2}) 1.169472823s ago: executing program 2 (id=33): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="30000000200025a729bd7000fddbdf250a0000cdfe0000010200010008000600fe7f00000c0014"], 0x30}, 0x1, 0x0, 0x0, 0x20008005}, 0x44) r1 = syz_open_dev$radio(&(0x7f0000000b80), 0x0, 0x2) ioctl$VIDIOC_S_TUNER(r1, 0x4054561e, &(0x7f0000000bc0)={0x0, "cd48b8ad5516b3851ea8a13d68eb4d6d7d86d64a7263cc6b7e157fff84922c04", 0x1, 0x4, 0x108c, 0x2, 0x4, 0x2, 0x3, 0x2b}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000140)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[], 0x48}}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = openat$vicodec0(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000280)={0x0, 0x0, 0x2}) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r8 = socket$unix(0x1, 0x2, 0x0) connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r8, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x53fe0) ppoll(&(0x7f0000000300)=[{r8, 0x202}], 0x1, 0x0, 0x0, 0x0) connect$unix(r8, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r11 = socket(0x1d, 0x2, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r11, &(0x7f0000000380)={0x1d, r12, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) bind$can_j1939(r9, &(0x7f0000000100)={0x1d, r10, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 457.586446ms ago: executing program 3 (id=34): socket$inet6(0xa, 0x1, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r0, 0x0, 0xc8) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f03f, 0x6e}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x34, 0x71, 0x10, 0x33}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, r5, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x1, 0x0, 0x337740ff}, {0x6, 0x1, 0x12, 0xffffffff}]}, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0xfff5, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x20}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1886c301}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvtap0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc4}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) 365.981869ms ago: executing program 3 (id=35): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800000000003600e1208000f0000000406a80016c008", 0x35}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0x4, 0x3}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49ccadc2a07460e46e35eabfb48a4cd9cd83790d7e705b010000000900010073797a31000000001c000000090a03000000"], 0xf8}}, 0x20044900) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000340)=0x1) close(r6) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0xee01, 0xee01}}, './file0\x00'}) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x14, &(0x7f00000002c0)={0x40, 0x21, 0x33, {0x33, 0x22, "29ffee7cc9cef8fd2a6c0ae211c0d05f73d4308a324060e6f8cf9a6f9a6376a9e786f626ed536adf37e30448b71df6e188"}}, &(0x7f0000000300)={0x0, 0x3, 0x5c, @string={0x5c, 0x3, "911dc7c5fec3213589681796d596a1e14bb80ec56a9dafd3176a6ad46229b7311a86251d91a559319a490d0f9c4aa9103713730b1c6a95e4e7eff48c69deee0e34b2d7838a0511877accc8b9ed81d476b7f21e9a43f5aa3ba907"}}, &(0x7f0000000380)={0x0, 0x22, 0x18, {[@main=@item_012={0x2, 0x0, 0xa, "3fcd"}, @global=@item_012={0x0, 0x1, 0x3}, @local=@item_4={0x3, 0x2, 0x3, "8835078c"}, @local=@item_4={0x3, 0x2, 0x0, "9339c76f"}, @main=@item_4={0x3, 0x0, 0xa, "770ec2f9"}, @main=@item_4={0x3, 0x0, 0x9, "0a852bbf"}]}}, &(0x7f00000003c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0xff, 0x1, {0x22, 0x837}}}}, &(0x7f0000000740)={0x18, &(0x7f0000000480)={0x20, 0xb, 0x48, "fa6fa4cf97c43f3ed88ba050948fb7b7095e3c9ba6903c998519f9ebcebab0f2b4120017173d810a28c5602a9f2adcbc5b9bb3686bf2cf5945592308c347fe371749f9ae605db08c"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000600)=ANY=[@ANYBLOB="2001ed000000271f0fd32fced6b53c14eb509b5389c40e303bf316e00abd5dcdf07b0014cd18bb60d1109b49bf15a4048019dd75e315303341a915d389094a0e12eaaec8c5fa69a767e02236495a4b03811e18fcd5a1b89b910038ee70e418fd78aaf9544a43028fdbc79c6aa88263dadf973246dfce4a8dc4e5c8f87f7548d52699961f123c7fca2398471b9785062ad03d83ae7aa7a38fc2d4f1294cf2715708d5652d77ec219d99487ce97bebf8025fe5627ec46579567287a6c597b597fec7fa8b3b40099fb92b951a461f02cfd5b0a252ec112318d3841edffffc51c20beb3d715eab247f455b50ba31e6"], &(0x7f0000000700)={0x20, 0x3, 0x1, 0x2}}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x2, @mcast1}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x9596, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80008}, 0x1c) 322.13667ms ago: executing program 1 (id=36): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xe01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000000c0)=@x86={0x5, 0xc, 0xc9, 0x0, 0x7, 0x3, 0x81, 0x43, 0x3, 0x2, 0x0, 0x0, 0x0, 0x7, 0x6, 0x5, 0x4, 0x5, 0x3, '\x00', 0x0, 0x56}) 240.513812ms ago: executing program 2 (id=37): socket$inet6(0xa, 0x805, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x3457, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) 140.830016ms ago: executing program 1 (id=38): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x2, 0x5, 0x0, 0x3, 0x2, 0x2, 0xfffffffffffffffd], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000400)=@x86={0x7f, 0xd, 0x0, 0x0, 0xe284, 0x4, 0x7, 0x3, 0x7c, 0x1, 0x5, 0x6, 0x0, 0x9, 0x7, 0x6, 0x3, 0x93, 0x3, '\x00', 0x6b, 0xfffffffffffffff9}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x8080000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0xb000, 0xc, 0x0, 0xfc, 0x5, 0x0, 0x0, 0x3, 0x7}, {0x2000, 0xe000, 0x1f, 0xff, 0x7, 0x4, 0x4, 0xfd, 0x3, 0x0, 0x0, 0xfc}, {0x10000, 0xd000, 0xd, 0x1, 0x54, 0xfe, 0xff, 0x0, 0x8, 0xfc, 0x6, 0x10}, {0xffff1000, 0x7000, 0x10, 0x0, 0x4, 0x8, 0x0, 0x3, 0xfc, 0x3c}, {0x0, 0x0, 0xf, 0x1, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {0xfec00000, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x13, 0x0, 0x2}, {0x0, 0x3000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xca, 0x4, 0x0, 0x0, 0x3}, {0x80a0000, 0x3}, {0xdddd1000}, 0xddf8fffb, 0x0, 0x10000, 0x50, 0x0, 0xf801, 0x0, [0x80000000, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 1 (id=39): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d080220000000401296a11800024fd14172fe1a62771208000f0100810401a80016002000", 0x36}], 0x1, 0x0, 0x0, 0x7400}, 0x8000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffe0, 0xa}, {0x10, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x8001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x2, 0x2, 0x614, 0x4, 0xd, 0x7, 0x4}, 0x9c) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 32.886279][ T3854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.896748][ T3854] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.77' (ED25519) to the list of known hosts. syzkaller login: [ 49.727072][ T4175] cgroup: Unknown subsys name 'net' [ 49.864708][ T4175] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.334752][ T4175] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 52.745362][ T4199] chnl_net:caif_netlink_parms(): no params data found [ 52.815851][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 52.861382][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 52.871406][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 52.909874][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 52.952349][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.960254][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.968121][ T4199] device bridge_slave_0 entered promiscuous mode [ 53.001158][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.008246][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.016167][ T4199] device bridge_slave_1 entered promiscuous mode [ 53.062698][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.069936][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.077560][ T4195] device bridge_slave_0 entered promiscuous mode [ 53.085355][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.092600][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.101213][ T4189] device bridge_slave_0 entered promiscuous mode [ 53.114365][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.121541][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.129840][ T4189] device bridge_slave_1 entered promiscuous mode [ 53.150878][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.157958][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.165976][ T4195] device bridge_slave_1 entered promiscuous mode [ 53.175596][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.193717][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.238409][ T4199] team0: Port device team_slave_0 added [ 53.244393][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.251725][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.260433][ T4190] device bridge_slave_0 entered promiscuous mode [ 53.281635][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.292258][ T4199] team0: Port device team_slave_1 added [ 53.299521][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.308705][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.319026][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.326771][ T4190] device bridge_slave_1 entered promiscuous mode [ 53.343101][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.377648][ T4189] team0: Port device team_slave_0 added [ 53.384664][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.392276][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.400538][ T4193] device bridge_slave_0 entered promiscuous mode [ 53.409323][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.425313][ T4189] team0: Port device team_slave_1 added [ 53.443589][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.451342][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.459202][ T4193] device bridge_slave_1 entered promiscuous mode [ 53.474031][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.481328][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.507408][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.526385][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.554865][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.562132][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.588928][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.600635][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.607599][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.633770][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.646293][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.657615][ T4195] team0: Port device team_slave_0 added [ 53.670795][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.684988][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.692064][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.718016][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.731024][ T4195] team0: Port device team_slave_1 added [ 53.749160][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.795548][ T4190] team0: Port device team_slave_0 added [ 53.804133][ T4193] team0: Port device team_slave_0 added [ 53.826563][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.834080][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.860083][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.872479][ T4190] team0: Port device team_slave_1 added [ 53.878571][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.885557][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.911777][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.929351][ T4193] team0: Port device team_slave_1 added [ 53.951777][ T4199] device hsr_slave_0 entered promiscuous mode [ 53.959555][ T4199] device hsr_slave_1 entered promiscuous mode [ 53.973601][ T4189] device hsr_slave_0 entered promiscuous mode [ 53.980714][ T4189] device hsr_slave_1 entered promiscuous mode [ 53.987225][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.995560][ T4189] Cannot create hsr debugfs directory [ 54.040413][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.047389][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.073715][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.098023][ T4195] device hsr_slave_0 entered promiscuous mode [ 54.105495][ T4195] device hsr_slave_1 entered promiscuous mode [ 54.112423][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.120178][ T4195] Cannot create hsr debugfs directory [ 54.126103][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.133417][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.159608][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.171585][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.178562][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.204513][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.232847][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.240073][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.266050][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.349456][ T4190] device hsr_slave_0 entered promiscuous mode [ 54.356380][ T4190] device hsr_slave_1 entered promiscuous mode [ 54.363041][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.371175][ T4190] Cannot create hsr debugfs directory [ 54.418480][ T4193] device hsr_slave_0 entered promiscuous mode [ 54.425606][ T4193] device hsr_slave_1 entered promiscuous mode [ 54.432484][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.440354][ T4193] Cannot create hsr debugfs directory [ 54.469056][ T4202] Bluetooth: hci1: command 0x0409 tx timeout [ 54.469146][ T2369] Bluetooth: hci3: command 0x0409 tx timeout [ 54.485963][ T4202] Bluetooth: hci0: command 0x0409 tx timeout [ 54.500586][ T4202] Bluetooth: hci2: command 0x0409 tx timeout [ 54.549878][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 54.654387][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.677390][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.705410][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.719251][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.776572][ T4199] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.802927][ T4199] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.834612][ T4199] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.844190][ T4199] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.871124][ T4195] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.893305][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.903723][ T4195] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.915852][ T4195] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.927208][ T4195] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.945628][ T4193] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.966738][ T4193] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.976193][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.985088][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.001814][ T4193] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.012669][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.026717][ T4193] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.041518][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.051129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.062887][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.070160][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.078537][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.125799][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.135254][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.144310][ T151] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.151420][ T151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.160590][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.170905][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.180673][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.190382][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.201452][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.236314][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.244885][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.258799][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.267737][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.277436][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.286065][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.298121][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.310696][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.324891][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.334077][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.346877][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.463275][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.473917][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.511345][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.524452][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.550542][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.565099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.575744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.586345][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.597098][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.605946][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.625319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.633756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.643214][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.653143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.662567][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.669674][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.677484][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.698406][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.717116][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.726480][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.735769][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.745410][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.752524][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.763337][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.771048][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.778431][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.787131][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.795653][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.802756][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.813369][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.822275][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.831687][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.840167][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.847211][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.854999][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.862679][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.876666][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.886304][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.894995][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.906197][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.915754][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.941586][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.955443][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.964421][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.973286][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.980417][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.992259][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.000852][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.010046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.018366][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.025736][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.033822][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.042626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.051278][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.060128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.068432][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.075517][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.083520][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.091633][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.112096][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.121199][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.130306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.138665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.148841][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.169127][ T4199] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.179658][ T4199] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.213004][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.224955][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.234665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.244522][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.253539][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.262778][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.269889][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.278004][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.286686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.296377][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.305068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.313797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.322762][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.332471][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.341582][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.350979][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.360724][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.369953][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.378454][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.388286][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.398267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.406784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.415077][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.423069][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.443463][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.452847][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.464546][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.474153][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.482882][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.500310][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.510713][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.524437][ T4189] device veth0_vlan entered promiscuous mode [ 56.536182][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.547140][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 56.547575][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.553306][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 56.566993][ T4231] Bluetooth: hci3: command 0x041b tx timeout [ 56.573690][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 56.577345][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.590523][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.607603][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.616497][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.624811][ T4231] Bluetooth: hci4: command 0x041b tx timeout [ 56.639723][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.659322][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.675510][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.689872][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.703285][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.720143][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.739767][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.749699][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.764573][ T4189] device veth1_vlan entered promiscuous mode [ 56.785189][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.794655][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.815716][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.840182][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.848692][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.909462][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.917265][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.930596][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.943887][ T4189] device veth0_macvtap entered promiscuous mode [ 56.970288][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.989591][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.007080][ T4189] device veth1_macvtap entered promiscuous mode [ 57.039714][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.047968][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.065662][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.075679][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.084857][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.092531][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.118296][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.138584][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.147055][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.157444][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.166883][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.174715][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.184487][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.192188][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.203403][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.213111][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.225533][ T4199] device veth0_vlan entered promiscuous mode [ 57.246862][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.258183][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.269115][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.277845][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.289817][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.309458][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.319797][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.328611][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.337754][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.346941][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.356993][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.377410][ T4199] device veth1_vlan entered promiscuous mode [ 57.414437][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.425504][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.433885][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.494418][ T4195] device veth0_vlan entered promiscuous mode [ 57.503983][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.512417][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.523371][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.531802][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.540761][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.549967][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.557828][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.569460][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.578106][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.602747][ T4195] device veth1_vlan entered promiscuous mode [ 57.630855][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.642223][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.651070][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.659748][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.668124][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.677570][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.686376][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.696452][ T4193] device veth0_vlan entered promiscuous mode [ 57.724517][ T4199] device veth0_macvtap entered promiscuous mode [ 57.737422][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.748075][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.756687][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.766470][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.782247][ T4199] device veth1_macvtap entered promiscuous mode [ 57.792269][ T4193] device veth1_vlan entered promiscuous mode [ 57.804806][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.818631][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.828148][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.837243][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.845703][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.853897][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.863991][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.880229][ T4190] device veth0_vlan entered promiscuous mode [ 57.901373][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.914521][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.926248][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.939733][ T4190] device veth1_vlan entered promiscuous mode [ 57.953676][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.962192][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.964084][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.971477][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.982033][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.998758][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.007926][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.017480][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.026716][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.039626][ T4199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.050872][ T4199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.065338][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.077692][ T4199] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.088247][ T4199] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.097291][ T4199] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.106317][ T4199] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.134847][ T4195] device veth0_macvtap entered promiscuous mode [ 58.143628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.152128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.162185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.171096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.180287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.207300][ T4193] device veth0_macvtap entered promiscuous mode [ 58.237686][ T4193] device veth1_macvtap entered promiscuous mode [ 58.270992][ T4195] device veth1_macvtap entered promiscuous mode [ 58.292044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.302239][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.318069][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.327398][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.342724][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.353486][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.363656][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.374226][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.385378][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.404397][ T4190] device veth0_macvtap entered promiscuous mode [ 58.416288][ T4190] device veth1_macvtap entered promiscuous mode [ 58.429044][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.437852][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.466759][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.493419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.505412][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.516944][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.527205][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.537912][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.553830][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.578445][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.590687][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.600652][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.611794][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.622064][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.629576][ T4231] Bluetooth: hci1: command 0x040f tx timeout [ 58.633417][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.639261][ T4231] Bluetooth: hci3: command 0x040f tx timeout [ 58.650760][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.660592][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 58.667896][ T4231] Bluetooth: hci2: command 0x040f tx timeout [ 58.677478][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.679114][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.700156][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.708007][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.718116][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.718135][ T4231] Bluetooth: hci4: command 0x040f tx timeout [ 58.735130][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.745064][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.755890][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.766894][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.775610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.786152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.795383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.805603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.814722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.822925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.832666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.846454][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.855694][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.865068][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.873891][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.893966][ T4195] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.902821][ T4195] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.912545][ T4195] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.921392][ T4195] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.952393][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.964691][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.974771][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.986773][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.996878][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.007599][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.017699][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.069611][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.081654][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.119979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.128485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.142520][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.154146][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.164132][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.174601][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.185345][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.195911][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.205766][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.216237][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.236960][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.269202][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.274782][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.285038][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.297699][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.299759][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.313668][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.313717][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.333120][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.365922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.400949][ T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 59.514664][ T156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.517686][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.532994][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.541988][ T156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.567413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.577618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.650737][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.665430][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 59.666819][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.694748][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.712789][ T4249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.721876][ T4249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.727529][ T4245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.738646][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.747205][ T4245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.762662][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.778334][ T4249] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.789353][ T21] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 59.801732][ T4249] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.817787][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.975425][ T21] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 59.981944][ T4278] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 59.998952][ T21] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 60.040375][ T21] usb 2-1: Product: syz [ 60.040398][ T21] usb 2-1: Manufacturer: syz [ 60.040414][ T21] usb 2-1: SerialNumber: syz [ 60.068007][ T21] usb 2-1: config 0 descriptor?? [ 60.081181][ T4268] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 60.119521][ T21] hub 2-1:0.0: bad descriptor, ignoring hub [ 60.119579][ T21] hub: probe of 2-1:0.0 failed with error -5 [ 60.480778][ T21] usb 2-1: USB disconnect, device number 2 [ 60.709528][ T4231] Bluetooth: hci2: command 0x0419 tx timeout [ 60.718185][ T4231] Bluetooth: hci0: command 0x0419 tx timeout [ 60.738410][ T4231] Bluetooth: hci3: command 0x0419 tx timeout [ 60.771713][ T4231] Bluetooth: hci1: command 0x0419 tx timeout [ 60.810599][ T4234] Bluetooth: hci4: command 0x0419 tx timeout [ 61.162608][ T26] audit: type=1400 audit(1780998290.603:2): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=4298 comm="syz.3.9" [ 62.092870][ T4308] syz.4.11 uses obsolete (PF_INET,SOCK_PACKET) [ 62.659046][ T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 62.924819][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 62.988955][ T4264] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 63.038986][ T4270] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 63.049091][ T21] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 63.068605][ T21] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 63.086215][ T21] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 63.097735][ T21] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 63.122601][ T21] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 63.144187][ T21] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 63.173404][ T21] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 63.193104][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.215179][ T21] usb 5-1: config 0 descriptor?? [ 63.410813][ T4264] usb 2-1: config index 0 descriptor too short (expected 797, got 739) [ 63.433979][ T4264] usb 2-1: config 0 has an invalid interface number: 16 but max is 0 [ 63.468984][ T4264] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 63.493005][ T21] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 63.518610][ T4264] usb 2-1: config 0 has no interface number 0 [ 63.527873][ T21] usb 5-1: USB disconnect, device number 2 [ 63.557475][ T4264] usb 2-1: config 0 interface 16 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 63.562530][ T21] usblp0: removed [ 63.589112][ T4270] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 63.611498][ T4270] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.635695][ T4270] usb 4-1: Product: syz [ 63.652240][ T4270] usb 4-1: Manufacturer: syz [ 63.658152][ T4270] usb 4-1: SerialNumber: syz [ 63.686403][ T4264] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice= 2.10 [ 63.722269][ T4264] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.759332][ T4264] usb 2-1: config 0 descriptor?? [ 64.029067][ T4264] (null): keene_cmd_main failed (-71) [ 64.069615][ T4264] video4linux radio48: keene_cmd_main failed (-71) [ 64.089458][ T4264] radio-keene 2-1:0.16: V4L2 device registered as radio48 [ 64.124862][ T4264] usb 2-1: USB disconnect, device number 3 [ 64.169176][ T4270] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 64.662951][ T4336] Zero length message leads to an empty skb [ 64.729055][ T4239] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 64.968998][ T4239] usb 5-1: Using ep0 maxpacket: 32 [ 65.089971][ T4239] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 65.099698][ T4264] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 65.107697][ T4239] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 65.117236][ T4239] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 65.130510][ T4239] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 65.142488][ T4239] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 65.153943][ T4239] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 65.170804][ T4239] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 65.182731][ T4239] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.227354][ T4239] usb 5-1: config 0 descriptor?? [ 65.280998][ T4239] hub 5-1:0.0: bad descriptor, ignoring hub [ 65.291699][ T4239] hub: probe of 5-1:0.0 failed with error -5 [ 65.371762][ T4239] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 65.469938][ T4239] usb 5-1: USB disconnect, device number 3 [ 65.497347][ T4239] usblp0: removed [ 65.699378][ T4264] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 65.708504][ T4264] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.716847][ T4264] usb 1-1: Product: syz [ 65.722313][ T4264] usb 1-1: Manufacturer: syz [ 65.726941][ T4264] usb 1-1: SerialNumber: syz [ 65.839176][ T4234] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 65.879019][ T4239] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 66.089058][ T4232] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 66.109166][ T4234] usb 2-1: Using ep0 maxpacket: 16 [ 66.119126][ T4239] usb 5-1: Using ep0 maxpacket: 32 [ 66.229292][ T4264] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 66.239065][ T4239] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 66.252307][ T4239] usb 5-1: config 0 has no interface number 0 [ 66.258419][ T4239] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 66.268586][ T4239] usb 5-1: config 0 interface 89 has no altsetting 0 [ 66.339193][ T4232] usb 3-1: Using ep0 maxpacket: 32 [ 66.429114][ T4239] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 66.429204][ T4234] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 66.441835][ T4239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.453004][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.455960][ T4270] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000044. ret = -71 [ 66.469993][ T4234] usb 2-1: Product: syz [ 66.475563][ T4239] usb 5-1: Product: syz [ 66.479279][ T4234] usb 2-1: Manufacturer: syz [ 66.483680][ T4239] usb 5-1: Manufacturer: syz [ 66.487950][ T4234] usb 2-1: SerialNumber: syz [ 66.496783][ T4232] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 66.497993][ T4239] usb 5-1: SerialNumber: syz [ 66.508703][ T4234] r8152-cfgselector 2-1: config 0 descriptor?? [ 66.522171][ T4239] usb 5-1: config 0 descriptor?? [ 66.524562][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.539151][ T4270] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 66.550470][ T4232] usb 3-1: config 0 descriptor?? [ 66.561942][ T4239] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 66.571662][ T4270] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 66.583394][ T4239] em28xx 5-1:0.89: Video interface 89 found: [ 66.604000][ T4232] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 66.609036][ T4270] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 66.639079][ T4270] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 66.669103][ T4270] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 66.699137][ T4270] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 66.729115][ T4270] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 66.759074][ T4270] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 66.770876][ T4270] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 66.781281][ T4270] lan78xx: probe of 4-1:1.0 failed with error -71 [ 66.792324][ T4270] usb 4-1: USB disconnect, device number 2 [ 67.029210][ T4232] gspca_vc032x: reg_w err -71 [ 67.034324][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 67.040058][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 67.045482][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 67.051165][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 67.056540][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 67.062002][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 67.067384][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 67.072955][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 67.078317][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 67.083740][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 67.089228][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 67.094594][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 67.100270][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 67.105714][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 67.111215][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 67.116586][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 67.122015][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 67.127945][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 67.133425][ T4232] gspca_vc032x: Unknown sensor... [ 67.138604][ T4232] vc032x: probe of 3-1:0.0 failed with error -22 [ 67.147548][ T4232] usb 3-1: USB disconnect, device number 2 [ 67.163106][ T4344] IPVS: You probably need to specify IP address on multicast interface. [ 67.172315][ T4344] IPVS: Error connecting to the multicast addr [ 67.199131][ T4234] r8152-cfgselector 2-1: Unknown version 0x0000 [ 67.205721][ T4234] r8152-cfgselector 2-1: bad CDC descriptors [ 67.219260][ T4239] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 67.239135][ T4234] r8152-cfgselector 2-1: Unknown version 0x0000 [ 67.247407][ T4234] r8152-cfgselector 2-1: USB disconnect, device number 4 [ 67.359003][ T4270] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 67.879207][ T4270] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 67.903516][ T4270] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.929117][ T4239] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 67.939052][ T4270] usb 4-1: Product: syz [ 67.943243][ T4270] usb 4-1: Manufacturer: syz [ 67.949318][ T4239] em28xx 5-1:0.89: board has no eeprom [ 67.958663][ T4363] device syzkaller1 entered promiscuous mode [ 67.968564][ T4270] usb 4-1: SerialNumber: syz [ 67.979339][ T4363] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 68.006128][ T4270] usb 4-1: config 0 descriptor?? [ 68.069007][ T4239] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 68.087291][ T4239] em28xx 5-1:0.89: analog set to bulk mode. [ 68.093493][ T4264] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 68.127250][ T4264] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 68.127806][ T4239] usb 5-1: USB disconnect, device number 4 [ 68.160088][ T4239] em28xx 5-1:0.89: Disconnecting em28xx [ 68.165852][ T4264] lan78xx: probe of 1-1:1.0 failed with error -71 [ 68.166127][ T23] em28xx 5-1:0.89: Registering V4L2 extension [ 68.223498][ T4264] usb 1-1: USB disconnect, device number 2 [ 68.269263][ T4270] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 68.285392][ T23] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 68.304540][ T23] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 68.332018][ T23] em28xx 5-1:0.89: No AC97 audio processor [ 68.352844][ T23] usb 5-1: Decoder not found [ 68.368975][ T23] em28xx 5-1:0.89: failed to create media graph [ 68.385505][ T23] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 68.456831][ T23] em28xx 5-1:0.89: Registering snapshot button... [ 68.508050][ T23] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input5 [ 68.602211][ T23] em28xx 5-1:0.89: Remote control support is not available for this card. [ 68.620056][ T4239] em28xx 5-1:0.89: Closing input extension [ 68.640078][ T4239] em28xx 5-1:0.89: Deregistering snapshot button [ 68.659198][ T4234] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 68.709369][ T4239] em28xx 5-1:0.89: Freeing device [ 68.910228][ T4234] usb 2-1: Using ep0 maxpacket: 16 [ 69.049086][ T4234] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 69.069027][ T4239] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 69.239096][ T4234] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 69.243669][ T21] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 69.248209][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.286835][ T4234] usb 2-1: Product: syz [ 69.301804][ T4234] usb 2-1: Manufacturer: syz [ 69.307886][ T4234] usb 2-1: SerialNumber: syz [ 69.320857][ T4234] usb 2-1: config 0 descriptor?? [ 69.371118][ T4234] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 69.387518][ T4234] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 69.449604][ T4239] usb 5-1: config 1 has an invalid descriptor of length 223, skipping remainder of the config [ 69.466397][ T4239] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 69.509125][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 69.629193][ T21] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 69.637203][ T21] usb 1-1: config 0 has no interface number 0 [ 69.649051][ T4239] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 69.668394][ T4239] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.682046][ T4239] usb 5-1: Product: syz [ 69.692050][ T4239] usb 5-1: Manufacturer: syz [ 69.696676][ T4239] usb 5-1: SerialNumber: syz [ 69.729254][ T4372] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 69.829331][ T21] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 69.908911][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.917984][ T21] usb 1-1: Product: syz [ 69.929906][ T21] usb 1-1: Manufacturer: syz [ 69.937369][ T21] usb 1-1: SerialNumber: syz [ 69.958214][ T4372] udc-core: couldn't find an available UDC or it's busy [ 69.978714][ T21] usb 1-1: config 0 descriptor?? [ 69.994307][ T4372] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 70.010093][ T4234] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 70.030109][ T4239] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 70.041111][ T21] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 70.074343][ T4239] usb 5-1: USB disconnect, device number 5 [ 70.080313][ T21] usb 1-1: selecting invalid altsetting 1 [ 70.116510][ T21] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 70.152766][ T21] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 70.193991][ T21] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 70.212494][ T21] usb 1-1: media controller created [ 70.250749][ T21] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 70.464526][ T4385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33'. [ 70.532754][ T4366] netlink: 63 bytes leftover after parsing attributes in process `syz.1.28'. [ 70.539102][ T4234] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 70.559398][ T4270] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 70.567203][ T4234] em28xx 2-1:0.0: board has no eeprom [ 70.570301][ T4270] usb 4-1: USB disconnect, device number 3 [ 70.699076][ T4234] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 70.706963][ T4234] em28xx 2-1:0.0: dvb set to bulk mode. [ 70.719124][ T4239] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 70.731595][ T4232] em28xx 2-1:0.0: Binding DVB extension [ 70.741707][ T4234] usb 2-1: USB disconnect, device number 5 [ 70.769130][ T4234] em28xx 2-1:0.0: Disconnecting em28xx [ 70.837740][ T4232] em28xx 2-1:0.0: Registering input extension [ 70.849066][ T4234] em28xx 2-1:0.0: Closing input extension [ 70.868400][ T4234] em28xx 2-1:0.0: Freeing device [ 71.090519][ T4388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.34'. [ 71.109624][ T4239] usb 5-1: config index 0 descriptor too short (expected 301, got 72) [ 71.118617][ T4239] usb 5-1: config 16 has an invalid descriptor of length 223, skipping remainder of the config [ 71.130143][ T4239] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 71.140424][ T4239] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 71.151904][ T4239] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 63270, setting to 64 [ 71.193116][ T4239] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 71.203496][ T4239] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.239386][ T4372] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 71.266223][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.272830][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.360036][ T4382] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 71.429239][ T21] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 71.436459][ T21] zl10353_read_register: readreg error (reg=127, ret==-71) [ 71.443132][ T4399] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 71.456070][ T4234] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 71.474482][ T21] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 71.489072][ T4239] usb 5-1: usb_control_msg returned -71 [ 71.494914][ T4239] usbtmc 5-1:16.0: can't read capabilities [ 71.545875][ T4239] usb 5-1: USB disconnect, device number 6 [ 71.630804][ T21] usb 1-1: USB disconnect, device number 3 [ 71.665451][ T4403] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 71.714883][ T4402] [ 71.717518][ T4402] ============================= [ 71.722458][ T4402] WARNING: suspicious RCU usage [ 71.727327][ T4402] syzkaller #0 Not tainted [ 71.731804][ T4402] ----------------------------- [ 71.736682][ T4402] net/sched/sch_api.c:304 suspicious rcu_dereference_protected() usage! [ 71.745071][ T4402] [ 71.745071][ T4402] other info that might help us debug this: [ 71.745071][ T4402] [ 71.755397][ T4402] [ 71.755397][ T4402] rcu_scheduler_active = 2, debug_locks = 1 [ 71.763531][ T4402] 7 locks held by syz.1.39/4402: [ 71.768469][ T4402] #0: ffff88802a3d0120 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sctp_setsockopt+0x1ec/0xf80 [ 71.778272][ T4402] #1: ffffffff8c31f360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 71.787657][ T4402] #2: ffffffff8c31f360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 71.797064][ T4402] #3: ffffffff8c31f3c0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 71.806714][ T4402] #4: ffffffff8c31f3c0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 71.816441][ T4402] #5: ffff888079b10108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xa2a/0x2f80 [ 71.826082][ T4402] #6: ffffffff8c31f360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 71.835457][ T4402] [ 71.835457][ T4402] stack backtrace: [ 71.841392][ T4402] CPU: 0 PID: 4402 Comm: syz.1.39 Not tainted syzkaller #0 [ 71.848612][ T4402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 71.858667][ T4402] Call Trace: [ 71.862040][ T4402] [ 71.864964][ T4402] dump_stack_lvl+0x188/0x250 [ 71.869648][ T4402] ? show_regs_print_info+0x20/0x20 [ 71.874853][ T4402] ? lockdep_rcu_suspicious+0x110/0x180 [ 71.880393][ T4402] qdisc_lookup+0xa6/0x650 [ 71.884814][ T4402] qdisc_tree_reduce_backlog+0x190/0x430 [ 71.890439][ T4402] cake_enqueue+0x40e4/0x7fd0 [ 71.895139][ T4402] ? mark_lock+0x94/0x320 [ 71.899458][ T4402] ? INET_ECN_set_ce+0x950/0x950 [ 71.904394][ T4402] ? __lock_acquire+0x13bc/0x7d10 [ 71.909425][ T4402] ? mark_lock+0x94/0x320 [ 71.913763][ T4402] ? verify_lock_unused+0x140/0x140 [ 71.918958][ T4402] ? rcu_lock_release+0x5/0x20 [ 71.923758][ T4402] tbf_enqueue+0x224/0x6e0 [ 71.928179][ T4402] ? __rwlock_init+0x140/0x140 [ 71.932953][ T4402] dev_qdisc_enqueue+0x48/0x210 [ 71.937820][ T4402] __dev_queue_xmit+0xc25/0x2f80 [ 71.942772][ T4402] ? rcu_lockdep_current_cpu_online+0x35/0x130 [ 71.948935][ T4402] ? dev_queue_xmit+0x20/0x20 [ 71.953617][ T4402] ? mark_lock+0x94/0x320 [ 71.957942][ T4402] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 71.963937][ T4402] ? lock_chain_count+0x20/0x20 [ 71.968793][ T4402] ? rcu_lock_acquire+0x30/0x30 [ 71.973641][ T4402] ? ip_finish_output2+0x8f7/0x10a0 [ 71.978832][ T4402] ? ip_finish_output2+0xaba/0x10a0 [ 71.984042][ T4402] ip_finish_output2+0xc87/0x10a0 [ 71.989080][ T4402] ? __ip_local_out+0x5e0/0x5e0 [ 71.993945][ T4402] ? ip_fragment+0x210/0x210 [ 71.998559][ T4402] ? ip_mc_finish_output+0x250/0x250 [ 72.003849][ T4402] ? ip_skb_dst_mtu+0x584/0x9b0 [ 72.008719][ T4402] ? ip_finish_output+0x3e8/0x4b0 [ 72.013757][ T4402] ip_output+0x2c0/0x3e0 [ 72.018001][ T4402] __ip_queue_xmit+0x11c1/0x1c00 [ 72.022947][ T4402] ? sctp_v4_xmit+0x373/0xdf0 [ 72.027627][ T4402] sctp_packet_transmit+0x239c/0x2910 [ 72.033028][ T4402] sctp_outq_flush+0xe62/0x3100 [ 72.037881][ T4402] ? kmem_cache_alloc+0x133/0x290 [ 72.042894][ T4402] ? sctp_auth_send_cid+0x65/0x240 [ 72.048044][ T4402] ? memcpy+0x3c/0x60 [ 72.052040][ T4402] ? sctp_make_heartbeat+0x5ad/0x810 [ 72.057338][ T4402] ? sctp_outq_tail+0x8a0/0x8a0 [ 72.062216][ T4402] ? sctp_outq_tail+0x600/0x8a0 [ 72.067067][ T4402] ? sctp_do_8_2_transport_strike+0x43c/0x840 [ 72.073131][ T4402] ? sctp_outq_uncork+0x49/0xa0 [ 72.077978][ T4402] sctp_do_sm+0x4ee2/0x55f0 [ 72.082573][ T4402] ? sctp_generate_t3_rtx_event+0x340/0x340 [ 72.088458][ T4402] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 72.094452][ T4402] ? __mod_timer+0x91e/0xd00 [ 72.099071][ T4402] sctp_primitive_REQUESTHEARTBEAT+0x94/0xc0 [ 72.105069][ T4402] sctp_apply_peer_addr_params+0xde/0x1870 [ 72.110872][ T4402] sctp_setsockopt_peer_addr_params+0x673/0x940 [ 72.117125][ T4402] sctp_setsockopt+0x4cd/0xf80 [ 72.121878][ T4402] ? sock_common_recvmsg+0x1c0/0x1c0 [ 72.127156][ T4402] __sys_setsockopt+0x2bf/0x3d0 [ 72.132011][ T4402] __x64_sys_setsockopt+0xb1/0xc0 [ 72.137036][ T4402] do_syscall_64+0x4c/0xa0 [ 72.141444][ T4402] ? clear_bhb_loop+0x30/0x80 [ 72.146107][ T4402] ? clear_bhb_loop+0x30/0x80 [ 72.150787][ T4402] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 72.156681][ T4402] RIP: 0033:0x7f5c02127e59 [ 72.161087][ T4402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.180701][ T4402] RSP: 002b:00007f5c00381028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 72.189109][ T4402] RAX: ffffffffffffffda RBX: 00007f5c023a0fa0 RCX: 00007f5c02127e59 [ 72.197085][ T4402] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000004 [ 72.205058][ T4402] RBP: 00007f5c021bdd6f R08: 000000000000009c R09: 0000000000000000 [ 72.213031][ T4402] R10: 0000200000000840 R11: 0000000000000246 R12: 0000000000000000 [ 72.220993][ T4402] R13: 00007f5c023a1038 R14: 00007f5c023a0fa0 R15: 00007ffff9c0d6f8 [ 72.228977][ T4402] [ 72.329314][ T4234] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 72.342154][ T4234] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 72.519196][ T4234] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 72.528284][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.536415][ T4234] usb 4-1: Product: syz [ 72.542080][ T4234] usb 4-1: Manufacturer: syz [ 72.546694][ T4234] usb 4-1: SerialNumber: syz [ 72.562371][ T4234] usb 4-1: config 0 descriptor?? [ 72.579608][ T4390] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 72.586737][ T4390] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 72.599762][ T4234] usb 4-1: ucan: probing device on interface #0 [ 72.606056][ T4234] usb 4-1: ucan: invalid EP count (1) [ 72.611709][ T4234] usb 4-1: ucan: probe failed; try to update the device firmware [ 74.577347][ T4234] usb 4-1: USB disconnect, device number 4 [ 76.386159][ T1110] cfg80211: failed to load regulatory.db