last executing test programs:

13m35.120333061s ago: executing program 32 (id=169):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0xf8, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}, [@filter_kind_options=@f_fw={{0x7}, {0xcc, 0x2, [@TCA_FW_ACT={0xc8, 0x4, [@m_ctinfo={0xc4, 0x1d, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x4, 0xffffffffffffffff, 0x6, 0x40}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x610}, @TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}]}, {0x65, 0x6, "1262ff83c53564493e3ab80b0ce9e9d46ac5bd595809e31227eb5b8ad2311594990e6a48ab65e3b1ac1463082db20d6272f15c1636ad61e1379e06bf1e7310b4f565663e2bd8d5d4f3eb9f95310a56be88aa03e8e9ee7f753c4d0bc3ade1354e28"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0xf8}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
r1 = accept4(r0, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80, 0x800)
ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000300)={0x0, @ethernet={0x1}, @qipcrtr={0x2a, 0xffffffff, 0x4000}, @ethernet={0x6, @multicast}, 0x8, 0x0, 0x0, 0x0, 0x400, &(0x7f00000000c0)='wlan0\x00', 0x6, 0x10, 0x5})
r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d4c18a08020402567635010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)

12m49.576291198s ago: executing program 33 (id=328):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
timer_create(0x0, &(0x7f0000001140)={0x0, 0x37, 0x0, @thr={&(0x7f0000000080)="9c7c150716a554e49e34cca36671a20eba414c3371", &(0x7f0000000140)="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"}}, 0x0)
r1 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0xc0305720, &(0x7f0000000180))
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0xca58c30f81b6079f})
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$inet(0x2, 0xa, 0x0)
sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x1b\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r5}]}, 0x24}}, 0x0)
keyctl$invalidate(0x15, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f00000000c0)=ANY=[@ANYRES64=r3])

12m3.494535134s ago: executing program 34 (id=512):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)

12m2.820920996s ago: executing program 35 (id=518):
syz_clone(0x28a119444604f3de, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)
listen(r1, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TLS_RX(r2, 0x29, 0x2, 0x0, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
syz_open_dev$vim2m(&(0x7f0000000080), 0x200000000000000, 0x2)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r5 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000001f80)=r4, 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r7 = dup(r6)
write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c)
pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0)
r8 = syz_create_resource$binfmt(0x0)
openat$binfmt(0xffffffffffffff9c, r8, 0x42, 0x1ff)
r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r10 = socket(0x840000000002, 0x3, 0xfa)
sendmmsg$inet(r10, &(0x7f00000016c0)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=[@ip_ttl={{0x18, 0x0, 0x2, 0x1ff}}], 0x18}}], 0x1, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4040aea0, &(0x7f0000000000)=@x86={0x2, 0xf9, 0x5, 0x0, 0x5, 0xfd, 0x1, 0x0, 0xdf, 0x4, 0xa, 0x9, 0x0, 0x9, 0x80, 0xd, 0x9, 0x6, 0x56, '\x00', 0x9, 0xfffffffffffffffc})

11m46.681178069s ago: executing program 36 (id=560):
r0 = socket(0x10, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@local=@item_012={0x1, 0x2, 0x0, 'W'}, @main=@item_012={0x2, 0x0, 0xb, "c11d"}]}}, 0x0}, 0x0)
mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x401, 0x0)
r2 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', <r3=>0x0})
syz_emit_ethernet(0x5e, &(0x7f00000004c0)={@broadcast, @empty, @val={@void, {0x8100, 0x1, 0x1, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0xfffc, 0x4000, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @loopback, {0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @rand_addr, @multicast2, {[@end, @cipso={0x86, 0x6}, @ssrr={0x89, 0xb, 0x0, [@local, @multicast2]}, @timestamp={0x44, 0x8, 0x4b, 0x0, 0x8, [0x401]}]}}}}}}}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086666048800000000000109022400010000000009040000010300000009210000000133070009058103"], 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x34, 0x4a, &(0x7f0000000180)="0749dffff83854299e01127aaee09e204abc7c01481782a0a69649aba740cbeaf1a089a673f5d060e71c7c9689faeafd3fea28a0", &(0x7f00000001c0)=""/74, 0x21990a14, 0x0, 0xb8, 0xff, &(0x7f0000000280)="d141a66f429f9904f7618146d6e7155931df2e84ff2ba81237878b36622b332f5cf3cff4900fe6afa11dabd908efa36c27135af60ff8cbae4e4802a625187a599f753e083792841a1767b3b90b041eb538113d4dcefe54313f369407db2ad808cafb710861086b37e0874313306da9fcc37ce478b3e3781bd61a6bb94e366fd5756a828d4f1decfcac043126461c28f2bc48356e2590f8625ec7cb65919080ea2ea3a23066a798c977de364f3e3d7e197bc2f8fa3e8d991c", &(0x7f0000000340)="22352fbee8fc78fe45cfbc7784818809e7da23da39b73497e22d8be9dc4e8e75d7d64b2b4f1d30360ae0fc6f1bb0f5937f3a668cff8e833af1f5f27ed215a9a8a151a1f79c3ddbd97fdc3a21398d092d098eb6b9b3567376829294cc234204099187d68feed58bb1d4f778803dc29ad5fe929f5b48a81624259e147528dd37dfd8a7a80002a62f756e74fd3d3b1b49922d76f9b9b91d40552404ffa4dea17d3caddcee9b59439e5e10a698f0922e8fb1b494f66fb714543b9c9474bf85b40368a52157d48d305cde3d32f9c29fed9fd4d8207322a477e3b3fbde83e89d26a53e8fe2cf60b9f1ae154356850ec8c4d15cdbde7e92f96f184349b3858d1d257a", 0x4, 0x0, 0x1}, 0x4c)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x64, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xf, 0x1, 0x0, 0x6}}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x510b6540, 0x5, 0x6, 0xb, 0x6e7, 0x4, 0x3, 0x4, 0x0, 0x5, 0x16, 0x1a, 0x0, 0x5, 0xfffffff7}}, @TCA_GRED_LIMIT={0x0, 0x5, 0x7}, @TCA_GRED_MAX_P={0xfffffffffffffede, 0x4, 0xed48}, @TCA_GRED_LIMIT={0x8, 0x5, 0x4}]}}]}, 0x94}}, 0x0)

11m37.691018571s ago: executing program 37 (id=587):
openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x82, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/153, 0x99}, {&(0x7f00000002c0)=""/248, 0xf8}, {&(0x7f00000003c0)=""/196, 0xc4}, {&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000000)=""/19, 0x13}, {&(0x7f00000004c0)=""/245, 0xf5}], 0x6, 0x8005, 0x0)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000100)={0x0, 0xa00}) (async, rerun: 32)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x96b, 0x10000) (rerun: 32)
ioctl$SNDRV_PCM_IOCTL_STATUS32(r1, 0x806c4120, &(0x7f00000005c0))

11m20.37107776s ago: executing program 38 (id=630):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x7, &(0x7f0000000380)={0x0, 0x2, 0x0, 0x2})
fcntl$lock(r0, 0x6, &(0x7f0000000380)={0x0, 0x2, 0x10403, 0x2})
unshare(0x22020400)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
r4 = openat$tcp_congestion(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0)
write$tcp_congestion(r4, &(0x7f0000000100)='reno\x00', 0x5)
write$tcp_congestion(r4, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x890)

10m42.472918261s ago: executing program 39 (id=807):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x79}) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00')
pread64(r1, &(0x7f0000000080)=""/237, 0xed, 0x0) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000ff0f0000070000000000000003eb181146fcd7513226c3141be440a1722d24e0f481e7cb0450c3e0b38c74f3ebb7b3ee13851ee1cd512f2dbc5bfb2019f300ee5c339c16", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100002ce3ebaf80fc31e5438f5f4ba729108e057cc19a504606e5a39595afb18d06780cfe9f01c0fc8942ac0e9525821a8b96efff8143d69799e68a040df47604c3cf6ab9e66b8f4ec383caf4512b8244843fcf9aa1f67f8007", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) (async)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async)
madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x28011, r4, 0x0) (async)
read(r0, &(0x7f0000000380)=""/167, 0xa7)

10m33.155491588s ago: executing program 40 (id=842):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
openat$btrfs_control(0xffffff9c, 0x0, 0x180180, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r2, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400})
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x285c, 0x4)
sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="00000108"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000000)=0x40000001, 0x4)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x11a, 0x4, 0x0, 0x0)

10m20.562186806s ago: executing program 41 (id=904):
r0 = shmget$private(0x0, 0x4000, 0xa, &(0x7f0000ffb000/0x4000)=nil)
shmat(r0, &(0x7f0000ff9000/0x1000)=nil, 0x5000)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}]}]}]}]}], {0x14, 0x10}}, 0x84}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e3ddef20501da1603fa1010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140), 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000440)={0x10, &(0x7f00000002c0)={0x20, 0x1}, 0x0, 0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001240)=ANY=[@ANYRES32=0x1, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x50)
r5 = gettid()
sendmmsg$unix(r3, &(0x7f0000001e80)=[{{&(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=[@rights={{0x10, 0x1, 0x1, [r1]}}, @cred={{0x18, 0x1, 0x2, {r5}}}], 0x28, 0x400d0}}], 0x1, 0x0)
syz_emit_ethernet(0x1c, &(0x7f0000000300)={@multicast, @local, @val={@void, {0x8100, 0x3, 0x0, 0x2}}, {@x25={0x805, {0x1, 0xf9, 0x35, "e42a304ee024b2"}}}}, 0x0)

9m35.541255511s ago: executing program 42 (id=1124):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x3}]}}, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
ptrace(0x10, r0)
ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})
ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0})
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYRES32, @ANYBLOB="0000040008"], 0x24}}, 0x880)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x74}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
fsopen(&(0x7f0000000040)='afs\x00', 0x0)

8m40.547061948s ago: executing program 43 (id=1349):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280), 0x0)
sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x34000811)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES32=r0], 0x1000f)

6m53.56207696s ago: executing program 44 (id=1823):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002780)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0)
getsockopt$bt_hci(r0, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9)
r1 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
ftruncate(r2, 0xc17a)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x3, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0xfee5})

6m27.121720951s ago: executing program 45 (id=1934):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cb], 0x0, 0x202})
ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000240)={[{0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0xff, 0x0, 0x2, 0x2}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

5m16.119871727s ago: executing program 46 (id=2220):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge0\x00', <r3=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x1, 0x6}, 0x10)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', <r6=>0x0})
bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r6, 0x1, {}, 0xf9}, 0x18)
ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000440)=@req={0x20, &(0x7f0000000400)={'nicvf0\x00', @ifru_settings={0x10001, 0x8, @fr=&(0x7f00000003c0)={0x1000, 0x1, 0x1000, 0x1, 0x7, 0x5c, 0x3}}}})
bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r6, 0x3, {0x0, 0x0, 0x3}, 0x1}, 0x18)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3, @ANYBLOB="4001051004000400efe106235a8b8e2be35e36b37ae2dcd0dcb4f0dce7266fb717fd0ae0a904df58b26e0796acb0fa67c640464927b717039afc4bac659fdd92f038f2e7979dff7d6e3401bbf98582c400"/96], 0x20}, 0x1, 0x0, 0x0, 0x4040841}, 0x80cc)
r8 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="1402000023000b03d05a806f8c6394f91f24fc60", 0x14}], 0x1}, 0x0)
r9 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETMODE(r9, 0x5608, 0x1)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r10 = fsmount(0xffffffffffffffff, 0x0, 0x2)
ioctl$USBDEVFS_BULK(r10, 0xc0105502, &(0x7f0000000480)={{{0x7}}, 0xfe, 0xffffffff, &(0x7f0000000500)="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"})
symlinkat(&(0x7f0000000000)='.\x00', r10, &(0x7f0000000140)='./file0\x00')
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x15})
r11 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r11, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r1, @ANYRES16, @ANYRES8=r10, @ANYRESDEC=r7, @ANYRES32=r11, @ANYBLOB="5a86c01730ffac381473445abef618bbe9ab6b0ce6aeec912955e4eefd5af916e4c13a467b2af894b2328d283b0d80f8904530cbea585c05583e2921f2845bef92f18c95c366ff2febe20d4c9941f6b2beaaf14f34fb5a097de474fc00b0cf1229a70b477ca37fb5bed4f80741a18854757ca9005c24abb406677fd1b86379ca8f15c48aadb91f14d665085697b37d8b875adb3279ea7812b95b388fff0902cfcc646d73b82d1cd10ce627680f4c66d1446166bd29bbe6e78e23f3ebe4894f1b6d4265ae0cbf95481a408b212479df8a0121d5b4aa19bc18cd0b02a90da6ba5387dae62366bc609930620fb2351c36d4984dc3", @ANYRES8=r8, @ANYBLOB="faa8c938321e3741bdc446058e592092512145c1ccad6be7d094033cc830cb5bd8659ff60210719ef15ab2628fca2dddfae6dec23168c3f9fdf6feb68ce3c1fe1a4ae6c3fbe38dfea26e89af022a8c0e57ab3e36e1c52a872f114291856787d8e46f77bf00005080bba53a6ba95559ffffffff370f7009e9288f2490b8df3a4850424c8e19581e09dc6be2b0192e09773c06280e63c2d878f91b94da1bb20604e61219a3395360e0a3ccd61ad0f1497c7ad44c7db8d43adc903fb888ae16376d29e1e8dd8f9d12f9d91d76605ed076b93fccfd9e37692d47f21595540d49820b6bbfa9153485812b3d6c314592f991004583bc5202dc00"/259, @ANYRES64=r3], 0x83}}, 0x4000)
readlinkat(r10, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc)
r12 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
landlock_restrict_self(r12, 0x0)
landlock_restrict_self(r12, 0x0)
landlock_restrict_self(r12, 0x0)

5m0.621780948s ago: executing program 47 (id=2283):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x1, 0x8, 0x5, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xdada}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}}, 0x0) (fail_nth: 7)

4m12.089159115s ago: executing program 48 (id=2516):
r0 = openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r2 = inotify_init()
inotify_add_watch(r2, &(0x7f0000000180)='./file0\x00', 0x4000000)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f00000000c0)=@abs={0x1}, 0x6e)
bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0x54}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x104}}, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x0, 0x0, 0x0)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/usbcore', 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
symlinkat(&(0x7f00000001c0)='./bus\x00', r6, &(0x7f0000000180)='./file2\x00')
symlinkat(&(0x7f0000000280)='./bus\x00', r6, &(0x7f0000000500)='./file0\x00')
sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000000114020029bd7000ffdbdf25080001000100000008000100020000000800010001000000080001000083f60008000100000000000800010000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

4m6.769037602s ago: executing program 49 (id=2490):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002840)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfbfff034}, {0x80000006, 0x4, 0x5}]}, 0x8)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x1100, &(0x7f000005ffe4)={0xa, 0x4e23, 0xffffffff, @loopback}, 0x1c)

4m0.87875801s ago: executing program 50 (id=2504):
getpid()
setns(0xffffffffffffffff, 0x24020000)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"])
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000004100)={0x2020}, 0x2020)
r2 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1)
r5 = socket(0x10, 0x3, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r5, 0x0, 0x0, 0x0, 0x200440c0, 0x1})
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006)
io_uring_enter(r2, 0x27e2, 0x0, 0x0, 0x0, 0x0)
r6 = syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0)
tkill(r6, 0x7)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x14000052}, 0x4000084)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000)

1m39.965848255s ago: executing program 6 (id=3205):
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x15, 0x0, &(0x7f0000000140)="69015438a420bbea40bb7d94bc9db57325f4528ae6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000002203"]}, 0x0)
syz_usb_connect(0x3, 0x3d, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0)

1m39.763792139s ago: executing program 6 (id=3208):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x24}}, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)={{0x12, 0x1, 0x250, 0x4, 0xda, 0xb0, 0x10, 0xccd, 0x39, 0x4499, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x4, 0xf8, 0x90, 0x1, [{{0x9, 0x4, 0x6f, 0x8, 0x1, 0x37, 0x6d, 0xbe, 0x9, [], [{{0x9, 0x5, 0x1, 0x2, 0x8, 0xc0, 0x94, 0xa3}}]}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})

1m39.515059072s ago: executing program 51 (id=3208):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x24}}, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)={{0x12, 0x1, 0x250, 0x4, 0xda, 0xb0, 0x10, 0xccd, 0x39, 0x4499, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x4, 0xf8, 0x90, 0x1, [{{0x9, 0x4, 0x6f, 0x8, 0x1, 0x37, 0x6d, 0xbe, 0x9, [], [{{0x9, 0x5, 0x1, 0x2, 0x8, 0xc0, 0x94, 0xa3}}]}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})

1m37.227609964s ago: executing program 52 (id=3219):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x113, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@local, 0x0, 0x32}, @in=@dev, {0x100000000}, {}, {0x0, 0x0, 0x80}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x4}}]}, 0x140}}, 0x0)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x4)
getsockopt$inet6_opts(r2, 0x11a, 0x3, 0x0, &(0x7f0000000400))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'veth0_macvtap\x00', <r3=>0x0})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x74}}, 0x0)
bind$packet(r0, &(0x7f0000000140)={0x11, 0x19, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)
sendmmsg$sock(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2002ccc1)
r5 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001040)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$bt_hci(r5, 0x84, 0x1a, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007)
recvfrom$unix(r5, &(0x7f0000000500)=""/240, 0xf0, 0x2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e)

1m33.370179096s ago: executing program 53 (id=3230):
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x800)
r1 = dup(r0)
madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x13)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={r1, 0x20, &(0x7f0000000400)={&(0x7f0000002a00)=""/4114, 0x1012, <r2=>0x0, &(0x7f0000000380)=""/90, 0x5a}}, 0x10)
syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040e04004220"], 0x7)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00'})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x7005e000)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000029c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000030000000000000003000000042c08000100000018440000fcffffff000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000008520f8ff040000001800000007000000000000001c99000d03006c0700009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x10000, 0x2b, &(0x7f0000000200)=""/43, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x2a, r1, 0x8, &(0x7f0000000300)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0x8, 0x7e, 0x101}, 0x10, r2, r1, 0x1, &(0x7f0000000480)=[r1, r1, r1], &(0x7f00000004c0)=[{0x0, 0x4, 0x8, 0x3}], 0x10, 0xfffffffc, @void, @value}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockname(r4, 0x0, &(0x7f0000000100))
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="02"])
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002700)=@delchain={0x738, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4}, {0xffe0}}, [@filter_kind_options=@f_u32={{0x8}, {0x704, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x3f5}, @TCA_U32_FLAGS={0x8, 0xb, 0x5}, @TCA_U32_INDEV={0x14, 0x8, 'veth1_to_bridge\x00'}, @TCA_U32_ACT={0x6dc, 0x7, [@m_mirred={0x160, 0x1e, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x7, 0x20000000, 0xffff, 0x6}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x7, 0x8, 0x8, 0x401}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3a61, 0x5a68ce02, 0x0, 0x2eca, 0x5}, 0x3}}]}, {0xd1, 0x6, "71558f82c797ed40aa96cae0561caac80e37421fbe6b5847795e9152419bd6e36082801f37e53ccbea50d8b4e7d6d4cd06cec76ec462499bdf122811144a51b56146738d4d25cbd285f2e729dbbe3c6137f7cd123b784cfddefd732ecc306f6cd0dc9c82fffc866125185fd50c16a59b8228811ffa42a3fc06ae6c491841f2d3b022b410d20071f23972ad211e8d088570180a0b72ec30b207b439e9499530f5ed3add294c6979c4716758179993cb396d1a9e8371981dc62a436962aa697442d2123e008f091efa1ef638699b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_police={0x64, 0x20, 0x0, 0x0, {{0xb}, {0x4}, {0x35, 0x6, "becc0dfba237e62806d749b491e4df74a2edaae87448c525c394a1cd2b702d5bf5d0417b2f2d65c8e351d44c338dd81ad3"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0xb4, 0x15, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x7}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffe}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}]}, {0x29, 0x6, "7cc4d4d8913023393152cf1483893cb72022204afc5a3c78451fb35e595b70d04ef5495ca4"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0xf0, 0xb, 0x0, 0x0, {{0x7}, {0x4}, {0xc5, 0x6, "3b8dd99ff628f0e136ea03ee3bb7f448e382972e33e9187dfc62c3017d47e4eb97a588c1facf5867f549f6f043fd97c6cfd8fd979116a9bbc329413782943c5800214111f2b3d3359a00b1e6f1cdb826c47fb565c10a1d3e0670d66b9cd1693474ff1e2a51640996c1b8114e118a8c14bed961cbbf4344fc6be19ec9c30defad20cb8bbbedc372be97f62a1d00f623b8706ca90289abd36f1104105694a258e01d2a36f44664d79fdd5706980c0dcfd9f7d16a88431c731fb2a4d377359ddbf2e0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0x84, 0x1f, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_ACTION={0x6, 0x3, 0x7}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @empty}, @TCA_CT_ACTION={0x6, 0x3, 0x21}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0600be9e48e7214093c1831df0129d79"}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @local}, @TCA_CT_LABELS_MASK={0x14, 0x8, "9400"}, @TCA_CT_ACTION={0x6, 0x3, 0x34}, @TCA_CT_ACTION={0x6, 0x3, 0x4}]}, {0x4}, {0xc}, {0xc}}}, @m_ctinfo={0x6c, 0xf, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xe}]}, {0x2d, 0x6, "871e4a3093c0e8019f3e85d16b62fbd06858927c4759e03eb68fe380f18d158dfeeec5a54f2e4d1b78"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_pedit={0xd8, 0x13, 0x0, 0x0, {{0xa}, {0x4}, {0xa9, 0x6, "13095aa19e3ff97ff1475cc7f6d44e64023e0f07f5503ec93c537ec467da66e10c0670c5424185a4211b985fbb71c90e943fd5ba6989123f51adc29f4d098a5853a725f727bd15293ea587519524ef80fd8af80f756cfebcef3980870a5ae562474c9ec51aaff99d80483e5889203fa14a5bdb050b4f8c23a709ea648f0083bafcaefd2dfdc6e9fd21bd1230b100d95fdedd566e96c84f3a440023eb3e68c8f4ce4718278e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_ct={0x1a8, 0x2, 0x0, 0x0, {{0x7}, {0x68, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @empty}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e20}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x3}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @loopback}, @TCA_CT_MARK={0x8, 0x5, 0x8}, @TCA_CT_LABELS_MASK={0x14, 0x8, "0e16c0fbcfd4e59e5f04cfa3cef75f58"}, @TCA_CT_ZONE={0x6, 0x4, 0x40}]}, {0x119, 0x6, "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"/277}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_CHAIN={0x8}]}, 0x738}, 0x1, 0x0, 0x0, 0x40800}, 0x20000810)
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
sendmsg$nl_route(r1, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@getneigh={0x14, 0x1e, 0x4, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x24004801)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000100))
syz_io_uring_setup(0x58b, &(0x7f00000010c0)={0x0, 0x7202, 0x400, 0x0, 0x316}, &(0x7f0000001340)=<r7=>0x0, &(0x7f0000000080)=<r8=>0x0)
r9 = openat2(r1, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x400000, 0x182, 0x4}, 0x18)
io_uring_register$IORING_REGISTER_RESTRICTIONS(r9, 0xb, &(0x7f0000000680)=[@ioring_restriction_register_op={0x0, 0x12}, @ioring_restriction_sqe_flags_required={0x3, 0x6}, @ioring_restriction_sqe_op={0x1, 0x14}, @ioring_restriction_sqe_flags_required={0x3, 0x1c}], 0x4)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f0000000240)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x4, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0x0, 0x1})

48.323799201s ago: executing program 5 (id=3430):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8000, &(0x7f0000000080)={0xa, 0x0, 0x100000}, 0x20)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121)
writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd", 0x45}], 0x1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xfffffffffffffe43}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
r4 = socket(0x18, 0x4, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x8, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x10, 0xc}, {0xffe0, 0xa}, {0x1, 0xf}}, ["", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44090}, 0x800)
getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000040))

47.98438419s ago: executing program 5 (id=3435):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x209d}, 0x10)
write(r0, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700", 0x12)

47.825225977s ago: executing program 5 (id=3436):
r0 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040))
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000060027"], 0x6c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20024490)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x50}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0)

47.366968227s ago: executing program 54 (id=3436):
r0 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000040))
socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000060027"], 0x6c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20024490)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x50}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @loopback}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0)

44.167292627s ago: executing program 7 (id=3450):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r0, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xfffffe74)

43.977150609s ago: executing program 7 (id=3451):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0xfffffffd}, @TCA_PIE_LIMIT={0x8}]}}]}, 0x40}}, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000000, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2, 0x3}, 0x1c)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0)
syz_usb_control_io$printer(r4, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000140)={0x0, 0x0, 0x4, 'v\x00-q'}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r4, &(0x7f0000000140)={0xc, &(0x7f0000000000)={0x40, 0x21, 0xf0, {0xf0, 0x24, "136bb7b6a5c72b636e0aab5de3bb3aa9fe192bcd0b6870a57ec96dfdece517c3566eb767c3bc0f9b07a62f55c9268c300d7688d3be111ca1b3889a43bbf52ff28e74bffcd3f7155af4a0adcf0692746cc975f5818d1da642052f05d8c82c99d4a2fd42d837fe094e7c813a1a34971909cf187c3566e4900430be8e100026b1095a8a848006169582c3a9766809a816ffe1f6f5ae576278713cd497ac6cb7027e8cf01c3d7d15e404368541612b9eab1a5b1d573291f64bf2c7ec22778d8fa43eed0e2b87cbe25cf26341fda9b8a7b3f72b078175c89bd4e662ca4ebbadbcde63269557fad947bc591734f902ffac"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x416}}}, &(0x7f0000000380)={0x1c, &(0x7f0000000200)={0x40, 0x8d2afc8e11daad42, 0x62, "f7a2d44d3567a9b8c6edc533da74ce6e7bc38d40d7e10674255e3d70316dbc9e2d4dada25c17c58a0f1fff8f4de555444a6862cc2bff2c8f4045b7e9723563243f9d0740bbbb432c79f02115a1e7fa175abb3ba85cf5e3488fa2eb3d76b1b9c9a6aa"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0xa6}, &(0x7f00000003c0)=ANY=[@ANYBLOB="20002a000000bbe42ceaf89d810a76f3002897c1af082a9014cff6b2aecd522635211adfb4196c0a4fc0a2ab1caf5dd0dad8cd75886ebd2663caac2c93dedd2bc2d02bd567fd90b6080674a851b26ef266d4e408217d9950ecc218c317b0aab7896a149a9dbb225641efe681b2806a187eebd11a62fe83ef"], &(0x7f0000000300)={0x20, 0x1, 0x1, 0x31}, &(0x7f0000000340)={0x20, 0x0, 0x1}})
syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040e04004220"], 0x7)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00'})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xfffffffffffffd38}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000800)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

40.855163596s ago: executing program 7 (id=3460):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r0, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xfffffe74)

40.717974583s ago: executing program 1 (id=3462):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="05030200000000002c0012800b00010069703667726500001c0002800400120014000200fe80"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x80)

40.350994257s ago: executing program 1 (id=3463):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = epoll_create(0x4)
ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f00000000c0))
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_key={0x2, 0x9, 0x8, 0x0, "e9"}]}, 0x38}, 0x1, 0x7}, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e23, @remote}, {0x2, 0x0, @broadcast}, 0x20})
r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002)
write$binfmt_aout(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8)
writev(r2, &(0x7f0000000a40)=[{&(0x7f00000002c0)="36019c842b680e5956983a285ba5bb71794d7c6051ab94251aabfa893ef804b507668b814fc6c9b839afb957b723246919fa738249cdb573ce74836bb343eddc0ab986", 0x43}, {&(0x7f00000003c0)="c9706a51bc6d33be01759d563451135c339aa5128b6e27518c0fbecf38a6443477cde65a2f9aa8b1d8712416e8d33ad429c4d8466dca43a6572dc02799dd5dbf89555d3050dc9ada2d05f6e3b655d0c3ae9ac24cb6248820287fc416dac234423f09383dc234db252326feccd9fd90b9a4e85c25e2a297538140554367bb60be84cbdd7282c21cc4536b3ed4a0398a7782d886d176662cf0c7e03338df8cfb84ca92a9dd0151bbc0e4eed533ed883960837d6e6c61b80d64e176ecf3ca4636bd7d734480da61ab158d5b9406afc8056eb2caa5bfd9f9e2a6e3bfe267002695b808b4c03de6a0b719f2681f4a05d3b06459c30f616ec24dba647d705d", 0xfc}, {&(0x7f00000004c0)="d040c091fd0673f72245b6347d6a73e95c5df2753682c959e85bb2ba33a34afddca7233655b2822a9c4abce714684a37e0dd4b365b362e0ab4cbbff0a687ea100cde21a1137fc26167ecc10e155bdd9e1e0dad7cb54b32c95118e061", 0x5c}, {&(0x7f0000000540)="70ad6f68a80a3cc1298f8014aa1bc819dd5af9974d9b6572ae37ccb1f92567e16960172cc35c4b4dabf03701da32085b28ef04752b72a2bd98390e70e67d4b0f32415a36deab1e302880edecb975248947b5469151c43512269039d39baca972febbe0bbca5ff956271d54a229a69547c66163b97587674e84a3c0963dfb6f2f3d71da5eb6681fe3f15fee20165db2e7c09f973a4b1159abf264171c253184a74aad9c59525bfa33d8e7a1cba9c71f0081", 0xb1}, {&(0x7f0000000140)="8b3fe32ccccc667bb8d00296dcf8b6b38baf5ede6e145ad5003794f5f59102c1cf31def17a2f5151237296b811009916faf0b3ed522e1ee5ba6329d1b7c5", 0x3e}, {&(0x7f00000006c0)="257f33064e43f77b94ff65d9688f78fe38237ef1cac7b636959dfb0da447157a34796412b69f3fe4e3c20c4d5428e0f17c360e2486a8f1c7e2f8a1b59324f07230268ff3031ef7297410651bb24561a67b4f3d98c63f05539dd21cd2e0dc1d8295d0a7515000b102933859cb87bf7ece13f9113749b738a074aa3a2ca3a33ce0ad0190aaa85ea9e69062f6054b2c412bf74a8412d80f", 0x96}, {&(0x7f0000000780)="34f9a6c04a60302cce4cd3b93f2259f5e9ae6c8b3241184d62156bd753ec5013babd07ce2b0ac6b3140798ba5e8ebf740e56bdff0844bf65a18f415a28fa82679907048ec35c7265a9418552d43c3d015d29adfe46c3ffb5d1950a6c97719b2945461d6ac4a97769b201a8b6ac8e422b1c85a1f88511aa9c9876554b057874e508e9c1365b04ae81027c674c7d82e9dadf9ad7b4c77e6a2db6a3005d7286544c2df9ed2aa05e3c27ab41c3ef4699974fcd09ae93b5c604f2f388f6e0c42c0d8551af84295fc117f1ae188fb0a6a0513b4e42c942498428bf56f936d264", 0xdd}, {&(0x7f0000000880)="ac15b3c51e0c1a3386a84804fab05d0755149a43cf66982bfaad81e1aa39dceeec8ae609c058b3ceb5e2be2048f67cb6ec663b01f6290c4e5df6ccc0a5f8977e7e3163b21c83064d5f89a6a4abee99fa86b879e789f66abf0a3b25ec5c873455bbd4b721b87dcc27b3253301f165f5f297d678dfec79c592489ba07473ea9aefe91ec9453891d45960c4fa2289bda220d190f4b9c31605729d8ae84a825656622b9e1ba13710508dc86542bbc7bd48777be4e278eae6b40d607191c1217db97ecfd52bda7697b0491e30", 0xca}, {&(0x7f0000000980)="96f8ea043efa86419a4ff015fd70e1d500fdc12185ce2d404bec8325f9d73ad73fc10dea2b1713a15dfa3a709fe25666dd36ee365be71157c3b8a12469afd511488d8fd7fa6adba610895042aa2ff1f5c29356a90ba7bf344197bfbaeeb19fd9d4adec54073c2c6b67d4020b4da8fd259b934ed2bf47171e79bedcf5ae47cd72a78cd0d74ab82231ea97ff5f97d25ddd4c624334b25b1c246aa36c50b4e483954318964cc120e462e37516abc5fd42", 0xaf}], 0x9)
write$char_usb(0xffffffffffffffff, &(0x7f0000000400), 0x0)
openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x143240, 0x0)
syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0)
pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0)

40.151995857s ago: executing program 7 (id=3466):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8000, &(0x7f0000000080)={0xa, 0x0, 0x100000}, 0x20)
move_mount(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121)

39.543769449s ago: executing program 7 (id=3469):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001c80)={0x14, 0xd, 0xa, 0x5}, 0x14}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'})

39.116433624s ago: executing program 8 (id=3470):
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0)
syz_usb_control_io(r1, &(0x7f0000000240)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x5, @string={0x5, 0x3, "00d60b"}}, 0x0, 0x0, 0x0}, 0x0)

38.927277331s ago: executing program 1 (id=3473):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="05030200000000002c0012800b00010069703667726500001c0002800400120014000200fe80"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x80)

38.792017963s ago: executing program 7 (id=3475):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_io_uring_setup(0x6913, &(0x7f0000000140)={0x0, 0x6d85, 0x10, 0x3, 0x3}, &(0x7f0000000440)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_emit_ethernet(0x56, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@canfd={0xd, {{0x2, 0x1, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "9408580b5376d3012d2135bf991f8742e44900b1a2c72032cddbc91131450530753c4648dd9b45d9900ba50929bc35809f5b3d1493296a7b25f39864e5063a98"}}}}, &(0x7f0000000000)={0x0, 0x1, [0x4f1, 0x6f6, 0x1cb, 0xb2f]})
syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0})
io_uring_enter(r1, 0x8aa, 0x0, 0x0, 0x0, 0x0)

38.385286248s ago: executing program 55 (id=3475):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_io_uring_setup(0x6913, &(0x7f0000000140)={0x0, 0x6d85, 0x10, 0x3, 0x3}, &(0x7f0000000440)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_emit_ethernet(0x56, &(0x7f00000000c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@canfd={0xd, {{0x2, 0x1, 0x1, 0x1}, 0x26, 0x0, 0x0, 0x0, "9408580b5376d3012d2135bf991f8742e44900b1a2c72032cddbc91131450530753c4648dd9b45d9900ba50929bc35809f5b3d1493296a7b25f39864e5063a98"}}}}, &(0x7f0000000000)={0x0, 0x1, [0x4f1, 0x6f6, 0x1cb, 0xb2f]})
syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r0, 0x0, 0x0})
io_uring_enter(r1, 0x8aa, 0x0, 0x0, 0x0, 0x0)

38.356083557s ago: executing program 1 (id=3479):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8000, &(0x7f0000000080)={0xa, 0x0, 0x100000}, 0x20)
move_mount(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121)

38.066132643s ago: executing program 1 (id=3482):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
r1 = openat$nullb(0xffffff9c, &(0x7f0000000040), 0x4a40c0, 0x0)
ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000080)={0x0, 0x0, 0x1})
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
sendmsg$tipc(r2, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88)

37.679964509s ago: executing program 1 (id=3485):
capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x0, 0x1040, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r3 = dup(r2)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040))
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 1)

36.768439736s ago: executing program 56 (id=3485):
capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x0, 0x0, 0x0, 0x0, 0x1040, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r3 = dup(r2)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040))
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 1)

36.761296441s ago: executing program 8 (id=3489):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="05030200000000002c0012800b00010069703667726500001c0002800400120014000200fe80"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x80)

36.576450671s ago: executing program 8 (id=3490):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000210a011d29"], 0x38}}, 0x0)

36.396204224s ago: executing program 8 (id=3491):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8000, &(0x7f0000000080)={0xa, 0x0, 0x100000}, 0x20)
move_mount(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121)

36.1958846s ago: executing program 8 (id=3492):
syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902120001000000000904000000ff50cf6e6b3573724f9b"], 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00')
preadv(r0, 0x0, 0x0, 0x0, 0x8001)
r1 = open$dir(&(0x7f0000000480)='./file0\x00', 0x169741, 0x181)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010000000000000000000100ffff0900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000001400038008000240000000000800024000000017140000001000010000000000000000000000000a91e3c49b3fa46fb7a04ef002b92dcf8056c9f135182537a129be64a723dc3be8a48c42552da7635fecba242fa5d98bed68471793965ec074edfdb952816456beb2bf9d47502f211fbdf1e47e3309e6a9e17a75190ff2061b65caedb1f3c927420801d99dde263c9c5039e518e12622fc8576cee14aaae0db5c6cf2203da9c81d5eecea6cfbce6a2a6f18bafc32260c11877eb44046a97f66a9aaa910d131515ec2b1b0b27dd0193b7bd450a64a64a869e581924e7ec2bc5fd0fab138"], 0x88}}, 0x20008844)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007015005068a00000000047c0000040000000c00018006000600800a0000100002800c0003"], 0x34}}, 0xc000)
setsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000540), 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYBLOB='\x00'], 0x14)
fanotify_mark(r0, 0x400, 0x40001012, r1, &(0x7f0000000140)='./file0\x00')
syz_io_uring_setup(0x10d, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x4c}, &(0x7f0000000240)=<r5=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r6 = syz_io_uring_setup(0x80000239, &(0x7f0000000700)={0x0, 0x8984, 0x10100, 0x3, 0x3}, &(0x7f0000000000)=<r7=>0x0, &(0x7f00000001c0)=<r8=>0x0)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
r10 = fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0)
r11 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x40}, 0xc)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r12)
r13 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r12, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @empty, 0x1}, 0x1c)
listen(r13, 0x0)
r14 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r14, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
close_range(r10, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0xc000}, 0x0, {0x0, r9}})
syz_io_uring_submit(r5, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x52, 0x0, 0x7, 0x1, &(0x7f0000000300)="f8fdff6c8d3af008594ca5fc1d66d8485a2ec098b6059002bae0c25afd32a94ac659aedc8d67cd4147f169190f63150ace103d9fec8fb20a3f8263c5dd9d49f3b130ba60de743ea143d3ca06dfe47fcdd77e4338ed5af8a87a9c15cb4d8dff3f5ef1bac3ca5a5818ab3f7d65bee093e50a58a729c72fd533fc27f45009b2e6e1d7ce634d888decf02493d748f23f29ebfce424d963399a8cb6e6c7d95c13", 0x9, 0x0, 0x1, {0x3, r9}})

35.683470684s ago: executing program 4 (id=3493):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x209d}, 0x10)
write(r0, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000015", 0x15)

35.490494471s ago: executing program 8 (id=3494):
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="54000000020605000000000000000000000000000c00078008001240000600000500010006000000050005000a00000005000400000000000900020073797a310000000010000300686173683a68702c6d616300"], 0x54}}, 0x0)

35.039784175s ago: executing program 57 (id=3494):
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="54000000020605000000000000000000000000000c00078008001240000600000500010006000000050005000a00000005000400000000000900020073797a310000000010000300686173683a68702c6d616300"], 0x54}}, 0x0)

35.030688256s ago: executing program 4 (id=3496):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0x1, <r1=>0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x1c)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000940)={'ipvlan0\x00', <r4=>0x0})
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000980), 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0x20, &(0x7f0000000bc0)={&(0x7f0000000ac0)=""/242, 0xf2, <r6=>0x0, &(0x7f00000009c0)=""/154, 0x9a}}, 0x10)
r7 = syz_io_uring_complete(0x0)
r8 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000c40), 0x404001, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xc, 0x11, &(0x7f00000007c0)=@raw=[@map_idx_val={0x18, 0xc, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, @jmp={0x5, 0x1, 0xb, 0xa, 0xb, 0x4, 0x1}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xe4e}, @generic={0x4, 0x0, 0x5, 0xebdd, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x4}, @map_fd={0x18, 0x3, 0x1, 0x0, r3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @alu={0x7, 0x0, 0x3, 0x9, 0x3, 0xffffffffffffffff, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], &(0x7f0000000880)='syzkaller\x00', 0x7fff, 0x42, &(0x7f00000008c0)=""/66, 0x41000, 0x1d, '\x00', r4, @fallback=0x22, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x5, &(0x7f0000000c80)=[0xffffffffffffffff, r7, 0x1, r8], &(0x7f0000000cc0)=[{0x5, 0x1, 0x7, 0xa}, {0x0, 0x1, 0xe, 0x6}, {0x0, 0x2, 0x10, 0xc}, {0x4, 0x4, 0xb, 0x9}, {0x5, 0x4, 0xb, 0x5}], 0x10, 0xd, @void, @value}, 0x94)
r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r9, 0x40405514, &(0x7f0000000a80)={0x1, 0x3, 0x0, 0x20000000, 'syz0\x00'})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r9, 0x40405515, &(0x7f0000000380)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc70, 0x0, 0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000]})
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x4a8, 0x228, 0x228, 0xffffffff, 0x228, 0x0, 0x45c, 0x45c, 0xffffffff, 0x45c, 0x45c, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0xffffffff, 0x0, 'pim6reg\x00', 'dvmrp0\x00', {0x284867cb942d9816}, {}, 0xbc4f28a3537236dc}, 0xac030000, 0x1f4, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth1_to_batadv\x00', {0x800, 0x81, 0x16, 0x1, 0x11000, 0x3, 0x3, 0x6, 0x0, 0x20}, {0x4}}}, @common=@addrtype={{0x2c}, {0x2}}]}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @broadcast, @private=0xa010102, @icmp_id=0x66, @port=0x4e20}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x4, @broadcast, @empty, @port, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @SNAT0={0x34, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @icmp_id, @port=0x2}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xffffff00, 0xffffff00, 'virt_wifi0\x00', 'ipvlan1\x00', {0xff}, {}, 0x62, 0x2, 0x14}, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x14, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @gre_key=0x81, @gre_key=0x6}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x504)

34.635777216s ago: executing program 9 (id=3497):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = epoll_create(0x4)
ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f00000000c0))
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_key={0x2, 0x9, 0x8, 0x0, "e9"}]}, 0x38}, 0x1, 0x7}, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e23, @remote}, {0x2, 0x0, @broadcast}, 0x20})
r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002)
write$binfmt_aout(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8)
writev(r2, &(0x7f0000000a40)=[{&(0x7f00000002c0)="36019c842b680e5956983a285ba5bb71794d7c6051ab94251aabfa893ef804b507668b814fc6c9b839afb957b723246919fa738249cdb573ce74836bb343eddc0ab986", 0x43}, {&(0x7f00000003c0)="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", 0xfc}, {&(0x7f00000004c0)="d040c091fd0673f72245b6347d6a73e95c5df2753682c959e85bb2ba33a34afddca7233655b2822a9c4abce714684a37e0dd4b365b362e0ab4cbbff0a687ea100cde21a1137fc26167ecc10e155bdd9e1e0dad7cb54b32c95118e061", 0x5c}, {&(0x7f0000000540)="70ad6f68a80a3cc1298f8014aa1bc819dd5af9974d9b6572ae37ccb1f92567e16960172cc35c4b4dabf03701da32085b28ef04752b72a2bd98390e70e67d4b0f32415a36deab1e302880edecb975248947b5469151c43512269039d39baca972febbe0bbca5ff956271d54a229a69547c66163b97587674e84a3c0963dfb6f2f3d71da5eb6681fe3f15fee20165db2e7c09f973a4b1159abf264171c253184a74aad9c59525bfa33d8e7a1cba9c71f0081", 0xb1}, {&(0x7f0000000140)="8b3fe32ccccc667bb8d00296dcf8b6b38baf5ede6e145ad5003794f5f59102c1cf31def17a2f5151237296b811009916faf0b3ed522e1ee5ba6329d1b7c5", 0x3e}, {&(0x7f00000006c0)="257f33064e43f77b94ff65d9688f78fe38237ef1cac7b636959dfb0da447157a34796412b69f3fe4e3c20c4d5428e0f17c360e2486a8f1c7e2f8a1b59324f07230268ff3031ef7297410651bb24561a67b4f3d98c63f05539dd21cd2e0dc1d8295d0a7515000b102933859cb87bf7ece13f9113749b738a074aa3a2ca3a33ce0ad0190aaa85ea9e69062f6054b2c412bf74a8412d80f", 0x96}, {&(0x7f0000000780)="34f9a6c04a60302cce4cd3b93f2259f5e9ae6c8b3241184d62156bd753ec5013babd07ce2b0ac6b3140798ba5e8ebf740e56bdff0844bf65a18f415a28fa82679907048ec35c7265a9418552d43c3d015d29adfe46c3ffb5d1950a6c97719b2945461d6ac4a97769b201a8b6ac8e422b1c85a1f88511aa9c9876554b057874e508e9c1365b04ae81027c674c7d82e9dadf9ad7b4c77e6a2db6a3005d7286544c2df9ed2aa05e3c27ab41c3ef4699974fcd09ae93b5c604f2f388f6e0c42c0d8551af84295fc117f1ae188fb0a6a0513b4e42c942498428bf56f936d264", 0xdd}, {&(0x7f0000000880)="ac15b3c51e0c1a3386a84804fab05d0755149a43cf66982bfaad81e1aa39dceeec8ae609c058b3ceb5e2be2048f67cb6ec663b01f6290c4e5df6ccc0a5f8977e7e3163b21c83064d5f89a6a4abee99fa86b879e789f66abf0a3b25ec5c873455bbd4b721b87dcc27b3253301f165f5f297d678dfec79c592489ba07473ea9aefe91ec9453891d45960c4fa2289bda220d190f4b9c31605729d8ae84a825656622b9e1ba13710508dc86542bbc7bd48777be4e278eae6b40d607191c1217db97ecfd52bda7697b0491e30", 0xca}, {&(0x7f0000000980)="96f8ea043efa86419a4ff015fd70e1d500fdc12185ce2d404bec8325f9d73ad73fc10dea2b1713a15dfa3a709fe25666dd36ee365be71157c3b8a12469afd511488d8fd7fa6adba610895042aa2ff1f5c29356a90ba7bf344197bfbaeeb19fd9d4adec54073c2c6b67d4020b4da8fd259b934ed2bf47171e79bedcf5ae47cd72a78cd0d74ab82231ea97ff5f97d25ddd4c624334b25b1c246aa36c50b4e483954318964cc120e462e37516abc5fd42", 0xaf}], 0x9)
write$char_usb(0xffffffffffffffff, &(0x7f0000000400), 0x0)
openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x143240, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0)

33.653708487s ago: executing program 9 (id=3498):
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x15, 0x0, &(0x7f0000000140)="69015438a420bbea40bb7d94bc9db57325f4528ae6", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r1 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0)
syz_usb_control_io$uac1(r1, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0003040000002203"]}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000240)={0x2c, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x5, @string={0x5, 0x3, "00d60b"}}, 0x0, 0x0, 0x0}, 0x0)

33.190809391s ago: executing program 4 (id=3499):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r0, 0x0, 0x0)

33.036041665s ago: executing program 4 (id=3500):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121)

32.959736918s ago: executing program 4 (id=3501):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000040)='.\x00', r0, &(0x7f0000000580)='./file0\x00', 0x0)
move_mount(r0, &(0x7f0000000300)='./file0\x00', r0, &(0x7f0000000280)='./file0\x00', 0x22)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x24, r5, 0x1, 0x70bd2b, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x20)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x80000000, 0xffff8001, 0x2}, 0x10)
write(r2, &(0x7f0000000240)="240000001e005f0214fffffffffffff8070000000000000400080009020d000000000000", 0x24)

32.19296729s ago: executing program 4 (id=3502):
syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902120001000000000904000000ff50cf6e6b3573724f9b"], 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00')
preadv(r0, 0x0, 0x0, 0x0, 0x8001)
r1 = open$dir(&(0x7f0000000480)='./file0\x00', 0x169741, 0x181)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010000000000000000000100ffff0900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000001400038008000240000000000800024000000017140000001000010000000000000000000000000a91e3c49b3fa46fb7a04ef002b92dcf8056c9f135182537a129be64a723dc3be8a48c42552da7635fecba242fa5d98bed68471793965ec074edfdb952816456beb2bf9d47502f211fbdf1e47e3309e6a9e17a75190ff2061b65caedb1f3c927420801d99dde263c9c5039e518e12622fc8576cee14aaae0db5c6cf2203da9c81d5eecea6cfbce6a2a6f18bafc32260c11877eb44046a97f66a9aaa910d131515ec2b1b0b27dd0193b7bd450a64a64a869e581924e7ec2bc5fd0fab138"], 0x88}}, 0x20008844)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007015005068a00000000047c0000040000000c00018006000600800a0000100002800c0003"], 0x34}}, 0xc000)
setsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000540), 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYBLOB='\x00'], 0x14)
fanotify_mark(r0, 0x400, 0x40001012, r1, &(0x7f0000000140)='./file0\x00')
syz_io_uring_setup(0x10d, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x4c}, &(0x7f0000000240)=<r5=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r6 = syz_io_uring_setup(0x80000239, &(0x7f0000000700)={0x0, 0x8984, 0x10100, 0x3, 0x3}, &(0x7f0000000000)=<r7=>0x0, &(0x7f00000001c0)=<r8=>0x0)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
r10 = fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0)
r11 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x40}, 0xc)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r12)
r13 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r12, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @empty, 0x1}, 0x1c)
listen(r13, 0x0)
r14 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r14, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
close_range(r10, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0xc000}, 0x0, {0x0, r9}})
syz_io_uring_submit(r5, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x52, 0x0, 0x7, 0x1, &(0x7f0000000300)="f8fdff6c8d3af008594ca5fc1d66d8485a2ec098b6059002bae0c25afd32a94ac659aedc8d67cd4147f169190f63150ace103d9fec8fb20a3f8263c5dd9d49f3b130ba60de743ea143d3ca06dfe47fcdd77e4338ed5af8a87a9c15cb4d8dff3f5ef1bac3ca5a5818ab3f7d65bee093e50a58a729c72fd533fc27f45009b2e6e1d7ce634d888decf02493d748f23f29ebfce424d963399a8cb6e6c7d95c13", 0x9, 0x0, 0x1, {0x3, r9}})

31.65500915s ago: executing program 58 (id=3502):
syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="120100002d3d6a08c6050592ac29000000010902120001000000000904000000ff50cf6e6b3573724f9b"], 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00')
preadv(r0, 0x0, 0x0, 0x0, 0x8001)
r1 = open$dir(&(0x7f0000000480)='./file0\x00', 0x169741, 0x181)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x88}}, 0x20008844)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007015005068a00000000047c0000040000000c00018006000600800a0000100002800c0003"], 0x34}}, 0xc000)
setsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000540), 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYBLOB='\x00'], 0x14)
fanotify_mark(r0, 0x400, 0x40001012, r1, &(0x7f0000000140)='./file0\x00')
syz_io_uring_setup(0x10d, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x4c}, &(0x7f0000000240)=<r5=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r6 = syz_io_uring_setup(0x80000239, &(0x7f0000000700)={0x0, 0x8984, 0x10100, 0x3, 0x3}, &(0x7f0000000000)=<r7=>0x0, &(0x7f00000001c0)=<r8=>0x0)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0)
r10 = fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0)
r11 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x40}, 0xc)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r12)
r13 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r12, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @empty, 0x1}, 0x1c)
listen(r13, 0x0)
r14 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r14, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
close_range(r10, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, {0xc000}, 0x0, {0x0, r9}})
syz_io_uring_submit(r5, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x52, 0x0, 0x7, 0x1, &(0x7f0000000300)="f8fdff6c8d3af008594ca5fc1d66d8485a2ec098b6059002bae0c25afd32a94ac659aedc8d67cd4147f169190f63150ace103d9fec8fb20a3f8263c5dd9d49f3b130ba60de743ea143d3ca06dfe47fcdd77e4338ed5af8a87a9c15cb4d8dff3f5ef1bac3ca5a5818ab3f7d65bee093e50a58a729c72fd533fc27f45009b2e6e1d7ce634d888decf02493d748f23f29ebfce424d963399a8cb6e6c7d95c13", 0x9, 0x0, 0x1, {0x3, r9}})

30.522243862s ago: executing program 9 (id=3504):
syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ff690b", 0x23, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x0, [0x2400, 0x8]}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x10}}}}}}}}}, 0x0)

30.340956184s ago: executing program 9 (id=3505):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = epoll_create(0x4)
ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f00000000c0))
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_key={0x2, 0x9, 0x8, 0x0, "e9"}]}, 0x38}, 0x1, 0x7}, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e23, @remote}, {0x2, 0x0, @broadcast}, 0x20})
r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002)
write$binfmt_aout(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8)
writev(r2, &(0x7f0000000a40)=[{&(0x7f00000002c0)="36019c842b680e5956983a285ba5bb71794d7c6051ab94251aabfa893ef804b507668b814fc6c9b839afb957b723246919fa738249cdb573ce74836bb343eddc0ab986", 0x43}, {&(0x7f00000003c0)="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", 0xfc}, {&(0x7f00000004c0)="d040c091fd0673f72245b6347d6a73e95c5df2753682c959e85bb2ba33a34afddca7233655b2822a9c4abce714684a37e0dd4b365b362e0ab4cbbff0a687ea100cde21a1137fc26167ecc10e155bdd9e1e0dad7cb54b32c95118e061", 0x5c}, {&(0x7f0000000540)="70ad6f68a80a3cc1298f8014aa1bc819dd5af9974d9b6572ae37ccb1f92567e16960172cc35c4b4dabf03701da32085b28ef04752b72a2bd98390e70e67d4b0f32415a36deab1e302880edecb975248947b5469151c43512269039d39baca972febbe0bbca5ff956271d54a229a69547c66163b97587674e84a3c0963dfb6f2f3d71da5eb6681fe3f15fee20165db2e7c09f973a4b1159abf264171c253184a74aad9c59525bfa33d8e7a1cba9c71f0081", 0xb1}, {&(0x7f0000000140)="8b3fe32ccccc667bb8d00296dcf8b6b38baf5ede6e145ad5003794f5f59102c1cf31def17a2f5151237296b811009916faf0b3ed522e1ee5ba6329d1b7c5", 0x3e}, {&(0x7f00000006c0)="257f33064e43f77b94ff65d9688f78fe38237ef1cac7b636959dfb0da447157a34796412b69f3fe4e3c20c4d5428e0f17c360e2486a8f1c7e2f8a1b59324f07230268ff3031ef7297410651bb24561a67b4f3d98c63f05539dd21cd2e0dc1d8295d0a7515000b102933859cb87bf7ece13f9113749b738a074aa3a2ca3a33ce0ad0190aaa85ea9e69062f6054b2c412bf74a8412d80f", 0x96}, {&(0x7f0000000780)="34f9a6c04a60302cce4cd3b93f2259f5e9ae6c8b3241184d62156bd753ec5013babd07ce2b0ac6b3140798ba5e8ebf740e56bdff0844bf65a18f415a28fa82679907048ec35c7265a9418552d43c3d015d29adfe46c3ffb5d1950a6c97719b2945461d6ac4a97769b201a8b6ac8e422b1c85a1f88511aa9c9876554b057874e508e9c1365b04ae81027c674c7d82e9dadf9ad7b4c77e6a2db6a3005d7286544c2df9ed2aa05e3c27ab41c3ef4699974fcd09ae93b5c604f2f388f6e0c42c0d8551af84295fc117f1ae188fb0a6a0513b4e42c942498428bf56f936d264", 0xdd}, {&(0x7f0000000880)="ac15b3c51e0c1a3386a84804fab05d0755149a43cf66982bfaad81e1aa39dceeec8ae609c058b3ceb5e2be2048f67cb6ec663b01f6290c4e5df6ccc0a5f8977e7e3163b21c83064d5f89a6a4abee99fa86b879e789f66abf0a3b25ec5c873455bbd4b721b87dcc27b3253301f165f5f297d678dfec79c592489ba07473ea9aefe91ec9453891d45960c4fa2289bda220d190f4b9c31605729d8ae84a825656622b9e1ba13710508dc86542bbc7bd48777be4e278eae6b40d607191c1217db97ecfd52bda7697b0491e30", 0xca}, {&(0x7f0000000980)="96f8ea043efa86419a4ff015fd70e1d500fdc12185ce2d404bec8325f9d73ad73fc10dea2b1713a15dfa3a709fe25666dd36ee365be71157c3b8a12469afd511488d8fd7fa6adba610895042aa2ff1f5c29356a90ba7bf344197bfbaeeb19fd9d4adec54073c2c6b67d4020b4da8fd259b934ed2bf47171e79bedcf5ae47cd72a78cd0d74ab82231ea97ff5f97d25ddd4c624334b25b1c246aa36c50b4e483954318964cc120e462e37516abc5fd42", 0xaf}], 0x9)
write$char_usb(0xffffffffffffffff, &(0x7f0000000400), 0x0)
openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x143240, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0)

29.32701317s ago: executing program 9 (id=3506):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58)
r1 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x6, 0x4)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="ad56b6c5", 0x4)
r2 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x1, 0xd01, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8)
recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1}, 0x40002161)
syz_usb_connect(0x3, 0x1e3, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000484d8e40da0b290145d4010203010902d10101000000000904"], 0x0)

27.875291238s ago: executing program 9 (id=3507):
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqn(r0, 0x0, 0x27, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000002100010000000000000000000a00000000000000000000000800060000000000140003"], 0x38}}, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x8, 0xb, 0x4})
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000009c0)={'vcan0\x00', <r6=>0x0})
read(r5, &(0x7f00000002c0)=""/17, 0x11)
r7 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x78, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x40, 0x6, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x3, 0x3, {0x9, 0x21, 0xe, 0x2, 0x1, {0x22, 0x84e}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xb4, 0x3, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x1, 0x2, 0x2}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x1, 0x7, 0x8, 0x10}, 0x35, &(0x7f00000000c0)={0x5, 0xf, 0x35, 0x5, [@generic={0x9, 0x10, 0x1, "9b55024a945f"}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x0, 0xf, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x38, 0xa5}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x1, 0xdc, 0xa83, 0x80}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x7, 0x5, 0x83, 0x2}]}, 0x3, [{0x30, &(0x7f0000000100)=@string={0x30, 0x3, "91bdbd37c601ada9386f909299457d54bcb872709dddb6caa5f0220eff76771c48ae9ae651c2ea12f6df1dc68e76"}}, {0x68, &(0x7f0000000180)=ANY=[@ANYBLOB="6803e0dddb225d1f19a1654517fb7262113b469074fdd16738d0b37bcce4eac57eef2c1ae0c53f00a4d19d519ad87354b95956c5c36df04b3868692c109fc4966a988f567cd4b3e9c8f7f5bf87ec04476c1535a9450f44bc3182050cd49b618c3d5d8db6ab53a36a"]}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x418}}]})
r8 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_S_PARM(r8, 0xc0cc5616, &(0x7f0000000100)={0x5, @capture={0x0, 0x1, {0xd165, 0x8}, 0x5, 0x3}})
syz_usb_control_io$hid(r7, &(0x7f0000000440)={0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="400c0f0000060f247cef797982fbecb9accd77ba0f"], &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x403}}, &(0x7f00000003c0)={0x0, 0x22, 0x26, {[@global=@item_012={0x1, 0x1, 0xb, '\\'}, @global=@item_4={0x3, 0x1, 0x0, "990edab9"}, @main=@item_4={0x3, 0x0, 0xa, "8cec6739"}, @global=@item_4={0x3, 0x1, 0x5ac4ce472b4da46e, "9df2ec39"}, @local=@item_4={0x3, 0x2, 0x3, "623c51f8"}, @global=@item_4={0x3, 0x1, 0x4, "ba62d3a0"}, @local=@item_012={0x0, 0x2, 0xa}, @global=@item_4={0x3, 0x1, 0xa, "293034af"}, @local=@item_012={0x1, 0x2, 0x2, '<'}, @main=@item_012={0x2, 0x0, 0xc, "fa49"}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x12b7, 0x6, 0x1, {0x22, 0x4f}}}}, &(0x7f0000000600)={0x18, &(0x7f0000000480)={0x20, 0x1, 0x3e, "3ff68e2aa7f66d1e492ed6e6d2e46b14e8e2a9b43a7095aff7078c6e827d81fc642c19d556bd232de1aee797364b8ab9eac06af6c5aa5b9dc3ba450986ec"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000580)={0x20, 0x1, 0xd, "bd18db6f203f2757a57c35dff0"}, &(0x7f00000005c0)={0x20, 0x3, 0x1}})
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x8, 0x2, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x10}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r10 = socket$nl_route(0x10, 0x3, 0x0)
bind$can_j1939(r5, &(0x7f0000000200)={0x1d, r6}, 0x18)
r11 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r12=>0x0})
r13 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r12}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

14.99479168s ago: executing program 6 (id=3486):
add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$setperm(0x5, r0, 0x1100100)
stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
keyctl$chown(0x6, r0, r1, 0x0)
ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x3c2e3f0202c57698, 0x5e, 0x80, 0x0, <r2=>0xffffffffffffffff})
getpriority(0x0, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x30, r2, 0x455e9000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x10000}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x10008}, @TCA_RATE={0x6}]}, 0x48}}, 0x0)
add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) (async)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) (async)
keyctl$setperm(0x5, r0, 0x1100100) (async)
stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) (async)
keyctl$chown(0x6, r0, r1, 0x0) (async)
ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x3c2e3f0202c57698, 0x5e, 0x80}) (async)
getpriority(0x0, 0x0) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x30, r2, 0x455e9000) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'netdevsim0\x00'}) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x10000}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x10008}, @TCA_RATE={0x6}]}, 0x48}}, 0x0) (async)

14.724045589s ago: executing program 6 (id=3508):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121)

14.643625997s ago: executing program 6 (id=3509):
socket$nl_generic(0x10, 0x3, 0x10)
socket$can_raw(0x1d, 0x3, 0x1)
socket$packet(0x11, 0x2, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$inet_smc(0x2b, 0x1, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x10)
r1 = socket(0x1, 0x803, 0x0)
pipe(&(0x7f0000000100))
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (fail_nth: 1)

14.243929829s ago: executing program 6 (id=3511):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x4093b, 0x241}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x30, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x0, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0xb263}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x2, 0xffffffff}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x692da25c, 0x1000}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x0, 0x6}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_EXT_MASK={0x8}]}, 0x68}, 0x1, 0xba01}, 0x0)
socket$nl_generic(0x11, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'hsr0\x00', <r5=>0x0})
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000004c0)={r5, 0x1, 0x6}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@dellink={0x38, 0x11, 0x1, 0x1ffd, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, 0x50140, 0x30001}, [@IFLA_PHYS_SWITCH_ID={0x15, 0x24, "42c20a7cfd78fc23ae9dc7b057e6b33995"}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008040}, 0x80cc)

13.942733871s ago: executing program 59 (id=3511):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x4093b, 0x241}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x30, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x0, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0xb263}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x2, 0xffffffff}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x692da25c, 0x1000}}, @IFLA_VLAN_QOS_MAPPING={0x0, 0x1, {0x0, 0x6}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_EXT_MASK={0x8}]}, 0x68}, 0x1, 0xba01}, 0x0)
socket$nl_generic(0x11, 0x3, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r3 = socket(0x10, 0x80002, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'hsr0\x00', <r5=>0x0})
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000004c0)={r5, 0x1, 0x6}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@dellink={0x38, 0x11, 0x1, 0x1ffd, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, 0x50140, 0x30001}, [@IFLA_PHYS_SWITCH_ID={0x15, 0x24, "42c20a7cfd78fc23ae9dc7b057e6b33995"}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008040}, 0x80cc)

12.721256439s ago: executing program 60 (id=3507):
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqn(r0, 0x0, 0x27, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000002100010000000000000000000a00000000000000000000000800060000000000140003"], 0x38}}, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x8, 0xb, 0x4})
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000009c0)={'vcan0\x00', <r6=>0x0})
read(r5, &(0x7f00000002c0)=""/17, 0x11)
r7 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x28bd, 0x78, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x40, 0x6, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x3, 0x3, {0x9, 0x21, 0xe, 0x2, 0x1, {0x22, 0x84e}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xb4, 0x3, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x1, 0x2, 0x2}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x1, 0x7, 0x8, 0x10}, 0x35, &(0x7f00000000c0)={0x5, 0xf, 0x35, 0x5, [@generic={0x9, 0x10, 0x1, "9b55024a945f"}, @ext_cap={0x7, 0x10, 0x2, 0x16, 0x0, 0xf, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x38, 0xa5}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x1, 0xdc, 0xa83, 0x80}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x7, 0x5, 0x83, 0x2}]}, 0x3, [{0x30, &(0x7f0000000100)=@string={0x30, 0x3, "91bdbd37c601ada9386f909299457d54bcb872709dddb6caa5f0220eff76771c48ae9ae651c2ea12f6df1dc68e76"}}, {0x68, &(0x7f0000000180)=ANY=[@ANYBLOB="6803e0dddb225d1f19a1654517fb7262113b469074fdd16738d0b37bcce4eac57eef2c1ae0c53f00a4d19d519ad87354b95956c5c36df04b3868692c109fc4966a988f567cd4b3e9c8f7f5bf87ec04476c1535a9450f44bc3182050cd49b618c3d5d8db6ab53a36a"]}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x418}}]})
r8 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
ioctl$VIDIOC_S_PARM(r8, 0xc0cc5616, &(0x7f0000000100)={0x5, @capture={0x0, 0x1, {0xd165, 0x8}, 0x5, 0x3}})
syz_usb_control_io$hid(r7, &(0x7f0000000440)={0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="400c0f0000060f247cef797982fbecb9accd77ba0f"], &(0x7f0000000380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x403}}, &(0x7f00000003c0)={0x0, 0x22, 0x26, {[@global=@item_012={0x1, 0x1, 0xb, '\\'}, @global=@item_4={0x3, 0x1, 0x0, "990edab9"}, @main=@item_4={0x3, 0x0, 0xa, "8cec6739"}, @global=@item_4={0x3, 0x1, 0x5ac4ce472b4da46e, "9df2ec39"}, @local=@item_4={0x3, 0x2, 0x3, "623c51f8"}, @global=@item_4={0x3, 0x1, 0x4, "ba62d3a0"}, @local=@item_012={0x0, 0x2, 0xa}, @global=@item_4={0x3, 0x1, 0xa, "293034af"}, @local=@item_012={0x1, 0x2, 0x2, '<'}, @main=@item_012={0x2, 0x0, 0xc, "fa49"}]}}, &(0x7f0000000400)={0x0, 0x21, 0x9, {0x9, 0x21, 0x12b7, 0x6, 0x1, {0x22, 0x4f}}}}, &(0x7f0000000600)={0x18, &(0x7f0000000480)={0x20, 0x1, 0x3e, "3ff68e2aa7f66d1e492ed6e6d2e46b14e8e2a9b43a7095aff7078c6e827d81fc642c19d556bd232de1aee797364b8ab9eac06af6c5aa5b9dc3ba450986ec"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000580)={0x20, 0x1, 0xd, "bd18db6f203f2757a57c35dff0"}, &(0x7f00000005c0)={0x20, 0x3, 0x1}})
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x8, 0x2, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x10}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r10 = socket$nl_route(0x10, 0x3, 0x0)
bind$can_j1939(r5, &(0x7f0000000200)={0x1d, r6}, 0x18)
r11 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r12=>0x0})
r13 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x20}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r12}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

6.877670839s ago: executing program 3 (id=3528):
syz_usbip_server_init(0x0)
syz_usbip_server_init(0x0)
r0 = syz_usbip_server_init(0x0)
syz_usbip_server_init(0x0)
syz_usbip_server_init(0x0)
syz_usbip_server_init(0x0)
syz_usbip_server_init(0x0)
write$usbip_server(r0, &(0x7f00000002c0)=@ret_submit={{0x3, 0x3e26, 0x0, 0x1, 0xc}, 0xd, 0x1000, 0xc7, 0x3c7, 0xfffffffd, 0x0, "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", [{0x6e, 0x0, 0x8, 0x8}, {0x200, 0x2, 0x232b, 0x1000}, {0x51e, 0x0, 0x8001, 0x2}, {0x4, 0x9, 0x2, 0x8}, {0x6, 0x6, 0x54, 0x4}, {0x3, 0x0, 0x9, 0x8}, {0x6, 0x8, 0xffff, 0xd}, {0xf54a, 0xb, 0x6, 0x40000}, {0x8, 0x8, 0x10, 0x1}, {0x2b, 0xa7a, 0x7b, 0x5}, {0x3, 0x7fffffff, 0x7, 0x8}, {0x9, 0x8, 0xffff, 0x6d09}, {0x8000, 0xb0, 0x4, 0x100}, {0xc6f6, 0x13bb, 0x4, 0x4}, {0x2, 0x63da076d, 0xf, 0x7ff}, {0xffffffff, 0x8001, 0x6de0, 0x3}, {0xffffffff, 0x7, 0x5, 0x5}, {0x2, 0x1, 0xf667, 0x5}, {0xb0, 0x6, 0x8000}, {0x6, 0x7, 0xf, 0xfb}, {0x8, 0x8c, 0x40, 0x1}, {0x9, 0x80, 0x2, 0x81}, {0x1, 0x3, 0xf, 0xffffffff}, {0x6, 0x6, 0x4, 0x38ff}, {0x5, 0xff, 0xc, 0x7}, {0x2, 0x5, 0xfffffff9, 0x4}, {0x7, 0x253, 0x5, 0x10000}, {0xb9d, 0x8, 0x2, 0x9}, {0x3, 0x4, 0x10000}, {0xfed4, 0x4, 0x8}, {0x552, 0x2, 0xfffffff9, 0xe3e}, {0x4, 0x6, 0xb, 0x9}, {0x0, 0x10, 0x5, 0x8}, {0x7, 0x6, 0x4e, 0x9}, {0x8000, 0x6000000, 0x5, 0x7}, {0x0, 0x9df9, 0x400, 0x7}, {0x6, 0xd39, 0x3, 0x7}, {0x5, 0x1, 0x8}, {0x8, 0x3, 0x1, 0x1}, {0x4, 0x7, 0x1ff, 0x200}, {0x5, 0x2, 0x5, 0x4}, {0x80, 0x7f, 0x1ff, 0x935b}, {0x1940, 0x2, 0xffff, 0x7}, {0xfffffffe, 0x6, 0xdb}, {0xe, 0xbc, 0x5, 0x1}, {0x6, 0x80, 0x6be4fcde, 0x1}, {0x8, 0x80, 0x1, 0x9}, {0xb, 0x3b, 0x2, 0x5}, {0x7, 0x2d0d, 0x5cf6, 0xff}, {0xfffff226, 0x7, 0x41, 0x81}, {0x7, 0x7, 0x8000, 0x8}, {0x3, 0x29, 0x5e, 0x5}, {0x100, 0x4, 0x1, 0xe91c}, {0x7, 0x69, 0x7fffffff, 0x364}, {0x0, 0x9, 0xb6, 0x8278}, {0x9, 0x5, 0x957a, 0x8001}, {0x0, 0x3, 0x0, 0xcc}, {0x0, 0xc15, 0x8, 0x8}, {0x4, 0x2, 0x3eeb, 0x10}, {0x4, 0x8, 0x9, 0x3}, {0x1ff, 0x4, 0x800, 0x1ea790ab}, {0x9d5, 0x1, 0x8, 0x1}, {0x0, 0x101, 0x5, 0x9}, {0x10001, 0x5, 0x9, 0x4}, {0x8, 0x101, 0x0, 0x10000}, {0x0, 0x9, 0x2, 0x80000000}, {0x81, 0x6, 0x8001, 0xffff}, {0x692, 0x6, 0x9, 0x1000}, {0x0, 0x80000001, 0x7, 0x4}, {0x5, 0x101, 0x0, 0xfffffffb}, {0x8, 0x1, 0x1ff, 0xe}, {0x40, 0x7fffffff, 0x6bf9, 0x7}, {0x6, 0x2, 0x2c, 0x1325}, {0x1, 0xf, 0x8, 0x4}, {0x6, 0x8001, 0x3ff, 0xfff}, {0x4, 0xfff}, {0x4, 0x6, 0x8, 0xffff}, {0x1, 0x4, 0x8, 0x5}, {0x3ff, 0x10, 0x5, 0x5}, {0x10001, 0x0, 0x1, 0x9}, {0xff, 0x3, 0x6, 0xe}, {0x4944, 0x3, 0xffffffff}, {0x4, 0x3, 0xe, 0xd}, {0x401, 0x1, 0xfffffffa, 0x1}, {0xa2, 0xac, 0x9, 0x82f}, {0x2, 0xfffffff7, 0x9, 0xffffffff}, {0xfffffff7, 0x3, 0x83e, 0x7}, {0x2f93, 0xfffffff4, 0x2, 0x5}, {0xffff1c93, 0x8, 0x5, 0x8}, {0x5, 0x3, 0x9, 0x3}, {0x9, 0x7, 0x2, 0x8}, {0x5, 0x5, 0x4}, {0x3, 0xd, 0x782, 0x6fd}, {0xb6d, 0x6, 0x4, 0x1}, {0x31, 0x2a, 0x7, 0x4}, {0xb28, 0x5, 0x1, 0x8}, {0x2, 0x2, 0x1, 0x1}, {0xba1, 0xe67c, 0x2, 0x3}, {0x3, 0xab, 0x59ef, 0xe2f7}, {0x4, 0x2, 0x5, 0x1ff}, {0x7f, 0x6, 0x7, 0x6}, {0x5, 0x4, 0x5, 0x9}, {0x8, 0x40, 0xbf65, 0x1}, {0x8, 0x1, 0x7, 0x4000}, {0x2, 0x8, 0x8001}, {0x1, 0x3, 0x80000000, 0x6}, {0x8001, 0x10000, 0x2, 0x5}, {0x8, 0x9, 0xb, 0xe}, {0x3, 0x0, 0x7ff, 0x1}, {0x9, 0x0, 0x90, 0x6}, {0x80000000, 0x5, 0x1, 0x4}, {0x0, 0xfffffffc, 0xffff, 0x9}, {0x9, 0x4, 0x0, 0x8}, {0xa9, 0x204b, 0x5, 0xcf2b}, {0x5d5, 0x5, 0x1, 0x5}, {0x3, 0x3, 0x9, 0x90}, {0x3, 0x0, 0x80000000, 0xcd35}, {0xfffffffb, 0x1, 0x7ba, 0xf1}, {0x2, 0x1, 0xa587, 0x1000}, {0x4aeddc81, 0x9, 0x0, 0x6}, {0x1, 0x8, 0x3, 0xffff}, {0x40, 0xb, 0x1ff, 0x1}, {0x9, 0x1, 0x100, 0x1}, {0x1, 0x6, 0x0, 0x9}, {0x4, 0x4, 0x8, 0x3}, {0x0, 0xfffffffa, 0x2, 0x3}, {0x9, 0x6, 0x0, 0x2}, {0x81, 0x9, 0x2aadd3dc, 0x5}, {0x2, 0xfffffffa, 0x2, 0x800}, {0x7fff, 0x10, 0x0, 0x7}, {0x6946, 0xfffffffa, 0x2, 0x5}, {0x0, 0x8, 0x9, 0x4}, {0x1, 0xb, 0x5, 0x5}, {0xc, 0x22c, 0x0, 0x7}, {0xfffffffc, 0x6, 0x5, 0x9}, {0x401, 0x9307, 0x5, 0x4}, {0x7ff, 0x3d, 0x7f, 0x4}, {0x6df, 0x0, 0x86d8, 0xb86}, {0x1c5599f6, 0xffffffff, 0xd, 0x6a5}, {0x3, 0x8f5d, 0x81}, {0x1b2, 0x236, 0x7f, 0x2}, {0x1140000, 0x4, 0x401, 0x6}, {0x5, 0x7, 0x1000, 0x5}, {0x200, 0x80000001, 0x0, 0xe}, {0x5, 0x1, 0x1, 0x3}, {0xfffffff7, 0xd5f3, 0x2, 0x6}, {0x7e9, 0x3, 0x6, 0x36e}, {0x5, 0x3, 0x81, 0x1800000}, {0xc7c0, 0x8, 0x3, 0x7}, {0x5, 0x3, 0x3, 0x5c1e}, {0x0, 0x7, 0x6, 0x2}, {0x401, 0x7, 0xd07, 0x8}, {0x9, 0x1, 0x1ff, 0x7}, {0x7fff, 0x81, 0x4, 0xc61}, {0x1, 0x2, 0xfffffff8, 0x7}, {0x9, 0x9, 0x2, 0x8}, {0x10001, 0x4c16, 0x6, 0x9}, {0x2b, 0x1, 0x10000, 0x97f4}, {0x9, 0x5c4, 0x4}, {0x6, 0x80d, 0x7, 0x20}, {0x6, 0xe3, 0x3, 0x2}, {0x2, 0x8, 0x6, 0x7f}, {0x73, 0xdae}, {0x80000001, 0xb05, 0x4, 0x7}, {0x10001, 0x3, 0x8, 0x3}, {0xe, 0x4, 0x3, 0x5}, {0x6, 0x2, 0x0, 0xd}, {0x9dc, 0x0, 0x2, 0x8}, {0xf, 0x7, 0x7, 0x80000000}, {0xee, 0x1, 0x0, 0x6}, {0x9, 0x4, 0x8, 0x9}, {0x9, 0x8, 0x1, 0x54ee}, {0x9, 0x5, 0xea000000, 0x75c}, {0x7, 0x2, 0x3, 0x1}, {0x0, 0x2, 0x8, 0x401}, {0x6, 0x5, 0x80000000, 0x8}, {0x7, 0x4, 0x5, 0xaa47}, {0x7f, 0x620, 0x2, 0x8}, {0x676, 0x8, 0x8, 0x6}, {0x3, 0x1000, 0x10001, 0x2}, {0x5, 0x4, 0x7, 0x5}, {0x6, 0x8, 0x8576, 0x3ff}, {0x3, 0xd, 0xffffffff, 0xfffffffe}, {0x5, 0x7, 0x0, 0x4}, {0x84c, 0x76fe, 0x5d6, 0x1000}, {0x9, 0x100, 0x3, 0x9}, {0x3fffc, 0x4, 0x1, 0x861}, {0xfffffffd, 0x8980, 0xd, 0x7}, {0xcd, 0x81, 0x200, 0x6}, {0xa, 0x14, 0x100, 0x5}, {0x4, 0xa, 0x8dc0, 0x2}, {0x1, 0xfffffff2, 0x0, 0x1a}, {0x40000000, 0x80000000, 0x4, 0x1}, {0x0, 0x75, 0x5, 0x10}, {0x5, 0x5, 0x3, 0x6}, {0x400, 0x8f06, 0x80000000, 0xde5}, {0x1, 0x13, 0x4, 0x80000001}, {0x63, 0x9, 0x5, 0xffff}, {0x3, 0x37, 0x7, 0xf}, {0xfff, 0x10, 0x1, 0x6}, {0xfffffff7, 0x5, 0xe, 0x9}, {0x3, 0x7, 0xfffffc01, 0x7}, {0x4, 0x0, 0x401, 0x3e}, {0x0, 0x80000001, 0x2, 0x81}, {0xfff, 0x101, 0x80, 0xfdac}, {0xffff, 0x4, 0x9b6, 0xeefd}, {0x5, 0x2180b92d, 0x8, 0x800}, {0x401, 0x6, 0x8, 0x7}, {0xffffffff, 0x401, 0x3eb, 0x8}, {0x3, 0xb1d, 0x3, 0x101}, {0x5, 0x9, 0x1, 0x5}, {0x7, 0xffff8001, 0x3f, 0x1}, {0x8001, 0x0, 0x3, 0x7d6}, {0x1, 0x8, 0xc, 0xff}, {0x1, 0x7, 0x1, 0xd}, {0x81, 0x1, 0x1, 0x9}, {0x568, 0x3, 0x80000001, 0x9d1c}, {0x8001, 0x1, 0x1, 0x6}, {0x10001, 0x0, 0x1, 0x205}, {0xf, 0x0, 0x9, 0x848}, {0x6, 0x5, 0x4, 0x1}, {0x0, 0x3, 0x1000, 0x7}, {0x40, 0x7, 0x10, 0x4}, {0x7, 0xe688, 0x55be, 0x67}, {0x3, 0x400, 0x9, 0xfffffffc}, {0x6, 0x1, 0xfffffffe, 0x6}, {0x4, 0x3, 0x0, 0xc4e}, {0xffff0001, 0x9, 0x401, 0xfffffc00}, {0xa, 0xffffffff, 0x1, 0x10000000}, {0x6, 0x4, 0x5, 0x40}, {0xad9e, 0x9, 0x9, 0x7}, {0x0, 0xd, 0x2}, {0x80, 0x80000001, 0x8a, 0xfffff565}, {0x9, 0x0, 0x8, 0x63}, {0xa, 0x0, 0x400}, {0xf, 0x4, 0xffff, 0x7}, {0x5, 0x516, 0x10000, 0x5}, {0x7f, 0xfc77, 0x6, 0x3ff}, {0x1, 0x1, 0x1, 0x9}, {0x33, 0xdc, 0x0, 0x9}, {0x805, 0x3, 0x7, 0xe299}, {0x9, 0xa8, 0xd26a5a1, 0x5}, {0x63, 0x8, 0xf, 0x8}, {0x6, 0x1, 0x80, 0x3}, {0x800, 0x3, 0x104, 0x4}, {0x7, 0x10, 0x2, 0xfb}, {0x7115, 0x1, 0x80, 0x401}, {0x401, 0x2, 0x2, 0xffffff07}, {0x2c, 0x80, 0x45b6}, {0x10001, 0x0, 0x3, 0x1}, {0x3, 0x9, 0x0, 0x64d70ecd}, {0xf72, 0x1, 0x7, 0x3}, {0x2, 0xf84, 0x468, 0xa4f}, {0x4, 0xc, 0x1, 0x3}, {0xdc, 0x2, 0x5b, 0x2}, {0x4, 0x7f, 0xf400d46, 0x4}, {0x7ff, 0x7fff, 0x8ce3, 0x3c5f}, {0x6, 0x7, 0x2}, {0x5, 0x7, 0x2, 0x4}, {0x200, 0x1, 0x6, 0x2}, {0xf, 0x3, 0x2, 0xd}, {0xfffffff3, 0x9, 0x80000001, 0x731}, {0x5, 0x25c3, 0x1ff, 0x4}, {0x7, 0x200, 0x0, 0x1d}, {0x4226, 0x76, 0xff, 0xfff}, {0xb, 0x5, 0xffffffff, 0xbf9}, {0xb16, 0xb2, 0x7f, 0x2}, {0x326800, 0xe6, 0x7b4, 0x9}, {0x3, 0x1, 0x80000000}, {0x7fff, 0x5, 0x1b86}, {0x7f, 0x3, 0x9, 0x4}, {0xffff1202, 0x17, 0xe85, 0x4}, {0x5, 0x3}, {0x4b, 0xf3e6, 0x8}, {0xfffff68a, 0xdb, 0x8, 0xbe}, {0x5, 0x41c, 0xe, 0x200}, {0xb, 0x1, 0x5, 0xa9a}, {0x1a2, 0xaa9, 0x7, 0x80}, {0xfffffeff, 0x2, 0x6, 0x6}, {0x244, 0x9, 0x9, 0x101}, {0x2, 0x7, 0x548f, 0x4}, {0x3ae, 0x9, 0x1, 0x6}, {0xdb, 0x4, 0x9, 0x1}, {0x8, 0xb160, 0xd202, 0xff}, {0x40, 0x9, 0x10001, 0x1ff}, {0x5, 0x2, 0xc26, 0x18000000}, {0xfffffffa, 0xbd1, 0x5, 0xefc7}, {0xfff, 0xa8dd, 0x4, 0x9}, {0xb, 0xfff, 0x7, 0x35a}, {0x400, 0x2, 0xc64c, 0x2e}, {0x8, 0x4, 0x5, 0xfffffff7}, {0x7ff, 0xe9e, 0x7, 0x8}, {0x1, 0x5, 0x3, 0x401}, {0x4, 0x2, 0x390, 0x7fff}, {0x4, 0x4, 0x101, 0xfffffffb}, {0x6, 0x0, 0x0, 0x45db7f15}, {0x0, 0xb, 0x5}, {0xa, 0x9, 0x1, 0x4}, {0x80000001, 0x12000000, 0xfffff1e7, 0x6}, {0x2, 0x6, 0x0, 0x6bdcc279}, {0xfffff801, 0x200, 0x8e, 0x4}, {0xefc, 0x0, 0x5, 0x5}, {0x7, 0x4, 0x6}, {0x3, 0x6, 0x6, 0x6}, {0x1000, 0x3, 0x7, 0x6}, {0x7, 0x2, 0x1, 0x8}, {0x9, 0x19cf751c, 0x4, 0x200}, {0x2, 0xfff, 0x8, 0x6}, {0x80, 0x7, 0x9, 0x3}, {0x3, 0x5, 0x4}, {0x7, 0x18000000, 0x10001, 0x1}, {0x3ff, 0xe2a3813, 0x4, 0xfffffff7}, {0x43c, 0xd480, 0x4, 0x5}, {0x9, 0x2, 0x200}, {0x6, 0xd, 0xffffffff, 0xf1}, {0x8, 0x8, 0x8, 0x6}, {0x7, 0x101, 0x3c, 0x4}, {0x6, 0x3, 0x9, 0x2}, {0x8, 0xffffc317, 0xff, 0x8}, {0xaa6eab7d, 0x4, 0x2, 0x5}, {0x6, 0x7, 0x1, 0x4}, {0x9, 0xb0c, 0xecd2, 0x5}, {0x5, 0x1, 0x0, 0x4}, {0xf, 0xe, 0x63, 0x2}, {0x80000000, 0x0, 0x7ff, 0x1}, {0x8, 0x4, 0xd5e, 0x3}, {0xd67, 0x4, 0x0, 0x6}, {0x5, 0x3, 0x7ff, 0x7}, {0x400, 0x0, 0x369, 0x6}, {0x8, 0xfb, 0x6, 0x1000}, {0x2, 0x5, 0x9, 0x7fffffff}, {0x94cf6489, 0x81, 0x1, 0x100}, {0xff, 0x3, 0xf35, 0x8}, {0x9, 0x10, 0x3, 0x7fff}, {0x8000, 0x0, 0x6, 0x1}, {0x1d0, 0x2a, 0x90d, 0xe3}, {0x0, 0xffffffde, 0x5, 0x6}, {0x0, 0x400, 0x0, 0x4}, {0x59, 0xff, 0x3ff, 0x2}, {0x6, 0x6, 0xfffffffe, 0x1}, {0x1, 0x1, 0x9, 0xfffffffd}, {0x0, 0xf, 0x9, 0x5}, {0x81, 0x2, 0xba, 0x6}, {0x0, 0x0, 0x4, 0x9}, {0x8, 0x5, 0x2}, {0x2, 0x10000, 0x1, 0x80000001}, {0x3, 0x7, 0xfffffffa}, {0x3, 0xae8, 0x4, 0xff}, {0xf, 0x0, 0x0, 0x4}, {0x9, 0x8, 0x7f, 0x9}, {0x8, 0xc3fd, 0x6, 0xb2d}, {0x2, 0xd, 0x5, 0x6310ee67}, {0x3, 0x2, 0x80000001, 0xffffffff}, {0xfffffff8, 0x8, 0x1, 0x1}, {0x5, 0x6, 0x3ff, 0xc5f362e}, {0x9d, 0x2, 0x7, 0x1}, {0xfffffff6, 0x7, 0xb000000, 0x7fff}, {0x2, 0x0, 0x894bd8, 0x4d62935e}, {0xffffffff, 0x1, 0x5ccd, 0x3}, {0x0, 0x8, 0xffffffff, 0x5}, {0x49, 0xfffffffc, 0xfffffff8, 0xfffffffd}, {0x10001, 0x80000000, 0xffff, 0x6}, {0x4, 0x1000, 0x9, 0x6}, {0x7fff, 0xebc, 0x2, 0xfffffff7}, {0x40, 0x8, 0x2000000, 0xc}, {0x200000, 0xfffffffb, 0x0, 0x2}, {0x4, 0x4, 0x800, 0x3c}, {0x9, 0x7, 0x7, 0x4}, {0x3ff, 0x400, 0xa, 0x4}, {0x7fff, 0x9, 0x1, 0x5}, {0x8, 0x401, 0x1, 0x9}, {0x6, 0x0, 0x0, 0xfffffffd}, {0xfd5, 0x44ae, 0xd297, 0xbdd}, {0x1, 0x1, 0x1, 0x6}, {0x5, 0x92c7, 0x0, 0x1}, {0x8, 0x9, 0x0, 0xfffffd16}, {0x2, 0x8, 0xe, 0xfff}, {0x4, 0x4, 0xffffffff, 0x3}, {0x9, 0x401, 0x0, 0x40}, {0x1ff, 0x3, 0x400000, 0x3}, {0x4, 0x6, 0x4, 0x4}, {0x7, 0x9, 0x100, 0x5f}, {0x46bb368c, 0x40a, 0x7e, 0x9}, {0x6, 0x8, 0x1, 0x2}, {0x2, 0x4, 0x3, 0x7}, {0x401, 0x2, 0xa, 0x9}, {0x80000000, 0xf5, 0x1, 0x10}, {0x81, 0x7, 0x0, 0x8}, {0x9, 0x76, 0xfe, 0x7ff}, {0x9, 0x6, 0x5, 0x4}, {0x7, 0x8, 0x3, 0x26880000}, {0x10000, 0xe557, 0xa6a0, 0x9}, {0x3, 0x3da, 0xdf5, 0x2}, {0x7, 0x7, 0x1ff, 0x40}, {0xffffffff, 0x2, 0x2, 0xffff}, {0x7, 0x5, 0x9, 0x58b}, {0x4d9c, 0x8, 0x9, 0x4b4}, {0xfa3, 0x6, 0x2, 0x5}, {0x383, 0x101, 0x4, 0x7fff}, {0xe8b, 0x0, 0x5, 0x7}, {0x7, 0x83b8, 0x6}, {0x2, 0x3, 0x9, 0x6f8}, {0x3, 0x3, 0x5, 0x5618326}, {0xffffffff, 0x36d, 0x3, 0x2}, {0x82, 0x1, 0x5, 0x3}, {0x3, 0xec9e, 0xfffffff8, 0xd2}, {0x1, 0x8, 0x5}, {0xffc00000, 0x0, 0x10001, 0x4}, {0x6, 0x0, 0x6740, 0x1}, {0x101, 0x5, 0x5, 0xfffffff9}, {0x3d7, 0x85d, 0x8, 0x3}, {0x0, 0x0, 0x5, 0x834a}, {0x1000, 0xffffffff, 0x66c3, 0xff}, {0x7, 0x2, 0xff, 0x9d6a}, {0x21ec, 0x3, 0x8, 0xe}, {0x1, 0x0, 0x4b70, 0x8}, {0xec, 0x5, 0xb6, 0x370b}, {0x2, 0x8, 0x3, 0x1}, {0x6, 0x6, 0xffffffb6, 0x1}, {0x81, 0x1, 0x100, 0x26}, {0x9, 0x6, 0x9, 0x5}, {0x3, 0x7ff, 0x4, 0x2}, {0x9, 0x9, 0x7, 0x1f}, {0x7ff, 0x1ff, 0x7fffffff, 0xfffffff7}, {0x8001, 0x7ff, 0x7, 0x81}, {0x417, 0x5, 0x0, 0x2}, {0x6d72, 0x2, 0xfffffffa, 0xfffff1a8}, {0x5, 0x8000, 0x10, 0x800}, {0x7f, 0x1, 0x80000001, 0xef}, {0xffffffc0, 0x80, 0x0, 0xfffffffc}, {0x1, 0x3df, 0x1, 0x400}, {0xd, 0x10001, 0x1592, 0x6ee5bf24}, {0xe7, 0x8, 0x9026, 0x2}, {0x2, 0x7e03, 0x6, 0xfffffff8}, {0x6, 0x8, 0x1, 0xaa5}, {0x100, 0x3ff, 0x3, 0x2}, {0x2, 0x4, 0x7fffffff, 0x3}, {0x8, 0x4, 0x1, 0x9}, {0xb04f, 0x0, 0x400, 0x1}, {0x5, 0x45a4, 0x5, 0xd}, {0x1ff, 0x6, 0x7f, 0x3}, {0x7, 0x8000, 0x9, 0x40}, {0x1, 0xd, 0xf0d, 0x2}, {0x7f, 0x5, 0xf6, 0x4}, {0x1, 0x2, 0xffffffff, 0x8}, {0xffffffff, 0x3e, 0x80000001, 0x1ff}, {0x7, 0x341a, 0x2c, 0xfffffffe}, {0xc3, 0x6800000, 0x8, 0x3}, {0x80000000, 0x100, 0x9, 0x8}, {0xd9, 0x40, 0x9, 0x468}, {0xd7ad, 0xd, 0x8001, 0xffff6def}, {0xea33eb1, 0x8, 0xb07, 0x6}, {0x6, 0x7, 0x5, 0x7}, {0x5a, 0x3, 0x6, 0x4}, {0x7fff, 0xbaa2, 0x81, 0xd88}, {0x1, 0x7f, 0x8, 0x5}, {0xffff8000, 0x2, 0x5, 0xf9a5}, {0x0, 0x9, 0x80000001, 0x8}, {0x8, 0x6, 0x13, 0x3ff}, {0xb285dae, 0x101, 0x2c08, 0x5}, {0x6ff6ff88, 0xffffffff, 0x2, 0x6}, {0x0, 0x5, 0x8001, 0x4}, {0x672d, 0x7, 0xfeb2, 0x6}, {0x543b, 0x7e, 0x2d79, 0x7fffffff}, {0x7, 0x8, 0x2, 0x3}, {0x4, 0x5, 0x1, 0x1000}, {0x54, 0x627, 0x7ff, 0x80000000}, {0xffff56cb, 0x1, 0x0, 0x101}, {0x2, 0x7f6, 0xd, 0x5}, {0x0, 0x8, 0x81, 0xe0000000}, {0x2, 0x7, 0x9, 0x5}, {0x10000, 0x7, 0x2, 0xb95}, {0x26e4, 0x1, 0x4, 0x5}, {0x7fff, 0x0, 0x0, 0x1}, {0x5d, 0x8be, 0xf, 0x40}, {0x8, 0xfffffe00, 0x4, 0x80000001}, {0x7, 0xffff, 0x1, 0x5}, {0x6, 0x163, 0x8, 0x1}, {0x7, 0x3, 0xffffd155}, {0xeec, 0xd1a2, 0x2, 0x573}, {0x7, 0x7193, 0x8, 0x62a599b1}, {0x6, 0x5, 0x6, 0x1}, {0xb617, 0x800, 0x0, 0x6}, {0x2, 0x9, 0x200, 0xfffffff2}, {0x3, 0x9, 0x80000001}, {0x5, 0x66, 0x1, 0x4}, {0x10000, 0x7, 0x8557}, {0xb767, 0x4, 0x96, 0x9d6}, {0xa, 0xce8, 0x0, 0x81}, {0x70b, 0x0, 0xda, 0x2}, {0x3b50, 0x7, 0xeb, 0x7}, {0x751e, 0x6, 0x7, 0x9}, {0x8, 0x81, 0x40, 0x3}, {0x7, 0xb, 0x9, 0x2}, {0x7, 0x4, 0x6, 0xd22}, {0x9, 0x1, 0x3, 0x800}, {0x7, 0x1000, 0x7, 0xd47}, {0x10, 0xb5, 0x1ff, 0xffffffff}, {0x3ff, 0x7, 0x763, 0x9}, {0x6c0b, 0x3, 0x8, 0xd}, {0x6, 0x1ff, 0xad, 0x9}, {0xfffffff7, 0x88, 0x2, 0x3}, {0x1, 0x9, 0x40, 0x10001}, {0x65a8, 0x2, 0x40, 0x1}, {0x38000000, 0x8000, 0x7, 0xa}, {0x7, 0x0, 0x8da, 0xc}, {0x8, 0x9, 0x6, 0x7}, {0x8, 0x1, 0x7, 0x1}, {0x1, 0x2, 0xfffff4a1, 0x8}, {0x1ff, 0xc37, 0xffffffff, 0x8}, {0xf, 0xff, 0x2, 0x3}, {0x4a, 0x9, 0x2, 0x5}, {0x0, 0x4, 0xc3, 0x6}, {0x4, 0x7fff, 0x10, 0x7}, {0x8, 0x6, 0x8, 0xff}, {0xfffffffe, 0x83aa, 0x7f, 0x2}, {0xc, 0x82a6, 0x8, 0x3}, {0x2, 0x6, 0x669, 0x7ff}, {0x1, 0x3, 0x16, 0x1}, {0x80cc, 0xb36, 0x6, 0x1}, {0x6, 0xad, 0x2, 0x9}, {0xfffffffc, 0xb7b4, 0x8000, 0x1}, {0x8, 0x4, 0x63, 0x4}, {0x3, 0x1, 0x5, 0x56d1}, {0x5, 0x3, 0xed9d, 0xc65}, {0x4, 0x6, 0xffffffff}, {0x9, 0x3, 0x6, 0x9}, {0x800, 0x1, 0x7f, 0xffff}, {0x10000, 0x80000001, 0x8, 0xeb67}, {0x0, 0x7, 0x0, 0xa}, {0xfffff217, 0x8, 0xd0, 0xffffffe4}, {0x4, 0x3114dd48, 0x7, 0x9}, {0x1, 0xe2f, 0xc, 0xfffffa19}, {0x9150, 0xfffffff8, 0x6}, {0x80, 0x7, 0x9, 0xffffffff}, {0x5d, 0x7, 0x7, 0x6}, {0x4, 0x9, 0x9, 0x5}, {0x0, 0xc7, 0x80000001, 0x9}, {0x1, 0x5, 0x7fff, 0x14}, {0x7, 0x4, 0x86}, {0x6, 0x5031, 0xfffffffe, 0x8}, {0x2, 0x6, 0x4, 0x9}, {0x7, 0x5, 0x1, 0x7ff}, {0x80000001, 0x0, 0x401, 0x7fff}, {0x3, 0xe07, 0xffffffff, 0x7}, {0x401, 0x10, 0x9, 0x10}, {0x7, 0x143a8de, 0x0, 0x10}, {0x1, 0x0, 0x4, 0xfda}, {0x81, 0x8, 0x9, 0x7}, {0xc92, 0x3f21, 0x2, 0xd7}, {0xff, 0x0, 0x0, 0x6}, {0x2, 0x800, 0xed7, 0x1}, {0x1f, 0x2, 0x7, 0x7}, {0x2, 0x2, 0x7, 0x7fff}, {0xd, 0x5, 0x4, 0x2}, {0x6, 0x9, 0x8f1, 0x4}, {0x800, 0xeec, 0x1, 0x5}, {0x1fa, 0x3, 0xc, 0x8001}, {0x8, 0xfd, 0x5, 0x7}, {0x1, 0x3, 0x80, 0x80}, {0x5, 0x2, 0x200, 0x8}, {0x84d, 0xfffff8cc, 0x0, 0x10}, {0x800, 0x5, 0xfffffffa, 0xffffffab}, {0x9, 0x9, 0x1, 0x6}, {0x5, 0x99c4, 0x7ff, 0x2}, {0x4, 0x8, 0x80000001, 0x4}, {0xf, 0x80, 0xb, 0x7}, {0x49bf2ee, 0x80000000, 0xe, 0xfffffff9}, {0x80000001, 0x8001, 0xa, 0x1}, {0x2, 0xf, 0x0, 0x6}, {0x4, 0x8, 0xfff, 0xd4e}, {0xb33, 0x8, 0x4, 0x1}, {0x1ff, 0xfffffff9, 0x3, 0x1}, {0x81, 0xe4bb, 0x1, 0x2}, {0x400, 0x3, 0x40, 0x8}, {0x6, 0x3, 0x3e6, 0x8001}, {0x1, 0xffffff31, 0x1}, {0x8, 0x2, 0x6, 0x81}, {0x1000, 0xb, 0x6, 0x9}, {0x10, 0x401, 0x101, 0x3}, {0x0, 0x80000001, 0x8, 0x4}, {0x8, 0xf3, 0x1, 0x10000}, {0x1, 0x8001, 0x401}, {0x9, 0x4, 0x0, 0x5}, {0x7af40000, 0x100, 0x9, 0x5}, {0x2, 0x9, 0x100, 0x81}, {0x89, 0x500, 0x9, 0x8}, {0x7, 0x1, 0x7, 0x8}, {0x6c6d0c77, 0x51ce, 0x21, 0xffff}, {0x1, 0x7, 0x10, 0x1}, {0xffffffb3, 0x3, 0x4, 0x73f2}, {0x6, 0x5, 0x1, 0x5}, {0xdb, 0x6, 0x5, 0x7}, {0x0, 0x7, 0x5, 0x8}, {0x3, 0x8, 0x10001, 0x2}, {0xc, 0x81, 0x7, 0x1}, {0x6, 0xc00, 0x7, 0x4}, {0xe, 0x3f, 0xf245, 0x7}, {0x8, 0xfff, 0x5, 0x5}, {0x3a, 0x10001, 0x1, 0xa3}, {0x6, 0x7, 0xfffffff9, 0x5}, {0x37f9, 0x4, 0x37, 0x2}, {0xc, 0x101, 0x0, 0x6}, {0x9f, 0x7, 0xaae, 0x3}, {0x0, 0x10, 0x7ff, 0x1}, {0x6d, 0x800, 0x7fa, 0x8}, {0x2, 0xc5, 0xfffffffb, 0x6}, {0xfff, 0x400, 0x7fff, 0x8}, {0x4, 0xffff1907, 0x2, 0x7fffffff}, {0x8, 0x1000, 0xc8, 0x8}, {0x1ff, 0x1, 0xe, 0x2}, {0x10000, 0x6c, 0x401, 0x70a}, {0x7, 0x1, 0xe1, 0x7}, {0x6, 0x5, 0xf09a, 0x280a}, {0x0, 0x400, 0x5, 0x1}, {0x6, 0x7, 0x7, 0xff}, {0xfffffffe, 0xd58, 0x3, 0x8}, {0x3e020210, 0x10001, 0xfffff0ca, 0xf}, {0x7, 0x0, 0xfffffff7, 0x5}, {0x7, 0x1, 0x5, 0x6}, {0x2, 0x7, 0x3, 0x401}, {0x2, 0x8, 0xfffffffb, 0x3}, {0x7fffffff, 0x4, 0x1, 0x80000000}, {0x6, 0x0, 0xfffffff7, 0x5}, {0x0, 0x1, 0x7ff, 0xfffffffe}, {0x8, 0x7fffffff, 0x3ff, 0x6}, {0x7, 0x9, 0x3, 0xffff9658}, {0x2, 0x4, 0xbb36, 0x9e2}, {0x0, 0x0, 0x9, 0x8001}, {0x4, 0x8001, 0x81, 0x1}, {0x6, 0xf, 0x40, 0xfff}, {0x81, 0x39e, 0x0, 0x14b}, {0xce7, 0x0, 0xbd8, 0x1}, {0x2, 0xf, 0x8, 0x6}, {0x7, 0x6, 0xe19, 0x2}, {0x1, 0x3, 0x3, 0x8}, {0xad8, 0x0, 0x8}, {0x5acd, 0x1, 0x8, 0xd0}, {0x5, 0x3, 0x9, 0x2}, {0x6, 0x348a820d, 0x1da, 0x4}, {0x4, 0x0, 0xff, 0x6}, {0x0, 0x0, 0x1, 0x4}, {0x0, 0xb, 0x6, 0xcfa}, {0x6, 0xf, 0x40, 0x6}, {0x8, 0x6, 0x16c, 0x7fffffff}, {0x4, 0x2, 0x1, 0x7}, {0x7, 0xde7a, 0x8, 0x80000000}, {0x10, 0xfffffff9, 0x4, 0x899d}, {0x2, 0x0, 0x8ae, 0x3}, {0x3, 0x5, 0xa79, 0x977f}, {0x2, 0x2, 0x1, 0xe}, {0x3, 0x7e7c, 0xb, 0xffff7fff}, {0x7fffffff, 0x6, 0xa06}, {0x4, 0xff, 0x8, 0x7fffffff}, {0x6, 0x4, 0x5, 0xc}, {0xf, 0xfffffffc, 0x7950, 0x6}, {0x6, 0x2, 0x6, 0x7}, {0xa9, 0x4, 0x4, 0x5}, {0x4, 0x7, 0x1, 0x7}, {0x10000, 0x4, 0x2, 0x8}, {0x3, 0xff, 0x1, 0x7}, {0x800, 0x7, 0x3, 0x4}, {0x7, 0x16b, 0x2, 0x3}, {0xffff306d, 0x8, 0x0, 0x27b38d2e}, {0x2, 0x792, 0x9, 0x8000}, {0x4, 0x7, 0xffffffff, 0x80}, {0x8001, 0x7, 0x6, 0x9}, {0xa, 0x7, 0x1, 0x101}, {0x7fffffff, 0x1000, 0x3, 0xd445}, {0x0, 0x66aa, 0x81, 0xacd3}, {0x1, 0x2, 0x4, 0x8}, {0x7c, 0x826, 0x45, 0x4}, {0xe, 0x1000, 0x1, 0x7}, {0x0, 0x3, 0x1000, 0x2}, {0x7f, 0x3, 0x9}, {0x5, 0x1e, 0x3, 0xd}, {0x1, 0x9, 0x0, 0xd}, {0x1, 0x6, 0x7, 0x3ff}, {0x3ff, 0x1, 0x5, 0x5}, {0x3, 0x9, 0x2, 0x7}, {0xfffff800, 0xfffffffd, 0x6, 0xf}, {0x8, 0x7ff, 0x7, 0x5}, {0x4cb, 0x7, 0x1, 0x9}, {0x9, 0xb0, 0x7, 0x9}, {0x2, 0x0, 0x4, 0x8c}, {0x7fff, 0x800, 0xa6, 0x8}, {0xfffffa6e, 0x1, 0x9, 0x7}, {0x800, 0x0, 0x7}, {0x7, 0x8, 0x0, 0x8}, {0x401, 0x4, 0xb, 0xf}, {0x9, 0x5, 0x5b, 0x4}, {0x2, 0x1a, 0x4, 0x80000001}, {0x68, 0x1, 0x0, 0x3}, {0xe, 0xb57b, 0x7, 0x7}, {0x1, 0x8, 0x2, 0x1ff}, {0x4f9, 0xf, 0x8, 0x3}, {0x8, 0x5, 0x5, 0x5}, {0xfff, 0x367, 0x6, 0x5}, {0xc06, 0x0, 0x7f, 0xf}, {0x6, 0x7ff, 0x80000001, 0x4c12}, {0x143, 0x6, 0x1, 0x8137}, {0x4, 0x101, 0x4, 0x4}, {0x800, 0x200, 0x9, 0x6e}, {0x6, 0x401, 0x2, 0x1}, {0xb, 0x7, 0x45, 0x2}, {0x1, 0x9, 0x6, 0x2}, {0x18d, 0x5, 0x2, 0x7}, {0x6, 0xb04, 0x6, 0x800}, {0xfffffffc, 0xff, 0x94, 0x5}, {0x6, 0x2, 0x27c, 0x5}, {0xfea, 0x8, 0x7, 0x4}, {0x5, 0xd, 0x4, 0x3}, {0xfff, 0x2, 0x800, 0xc22}, {0xa, 0x80, 0x9, 0x7fffffff}, {0x0, 0x8000000, 0x3, 0x8}, {0x7, 0xca6, 0x9}, {0x5, 0x7, 0x6, 0x400}, {0x8, 0x6, 0x0, 0x8}, {0x3, 0x0, 0x7, 0xeb8}, {0x2, 0x10, 0x6fc, 0x80}, {0xfffffff9, 0xffff8001, 0x0, 0x300}, {0x9, 0x1, 0x5, 0xffff29d3}, {0x1000, 0x825b, 0x4, 0x8}, {0x8, 0x1ff, 0xffffff4e, 0x4}, {0x8000, 0xfffffff8, 0x10000, 0xb}, {0x6f, 0x0, 0x8, 0x8}, {0x1, 0x0, 0x4, 0x8}, {0x5, 0x9, 0x6}, {0x4, 0x7, 0x7ff, 0xffffffff}, {0x4, 0x7, 0xfffff801, 0x4}, {0x530, 0xd, 0x5, 0x2}, {0x80000000, 0x0, 0x4, 0x5}, {0x7, 0x0, 0x31c241c7, 0x1000}, {0xdcc7, 0x4, 0x9, 0x3986}, {0xf12e, 0x6, 0x6, 0xd}, {0x4, 0x1, 0x7, 0x1}, {0x600000, 0x6, 0x1, 0x5}, {0x7, 0x4, 0xd}, {0x1000, 0x2, 0x1, 0x7b664cee}, {0x80000001, 0x7, 0x1, 0x9}, {0x40d3, 0x750, 0x96, 0x9}, {0xc9b, 0x9, 0x8, 0x1000}, {0xfffffffd, 0x8, 0x6, 0x7}, {0x4, 0x0, 0xa, 0x7f}, {0x8, 0x2, 0x4, 0x4}, {0x1000, 0xa2, 0x7f, 0xe3}, {0x7fffffff, 0x5, 0x6, 0x8}, {0xfffffff7, 0x2, 0x5, 0x5}, {0x7, 0x0, 0x2, 0x7ff}, {0x9, 0x8, 0x0, 0x5}, {0x1000, 0x1000, 0xd7a6, 0x808}, {0x8, 0x8001, 0xbd, 0xfffffff8}, {0xd4, 0x1, 0x0, 0x3}, {0x8000, 0x80000000, 0x4, 0x5}, {0x1, 0x0, 0x170d3287, 0x8}, {0x200, 0x0, 0x172, 0x3}, {0x6, 0x8, 0x6, 0x7}, {0x7, 0x0, 0x3, 0x4c532750}, {0x10, 0x10000000, 0xffffffff, 0x6}, {0x8, 0x13, 0x12, 0x9}, {0x5, 0xd, 0x1, 0x1}, {0x0, 0x0, 0x5, 0x671}, {0x80000000, 0x0, 0xb}, {0x1, 0x7, 0x81, 0x354}, {0xd41, 0xffff, 0x0, 0xc}, {0x4, 0xf0, 0xfffffffa, 0x40}, {0x5, 0x1, 0x3ff, 0xfffffc00}, {0x3, 0x0, 0x0, 0x3}, {0xff, 0x6, 0xffffffff, 0x7}, {0x0, 0x4, 0x2, 0xa6f00}, {0x8, 0x6, 0x80000, 0xd}, {0xfffffffd, 0x9, 0x6f, 0x7}, {0x8, 0x6, 0x4, 0x7}, {0x3a, 0x1, 0x6, 0x800}, {0xba25, 0x10001, 0xfffff412, 0x3}, {0x0, 0x6, 0x8, 0xfffffffe}, {0x9, 0x5, 0xfff, 0xffffff94}, {0x0, 0x9, 0x9, 0x10001}, {0x80000000, 0x401, 0x59, 0x3}, {0x4, 0x7, 0x3ff, 0x4bf}, {0x8, 0x6, 0x4, 0x942b}, {0x5, 0x400, 0x8, 0x3}, {0x1000, 0x7, 0x8, 0x3ff}, {0x2, 0x9b4a, 0x3, 0x3}, {0x3, 0x81, 0x7ff, 0xd}, {0xfffffffe, 0xa9f7, 0x101, 0x5}, {0x0, 0xffff, 0x800, 0x9}, {0x2, 0x5, 0x8, 0x2}, {0x37d, 0x0, 0x3, 0x4}, {0x1e1, 0x3, 0x8, 0x4}, {0x1, 0x10000, 0xc7f2, 0x8}, {0xf0, 0x7, 0xf, 0x4}, {0x8, 0x7, 0x800, 0x2}, {0x8, 0x0, 0x1000, 0x800}, {0x6, 0x2, 0x10001, 0x1}, {0x8, 0x8, 0x9, 0x39}, {0xffff, 0xfffffff8, 0x7f, 0x100}, {0xd, 0x0, 0x9, 0x3ff}, {0x3ff, 0xf, 0x9, 0x8}, {0x9, 0x99b, 0x8, 0x9}, {0x28, 0x2, 0xffff, 0x4d}, {0xffffff2c, 0x9, 0x9}, {0xfffffff8, 0x10001, 0x3, 0x2}, {0x1ff, 0x3, 0x18133564, 0x7}, {0xffffff3a, 0x7, 0x8, 0xa}, {0x7, 0x6, 0xfffffc01, 0x7ff}, {0x4, 0x200, 0x9}, {0x6, 0x5, 0x5, 0x3}, {0x80000000, 0x5, 0x4, 0x4}, {0x4, 0x100, 0x5, 0x40}, {0xd87, 0x714, 0x8001, 0x6}, {0x88, 0x4, 0x8000, 0x1}, {0x4, 0x7, 0xa4, 0x2}, {0x5c3, 0x9e, 0x5, 0xc}, {0x2, 0x8, 0x6, 0xf5}, {0x6, 0xd3, 0x6, 0x91fd}, {0xff, 0x0, 0x80000000, 0x5f}, {0x7, 0x5, 0x7981, 0x1}, {0x8, 0xe, 0x100, 0x9}, {0x77bc, 0x4, 0x401, 0x8}, {0xb, 0x5, 0x6, 0x2}, {0x5, 0x9, 0x6, 0x40}, {0x7, 0x6, 0x9, 0x7}, {0x9, 0xe8a1, 0x6, 0x8}, {0x5, 0x0, 0x7, 0x101}, {0x10001, 0x88ae, 0x197, 0x7ff}, {0x8000, 0x2, 0x3a, 0x6}, {0xf5, 0x8, 0x8, 0x100}, {0xffff, 0x7, 0x1, 0x4}, {0x2, 0xd, 0x7, 0x3}, {0x6, 0x2, 0x3, 0x8}, {0xe74, 0x7fffffff, 0x81, 0x3}, {0x200, 0x6, 0x29b, 0xcc}, {0x2, 0x1, 0x3, 0x8}, {0xbfec, 0x6, 0x7, 0x3}, {0x8, 0x8001, 0x6, 0x641}, {0x3b, 0x38e1, 0xb, 0x2}, {0xd9a, 0x7, 0x3, 0x8000}, {0x10, 0x7, 0x3, 0x80000000}, {0x80000000, 0x3, 0x4, 0x3}, {0x4, 0x7}, {0x80, 0x3ff, 0x8, 0x5}, {0x40, 0x24, 0x9, 0x7}, {0x4, 0x4, 0xffffffa1}, {0x401, 0x7, 0x2, 0x7fff}, {0x7, 0x7c3b, 0x8ee, 0xc4}, {0xffffffff, 0x2, 0x5, 0x7}, {0x2, 0x800000, 0x10, 0xe39c}, {0x6a53, 0x3, 0x0, 0x10}, {0x10000, 0x4bcd, 0x9, 0x40000}, {0x8, 0x9, 0xfb08, 0x10001}, {0xfffffff8, 0x7, 0x758, 0xc56}, {0xd8, 0x72, 0x1, 0xc}, {0xec7, 0xa5d, 0x3, 0x9}, {0x412, 0x800, 0x1ff, 0x100}, {0x2ac3513b, 0x1ff, 0x7, 0x1}, {0x8, 0x8, 0xc0000000, 0x6}, {0x40, 0xfa75, 0x2, 0x7ff}, {0x7, 0x3, 0x0, 0xfff}, {0xffff6f3d, 0x37ad, 0xb503}, {0x2, 0x9, 0x7, 0x7ff}, {0x5, 0xff, 0x3}, {0x9, 0x9, 0x3, 0x2400}, {0x30, 0x3, 0x2, 0x7fff}, {0x8, 0x4, 0x4, 0x8}, {0x2, 0x8, 0x40, 0xf}, {0x1, 0x4, 0xe, 0x8}, {0xfffffffb, 0x3, 0x400, 0x5}, {0x80000001, 0x1, 0x2, 0x4}, {0x3, 0xffff, 0xb, 0x86}, {0x4, 0x9, 0x0, 0xc}, {0x6, 0x9, 0x9, 0x1}, {0x6, 0xffffffff, 0x5, 0x9}, {0x0, 0x2, 0x5, 0x6506}, {0x80000, 0x6, 0x1}, {0xffffffe3, 0x69, 0xfffffff7, 0x20f8}, {0x1, 0x10001, 0x8, 0x3}, {0x2, 0x7, 0x8000, 0x1}, {0x6, 0xf77, 0x46a, 0x1ce}, {0x2, 0x8, 0x811, 0xa}, {0x2, 0x8, 0x10001, 0x1000}, {0x6, 0x0, 0x6, 0x1}, {0x5, 0x401, 0x3, 0x2}, {0xf73a, 0x2, 0x7, 0x1}, {0xd, 0x0, 0x8, 0x8}, {0x2, 0x1, 0x0, 0x80}, {0xfffff001, 0xff, 0x2, 0x508}, {0x2, 0xccb4, 0xd12, 0x3}, {0x8, 0x98, 0xcc5, 0x80000000}, {0xeac, 0x3b0, 0xfffff0c2, 0x5}, {0x10, 0x2, 0x9, 0xfffffff4}, {0xfffffff6, 0x7, 0x5, 0x1}, {0xffff8001, 0x9d3, 0x22b5, 0x98c}, {0x1, 0xb9, 0x2, 0x6}, {0x6, 0xff, 0x10, 0x8}, {0x7edf, 0x0, 0x2, 0x1}, {0x8000, 0x7f, 0x6, 0x1}, {0x8, 0x101, 0x7ff, 0x5}, {0xf07d, 0xd3, 0xfffffffd, 0x9d8}, {0xfee8, 0xffffffa0, 0xb}, {0x9, 0x5, 0x0, 0x80}, {0x1000, 0x3, 0x8, 0xffffb13d}, {0x8ec6, 0xd3, 0x8, 0x2}, {0x51921af2, 0x0, 0x100}, {0x6, 0x100, 0x8, 0xfffffffd}, {0x0, 0x7, 0xf175, 0x7}, {0xc, 0x4, 0x8, 0xfffffffe}, {0x0, 0x6da3, 0x3, 0xffff}, {0x101, 0x5b5, 0x4, 0x1}, {0x2, 0x90ca, 0x8, 0x5}, {0xffff, 0x1, 0x80, 0x1}, {0x73c, 0x10001, 0xb, 0x9}, {0x0, 0x6, 0xcb7, 0x77800}, {0xfff, 0x9, 0x7, 0x7}, {0x0, 0x9, 0x4, 0x2}, {0x4, 0x8, 0x6f6, 0x7}, {0x3, 0x4, 0x0, 0x7}, {0x2, 0xfffff515, 0x4, 0x4}, {0x8, 0xefd7, 0x0, 0xfffffffb}, {0x7f, 0x9, 0xfffffffa, 0x42}, {0x7, 0x1, 0xcb6, 0x3b}, {0x4, 0x1, 0x7, 0x81}, {0x5, 0x3, 0x1ff, 0x8}, {0x6, 0xa09e, 0x6, 0x1}, {0x1, 0x4, 0x4, 0x1}, {0xffffceda, 0x2, 0xaa, 0x6}, {0x3, 0xb, 0x0, 0x9}, {0x10001, 0xf, 0x3ff, 0x5e8}, {0x3, 0xd005, 0x1}, {0x2, 0x10000, 0x3}, {0x6, 0x101, 0x10000, 0x10001}, {0x4, 0x8, 0x4}, {0x8, 0x4, 0x1, 0x1}, {0x4, 0x8, 0x8, 0x3}, {0x4, 0xe, 0x3, 0x10000}, {0xfffffffb, 0x8, 0xb71, 0x3}, {0xd, 0x6, 0x1, 0x81}, {0x97, 0x67, 0x5, 0x6}, {0x0, 0x8, 0x6, 0x7}, {0x6, 0x6, 0x8d, 0xe}, {0x4, 0x5, 0xd9, 0x7}, {0x3, 0x200, 0x1ff, 0xb12}, {0x7fff, 0x7ff, 0x3, 0x7}, {0x107, 0x3, 0x1, 0x401}, {0x0, 0x2, 0x40, 0x1}, {0xfffffffd, 0xc2e4, 0x7}, {0x3, 0x7, 0x2, 0x3}, {0x6, 0x7, 0x6, 0x5}, {0x3, 0x3, 0x5, 0x23}, {0x7, 0x4, 0x401, 0x2}, {0x4, 0xfff, 0xfff, 0xffffff46}, {0x7d50, 0x2d6, 0x2917b7f3, 0x6}, {0x29b, 0x6, 0x9}, {0xdfd, 0x2, 0x2, 0x8}, {0x10001, 0xa461, 0x9}, {0x4, 0x90d, 0x1ff, 0x5}, {0x7fff, 0x7, 0x8001, 0x401}, {0x5, 0x80000000, 0x5, 0x9}, {0x4, 0x0, 0x6855, 0x4}, {0x7, 0xf, 0x5, 0x158}, {0x3, 0xc, 0x42, 0x8}, {0x1, 0x60000000, 0x9, 0x1}, {0x5, 0x4, 0x7}, {0x5, 0x3, 0x3, 0x3}, {0x1, 0x81, 0x7, 0x3}, {0x1, 0x63f3, 0x0, 0x800}, {0x4da08be8, 0x1f, 0x9, 0x7}]}, 0x4ca0)
r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000000)={0x7, 0x3132564e, 0x3, @stepwise={0x3, 0x7, 0xfffffffe, 0xfffffffd, 0xfbb5, 0xe}})
r2 = socket(0xf, 0x3, 0x800000)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10)
write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000fe01000000020000", 0x1c)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0)={0x9, 0x8209, 0x1, 0x7f, <r5=>0x0}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000004f80)={r5, 0xb1, "c31a1c31ba3d8c3c66a46492afa270cf13eb1e14063cab20d799b500dded621dda5834606721555c894f3351b27a573062e8fa5d900b1c7cf97e55777d0557059aa685d291d70c8591a6fd5c49b67dfb3530492417997aa865c3c10a89c195f1c128a756747ffc09eba2bedbb99d3155ace15a0e5b2f491c4b4d416102f9fc36b961d085cc445bed9661e3d514b30ccffb07982f7631905950944a085f52739ee7006b13c7506c97e84d7308d1d9e91b43"}, &(0x7f0000000140)=0xb9)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
r6 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
mmap(&(0x7f0000b5f000/0x4000)=nil, 0x4000, 0x100000d, 0x2012, r6, 0x0)
syz_clone(0x41080, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
sendto$inet(r4, &(0x7f0000000040)="ab", 0x1, 0xe61e2840a154b0c0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
read(r4, &(0x7f00000001c0)=""/210, 0xd2)
ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x20, 0x20})
syz_usbip_server_init(0x1)

6.331057906s ago: executing program 0 (id=3531):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x3, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) (fail_nth: 5)

5.747792617s ago: executing program 0 (id=3534):
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140))
write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x8000000000000001, 0xfffffffffffe}}}, 0x28)
ioctl$FS_IOC_SETFLAGS(r0, 0xc0606610, &(0x7f0000000040)=0x60)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r1, 0x2000000)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
dup(r3)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = dup(r4)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x4c}}, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000001a40)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x30, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0xa0, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x0, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}}}}}, 0x0)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

5.58352028s ago: executing program 3 (id=3535):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x40}}, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r4=>0xffffffffffffffff})
r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000004c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x1f0, 0x1f0, 0x0, 0x1f0, 0x94, 0x384, 0x384, 0x384, 0x384, 0x384, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0xffffff00, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x5f}, 0x0, 0x70, 0x94}, @ECN={0x24, 'ECN\x00', 0x0, {0x20}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x7ff, 0x7, @local, 0x4e22}}}, {{@uncond, 0x0, 0x98, 0xbc, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x9, 0x3}}]}, @TTL={0x24}}, {{@uncond, 0x0, 0x70, 0x94}, @TTL={0x24, 'TTL\x00', 0x0, {0x0, 0x63}}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'lo\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x3, 0x0, 0x5], 0x0, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x474)
ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f0000000180)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0})
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x19, 0x0, 0x1, 0x49, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x14)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r6=>0x0})
sendto$packet(r2, &(0x7f0000000180)="0b03f6ffe0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r6}, 0x14)

4.607672284s ago: executing program 3 (id=3537):
r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = userfaultfd(0x1)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x0, &(0x7f0000000040), 0x0, 0x4)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000400)={&(0x7f000092b000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x1000, 0xfffffffe})

4.159693147s ago: executing program 0 (id=3539):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00!'], 0x38}}, 0x0)

4.141224141s ago: executing program 2 (id=3540):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x44, 0x6, 0x3, 0x0, 0xf}) (async, rerun: 64)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64)
r3 = openat$cgroup_int(r2, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0)
write$cgroup_int(r3, &(0x7f0000000600), 0x12) (async)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000000), 0x10) (async)
sendmsg$can_bcm(r4, &(0x7f00000005c0)={&(0x7f0000000180), 0x10, &(0x7f00000001c0)={&(0x7f00000003c0)={0x1, 0x10, 0x4, {}, {0x77359400}, {}, 0x1, @can={{}, 0xff, 0x0, 0x0, 0x0, "c6e83912ce2150c0"}}, 0x48}, 0x2}, 0x400c891) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="38010000", @ANYRES16=r5, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r6, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c00178004000500040004"], 0x138}}, 0x0)

3.916779571s ago: executing program 0 (id=3541):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1000083}, 0x0)
unlinkat(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000001fc0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x6, 0xc9}}}, 0x7)
sched_setscheduler(0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [], {0x14}}, 0x28}}, 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r3 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x4, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x3}, {0x2000000000000000}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x33}, 0x0, @in=@empty, 0x0, 0x3, 0x2, 0x7}}, 0xe8)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0)

3.791902755s ago: executing program 2 (id=3542):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9)
r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setlease(r2, 0x400, 0x0)
r3 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x161842, 0x0) (async)
fcntl$setlease(r3, 0x400, 0x0) (async)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x8)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

3.65414536s ago: executing program 3 (id=3543):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x75, &(0x7f00000002c0)="1a00000002000000", 0x8)
syz_emit_ethernet(0x85e, &(0x7f0000002040)=ANY=[@ANYBLOB="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"], 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
symlink(&(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000200)='./control\x00')
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r4 = syz_open_dev$swradio(&(0x7f0000000280), 0x1, 0x2)
ioctl$VIDIOC_QUERY_EXT_CTRL(r4, 0xc0e85667, &(0x7f0000000040)={0x0, 0x0, "8e622c38128ec72791249e4d6ae40b778074cc2f71ec94d654422f1ef11f5d63", 0xf, 0x1, 0x8, 0x5, 0x0, 0x2, 0xed, 0x7, [0xfff, 0xd, 0x81, 0x8]})
r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140), 0x102840, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r6, 0x1, 0x2e, &(0x7f0000000000)=r6, 0x4)
recvmsg(r6, &(0x7f0000000f40)={0x0, 0x0, 0x0}, 0x40002000)
ioctl$mixer_OSS_GETVERSION(r5, 0x40086602, &(0x7f0000000000))
ioperm(0x0, 0x6, 0x10000)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000080)=0xc)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r7=>0x0]}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000000)={r7}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={r7, 0x20, &(0x7f0000000000)=[@in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e21, @remote}]}, &(0x7f0000000080)=0xc)

3.111138345s ago: executing program 2 (id=3544):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2982, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/cpuinfo\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x22896)
sendmsg$AUDIT_USER(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="d8000000ed03080025bd7000fcdbdf2574f04bdfb080490d78fdc6502df593f6d959d71cf1da065bca19b00fe7728edcca579935bb41834d4f7a055601650f2e71c62bfbb1735dcac60ba467bc5cce9483df81c2eb4e1fdc6e7e33e9da4238bf5e0c6a5ce3a68181b5b9e996d02620b97a325fe42a9e74b50010a3b6eb5b9e944a30baa1f5f9314f089ae937e6d6b4dc8f571320a62596c85b0b32c82d470d0d254816329bbeb8afe1ba5855fa940260105c25f2d843de4a5667e8f71a63e1db26484a6f6c7329dd9388d4c7ca7797e5042e01fcd79c0000198025763b6c49f880fc0381356d313608b812"], 0xd8}, 0x1, 0x0, 0x0, 0x4008800}, 0x40004)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x5, 0x5b, 0x9, 0x7, 0x19, "86f5cc29b695aad26d3d2bb07679ec61bde37c"})
socket(0x23, 0x2, 0x9)
ioctl$TCXONC(r0, 0x540a, 0x0)
unshare(0x40000100)
ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000080))

2.619994563s ago: executing program 3 (id=3545):
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140))
write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x8000000000000001, 0xfffffffffffe}}}, 0x28)
ioctl$FS_IOC_SETFLAGS(r0, 0xc0606610, &(0x7f0000000040)=0x60)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r1, 0x2000000)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
dup(r3)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
dup(r4)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

2.110152242s ago: executing program 2 (id=3546):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f000001f9c0)={0xa, {0x8000, 0x200, 0x4, 0xffffffff}})
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000000102010100000000000000000a001f003c0001800c000280050001003a0000002c0001801400030000000000000000000000000000000000140004"], 0x50}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x0, 0x25dfdbfe, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000006a00000008000300", @ANYRES32=r6, @ANYBLOB="0a00fb00ffffffffffff00000500d2"], 0x30}, 0x1, 0x0, 0x0, 0x44080}, 0x0)

2.010679233s ago: executing program 5 (id=3512):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = epoll_create(0x4)
ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f00000000c0))
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_key={0x2, 0x9, 0x8, 0x0, "e9"}]}, 0x38}, 0x1, 0x7}, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e23, @remote}, {0x2, 0x0, @broadcast}, 0x20})
r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002)
write$binfmt_aout(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8)
writev(r2, &(0x7f0000000a40)=[{&(0x7f00000002c0)="36019c842b680e5956983a285ba5bb71794d7c6051ab94251aabfa893ef804b507668b814fc6c9b839afb957b723246919fa738249cdb573ce74836bb343eddc0ab986", 0x43}, {&(0x7f00000003c0)="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", 0xfc}, {&(0x7f00000004c0)="d040c091fd0673f72245b6347d6a73e95c5df2753682c959e85bb2ba33a34afddca7233655b2822a9c4abce714684a37e0dd4b365b362e0ab4cbbff0a687ea100cde21a1137fc26167ecc10e155bdd9e1e0dad7cb54b32c95118e061", 0x5c}, {&(0x7f0000000540)="70ad6f68a80a3cc1298f8014aa1bc819dd5af9974d9b6572ae37ccb1f92567e16960172cc35c4b4dabf03701da32085b28ef04752b72a2bd98390e70e67d4b0f32415a36deab1e302880edecb975248947b5469151c43512269039d39baca972febbe0bbca5ff956271d54a229a69547c66163b97587674e84a3c0963dfb6f2f3d71da5eb6681fe3f15fee20165db2e7c09f973a4b1159abf264171c253184a74aad9c59525bfa33d8e7a1cba9c71f0081", 0xb1}, {&(0x7f0000000140)="8b3fe32ccccc667bb8d00296dcf8b6b38baf5ede6e145ad5003794f5f59102c1cf31def17a2f5151237296b811009916faf0b3ed522e1ee5ba6329d1b7c5", 0x3e}, {&(0x7f00000006c0)="257f33064e43f77b94ff65d9688f78fe38237ef1cac7b636959dfb0da447157a34796412b69f3fe4e3c20c4d5428e0f17c360e2486a8f1c7e2f8a1b59324f07230268ff3031ef7297410651bb24561a67b4f3d98c63f05539dd21cd2e0dc1d8295d0a7515000b102933859cb87bf7ece13f9113749b738a074aa3a2ca3a33ce0ad0190aaa85ea9e69062f6054b2c412bf74a8412d80f", 0x96}, {&(0x7f0000000780)="34f9a6c04a60302cce4cd3b93f2259f5e9ae6c8b3241184d62156bd753ec5013babd07ce2b0ac6b3140798ba5e8ebf740e56bdff0844bf65a18f415a28fa82679907048ec35c7265a9418552d43c3d015d29adfe46c3ffb5d1950a6c97719b2945461d6ac4a97769b201a8b6ac8e422b1c85a1f88511aa9c9876554b057874e508e9c1365b04ae81027c674c7d82e9dadf9ad7b4c77e6a2db6a3005d7286544c2df9ed2aa05e3c27ab41c3ef4699974fcd09ae93b5c604f2f388f6e0c42c0d8551af84295fc117f1ae188fb0a6a0513b4e42c942498428bf56f936d264", 0xdd}, {&(0x7f0000000880)="ac15b3c51e0c1a3386a84804fab05d0755149a43cf66982bfaad81e1aa39dceeec8ae609c058b3ceb5e2be2048f67cb6ec663b01f6290c4e5df6ccc0a5f8977e7e3163b21c83064d5f89a6a4abee99fa86b879e789f66abf0a3b25ec5c873455bbd4b721b87dcc27b3253301f165f5f297d678dfec79c592489ba07473ea9aefe91ec9453891d45960c4fa2289bda220d190f4b9c31605729d8ae84a825656622b9e1ba13710508dc86542bbc7bd48777be4e278eae6b40d607191c1217db97ecfd52bda7697b0491e30", 0xca}, {&(0x7f0000000980)="96f8ea043efa86419a4ff015fd70e1d500fdc12185ce2d404bec8325f9d73ad73fc10dea2b1713a15dfa3a709fe25666dd36ee365be71157c3b8a12469afd511488d8fd7fa6adba610895042aa2ff1f5c29356a90ba7bf344197bfbaeeb19fd9d4adec54073c2c6b67d4020b4da8fd259b934ed2bf47171e79bedcf5ae47cd72a78cd0d74ab82231ea97ff5f97d25ddd4c624334b25b1c246aa36c50b4e483954318964cc120e462e37516abc5fd42", 0xaf}], 0x9)
write$char_usb(0xffffffffffffffff, &(0x7f0000000400), 0x0)
openat$sequencer2(0xffffff9c, &(0x7f00000011c0), 0x143240, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0)

367.852985ms ago: executing program 5 (id=3547):
io_setup(0x4a4, &(0x7f00000001c0)=<r0=>0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
write$sysctl(r2, &(0x7f0000000000)='2\x00', 0x2)
write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x3f0)
gettid()
timer_settime(0x0, 0x0, 0x0, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
unshare(0x22020600)
bind$unix(r9, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r10 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x0)
ioctl$I2C_SMBUS(r10, 0x720, 0x0)
listen(r9, 0x0)
accept4$unix(r9, 0x0, 0x0, 0x0)
connect$unix(r8, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
io_submit(r0, 0x0, &(0x7f00000016c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x7, 0x8, r1, 0x0, 0x19, 0x2, 0x0, 0x1}])

367.557263ms ago: executing program 2 (id=3548):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8000, &(0x7f0000000080)={0xa, 0x0, 0x100000}, 0x20)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x121)

314.6989ms ago: executing program 0 (id=3549):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00!'], 0x38}}, 0x0)

140.504297ms ago: executing program 2 (id=3550):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)

101.398289ms ago: executing program 3 (id=3551):
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
unlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x200)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x20000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
memfd_create(0x0, 0x3)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0x541b, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r1=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x2, 0x1, 0x1}, 0x6, 0x3, 0x0, 0x0, "70f9b65c87ac3d950c2a11b8de9adc817949f50380cca847552472cb1f61b20f312b8a9ac0b9cd6a262d49bec93b172815d8ba89c570b75bea2159994291cd08"}, 0x48}}, 0x44001)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = eventfd2(0xff, 0x800)
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r5, 0x1})
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4)
r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000001010d0000000000000000c999c66e"], 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8)
recvmsg(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1}, 0x40002161)
close_range(r2, 0xffffffffffffffff, 0x0)

67.082043ms ago: executing program 0 (id=3552):
r0 = memfd_secret(0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (fail_nth: 6)

0s ago: executing program 5 (id=3553):
r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x501)
ioctl$EVIOCSKEYCODE_V2(r0, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"})
ioctl$EVIOCGEFFECTS(r0, 0x80004509, 0x0)
r1 = socket(0xa, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000280)={0x100000011, @multicast2, 0x0, 0x0, 'fo\x00', 0x20, 0x7, 0xfffffffe}, 0x2c)
connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10)

kernel console output (not intermixed with test programs):

ing): unset [1, 0] type 2 family 0 port 6081 - 0
[  855.524863][ T5847] Bluetooth: hci4: command tx timeout
[  855.846138][T10071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  855.856866][T10071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  855.867152][T10071] bond0 (unregistering): Released all slaves
[  855.879295][T22903] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  855.932871][T22972] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  855.978616][T22870] 8021q: adding VLAN 0 to HW filter on device team0
[  856.091386][T22972] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  856.180541][T10064] bridge0: port 1(bridge_slave_0) entered blocking state
[  856.187900][T10064] bridge0: port 1(bridge_slave_0) entered forwarding state
[  856.235106][T10069] bridge0: port 2(bridge_slave_1) entered blocking state
[  856.242306][T10069] bridge0: port 2(bridge_slave_1) entered forwarding state
[  856.294739][T10071] hsr_slave_0: left promiscuous mode
[  856.303738][T10071] hsr_slave_1: left promiscuous mode
[  856.312202][T10071] batman_adv: batadv0: Removing interface: batadv_slave_0
[  856.320394][T10071] batman_adv: batadv0: Removing interface: batadv_slave_1
[  856.528494][ T8574] usb 9-1: new high-speed USB device number 116 using dummy_hcd
[  856.664030][T10071] team0 (unregistering): Port device team_slave_1 removed
[  856.684498][ T8574] usb 9-1: Using ep0 maxpacket: 16
[  856.698718][ T8574] usb 9-1: config 0 has no interfaces?
[  856.705727][ T8574] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40
[  856.715352][ T8574] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  856.742990][ T8574] usb 9-1: config 0 descriptor??
[  856.755062][T10071] team0 (unregistering): Port device team_slave_0 removed
[  857.280267][ T5337] usb 9-1: USB disconnect, device number 116
[  857.555104][T22972] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  857.621976][ T5847] Bluetooth: hci4: command tx timeout
[  857.636769][T22972] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  857.681617][T22903] 8021q: adding VLAN 0 to HW filter on device bond0
[  857.690227][T22972] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  857.718255][T22972] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  857.757221][T22870] 8021q: adding VLAN 0 to HW filter on device batadv0
[  857.828916][T22903] 8021q: adding VLAN 0 to HW filter on device team0
[  857.875357][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  857.882490][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  857.902190][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  857.909409][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  858.113254][T22870] veth0_vlan: entered promiscuous mode
[  858.187314][T23074] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3254'.
[  858.213680][T22870] veth1_vlan: entered promiscuous mode
[  858.263203][T22903] 8021q: adding VLAN 0 to HW filter on device batadv0
[  858.279412][T22972] 8021q: adding VLAN 0 to HW filter on device bond0
[  858.302895][T22870] veth0_macvtap: entered promiscuous mode
[  858.328798][T22870] veth1_macvtap: entered promiscuous mode
[  858.342138][T22972] 8021q: adding VLAN 0 to HW filter on device team0
[  858.372137][T21080] bridge0: port 1(bridge_slave_0) entered blocking state
[  858.379355][T21080] bridge0: port 1(bridge_slave_0) entered forwarding state
[  858.401609][T22870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  858.413540][T22870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  858.429537][T22870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  858.441315][T22870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  858.451624][ T5897] usb 9-1: new high-speed USB device number 117 using dummy_hcd
[  858.465958][T22870] batman_adv: batadv0: Interface activated: batadv_slave_0
[  858.520909][T21080] bridge0: port 2(bridge_slave_1) entered blocking state
[  858.528108][T21080] bridge0: port 2(bridge_slave_1) entered forwarding state
[  858.542684][T22870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  858.553732][T22870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  858.564866][T22870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  858.582959][T22870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  858.594972][T22870] batman_adv: batadv0: Interface activated: batadv_slave_1
[  858.616306][ T5897] usb 9-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= 3.90
[  858.634291][ T5897] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  858.653798][T22870] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  858.669610][T22870] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  858.679608][ T5897] usb 9-1: config 0 descriptor??
[  858.685282][T22870] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  858.695368][T22870] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  858.723924][T22903] veth0_vlan: entered promiscuous mode
[  858.800688][T22903] veth1_vlan: entered promiscuous mode
[  858.900485][T23077] fuse: Bad value for 'user_id'
[  858.921029][T23077] fuse: Bad value for 'user_id'
[  858.930348][ T5897] usb 9-1: string descriptor 0 read error: -71
[  858.952520][ T5897] bfusb 9-1:0.0: probe with driver bfusb failed with error -5
[  858.991900][ T5897] usb 9-1: USB disconnect, device number 117
[  859.022333][T22903] veth0_macvtap: entered promiscuous mode
[  859.057452][T22972] 8021q: adding VLAN 0 to HW filter on device batadv0
[  859.065021][T21080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  859.072954][T21080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  859.091708][T22903] veth1_macvtap: entered promiscuous mode
[  859.157666][T22903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  859.184095][T22903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  859.193977][T22903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  859.214678][T22903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  859.234268][T22903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  859.254085][T22903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  859.266446][T22903] batman_adv: batadv0: Interface activated: batadv_slave_0
[  859.289226][T10064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  859.297757][T10064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  859.308790][T22903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  859.320037][T22903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  859.331564][T22903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  859.342550][T22903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  859.353230][T22903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  859.365627][T22903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  859.378246][T22903] batman_adv: batadv0: Interface activated: batadv_slave_1
[  859.454279][T22972] veth0_vlan: entered promiscuous mode
[  859.497858][T22903] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  859.539482][T22903] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  859.574367][T22903] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  859.583511][T22903] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  859.651857][T22972] veth1_vlan: entered promiscuous mode
[  859.746699][T22972] veth0_macvtap: entered promiscuous mode
[  859.809072][T22972] veth1_macvtap: entered promiscuous mode
[  859.887398][T22972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  859.901516][T22972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  859.920078][T22972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  859.935816][T22972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  859.946071][T22972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  859.956805][T22972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  859.966905][T22972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  859.978590][T22972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  859.994553][T22972] batman_adv: batadv0: Interface activated: batadv_slave_0
[  860.012751][T23087] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3258'.
[  860.631523][T23098] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3260'.
[  860.664333][T23098] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3260'.
[  860.680081][T23096] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3268'.
[  860.720758][T22972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  860.733088][T22972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  860.743825][T22972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  860.759344][T22972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  860.777771][T22972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  860.791079][T22972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  860.809619][T22972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  860.821786][T22972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  860.852088][T22972] batman_adv: batadv0: Interface activated: batadv_slave_1
[  860.878580][T21080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  860.906753][T21080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  860.934981][T23096] ipvlan1: left allmulticast mode
[  860.981029][T10071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  860.990581][T22972] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  861.021500][T10071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  861.024154][T22972] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  861.077650][T22972] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  861.107641][T22972] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  861.516594][T21080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  861.537438][T21080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  861.626910][T10064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  861.663318][T10064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  861.983848][T23113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3264'.
[  862.114630][  T970] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[  862.133005][T23117] netlink: 177 bytes leftover after parsing attributes in process `syz.1.3264'.
[  862.343308][  T970] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  862.372235][  T970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  862.409019][  T970] usb 5-1: Product: syz
[  862.430981][  T970] usb 5-1: Manufacturer: syz
[  862.449470][  T970] usb 5-1: SerialNumber: syz
[  862.486551][  T970] r8152-cfgselector 5-1: Unknown version 0x0000
[  862.508603][  T970] r8152-cfgselector 5-1: config 0 descriptor??
[  863.485218][ T5896] usb 6-1: new high-speed USB device number 63 using dummy_hcd
[  863.645580][ T5896] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  863.679576][ T5896] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  863.710896][ T5896] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  863.723268][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  863.740681][ T5896] usb 6-1: SerialNumber: syz
[  863.989145][ T5896] usb 6-1: 0:2 : does not exist
[  864.157370][T23145] IPv6: sit1: Disabled Multicast RS
[  864.239503][ T5896] usb 6-1: USB disconnect, device number 63
[  864.595963][ T6012] udevd[6012]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  864.699085][ T5897] r8152-cfgselector 5-1: USB disconnect, device number 77
[  864.846663][T23171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3274'.
[  865.164144][    T9] usb 6-1: new high-speed USB device number 64 using dummy_hcd
[  865.334199][    T9] usb 6-1: Using ep0 maxpacket: 16
[  865.341289][    T9] usb 6-1: config 0 has no interfaces?
[  865.349729][    T9] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.40
[  865.384145][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  865.428619][    T9] usb 6-1: config 0 descriptor??
[  865.772750][ T5896] usb 6-1: USB disconnect, device number 64
[  865.969245][T23219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3286'.
[  865.982463][T23219] bridge_slave_1: left allmulticast mode
[  866.000346][T23219] bridge_slave_1: left promiscuous mode
[  866.010577][T23219] bridge0: port 2(bridge_slave_1) entered disabled state
[  866.039081][T23219] bridge_slave_0: left allmulticast mode
[  866.048937][T23219] bridge_slave_0: left promiscuous mode
[  866.061539][T23219] bridge0: port 1(bridge_slave_0) entered disabled state
[  866.074574][ T5897] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[  866.226168][ T5897] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  866.270810][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  866.315297][ T5897] usb 5-1: config 0 descriptor??
[  866.322304][ T5897] cp210x 5-1:0.0: cp210x converter detected
[  866.544682][T23238] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3290'.
[  866.613007][ T5897] usb 5-1: cp210x converter now attached to ttyUSB0
[  866.924244][ T5897] usb 6-1: new high-speed USB device number 65 using dummy_hcd
[  866.952773][T23257] netlink: 'syz.8.3295': attribute type 8 has an invalid length.
[  867.094572][ T5897] usb 6-1: Using ep0 maxpacket: 8
[  867.111963][ T5897] usb 6-1: config 0 has an invalid interface number: 176 but max is 2
[  867.125152][ T5897] usb 6-1: config 0 has an invalid interface number: 49 but max is 2
[  867.134013][ T5897] usb 6-1: config 0 has no interface number 1
[  867.141356][ T5897] usb 6-1: config 0 has no interface number 2
[  867.184539][ T5897] usb 6-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  867.223257][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  867.255040][ T5897] usb 6-1: config 0 descriptor??
[  867.274861][ T5897] qmi_wwan 6-1:0.0: probe with driver qmi_wwan failed with error -22
[  867.364902][ T5847] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  867.373877][ T5847] Bluetooth: hci0: Injecting HCI hardware error event
[  867.391638][ T5847] Bluetooth: hci0: hardware error 0x00
[  867.418288][T23275] program syz.1.3299 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  867.478527][ T5897] qcserial 6-1:0.49: Qualcomm USB modem converter detected
[  867.721186][T16098] usb 6-1: USB disconnect, device number 65
[  867.730948][T16098] qcserial 6-1:0.49: device disconnected
[  867.984387][ T5897] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[  868.154262][ T5897] usb 2-1: Using ep0 maxpacket: 16
[  868.174732][ T5897] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  868.198853][ T5897] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[  868.215553][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  868.238302][ T5897] usb 2-1: config 0 descriptor??
[  868.259714][ T5897] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input91
[  868.524491][ T5897] bcm5974 2-1:0.0: could not read from device
[  868.566087][ T5206] bcm5974 2-1:0.0: could not read from device
[  868.593283][ T5897] input: failed to attach handler mousedev to device input91, error: -5
[  868.619870][ T5206] bcm5974 2-1:0.0: could not read from device
[  868.624988][ T5897] usb 2-1: USB disconnect, device number 123
[  868.744763][    T9] usb 5-1: USB disconnect, device number 78
[  868.783179][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  868.798065][T23330] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5)
[  868.804653][T23330] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  868.808437][    T9] cp210x 5-1:0.0: device disconnected
[  868.888494][T23330] vhci_hcd vhci_hcd.0: Device attached
[  869.064385][ T1202] vhci_hcd: vhci_device speed not set
[  869.134240][ T5897] usb 6-1: new high-speed USB device number 66 using dummy_hcd
[  869.142233][ T1202] usb 49-1: new full-speed USB device number 2 using vhci_hcd
[  869.154582][T16098] usb 9-1: new low-speed USB device number 118 using dummy_hcd
[  869.324297][ T5897] usb 6-1: Using ep0 maxpacket: 8
[  869.337351][ T5897] usb 6-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  869.347850][T16098] usb 9-1: config 0 has no interfaces?
[  869.356898][T16098] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  869.367424][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  869.387572][T16098] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  869.397929][ T5897] usb 6-1: config 0 descriptor??
[  869.426691][T16098] usb 9-1: config 0 descriptor??
[  869.444176][ T5847] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  869.637312][T23339] openvswitch: netlink: Actions may not be safe on all matching packets
[  869.687044][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  869.723291][ T5897] usb 6-1: string descriptor 0 read error: -71
[  869.734212][ T5899] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[  869.741468][ T5897] qmi_wwan 6-1:0.0: probe with driver qmi_wwan failed with error -22
[  869.782978][ T5897] usb 6-1: USB disconnect, device number 66
[  869.804382][ T1202] vhci_hcd: vhci_device speed not set
[  869.884346][ T1202] usb 49-1: device descriptor read/64, error -71
[  869.914896][ T5899] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  869.936520][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  869.953935][ T5899] usb 5-1: Product: syz
[  869.963374][ T5899] usb 5-1: Manufacturer: syz
[  869.973478][ T5899] usb 5-1: SerialNumber: syz
[  869.991127][ T5899] r8152-cfgselector 5-1: Unknown version 0x0000
[  869.999928][ T5899] r8152-cfgselector 5-1: config 0 descriptor??
[  870.084313][ T1202] vhci_hcd: vhci_device speed not set
[  870.154181][ T1202] usb 49-1: new full-speed USB device number 3 using vhci_hcd
[  870.267924][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  870.274435][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  870.494267][T16098] usb 2-1: new high-speed USB device number 124 using dummy_hcd
[  870.646415][T23392] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3318'.
[  870.684278][T16098] usb 2-1: Using ep0 maxpacket: 8
[  870.703420][T16098] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  870.712847][T16098] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  870.743308][T16098] usb 2-1: Product: syz
[  870.747748][T16098] usb 2-1: Manufacturer: syz
[  870.752382][T16098] usb 2-1: SerialNumber: syz
[  870.822209][T16098] usb 2-1: config 0 descriptor??
[  870.847031][T23397] FAULT_INJECTION: forcing a failure.
[  870.847031][T23397] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  870.860769][T23397] CPU: 0 UID: 0 PID: 23397 Comm: syz.7.3319 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0
[  870.871255][T23397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  870.881357][T23397] Call Trace:
[  870.884678][T23397]  <TASK>
[  870.887651][T23397]  dump_stack_lvl+0x241/0x360
[  870.892394][T23397]  ? __pfx_dump_stack_lvl+0x10/0x10
[  870.897650][T23397]  ? __pfx__printk+0x10/0x10
[  870.902302][T23397]  ? vfs_write+0x730/0xd30
[  870.906778][T23397]  should_fail_ex+0x3b0/0x4e0
[  870.911530][T23397]  _copy_from_user+0x2f/0xc0
[  870.916193][T23397]  move_addr_to_kernel+0x82/0x150
[  870.921285][T23397]  __sys_bind+0x124/0x290
[  870.925658][T23397]  ? __pfx___sys_bind+0x10/0x10
[  870.930569][T23397]  __ia32_sys_bind+0x7a/0x90
[  870.935188][T23397]  __do_fast_syscall_32+0xb4/0x110
[  870.940348][T23397]  ? exc_page_fault+0x590/0x8c0
[  870.945236][T23397]  do_fast_syscall_32+0x34/0x80
[  870.950128][T23397]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  870.956483][T23397] RIP: 0023:0xf743d579
[  870.960574][T23397] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  870.980214][T23397] RSP: 002b:00000000f512655c EFLAGS: 00000206 ORIG_RAX: 0000000000000169
[  870.988676][T23397] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000200024c0
[  870.996667][T23397] RDX: 0000000000000020 RSI: 0000000000000000 RDI: 0000000000000000
[  871.004665][T23397] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  871.012685][T23397] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  871.020679][T23397] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  871.028681][T23397]  </TASK>
[  871.077587][T16098] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  871.274953][T23380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  871.286785][T23380] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  871.348006][T23407] sctp: [Deprecated]: syz.5.3321 (pid 23407) Use of struct sctp_assoc_value in delayed_ack socket option.
[  871.348006][T23407] Use struct sctp_sack_info instead
[  871.487965][T23407] loop9: detected capacity change from 0 to 7
[  871.500330][T23380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  871.516042][T23380] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  871.551673][T23407] Dev loop9: unable to read RDB block 7
[  871.558065][T16098] usb write operation failed. (-71)
[  871.574161][T23407]  loop9: unable to read partition table
[  871.580028][T23407] loop9: partition table beyond EOD, truncated
[  871.588402][T23407] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5)
[  871.606333][T16098] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  871.643370][T16098] dvbdev: DVB: registering new adapter (Terratec H7)
[  871.661568][T23417] FAULT_INJECTION: forcing a failure.
[  871.661568][T23417] name failslab, interval 1, probability 0, space 0, times 0
[  871.662907][T16098] usb 2-1: media controller created
[  871.678995][T23417] CPU: 0 UID: 0 PID: 23417 Comm: syz.7.3322 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0
[  871.690020][T23417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  871.700111][T23417] Call Trace:
[  871.700461][T16098] usb read operation failed. (-71)
[  871.703461][T23417]  <TASK>
[  871.710867][T16098] usb write operation failed. (-71)
[  871.711495][T23417]  dump_stack_lvl+0x241/0x360
[  871.721425][T23417]  ? __pfx_dump_stack_lvl+0x10/0x10
[  871.726657][T23417]  ? __pfx__printk+0x10/0x10
[  871.731278][T23417]  ? __kmalloc_node_noprof+0xb7/0x440
[  871.736680][T23417]  ? __pfx___might_resched+0x10/0x10
[  871.741990][T23417]  should_fail_ex+0x3b0/0x4e0
[  871.746688][T23417]  should_failslab+0xac/0x100
[  871.751404][T23417]  __kmalloc_node_noprof+0xdf/0x440
[  871.756616][T23417]  ? crypto_create_tfm_node+0x88/0x3d0
[  871.762092][T23417]  crypto_create_tfm_node+0x88/0x3d0
[  871.767389][T23417]  crypto_alloc_tfm_node+0x161/0x360
[  871.772692][T23417]  macsec_validate_attr+0x1a7/0x9d0
[  871.777923][T23417]  ? __pfx_macsec_validate_attr+0x10/0x10
[  871.783675][T23417]  ? nla_strscpy+0x100/0x180
[  871.788285][T23417]  ? __nla_parse+0x40/0x60
[  871.792719][T23417]  rtnl_newlink+0xbb8/0x20a0
[  871.797329][T23417]  ? rtnl_newlink+0xb11/0x20a0
[  871.802125][T23417]  ? __pfx_rtnl_newlink+0x10/0x10
[  871.807202][T23417]  ? rcu_is_watching+0x15/0xb0
[  871.811979][T23417]  ? trace_contention_end+0x3c/0x120
[  871.817281][T23417]  ? __mutex_lock+0x37f/0xee0
[  871.822000][T23417]  ? rtnetlink_rcv_msg+0x6e6/0xcf0
[  871.827127][T23417]  ? __pfx___mutex_lock+0x10/0x10
[  871.832187][T23417]  ? __pfx_rtnl_newlink+0x10/0x10
[  871.837231][T23417]  rtnetlink_rcv_msg+0x73f/0xcf0
[  871.842182][T23417]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  871.847307][T23417]  ? __lock_acquire+0x1397/0x2100
[  871.852340][T23417]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  871.857822][T23417]  netlink_rcv_skb+0x1e3/0x430
[  871.862611][T23417]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  871.868079][T23417]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  871.873404][T23417]  ? netlink_deliver_tap+0x2e/0x1b0
[  871.878616][T23417]  netlink_unicast+0x7f6/0x990
[  871.883395][T23417]  ? __pfx_netlink_unicast+0x10/0x10
[  871.888690][T23417]  ? __virt_addr_valid+0x183/0x530
[  871.893813][T23417]  ? __check_object_size+0x48e/0x900
[  871.899116][T23417]  netlink_sendmsg+0x8e4/0xcb0
[  871.903909][T23417]  ? __pfx_netlink_sendmsg+0x10/0x10
[  871.909209][T23417]  ? __pfx_lock_release+0x10/0x10
[  871.914240][T23417]  ? aa_sock_msg_perm+0x91/0x160
[  871.919192][T23417]  ? __pfx_netlink_sendmsg+0x10/0x10
[  871.924490][T23417]  __sock_sendmsg+0x221/0x270
[  871.929182][T23417]  ____sys_sendmsg+0x52a/0x7e0
[  871.933970][T23417]  ? __pfx_____sys_sendmsg+0x10/0x10
[  871.939281][T23417]  __sys_sendmsg+0x269/0x350
[  871.943909][T23417]  ? __pfx_lock_release+0x10/0x10
[  871.948949][T23417]  ? __pfx___sys_sendmsg+0x10/0x10
[  871.954094][T23417]  ? __pfx_vfs_write+0x10/0x10
[  871.958906][T23417]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  871.965525][T23417]  ? lockdep_hardirqs_on+0x99/0x150
[  871.970743][T23417]  __do_fast_syscall_32+0xb4/0x110
[  871.975872][T23417]  ? exc_page_fault+0x590/0x8c0
[  871.980740][T23417]  do_fast_syscall_32+0x34/0x80
[  871.985612][T23417]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  871.991948][T23417] RIP: 0023:0xf743d579
[  871.996025][T23417] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  872.015638][T23417] RSP: 002b:00000000f512655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  872.024068][T23417] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000200000c0
[  872.032065][T23417] RDX: 0000000000004010 RSI: 0000000000000000 RDI: 0000000000000000
[  872.040042][T23417] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  872.048022][T23417] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  872.055997][T23417] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  872.064001][T23417]  </TASK>
[  872.078866][T16098] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  872.098224][T16098] usb 2-1: USB disconnect, device number 124
[  872.140303][T23420] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3323'.
[  872.296664][ T5900] usb 9-1: USB disconnect, device number 118
[  872.306246][T23331] vhci_hcd: connection reset by peer
[  872.323995][   T35] vhci_hcd: stop threads
[  872.333813][   T35] vhci_hcd: release socket
[  872.356700][   T35] vhci_hcd: disconnect device
[  872.396392][T23423] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3325'.
[  872.526204][ T5900] r8152-cfgselector 5-1: USB disconnect, device number 79
[  873.326632][T23450] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3333'.
[  873.736497][T23467] netlink: 134716 bytes leftover after parsing attributes in process `syz.7.3334'.
[  873.756240][T23467] openvswitch: netlink: Message has 5 unknown bytes.
[  874.202278][T23482] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3336'.
[  874.545837][T23491] Cannot find add_set index 3 as target
[  875.286170][ T1202] vhci_hcd: vhci_device speed not set
[  875.824198][ T5896] usb 9-1: new high-speed USB device number 119 using dummy_hcd
[  875.939027][T23520] IPv6: sit1: Disabled Multicast RS
[  876.005733][ T5896] usb 9-1: device descriptor read/64, error -71
[  876.304726][ T5896] usb 9-1: new high-speed USB device number 120 using dummy_hcd
[  876.504213][ T5896] usb 9-1: device descriptor read/64, error -71
[  876.625299][ T5896] usb usb9-port1: attempt power cycle
[  876.714348][T23544] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3349'.
[  876.752831][T23544] netlink: 'syz.5.3349': attribute type 2 has an invalid length.
[  876.773219][T23544] ip6gre1: entered promiscuous mode
[  876.778791][T23544] ip6gre1: entered allmulticast mode
[  876.984200][ T5896] usb 9-1: new high-speed USB device number 121 using dummy_hcd
[  877.015330][ T5896] usb 9-1: device descriptor read/8, error -71
[  877.264730][ T5896] usb 9-1: new high-speed USB device number 122 using dummy_hcd
[  877.295481][ T5896] usb 9-1: device descriptor read/8, error -71
[  877.388660][T23568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3354'.
[  877.412520][ T5896] usb usb9-port1: unable to enumerate USB device
[  877.422516][T23568] netlink: 'syz.4.3354': attribute type 2 has an invalid length.
[  877.489568][T23568] ip6gre1: entered promiscuous mode
[  877.504289][T23568] ip6gre1: entered allmulticast mode
[  878.029420][   T29] audit: type=1326 audit(1732193026.544:3175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23580 comm="syz.5.3357" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf747d579 code=0x0
[  878.347208][T23586] IPv6: sit1: Disabled Multicast RS
[  878.411219][T23588] bridge0: port 2(bridge_slave_1) entered disabled state
[  878.418936][T23588] bridge0: port 1(bridge_slave_0) entered disabled state
[  878.554467][T23588] bridge0: entered allmulticast mode
[  878.584321][  T970] usb 2-1: new high-speed USB device number 125 using dummy_hcd
[  878.643224][T23606] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3362'.
[  878.696549][T23602] bridge_slave_1: left allmulticast mode
[  878.702835][T23602] bridge_slave_1: left promiscuous mode
[  878.716694][T23602] bridge0: port 2(bridge_slave_1) entered disabled state
[  878.783372][  T970] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  878.819056][T23602] bridge_slave_0: left allmulticast mode
[  878.824312][  T970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  878.832904][  T970] usb 2-1: Product: syz
[  878.834755][T23602] bridge_slave_0: left promiscuous mode
[  878.839001][  T970] usb 2-1: Manufacturer: syz
[  878.847715][  T970] usb 2-1: SerialNumber: syz
[  878.871681][T23612] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3363'.
[  878.883853][T23602] bridge0: port 1(bridge_slave_0) entered disabled state
[  879.078569][  T970] r8152-cfgselector 2-1: Unknown version 0x0000
[  879.078602][  T970] r8152-cfgselector 2-1: config 0 descriptor??
[  879.546289][ T5900] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[  879.714163][ T5900] usb 5-1: Using ep0 maxpacket: 8
[  879.721625][ T5900] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  879.730934][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  879.767556][ T5900] usb 5-1: config 0 descriptor??
[  879.979228][T23620] openvswitch: netlink: Actions may not be safe on all matching packets
[  880.530482][T23660] bridge0: entered promiscuous mode
[  880.542424][T23660] bridge0: entered allmulticast mode
[  881.095197][ T5896] usb 6-1: new high-speed USB device number 67 using dummy_hcd
[  881.103224][T23677] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3375'.
[  881.304392][    T9] r8152-cfgselector 2-1: USB disconnect, device number 125
[  881.311972][ T5896] usb 6-1: Using ep0 maxpacket: 32
[  881.328768][ T5896] usb 6-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=b2.bf
[  881.429185][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  881.485175][ T5896] usb 6-1: Product: syz
[  881.489421][ T5896] usb 6-1: SerialNumber: syz
[  881.497312][ T5896] usb 6-1: config 0 descriptor??
[  881.717655][ T5896] usb 6-1: USB disconnect, device number 67
[  882.261522][ T5900] usb 5-1: string descriptor 0 read error: -71
[  882.269863][ T5900] qmi_wwan 5-1:0.0: probe with driver qmi_wwan failed with error -22
[  882.282109][ T5900] usb 5-1: USB disconnect, device number 80
[  882.804418][ T5896] usb 6-1: new high-speed USB device number 68 using dummy_hcd
[  882.824167][    T9] usb 9-1: new high-speed USB device number 123 using dummy_hcd
[  882.864352][ T5900] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[  882.903014][T23718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3382'.
[  882.915665][T23718] netlink: 'syz.1.3382': attribute type 2 has an invalid length.
[  882.994375][    T9] usb 9-1: Using ep0 maxpacket: 16
[  882.999841][ T5896] usb 6-1: Using ep0 maxpacket: 8
[  883.011984][    T9] usb 9-1: config 0 has an invalid interface number: 20 but max is 0
[  883.024194][ T5900] usb 5-1: Using ep0 maxpacket: 32
[  883.025748][ T5896] usb 6-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76
[  883.040421][ T5900] usb 5-1: config 9 has an invalid interface number: 229 but max is 0
[  883.042290][    T9] usb 9-1: config 0 has no interface number 0
[  883.055421][ T5900] usb 5-1: config 9 has no interface number 0
[  883.056391][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  883.061572][ T5900] usb 5-1: config 9 interface 229 altsetting 9 bulk endpoint 0xE has invalid maxpacket 1024
[  883.071002][ T5896] usb 6-1: Product: syz
[  883.091277][    T9] usb 9-1: New USB device found, idVendor=13d3, idProduct=3340, bcdDevice=db.16
[  883.110902][ T5896] usb 6-1: Manufacturer: syz
[  883.116085][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  883.127068][ T5896] usb 6-1: SerialNumber: syz
[  883.132956][    T9] usb 9-1: Product: syz
[  883.142477][ T5900] usb 5-1: config 9 interface 229 altsetting 9 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[  883.145203][ T5896] usb 6-1: config 0 descriptor??
[  883.165306][    T9] usb 9-1: Manufacturer: syz
[  883.167454][ T5900] usb 5-1: config 9 interface 229 altsetting 9 bulk endpoint 0x5 has invalid maxpacket 32
[  883.169960][    T9] usb 9-1: SerialNumber: syz
[  883.189342][    T9] usb 9-1: config 0 descriptor??
[  883.198362][ T5896] gspca_main: ALi m5602-2.14.0 probing 0402:5602
[  883.217985][    T9] r8712u: register rtl8712_netdev_ops to netdev_ops
[  883.223782][ T5900] usb 5-1: config 9 interface 229 altsetting 9 endpoint 0x4 has invalid maxpacket 991, setting to 64
[  883.226957][    T9] usb 9-1: r8712u: USB_SPEED_HIGH with 0 endpoints
[  883.252650][ T5900] usb 5-1: config 9 interface 229 altsetting 9 has a duplicate endpoint with address 0x5, skipping
[  883.295952][ T5900] usb 5-1: config 9 interface 229 has no altsetting 0
[  883.326357][ T5900] usb 5-1: Dual-Role OTG device on HNP port
[  883.333380][ T5900] usb 5-1: New USB device found, idVendor=04da, idProduct=3904, bcdDevice=be.37
[  883.342780][ T5897] usb 2-1: new high-speed USB device number 126 using dummy_hcd
[  883.364865][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  883.393395][ T5900] usb 5-1: Product: м
[  883.411545][ T5900] usb 5-1: Manufacturer: 繶䴀㒖�瞥⃥棷晢�饳਻䲆崧�ꡗ樢�댘�৯ᨔ肩硄箅ሗꅣᾀ埮匬㪠砊Ẓ�২ň鈛稈뇤氂�橊�મ�퇽ᔫ嬠︿��綂邀젒㮔�禦�Ⱓꕲ祠ౙ櫵猕䄛휩᳋岈⥾�Ӷ筩쬨急酙郦ጀꠛ⇼䣬올ᒺ⭘湶鲞⺡㈥숬滸뻇뎉`㫵�䣌꺇乹⽻ﻮ솂쉘枣甩䓸㱿힙�
[  883.446161][    C1] vkms_vblank_simulate: vblank timer overrun
[  883.455797][    T9] usb 9-1: r8712u: Boot from EFUSE: Autoload Failed
[  883.462603][    T9] usb 9-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00
[  883.470219][    T9] usb 9-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin"
[  883.501559][ T5900] usb 5-1: SerialNumber: 餷ꋇｈ㭑㹪�斀挞㥰�בֿ�㷒乆烲�䲯৽骰⒦짗闦耦䜈�䤾�跌�솩⧙妴犙ꖸꊿ濲⸛▪翗겺뛢
[  883.557687][ T5897] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  883.573408][    T9] usb 9-1: USB disconnect, device number 123
[  883.574673][T23697] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  883.597894][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  883.623347][T23697] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  883.647848][ T5897] usb 2-1: Product: syz
[  883.662326][ T5897] usb 2-1: Manufacturer: syz
[  883.667512][ T5897] usb 2-1: SerialNumber: syz
[  883.708273][ T5897] r8152-cfgselector 2-1: Unknown version 0x0000
[  883.775403][ T5897] r8152-cfgselector 2-1: config 0 descriptor??
[  883.905688][ T5900] usb 5-1: ath9k_htc: Device endpoint numbers are not the expected ones
[  883.942644][ T5847] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  883.953237][ T5847] Bluetooth: hci4: Injecting HCI hardware error event
[  883.962799][ T5847] Bluetooth: hci4: hardware error 0x00
[  883.975808][ T5900] usb 5-1: USB disconnect, device number 81
[  884.117720][ T5896] gspca_m5602: Failed to find a sensor
[  884.123471][ T5896] ALi m5602 6-1:0.0: ALi m5602 webcam failed
[  884.132769][ T5896] usb 6-1: USB disconnect, device number 68
[  884.673865][ T5846] Bluetooth: hci4: unexpected event for opcode 0x2042
[  884.772697][T23749] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3385'.
[  885.374188][ T5896] usb 6-1: new high-speed USB device number 69 using dummy_hcd
[  885.458810][T23775] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3391'.
[  885.578230][ T5896] usb 6-1: Using ep0 maxpacket: 8
[  885.600279][ T5896] usb 6-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  885.622306][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  885.679919][ T5896] usb 6-1: config 0 descriptor??
[  885.810016][T23786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3393'.
[  885.835543][T23786] netlink: 'syz.4.3393': attribute type 2 has an invalid length.
[  885.891222][T23788] netlink: 'syz.8.3394': attribute type 11 has an invalid length.
[  885.913809][T23767] openvswitch: netlink: Actions may not be safe on all matching packets
[  885.937365][T23788] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3394'.
[  885.977584][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  886.055411][    T9] r8152-cfgselector 2-1: USB disconnect, device number 126
[  886.081651][ T5896] usb 6-1: string descriptor 0 read error: -71
[  886.089709][ T5847] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  886.125128][ T5896] qmi_wwan 6-1:0.0: probe with driver qmi_wwan failed with error -22
[  886.147986][ T5896] usb 6-1: USB disconnect, device number 69
[  887.027787][T23817] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3401'.
[  887.104153][  T970] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[  887.256224][  T970] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  887.269910][  T970] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  887.269945][  T970] usb 5-1: config 1 has no interface number 1
[  887.269992][  T970] usb 5-1: too many endpoints for config 1 interface 2 altsetting 255: 81, using maximum allowed: 30
[  887.270030][  T970] usb 5-1: config 1 interface 2 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 81
[  887.270061][  T970] usb 5-1: config 1 interface 2 has no altsetting 0
[  887.272432][  T970] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  887.385247][  T970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  887.393318][  T970] usb 5-1: Product: syz
[  887.428533][  T970] usb 5-1: Manufacturer: syz
[  887.433212][  T970] usb 5-1: SerialNumber: syz
[  887.474535][ T5900] usb 9-1: new high-speed USB device number 124 using dummy_hcd
[  887.636468][ T5900] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  887.658322][ T5900] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  887.675452][T23840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3406'.
[  887.713614][  T970] usb 5-1: USB disconnect, device number 82
[  887.715437][ T5900] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  887.755966][ T5900] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  887.795485][ T5900] usb 9-1: SerialNumber: syz
[  888.016356][ T6012] udevd[6012]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  888.022806][ T5900] usb 9-1: 0:2 : does not exist
[  888.507354][T23863] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3408'.
[  888.550886][ T5896] usb 9-1: USB disconnect, device number 124
[  889.694262][    T9] usb 2-1: new high-speed USB device number 127 using dummy_hcd
[  889.887435][    T9] usb 2-1: Using ep0 maxpacket: 16
[  889.904500][ T5897] usb 9-1: new high-speed USB device number 125 using dummy_hcd
[  889.928065][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  889.966021][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  889.991009][T23901] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3417'.
[  890.000216][ T5900] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[  890.040461][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  890.064532][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  890.094647][    T9] usb 2-1: config 0 descriptor??
[  890.171689][ T5900] usb 5-1: device descriptor read/64, error -71
[  890.185056][ T5897] usb 9-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  890.204199][ T5897] usb 9-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  890.233681][ T5897] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  890.268693][ T5897] gspca_main: stv0680-2.14.0 probing 041e:4007
[  890.414847][ T5900] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[  890.544368][ T5900] usb 5-1: device descriptor read/64, error -71
[  890.664605][ T5900] usb usb5-port1: attempt power cycle
[  890.676815][    T9] logitech 0003:046D:C29C.0040: unknown main item tag 0x0
[  890.715657][    T9] logitech 0003:046D:C29C.0040: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0
[  890.819200][T23920] CUSE: unknown device info "./binderfs/binder0"
[  890.825951][T23920] CUSE: unknown device info "/dev/kvm"
[  890.837283][T23920] CUSE: DEVNAME unspecified
[  891.023404][ T5900] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[  891.075776][ T5900] usb 5-1: device descriptor read/8, error -71
[  891.296670][ T5897] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32
[  891.329231][ T5897] stv0680 9-1:4.0: STV(e): camera ping failed!!
[  891.341659][ T5900] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[  891.368974][ T5897] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71
[  891.378410][ T5900] usb 5-1: device descriptor read/8, error -71
[  891.393570][ T5897] stv0680 9-1:4.0: last error: 0,  command = 0x0
[  891.416329][ T5897] usb 9-1: USB disconnect, device number 125
[  891.495339][ T5900] usb usb5-port1: unable to enumerate USB device
[  891.574970][T16098] usb 6-1: new high-speed USB device number 70 using dummy_hcd
[  891.814995][  T970] IPVS: starting estimator thread 0...
[  891.844312][T16098] usb 6-1: Using ep0 maxpacket: 16
[  891.908878][T16098] usb 6-1: config 0 has an invalid interface number: 216 but max is 0
[  891.943544][T16098] usb 6-1: config 0 has no interface number 0
[  891.944468][T23942] IPVS: using max 21 ests per chain, 50400 per kthread
[  891.966908][T16098] usb 6-1: config 0 interface 216 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  891.977117][T16098] usb 6-1: config 0 interface 216 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0
[  891.987370][T16098] usb 6-1: config 0 interface 216 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  891.999511][T16098] usb 6-1: New USB device found, idVendor=2c7c, idProduct=6002, bcdDevice=33.8f
[  892.011516][T16098] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  892.091196][T16098] usb 6-1: config 0 descriptor??
[  892.123458][T16098] option 6-1:0.216: GSM modem (1-port) converter detected
[  892.318011][T23935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  892.350532][T23935] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  892.389688][T23957] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3424'.
[  892.398583][ T5896] usb 6-1: USB disconnect, device number 70
[  892.427005][ T5896] option 6-1:0.216: device disconnected
[  893.324203][T16098] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[  893.592574][T16098] usb 5-1: Using ep0 maxpacket: 32
[  893.601190][    T9] logitech 0003:046D:C29C.0040: no inputs found
[  893.610264][T16098] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  893.628308][    T9] usb 2-1: USB disconnect, device number 127
[  893.693996][T16098] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  893.700355][T23978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3429'.
[  893.744504][T16098] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  893.798239][T16098] usb 5-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00
[  893.848928][T16098] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  893.885186][T16098] usb 5-1: config 0 descriptor??
[  894.111149][T23995] program syz.1.3434 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  894.120900][T23996] program syz.1.3434 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  894.184174][    T9] usb 9-1: new high-speed USB device number 126 using dummy_hcd
[  894.323313][T16098] itetech 0003:048D:8595.0041: unknown main item tag 0x0
[  894.342874][T16098] itetech 0003:048D:8595.0041: unknown main item tag 0x0
[  894.345554][    T9] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  894.359087][T16098] itetech 0003:048D:8595.0041: unknown main item tag 0x0
[  894.359126][T16098] itetech 0003:048D:8595.0041: unknown main item tag 0x0
[  894.359156][T16098] itetech 0003:048D:8595.0041: unknown main item tag 0x0
[  894.365194][T16098] itetech 0003:048D:8595.0041: hidraw0: USB HID v0.00 Device [HID 048d:8595] on usb-dummy_hcd.4-1/input0
[  894.384229][ T5896] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  894.417993][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  894.459072][    T9] usb 9-1: config 0 descriptor??
[  894.481445][    T9] cp210x 9-1:0.0: cp210x converter detected
[  894.542656][ T5899] usb 5-1: USB disconnect, device number 87
[  894.604953][ T5896] usb 2-1: Using ep0 maxpacket: 8
[  894.613342][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  894.638086][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  894.659441][ T5896] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  894.705791][T23988] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3431'.
[  894.721022][ T5896] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  894.756558][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  894.765537][T23988] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3431'.
[  894.796515][ T5896] usb 2-1: config 0 descriptor??
[  895.010340][    T9] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32
[  895.033070][    T9] usb 9-1: cp210x converter now attached to ttyUSB0
[  895.143085][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  895.175599][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  895.192496][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  895.203045][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  895.214347][ T5846] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  895.231780][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  895.268513][T24019] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3439'.
[  895.294497][ T5896] hid-picolcd 0003:04D8:C002.0042: No report with id 0x11 found
[  895.435229][T24022] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3431'.
[  895.450413][ T5896] usb 2-1: USB disconnect, device number 2
[  895.716820][T24022] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3431'.
[  895.805644][T24027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  895.833186][T24027] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  895.837103][T24020] chnl_net:caif_netlink_parms(): no params data found
[  896.178521][ T5896] usb 9-1: USB disconnect, device number 126
[  896.206329][ T5896] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  896.287038][ T5896] cp210x 9-1:0.0: device disconnected
[  896.329892][T24020] bridge0: port 1(bridge_slave_0) entered blocking state
[  896.363674][T24020] bridge0: port 1(bridge_slave_0) entered disabled state
[  896.407301][T24020] bridge_slave_0: entered allmulticast mode
[  896.465977][T24020] bridge_slave_0: entered promiscuous mode
[  896.506764][T24020] bridge0: port 2(bridge_slave_1) entered blocking state
[  896.579693][T24020] bridge0: port 2(bridge_slave_1) entered disabled state
[  896.615074][T24020] bridge_slave_1: entered allmulticast mode
[  896.651842][T24020] bridge_slave_1: entered promiscuous mode
[  896.821101][T24066] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3443'.
[  896.866931][T24020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  896.906586][T24020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  896.914404][T24070] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3445'.
[  897.012039][T24020] team0: Port device team_slave_0 added
[  897.035265][T24020] team0: Port device team_slave_1 added
[  897.083750][T24020] batman_adv: batadv0: Adding interface: batadv_slave_0
[  897.095741][T24020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  897.127733][T24020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  897.144757][T24020] batman_adv: batadv0: Adding interface: batadv_slave_1
[  897.152672][T24020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  897.180841][T24020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  897.271110][T24020] hsr_slave_0: entered promiscuous mode
[  897.284361][ T5847] Bluetooth: hci3: command tx timeout
[  897.302118][T24020] hsr_slave_1: entered promiscuous mode
[  897.308259][ T5900] usb 5-1: new full-speed USB device number 88 using dummy_hcd
[  897.320954][T24020] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  897.339642][T24020] Cannot create hsr debugfs directory
[  897.469966][ T5900] usb 5-1: config 0 has an invalid interface number: 174 but max is 0
[  897.481609][ T5900] usb 5-1: config 0 has no interface number 0
[  897.505293][ T5900] usb 5-1: config 0 interface 174 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  897.539921][ T5900] usb 5-1: New USB device found, idVendor=12d1, idProduct=2693, bcdDevice=91.fd
[  897.564173][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  897.595260][ T5900] usb 5-1: Product: syz
[  897.600138][ T5900] usb 5-1: Manufacturer: syz
[  897.608720][ T5900] usb 5-1: SerialNumber: syz
[  897.617422][ T5900] usb 5-1: config 0 descriptor??
[  897.626534][ T5900] option 5-1:0.174: GSM modem (1-port) converter detected
[  897.776607][T24020] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  898.051835][T24020] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  898.175402][ T5337] usb 9-1: new high-speed USB device number 127 using dummy_hcd
[  898.262511][T24020] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  898.350575][T24020] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  898.368536][ T5337] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  898.388540][ T5337] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  898.422757][ T5337] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  898.452534][ T5337] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  898.470456][ T5337] usb 9-1: SerialNumber: syz
[  899.105971][T24020] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  899.115195][ T5337] usb 9-1: 0:2 : does not exist
[  899.120150][ T5337] usb 9-1: unit 5 not found!
[  899.185709][T24020] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  899.342122][T24020] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  899.364126][ T5847] Bluetooth: hci3: command tx timeout
[  899.463255][T24020] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  899.757089][T24020] 8021q: adding VLAN 0 to HW filter on device bond0
[  899.827804][T24020] 8021q: adding VLAN 0 to HW filter on device team0
[  899.857670][T21079] bridge0: port 1(bridge_slave_0) entered blocking state
[  899.864972][T21079] bridge0: port 1(bridge_slave_0) entered forwarding state
[  899.907772][T21079] bridge0: port 2(bridge_slave_1) entered blocking state
[  899.915027][T21079] bridge0: port 2(bridge_slave_1) entered forwarding state
[  900.098013][ T5897] usb 5-1: USB disconnect, device number 88
[  900.105772][ T5897] option 5-1:0.174: device disconnected
[  900.139856][T24020] 8021q: adding VLAN 0 to HW filter on device batadv0
[  900.305231][T24020] veth0_vlan: entered promiscuous mode
[  900.340579][T24020] veth1_vlan: entered promiscuous mode
[  900.413293][T24020] veth0_macvtap: entered promiscuous mode
[  900.423815][T24020] veth1_macvtap: entered promiscuous mode
[  900.440707][T24020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  900.451565][T24020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  900.461728][T24020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  900.472639][T24020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  900.483012][T24020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  900.493894][T24020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  900.503808][T24020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  900.514583][T24020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  900.524519][T24020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  900.535541][T24020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  900.547354][T24020] batman_adv: batadv0: Interface activated: batadv_slave_0
[  900.597977][T24020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  900.609267][T24020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  900.621704][T24020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  900.641361][T24020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  900.651970][T24020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  900.677020][T24020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  900.687020][T24020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  900.697993][T24020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  900.710586][T24020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  900.727050][T24020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  900.745713][T24020] batman_adv: batadv0: Interface activated: batadv_slave_1
[  900.767273][T24020] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  900.776502][T24020] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  900.802216][T24020] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  900.812278][T24020] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  900.955814][ T5896] usb 9-1: USB disconnect, device number 127
[  901.050458][T10071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  901.077469][T10071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  901.165587][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  901.204520][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  901.380673][T24160] netlink: 76 bytes leftover after parsing attributes in process `syz.8.3461'.
[  901.454694][ T5847] Bluetooth: hci3: command tx timeout
[  902.418736][T24194] FAULT_INJECTION: forcing a failure.
[  902.418736][T24194] name failslab, interval 1, probability 0, space 0, times 0
[  902.562561][T24194] CPU: 0 UID: 0 PID: 24194 Comm: syz.4.3467 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0
[  902.573062][T24194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  902.583155][T24194] Call Trace:
[  902.586449][T24194]  <TASK>
[  902.589410][T24194]  dump_stack_lvl+0x241/0x360
[  902.594129][T24194]  ? __pfx_dump_stack_lvl+0x10/0x10
[  902.599393][T24194]  ? __pfx__printk+0x10/0x10
[  902.604059][T24194]  ? __kmalloc_noprof+0xb0/0x400
[  902.609031][T24194]  ? __pfx___might_resched+0x10/0x10
[  902.614345][T24194]  should_fail_ex+0x3b0/0x4e0
[  902.619047][T24194]  ? sk_prot_alloc+0xe0/0x210
[  902.623762][T24194]  should_failslab+0xac/0x100
[  902.629423][T24194]  ? sk_prot_alloc+0xe0/0x210
[  902.634143][T24194]  __kmalloc_noprof+0xd8/0x400
[  902.638931][T24194]  sk_prot_alloc+0xe0/0x210
[  902.643478][T24194]  ? sk_alloc+0x26/0x370
[  902.647744][T24194]  sk_alloc+0x38/0x370
[  902.651832][T24194]  ? __pfx_genl_release+0x10/0x10
[  902.656873][T24194]  __netlink_create+0x65/0x260
[  902.661664][T24194]  ? __pfx_genl_release+0x10/0x10
[  902.666717][T24194]  netlink_create+0x3ab/0x560
[  902.671416][T24194]  ? __pfx_genl_unbind+0x10/0x10
[  902.676398][T24194]  ? __pfx_genl_bind+0x10/0x10
[  902.681179][T24194]  ? __sock_create+0x337/0x940
[  902.685959][T24194]  __sock_create+0x490/0x940
[  902.690571][T24194]  __sys_socket+0x150/0x3c0
[  902.695094][T24194]  ? __pfx___sys_socket+0x10/0x10
[  902.700136][T24194]  ? __might_fault+0xc6/0x120
[  902.704834][T24194]  __se_compat_sys_socketcall+0xa73/0x1430
[  902.710663][T24194]  ? __pfx___se_compat_sys_socketcall+0x10/0x10
[  902.716933][T24194]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  902.723541][T24194]  ? lockdep_hardirqs_on+0x99/0x150
[  902.728767][T24194]  __do_fast_syscall_32+0xb4/0x110
[  902.733902][T24194]  ? exc_page_fault+0x590/0x8c0
[  902.738775][T24194]  do_fast_syscall_32+0x34/0x80
[  902.743735][T24194]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  902.750106][T24194] RIP: 0023:0xf7f60579
[  902.754190][T24194] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  902.773987][T24194] RSP: 002b:00000000f50c44b0 EFLAGS: 00000206 ORIG_RAX: 0000000000000066
[  902.782536][T24194] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00000000f50c44c0
[  902.790783][T24194] RDX: 00000000f73edff4 RSI: 0000000000000000 RDI: 0000000000000000
[  902.798769][T24194] RBP: 0000000000000006 R08: 0000000000000000 R09: 0000000000000000
[  902.806750][T24194] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  902.814728][T24194] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  902.822720][T24194]  </TASK>
[  903.264539][ T1202] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  903.573937][ T5847] Bluetooth: hci3: command tx timeout
[  903.611126][ T1202] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  903.634655][ T1202] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  903.675831][ T1202] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  903.694257][ T1202] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  903.712871][ T1202] usb 9-1: SerialNumber: syz
[  903.945917][ T1202] usb 9-1: 0:2 : does not exist
[  904.174476][ T1202] usb 9-1: USB disconnect, device number 2
[  904.455533][ T6012] udevd[6012]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  904.608390][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  904.666450][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  904.723964][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  904.778755][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  904.788984][ T5847] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  904.797162][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  905.426617][T24251] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  905.519150][T24256] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3490'.
[  905.536717][T24251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3487'.
[  905.833293][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  905.848689][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  905.858775][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  905.871464][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  905.893080][    T9] usb 10-1: new low-speed USB device number 31 using dummy_hcd
[  905.901742][ T5847] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  905.914232][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  906.058076][    T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  906.072118][    T9] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  906.082817][    T9] usb 10-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00
[  906.099765][    T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  906.127141][    T9] usb 10-1: config 0 descriptor??
[  906.201062][T10069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  906.212795][T10069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  906.223411][T10069] bond0 (unregistering): Released all slaves
[  906.589867][    T9] aquacomputer_d5next 0003:0C70:F0BD.0043: item fetching failed at offset 2/5
[  906.606006][    T9] aquacomputer_d5next 0003:0C70:F0BD.0043: probe with driver aquacomputer_d5next failed with error -22
[  906.781401][ T5337] usb 10-1: USB disconnect, device number 31
[  906.891905][ T5847] Bluetooth: hci2: command tx timeout
[  906.963385][T24238] chnl_net:caif_netlink_parms(): no params data found
[  907.202956][T10069] hsr_slave_0: left promiscuous mode
[  907.221866][T10069] hsr_slave_1: left promiscuous mode
[  907.249075][T10069] batman_adv: batadv0: Removing interface: batadv_slave_0
[  907.265097][T10069] batman_adv: batadv0: Removing interface: batadv_slave_1
[  907.355301][ T1202] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[  907.515945][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  907.527651][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  907.536828][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  907.545000][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  907.552752][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  907.562406][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  907.603260][ T1202] usb 5-1: Using ep0 maxpacket: 16
[  907.611548][ T1202] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  907.629760][ T1202] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  907.645297][ T1202] usb 5-1: config 0 descriptor??
[  907.667787][ T1202] gspca_main: sonixj-2.14.0 probing 0471:0327
[  908.004568][ T5846] Bluetooth: hci4: command tx timeout
[  908.284927][ T1202] gspca_sonixj: reg_w1 err -71
[  908.329979][ T1202] sonixj 5-1:0.0: probe with driver sonixj failed with error -71
[  908.348720][ T1202] usb 5-1: USB disconnect, device number 89
[  908.675588][ T5337] usb 10-1: new high-speed USB device number 32 using dummy_hcd
[  908.688728][T10069] team0 (unregistering): Port device team_slave_1 removed
[  908.747842][T10069] team0 (unregistering): Port device team_slave_0 removed
[  908.839857][ T5337] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  908.864087][ T5337] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  908.884885][ T5337] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  908.898455][ T5337] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  908.916110][ T5337] usb 10-1: SerialNumber: syz
[  908.964856][ T5846] Bluetooth: hci2: command tx timeout
[  909.177046][ T5337] usb 10-1: 0:2 : does not exist
[  909.609281][ T5846] Bluetooth: hci1: command tx timeout
[  909.855116][T24238] bridge0: port 1(bridge_slave_0) entered blocking state
[  909.864483][T24238] bridge0: port 1(bridge_slave_0) entered disabled state
[  909.876985][T24238] bridge_slave_0: entered allmulticast mode
[  909.895418][T24238] bridge_slave_0: entered promiscuous mode
[  909.923971][T24261] chnl_net:caif_netlink_parms(): no params data found
[  909.935772][T24238] bridge0: port 2(bridge_slave_1) entered blocking state
[  909.942932][T24238] bridge0: port 2(bridge_slave_1) entered disabled state
[  910.003515][T24238] bridge_slave_1: entered allmulticast mode
[  910.024575][T24238] bridge_slave_1: entered promiscuous mode
[  910.087210][ T5846] Bluetooth: hci4: command tx timeout
[  910.235370][T24238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  910.315791][T24238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  910.533075][T24238] team0: Port device team_slave_0 added
[  910.613944][T24238] team0: Port device team_slave_1 added
[  910.677479][T24261] bridge0: port 1(bridge_slave_0) entered blocking state
[  910.692144][T24261] bridge0: port 1(bridge_slave_0) entered disabled state
[  910.703200][T24261] bridge_slave_0: entered allmulticast mode
[  910.733344][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  910.747809][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  910.758692][T24261] bridge_slave_0: entered promiscuous mode
[  910.767543][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  910.777899][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  910.794496][ T5847] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  910.801849][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  910.804318][T24261] bridge0: port 2(bridge_slave_1) entered blocking state
[  910.828578][T24261] bridge0: port 2(bridge_slave_1) entered disabled state
[  910.844782][T24261] bridge_slave_1: entered allmulticast mode
[  910.852009][T24261] bridge_slave_1: entered promiscuous mode
[  910.948613][T10069] IPVS: stop unused estimator thread 0...
[  911.005248][T24238] batman_adv: batadv0: Adding interface: batadv_slave_0
[  911.012468][T24238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  911.044142][ T5847] Bluetooth: hci2: command tx timeout
[  911.055591][T24238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  911.083686][T24238] batman_adv: batadv0: Adding interface: batadv_slave_1
[  911.096838][T24238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  911.130588][T24238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  911.151293][T24261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  911.212594][T24261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  911.362472][T24261] team0: Port device team_slave_0 added
[  911.394971][T24238] hsr_slave_0: entered promiscuous mode
[  911.402057][T24238] hsr_slave_1: entered promiscuous mode
[  911.420132][T24238] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  911.436211][T24238] Cannot create hsr debugfs directory
[  911.503572][ T5337] usb 10-1: USB disconnect, device number 32
[  911.595893][T24351] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf
[  911.597982][T24261] team0: Port device team_slave_1 added
[  911.694111][ T5847] Bluetooth: hci1: command tx timeout
[  911.904864][T24261] batman_adv: batadv0: Adding interface: batadv_slave_0
[  911.911856][T24261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  911.988541][T24261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  912.177925][ T5847] Bluetooth: hci4: command tx timeout
[  912.337084][T24261] batman_adv: batadv0: Adding interface: batadv_slave_1
[  912.363602][T24261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  912.462657][T24261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  912.791178][T10069] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  912.859667][T24290] chnl_net:caif_netlink_parms(): no params data found
[  912.884635][ T5847] Bluetooth: hci0: command tx timeout
[  912.936103][T10069] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  913.014814][ T5899] usb 10-1: new high-speed USB device number 33 using dummy_hcd
[  913.032794][T24261] hsr_slave_0: entered promiscuous mode
[  913.040797][T24261] hsr_slave_1: entered promiscuous mode
[  913.047770][T24261] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  913.055469][T24261] Cannot create hsr debugfs directory
[  913.107957][T10069] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  913.127166][ T5847] Bluetooth: hci2: command tx timeout
[  913.206473][ T5899] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  913.233780][ T5899] usb 10-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice=d4.45
[  913.264821][ T5899] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  913.272983][ T5899] usb 10-1: Product: syz
[  913.300888][ T5899] usb 10-1: Manufacturer: syz
[  913.314160][ T5899] usb 10-1: SerialNumber: syz
[  913.340120][ T5899] usb 10-1: config 0 descriptor??
[  913.494757][ T5899] rtsx_usb 10-1:0.0: probe with driver rtsx_usb failed with error -22
[  913.593597][T10069] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  913.613381][T16098] usb 10-1: USB disconnect, device number 33
[  913.765516][ T5847] Bluetooth: hci1: command tx timeout
[  913.820062][T24329] chnl_net:caif_netlink_parms(): no params data found
[  914.244357][ T5847] Bluetooth: hci4: command tx timeout
[  914.366009][T24290] bridge0: port 1(bridge_slave_0) entered blocking state
[  914.373198][T24290] bridge0: port 1(bridge_slave_0) entered disabled state
[  914.383161][T24290] bridge_slave_0: entered allmulticast mode
[  914.391822][T24290] bridge_slave_0: entered promiscuous mode
[  914.440731][T24290] bridge0: port 2(bridge_slave_1) entered blocking state
[  914.455825][T24290] bridge0: port 2(bridge_slave_1) entered disabled state
[  914.474921][T24290] bridge_slave_1: entered allmulticast mode
[  914.482141][T24290] bridge_slave_1: entered promiscuous mode
[  914.579043][T24417] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3507'.
[  914.680455][T24290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  914.694865][T24329] bridge0: port 1(bridge_slave_0) entered blocking state
[  914.702150][T24329] bridge0: port 1(bridge_slave_0) entered disabled state
[  914.713388][T24329] bridge_slave_0: entered allmulticast mode
[  914.722029][T24329] bridge_slave_0: entered promiscuous mode
[  914.779104][T24290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  914.855239][T24290] team0: Port device team_slave_0 added
[  914.875547][T24329] bridge0: port 2(bridge_slave_1) entered blocking state
[  914.883321][T24329] bridge0: port 2(bridge_slave_1) entered disabled state
[  914.903553][T24329] bridge_slave_1: entered allmulticast mode
[  914.915189][T24329] bridge_slave_1: entered promiscuous mode
[  914.944559][T24290] team0: Port device team_slave_1 added
[  914.964750][ T5847] Bluetooth: hci0: command tx timeout
[  915.100885][T24329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  915.132906][T24290] batman_adv: batadv0: Adding interface: batadv_slave_0
[  915.151340][T24290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  915.191770][T24290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  915.269393][T24329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  915.292213][T24290] batman_adv: batadv0: Adding interface: batadv_slave_1
[  915.302474][T24290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  915.329937][T24290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  915.456402][T10069] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  915.555569][T24329] team0: Port device team_slave_0 added
[  915.620210][T10069] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  915.632999][T24238] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  915.838432][T24329] team0: Port device team_slave_1 added
[  915.844393][ T5847] Bluetooth: hci1: command tx timeout
[  915.876868][T24290] hsr_slave_0: entered promiscuous mode
[  915.899939][T24290] hsr_slave_1: entered promiscuous mode
[  915.924658][T24290] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  915.932366][T24290] Cannot create hsr debugfs directory
[  915.950965][T24238] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  915.967133][T24238] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  916.007842][T10069] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  916.207795][T24238] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  916.256448][T24329] batman_adv: batadv0: Adding interface: batadv_slave_0
[  916.263463][T24329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  916.291754][T24329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  916.350333][T10069] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  916.530950][T24329] batman_adv: batadv0: Adding interface: batadv_slave_1
[  916.545352][T24329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  916.576472][T24329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  916.920176][T24329] hsr_slave_0: entered promiscuous mode
[  916.935587][T24329] hsr_slave_1: entered promiscuous mode
[  916.945612][T24329] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  916.963695][T24329] Cannot create hsr debugfs directory
[  917.049834][ T5847] Bluetooth: hci0: command tx timeout
[  917.148754][T10069] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  917.377617][T10069] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  917.473443][T24261] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  917.487016][T24261] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  917.547731][T10069] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  917.610126][T24261] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  917.629191][T24238] 8021q: adding VLAN 0 to HW filter on device bond0
[  917.677108][T10069] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  917.690316][T24261] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  917.887333][T24238] 8021q: adding VLAN 0 to HW filter on device team0
[  918.018829][T21078] bridge0: port 1(bridge_slave_0) entered blocking state
[  918.026013][T21078] bridge0: port 1(bridge_slave_0) entered forwarding state
[  918.101989][T21078] bridge0: port 2(bridge_slave_1) entered blocking state
[  918.109248][T21078] bridge0: port 2(bridge_slave_1) entered forwarding state
[  918.146317][T10069] bridge_slave_1: left allmulticast mode
[  918.152091][T10069] bridge_slave_1: left promiscuous mode
[  918.158631][T10069] bridge0: port 2(bridge_slave_1) entered disabled state
[  918.168886][T10069] bridge_slave_0: left allmulticast mode
[  918.176441][T10069] bridge_slave_0: left promiscuous mode
[  918.182172][T10069] bridge0: port 1(bridge_slave_0) entered disabled state
[  919.124282][ T5847] Bluetooth: hci0: command tx timeout
[  919.272880][T10069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  919.294688][T10069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  919.313571][T10069] bond0 (unregistering): Released all slaves
[  919.478109][T10069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  919.489697][T10069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  919.502183][T10069] bond0 (unregistering): Released all slaves
[  919.687785][T10069] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  919.700098][T10069] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  919.711312][T10069] bond0 (unregistering): Released all slaves
[  920.111444][T24261] 8021q: adding VLAN 0 to HW filter on device bond0
[  920.284682][T24238] 8021q: adding VLAN 0 to HW filter on device batadv0
[  920.299890][T24261] 8021q: adding VLAN 0 to HW filter on device team0
[  920.345236][T21079] bridge0: port 1(bridge_slave_0) entered blocking state
[  920.352407][T21079] bridge0: port 1(bridge_slave_0) entered forwarding state
[  920.372946][T21079] bridge0: port 2(bridge_slave_1) entered blocking state
[  920.380170][T21079] bridge0: port 2(bridge_slave_1) entered forwarding state
[  920.628118][T24290] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  920.641283][T24290] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  920.653498][T24290] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  920.666982][T24238] veth0_vlan: entered promiscuous mode
[  920.700466][T24290] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  920.772413][T24261] 8021q: adding VLAN 0 to HW filter on device batadv0
[  920.782512][T24238] veth1_vlan: entered promiscuous mode
[  920.877030][T10069] hsr_slave_0: left promiscuous mode
[  920.894949][T10069] hsr_slave_1: left promiscuous mode
[  920.901361][T10069] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  920.910137][T10069] batman_adv: batadv0: Removing interface: batadv_slave_0
[  920.918602][T10069] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  920.926785][T10069] batman_adv: batadv0: Removing interface: batadv_slave_1
[  920.943566][T10069] hsr_slave_0: left promiscuous mode
[  920.949984][T10069] hsr_slave_1: left promiscuous mode
[  920.958387][T10069] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  920.971996][T10069] batman_adv: batadv0: Removing interface: batadv_slave_0
[  920.985694][T10069] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  920.993149][T10069] batman_adv: batadv0: Removing interface: batadv_slave_1
[  921.011829][T10069] hsr_slave_0: left promiscuous mode
[  921.018277][T10069] hsr_slave_1: left promiscuous mode
[  921.024890][T10069] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  921.032400][T10069] batman_adv: batadv0: Removing interface: batadv_slave_0
[  921.040920][T10069] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  921.048886][T10069] batman_adv: batadv0: Removing interface: batadv_slave_1
[  921.098564][T10069] veth1_macvtap: left promiscuous mode
[  921.104401][T10069] veth0_macvtap: left promiscuous mode
[  921.110840][T10069] veth1_vlan: left promiscuous mode
[  921.116562][T10069] veth0_vlan: left promiscuous mode
[  921.122827][T10069] veth1_macvtap: left promiscuous mode
[  921.129243][T10069] veth0_macvtap: left promiscuous mode
[  921.135389][T10069] veth1_vlan: left promiscuous mode
[  921.140687][T10069] veth0_vlan: left promiscuous mode
[  921.151517][T10069] veth1_macvtap: left promiscuous mode
[  921.157301][T10069] veth0_macvtap: left promiscuous mode
[  921.162874][T10069] veth1_vlan: left promiscuous mode
[  921.168671][T10069] veth0_vlan: left promiscuous mode
[  922.080043][T10069] team0 (unregistering): Port device team_slave_1 removed
[  922.137791][T10069] team0 (unregistering): Port device team_slave_0 removed
[  923.309952][T10069] team0 (unregistering): Port device team_slave_1 removed
[  923.390089][T10069] team0 (unregistering): Port device team_slave_0 removed
[  924.539038][T10069] team0 (unregistering): Port device team_slave_1 removed
[  924.608849][T10069] team0 (unregistering): Port device team_slave_0 removed
[  925.219744][T24329] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  925.233707][T24238] veth0_macvtap: entered promiscuous mode
[  925.257209][T24329] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  925.282878][T24238] veth1_macvtap: entered promiscuous mode
[  925.317798][T24261] veth0_vlan: entered promiscuous mode
[  925.324476][T24329] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  925.348466][T24329] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  925.391641][T24238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  925.402503][T24238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  925.413376][T24238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  925.426328][T24238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  925.436537][T24238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  925.447733][T24238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  925.471257][T24238] batman_adv: batadv0: Interface activated: batadv_slave_0
[  925.483921][T24261] veth1_vlan: entered promiscuous mode
[  925.531357][T24238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  925.566081][T24238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  925.583203][T24238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  925.594444][T24238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  925.605299][T24238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  925.617038][T24238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  925.641971][T24238] batman_adv: batadv0: Interface activated: batadv_slave_1
[  925.687206][T24238] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  925.696605][T24238] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  925.705676][T24238] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  925.715563][T24238] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  925.821449][T24261] veth0_macvtap: entered promiscuous mode
[  925.868151][T24261] veth1_macvtap: entered promiscuous mode
[  925.966695][T24290] 8021q: adding VLAN 0 to HW filter on device bond0
[  926.037728][T24290] 8021q: adding VLAN 0 to HW filter on device team0
[  926.062171][T24261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  926.074514][T24261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  926.085009][T24261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  926.095904][T24261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  926.106289][T24261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  926.118364][T24261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  926.129276][T24261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  926.140153][T24261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  926.151513][T24261] batman_adv: batadv0: Interface activated: batadv_slave_0
[  926.186055][T21079] bridge0: port 1(bridge_slave_0) entered blocking state
[  926.193203][T21079] bridge0: port 1(bridge_slave_0) entered forwarding state
[  926.245586][T10070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  926.253449][T10070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  926.291758][T24261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  926.302759][T24261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  926.312850][T24261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  926.323428][T24261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  926.335194][T24261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  926.345888][T24261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  926.355767][T24261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  926.367411][T24261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  926.378988][T24261] batman_adv: batadv0: Interface activated: batadv_slave_1
[  926.389182][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  926.396341][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  926.429832][T24329] 8021q: adding VLAN 0 to HW filter on device bond0
[  926.451788][T24261] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  926.472139][T24261] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  926.481524][T24261] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  926.491069][T24261] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  926.533506][T21080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  926.543775][T21080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  926.663537][T24329] 8021q: adding VLAN 0 to HW filter on device team0
[  926.732758][T21080] bridge0: port 1(bridge_slave_0) entered blocking state
[  926.739944][T21080] bridge0: port 1(bridge_slave_0) entered forwarding state
[  926.810905][T10070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  926.831774][T21079] bridge0: port 2(bridge_slave_1) entered blocking state
[  926.839001][T21079] bridge0: port 2(bridge_slave_1) entered forwarding state
[  926.839366][T10070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  926.882052][T24290] 8021q: adding VLAN 0 to HW filter on device batadv0
[  926.940544][T21079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  926.967009][T21079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  927.092165][T24290] veth0_vlan: entered promiscuous mode
[  927.156001][T24329] 8021q: adding VLAN 0 to HW filter on device batadv0
[  927.164651][T24290] veth1_vlan: entered promiscuous mode
[  927.302808][T24290] veth0_macvtap: entered promiscuous mode
[  927.335438][T24329] veth0_vlan: entered promiscuous mode
[  927.352748][T24290] veth1_macvtap: entered promiscuous mode
[  927.383256][T24329] veth1_vlan: entered promiscuous mode
[  927.399362][T24290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  927.410988][T24290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  927.422427][T24290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  927.433507][T24290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  927.444466][T24290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  927.461714][T24290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  927.471729][T24290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  927.483024][T24290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  927.493763][T24290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  927.504385][T24290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  927.521687][T24290] batman_adv: batadv0: Interface activated: batadv_slave_0
[  927.581670][T24290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  927.592527][T24290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  927.610223][T24290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  927.621671][T24290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  927.631773][T24290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  927.642295][T24290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  927.652194][T24290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  927.664038][T24290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  927.673892][T24290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  927.686145][T24290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  927.697998][T24290] batman_adv: batadv0: Interface activated: batadv_slave_1
[  927.710576][T24290] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  927.721460][T24290] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  927.732174][T24290] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  927.746139][T24290] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  927.869314][T21079] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  927.903228][T24329] veth0_macvtap: entered promiscuous mode
[  927.979703][T21079] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  927.999494][T24329] veth1_macvtap: entered promiscuous mode
[  928.044968][  T970] usb 3-1: new high-speed USB device number 122 using dummy_hcd
[  928.159185][T21079] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  928.206362][  T970] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  928.229526][  T970] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  928.251785][  T970] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  928.269607][T24329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  928.284853][  T970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  928.294084][T24329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  928.303552][  T970] usb 3-1: SerialNumber: syz
[  928.303924][T24329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  928.344128][T24329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  928.364127][T24329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  928.376064][T24329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  928.388038][T24329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  928.399486][T24329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  928.415550][T24329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  928.426540][T24329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  928.437314][T24329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  928.449840][T24329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  928.453802][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  928.462879][T24329] batman_adv: batadv0: Interface activated: batadv_slave_0
[  928.483291][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  928.501382][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  928.530112][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  928.536106][  T970] usb 3-1: 0:2 : does not exist
[  928.540269][ T5846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  928.542609][T21079] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  928.559526][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  928.674589][T24329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  928.689055][T24329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  928.701652][T24329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  928.712478][T24329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  928.722471][T24329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  928.733602][T24329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  928.754363][T24329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  928.764948][T24329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  928.774918][T24329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  928.785477][T24329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  928.796515][T24329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  928.807338][T24329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  928.819714][T24329] batman_adv: batadv0: Interface activated: batadv_slave_1
[  928.832499][T24329] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  928.841415][T24329] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  928.850332][T24329] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  928.859127][T24329] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  928.870652][T10069] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  928.880357][T10069] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  928.979738][T10069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  929.001715][T10069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  929.209204][T21079] bridge_slave_1: left allmulticast mode
[  929.217753][T21079] bridge_slave_1: left promiscuous mode
[  929.223545][T21079] bridge0: port 2(bridge_slave_1) entered disabled state
[  929.247858][T21079] bridge_slave_0: left allmulticast mode
[  929.253721][T21079] bridge_slave_0: left promiscuous mode
[  929.260074][T21079] bridge0: port 1(bridge_slave_0) entered disabled state
[  929.640374][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  929.654986][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  929.669736][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  929.684571][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  929.695564][ T5846] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  929.704984][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  930.030456][T24516] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  930.036969][T24516] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  930.258207][T21079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  930.279022][T21079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  930.293953][T21079] bond0 (unregistering): Released all slaves
[  930.348754][T24516] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3514'.
[  930.411129][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  930.449396][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  930.533785][T24509] chnl_net:caif_netlink_parms(): no params data found
[  930.620060][T10070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  930.644474][ T5846] Bluetooth: hci4: command tx timeout
[  930.664277][T10070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  930.823478][ T8574] usb 3-1: USB disconnect, device number 122
[  931.072634][T21079] hsr_slave_0: left promiscuous mode
[  931.079901][T21079] hsr_slave_1: left promiscuous mode
[  931.092621][T21079] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  931.101996][T24539] sctp: [Deprecated]: syz.2.3516 (pid 24539) Use of int in maxseg socket option.
[  931.101996][T24539] Use struct sctp_assoc_value instead
[  931.122864][T21079] batman_adv: batadv0: Removing interface: batadv_slave_0
[  931.151664][T21079] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  931.163587][T21079] batman_adv: batadv0: Removing interface: batadv_slave_1
[  931.226949][T21079] veth1_macvtap: left promiscuous mode
[  931.232551][T21079] veth0_macvtap: left promiscuous mode
[  931.251278][T21079] veth1_vlan: left promiscuous mode
[  931.259422][T21079] veth0_vlan: left promiscuous mode
[  931.703426][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  931.709891][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  931.777010][ T5846] Bluetooth: hci5: command tx timeout
[  932.273168][T21079] team0 (unregistering): Port device team_slave_1 removed
[  932.346016][T21079] team0 (unregistering): Port device team_slave_0 removed
[  932.724404][ T5846] Bluetooth: hci4: command tx timeout
[  933.366384][T24518] chnl_net:caif_netlink_parms(): no params data found
[  933.471436][T24509] bridge0: port 1(bridge_slave_0) entered blocking state
[  933.479112][T24509] bridge0: port 1(bridge_slave_0) entered disabled state
[  933.487583][T24509] bridge_slave_0: entered allmulticast mode
[  933.495563][T24509] bridge_slave_0: entered promiscuous mode
[  933.572201][T24509] bridge0: port 2(bridge_slave_1) entered blocking state
[  933.598778][T24509] bridge0: port 2(bridge_slave_1) entered disabled state
[  933.612511][T24509] bridge_slave_1: entered allmulticast mode
[  933.629988][T24509] bridge_slave_1: entered promiscuous mode
[  933.696347][T24566] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3523'.
[  933.829197][T24518] bridge0: port 1(bridge_slave_0) entered blocking state
[  933.838880][T24518] bridge0: port 1(bridge_slave_0) entered disabled state
[  933.844422][ T5846] Bluetooth: hci5: command tx timeout
[  933.852380][T24518] bridge_slave_0: entered allmulticast mode
[  933.864442][T24518] bridge_slave_0: entered promiscuous mode
[  933.882271][T24509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  933.920898][T24518] bridge0: port 2(bridge_slave_1) entered blocking state
[  933.928465][T24518] bridge0: port 2(bridge_slave_1) entered disabled state
[  933.935950][T24518] bridge_slave_1: entered allmulticast mode
[  933.942871][T24518] bridge_slave_1: entered promiscuous mode
[  933.971394][T24509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  933.984187][T15126] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  934.023527][T24532] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  934.030881][T24532] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  934.087572][T24509] team0: Port device team_slave_0 added
[  934.096544][T24509] team0: Port device team_slave_1 added
[  934.135111][T24518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  934.154683][T15126] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  934.168916][T24518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  934.183804][T15126] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  934.199087][T15126] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  934.208800][T15126] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  934.217749][T15126] usb 4-1: SerialNumber: syz
[  934.248101][T24509] batman_adv: batadv0: Adding interface: batadv_slave_0
[  934.264129][T24509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  934.301076][T24509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  934.305372][T24570] netlink: 'syz.0.3524': attribute type 29 has an invalid length.
[  934.317910][T24509] batman_adv: batadv0: Adding interface: batadv_slave_1
[  934.334538][T24509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  934.363963][T24509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  934.446631][T15126] usb 4-1: 0:2 : does not exist
[  934.476278][T24532] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  934.482239][T24532] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  934.496952][T15126] usb 4-1: USB disconnect, device number 13
[  934.562637][T24518] team0: Port device team_slave_0 added
[  934.571696][T24532] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  934.579818][T24532] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  934.597676][T24518] team0: Port device team_slave_1 added
[  934.679955][T24509] hsr_slave_0: entered promiscuous mode
[  934.687019][T24532] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  934.692964][T24532] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  934.702257][T24509] hsr_slave_1: entered promiscuous mode
[  934.710004][T24509] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  934.719752][T24509] Cannot create hsr debugfs directory
[  934.787387][ T6012] udevd[6012]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  934.813037][ T5846] Bluetooth: hci4: command tx timeout
[  934.836159][T24518] batman_adv: batadv0: Adding interface: batadv_slave_0
[  934.843150][T24518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  934.883237][T24518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  934.919525][T24532] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  934.927055][T24532] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  934.960333][T24518] batman_adv: batadv0: Adding interface: batadv_slave_1
[  934.967959][T24518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  935.008354][T24518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  935.201305][T24579] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  935.201609][T24518] hsr_slave_0: entered promiscuous mode
[  935.223792][T24579] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  935.238929][T24579] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  935.250866][T24518] hsr_slave_1: entered promiscuous mode
[  935.252785][T24579] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  935.266521][T24518] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  935.286872][T24579] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  935.294327][T24518] Cannot create hsr debugfs directory
[  935.308611][T24579] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  935.326690][T24532] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  935.331076][T24579] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  935.332650][T24532] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  935.535657][T24579] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(21)
[  935.542324][T24579] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  935.586148][T24579] vhci_hcd vhci_hcd.0: Device attached
[  935.594409][T24588] vhci_hcd: connection closed
[  935.675156][T10064] vhci_hcd: stop threads
[  935.685920][T10064] vhci_hcd: release socket
[  935.690421][T10064] vhci_hcd: disconnect device
[  935.822006][T24599] FAULT_INJECTION: forcing a failure.
[  935.822006][T24599] name failslab, interval 1, probability 0, space 0, times 0
[  935.892850][T24599] CPU: 0 UID: 0 PID: 24599 Comm: syz.0.3531 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0
[  935.903344][T24599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  935.913439][T24599] Call Trace:
[  935.916754][T24599]  <TASK>
[  935.919724][T24599]  dump_stack_lvl+0x241/0x360
[  935.924458][T24599]  ? __pfx_dump_stack_lvl+0x10/0x10
[  935.929707][T24599]  ? __pfx__printk+0x10/0x10
[  935.934355][T24599]  ? ref_tracker_alloc+0x332/0x490
[  935.939587][T24599]  should_fail_ex+0x3b0/0x4e0
[  935.944325][T24599]  ? skb_clone+0x20c/0x390
[  935.948787][T24599]  should_failslab+0xac/0x100
[  935.953523][T24599]  ? skb_clone+0x20c/0x390
[  935.957985][T24599]  kmem_cache_alloc_noprof+0x6c/0x2a0
[  935.963413][T24599]  skb_clone+0x20c/0x390
[  935.967704][T24599]  __netlink_deliver_tap+0x3cc/0x7c0
[  935.973074][T24599]  ? netlink_deliver_tap+0x2e/0x1b0
[  935.978322][T24599]  netlink_deliver_tap+0x19d/0x1b0
[  935.983485][T24599]  netlink_unicast+0x7c4/0x990
[  935.988308][T24599]  ? __pfx_netlink_unicast+0x10/0x10
[  935.993659][T24599]  ? __virt_addr_valid+0x183/0x530
[  935.998821][T24599]  ? __check_object_size+0x48e/0x900
[  936.004171][T24599]  netlink_sendmsg+0x8e4/0xcb0
[  936.008999][T24599]  ? __pfx_netlink_sendmsg+0x10/0x10
[  936.014344][T24599]  ? __pfx_lock_release+0x10/0x10
[  936.019411][T24599]  ? aa_sock_msg_perm+0x91/0x160
[  936.024399][T24599]  ? __pfx_netlink_sendmsg+0x10/0x10
[  936.029730][T24599]  __sock_sendmsg+0x221/0x270
[  936.034459][T24599]  ____sys_sendmsg+0x52a/0x7e0
[  936.039279][T24599]  ? __pfx_____sys_sendmsg+0x10/0x10
[  936.044633][T24599]  __sys_sendmsg+0x269/0x350
[  936.049271][T24599]  ? __pfx_lock_release+0x10/0x10
[  936.054338][T24599]  ? __pfx___sys_sendmsg+0x10/0x10
[  936.059514][T24599]  ? __pfx_vfs_write+0x10/0x10
[  936.064370][T24599]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  936.071014][T24599]  ? lockdep_hardirqs_on+0x99/0x150
[  936.076271][T24599]  __do_fast_syscall_32+0xb4/0x110
[  936.081438][T24599]  ? exc_page_fault+0x590/0x8c0
[  936.086337][T24599]  do_fast_syscall_32+0x34/0x80
[  936.091239][T24599]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  936.097615][T24599] RIP: 0023:0xf7fb5579
[  936.101721][T24599] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  936.121364][T24599] RSP: 002b:00000000f513655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  936.129828][T24599] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000200
[  936.137835][T24599] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  936.145850][T24599] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  936.153856][T24599] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  936.161861][T24599] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  936.169885][T24599]  </TASK>
[  936.173030][    C0] vkms_vblank_simulate: vblank timer overrun
[  936.676027][T24625] ipt_ECN: cannot use operation on non-tcp rule
[  936.696906][T24509] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  936.748018][T24509] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  936.910630][T24509] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  936.939653][T24509] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  937.318661][T24509] 8021q: adding VLAN 0 to HW filter on device bond0
[  937.350856][T24509] 8021q: adding VLAN 0 to HW filter on device team0
[  937.406038][T21079] bridge0: port 1(bridge_slave_0) entered blocking state
[  937.413194][T21079] bridge0: port 1(bridge_slave_0) entered forwarding state
[  937.462337][T21079] bridge0: port 2(bridge_slave_1) entered blocking state
[  937.469549][T21079] bridge0: port 2(bridge_slave_1) entered forwarding state
[  937.652091][T24518] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  937.697617][T24518] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  937.762795][T24518] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  937.797278][T24518] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  937.873866][T24509] 8021q: adding VLAN 0 to HW filter on device batadv0
[  937.977289][T24509] veth0_vlan: entered promiscuous mode
[  938.012121][T24509] veth1_vlan: entered promiscuous mode
[  938.049779][T24659] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3540'.
[  938.167903][T24509] veth0_macvtap: entered promiscuous mode
[  938.189989][T24509] veth1_macvtap: entered promiscuous mode
[  938.220580][T24518] 8021q: adding VLAN 0 to HW filter on device bond0
[  938.248288][T24509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  938.260059][T24509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  938.271008][T24509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  938.294121][T24509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  938.314334][T24509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  938.364295][T24509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  938.394393][T24509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  938.424332][T24509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  938.454144][T24509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  938.476272][T24509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  938.507608][T24509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  938.532749][T24509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  938.572817][T24509] batman_adv: batadv0: Interface activated: batadv_slave_0
[  938.630791][T24509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  938.660307][T24509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  938.680495][T24509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  938.696657][T24509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  938.716407][T24509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  938.740692][T24509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  938.762162][T24509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  938.795567][T24509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  938.810076][T24509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  938.822322][T24509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  938.843165][T24509] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  938.869523][T24509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  938.902229][T24509] batman_adv: batadv0: Interface activated: batadv_slave_1
[  938.955958][T24509] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  938.982016][T24509] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  938.993019][T24509] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  939.013009][T24509] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  939.086486][T24518] 8021q: adding VLAN 0 to HW filter on device team0
[  939.219158][T10069] bridge0: port 1(bridge_slave_0) entered blocking state
[  939.226394][T10069] bridge0: port 1(bridge_slave_0) entered forwarding state
[  939.250585][T10069] bridge0: port 2(bridge_slave_1) entered blocking state
[  939.257889][T10069] bridge0: port 2(bridge_slave_1) entered forwarding state
[  939.500977][T24518] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  939.606670][T21080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  939.620558][T24518] 8021q: adding VLAN 0 to HW filter on device batadv0
[  939.664566][T21080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  939.759468][T21079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  939.797536][T21079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  939.836296][T24518] veth0_vlan: entered promiscuous mode
[  939.888685][T24518] veth1_vlan: entered promiscuous mode
[  940.013691][T24518] veth0_macvtap: entered promiscuous mode
[  940.081259][T24518] veth1_macvtap: entered promiscuous mode
[  940.123852][T24518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  940.128091][T24710] netlink: 'syz.2.3546': attribute type 251 has an invalid length.
[  940.165624][T24518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  940.194378][T24518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  940.231383][T24518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  940.258647][T24518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  940.299747][T24518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  940.394117][T24518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  940.464571][T24518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  940.484175][T24518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  940.534177][T24518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  940.554144][T24518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  940.574070][T24518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  940.583927][T24518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  940.610124][T24518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  940.621971][T24518] batman_adv: batadv0: Interface activated: batadv_slave_0
[  940.631261][T24518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  940.641835][T24518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  940.664193][T24518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  940.674798][T24518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  940.684780][T24518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  940.768778][T24518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  940.854642][T24518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  940.923117][T24518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  940.981770][T24518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  941.081830][T24518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  941.178672][T24518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  941.274109][T24518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  941.323057][T24518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  941.369713][T24518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  941.440796][T24518] batman_adv: batadv0: Interface activated: batadv_slave_1
[  941.575744][T24518] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  941.627886][T24518] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  941.682238][T24518] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  941.734104][T24518] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  942.049305][T21079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  942.090116][T24739] FAULT_INJECTION: forcing a failure.
[  942.090116][T24739] name failslab, interval 1, probability 0, space 0, times 0
[  942.092157][T21079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  942.144245][T24739] CPU: 1 UID: 0 PID: 24739 Comm: syz.0.3552 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0
[  942.154747][T24739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  942.164852][T24739] Call Trace:
[  942.168170][T24739]  <TASK>
[  942.171144][T24739]  dump_stack_lvl+0x241/0x360
[  942.175887][T24739]  ? __pfx_dump_stack_lvl+0x10/0x10
[  942.181132][T24739]  ? __pfx__printk+0x10/0x10
[  942.185780][T24739]  ? kmem_cache_alloc_noprof+0x44/0x2a0
[  942.191368][T24739]  ? __pfx___might_resched+0x10/0x10
[  942.196723][T24739]  should_fail_ex+0x3b0/0x4e0
[  942.201444][T24739]  ? mas_alloc_nodes+0x26c/0x840
[  942.206433][T24739]  should_failslab+0xac/0x100
[  942.211175][T24739]  ? mas_alloc_nodes+0x26c/0x840
[  942.216178][T24739]  kmem_cache_alloc_noprof+0x6c/0x2a0
[  942.221591][T24739]  mas_alloc_nodes+0x26c/0x840
[  942.226400][T24739]  mas_preallocate+0x554/0x8c0
[  942.231208][T24739]  ? __pfx_mas_preallocate+0x10/0x10
[  942.236542][T24739]  ? __mas_set_range+0x133/0x3c0
[  942.241514][T24739]  commit_merge+0x3ff/0x760
[  942.246068][T24739]  ? __pfx_commit_merge+0x10/0x10
[  942.251150][T24739]  vma_expand+0x658/0x8b0
[  942.255531][T24739]  ? __pfx_vma_expand+0x10/0x10
[  942.260425][T24739]  ? anon_vma_name+0x86/0xf0
[  942.265040][T24739]  ? can_vma_merge_right+0x4ee/0x500
[  942.270378][T24739]  vma_merge_new_range+0x72f/0xa00
[  942.275571][T24739]  mmap_region+0x2119/0x23f0
[  942.280226][T24739]  ? __pfx_mmap_region+0x10/0x10
[  942.285223][T24739]  ? __pfx_lock_acquire+0x10/0x10
[  942.290391][T24739]  ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10
[  942.297039][T24739]  ? bpf_lsm_mmap_addr+0x9/0x10
[  942.301933][T24739]  ? security_mmap_addr+0x6f/0x250
[  942.307094][T24739]  do_mmap+0x8f0/0x1000
[  942.311303][T24739]  ? __pfx_do_mmap+0x10/0x10
[  942.315952][T24739]  ? __pfx_down_write_killable+0x10/0x10
[  942.321616][T24739]  ? common_file_perm+0x1a6/0x210
[  942.326691][T24739]  vm_mmap_pgoff+0x1dd/0x3d0
[  942.331370][T24739]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  942.336526][T24739]  ? __fget_files+0x2a/0x410
[  942.341150][T24739]  ? __fget_files+0x395/0x410
[  942.345863][T24739]  ? __fget_files+0x2a/0x410
[  942.350500][T24739]  ksys_mmap_pgoff+0x4eb/0x720
[  942.355319][T24739]  ? __ia32_sys_mmap_pgoff+0x21/0xf0
[  942.360648][T24739]  __do_fast_syscall_32+0xb4/0x110
[  942.365801][T24739]  ? exc_page_fault+0x590/0x8c0
[  942.370702][T24739]  do_fast_syscall_32+0x34/0x80
[  942.375594][T24739]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  942.381963][T24739] RIP: 0023:0xf7fb5579
[  942.386153][T24739] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  942.405771][T24739] RSP: 002b:00000000f513655c EFLAGS: 00000206 ORIG_RAX: 00000000000000c0
[  942.414381][T24739] RAX: ffffffffffffffda RBX: 0000000020ffc000 RCX: 0000000000002000
[  942.422393][T24739] RDX: 0000000000000001 RSI: 0000000000000011 RDI: 0000000000000003
[  942.430409][T24739] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  942.438434][T24739] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  942.446450][T24739] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  942.454480][T24739]  </TASK>
[  942.494335][T24739] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI
[  942.506987][T24739] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
[  942.515439][T24739] CPU: 0 UID: 0 PID: 24739 Comm: syz.0.3552 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0
[  942.525888][T24739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024
[  942.535974][T24739] RIP: 0010:mas_store_prealloc+0xa46/0x1390
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  942.541906][T24739] Code: c0 d0 35 8d be 1b 03 00 00 48 c7 c2 80 db 35 8d e8 4f f6 b0 f5 4b 8d 1c e7 48 89 d8 48 c1 e8 03 49 bf 00 00 00 00 00 fc ff df <42> 80 3c 38 00 74 08 48 89 df e8 fb 1a 3f f6 48 8b 1b 49 8d 7e 48
[  942.561554][T24739] RSP: 0018:ffffc900045df660 EFLAGS: 00010202
[  942.567664][T24739] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff888026dabc00
[  942.575665][T24739] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  942.583665][T24739] RBP: ffffc900045df7d0 R08: ffffffff8bbff157 R09: 0000000000000000
[  942.591670][T24739] R10: ffffc900045df708 R11: fffff520008bbeea R12: 0000000000000000
[  942.599682][T24739] R13: ffffc900045dfac0 R14: ffffc900045df700 R15: dffffc0000000000
[  942.607688][T24739] FS:  0000000000000000(0000) GS:ffff8880b8600000(0063) knlGS:00000000f5136b40
[  942.616640][T24739] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  942.623270][T24739] CR2: 00000000f71cfba0 CR3: 000000007a8fa000 CR4: 00000000003526f0
[  942.631257][T24739] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  942.639243][T24739] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  942.647223][T24739] Call Trace:
[  942.650503][T24739]  <TASK>
[  942.653436][T24739]  ? __die_body+0x5f/0xb0
[  942.657776][T24739]  ? die_addr+0xb0/0xe0
[  942.661936][T24739]  ? exc_general_protection+0x3dd/0x5d0
[  942.667514][T24739]  ? asm_exc_general_protection+0x26/0x30
[  942.673247][T24739]  ? mas_store_prealloc+0x907/0x1390
[  942.678542][T24739]  ? mas_store_prealloc+0xa46/0x1390
[  942.683834][T24739]  ? __pfx_vma_expand+0x10/0x10
[  942.688697][T24739]  ? anon_vma_name+0x86/0xf0
[  942.693295][T24739]  ? __pfx_mas_store_prealloc+0x10/0x10
[  942.698884][T24739]  mmap_region+0x1caa/0x23f0
[  942.703494][T24739]  ? __pfx_mmap_region+0x10/0x10
[  942.708445][T24739]  ? __pfx_lock_acquire+0x10/0x10
[  942.713480][T24739]  ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10
[  942.720111][T24739]  ? bpf_lsm_mmap_addr+0x9/0x10
[  942.725001][T24739]  ? security_mmap_addr+0x6f/0x250
[  942.730135][T24739]  do_mmap+0x8f0/0x1000
[  942.734301][T24739]  ? __pfx_do_mmap+0x10/0x10
[  942.738898][T24739]  ? __pfx_down_write_killable+0x10/0x10
[  942.744539][T24739]  ? common_file_perm+0x1a6/0x210
[  942.749579][T24739]  vm_mmap_pgoff+0x1dd/0x3d0
[  942.754179][T24739]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  942.759296][T24739]  ? __fget_files+0x2a/0x410
[  942.763975][T24739]  ? __fget_files+0x395/0x410
[  942.768659][T24739]  ? __fget_files+0x2a/0x410
[  942.773253][T24739]  ksys_mmap_pgoff+0x4eb/0x720
[  942.778021][T24739]  ? __ia32_sys_mmap_pgoff+0x21/0xf0
[  942.783313][T24739]  __do_fast_syscall_32+0xb4/0x110
[  942.788433][T24739]  ? exc_page_fault+0x590/0x8c0
[  942.793291][T24739]  do_fast_syscall_32+0x34/0x80
[  942.798235][T24739]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  942.804575][T24739] RIP: 0023:0xf7fb5579
[  942.808777][T24739] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  942.828398][T24739] RSP: 002b:00000000f513655c EFLAGS: 00000206 ORIG_RAX: 00000000000000c0
[  942.836839][T24739] RAX: ffffffffffffffda RBX: 0000000020ffc000 RCX: 0000000000002000
[  942.844844][T24739] RDX: 0000000000000001 RSI: 0000000000000011 RDI: 0000000000000003
[  942.852829][T24739] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  942.860917][T24739] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  942.868899][T24739] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  942.876980][T24739]  </TASK>
[  942.880017][T24739] Modules linked in:
[  942.884189][T24739] ---[ end trace 0000000000000000 ]---
[  942.989299][T24739] RIP: 0010:mas_store_prealloc+0xa46/0x1390
[  943.029458][T24739] Code: c0 d0 35 8d be 1b 03 00 00 48 c7 c2 80 db 35 8d e8 4f f6 b0 f5 4b 8d 1c e7 48 89 d8 48 c1 e8 03 49 bf 00 00 00 00 00 fc ff df <42> 80 3c 38 00 74 08 48 89 df e8 fb 1a 3f f6 48 8b 1b 49 8d 7e 48
[  943.119712][T24739] RSP: 0018:ffffc900045df660 EFLAGS: 00010202
[  943.158691][T24739] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff888026dabc00
[  943.214303][T24739] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  943.222347][T24739] RBP: ffffc900045df7d0 R08: ffffffff8bbff157 R09: 0000000000000000
[  943.274139][T24739] R10: ffffc900045df708 R11: fffff520008bbeea R12: 0000000000000000
[  943.282189][T24739] R13: ffffc900045dfac0 R14: ffffc900045df700 R15: dffffc0000000000
[  943.344125][T24739] FS:  0000000000000000(0000) GS:ffff8880b8700000(0063) knlGS:00000000f5136b40
[  943.353129][T24739] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  943.407304][T24739] CR2: 00007fddb9bd0420 CR3: 000000007a8fa000 CR4: 00000000003526f0
[  943.451373][T24739] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  943.478145][T24739] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  943.494420][T24739] Kernel panic - not syncing: Fatal exception
[  943.500874][T24739] Kernel Offset: disabled
[  943.505208][T24739] Rebooting in 86400 seconds..