last executing test programs:

1m58.663891827s ago: executing program 4 (id=91):
pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
fanotify_init(0x200, 0x0)
pipe(&(0x7f0000000080))
r0 = openat$kvm(0x0, &(0x7f0000000000), 0x80000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(r2, 0xc048aeca, &(0x7f0000000080))

1m57.776863132s ago: executing program 4 (id=94):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000102010100000000000000000a00000206000740000400003c"], 0x58}}, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="0d030000000000000000130000001c000980080002"], 0x30}}, 0x0) (async)
sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="0d030000000000000000130000001c000980080002"], 0x30}}, 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500200000020ac055a024000010203010902240001010810c009040005020301023809210900090122ba0e090581038f0206030a"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})

1m55.32997016s ago: executing program 4 (id=104):
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x34, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x17, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x15}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'syz_tun\x00', <r6=>0x0})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000007a000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0xfffffffffffffe7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r7, r6}, 0x40)
syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[], 0x0)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@ignoreqv}, {@directio}, {@afid={'afid', 0x3d, 0x8}}]}})
r8 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1)
sendfile(r8, r1, 0x0, 0x80000000)

1m54.934867528s ago: executing program 4 (id=108):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6(0xa, 0x1, 0x8010000000000084)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r1, 0x111, 0x70bd27, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x20008090}, 0x90)

1m52.85689146s ago: executing program 4 (id=114):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000000)=@un=@abs={0x1, 0x0, 0x4e21}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)="47069e70a177a50cb7c14ac368032ffb376047af5f0f1049974f2ec01ac48f7aeea3e6cb76faf3870bc464474289fffa7b6df01970cd71d8fd32db256b0098778cbd3f9cdafc98bac4921677684426d5643037", 0x53}], 0x1}, 0x4)
syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0)
r1 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=<r2=>0x0, &(0x7f0000000200)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async)
io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0)

1m51.38452204s ago: executing program 4 (id=120):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r5)
sendmsg$IEEE802154_SCAN_REQ(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r6, 0x62e3db53d43ee07b, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008084}, 0x40000040)
fcntl$setstatus(r4, 0x4, 0x42000)
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x5437, 0x0)
r7 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r8=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f0000000300)={r8, <r9=>0x0, <r10=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r9, r10, 0x9, 0x1f5, 0x0, 0x8, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0xfffd, 0x0, 0x1, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}})

1m51.069265939s ago: executing program 32 (id=120):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r5)
sendmsg$IEEE802154_SCAN_REQ(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r6, 0x62e3db53d43ee07b, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008084}, 0x40000040)
fcntl$setstatus(r4, 0x4, 0x42000)
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x5437, 0x0)
r7 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r8=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r7, 0xc02064b6, &(0x7f0000000300)={r8, <r9=>0x0, <r10=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r9, r10, 0x9, 0x1f5, 0x0, 0x8, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0xfffd, 0x0, 0x1, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}})

1m26.443025634s ago: executing program 1 (id=220):
syz_open_dev$video(&(0x7f0000000080), 0x8, 0x40200)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000880)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000010000000000000001"])
pipe2$watch_queue(&(0x7f0000000540)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "e8e8f29c3a6f670a", "53f06dc3483fb99d92189bde7ddcf3c9", '\x000DG', "3afdffb422fe9318"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38)
ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB="06"])
keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x40)
add_key$keyring(&(0x7f0000000300), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r3)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000001004000014001a80100002800c000180080016000600000008001b00"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000180)=0x4)

1m25.488443946s ago: executing program 1 (id=223):
r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
unshare(0x2c020400)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)
listen(r1, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="7c220752098d1a03003fb4d50b17b9653538f559e8ca1a63dfa1a8f54135abe90913a7bb3930c14e8d1808268429578d92871b8681b42a7a264d4c578a7c26845616d98fc09729e3d8c0aa68e95af732c067f9dd1d9fdd4ee2008561e5a690de23248e60f4ab6390f520377d0a68cc822a17c773be19ee5b51b2428acd21725b17f5fadc10e18e574983e260010d619f74dd4c30", 0x94}], 0x1, &(0x7f0000000480)=ANY=[], 0x170}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000f40)="f48f2d", 0x7313485bca3e9141}], 0x1}}], 0x2, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20)

1m23.100097587s ago: executing program 1 (id=235):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
io_uring_setup(0x1694, &(0x7f0000000080))
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0)
mlock(&(0x7f0000626000/0x5000)=nil, 0x5000)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x195)
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="020200020d00000000000000000000000200080008000000fd00000000000000020001000000000000000500000000a0030006000000000002000000ac1414ff00000000000000000300050000000000000000000000000100140000000000"], 0x68}, 0x1, 0x7}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond0\x00', <r5=>0x0})
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8)

1m20.932071474s ago: executing program 1 (id=240):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010003704feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000002100128008000100736974000c00028008000300ffffffff08000400a90d00000a62cbc6d77e2238dd53226069b4"], 0x40}, 0x1, 0x0, 0x0, 0x4c050}, 0x0)
io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f0000000080)={0x3}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010003704feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000002100128008000100736974000c00028008000300ffffffff08000400a90d00000a62cbc6d77e2238dd53226069b4"], 0x40}, 0x1, 0x0, 0x0, 0x4c050}, 0x0) (async)
io_uring_register$IORING_REGISTER_CLOCK(0xffffffffffffffff, 0x1d, &(0x7f0000000080)={0x3}, 0x0) (async)

1m20.42063479s ago: executing program 1 (id=241):
socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
setpgid(r0, 0x0)
setpgid(0x0, r0)
lstat(&(0x7f0000000140)='./file0\x00', 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = syz_open_dev$usbmon(&(0x7f0000000040), 0x10000, 0x240080)
ioctl$MON_IOCH_MFLUSH(r2, 0x9208, 0x3)
io_setup(0x5, &(0x7f0000000000)=<r3=>0x0)
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x3, "421ae3753785259249154c944c28ad063ff47d3bd7a8a45d6bb4c78a3ab4c981", <r5=>0xffffffffffffffff})
io_submit(r3, 0x19, &(0x7f00000003c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}])
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000008004"])
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r9 = dup(r8)
ioctl$TIOCL_SETSEL(r9, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x200, 0x1000, 0xd6e}})
ioctl$TIOCL_SETSEL(r9, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0xffffffffffffffff, 0x2, 0x0)
prctl$PR_SET_TIMERSLACK(0x1d, 0x1000)

1m20.044666557s ago: executing program 1 (id=245):
r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
unshare(0x2c020400)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)
listen(r1, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="7c220752098d1a03003fb4d50b17b9653538f559e8ca1a63dfa1a8f54135abe90913a7bb3930c14e8d1808268429578d92871b8681b42a7a264d4c578a7c26845616d98fc09729e3d8c0aa68e95af732c067f9dd1d9fdd4ee2008561e5a690de23248e60f4ab6390f520377d0a68cc822a17c773be19ee5b51b2428acd21725b17f5fadc10e18e574983e260010d619f74dd4c30", 0x94}], 0x1, &(0x7f0000000480)=ANY=[], 0x170}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000f40)="f48f2d", 0x7313485bca3e9141}], 0x1}}], 0x2, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20)

1m4.289936598s ago: executing program 33 (id=245):
r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
unshare(0x2c020400)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)
listen(r1, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="7c220752098d1a03003fb4d50b17b9653538f559e8ca1a63dfa1a8f54135abe90913a7bb3930c14e8d1808268429578d92871b8681b42a7a264d4c578a7c26845616d98fc09729e3d8c0aa68e95af732c067f9dd1d9fdd4ee2008561e5a690de23248e60f4ab6390f520377d0a68cc822a17c773be19ee5b51b2428acd21725b17f5fadc10e18e574983e260010d619f74dd4c30", 0x94}], 0x1, &(0x7f0000000480)=ANY=[], 0x170}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000f40)="f48f2d", 0x7313485bca3e9141}], 0x1}}], 0x2, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20)

1m3.396543565s ago: executing program 5 (id=300):
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x900, 0x0)
faccessat2(r0, &(0x7f0000000180)='./file1/file4/file5\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='cdg\x00', 0x4)
sendto$inet(r1, &(0x7f0000000400)="a00a583f959641e6e5050f78ec712f5fe3bc73c43d6bcb7fee1033f54d2c249fa416ccc5cb4c0bdc30d4ca4da838038b9135b1e226db57a23ad2e588ab2dba0e159e10e8e483d2af90f7ff3ffecd0d5c9f653e16ef055f000bac923b2fa2067f5ece9c016d9248367450f67abc4c", 0x6e, 0x20000041, 0x0, 0x0)
sendmmsg$inet(r1, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="55c0cc0ba6f3b908ecb5c6e93e4dc70ed9c875dd444569fab05e32a08e71d1c480fa1ada9e6f952dea418e2eb2dd8dcdd18f82c2be42e92405d2eccae94e713594f13ebfe37be3cb7ce0eb237d63f25744e42baf027055a65359c121788ba610f7df23b902755c5771d93efedd8252aca1dda5efe1493ec0a5a9e965666d1afe33b384953a9102b3f1e446aea391ccff253fccc951d4091f1d6b69faee7e7d4b669c48b70ef01c3879af3f35e0682a4925ddf3dd14992612d22032093742f07fd8d9723bed", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000006c0)="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", 0x1d5}], 0x1}}], 0x2, 0xc0)
mmap$fb(&(0x7f00000f1000/0x2000)=nil, 0x2000, 0x1000002, 0x100010, r0, 0xd3000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x29, 0x4e, 0x76, 0x10, 0x6cd, 0x202, 0xf498, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x7, 0x6, 0xd0, 0x6, [{{0x9, 0x4, 0x4f, 0x6, 0x2, 0x81, 0x6a, 0x2, 0x0, [], [{{0x9, 0x5, 0xf, 0xc, 0x200, 0xfd, 0xd6, 0x3}}, {{0x9, 0x5, 0xeac52930e4ba5b07, 0x13, 0x200, 0x40, 0x81, 0x2}}]}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0})
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x1c, 0x33, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x118}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc091}, 0xc010)

1m0.280819025s ago: executing program 5 (id=304):
socket$netlink(0x10, 0x3, 0x0)
r0 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = landlock_create_ruleset(&(0x7f0000000040)={0x400, 0x3}, 0x18, 0x0)
landlock_restrict_self(r1, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r3, &(0x7f0000003000)=@file={0x1}, 0x6e)
connect$unix(r2, &(0x7f0000000640)=@file={0x1}, 0x6e)
r4 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc)

1m0.210405286s ago: executing program 5 (id=306):
mkdir(&(0x7f0000000400)='./file0\x00', 0x99)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800060000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x100888, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r0])
chdir(&(0x7f0000000140)='./file0\x00')
r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
write$sndseq(r1, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0xb, {0x0, 0xb8}, {}, @control={0x9, 0xffffffff, 0xa}}], 0x1c)
r2 = getpid()
prctl$PR_SCHED_CORE(0x3e, 0x4, r2, 0x2, &(0x7f0000000040))
truncate(&(0x7f0000000000)='./bus\x00', 0x8001)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0)

59.576753915s ago: executing program 5 (id=308):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00'})
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$igmp(0x2, 0x3, 0x2)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100000b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
getsockopt$MRT(0xffffffffffffffff, 0x0, 0xcf, 0x0, &(0x7f0000000040))
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(0x0, 0x80)
r2 = syz_open_dev$vim2m(&(0x7f0000000240), 0x6, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x0, 0x0, 0x5})
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="a68d7acda0b2", 0x0, 0x0, 0x0, 0x0, 0x0})

58.63861797s ago: executing program 5 (id=311):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xe, 0x6, 0x1, 0x2, 0x340}})
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r1 = epoll_create1(0x80000)
r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000180)={0x80000001})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/cgroup.procs\x00', 0x2, 0x128)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000005c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x2, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'dummy0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x5c, r6, 0x1, 0xffffffff, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x5c}, 0x1, 0x620b}, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r6, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4005)
read$ptp(r3, &(0x7f0000000100)=""/251, 0xfb)
mkdir(&(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x11)

53.787453563s ago: executing program 5 (id=321):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0x3, 0x1400000000, 0x8})
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000900c0000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0, 0x0, 0x1a8}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000480)={{0x0, 0xefae, 0x0, 0x3}, 'syz1\x00', 0x4d})
ioctl$UI_DEV_CREATE(r1, 0x5501)
r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x20300)
ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000140)=""/206)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r3 = socket(0x10, 0x5, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00')
pwritev2(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket(0x10, 0x803, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r4, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000240)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa7, &(0x7f00000005c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x76, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r8=>0x0})
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r9, &(0x7f0000000280)={0x1d, r8, 0x0, {0x0, 0x0, 0x4}}, 0x18)
sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r8, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4)
sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@newchain={0xb5c, 0x64, 0x400, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x8, 0x8}, {0xc, 0xfff3}, {0x5, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x31, 0x3}}, @filter_kind_options=@f_fw={{0x7}, {0x520, 0x2, [@TCA_FW_ACT={0x220, 0x4, [@m_skbedit={0x10c, 0x1b, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x3}]}, {0xd6, 0x6, "5cf9f497bc8c2354a47de2e90b9330ae71f0ee2a5508baceb487425353f637495aaf00e94153cc208f5037fa7a84a60738fb91ce7d1c0b3f4823de47591444a826e245b3d7b906bc2b88307eecf7a0fc46099eb26595defb35165431ddc8d508bd3f017a456e8f68facf3418d23d9541bb96d6e65ee285463f96c1853196e4cae4494f02ccc3d435e4c548620d3ee2fbea88d64a7593e1530c03dfcfff8bf67491e78b87aa5374db7f9db4052e1c59577450187abb27437069d036387c839c07a59f7da308a50752c992dd4f45ceccd943f8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_gact={0x110, 0x20, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2a, 0xc, 0x6, 0x4, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x10ee, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x40, 0x4, 0x20000000, 0xb996, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0xf3ce, 0x1ff, 0x10000000, 0xf, 0x5}}]}, {0x8e, 0x6, "162b32813243e23092cd96bc93a256b8d16fd2239259651d0e1a1f6b7b8ff85d607a1273a1339c3c833fc9375ef29453170ef4849a284ee2d9097063c48fc4fcfc2e330c940ec18df9d80a3db949d5da87936e56971f570be8207cbaed44f026b2410a39cffea2ed9cf9f2b3ed82e7fa01e46f81632df46d8e41c2ac03448f94599473a6beaff9b11759"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x1}, @TCA_FW_ACT={0x2f4, 0x4, [@m_nat={0x154, 0x8, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x0, 0x10000000, 0x10000000, 0x2}, @multicast2, @private=0xa010101, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x6, 0x5, 0x3, 0x4}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe, 0x1ff, 0x2, 0x9, 0x6}, @empty, @empty, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x7fffffff, 0x10000000, 0x2, 0x40}, @local, @rand_addr=0x64010100, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x9, 0x6, 0xc, 0x7fff}, @remote, @empty, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x986, 0x3, 0x8, 0x6, 0xffffffff}, @multicast1, @local, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffff7, 0xe, 0x2, 0xa, 0x4}, @broadcast, @loopback, 0xff, 0x1}}]}, {0x12, 0x6, "2449ab1130095c94a0a9d7ebb442"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbedit={0xbc, 0xd, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x4, 0x7, 0x4, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xa, 0xffe0}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xbe8}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0x4}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x40}]}, {0x3d, 0x6, "782cc0f84c0004180894908bc067c8366b9641715db62656fc4edde5da400f17f37b2260db2517a4abf9d9ecbdcef9b1ed920189f499a9e494"}, {0xc}, {0xc, 0x8, {0x69b359c3b87d7bfc}}}}, @m_connmark={0xe0, 0x14, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x100, 0x9, 0x3, 0x2, 0x8001}, 0x7}}]}, {0x94, 0x6, "bd20b2f34b01a30e69633013f37b7eae5966136f2051c14e72b07fb828b1308863574909dbb48086a6dc6ae1ab462e53f130e67a1aba4d913bda0db03a85d687d742117f389f3e8ac221219741a2d3b7c1f53a69ef440427b1be1f100abf31dd212b0f6239777741ef3ab7242b979af671bff6030b90ac95ae137678b7a6f8e196a5bde9ed628462f889ccc1bd372fca"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @filter_kind_options=@f_u32={{0x8}, {0x5f0, 0x2, [@TCA_U32_ACT={0x5ec, 0x7, [@m_skbedit={0x118, 0x1c, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xc, 0x2, 0x2000000f, 0x4, 0x7}}, @TCA_SKBEDIT_PTYPE={0x6}]}, {0xc4, 0x6, "ece9b2b3a035c84ca56ba7af5fc879ab2d071edec6d301d74218deba955f54a79ee0421d829cf5d9e0b52d92fc0fba5e336efa643cc6023c06dbf2cfd477eb87fefdf44570cfb1dec918aa30fb5950e5cad629f2cb4ad927507507b353eb6d2790cf2161192ead8ecf5bb5cda7889c927ae58e6629598177a20113cacc24457bd390e3dce0a19aad98482e9cca27beb84c0691f4811040b52e6f69e93207e541b03b247be1e8177a3220a52e47ce8759592bb8fad6e4b2d39fdfa8281c45d402"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ct={0xf0, 0x18, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "9625a935c53089397356220f6261562d"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "d2336c472634824032f65dc2ca8b9209"}]}, {0x9e, 0x6, "eae1e62cec0025edd331ab415575cecd54c0bcb2af7781f42f8d225838ce3491dab275cb16ac1bc0755fd983ed8a3660e59077840624e7d78afbde3b2a2d7ea6c96f60ecdb50cf2511fe8884697ed7fc6a2a928eda18a088adc044a7ed5054dd0c085b1ed0dc52d2c3e0c8923ce6b4bb57963e893024b62de61662cac9ada22a9e9ea9ded972e33cf058d5f822eade002ab0ba0b0fd18709ee9e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0x190, 0x1e, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x9, 0xfffffffffffffff6, 0x10001, 0x9}, 0x4, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x47, 0xfffffffb, 0x5, 0x6, 0xfffffff7}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xc60, 0x101, 0x6, 0x0, 0x4}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xfff, 0x5, 0x4, 0x9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x19, 0x7fffffff, 0x2, 0x2d, 0x9}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xc, 0x6, 0x0, 0x7, 0x7}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x2, 0x8, 0x86a2, 0x401}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x8001, 0x3, 0x5, 0x63}, 0x3}}]}, {0x62, 0x6, "8636cb65c35399ecdf7d0c90743902b67db5bb7874b4fb9788c46ee1a9fa3249c0d1f2b5c3bdc01bc2846d7748b7994bca1172e5c60a0e60204f6c362a11e514c14e47c3f1ceb8f5642cf08ea11bd98d28fa11c3ae6e5bca837cff96cdbe"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x150, 0x1b, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xb5, 0x1, 0x2, 0x6, 0x2}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1ff}]}, {0xfb, 0x6, "3c9e54ca62799395152492cfa1a3c1a6d458db8c99507ac9cfee8a20ce618dbce09aaabbe9b96a2a4c7c47d6ac7b8db4cd8f372c23a03f57f7b8851af9ef19980cee7407a37ff66582fe1112b7bbafdedaa6180ecb5ce2d5bc7f913ecb83e694fdd3b14d2189fcd694203626e41d8ef3371830183e54b35df10f5e7c842f840a363fdbb4c1fa49d2f053c1ba16e47b059609fe9183d7a03f488884bbf52ad9d2dbf655b14c4be9506885d96b2dba2568349531763b64a6d3035ca2f88c9668504669208a775729fd501f5e3d5fdf47793c84d6fa0faa66555480fc890d763444418c426f6e7f2eb0b8f7aff5a8a59d930561e1d40913f4"}, {0xc, 0x7, {0x0, 0x130be1d892fec6b1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0x100, 0xa, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_ZONE={0x6, 0x4, 0x5d}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast2}]}, {0xa9, 0x6, "a2247d7effa9fb483424dc17605d6e146c9243e0179b19e63cf05b11f3b10ce716d4cc2bd3ca3eb10aca12aba2ba82bf4b182634af398c829b2fd1bf0ba6a859261e277e697d68e414158e05bdd957bdfd43fc30a926705a9f65375a467e32103a788e2eeb7b402bb902a9bff3fef29e14ce88bf96a5c87195d557b4883d3dbe9f66222e2e983ddd6874649b2a83f47e4e91c0387bd1ffc8be8bd93d2ca7067fa442ac3da3"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x800}, @TCA_RATE={0x6, 0x5, {0x4, 0xd}}]}, 0xb5c}}, 0x800)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="54000000100001042dbd70000000000000000000", @ANYRES32=r10, @ANYBLOB="0000000014310000340012800b000100697036746e6c0000240002800400130014000200fc02000000000000000000000000000106000f0000000000"], 0x54}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r11 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2}, 0x10, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r11, 0x2, &(0x7f0000000080)={0x4, 0x3}, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c0000001000010400"/20, @ANYRES32=r10, @ANYBLOB="8750a754ac0000007c0012800b000100697036746e6c00106c000280140002000000000000000000000000000000000114000200fe8000000000000000000000000000aa14000300fe80000000"], 0x9c}, 0x1, 0x0, 0x0, 0x40001}, 0x200040d0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa)

38.452995001s ago: executing program 34 (id=321):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0x3, 0x1400000000, 0x8})
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000900c0000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0, 0x0, 0x1a8}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000480)={{0x0, 0xefae, 0x0, 0x3}, 'syz1\x00', 0x4d})
ioctl$UI_DEV_CREATE(r1, 0x5501)
r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x20300)
ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000140)=""/206)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94)
r3 = socket(0x10, 0x5, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00')
pwritev2(r4, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket(0x10, 0x803, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r4, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000240)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa7, &(0x7f00000005c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x76, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r8=>0x0})
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r9, &(0x7f0000000280)={0x1d, r8, 0x0, {0x0, 0x0, 0x4}}, 0x18)
sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r8, {0xa, 0x8}, {0x5, 0xfff3}, {0xfff1, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4)
sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@newchain={0xb5c, 0x64, 0x400, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x8, 0x8}, {0xc, 0xfff3}, {0x5, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x31, 0x3}}, @filter_kind_options=@f_fw={{0x7}, {0x520, 0x2, [@TCA_FW_ACT={0x220, 0x4, [@m_skbedit={0x10c, 0x1b, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x3}]}, {0xd6, 0x6, "5cf9f497bc8c2354a47de2e90b9330ae71f0ee2a5508baceb487425353f637495aaf00e94153cc208f5037fa7a84a60738fb91ce7d1c0b3f4823de47591444a826e245b3d7b906bc2b88307eecf7a0fc46099eb26595defb35165431ddc8d508bd3f017a456e8f68facf3418d23d9541bb96d6e65ee285463f96c1853196e4cae4494f02ccc3d435e4c548620d3ee2fbea88d64a7593e1530c03dfcfff8bf67491e78b87aa5374db7f9db4052e1c59577450187abb27437069d036387c839c07a59f7da308a50752c992dd4f45ceccd943f8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_gact={0x110, 0x20, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2a, 0xc, 0x6, 0x4, 0x5}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x10ee, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x40, 0x4, 0x20000000, 0xb996, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0xf3ce, 0x1ff, 0x10000000, 0xf, 0x5}}]}, {0x8e, 0x6, "162b32813243e23092cd96bc93a256b8d16fd2239259651d0e1a1f6b7b8ff85d607a1273a1339c3c833fc9375ef29453170ef4849a284ee2d9097063c48fc4fcfc2e330c940ec18df9d80a3db949d5da87936e56971f570be8207cbaed44f026b2410a39cffea2ed9cf9f2b3ed82e7fa01e46f81632df46d8e41c2ac03448f94599473a6beaff9b11759"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x1}, @TCA_FW_ACT={0x2f4, 0x4, [@m_nat={0x154, 0x8, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x0, 0x10000000, 0x10000000, 0x2}, @multicast2, @private=0xa010101, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x6, 0x5, 0x3, 0x4}, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xe, 0x1ff, 0x2, 0x9, 0x6}, @empty, @empty, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x7fffffff, 0x10000000, 0x2, 0x40}, @local, @rand_addr=0x64010100, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x9, 0x6, 0xc, 0x7fff}, @remote, @empty, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x986, 0x3, 0x8, 0x6, 0xffffffff}, @multicast1, @local, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffff7, 0xe, 0x2, 0xa, 0x4}, @broadcast, @loopback, 0xff, 0x1}}]}, {0x12, 0x6, "2449ab1130095c94a0a9d7ebb442"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbedit={0xbc, 0xd, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x4, 0x7, 0x4, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xa, 0xffe0}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xbe8}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0x4}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x40}]}, {0x3d, 0x6, "782cc0f84c0004180894908bc067c8366b9641715db62656fc4edde5da400f17f37b2260db2517a4abf9d9ecbdcef9b1ed920189f499a9e494"}, {0xc}, {0xc, 0x8, {0x69b359c3b87d7bfc}}}}, @m_connmark={0xe0, 0x14, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x100, 0x9, 0x3, 0x2, 0x8001}, 0x7}}]}, {0x94, 0x6, "bd20b2f34b01a30e69633013f37b7eae5966136f2051c14e72b07fb828b1308863574909dbb48086a6dc6ae1ab462e53f130e67a1aba4d913bda0db03a85d687d742117f389f3e8ac221219741a2d3b7c1f53a69ef440427b1be1f100abf31dd212b0f6239777741ef3ab7242b979af671bff6030b90ac95ae137678b7a6f8e196a5bde9ed628462f889ccc1bd372fca"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @filter_kind_options=@f_u32={{0x8}, {0x5f0, 0x2, [@TCA_U32_ACT={0x5ec, 0x7, [@m_skbedit={0x118, 0x1c, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xc, 0x2, 0x2000000f, 0x4, 0x7}}, @TCA_SKBEDIT_PTYPE={0x6}]}, {0xc4, 0x6, "ece9b2b3a035c84ca56ba7af5fc879ab2d071edec6d301d74218deba955f54a79ee0421d829cf5d9e0b52d92fc0fba5e336efa643cc6023c06dbf2cfd477eb87fefdf44570cfb1dec918aa30fb5950e5cad629f2cb4ad927507507b353eb6d2790cf2161192ead8ecf5bb5cda7889c927ae58e6629598177a20113cacc24457bd390e3dce0a19aad98482e9cca27beb84c0691f4811040b52e6f69e93207e541b03b247be1e8177a3220a52e47ce8759592bb8fad6e4b2d39fdfa8281c45d402"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ct={0xf0, 0x18, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "9625a935c53089397356220f6261562d"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "d2336c472634824032f65dc2ca8b9209"}]}, {0x9e, 0x6, "eae1e62cec0025edd331ab415575cecd54c0bcb2af7781f42f8d225838ce3491dab275cb16ac1bc0755fd983ed8a3660e59077840624e7d78afbde3b2a2d7ea6c96f60ecdb50cf2511fe8884697ed7fc6a2a928eda18a088adc044a7ed5054dd0c085b1ed0dc52d2c3e0c8923ce6b4bb57963e893024b62de61662cac9ada22a9e9ea9ded972e33cf058d5f822eade002ab0ba0b0fd18709ee9e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0x190, 0x1e, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x9, 0xfffffffffffffff6, 0x10001, 0x9}, 0x4, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x47, 0xfffffffb, 0x5, 0x6, 0xfffffff7}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xc60, 0x101, 0x6, 0x0, 0x4}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xfff, 0x5, 0x4, 0x9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x19, 0x7fffffff, 0x2, 0x2d, 0x9}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xc, 0x6, 0x0, 0x7, 0x7}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x2, 0x8, 0x86a2, 0x401}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x8001, 0x3, 0x5, 0x63}, 0x3}}]}, {0x62, 0x6, "8636cb65c35399ecdf7d0c90743902b67db5bb7874b4fb9788c46ee1a9fa3249c0d1f2b5c3bdc01bc2846d7748b7994bca1172e5c60a0e60204f6c362a11e514c14e47c3f1ceb8f5642cf08ea11bd98d28fa11c3ae6e5bca837cff96cdbe"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x150, 0x1b, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xb5, 0x1, 0x2, 0x6, 0x2}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1ff}]}, {0xfb, 0x6, "3c9e54ca62799395152492cfa1a3c1a6d458db8c99507ac9cfee8a20ce618dbce09aaabbe9b96a2a4c7c47d6ac7b8db4cd8f372c23a03f57f7b8851af9ef19980cee7407a37ff66582fe1112b7bbafdedaa6180ecb5ce2d5bc7f913ecb83e694fdd3b14d2189fcd694203626e41d8ef3371830183e54b35df10f5e7c842f840a363fdbb4c1fa49d2f053c1ba16e47b059609fe9183d7a03f488884bbf52ad9d2dbf655b14c4be9506885d96b2dba2568349531763b64a6d3035ca2f88c9668504669208a775729fd501f5e3d5fdf47793c84d6fa0faa66555480fc890d763444418c426f6e7f2eb0b8f7aff5a8a59d930561e1d40913f4"}, {0xc, 0x7, {0x0, 0x130be1d892fec6b1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0x100, 0xa, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}, @TCA_CT_ZONE={0x6, 0x4, 0x5d}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @mcast2}]}, {0xa9, 0x6, "a2247d7effa9fb483424dc17605d6e146c9243e0179b19e63cf05b11f3b10ce716d4cc2bd3ca3eb10aca12aba2ba82bf4b182634af398c829b2fd1bf0ba6a859261e277e697d68e414158e05bdd957bdfd43fc30a926705a9f65375a467e32103a788e2eeb7b402bb902a9bff3fef29e14ce88bf96a5c87195d557b4883d3dbe9f66222e2e983ddd6874649b2a83f47e4e91c0387bd1ffc8be8bd93d2ca7067fa442ac3da3"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x800}, @TCA_RATE={0x6, 0x5, {0x4, 0xd}}]}, 0xb5c}}, 0x800)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="54000000100001042dbd70000000000000000000", @ANYRES32=r10, @ANYBLOB="0000000014310000340012800b000100697036746e6c0000240002800400130014000200fc02000000000000000000000000000106000f0000000000"], 0x54}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r11 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2}, 0x10, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r11, 0x2, &(0x7f0000000080)={0x4, 0x3}, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c0000001000010400"/20, @ANYRES32=r10, @ANYBLOB="8750a754ac0000007c0012800b000100697036746e6c00106c000280140002000000000000000000000000000000000114000200fe8000000000000000000000000000aa14000300fe80000000"], 0x9c}, 0x1, 0x0, 0x0, 0x40001}, 0x200040d0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa)

15.607802031s ago: executing program 3 (id=436):
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80000)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0x2008})
lseek(r0, 0x7, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r1)
sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, r3, 0x401, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010100}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private1}, @FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_TYPE={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x2}, 0x20000010)
r4 = socket$igmp6(0xa, 0x3, 0x2)
splice(r0, &(0x7f0000000280)=0x9, r4, &(0x7f00000002c0)=0x5, 0x7f, 0x2)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='scalable\x00', 0x9)
socket$inet(0x2, 0x800, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8, 0x1010, r1, 0x0)
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x4, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x48081}, 0xc000)
r5 = getpid()
write$P9_RGETLOCK(r1, &(0x7f0000000480)={0x1e, 0x37, 0x2, {0x0, 0x6b2c, 0x7fffffff, r5}}, 0x1e)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f00000004c0)={{0x1, 0x1, 0x18, <r6=>r0, {<r7=>0xffffffffffffffff}}, './file0\x00'})
ioctl$I2C_TENBIT(r7, 0x704, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, 0x0, 0x0, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r6, 0x3ba0, &(0x7f00000005c0)={0x48, 0x3, r8, 0x0, 0x8, 0x23, &(0x7f0000000580)="398b7dea71f52f648b68e1952e2193d1443df06e471360a82e9378903f82db58ebf1aa"})
getpid()
fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000000640)=0x3)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000006c0)={0x6, &(0x7f0000000680)=[{0xa, 0xc, 0xf7, 0x7e}, {0x80, 0x6, 0x6, 0x9}, {0x1, 0x1, 0x0, 0x400}, {0x4f2c, 0x1, 0x7, 0x554}, {0xa8a0, 0xcc, 0x0, 0x8}, {0xff, 0x81, 0xb7, 0x1}]})
r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700), 0x4)
ioctl$F2FS_IOC_SET_PIN_FILE(r9, 0x4004f50d, &(0x7f0000000740)=0x1)
write$P9_RSTAT(r1, &(0x7f0000000780)={0x4b, 0x7d, 0x2, {0x0, 0x44, 0x40, 0x4, {0x40, 0x3}, 0x40140000, 0x3, 0x4, 0x1, 0x2, '-.', 0x9, 'scalable\x00', 0x1, '/', 0x5, 'syz0\x00'}}, 0x4b)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000800))
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r10 = syz_open_dev$sg(&(0x7f0000000840), 0x7, 0x400200)
ioctl$SCSI_IOCTL_STOP_UNIT(r10, 0x6)

14.759471519s ago: executing program 3 (id=438):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x42}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0xfffffffffffffe09, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x0, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK, @IPSET_ATTR_IP_TO={0x0, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x0, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_CADT_FLAGS={0x0, 0x8, 0x1, 0x0, 0x80}, @IPSET_ATTR_BUCKETSIZE={0x0, 0x15, 0x7}, @IPSET_ATTR_BUCKETSIZE={0x0, 0x15, 0x9}, @IPSET_ATTR_PORT_TO={0x0, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_MAXELEM={0x0, 0x13, 0x1, 0x0, 0xc}, @IPSET_ATTR_TIMEOUT={0x0, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0xffffffffffffff3f}, 0x1, 0x0, 0x0, 0x2000c004}, 0x20040442)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000003c0)={'aio_iiro_16\x00', [0x4f27, 0xb, 0x2, 0x10, 0x5, 0x6, 0xc, 0x7, 0x7fffffff, 0x104, 0x7, 0x3ff, 0xfffffffd, 0x20001, 0x6, 0x101, 0x3, 0x80000000, 0x5, 0x40000003, 0x89, 0xcaa7, 0x0, 0x3, 0xb, 0xe69, 0x3c, 0xc, 0x10000006, 0x0, 0x36]})
ioctl$COMEDI_DEVINFO(r1, 0x80b06401, &(0x7f00000000c0))
ioctl$VIDIOC_G_AUDOUT(0xffffffffffffffff, 0x80345631, &(0x7f0000000000))
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r3 = accept4(r2, 0x0, 0x0, 0x0)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c7902, 0x0)
sendfile(r4, r4, 0x0, 0x7fffffffffffffff)
sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054)
sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0)
recvmmsg(r3, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000840)=""/119, 0x77}, {&(0x7f0000000600)=""/134, 0x86}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000006c0)=""/21, 0x15}], 0x5}, 0x4}], 0x2, 0x60, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201100100000040ac0545024000010203010902240001010200390904002002030102"], 0x0)

12.53225831s ago: executing program 6 (id=442):
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x28a9e3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x10)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000bf31ba97b00d150001001a2c00215406a9740b624a007118dcbc960ee43362"], 0x14}}, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
ioctl$KVM_RUN(r4, 0xae80, 0x0)
connect$unix(r1, &(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003a00)=[{{&(0x7f0000000180)=@qipcrtr, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000300)=""/112, 0x70}, {&(0x7f00000006c0)=""/252, 0xfc}, {&(0x7f0000000240)=""/28, 0x1c}, {&(0x7f00000005c0)=""/173, 0xad}, {&(0x7f00000004c0)=""/27, 0x1b}, {&(0x7f0000000500)=""/36, 0x24}, {&(0x7f0000000980)=""/169, 0xa9}], 0x7, &(0x7f0000000ac0)=""/127, 0x7f}, 0x6}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000012c0)=""/221, 0xdd}, {&(0x7f0000000100)=""/24, 0x18}, {&(0x7f00000013c0)=""/83, 0x53}, {&(0x7f0000001440)=""/84, 0x54}], 0x4, &(0x7f00000014c0)=""/128, 0x80}, 0x2}, {{&(0x7f0000001540)=@tipc=@id, 0x80, &(0x7f0000001980)=[{&(0x7f00000015c0)=""/128, 0x80}, {&(0x7f0000001640)=""/162, 0xa2}, {&(0x7f0000001700)=""/74, 0x4a}, {&(0x7f0000000c00)=""/25, 0x19}, {&(0x7f0000001780)=""/112, 0x70}, {&(0x7f0000001800)=""/138, 0x8a}, {&(0x7f00000018c0)=""/107, 0x6b}, {&(0x7f0000001940)=""/41, 0x29}], 0x8}, 0x2}, {{&(0x7f0000000380)=@isdn, 0x80, &(0x7f0000001e00), 0x0, &(0x7f0000001e80)=""/19, 0x13}, 0x7fff}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001ec0)=""/172, 0xac}, {&(0x7f0000001f80)=""/65, 0x41}, {&(0x7f0000002000)=""/16, 0x10}], 0x3}, 0x9}, {{&(0x7f00000020c0)=@tipc=@id, 0x80, &(0x7f00000000c0)=[{&(0x7f0000002140)=""/191, 0xbf}, {&(0x7f00000007c0)=""/215, 0xd7}], 0x2, &(0x7f00000008c0)=""/140, 0x8c}, 0x48}, {{&(0x7f0000002300)=@hci, 0x80, &(0x7f0000003880)=[{&(0x7f0000002380)=""/4096, 0x1000}, {&(0x7f0000003380)=""/195, 0xc3}, {&(0x7f0000003480)=""/166, 0xa6}, {&(0x7f0000000c40)=""/84, 0x54}, {&(0x7f00000035c0)=""/103, 0x67}, {&(0x7f0000003640)}, {&(0x7f0000003680)=""/215, 0xd7}, {&(0x7f0000003780)=""/86, 0x56}, {&(0x7f0000003800)=""/87, 0x57}], 0x9, &(0x7f0000003940)=""/160, 0xa0}, 0x3}], 0x7, 0x2, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000d40)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_setup(0x239, 0x0, 0x0, 0x0)
r6 = syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r6, 0xc058565d, &(0x7f0000000280)=@multiplanar_fd={0x100, 0xb, 0x4, 0x4, 0x483, {0x0, 0x2710}, {0x3, 0x0, 0x10, 0x6, 0x9, 0x22, "fb0f5a9a"}, 0x3e, 0x4, {0x0}, 0x7f})
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r8 = dup(r7)
ioctl$TCSETSF(r8, 0x5404, &(0x7f0000000040)={0x1856, 0x0, 0x0, 0xfffffff9, 0x8, "0e80706e6c06a79874342a0e0d13343972d01f"})
write$UHID_INPUT(r8, 0x0, 0x0)
read$FUSE(r8, &(0x7f0000006100)={0x2020}, 0x2020)
socket$nl_generic(0x10, 0x3, 0x10)

11.336654968s ago: executing program 6 (id=444):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x81)
r0 = socket(0x23, 0x8000e, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x22, 0x2, 0x24)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24)
sched_setattr(0x0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x44, 0x0, &(0x7f0000000140)={0x0, 0xa, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = fsopen(&(0x7f0000000700)='affs\x00', 0x1)
fcntl$dupfd(r2, 0x0, r2)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r3, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000440)={<r4=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000a80)={r4, 0x0, "132bf2b2631e4a669e5ab545f4df3af85ad7e43ec2b129366fe8ac9c1291a08c84ed3776ca81ad429d1e191a9da28672a0c89918f82b3644e9a664401d7ec9e25042e90414c4f943f35b4c60700c72b70000000000000003505b51bb8eeb1449cf9d99e7b3adbe3558ce2d6936970000000000000033bb5d6df9ccad91e68ef25fc13090e1d4fc2762b409ab624c2226c25046ec660f62e30273f0f80710a31a7e77320f2f4a668a4d04c2660c33d55c1a614dc7f7b661388c206c2866c471a6c8041154dda81b53b0e76e36baf7291a4b3a4fbaa730a40c37ccfeb40bbf81ce072c2f4babe8b3d02bf7acf1bc1a895954b126b13c2de9a82827b16cd7113a09dc75a66e9ae1818fcb99c0cdeda4aa33885c6cb93acf9df129e8e9fa70b45e564aa876eba6ff8a5cfbe113bc6a36953e928ab7df3e8729f2d823ccd4926d416ee924fc230371f8931349a964a27ec40ffd703e08754d8f7ec57c3373de88"}, &(0x7f0000000180)=0xfebd)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRES64=r3], &(0x7f0000000080)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000000c0)='kvm_vcpu_wakeup\x00', r5, 0x0, 0x6}, 0x18)
r6 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121)
dup(r6)

10.424667831s ago: executing program 3 (id=447):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0)
getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x63)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)={0x1, 'syzkaller1\x00', {}, 0x4})
r0 = socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='mr_dereg\x00', 0xffffffffffffffff, 0x0, 0x8090}, 0x18)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000001c0), 0x13f, 0x1}}, 0x20)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000005480)=ANY=[@ANYBLOB="0500000008ff"])
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x5)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffdd5}, 0x94)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0xfffe, 0x1}, 0xc)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4)

9.132707977s ago: executing program 7 (id=449):
syz_emit_ethernet(0x0, 0x0, 0x0)
openat$rtc(0xffffff9c, 0x0, 0xb0000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1})
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01)
write$char_usb(r3, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000b80)={<r4=>0x0, 0x5, 0x6, 0x5, 0x4}, &(0x7f0000000bc0)=0x14)
r5 = socket$packet(0x11, 0x3, 0x300)
mq_open(0x0, 0x0, 0x0, &(0x7f0000000180)={0x8001})
r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000040)={r6, r6, r6}, &(0x7f0000001cc0)=""/194, 0xc2, &(0x7f00000000c0)={&(0x7f0000000000)={'xxhash64-generic\x00'}})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x30, 0x5, 0x53, 0xfffff034}, {0x6, 0x4a, 0x6, 0x6}]}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x2, 0x20, 0x1c, 0x67, 0x0, 0x14, 0x2, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x32}}, {0x15, 0x3, 0x0, @multicast1}}}}}, 0x0)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000c00)={r4, 0x88000000}, 0x8)
syz_emit_ethernet(0x4d, &(0x7f0000000c40)=ANY=[@ANYBLOB="aaaaaaaaaabb0180c200000100f97ff50d574fbf04afedb59d30782dd709debecb72481595b550ef51d9"], &(0x7f0000000080)={0x1, 0x1, [0xead, 0x912, 0x9b3, 0xc9]})
r7 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, 0x0, 0x71)

8.480507508s ago: executing program 6 (id=450):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
dup(r0)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x38011, r1, 0x2c9ad000)
syz_open_dev$hidraw(&(0x7f0000000000), 0x4, 0x542c0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c)
bind$tipc(r4, 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0)

7.589584259s ago: executing program 6 (id=453):
socket$inet6_sctp(0xa, 0x1, 0x84)
set_mempolicy(0x2, 0x0, 0xf5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, 0x0, 0x0)
getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000000480)=""/177, 0xb1, 0xe0)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x5, &(0x7f0000000200)={[0xffffffffffffffff]}, 0x8)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = userfaultfd(0x80801)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000d76000/0x3000)=nil, 0x800000})
sendmsg$rds(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/4, 0x4}, {&(0x7f0000000240)=""/215, 0xd7}, {&(0x7f0000000340)=""/106, 0x6a}, {&(0x7f00000003c0)=""/173, 0xad}, {&(0x7f00000005c0)=""/242, 0xf2}, {&(0x7f00000007c0)=""/250, 0xfa}, {&(0x7f00000008c0)=""/217, 0xd9}, {&(0x7f00000009c0)=""/234, 0xea}], 0x8, &(0x7f0000000740)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, &(0x7f0000000540), 0x8}}], 0x30, 0x40021}, 0x20004080)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
syz_usb_connect(0x6, 0xffffffffffffff80, 0x0, 0x0)
r5 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0)

6.540296282s ago: executing program 7 (id=454):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'erspan0\x00', r1, 0x1, 0x7, 0x9, 0xfffff577, {{0x16, 0x4, 0x3, 0x4, 0x58, 0x67, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @broadcast, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0xcb, 0x1, 0x9, [{@rand_addr=0x64010102, 0x200}]}, @cipso={0x86, 0xe, 0xffffffffffffffff, [{0x5, 0x8, "e254fe0e1725"}]}, @timestamp={0x44, 0x14, 0xa3, 0x0, 0x8, [0x7, 0xbee6, 0x8, 0x8]}, @cipso={0x86, 0xf, 0x0, [{0x6, 0x9, "4e15346f5ad0e9"}]}, @noop, @end]}}}}})

6.383906904s ago: executing program 7 (id=457):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f0000000380)={0x4f, "2f07dd70240a599dcc57436f0bca6f892f90821de6e8f8423e15299730ec612023186bfdb41bb755a9c628630bba8d2d67a51198ec31a53824061b4115829d6f886d2980c83b3413601b33702495f19e7a904ad74575b1777b7018cdb1b708011a93b83b4625c7acc67bab83b53c939971c626123b9dce14837031e7264c15d5"})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
syz_emit_ethernet(0x4a, &(0x7f00000006c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x11, 0x0, 0x0, {[@window={0x3, 0x3, 0x4}, @sack_perm={0x4, 0x2}]}}}}}}}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f0000000040)={0x0, 0x11, 0x2a, {0x2a, 0xc, "9e05c2f8932cf1265a08f40ecf45f1238666d11eeda0b48e59fa99ae52d00c5be47182545d7e9980"}}, &(0x7f00000000c0)={0x0, 0x3, 0xed, @string={0xed, 0x3, "f422f7f5cd1512869612ad41fa318e3ea162f09f77c358dd4836e3a0aa4a8730b3749b1be5ff52734654c2b062d473a8bb5307662906710893c8864dccd9757ba292122b4b0af15b2c22ca8460dd66bb83b76b8a98bf35655065d8db22b0cba5910b61351d03650836a15d2efb8869295a5656c9651c65a9c41f286efa22ab415c131f79389c8a27e598cb3ba6d3e118f8b0c7df56290cef1093494cfb9990b8a160675f071f00151d7a78be85dd503b2d5717f8b97b4e509fef777e6c69884a92d6e832e0beb833e936f8de6f6b85de8291796d0674266ac52599cf7433caded67d5a5d65e5ee4d220c3e"}}, &(0x7f00000001c0)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0xa, "9f"}, @local=@item_4={0x3, 0x2, 0x0, "b33cf6d9"}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9a5, 0xa, 0x1, {0x22, 0x953}}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000340)={0x0, 0x15, 0xbc, "e252be29c7e63efe82e2b969193e3d27cf9b0402efd75b67454291423a81f4c3f47eac3a1f297631af1424cb895f94eb9be6951ac1b6d153a99205086e9ff3794193b8d9fbf33752a9325cb40f27c3428b2047f47248ccd30347fd26d2f5f9c4327fd414058502543f4cacaee64a3c19cc500ebd0f807e5e5745ee0e924ad3792bd0e7379a21222e20aa782dfc2f1c8610218bac6a72c591aeab0ecd33c8ca6bbfd1d3022080e4c54d93f404a84256267d16805a2d65da8f8b8a9c40"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000540)={0x20, 0x1, 0x38, "97307483daea1f3cb18be47006e1c8f4837e2adc5ff0ebf170857dc8eac6495aebaaeb723fe801ac386b2f75757c624c6bff3b9dee7da790"}, &(0x7f0000000580)={0x20, 0x3, 0x1, 0x8}})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000600)=ANY=[@ANYBLOB="f90cd86184e9b3d756b9f2cc81ca35b255c0e4b64bb7c4e59fb81a753a8d48796b134b6e267d2a36522071422c961723586319c2f221565ee6b6d5d61aebdd3f09af68d36e8e31af28567b86f2edf4ba9d2e9cd43a2d4e6f2f65bd8012fe584a8fa81814808b579d09126d069e2c2e74789238eae9ef042374e2afac554d80b2dc2c2c83633daedd3633d079b40caaf4d6c5c91b5b13c77376"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

6.16323062s ago: executing program 3 (id=459):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x68}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x1d8, 0x12, 0x60d, 0x1d8, 0x202, 0x2a8, 0x2e8, 0x2e8, 0x2a8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [], [], 'veth0_to_team\x00', 'macsec0\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockname(r4, 0x0, &(0x7f0000001b80))
read$hiddev(0xffffffffffffffff, &(0x7f00000000c0)=""/4092, 0xffc)
preadv(0xffffffffffffffff, &(0x7f0000001300), 0x0, 0x10000, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000000180)=""/92, 0x5c)

6.072380145s ago: executing program 0 (id=460):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f}}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(r0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x9, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
r2 = getpid()
r3 = io_uring_setup(0x30a7, &(0x7f0000000480)={0x0, 0x9dd6, 0x1000, 0x2, 0x21b})
io_uring_register$IORING_REGISTER_MEM_REGION(r3, 0x22, 0x0, 0x1)
r4 = syz_pidfd_open(r2, 0x0)
open_by_handle_at(r4, 0x0, 0x1)
ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @local})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x800, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000004ec0), 0x0, 0x2000, 0x0)
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00')
mkdir(&(0x7f0000000400)='\x00', 0x0)
mkdir(&(0x7f0000000380)='./file1\x00', 0x9)
mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000180)='ufs\x00', 0x1a0c099, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={[{@uuid_off}]})
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x10d600, 0x0)
ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000100)=0xcf5)
syz_80211_inject_frame(0x0, 0x0, 0xb5)
socket$kcm(0x10, 0x2, 0x0)

4.392722991s ago: executing program 0 (id=467):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0xb4a})
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)={0x4, 0x7})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000001800000002"])
r2 = mq_open(&(0x7f0000000100)='\xbd\x16 lhOb\xed\xf1~\xe5\x01\xd1h\xfe\xb5\x1d\x90\x933\x9e\x8f\x06J\xc7\xc8y\xfbx\xd0\xee\xc3\xfcv\xf7L\xaa=Q\xe4R\xfan\xc1\xb7FGr\x82\xa5\xf2\x8fq\xf0\xcf\x82\xc3\xbb~Q\x7fV\x7f7\xb6\xb7\"qH\xe1\x11\x97\xc9d0\x9d\xfa\x86\xf8\x88\xb9\x89\xfd%Nny\xb5\x03\x83\x1c\xddD\x02\x00\x00\x00\x00\x00\x00\x00`\x1f~\xe9\xe4N@\xbb\xdb\x80\xcf\x1e \x9eW\x13\x02\xe2ct\xe9\x7f+8+\v\x88\x01\xf6\\x\x95|\xeab\xceE\xefVyS$\x92\xb5PAXg\xa68mRC\x93l\x83\xcd\xe21\x92X\x8c!\x0e\x1b(\xdf~ +\xb7{T\xb0\xff\xce\xbdv\xc1\xc0\xfc\xd9r,\xc9\xc5\xc7o\x1d]e\x03t)\xb6)\xe0\x88p\x84\x9e\xae\xaad\xf9\a\xce\x81\x99z\xb3\xb9\xa2\r{\x83\x05=\xfcu\xb3\xa1\x8b\xd1uw\f \xe0\x9fd\xcca&6\xa5{y\bS@\x00TO\'\xc7v\xa9\v_\xd7\x1f\x9cs\f\x7f\xab\x8d\x12\xf3\x1fR\x9f\x80M\x04\xa8\x1b5(s\x94\xeao\xe8\\\xa1sv\x81\xcd\xbd\xfd\x86\x14\xf0V\xe2\x84\xa4C\xfd\xf5c\xfe\x0f\x94>\x87\xdf\xf8\xc7\xe1\xce\xb1\xfe\xfc\xfd\x84\xa7\xee \xb4L*\xc7\xf6\xe4\xfa\x84\x95\xfb\xbd:\vfK-\x10YOja\x9a\xcd\xdb\xccj\xfd\x10\x8a\x1d\x9a\x8d\x00'/360, 0x40, 0x81, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x6400, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_FREE(r3, 0x4112, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x80010, r2, 0x0)
ioctl$SNDRV_PCM_IOCTL_DELAY(r3, 0x80084121, &(0x7f0000000080))
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

4.232345363s ago: executing program 2 (id=468):
bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000202070250000bfa100000000000007010000f8ffffff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x401, 0x10880)
ioctl$DRM_IOCTL_MAP_BUFS(r5, 0xc0186419, &(0x7f0000000300)={0x1, &(0x7f0000000040)=""/133, &(0x7f0000000180)=[{0x7fff, 0x43, 0x4, &(0x7f0000000100)=""/67}]})
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)="d80000002c0081064e81f782db44b904021d080005000300e8fe55a1180005000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbaceadaafc9136e30a3f36d90116d58017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809f6e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4ed", 0xd8}], 0x1}, 0x0)

4.132171259s ago: executing program 0 (id=469):
mkdir(&(0x7f0000000040)='./file1\x00', 0x1e)
syz_emit_ethernet(0x6e, &(0x7f0000000680)=ANY=[@ANYRES32=0x0], 0x0) (async)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000080), 0x2000000, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x40000000) (async)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x80800, 0x120) (async)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, &(0x7f0000000040)) (async)
pipe(&(0x7f0000000240)={<r2=>0xffffffffffffffff}) (async)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$setpipe(r2, 0x4, 0xfffffffffffffffd) (async)
mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) (async)
rseq(&(0x7f00000001c0), 0x20, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00'})
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
prlimit64(0x0, 0xc, &(0x7f0000000140)={0x40000000000005, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0) (async)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) (async)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
clock_getres(0x2, &(0x7f00000000c0)) (async)
listen(r3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000006d8d32"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f0000000840), &(0x7f0000004880)=@udp=r3}, 0x20) (async)
recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)=""/141, 0x8d}], 0x1}, 0x22) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$cgroup_type(r5, &(0x7f0000000040), 0x9) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0)

3.900697979s ago: executing program 2 (id=470):
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@l={0x92, 0x0, 0xe0}) (async)
read(0xffffffffffffffff, &(0x7f00000011c0)=""/221, 0x8) (async)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x1000, @mcast2}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c404) (async)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async)
prlimit64(0x0, 0x2, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r0 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) (async)
sched_setscheduler(r0, 0x4, &(0x7f0000000080)=0x7) (async)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r2, &(0x7f0000001ac0)=[{{&(0x7f0000000400)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000680)=""/73, 0x49}], 0x1, &(0x7f0000000700)=""/187, 0xbb}, 0x2}, {{&(0x7f0000000880)=@alg, 0x80, &(0x7f0000000c80)=[{&(0x7f0000003340)=""/4096, 0x1000}, {&(0x7f0000000480)=""/15, 0xf}, {&(0x7f0000004340)=""/4096, 0x1000}, {&(0x7f0000000900)=""/198, 0xc6}, {&(0x7f0000000a00)=""/246, 0xf6}, {&(0x7f0000000b00)=""/202, 0xca}, {&(0x7f0000000500)=""/11, 0xb}, {&(0x7f0000000580)=""/6, 0x6}, {&(0x7f0000000c00)=""/97, 0x61}, {&(0x7f0000000800)=""/44, 0x2c}], 0xa, &(0x7f0000000d40)=""/181, 0xb5}}, {{&(0x7f0000000e00)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e80)=""/99, 0x63}], 0x1}, 0x7}, {{&(0x7f0000000f40)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000fc0)=""/66, 0x42}, {&(0x7f0000001040)=""/12, 0xc}, {&(0x7f0000001080)=""/63, 0x3f}, {&(0x7f00000010c0)=""/86, 0x56}, {&(0x7f00000012c0)=""/223, 0xdf}, {&(0x7f0000001140)=""/6, 0x6}, {&(0x7f00000013c0)=""/78, 0x4e}, {&(0x7f0000001180)=""/20, 0x14}, {&(0x7f0000001440)=""/109, 0x6d}], 0x9, &(0x7f0000001580)=""/41, 0x29}, 0x3ff}, {{&(0x7f00000015c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001640)=""/102, 0x66}, {&(0x7f00000016c0)=""/46, 0x2e}, {&(0x7f0000001700)=""/165, 0xa5}, {&(0x7f00000017c0)=""/93, 0x5d}, {&(0x7f0000001840)=""/173, 0xad}, {&(0x7f0000001900)=""/122, 0x7a}, {&(0x7f0000001980)=""/124, 0x7c}, {&(0x7f0000001a00)=""/10, 0xa}], 0x8}, 0x3}], 0x5, 0x40000040, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="5e890599d1bcebe7547b63bc05bf9fa7f1246a6d2aeae3b393762de5866d719065e2d7589604c58dc1de61736a0850cd6f1d4a3a783277966acc9964fb939bfc66efd1f83b31506d6e213820420a7472cb467d1e557e641c0b2eb77827212ce13b00a98556346a9a2afd0fac990f012fa5ad79e7452d8e21aad77fdeea1f75aa3575fce3f0655f7efae329d0ef0ce671dea68ea9c6a3c255ef547fbc4321dd97addce3a52b41d17f78f8909381b4fc9eb1bed5530bc82f3e9b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, 0x2}, 0x94) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRESOCT=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async)
r6 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000002d80), 0x2, 0x0)
writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000180)="3212", 0x2}], 0x1) (async)
r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async)
ioctl$SNDCTL_MIDI_PRETIME(r5, 0xc0046d00, &(0x7f0000000040)=0x7ff)
writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async)
gettid()

3.889366459s ago: executing program 0 (id=471):
inotify_init()
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
r2 = epoll_create1(0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102)
fcntl$dupfd(r2, 0x2, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
mremap(&(0x7f00004d6000/0x4000)=nil, 0x4000, 0x4000, 0x2, &(0x7f00001e2000/0x4000)=nil)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0xb7a}, 0x18)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil)
syz_emit_ethernet(0x95, 0x0, &(0x7f0000000100)={0x80000001, 0x8000001, [0x997, 0x8bf, 0xe4b, 0xc70]})
munlockall()
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r5 = dup(r3)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0)
write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x5, 0x1}, 0x8)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000})
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r6, r2, 0x0)
unshare(0xa020480)
ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)

3.810122294s ago: executing program 2 (id=472):
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}})
execveat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x0, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4800, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000100)=0x5e1, 0x4)
bind$inet6(r2, &(0x7f0000000500)={0xa, 0x5e20, 0xffffffff, @empty, 0x4}, 0x1c)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000500)={0xa, 0x5e20, 0xffffffff, @mcast2, 0x7}, 0x1c)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x2000, 0x103)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000009, 0x4082172, 0xffffffffffffffff, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

3.548724187s ago: executing program 3 (id=473):
r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000010c0)=@newlink={0x48, 0x10, 0xc3b, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xfffffffffffffe87, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x21ef}]}}}]}, 0x48}}, 0x40080c0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0)
fsync(r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = io_uring_setup(0x6ed1, &(0x7f0000000140)={0x0, 0xf844, 0x10003, 0x0, 0xee})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
r5 = eventfd2(0x0, 0x0)
read$eventfd(r5, &(0x7f0000000000), 0x8)
io_pgetevents(0x0, 0x7, 0x0, &(0x7f0000000240), 0x0, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r5, 0x0, 0x0, 0x0, 0x0, 0x1, r5}])
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r8 = socket$inet6(0xa, 0x0, 0x0)
setsockopt$inet_int(r8, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000400)=[@in={0x2, 0x2, @rand_addr=0x64010100}], 0x10)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r7, 0xffffffff)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
accept(r6, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)

3.536817992s ago: executing program 2 (id=474):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) (async)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)={0x1, 0xa04, 0xfffffffc, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{0x1, 0x1, 0x1, 0x1}, 0x3d, 0x2, 0x0, 0x0, "893c4a07f752aca160bbc6c6d30c66138c20424fc5fe757234d02c4dc575b7f4c9e6161d900eae371d2766ec5bc5502ffea8d6f82fcf4a65fd2e1550c4f8493b"}}, 0x80}, 0x1, 0x0, 0x0, 0x841}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1, 0xb29, 0xffffffff, {}, {}, {}, 0x1, @canfd={{}, 0x25, 0x0, 0x0, 0x0, "5c91440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bdd7e1be14f53b9fc9b"}}, 0x80}}, 0x0) (async, rerun: 32)
r2 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32)
setsockopt$inet_opts(r2, 0x0, 0xc, &(0x7f0000000400)="001ca73e", 0x4) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x820000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000002c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r4, 0x0, 0x0, 0x0, <r5=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000200)={0x28, 0x1, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000080)={0xc, r4}) (async)
ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r3, 0x3b70, &(0x7f00000001c0)={0x20, 0x0, 0x0}) (async, rerun: 64)
getsockopt$inet_opts(r2, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b) (rerun: 64)

3.269963183s ago: executing program 7 (id=475):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x0, 0x10, 0x4, 0x4008, 0x43, @loopback, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x40, 0x0, 0x7fff, 0x6}})
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
recvmmsg$unix(r5, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r7=>0x0})
r8 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x300, 0x32315852, 0x7, 0x0, [{0x0, 0x1000}, {}, {0x1, 0x6}, {0x8}, {}, {0x0, 0x4}], 0x1, 0x6}})
sendto$packet(r6, &(0x7f0000000100)="f257a8ea7bc273dfaeab96854305", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendmmsg$inet_sctp(r1, &(0x7f0000002a00)=[{&(0x7f0000000100)=@in={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000140)="dc", 0x1}, {&(0x7f0000000000)="2fc40d178ae833221fcf53dc7d3055f87be9af8310b2fad68a4046055868ecf5", 0x20}], 0x2, &(0x7f0000000580)=ANY=[@ANYBLOB="30000000000000008400000001000000000000af7a00020000000000000000000400"/44, @ANYRES32=0x0, @ANYBLOB="18000000000000008400000005"], 0x48}], 0x1, 0x40)

2.52879998s ago: executing program 2 (id=476):
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
epoll_create(0x3)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000400)=ANY=[@ANYBLOB="1e"], 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000540)={'gre0\x00', <r3=>0x0, 0x8, 0x8000, 0xfffffff1, 0x1196, {{0xf, 0x4, 0x3, 0xc, 0x3c, 0x67, 0x0, 0x4, 0x4, 0x0, @private=0xa010100, @empty, {[@lsrr={0x83, 0x17, 0x27, [@local, @empty, @broadcast, @local, @multicast1]}, @cipso={0x86, 0x11, 0x0, [{0x7, 0xb, "6183d5f33cbf7ea433"}]}]}}}}})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000060000000000000040000000183a00000900000000000000000000446aaffc0001000000000000000f0000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0xffff8000, 0x62, &(0x7f00000004c0)=""/98, 0x40f00, 0x52, '\x00', r3, 0x0, r0, 0x8, &(0x7f0000000600)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x10, 0x200, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000006c0)=[0x1, r0, r1, r1, r1], &(0x7f0000000700)=[{0x0, 0x5, 0xc, 0xa}, {0x2, 0x1, 0x10, 0xa}, {0x0, 0x5, 0x0, 0x9}, {0x3, 0x1, 0x6, 0x1}, {0x4, 0x2, 0x10, 0x6}, {0x5, 0x1002, 0x10, 0xa}, {0x3, 0x4, 0xd, 0x4}], 0x10, 0x9}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = accept4(r6, 0x0, 0x0, 0x800)
recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000540)=""/113, 0x71}], 0x1}, 0x40000000)
sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0x40}}, 0xc800)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x12c}}, 0x40040088)
ioctl$PIO_UNIMAPCLR(r8, 0x4b68, 0x0)
socket$isdn(0x22, 0x2, 0x25)
close_range(r0, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x88901)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x30, 0x1, 0x9, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x10001}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x40840)

2.527469995s ago: executing program 6 (id=477):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[], 0x50)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000040)={0x0, 0xe, 0x1, 0x7, 0x0, 0x7, 0x0})
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x48, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x300, 0x2, 0x0, 0x0, {0xfffffffffffffffd, 0x1f51, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x1, 0xe, 0x1f}}]}, 0x48}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c00"], 0x140}, 0x1, 0x0, 0x0, 0x4000804}, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r7 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x0)
ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f00000003c0)=0x87)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x209}, 0x9c)

1.971691032s ago: executing program 2 (id=478):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x130)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="2800000000000000290000000500000000020201000000000000000000000000bb180000000000000029000000040000000200000000000000"], 0x40}, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
preadv(r3, &(0x7f0000000440)=[{&(0x7f00000005c0)=""/4096, 0x1000}], 0x1, 0xff, 0x9048)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
ptrace$ARCH_SHSTK_DISABLE(0x1e, r4, 0x2, 0x5002)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6)
rt_sigprocmask(0x2, &(0x7f0000000040)={[0x4]}, 0x0, 0x8)
r7 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x4, 0x80000001, 0xc89f, 0x8, r2, 0x6, '\x00', 0x0, r7, 0x5, 0x4, 0x1, 0xa}, 0x50)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
write$cgroup_int(r2, &(0x7f00000003c0)=0x7, 0x12)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a00000000000061118000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)

1.916883592s ago: executing program 3 (id=479):
setreuid(0xffffffffffffffff, 0xee01)
pipe2(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x30000008})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
tee(r2, r3, 0x4, 0x8)
openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004003381fec68c1d5be1038bfd952f7b5e6678a3b3ef480cdeaff799eefc9bc47ca1be27948e9a29a47458fbc38e608c5f7b649e87376ee854fc7b022802a23a89ca06803ca00039f46ae848df494b0d9016bdaef249d1df621c03339d94336c6a4804fe712e7f684477aa30979be0bd3165865952464300000000000000"], 0x0)

580.163362ms ago: executing program 7 (id=480):
madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xd)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x3})
futex_waitv(&(0x7f0000000740)=[{0x3, &(0x7f0000000040)=0x100000000, 0x2}, {0x8, &(0x7f0000000080)=0xed, 0x82}, {0x25, &(0x7f00000000c0)=0x2, 0x82}, {0x6, &(0x7f0000000100)=0x8355, 0x2}, {0x7, &(0x7f0000000140)=0x5, 0x2}, {0xfffffffffffffffd, &(0x7f0000000180)=0xfffffffffffffffa, 0x2}, {0x5271244d, &(0x7f00000001c0)=0x1000, 0x2}, {0x1, &(0x7f0000000200)=0xffffffffffffffff, 0x2}, {0x5, &(0x7f0000000240)=0x7, 0x2}, {0x8, &(0x7f0000000280)=0x2, 0x2}, {0x1ff, &(0x7f00000002c0)=0x40, 0x2}, {0x40, &(0x7f0000000300)=0x17, 0x2}, {0xbe3, &(0x7f0000000340)=0xaf, 0x80}, {0x8000000000000001, &(0x7f0000000380)=0xffffffffffffffff, 0x82}, {0x6, &(0x7f00000003c0)=0x8, 0x2}, {0x8, &(0x7f0000000400)=0xd, 0x2}, {0x5, &(0x7f0000000440)=0x2, 0x2}, {0x9, &(0x7f0000000480)=0x9, 0x2}, {0x2932bf2, &(0x7f00000004c0)=0xffffffffffffffff, 0x82}, {0x2, &(0x7f0000000500)=0x6, 0x2}, {0xe2, &(0x7f0000000540)=0x20b, 0x82}, {0x1, &(0x7f0000000580)=0x9, 0x2}, {0x8000, &(0x7f00000005c0)=0x9, 0x82}, {0x1, &(0x7f0000000600)=0x10000, 0x2}, {0x40000000, &(0x7f0000000640)=0xbebb, 0x82}, {0x6, &(0x7f0000000680)=0x7f, 0x2}, {0x8, &(0x7f00000006c0)=0x7fff, 0x2}, {0x3, &(0x7f0000000700)=0xfff, 0x2}], 0x1c, 0x0, &(0x7f0000000a00)={0x77359400}, 0x1)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000001180)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001140)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}}, @NFT_MSG_DELCHAIN={0xe4, 0x5, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x5}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7087d079}]}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x64, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9f26}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3f6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}, @NFT_MSG_DELRULE={0x564, 0x8, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_RULE_COMPAT={0x34, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6c}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x32}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x56, 0x7, 0x1, 0x0, "2ad26e8bb9bd6176d4f427b5d40f051bc4a9edfed47f81d6cfad6ded2ca88e4ca5fae742a0b4532d7c0cfac23fe7e910525424365983b9d393a1b67df23765de992ce3c756ebf81ff51fd4f1d28604f8e866"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x45c, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0xff}, @NFTA_OSF_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x3fc, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x3ec, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_TO_DATA={0x13c, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb3, 0x1, "5ec6bbb4748f305f2debefb9385b79e974469df356c609c583aafd089593e49880b186c00d4583e161b2fb97ae3f141ced3fb598147fd898b707b985814c72be17d8ee53d26cc155271f5e795b390f551d72175aef868cb4a832c5497a87bb9d4697c880562b53c7fccec66c52ec94aa10686d1147b918014fddb9027d3c7583127cad1e423bec7d4d4a92c9e0e8c8dd51e7aeec1f8f7336c16a4b279046c64cc83c4bd55593b92d407d1ed220800b"}, @NFTA_DATA_VALUE={0x63, 0x1, "0406ace811dc943a97da3c8d12b103a9678d40deae5798d49a159e6f9363124b533a0fd9c2876e861a7f495d057d0aed5409db533473c36dc96a9d6c3c89c2c4e6f8b640516b561d13d2b840bb26351ec2a6de1f73b50466d7ae67584e3739"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xf, 0x1, "2f314db018f08170a6fdae"}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0x27c, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x3a, 0x1, "0bab099ed50f7db161ecc9b1c97d710a40eb21f63db4b37871cb987a4f7bfccef4d04b4e2c7bcd1b2f596dd8b3293d066bcbaf27dc4d"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xfd, 0x1, "1f8abc6c66e0d1ccd250a9889c80915742e82f80377d564e08cbcae4d410d025979d0702aae41ebcd0e02c871316779a7a4d6d491d2ce61945ecc8db0e09b0fc171fdc57f0357996bae6c12885fd2988d15086fa5d8d6bb8bbf87bc707cfbe1f5c16d3342f9ff449088d3bedae1f11a5a80014ff720a1acfea764db64bc468844464bb39fef133aee6d0a2dc237af2001a4a9b416a610a1d9b00e200f4fdb76228d02a11fe47debdf175916fe1759b7050b90a6bd19795840642ad2a2cefc9bbdc503d7d25a3cf8a65a8b2dbfa4a41f121c3ce1778ca94612238e3d78b368841a027f0b5791bc06e48ec9d5f60d4dce3bacc8a53989f299288"}, @NFTA_DATA_VALUE={0x23, 0x1, "e2b7ea6ee8417dc82e20562a60c6d28e514fb244eaade3ffa3ec535b84d00c"}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x59, 0x1, "f9afe03ca346fd564a98bfe79e7b70a611831e9b748edfa0fd8615b6be0d3d4834b91601ef8d3b6a7371c14849a9e67495e55834e70a6964d0582d71516a6320a1632fc5eac5d2a90c54effe2996e849b058d3192b"}]}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x26, 0x7, 0x1, 0x0, "dce9938167dff28168ea255e0addd9389d26cc9e2d40b8a2b34af219ce299fff664b"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x6c0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000001)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000011c0), 0x400, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001200), 0x121000, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000001240), 0x4)
ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000001280)=0x5)
mknodat(r2, &(0x7f00000012c0)='./file0\x00', 0x20, 0x7)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001340), r1)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001400)={r2, 0x58, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000001440)={'batadv_slave_0\x00', <r5=>0x0})
getpeername$packet(r2, &(0x7f0000001480)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000014c0)=0x14)
getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000001500)=<r7=>0x0, &(0x7f0000001540)=0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001580)={'gretap0\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000015c0)={'batadv_slave_0\x00', <r9=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000016c0)={'ip_vti0\x00', &(0x7f0000001600)={'gre0\x00', <r10=>0x0, 0x8, 0x1, 0xdfea, 0x80000000, {{0x23, 0x4, 0x0, 0x1b, 0x8c, 0x65, 0x0, 0x7, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@generic={0x82, 0xa, "19fad3cc6ac6c086"}, @rr={0x7, 0xb, 0xd7, [@multicast1, @multicast2]}, @generic={0x7, 0x10, "6d9b72a2ef7dc481be845362cac5"}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0x7d, [@rand_addr=0x64010102, @private=0xa010101, @rand_addr=0x64010102, @broadcast, @dev={0xac, 0x14, 0x14, 0x36}]}, @lsrr={0x83, 0xb, 0xb1, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x17, 0x55, [@dev={0xac, 0x14, 0x14, 0x36}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast1, @multicast1]}, @timestamp_addr={0x44, 0x14, 0x60, 0x1, 0xa, [{@dev={0xac, 0x14, 0x14, 0xb}}, {@loopback, 0x3}]}]}}}}})
getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000001700)={@dev, @empty, <r11=>0x0}, &(0x7f0000001740)=0xc)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000001980)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001940)={&(0x7f0000001780)={0x1a0, r3, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x78, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x72, 0x5, "7c5f1e6999afa8eea3e3373b489a20295075de889bc34bddb839d0ff8c83c20bce93d83a05281a29beea9ab6a60b4d03d683d5f15a5f28400772df1fe947a2425cf6b0c44cd4121b181ffafae31e093d89139a569aed5bcef6c0f3808e19c259901ae41525d4e3055c5889908672"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x40}, 0x4004010)
recvfrom$inet(r2, &(0x7f00000019c0)=""/69, 0x45, 0x40000020, &(0x7f0000001a40)={0x2, 0x4e23, @empty}, 0x10)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000001d00)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001ac0)=@bridge_getneigh={0x1fc, 0x1e, 0x4, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r8, 0x8298, 0x4001}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x8}]}}}, @IFLA_AF_SPEC={0x34, 0x1a, 0x0, 0x1, [@AF_INET6={0x30, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x56}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x40}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x44}]}]}, @IFLA_PROP_LIST={0xb8, 0x34, 0x0, 0x1, [{0x14, 0x35, 'veth1_macvtap\x00'}, {0x14, 0x35, 'ip6_vti0\x00'}, {0x14, 0x35, 'vlan1\x00'}, {0x14, 0x35, 'vxcan1\x00'}, {0x14, 0x35, 'pim6reg0\x00'}, {0x14, 0x35, 'pim6reg\x00'}, {0x14, 0x35, 'gretap0\x00'}, {0x14, 0x35, 'veth0_to_bridge\x00'}, {0x14, 0x35, 'vxcan1\x00'}]}, @IFLA_AF_SPEC={0xc0, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0x1e, 0x0, 0x0, 0x1}, {0x8, 0x1d, 0x0, 0x0, 0x6}]}}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8, 0x3, 0x0, 0x0, 0x40}, {0x8, 0x18, 0x0, 0x0, 0x800}, {0x8, 0x0, 0x0, 0x0, 0x2}, {0x8, 0x1b, 0x0, 0x0, 0xaddf}]}}, @AF_INET6={0x78, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xa}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xb}, @IFLA_INET6_TOKEN={0x14, 0x7, @private0}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xf8}]}]}, @IFLA_WEIGHT={0x8, 0xf, 0x1}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x44000}, 0x4)
r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001e80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, r2, 0x2, 0x4, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x12, 0x14, &(0x7f0000001d40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xbee}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @jmp={0x5, 0x0, 0x4, 0x4, 0x3, 0xfffffffffffffff0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @call={0x85, 0x0, 0x0, 0x12}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @jmp={0x5, 0x1, 0x8, 0x0, 0x6, 0xffffffffffffffe0, 0x1}]}, &(0x7f0000001e00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000001e40)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r2, 0x0, &(0x7f0000001f00)=[r2, r13, r2], 0x0, 0x10, 0x3}, 0x94)
getpid()
getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000002000), &(0x7f0000002040)=0x4)
ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000002080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000020c0)={'dummy0\x00'})

529.301845ms ago: executing program 0 (id=481):
r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000005, 0x12, 0xffffffffffffffff, 0x8000000)
r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000005, 0x30, 0xffffffffffffffff, 0x10000000)
r2 = syz_open_dev$audion(&(0x7f0000000180), 0xa085, 0x4001)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208001e00060004010c00090008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0)
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x4, 0x0, r2, 0x0, r4, 0x2, 0x0, 0x4de70d8b441bbda2, {0x0, r5}})
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000300000000006586d75b6ad175ef70bf6fe1c09a9813608be47d7c5fbc35b26af52200a89708913555360e054505a42f6eba7d24b14a4a8873b51f4850c16f1b2363844f337dad87d9bc0c8dc5e78ff2619073d338054e4890a41b5dfc91ce9fa6ad4362c210c076cf1fff2851ae5b30eca15d28e0f782025b3a88c82cf9e8eb17b18f13d44643db4255f87c9afbbd5ec58e230707a48a8ed4188b27d6ed39c50676f01cac1360a47c719ac8629139876300"/206, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x280}, {0xffffffffffffffff, 0x44a1}], 0x2f, &(0x7f0000000080), &(0x7f00000000c0)={[0x3]}, 0x8)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x0, 0x198, 0x198, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'netpci0\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@remote, @multicast2, 0x0, 0xffffff00, 'veth1_macvtap\x00', 'ip6_vti0\x00'}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@unspec=@connmark={{0x30}, {0x2, 0x4, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0xfffc, [0x16]}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328)
socket$pppoe(0x18, 0x1, 0x0)
getpeername(r6, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000040)=0x80)
r7 = syz_open_dev$vim2m(&(0x7f0000000200), 0xfffffffc, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000000)={0xf0f041})

244.605507ms ago: executing program 7 (id=482):
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) (async)
r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@multiplanar_overlay={0x8, 0x4, 0x4, 0x1000, 0x6, {0x77359400}, {0x2, 0x2, 0x7c, 0x9, 0xf, 0x5, "a4f3915a"}, 0xff, 0x3, {&(0x7f0000000100)=[{0x7f, 0x3, {0x10000}, 0x2}, {0xe96, 0x2, {}, 0x3}]}, 0x6})
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x14c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x120, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x8000}, @NLBL_CIPSOV4_A_MLSLVLREM={0xfffffffffffffe82, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x92}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x58}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x483822ce}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ee0fc90}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7d2b8e90}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}, @NLBL_CIPSOV4_A_MLSLVLREM={0x0, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xde}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x3b, 0x5, 0x619049d5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10dfedee}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64b85da7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e02557}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x91}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4c2b3cb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3ba2363e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x53}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x681eb2bf}]}]}]}, 0x14c}}, 0x0)
r3 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000080)) (async)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) (async)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$TCFLSH(r5, 0x400455c8, 0x1) (async)
ioctl$TIOCSETD(r5, 0x5412, &(0x7f0000000140)=0xffffffc0) (async)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0xdb)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000340)) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
ioctl$KVM_GET_DIRTY_LOG(r7, 0x4010ae42, &(0x7f0000000280)={0x2710, 0x0, &(0x7f0000ff5000/0x1000)=nil}) (async)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048004}, 0x200000a0) (async)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12e9ffff78db8572fee727bfaf6740da0b770195723962f0173d8e", @ANYRES32, @ANYRES8=r8], 0x0)

65.359129ms ago: executing program 6 (id=483):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x68}}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x1d8, 0x12, 0x60d, 0x1d8, 0x202, 0x2a8, 0x2e8, 0x2e8, 0x2a8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @mcast1, [], [], 'veth0_to_team\x00', 'macsec0\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockname(r4, 0x0, &(0x7f0000001b80))
read$hiddev(0xffffffffffffffff, &(0x7f00000000c0)=""/4092, 0xffc)
preadv(0xffffffffffffffff, &(0x7f0000001300), 0x0, 0x10000, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000000180)=""/92, 0x5c)

0s ago: executing program 0 (id=484):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0xd351}, 0x10, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000bc0), 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0x4020940d, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r1, {0x4}}, './file0\x00'})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x2000000000000322, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4, 0x0, &(0x7f0000000180)=[@register_looper], 0xd0, 0x0, &(0x7f0000000400)="c8df60bab30954abe0bacbc0d17c1407c98e836ddc223c836c65d7e1a216f511f0cb3705609201fe9b456dbf5e1dca0ebe53eb612fe1885c74030883aab8a2a0b6a5c62102ed4db1541f6102cfc773a0c1ba12b9468368c90361eacb065ae58733137b5687a958d7308d3a4103ca48207881d05236a1ae8d571acf343687dace897f573b13a02a45fd6d3c6ae8502b7671b60cc9ea0f367951d23eec692f6477435a78bae533b186bb22a21809644a8e6659abd56d57af69ae4f239aaccd21823efb7bff71a27c345568b1537b678bb5"})
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x82000, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000300), 0x9, 0x10041)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x87, 0xc, 0x0, 0x1, 0xb5, 0x7, 0x75, 0xf2, 0x5, 0x2, 0x61, 0x0, 0x40, 0x7, 0x7, 0x8, 0x60, 0xe1, '\x00', 0x1, 0x1})
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000680)={"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"})
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x101)
ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000200)={0x0, 0xd46, 0x0, 0xffffffff, 0x800000})
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r6, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port0\x00', 0xe3, 0x1b1c07})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000000)={0x80, 0x9, 0x2, 0xe05, 0x20000, 0x28e7})
r7 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @broadcast}, 0x10)
sendmsg$rds(r7, 0x0, 0x0)

kernel console output (not intermixed with test programs):

1 netdevsim3: renamed from eth3
[   77.616069][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   77.630753][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   77.648175][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   77.672948][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   77.738790][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   77.763945][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   77.781176][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   77.792427][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   77.905008][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.948222][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   77.956814][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   77.969464][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   77.980339][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   78.016258][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   78.030059][ T3014] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.037401][ T3014] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.046540][ T5854] Bluetooth: hci3: command tx timeout
[   78.052267][ T5854] Bluetooth: hci0: command tx timeout
[   78.058723][ T5839] Bluetooth: hci4: command tx timeout
[   78.064260][ T5847] Bluetooth: hci1: command tx timeout
[   78.064863][ T5856] Bluetooth: hci2: command tx timeout
[   78.095237][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.102385][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.203835][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.223888][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.262229][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   78.300373][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   78.314065][ T3014] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.321373][ T3014] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.355909][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.363123][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.387563][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.394806][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.415492][  T973] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.422695][  T973] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.479976][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.577439][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   78.609649][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.642132][  T973] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.649453][  T973] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.687869][  T973] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.695089][  T973] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.742370][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   78.813892][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.836022][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.843183][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.913039][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.920262][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.001486][ T5842] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   79.019699][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   79.123896][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.236866][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.253869][ T5848] veth0_vlan: entered promiscuous mode
[   79.303120][ T5848] veth1_vlan: entered promiscuous mode
[   79.416571][ T5835] veth0_vlan: entered promiscuous mode
[   79.461676][ T5835] veth1_vlan: entered promiscuous mode
[   79.477228][ T5848] veth0_macvtap: entered promiscuous mode
[   79.531833][ T5848] veth1_macvtap: entered promiscuous mode
[   79.617961][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.636049][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.655728][ T5835] veth0_macvtap: entered promiscuous mode
[   79.682645][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.700363][ T5835] veth1_macvtap: entered promiscuous mode
[   79.716276][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.740146][ T5848] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.750051][ T5848] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.760735][ T5848] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.773676][ T5848] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.863838][ T5840] veth0_vlan: entered promiscuous mode
[   79.885657][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.932985][ T5840] veth1_vlan: entered promiscuous mode
[   79.948145][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.983533][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.999897][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.009089][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.017955][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.054040][ T5841] veth0_vlan: entered promiscuous mode
[   80.086433][ T5842] veth0_vlan: entered promiscuous mode
[   80.122367][  T973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.131724][ T5856] Bluetooth: hci2: command tx timeout
[   80.131959][ T5854] Bluetooth: hci3: command tx timeout
[   80.139064][ T5856] Bluetooth: hci0: command tx timeout
[   80.143520][ T5839] Bluetooth: hci4: command tx timeout
[   80.150867][ T5856] Bluetooth: hci1: command tx timeout
[   80.161834][ T5842] veth1_vlan: entered promiscuous mode
[   80.176786][ T5841] veth1_vlan: entered promiscuous mode
[   80.183572][  T973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.291808][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.310315][ T3517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.320366][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.323062][ T3517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.346788][ T5840] veth0_macvtap: entered promiscuous mode
[   80.375306][ T5840] veth1_macvtap: entered promiscuous mode
[   80.420838][ T5841] veth0_macvtap: entered promiscuous mode
[   80.449543][ T5842] veth0_macvtap: entered promiscuous mode
[   80.453063][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   80.469492][ T5842] veth1_macvtap: entered promiscuous mode
[   80.471297][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   80.486127][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.488563][ T5841] veth1_macvtap: entered promiscuous mode
[   80.538120][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.606526][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.622862][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.653833][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.670743][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.680621][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.690150][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.705462][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.716970][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.745446][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.786265][ T5841] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.797780][ T5841] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.833249][ T5841] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.853863][ T5841] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.877797][ T5842] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.889711][ T5842] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.015132][ T5842] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.023886][ T5842] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.640199][ T5968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'.
[   81.672464][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.744914][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   81.826812][ T5958] delete_channel: no stack
[   81.869063][ T5968] bridge_slave_1 (unregistering): left allmulticast mode
[   81.902024][ T5968] bridge_slave_1 (unregistering): left promiscuous mode
[   81.924360][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.015380][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.057465][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.166360][  T973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.192640][  T973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.204411][ T5856] Bluetooth: hci4: command tx timeout
[   82.210538][ T5854] Bluetooth: hci0: command tx timeout
[   82.215101][ T5847] Bluetooth: hci2: command tx timeout
[   82.217231][ T5856] Bluetooth: hci1: command tx timeout
[   82.221836][ T5839] Bluetooth: hci3: command tx timeout
[   82.324343][ T5975] mmap: syz.2.8 (5975) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   82.354658][ T3517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.394228][ T3517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.479849][ T5975] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[   82.486501][ T5975] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   82.535613][ T5975] vhci_hcd vhci_hcd.0: Device attached
[   82.552324][   T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.567366][   T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.703246][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.713751][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.740352][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.758460][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.815154][ T5954] usb 38-1: SetAddress Request (2) to port 0
[   82.852252][ T5954] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd
[   83.167124][ T5978] vhci_hcd: connection reset by peer
[   84.310274][ T3517] vhci_hcd: stop threads
[   84.358263][ T3517] vhci_hcd: release socket
[   84.508934][ T5989] kexec: Could not allocate control_code_buffer
[   84.636345][ T5991] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[   85.035110][ T3517] vhci_hcd: disconnect device
[   85.260346][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   85.284513][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   85.294797][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   85.438551][ T6000] capability: warning: `syz.3.11' uses 32-bit capabilities (legacy support in use)
[   85.560527][ T5950] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   85.694469][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   85.713730][ T6006] capability: warning: `syz.3.11' uses deprecated v2 capabilities in a way that may be insecure
[   85.735752][ T5950] usb 3-1: Using ep0 maxpacket: 16
[   85.754498][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   85.806766][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   85.856497][ T5950] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   85.892081][ T5950] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   85.901254][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   85.902977][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   85.944686][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   85.963955][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.007024][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   86.015692][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   86.020520][ T5950] usb 3-1: config 0 descriptor??
[   86.481983][ T6015] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5'.
[   86.501409][ T5995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   86.557119][ T5995] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   86.784892][ T5901] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   86.799550][ T5950] usbhid 3-1:0.0: can't add hid device: -71
[   86.814665][ T5950] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   86.865598][   T43] cfg80211: failed to load regulatory.db
[   86.870929][ T5950] usb 3-1: USB disconnect, device number 2
[   86.962911][ T6036] comedi comedi3: 8255: I/O port conflict (0x10003,4)
[   86.991416][ T6036] comedi comedi3: 8255: I/O port conflict (0x10000,4)
[   87.008074][ T5901] usb 4-1: unable to get BOS descriptor or descriptor too short
[   87.037887][ T5901] usb 4-1: not running at top speed; connect to a high speed hub
[   87.054454][ T5901] usb 4-1: config 129 has an invalid interface number: 171 but max is 0
[   87.069811][ T5901] usb 4-1: config 129 has an invalid descriptor of length 100, skipping remainder of the config
[   87.090699][ T5901] usb 4-1: config 129 has no interface number 0
[   87.103601][ T5901] usb 4-1: config 129 interface 171 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[   87.142573][ T6036] comedi comedi3: 8255: I/O port conflict (0x7f,4)
[   87.161953][ T5901] usb 4-1: config 129 interface 171 has no altsetting 0
[   87.236931][ T5901] usb 4-1: string descriptor 0 read error: -22
[   87.253805][ T5901] usb 4-1: New USB device found, idVendor=041e, idProduct=4038, bcdDevice=66.58
[   87.344499][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.365148][ T5901] gspca_main: sq930x-2.14.0 probing 041e:4038
[   87.396285][    T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   87.620829][    T9] usb 2-1: config 0 has an invalid interface number: 235 but max is 0
[   87.688451][ T6021] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.707482][    T9] usb 2-1: config 0 has no interface number 0
[   87.713774][    T9] usb 2-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0
[   87.714925][ T6021] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.741067][ T5838] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   87.771714][    T9] usb 2-1: config 0 interface 235 has no altsetting 0
[   87.779615][ T5901] gspca_sq930x: reg_r 001f failed -71
[   87.800058][ T5901] sq930x 4-1:129.171: probe with driver sq930x failed with error -71
[   87.824346][    T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18
[   87.842333][ T5901] usb 4-1: USB disconnect, device number 2
[   87.849075][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.904618][ T5838] usb 3-1: Using ep0 maxpacket: 8
[   87.917227][ T5838] usb 3-1: unable to get BOS descriptor or descriptor too short
[   87.928467][ T5838] usb 3-1: config 9 has an invalid interface number: 145 but max is 2
[   87.938748][ T5838] usb 3-1: config 9 has an invalid interface number: 89 but max is 2
[   87.951462][ T5838] usb 3-1: config 9 has an invalid interface number: 66 but max is 2
[   87.961180][ T5838] usb 3-1: config 9 has no interface number 0
[   87.967700][    T9] usb 2-1: Product: syz
[   87.974024][ T5954] usb 38-1: device descriptor read/8, error -110
[   87.978314][ T5838] usb 3-1: config 9 has no interface number 1
[   87.985841][    T9] usb 2-1: Manufacturer: syz
[   88.004337][ T5838] usb 3-1: config 9 has no interface number 2
[   88.015449][    T9] usb 2-1: SerialNumber: syz
[   88.026354][ T5838] usb 3-1: config 9 interface 89 altsetting 3 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[   88.043798][ T5838] usb 3-1: config 9 interface 89 altsetting 3 endpoint 0xD has invalid maxpacket 512, setting to 64
[   88.055905][   T43] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   88.070059][ T5838] usb 3-1: config 9 interface 89 altsetting 3 has an invalid descriptor for endpoint zero, skipping
[   88.071178][    T9] usb 2-1: config 0 descriptor??
[   88.082444][ T5838] usb 3-1: config 9 interface 89 altsetting 3 endpoint 0x6 has invalid maxpacket 512, setting to 64
[   88.102005][ T5838] usb 3-1: config 9 interface 89 altsetting 3 has a duplicate endpoint with address 0x6, skipping
[   88.113710][ T5838] usb 3-1: config 9 interface 89 altsetting 3 has a duplicate endpoint with address 0xD, skipping
[   88.133878][    T9] keyspan 2-1:0.235: Keyspan 1 port adapter converter detected
[   88.158410][ T5838] usb 3-1: config 9 interface 89 altsetting 3 has a duplicate endpoint with address 0xA, skipping
[   88.164323][    T9] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 87
[   88.183221][ T5838] usb 3-1: config 9 interface 89 altsetting 3 endpoint 0xB has invalid maxpacket 512, setting to 64
[   88.196687][ T5838] usb 3-1: config 9 interface 145 has no altsetting 0
[   88.205611][ T5838] usb 3-1: config 9 interface 89 has no altsetting 0
[   88.212621][ T5838] usb 3-1: config 9 interface 66 has no altsetting 0
[   88.224651][   T43] usb 1-1: Using ep0 maxpacket: 32
[   88.230753][ T5838] usb 3-1: New USB device found, idVendor=0a07, idProduct=0082, bcdDevice=e1.46
[   88.248396][   T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   88.261112][   T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   88.271346][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.280900][   T43] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[   88.284310][    T9] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 7
[   88.295787][ T5838] usb 3-1: Product: syz
[   88.303006][ T5838] usb 3-1: Manufacturer: syz
[   88.324043][   T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.333971][ T5838] usb 3-1: SerialNumber: syz
[   88.453244][ T5954] usb usb38-port1: attempt power cycle
[   88.651537][   T43] usb 1-1: config 0 descriptor??
[   88.695587][    T9] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 81
[   88.725857][    T9] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 1
[   88.750295][    T9] keyspan 2-1:0.235: found no endpoint descriptor for endpoint 85
[   88.795879][    T9] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[   88.880986][    T9] usb 2-1: USB disconnect, device number 2
[   88.889031][ T5838] adutux 3-1:9.145: interrupt endpoints not found
[   88.899951][   T30] audit: type=1326 audit(1753948734.156:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6056 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feab0785967 code=0x7ffc0000
[   88.949987][ T5838] adutux 3-1:9.89: interrupt endpoints not found
[   88.983163][   T30] audit: type=1326 audit(1753948734.156:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6056 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feab072ab89 code=0x7ffc0000
[   89.018648][ T5838] adutux 3-1:9.66: interrupt endpoints not found
[   89.025251][    T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[   89.026210][    T9] keyspan 2-1:0.235: device disconnected
[   89.078519][   T30] audit: type=1326 audit(1753948734.156:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6056 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab078e9a9 code=0x7ffc0000
[   89.216192][ T5838] usb 3-1: USB disconnect, device number 3
[   89.247288][ T5954] usb usb38-port1: unable to enumerate USB device
[   89.320213][   T30] audit: type=1326 audit(1753948734.156:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6056 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feab0785967 code=0x7ffc0000
[   89.399831][ T6073] netlink: 'syz.3.21': attribute type 27 has an invalid length.
[   89.410690][ T6073] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   89.467884][   T30] audit: type=1326 audit(1753948734.156:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6056 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feab072ab89 code=0x7ffc0000
[   89.762332][   T30] audit: type=1326 audit(1753948734.156:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6056 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feab078e9a9 code=0x7ffc0000
[   89.821031][ T6078] netlink: 36 bytes leftover after parsing attributes in process `syz.1.23'.
[   89.908036][   T30] audit: type=1326 audit(1753948734.156:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6056 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feab0785967 code=0x7ffc0000
[   89.950265][ T6082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   89.970028][   T30] audit: type=1326 audit(1753948734.156:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6056 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7feab072ab89 code=0x7ffc0000
[   90.066396][ T6082] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.114542][   T30] audit: type=1326 audit(1753948734.156:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6056 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feab078e9a9 code=0x7ffc0000
[   90.144681][   T30] audit: type=1326 audit(1753948734.166:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6056 comm="syz.0.19" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7feab0785967 code=0x7ffc0000
[   90.205227][    T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   90.229933][   T43] usbhid 1-1:0.0: can't add hid device: -71
[   90.238799][   T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   90.248736][   T43] usb 1-1: USB disconnect, device number 2
[   91.832834][ T6107] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   92.384937][ T6108] netlink: 48 bytes leftover after parsing attributes in process `syz.1.33'.
[   92.440255][ T6114] netlink: 20 bytes leftover after parsing attributes in process `syz.3.34'.
[   94.437705][ T6130] netlink: 76 bytes leftover after parsing attributes in process `syz.3.36'.
[   95.605911][ T6139] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   95.792615][   T92] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   95.822219][ T6146] warning: `syz.3.44' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   95.834415][    T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   95.854445][ T5843] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   96.584923][ T5843] usb 3-1: Using ep0 maxpacket: 32
[   96.594253][   T92] usb 5-1: Using ep0 maxpacket: 16
[   96.618619][ T5843] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe
[   96.640884][   T92] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.706599][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.730694][   T92] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.752021][ T5843] usb 3-1: Product: syz
[   96.780356][ T5843] usb 3-1: Manufacturer: syz
[   96.789277][   T92] usb 5-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[   96.815422][ T5843] usb 3-1: SerialNumber: syz
[   96.834943][   T92] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.920115][    T9] usb 1-1: Using ep0 maxpacket: 32
[   96.944046][   T92] usb 5-1: config 0 descriptor??
[   96.971855][ T5843] usb 3-1: config 0 descriptor??
[   97.058552][ T6153] Zero length message leads to an empty skb
[   97.074599][ T6153] netlink: 76 bytes leftover after parsing attributes in process `syz.1.45'.
[   97.563018][ T5843] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device:
[   97.588039][ T5843] eb 00 00 00 00 00 00 00 
[   97.603740][ T5843] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -5
[   97.756364][   T92] usbhid 5-1:0.0: can't add hid device: -71
[   97.816012][   T92] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[   98.114975][    T9] usb 1-1: config index 0 descriptor too short (expected 35577, got 27)
[   98.123363][    T9] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[   98.132446][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   98.142870][   T92] usb 5-1: USB disconnect, device number 2
[   98.142881][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92
[   98.158017][    T9] usb 1-1: config 1 has no interface number 0
[   98.164193][    T9] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[   98.173418][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.191058][    T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found
[   98.370778][ T5843] usb 3-1: USB disconnect, device number 4
[   98.643561][    T9] snd_usb_pod 1-1:1.1: set_interface failed
[   98.696105][    T9] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected
[   98.711636][    T9] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -71
[   98.736814][    T9] usb 1-1: USB disconnect, device number 3
[   98.785491][ T6164] wg1 speed is unknown, defaulting to 1000
[   98.795868][ T6164] wg1 speed is unknown, defaulting to 1000
[   98.839708][ T6164] wg1 speed is unknown, defaulting to 1000
[   98.897760][ T6164] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  100.163588][ T6168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  100.206237][ T6164] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  100.504329][    T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  100.566285][ T6164] wg1 speed is unknown, defaulting to 1000
[  100.957135][ T6164] wg1 speed is unknown, defaulting to 1000
[  100.974339][    T9] usb 2-1: Using ep0 maxpacket: 8
[  101.630427][ T6164] wg1 speed is unknown, defaulting to 1000
[  101.636820][    T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  101.646044][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.667064][    T9] usb 2-1: Product: syz
[  101.698024][    T9] usb 2-1: Manufacturer: syz
[  101.738540][ T6164] wg1 speed is unknown, defaulting to 1000
[  101.795246][ T6164] wg1 speed is unknown, defaulting to 1000
[  101.899444][ T6196] netlink: 76 bytes leftover after parsing attributes in process `syz.3.56'.
[  102.483277][    T9] usb 2-1: SerialNumber: syz
[  102.574769][    T9] usb 2-1: config 0 descriptor??
[  103.183517][ T6208] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  104.908008][    T9] usb 2-1: can't set config #0, error -71
[  104.934733][    T9] usb 2-1: USB disconnect, device number 3
[  106.386740][   T92] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  106.700573][   T92] usb 2-1: device descriptor read/64, error -71
[  107.516797][   T92] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  107.715242][   T92] usb 2-1: device descriptor read/64, error -71
[  107.762883][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.65'.
[  107.790799][ T6232] netlink: 'syz.3.66': attribute type 1 has an invalid length.
[  107.815142][ T6234] ipvlan2: entered promiscuous mode
[  107.848274][   T92] usb usb2-port1: attempt power cycle
[  108.055737][ T6238] (syz.2.68,6238,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory.
[  108.234205][   T92] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  108.450946][ T6248] netlink: 76 bytes leftover after parsing attributes in process `syz.4.69'.
[  108.700264][ T6252] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  109.256479][    T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  109.294470][   T92] usb 2-1: device descriptor read/8, error -71
[  109.362268][ T6267] xt_hashlimit: size too large, truncated to 1048576
[  109.425882][    T9] usb 1-1: config index 0 descriptor too short (expected 45, got 36)
[  109.434433][    T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  109.505080][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  109.995005][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  110.012896][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  110.056037][ T6272] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.079506][    T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  110.204405][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.238739][    T9] usb 1-1: config 0 descriptor??
[  110.278121][ T6254] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  110.497612][    T9] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xd
[  110.564284][    T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  110.571911][    T9] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  110.987802][    T9] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  111.082977][    T9] usb 1-1: USB disconnect, device number 4
[  112.133948][ T6299] syz.1.84 uses obsolete (PF_INET,SOCK_PACKET)
[  112.233684][ T6299] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  112.300270][ T6299] xt_TPROXY: Can be used only with -p tcp or -p udp
[  112.350862][ T6299] input: syz1 as /devices/virtual/input/input5
[  112.517689][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.1.84'.
[  112.648834][ T6309] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  112.664298][   T92] usb 4-1: new low-speed USB device number 4 using dummy_hcd
[  113.238928][   T92] usb 4-1: Invalid ep0 maxpacket: 64
[  113.424273][   T92] usb 4-1: new low-speed USB device number 5 using dummy_hcd
[  113.692617][   T92] usb 4-1: Invalid ep0 maxpacket: 64
[  113.698600][   T92] usb usb4-port1: attempt power cycle
[  114.584717][   T92] usb 4-1: new low-speed USB device number 6 using dummy_hcd
[  114.719403][   T92] usb 4-1: Invalid ep0 maxpacket: 64
[  114.907548][   T92] usb 4-1: new low-speed USB device number 7 using dummy_hcd
[  115.007025][   T92] usb 4-1: Invalid ep0 maxpacket: 64
[  115.017742][ T6330] netlink: 60 bytes leftover after parsing attributes in process `syz.0.93'.
[  115.027092][ T6330] unsupported nlmsg_type 40
[  115.033920][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.93'.
[  115.139348][ T6321] delete_channel: no stack
[  115.148362][   T92] usb usb4-port1: unable to enumerate USB device
[  115.197611][ T6331] process 'syz.0.93' launched '/dev/fd/4' with NULL argv: empty string added
[  115.559571][ T6338] sp0: Synchronizing with TNC
[  115.577993][ T6338] sp0: Found TNC
[  115.644166][    T9] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  115.865371][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  115.926753][    T9] usb 5-1: not running at top speed; connect to a high speed hub
[  115.986898][    T9] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 655, setting to 64
[  116.042086][    T9] usb 5-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  116.126904][    T9] usb 5-1: config 1 interface 0 has no altsetting 0
[  116.144564][    T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice= 0.40
[  116.164498][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.203732][    T9] usb 5-1: Product: syz
[  116.228338][    T9] usb 5-1: Manufacturer: syz
[  116.248633][    T9] usb 5-1: SerialNumber: syz
[  116.296453][ T6335] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  116.325961][ T6346] netlink: 20 bytes leftover after parsing attributes in process `syz.0.98'.
[  116.536927][    T9] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input6
[  116.627202][ T5191] bcm5974 5-1:1.0: could not read from device
[  116.690090][ T5191] bcm5974 5-1:1.0: could not read from device
[  116.712252][    T9] usb 5-1: USB disconnect, device number 3
[  117.864716][ T6364] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  118.874391][    T9] usb 4-1: new low-speed USB device number 8 using dummy_hcd
[  119.038411][ T6386] =======================================================
[  119.038411][ T6386] WARNING: The mand mount option has been deprecated and
[  119.038411][ T6386]          and is ignored by this kernel. Remove the mand
[  119.038411][ T6386]          option from the mount to silence this warning.
[  119.038411][ T6386] =======================================================
[  119.187581][    T9] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  119.248941][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.421995][    T9] usb 4-1: config 0 descriptor??
[  120.146543][ T1209] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[  120.322742][ T6393] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  120.364445][ T1209] usb 2-1: device descriptor read/64, error -71
[  121.427523][ T1209] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  121.486721][    T9] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  121.500996][    T9] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  121.518192][    T9] asix 4-1:0.0: probe with driver asix failed with error -71
[  121.529632][    T9] usb 4-1: USB disconnect, device number 8
[  121.575697][ T1209] usb 2-1: device descriptor read/64, error -71
[  121.670772][ T3517] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.696353][ T1209] usb usb2-port1: attempt power cycle
[  121.837786][ T3517] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.949897][ T3517] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.999393][ T6422] xt_hashlimit: overflow, try lower: 18446744073709551615/7
[  122.064191][ T1209] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  122.103385][ T1209] usb 2-1: device descriptor read/8, error -71
[  122.120718][ T3517] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.166756][ T6425] genirq: Flags mismatch irq 4. 00200000 (pcmmio) vs. 00200080 (ttyS0)
[  122.193924][ T6425] genirq: Flags mismatch irq 4. 00200000 (pcmmio) vs. 00200080 (ttyS0)
[  122.269858][ T6426] iso9660: Unknown parameter '/dev/kvm'
[  122.277680][ T6427] iso9660: Unknown parameter '/dev/kvm'
[  122.340753][ T3517] bridge_slave_1: left allmulticast mode
[  122.350530][ T3517] bridge_slave_1: left promiscuous mode
[  122.365720][ T3517] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.374214][ T1209] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  122.403310][ T3517] bridge_slave_0: left allmulticast mode
[  122.412308][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  122.414226][ T3517] bridge_slave_0: left promiscuous mode
[  122.424396][ T1209] usb 2-1: device descriptor read/8, error -71
[  122.432596][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  122.441822][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  122.453412][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  122.474476][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  122.480129][ T3517] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.567169][ T1209] usb usb2-port1: unable to enumerate USB device
[  122.714468][ T5950] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  122.825926][ T5954] usb 1-1: new low-speed USB device number 5 using dummy_hcd
[  122.830197][ T6441] netlink: 40 bytes leftover after parsing attributes in process `syz.3.131'.
[  122.917044][ T5950] usb 3-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b
[  122.926792][ T1209] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  122.934546][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.951739][ T5950] usb 3-1: config 0 descriptor??
[  122.977889][ T5954] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  122.987058][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.999811][ T5954] usb 1-1: config 0 descriptor??
[  123.058213][ T3517] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  123.076619][ T3517] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  123.089587][ T3517] bond0 (unregistering): Released all slaves
[  123.114563][ T1209] usb 2-1: Using ep0 maxpacket: 8
[  123.116199][ T6441] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  123.131597][ T6441] gretap1: entered promiscuous mode
[  123.155350][ T1209] usb 2-1: unable to get BOS descriptor or descriptor too short
[  123.170164][ T6441] gretap1: entered allmulticast mode
[  123.186309][ T6435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.196923][ T1209] usb 2-1: config 248 has an invalid interface number: 3 but max is 2
[  123.201864][ T6435] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.212280][ T1209] usb 2-1: config 248 has an invalid interface number: 190 but max is 2
[  123.220566][ T6435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.228835][ T6431] wg1 speed is unknown, defaulting to 1000
[  123.245309][ T6435] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.251442][ T1209] usb 2-1: config 248 has an invalid interface number: 111 but max is 2
[  123.264372][ T1209] usb 2-1: config 248 has no interface number 0
[  123.273626][ T1209] usb 2-1: config 248 has no interface number 1
[  123.304402][ T1209] usb 2-1: config 248 has no interface number 2
[  123.311021][ T1209] usb 2-1: config 248 interface 3 has no altsetting 0
[  123.336630][ T1209] usb 2-1: config 248 interface 190 has no altsetting 0
[  123.343797][ T1209] usb 2-1: config 248 interface 111 has no altsetting 0
[  123.355794][ T1209] usb 2-1: New USB device found, idVendor=05c6, idProduct=9212, bcdDevice=91.28
[  123.367948][ T1209] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.376271][ T1209] usb 2-1: Product: syz
[  123.381502][ T1209] usb 2-1: Manufacturer: syz
[  123.386368][ T1209] usb 2-1: SerialNumber: syz
[  123.463329][ T5950] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  123.486346][ T5950] asix 3-1:0.0: probe with driver asix failed with error -71
[  123.504721][ T5950] usb 3-1: USB disconnect, device number 5
[  123.541222][ T3517] hsr_slave_0: left promiscuous mode
[  123.548863][ T3517] hsr_slave_1: left promiscuous mode
[  123.555262][ T3517] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.562927][ T3517] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.580530][ T3517] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  123.589330][ T3517] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.621199][ T1209] usb 2-1: USB disconnect, device number 12
[  123.623916][ T3517] veth1_macvtap: left promiscuous mode
[  123.634777][ T3517] veth0_macvtap: left promiscuous mode
[  123.640482][ T3517] veth1_vlan: left promiscuous mode
[  123.646030][    T9] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  123.654974][ T3517] veth0_vlan: left promiscuous mode
[  123.827304][    T9] usb 4-1: config 0 has an invalid interface number: 231 but max is 0
[  123.848136][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  123.861366][    T9] usb 4-1: config 0 has no interface number 0
[  123.885635][    T9] usb 4-1: config 0 interface 231 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  123.899192][    T9] usb 4-1: config 0 interface 231 has no altsetting 0
[  123.934032][    T9] usb 4-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=21.78
[  123.943468][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.956544][    T9] usb 4-1: Product: syz
[  123.971909][    T9] usb 4-1: Manufacturer: syz
[  123.984208][    T9] usb 4-1: SerialNumber: syz
[  123.997230][    T9] usb 4-1: config 0 descriptor??
[  124.223373][    T9] asix 4-1:0.231 (unnamed net_device) (uninitialized): invalid hw address, using random
[  124.302171][ T3517] team0 (unregistering): Port device team_slave_1 removed
[  124.374055][ T3517] team0 (unregistering): Port device team_slave_0 removed
[  124.434954][ T6460] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  124.530508][ T5839] Bluetooth: hci2: command tx timeout
[  124.647868][    T9] asix 4-1:0.231 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  124.666482][    T9] asix 4-1:0.231 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  124.862378][    T9] asix 4-1:0.231 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  124.985928][    T9] asix 4-1:0.231 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  125.361529][ T6461] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  125.378991][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.3.141'.
[  125.504710][   T92] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  125.518101][    T9] asix 4-1:0.231 eth5: register 'asix' at usb-dummy_hcd.3-1, ASIX AX88178 USB 2.0 Ethernet, 8e:14:36:08:8d:73
[  125.519596][ T6472] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0)
[  125.545984][    T9] usb 4-1: USB disconnect, device number 9
[  125.546557][ T6472] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535
[  125.552736][    T9] asix 4-1:0.231 eth5: unregister 'asix' usb-dummy_hcd.3-1, ASIX AX88178 USB 2.0 Ethernet
[  125.621027][ T5954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  125.632089][ T5954] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  125.643199][ T5954] asix 1-1:0.0: probe with driver asix failed with error -71
[  125.656474][ T5954] usb 1-1: USB disconnect, device number 5
[  125.674440][   T92] usb 3-1: Using ep0 maxpacket: 16
[  125.691256][   T92] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[  125.715051][   T92] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  125.754611][   T92] usb 3-1: config 0 has no interface number 0
[  125.879360][ T6431] chnl_net:caif_netlink_parms(): no params data found
[  125.911594][   T92] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  125.926223][   T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.944245][   T92] usb 3-1: Product: syz
[  125.953053][   T92] usb 3-1: Manufacturer: syz
[  126.514001][   T92] usb 3-1: SerialNumber: syz
[  126.539483][   T92] usb 3-1: config 0 descriptor??
[  126.621534][ T5839] Bluetooth: hci2: command tx timeout
[  126.658303][   T92] usb 3-1: Found UVC 0.00 device syz (046d:08f3)
[  126.681110][   T92] usb 3-1: No valid video chain found.
[  127.383458][ T6468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  127.392419][ T6468] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  127.411118][ T5954] usb 3-1: USB disconnect, device number 6
[  127.448472][ T6431] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.456734][ T6431] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.464041][ T6431] bridge_slave_0: entered allmulticast mode
[  127.477974][ T6431] bridge_slave_0: entered promiscuous mode
[  127.487068][ T6431] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.497141][ T6431] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.504700][ T6431] bridge_slave_1: entered allmulticast mode
[  127.513871][ T6431] bridge_slave_1: entered promiscuous mode
[  127.569894][ T6431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  127.588600][ T6431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  127.773027][ T6431] team0: Port device team_slave_0 added
[  127.788015][ T6431] team0: Port device team_slave_1 added
[  127.794609][    T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  127.831184][ T6431] batman_adv: batadv0: Adding interface: batadv_slave_0
[  127.839116][ T6431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.867366][ T6431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  127.879866][ T6431] batman_adv: batadv0: Adding interface: batadv_slave_1
[  127.888572][ T6431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.915148][ T6431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  127.956843][    T9] usb 1-1: config index 0 descriptor too short (expected 23569, got 27)
[  127.970012][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  127.988089][    T9] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  127.997662][   T10] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  128.018653][    T9] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  128.054635][    T9] usb 1-1: Manufacturer: syz
[  128.072298][ T6431] hsr_slave_0: entered promiscuous mode
[  128.079445][    T9] usb 1-1: config 0 descriptor??
[  128.091344][ T6431] hsr_slave_1: entered promiscuous mode
[  128.098524][ T6431] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  128.106402][ T6431] Cannot create hsr debugfs directory
[  128.109228][    T9] igorplugusb 1-1:0.0: incorrect number of endpoints
[  128.166063][   T10] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  128.183625][   T10] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.239866][   T10] usb 2-1: config 0 interface 0 has no altsetting 0
[  128.270788][   T10] usb 2-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00
[  128.304680][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.356507][   T10] usb 2-1: config 0 descriptor??
[  128.446468][ T6514] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  128.552422][ T6513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.581790][ T6513] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.705788][ T5839] Bluetooth: hci2: command tx timeout
[  128.730413][ T6513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.919647][ T6513] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.964111][    C0] hrtimer: interrupt took 47013 ns
[  129.178689][   T92] usb 1-1: USB disconnect, device number 6
[  129.728159][   T10] lenovo 0003:17EF:60EE.0002: hidraw0: USB HID v0.01 Device [HID 17ef:60ee] on usb-dummy_hcd.1-1/input0
[  129.755724][ T6523] netlink: 'syz.3.152': attribute type 3 has an invalid length.
[  129.763945][ T6523] netlink: 'syz.3.152': attribute type 1 has an invalid length.
[  129.788534][ T6523] netlink: 220 bytes leftover after parsing attributes in process `syz.3.152'.
[  129.905577][ T6523] team0 (unregistering): Port device team_slave_0 removed
[  129.926994][ T6523] team0 (unregistering): Port device team_slave_1 removed
[  129.954347][   T92] usb 3-1: new low-speed USB device number 7 using dummy_hcd
[  130.060649][ T6431] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  130.084853][ T6431] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  130.109727][ T6431] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  130.131932][   T92] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  130.154218][   T92] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.162393][ T6431] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  130.186045][   T92] usb 3-1: config 0 descriptor??
[  130.816829][ T5839] Bluetooth: hci2: command tx timeout
[  130.910138][   T10] lenovo 0003:17EF:60EE.0002: Failed to switch middle button: -71
[  130.929007][   T10] lenovo 0003:17EF:60EE.0002: Fn-lock setting failed: -71
[  130.944727][   T10] lenovo 0003:17EF:60EE.0002: Sensitivity setting failed: -71
[  130.977005][   T10] usb 2-1: USB disconnect, device number 13
[  131.013306][ T6527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  131.035533][ T6431] 8021q: adding VLAN 0 to HW filter on device bond0
[  131.089897][ T6431] 8021q: adding VLAN 0 to HW filter on device team0
[  131.111810][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.119108][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  131.152908][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.160100][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  131.484337][   T92] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  131.515669][   T92] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  131.771275][   T92] asix 3-1:0.0: probe with driver asix failed with error -71
[  131.825001][   T92] usb 3-1: USB disconnect, device number 7
[  131.846968][ T6431] 8021q: adding VLAN 0 to HW filter on device batadv0
[  132.204515][   T92] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  132.575493][   T92] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
[  132.594626][   T92] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  132.609416][   T92] usb 3-1: config 0 interface 0 has no altsetting 0
[  132.617604][   T92] usb 3-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.00
[  132.626849][   T92] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.641825][   T92] usb 3-1: config 0 descriptor??
[  133.058121][   T92] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  133.104550][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  133.111291][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  133.540984][ T6431] veth0_vlan: entered promiscuous mode
[  133.585594][ T6431] veth1_vlan: entered promiscuous mode
[  133.658334][ T6591] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  134.161732][ T6431] veth0_macvtap: entered promiscuous mode
[  134.297636][ T6431] veth1_macvtap: entered promiscuous mode
[  134.320338][ T6431] batman_adv: batadv0: Interface activated: batadv_slave_0
[  134.332838][ T6431] batman_adv: batadv0: Interface activated: batadv_slave_1
[  134.383786][ T6431] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  134.414284][ T6431] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  134.423295][ T6431] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  134.440409][ T6431] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  134.737219][ T5950] usb 1-1: new low-speed USB device number 7 using dummy_hcd
[  135.063435][ T3014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.075749][ T3014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.131123][ T3517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.143939][ T3517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.255170][   T10] usb 3-1: USB disconnect, device number 8
[  135.299442][ T6607] netlink: 20 bytes leftover after parsing attributes in process `syz.1.168'.
[  135.314848][ T5950] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  135.323942][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.345010][ T5950] usb 1-1: config 0 descriptor??
[  135.355169][    T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  135.418890][ T6612] netlink: 16 bytes leftover after parsing attributes in process `syz.2.169'.
[  135.518310][    T9] usb 4-1: Using ep0 maxpacket: 32
[  135.548986][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  135.601747][    T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00
[  135.624712][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.650258][    T9] usb 4-1: config 0 descriptor??
[  135.860354][ T6603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.908511][ T6603] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  136.143628][    T9] mcp2200 0003:04D8:00DF.0003: USB HID v0.00 Device [HID 04d8:00df] on usb-dummy_hcd.3-1/input0
[  136.347357][    T9] usb 4-1: USB disconnect, device number 10
[  136.415025][ T5950] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  136.457753][ T5950] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  136.513087][ T5950] asix 1-1:0.0: probe with driver asix failed with error -71
[  136.567805][ T5950] usb 1-1: USB disconnect, device number 7
[  136.603834][ T6625] netlink: 60 bytes leftover after parsing attributes in process `syz.0.172'.
[  136.646206][ T6625] netlink: 60 bytes leftover after parsing attributes in process `syz.0.172'.
[  136.700598][ T6626] netlink: 60 bytes leftover after parsing attributes in process `syz.0.172'.
[  137.293049][   T30] kauditd_printk_skb: 84 callbacks suppressed
[  137.293063][   T30] audit: type=1326 audit(1753948782.446:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6629 comm="syz.1.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f184458e9a9 code=0x7ffc0000
[  137.348095][   T30] audit: type=1326 audit(1753948782.446:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6629 comm="syz.1.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f184458e9a9 code=0x7ffc0000
[  137.371182][   T30] audit: type=1326 audit(1753948782.446:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6629 comm="syz.1.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f184458e9a9 code=0x7ffc0000
[  137.430885][ T6636] netlink: 20 bytes leftover after parsing attributes in process `syz.2.176'.
[  137.447934][   T30] audit: type=1326 audit(1753948782.446:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6629 comm="syz.1.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f184458e9a9 code=0x7ffc0000
[  137.516322][   T30] audit: type=1326 audit(1753948782.446:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6629 comm="syz.1.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f184458e9a9 code=0x7ffc0000
[  137.555680][   T30] audit: type=1326 audit(1753948782.446:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6629 comm="syz.1.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f184458e9a9 code=0x7ffc0000
[  137.588743][   T30] audit: type=1326 audit(1753948782.446:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6629 comm="syz.1.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f184458e9a9 code=0x7ffc0000
[  137.613892][   T30] audit: type=1326 audit(1753948782.446:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6629 comm="syz.1.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f184458e9a9 code=0x7ffc0000
[  137.733633][   T30] audit: type=1326 audit(1753948782.446:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6629 comm="syz.1.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f184458d310 code=0x7ffc0000
[  137.770922][   T30] audit: type=1326 audit(1753948782.446:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6629 comm="syz.1.174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f184458e9a9 code=0x7ffc0000
[  138.204366][ T5950] usb 4-1: new low-speed USB device number 11 using dummy_hcd
[  138.244160][   T92] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  138.446559][ T5950] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  138.505618][   T92] usb 3-1: Using ep0 maxpacket: 16
[  138.513022][   T92] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  138.535281][   T92] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  138.546681][   T92] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  138.556472][   T92] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.132421][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.208368][ T5950] usb 4-1: config 0 descriptor??
[  139.289065][   T92] usb 3-1: config 0 descriptor??
[  139.341150][ T6676] netlink: 'syz.0.187': attribute type 1 has an invalid length.
[  139.742371][   T92] hid-multitouch 0003:1FD2:6007.0004: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0
[  139.984206][   T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  140.124859][   T10] usb 6-1: device descriptor read/64, error -71
[  140.194189][   T92] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  140.235705][ T5950] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  140.248327][ T5950] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  140.265120][ T5950] asix 4-1:0.0: probe with driver asix failed with error -71
[  140.308066][ T5950] usb 4-1: USB disconnect, device number 11
[  140.374304][   T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  140.391778][   T92] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  140.406776][   T92] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  140.434202][   T92] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  140.454348][   T92] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  140.464832][   T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.524174][   T10] usb 6-1: device descriptor read/64, error -71
[  140.545072][ T6690] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22
[  140.734568][   T10] usb usb6-port1: attempt power cycle
[  141.592481][   T92] aiptek 2-1:17.0: Aiptek using 400 ms programming speed
[  141.608780][   T92] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input7
[  141.667554][   T92] usb 2-1: USB disconnect, device number 14
[  141.673549][    C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  141.694235][   T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  141.762834][ T6706] wg1 speed is unknown, defaulting to 1000
[  141.788796][   T10] usb 6-1: device descriptor read/8, error -71
[  141.871992][ T5950] usb 3-1: USB disconnect, device number 9
[  142.077110][ T6716] wg1 speed is unknown, defaulting to 1000
[  142.164336][   T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  142.204392][   T10] usb 6-1: device descriptor read/8, error -71
[  142.416929][ T6723] syz.1.196 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  142.438600][   T10] usb usb6-port1: unable to enumerate USB device
[  142.664315][   T92] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  142.824341][   T92] usb 2-1: Using ep0 maxpacket: 16
[  142.844302][   T92] usb 2-1: config 0 has an invalid interface number: 242 but max is 0
[  142.863213][   T92] usb 2-1: config 0 has no interface number 0
[  142.893521][   T92] usb 2-1: config 0 interface 242 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  142.934135][   T92] usb 2-1: config 0 interface 242 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  142.976665][   T92] usb 2-1: config 0 interface 242 has no altsetting 0
[  143.007224][   T92] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00
[  143.047293][   T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.109465][   T92] usb 2-1: config 0 descriptor??
[  143.604214][   T10] usb 3-1: new low-speed USB device number 10 using dummy_hcd
[  143.693755][   T92] usbhid 2-1:0.242: can't add hid device: -71
[  143.712531][   T92] usbhid 2-1:0.242: probe with driver usbhid failed with error -71
[  143.732438][   T92] usb 2-1: USB disconnect, device number 15
[  143.846249][   T10] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  143.856605][   T43] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  143.864128][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.895440][   T10] usb 3-1: config 0 descriptor??
[  143.984404][ T6746] Illegal XDP return value 212 on prog  (id 59) dev N/A, expect packet loss!
[  144.038614][   T43] usb 4-1: Using ep0 maxpacket: 32
[  144.050568][   T43] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  144.074162][   T43] usb 4-1: config 0 has no interface number 0
[  144.086975][   T43] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  144.104154][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.122680][   T43] usb 4-1: Product: syz
[  144.127270][   T43] usb 4-1: Manufacturer: syz
[  144.131898][   T43] usb 4-1: SerialNumber: syz
[  144.155024][   T43] usb 4-1: config 0 descriptor??
[  144.163337][   T43] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  144.189401][   T43] usb 4-1: selecting invalid altsetting 1
[  144.204184][   T43] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  144.227208][   T43] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  144.272485][   T43] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  144.302824][   T43] usb 4-1: media controller created
[  144.417512][   T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  144.451777][ T6752] wg1 speed is unknown, defaulting to 1000
[  144.832134][   T10] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  144.872471][   T10] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  144.895726][   T10] asix 3-1:0.0: probe with driver asix failed with error -71
[  144.937545][   T10] usb 3-1: USB disconnect, device number 10
[  145.314354][    T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  145.614199][    T9] usb 2-1: Using ep0 maxpacket: 16
[  145.664949][    T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16
[  145.685925][    T9] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  145.704356][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  145.714865][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  145.723063][    T9] usb 2-1: SerialNumber: syz
[  145.739324][ T6771] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  145.754516][ T6771] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  145.806690][ T6742] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  145.822011][   T43] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  146.007141][    T9] cdc_acm 2-1:1.0: ttyACM0: USB ACM device
[  146.062742][   T43] usb 4-1: USB disconnect, device number 12
[  146.063367][    T9] usb 2-1: USB disconnect, device number 16
[  146.597164][   T43] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  147.513404][   T24] wg1 speed is unknown, defaulting to 1000
[  147.520540][   T43] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  147.615124][   T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  147.672498][ T6801] input input8: cannot allocate more than FF_MAX_EFFECTS effects
[  147.731989][   T43] usb 3-1: config 0 has no interface number 0
[  147.924495][   T10] usb 4-1: Using ep0 maxpacket: 16
[  147.982343][ T6795] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  147.989907][ T6795] IPv6: NLM_F_CREATE should be set when creating new route
[  148.010241][   T43] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  148.010267][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[  148.032677][   T10] usb 4-1: unable to read config index 0 descriptor/start: -71
[  148.058797][   T10] usb 4-1: can't read configurations, error -71
[  148.071231][   T43] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  148.081967][   T43] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  148.098136][   T43] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  148.107543][   T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.148905][   T43] usb 3-1: config 0 descriptor??
[  148.304202][ T5950] usb 2-1: new low-speed USB device number 17 using dummy_hcd
[  148.454436][ T5911] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  148.465948][ T5950] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  148.475945][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.488518][ T5950] usb 2-1: config 0 descriptor??
[  148.624424][ T5911] usb 6-1: device descriptor read/64, error -71
[  148.797013][ T6789] input: syz0 as /devices/virtual/input/input9
[  148.874732][ T5911] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  148.969748][   T43] usbhid 3-1:0.1: can't add hid device: -71
[  148.988276][   T43] usbhid 3-1:0.1: probe with driver usbhid failed with error -71
[  149.015279][ T5911] usb 6-1: device descriptor read/64, error -71
[  149.032833][   T43] usb 3-1: USB disconnect, device number 11
[  149.174990][ T5911] usb usb6-port1: attempt power cycle
[  149.577879][ T5950] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  149.697262][ T5950] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  149.728183][ T5911] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  149.814644][ T5911] usb 6-1: device descriptor read/8, error -71
[  150.114943][ T5911] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  150.469736][ T5911] usb 6-1: device descriptor read/8, error -71
[  150.991919][ T5911] usb usb6-port1: unable to enumerate USB device
[  151.029186][ T5950] asix 2-1:0.0: probe with driver asix failed with error -71
[  151.040329][ T5950] usb 2-1: USB disconnect, device number 17
[  151.434486][    T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  152.004162][    T9] usb 1-1: Using ep0 maxpacket: 8
[  152.015763][    T9] usb 1-1: config 0 has an invalid descriptor of length 41, skipping remainder of the config
[  152.034162][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  152.074763][    T9] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[  152.118726][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.182313][    T9] usb 1-1: config 0 descriptor??
[  152.208323][ T6866] netlink: 32 bytes leftover after parsing attributes in process `syz.1.240'.
[  152.218884][ T6865] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  152.245191][ T6865] CIFS mount error: No usable UNC path provided in device string!
[  152.245191][ T6865] 
[  152.255454][ T6865] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  152.269236][ T6865] veth1_macvtap: left promiscuous mode
[  152.274926][ T6865] macsec0: entered promiscuous mode
[  152.326030][ T6868] netlink: 32 bytes leftover after parsing attributes in process `syz.1.240'.
[  152.997884][ T6883] wg1 speed is unknown, defaulting to 1000
[  154.401535][ T5950] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  154.522167][    T9] usb 1-1: string descriptor 0 read error: -71
[  154.535853][    T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  154.546144][    T9] usb 1-1: USB disconnect, device number 8
[  154.684415][ T5950] usb 4-1: device descriptor read/64, error -71
[  154.994173][ T5950] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  155.125796][ T5950] usb 4-1: device descriptor read/64, error -71
[  155.238673][ T5950] usb usb4-port1: attempt power cycle
[  155.594388][ T5950] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  155.626163][ T5950] usb 4-1: device descriptor read/8, error -71
[  155.804517][ T5911] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  155.862977][ T6910] netlink: 68 bytes leftover after parsing attributes in process `syz.2.253'.
[  155.873041][ T5950] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  155.873669][ T6910] netlink: 68 bytes leftover after parsing attributes in process `syz.2.253'.
[  155.890428][ T6910] netlink: 10 bytes leftover after parsing attributes in process `syz.2.253'.
[  155.905337][ T5950] usb 4-1: device descriptor read/8, error -71
[  155.974310][ T5911] usb 1-1: Using ep0 maxpacket: 16
[  155.984707][ T5911] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  156.000291][ T5911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  156.015736][ T5911] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  156.031683][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.034485][ T5950] usb usb4-port1: unable to enumerate USB device
[  156.047783][ T5911] usb 1-1: Product: syz
[  156.052181][ T5911] usb 1-1: Manufacturer: syz
[  156.060419][ T5911] usb 1-1: SerialNumber: syz
[  156.068240][ T5911] usb 1-1: config 0 descriptor??
[  156.075654][ T5911] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  156.087786][ T5911] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  156.506398][ T6908] netlink: 'syz.0.252': attribute type 1 has an invalid length.
[  156.736633][ T5911] em28xx 1-1:0.0: chip ID is em2874
[  157.017104][ T5950] usb 1-1: USB disconnect, device number 9
[  157.034756][ T5950] em28xx 1-1:0.0: Disconnecting em28xx
[  157.051055][ T5950] em28xx 1-1:0.0: Freeing device
[  157.059343][ T6925] siw: device registration error -23
[  157.385445][ T5911] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  157.634566][ T5911] usb 3-1: Using ep0 maxpacket: 8
[  158.154553][ T5911] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  158.163918][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.172072][ T5911] usb 3-1: Product: syz
[  158.194050][ T5911] usb 3-1: Manufacturer: syz
[  158.211637][ T5911] usb 3-1: SerialNumber: syz
[  158.225748][ T5911] usb 3-1: config 0 descriptor??
[  158.442539][ T5911] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  159.056361][ T6949] team_slave_1: entered allmulticast mode
[  159.414439][ T5950] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  160.374451][ T5911] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  160.450964][ T5950] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  160.589519][ T5950] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  160.620117][ T5911] usb 3-1: USB disconnect, device number 12
[  160.620715][ T5950] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  160.649414][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  160.661413][ T5950] usb 4-1: SerialNumber: syz
[  160.937834][ T5950] usb 4-1: 0:2 : does not exist
[  160.943109][ T5950] usb 4-1: unit 5 not found!
[  161.406824][ T5950] usb 4-1: USB disconnect, device number 19
[  162.513024][ T6990] netlink: 'syz.2.275': attribute type 4 has an invalid length.
[  163.920777][ T6990] syz.2.275 (6990) used greatest stack depth: 19760 bytes left
[  165.304521][ T7000] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad)
[  165.311000][ T7000] PKCS7: Only support pkcs7_signedData type
[  165.732675][ T7024] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  165.774145][    T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  165.799408][ T5838] libceph: connect (1)[c::]:6789 error -101
[  165.811806][ T5838] libceph: mon0 (1)[c::]:6789 connect error
[  165.888607][ T7030] veth0_to_bridge: entered promiscuous mode
[  165.926053][    T9] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  165.944145][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.965571][    T9] usb 3-1: config 0 descriptor??
[  166.087934][ T5838] libceph: connect (1)[c::]:6789 error -101
[  166.094041][ T5838] libceph: mon0 (1)[c::]:6789 connect error
[  166.178972][    T9] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  166.388582][    T9] [drm:udl_init] *ERROR* Selecting channel failed
[  166.420319][    T9] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2
[  166.427336][    T9] [drm] Initialized udl on minor 2
[  166.439848][    T9] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  166.458224][    T9] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  166.471666][   T10] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  166.484528][    T9] usb 3-1: USB disconnect, device number 13
[  166.513293][   T10] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  166.675626][   T10] libceph: connect (1)[c::]:6789 error -101
[  166.681933][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  166.695880][ T7025] veth0_to_bridge: left promiscuous mode
[  166.712307][ T7026] ceph: No mds server is up or the cluster is laggy
[  167.286032][ T7046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  167.311506][ T7050] 9pnet_fd: Insufficient options for proto=fd
[  167.328206][ T7050] syz_tun: entered promiscuous mode
[  167.341167][ T7050] syz_tun: entered allmulticast mode
[  167.426206][ T7050] team0: Port device syz_tun added
[  167.539730][ T7055] omfs: Invalid superblock (0)
[  168.764306][ T7057] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10)
[  168.770951][ T7057] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  168.778944][ T7057] vhci_hcd vhci_hcd.0: Device attached
[  168.787131][ T7059] vhci_hcd: connection closed
[  168.794154][ T6469] vhci_hcd: stop threads
[  168.820394][ T6469] vhci_hcd: release socket
[  168.851437][ T6469] vhci_hcd: disconnect device
[  169.460495][ T5847] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  169.470033][ T5847] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  169.480162][ T5847] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  169.489420][ T5847] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  169.505479][ T5847] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  169.823861][  T973] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.920650][ T7075] wg1 speed is unknown, defaulting to 1000
[  170.005143][  T973] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.174315][ T5838] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  170.177205][  T973] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.347257][  T973] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.437553][ T7075] chnl_net:caif_netlink_parms(): no params data found
[  170.542198][ T5838] usb 6-1: Using ep0 maxpacket: 16
[  170.596504][ T5838] usb 6-1: unable to get BOS descriptor or descriptor too short
[  170.634956][ T5838] usb 6-1: config 7 has an invalid interface number: 79 but max is 0
[  170.643227][ T5838] usb 6-1: config 7 has no interface number 0
[  170.655680][ T5838] usb 6-1: config 7 interface 79 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64
[  170.704171][ T5838] usb 6-1: config 7 interface 79 altsetting 6 endpoint 0x7 has an invalid bInterval 64, changing to 10
[  171.224702][ T7101] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  171.280377][   T10] wg1 speed is unknown, defaulting to 1000
[  171.286679][   T10] syz0: Port: 1 Link DOWN
[  171.308232][ T5838] usb 6-1: config 7 interface 79 has no altsetting 0
[  171.349292][ T5838] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=f4.98
[  171.369323][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.411025][ T5838] usb 6-1: Product: syz
[  171.428163][ T5838] usb 6-1: Manufacturer: syz
[  171.434937][    T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  171.452389][ T5838] usb 6-1: SerialNumber: syz
[  171.473526][ T7075] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.483868][ T7075] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.494031][ T7075] bridge_slave_0: entered allmulticast mode
[  171.522491][ T7075] bridge_slave_0: entered promiscuous mode
[  171.564299][ T5839] Bluetooth: hci5: command tx timeout
[  171.584315][    T9] usb 4-1: device descriptor read/64, error -71
[  171.703076][ T7075] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.717575][ T7089] netlink: 'syz.5.300': attribute type 1 has an invalid length.
[  171.749637][ T7075] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.782328][ T7075] bridge_slave_1: entered allmulticast mode
[  171.811063][ T7075] bridge_slave_1: entered promiscuous mode
[  171.969000][    T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  172.082033][ T7075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  172.145064][    T9] usb 4-1: device descriptor read/64, error -71
[  172.155939][ T5838] usb 6-1: USB disconnect, device number 10
[  172.210670][ T7075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  172.254743][    T9] usb usb4-port1: attempt power cycle
[  172.320756][  T973] bridge_slave_1: left allmulticast mode
[  172.340409][  T973] bridge_slave_1: left promiscuous mode
[  172.357129][  T973] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.379663][  T973] bridge_slave_0: left allmulticast mode
[  172.391505][  T973] bridge_slave_0: left promiscuous mode
[  172.404682][  T973] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.614426][    T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  172.646282][    T9] usb 4-1: device descriptor read/8, error -71
[  172.866248][ T7109] netlink: 'syz.5.306': attribute type 21 has an invalid length.
[  172.871790][ T7108] loop3: detected capacity change from 0 to 1
[  172.906695][    T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  172.909604][ T7108] Dev loop3: unable to read RDB block 1
[  172.920790][ T7108]  loop3: unable to read partition table
[  172.935464][    T9] usb 4-1: device descriptor read/8, error -71
[  172.958903][ T7108] loop3: partition table beyond EOD, truncated
[  172.967610][ T7108] loop_reread_partitions: partition scan of loop3 (�被x������ ) failed (rc=-5)
[  173.132976][    T9] usb usb4-port1: unable to enumerate USB device
[  173.265814][  T973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  173.277817][  T973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  173.288448][  T973] bond0 (unregistering): Released all slaves
[  173.317155][ T7109] netlink: 'syz.5.306': attribute type 1 has an invalid length.
[  173.623026][ T7075] team0: Port device team_slave_0 added
[  173.645748][ T5839] Bluetooth: hci5: command tx timeout
[  173.741858][ T7075] team0: Port device team_slave_1 added
[  174.615399][ T7075] batman_adv: batadv0: Adding interface: batadv_slave_0
[  174.632323][ T7075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.662656][ T7075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  175.007503][ T7075] batman_adv: batadv0: Adding interface: batadv_slave_1
[  175.019123][ T7075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  175.066905][ T7075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  175.149272][ T7137] dummy0 speed is unknown, defaulting to 1000
[  175.191392][  T973] hsr_slave_0: left promiscuous mode
[  175.211119][  T973] hsr_slave_1: left promiscuous mode
[  175.222179][  T973] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  175.236120][  T973] batman_adv: batadv0: Removing interface: batadv_slave_0
[  175.248796][  T973] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  175.269008][  T973] batman_adv: batadv0: Removing interface: batadv_slave_1
[  175.314847][  T973] veth1_macvtap: left promiscuous mode
[  175.320778][  T973] veth0_macvtap: left promiscuous mode
[  175.326843][  T973] veth1_vlan: left promiscuous mode
[  175.332454][  T973] veth0_vlan: left promiscuous mode
[  175.724264][ T5839] Bluetooth: hci5: command tx timeout
[  175.773720][ T7148] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  177.101979][  T973] team0 (unregistering): Port device team_slave_1 removed
[  177.261823][  T973] team0 (unregistering): Port device team_slave_0 removed
[  177.809448][ T5839] Bluetooth: hci5: command tx timeout
[  177.937803][ T7159] delete_channel: no stack
[  178.300080][ T7137] dummy0 speed is unknown, defaulting to 1000
[  178.322447][ T7137] dummy0 speed is unknown, defaulting to 1000
[  178.427939][ T7137] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  178.518013][ T7137] dummy0 speed is unknown, defaulting to 1000
[  178.741783][ T7075] hsr_slave_0: entered promiscuous mode
[  178.748483][ T7075] hsr_slave_1: entered promiscuous mode
[  178.755610][ T7075] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  178.766047][ T7075] Cannot create hsr debugfs directory
[  178.785569][ T7137] dummy0 speed is unknown, defaulting to 1000
[  178.805325][ T7137] dummy0 speed is unknown, defaulting to 1000
[  178.912761][ T7137] dummy0 speed is unknown, defaulting to 1000
[  178.974481][ T5838] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  179.000331][ T7137] dummy0 speed is unknown, defaulting to 1000
[  179.032011][ T7163] wg1 speed is unknown, defaulting to 1000
[  179.038145][ T7163] wg1 speed is unknown, defaulting to 1000
[  179.044984][ T7163] wg1 speed is unknown, defaulting to 1000
[  179.057743][ T7163] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  179.077384][ T7163] wg1 speed is unknown, defaulting to 1000
[  179.085859][ T7163] wg1 speed is unknown, defaulting to 1000
[  179.093009][ T7163] wg1 speed is unknown, defaulting to 1000
[  179.100373][ T7163] wg1 speed is unknown, defaulting to 1000
[  179.107512][ T7163] wg1 speed is unknown, defaulting to 1000
[  179.208229][ T5838] usb 4-1: Using ep0 maxpacket: 8
[  179.219024][ T5838] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  179.232417][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.252410][ T5838] usb 4-1: Product: syz
[  179.258156][ T5838] usb 4-1: Manufacturer: syz
[  179.267779][ T7172] input: syz1 as /devices/virtual/input/input11
[  179.272791][ T5838] usb 4-1: SerialNumber: syz
[  179.296335][ T5838] usb 4-1: config 0 descriptor??
[  179.298636][ T7172] netlink: 4 bytes leftover after parsing attributes in process `syz.5.321'.
[  179.378120][ T7173] netlink: 44 bytes leftover after parsing attributes in process `syz.5.321'.
[  179.542370][ T5838] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  181.245939][ T5838] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  181.330751][ T7075] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  181.371039][ T7075] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  181.563348][ T7075] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  181.596389][ T7075] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  182.564396][ T7075] 8021q: adding VLAN 0 to HW filter on device bond0
[  182.583684][ T7075] 8021q: adding VLAN 0 to HW filter on device team0
[  182.602131][   T43] usb 4-1: USB disconnect, device number 24
[  182.618371][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  182.625603][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  183.017313][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.024632][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  183.167406][ T7208] sp0: Synchronizing with TNC
[  183.314568][    T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  183.333523][ T7216] tmpfs: Bad value for 'mpol'
[  183.524857][    T9] usb 4-1: Using ep0 maxpacket: 32
[  183.535864][    T9] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  183.551323][    T9] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  183.579272][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  183.613943][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  183.653974][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  183.674561][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  183.688850][    T9] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  183.700824][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.724834][    T9] usb 4-1: config 0 descriptor??
[  183.756727][ T7221] sctp: [Deprecated]: syz.0.331 (pid 7221) Use of struct sctp_assoc_value in delayed_ack socket option.
[  183.756727][ T7221] Use struct sctp_sack_info instead
[  183.885977][ T7210] delete_channel: no stack
[  183.927351][ T7075] 8021q: adding VLAN 0 to HW filter on device batadv0
[  183.949499][    T9] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  183.973499][    T9] usb 4-1: USB disconnect, device number 25
[  184.327550][    T9] usblp0: removed
[  184.648030][ T7075] veth0_vlan: entered promiscuous mode
[  184.657673][    T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  184.677021][ T7075] veth1_vlan: entered promiscuous mode
[  184.684389][ T1209] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  184.719182][ T7075] veth0_macvtap: entered promiscuous mode
[  184.730167][ T7075] veth1_macvtap: entered promiscuous mode
[  184.754027][ T7075] batman_adv: batadv0: Interface activated: batadv_slave_0
[  184.778419][ T7075] batman_adv: batadv0: Interface activated: batadv_slave_1
[  184.801850][ T7075] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  184.811274][ T7075] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  184.821230][    T9] usb 4-1: Using ep0 maxpacket: 32
[  184.826972][ T7075] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  184.836805][ T7075] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  184.846407][    T9] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  184.856263][ T1209] usb 1-1: config 0 has an invalid interface number: 117 but max is 0
[  184.869293][    T9] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  184.879399][ T1209] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  184.890475][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  184.901248][ T1209] usb 1-1: config 0 has no interface number 0
[  184.907686][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  184.919724][ T1209] usb 1-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30
[  184.931860][    T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  184.946142][ T1209] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  184.973473][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  184.987535][ T1209] usb 1-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239
[  185.003024][    T9] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  185.015136][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.026294][ T1209] usb 1-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46
[  185.035679][ T1209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.043658][ T1209] usb 1-1: Product: syz
[  185.049506][ T1209] usb 1-1: Manufacturer: syz
[  185.055048][ T1209] usb 1-1: SerialNumber: syz
[  185.060297][    T9] usb 4-1: config 0 descriptor??
[  185.078041][ T1209] usb 1-1: config 0 descriptor??
[  185.091980][  T973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.102359][ T1209] HFC-S_USB 1-1:0.117: probe with driver HFC-S_USB failed with error -5
[  185.112735][  T973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.161494][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.170176][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.269456][    T9] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 26 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  185.296846][ T5843] usb 1-1: USB disconnect, device number 10
[  185.759078][    T9] usb 4-1: USB disconnect, device number 26
[  185.964860][    T9] usblp0: removed
[  186.313218][ T7240] netlink: 'syz.0.334': attribute type 1 has an invalid length.
[  186.322641][ T7240] netlink: 244 bytes leftover after parsing attributes in process `syz.0.334'.
[  188.994304][ T1209] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  189.268081][ T1209] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  189.277609][ T1209] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.285775][ T1209] usb 1-1: Product: syz
[  189.290309][ T1209] usb 1-1: Manufacturer: syz
[  189.299653][ T1209] usb 1-1: SerialNumber: syz
[  189.312705][ T1209] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  189.359383][ T5954] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  189.447289][ T7283] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  189.578731][    C0] usb 1-1: ath9k_htc: invalid pkt_len (b408)
[  189.594414][ T5911] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  189.754188][ T5911] usb 7-1: Using ep0 maxpacket: 16
[  189.772531][ T5911] usb 7-1: config 4 has an invalid interface number: 51 but max is 0
[  189.791863][ T5911] usb 7-1: config 4 has no interface number 0
[  189.791914][ T5911] usb 7-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  189.791940][ T5911] usb 7-1: config 4 interface 51 has no altsetting 0
[  189.794633][ T5911] usb 7-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76
[  189.794662][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.794681][ T5911] usb 7-1: Product: syz
[  189.794703][ T5911] usb 7-1: Manufacturer: syz
[  189.794717][ T5911] usb 7-1: SerialNumber: syz
[  189.799363][ T7285] netlink: 28 bytes leftover after parsing attributes in process `syz.2.347'.
[  189.799389][ T7285] netlink: 28 bytes leftover after parsing attributes in process `syz.2.347'.
[  189.811947][ T7282] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  189.823615][ T5911] cdc_eem 7-1:4.51: probe with driver cdc_eem failed with error -22
[  189.943838][ T7288] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore
[  189.959076][ T7288] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  189.980782][ T7288] loop2: detected capacity change from 0 to 7
[  189.991380][ T7288] Dev loop2: unable to read RDB block 7
[  189.997469][ T7288]  loop2: unable to read partition table
[  190.003310][ T7288] loop2: partition table beyond EOD, truncated
[  190.009857][ T7288] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  190.024461][ T5911] usb 7-1: USB disconnect, device number 3
[  190.044294][   T43] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  190.200173][   T43] usb 3-1: config 0 has an invalid interface number: 156 but max is 0
[  190.259495][   T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  190.270712][   T43] usb 3-1: config 0 has no interface number 0
[  190.282406][   T43] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  190.303782][   T43] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  190.321849][   T43] usb 3-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  190.336373][   T43] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  190.346808][   T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.362869][   T43] usb 3-1: config 0 descriptor??
[  190.421326][   T43] gspca_main: spca561-2.14.0 probing abcd:cdee
[  190.457134][ T5954] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  190.492485][   T24] usb 1-1: USB disconnect, device number 11
[  190.509472][ T5954] ath9k_htc: Failed to initialize the device
[  190.593120][   T24] usb 1-1: ath9k_htc: USB layer deinitialized
[  190.790287][   T43] spca561 3-1:0.156: probe with driver spca561 failed with error -22
[  190.841219][   T43] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  190.851050][   T43] usb 3-1: MIDIStreaming interface descriptor not found
[  191.178729][   T43] usb 3-1: USB disconnect, device number 14
[  191.759848][ T7314] netlink: 'syz.6.355': attribute type 1 has an invalid length.
[  191.768738][ T7314] netlink: 180 bytes leftover after parsing attributes in process `syz.6.355'.
[  192.745908][ T7323] netlink: 244 bytes leftover after parsing attributes in process `syz.6.355'.
[  194.440110][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  194.456635][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  194.494738][ T7333] netlink: 4 bytes leftover after parsing attributes in process `syz.6.359'.
[  194.959557][ T7363] sch_fq: defrate 4294967295 ignored.
[  195.614425][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  195.634189][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  195.642852][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  195.645268][ T5954] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  195.666637][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  195.676833][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  195.824387][ T5954] usb 3-1: Using ep0 maxpacket: 16
[  195.832588][ T5954] usb 3-1: unable to get BOS descriptor or descriptor too short
[  195.843592][ T5954] usb 3-1: config 2 has an invalid interface number: 120 but max is 0
[  195.872092][ T5954] usb 3-1: config 2 has no interface number 0
[  196.011512][ T7376] dummy0 speed is unknown, defaulting to 1000
[  196.074271][ T5954] usb 3-1: config 2 interface 120 has no altsetting 0
[  196.096808][ T7376] wg1 speed is unknown, defaulting to 1000
[  196.111902][ T5954] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=68.f3
[  196.146611][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.156672][ T5954] usb 3-1: Product: syz
[  196.160862][ T5954] usb 3-1: Manufacturer: syz
[  196.401601][ T5954] usb 3-1: SerialNumber: syz
[  196.530273][ T5853] Bluetooth: hci1: command 0x0406 tx timeout
[  196.538784][ T5854] Bluetooth: hci3: command 0x0406 tx timeout
[  196.545791][ T5839] Bluetooth: hci4: command 0x0406 tx timeout
[  196.715692][ T7372] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  197.030271][ T7376] chnl_net:caif_netlink_parms(): no params data found
[  197.101168][ T5954] usb 3-1: USB disconnect, device number 15
[  197.390748][ T7376] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.412418][ T7376] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.430045][ T7376] bridge_slave_0: entered allmulticast mode
[  197.443385][ T7376] bridge_slave_0: entered promiscuous mode
[  197.456744][ T7376] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.466421][ T7376] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.473777][ T7376] bridge_slave_1: entered allmulticast mode
[  197.483969][ T7376] bridge_slave_1: entered promiscuous mode
[  197.614015][ T7376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  197.657199][ T7376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  197.734239][ T5856] Bluetooth: hci0: command tx timeout
[  197.877273][ T7376] team0: Port device team_slave_0 added
[  197.933671][ T7376] team0: Port device team_slave_1 added
[  197.995992][ T5954] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  198.070105][ T7376] batman_adv: batadv0: Adding interface: batadv_slave_0
[  198.085076][ T7376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.142903][ T7376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  198.161411][ T7376] batman_adv: batadv0: Adding interface: batadv_slave_1
[  198.166068][ T5954] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  198.177810][ T7376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.214324][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.221137][ T7376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  198.245105][ T5954] usb 3-1: config 0 descriptor??
[  198.259165][ T5954] cp210x 3-1:0.0: cp210x converter detected
[  198.459514][ T5954] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -32
[  198.486256][ T5954] cp210x 3-1:0.0: querying part number failed
[  198.492312][ T7376] hsr_slave_0: entered promiscuous mode
[  198.499263][ T5954] usb 3-1: cp210x converter now attached to ttyUSB0
[  198.513559][ T7376] hsr_slave_1: entered promiscuous mode
[  198.517454][ T5954] usb 3-1: USB disconnect, device number 16
[  198.544849][ T5954] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  198.547808][ T7376] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  198.553254][ T5954] cp210x 3-1:0.0: device disconnected
[  198.579782][ T7376] Cannot create hsr debugfs directory
[  199.458583][ T5954] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  199.638844][ T7376] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  199.655549][ T5954] usb 3-1: Using ep0 maxpacket: 32
[  199.662079][ T7376] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  199.676640][ T7376] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  199.684514][ T5954] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  199.706334][ T5954] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  199.728367][ T7376] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  199.735361][ T5954] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  199.754374][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.775255][ T5954] hub 3-1:4.0: USB hub found
[  199.804736][ T5856] Bluetooth: hci0: command tx timeout
[  199.834312][ T5950] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  199.970048][ T7376] 8021q: adding VLAN 0 to HW filter on device bond0
[  199.971427][ T5954] hub 3-1:4.0: 2 ports detected
[  199.996355][ T5950] usb 7-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  200.007165][ T5950] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.024552][ T5950] usb 7-1: config 0 descriptor??
[  200.038480][ T7376] 8021q: adding VLAN 0 to HW filter on device team0
[  200.069531][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.076765][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  200.122299][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.129546][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  200.170867][ T7420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  200.200310][ T7420] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  200.218970][ T7446] syz.3.388 (7446): drop_caches: 0
[  200.238010][ T5954] hub 3-1:4.0: hub_hub_status failed (err = -71)
[  200.247467][ T5954] hub 3-1:4.0: config failed, can't get hub status (err -71)
[  200.312726][ T5954] usb 3-1: USB disconnect, device number 17
[  200.611383][ T7376] 8021q: adding VLAN 0 to HW filter on device batadv0
[  200.853749][ T7426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  200.871330][ T7426] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  200.889322][ T7463] Invalid ELF header magic: != ELF
[  200.916106][ T5950] usb 7-1: Cannot set autoneg
[  200.921067][ T5950] MOSCHIP usb-ethernet driver 7-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  200.977004][ T5950] usb 7-1: USB disconnect, device number 4
[  201.013706][ T7470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  201.023025][ T7470] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  201.078479][ T7376] veth0_vlan: entered promiscuous mode
[  201.092401][ T7376] veth1_vlan: entered promiscuous mode
[  201.125033][ T7376] veth0_macvtap: entered promiscuous mode
[  201.135498][ T7376] veth1_macvtap: entered promiscuous mode
[  201.153651][ T7376] batman_adv: batadv0: Interface activated: batadv_slave_0
[  201.172781][ T7376] batman_adv: batadv0: Interface activated: batadv_slave_1
[  201.184836][ T7376] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  201.193766][ T7376] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  201.204227][ T7376] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  201.212952][ T7376] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  201.225450][   T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  201.244412][ T5838] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  201.328395][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  201.346821][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.366216][   T24] usb 1-1: device descriptor read/64, error -71
[  201.387660][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  201.396132][ T5838] usb 3-1: device descriptor read/64, error -71
[  201.403428][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  201.604438][   T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  201.645198][ T5838] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[  201.734284][ T5954] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  201.881085][   T24] usb 1-1: device descriptor read/64, error -71
[  201.887895][ T5856] Bluetooth: hci0: command tx timeout
[  201.893431][ T5911] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  201.901984][ T5838] usb 3-1: device descriptor read/64, error -71
[  201.966388][ T5954] usb 4-1: Using ep0 maxpacket: 16
[  201.987987][ T5954] usb 4-1: config 1 has an invalid interface number: 105 but max is 0
[  202.001905][ T5954] usb 4-1: config 1 has no interface number 0
[  202.013242][ T5954] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  202.028853][ T5838] usb usb3-port1: attempt power cycle
[  202.034413][   T24] usb usb1-port1: attempt power cycle
[  202.053114][ T5954] usb 4-1: config 1 interface 105 has no altsetting 0
[  202.065850][ T5911] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  202.068183][ T5954] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  202.084469][ T5911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  202.091764][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.110827][ T5954] usb 4-1: Product: syz
[  202.231785][ T5911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 123, changing to 10
[  202.248297][ T5954] usb 4-1: Manufacturer: syz
[  202.253036][ T5954] usb 4-1: SerialNumber: syz
[  202.277504][ T7474] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  202.293230][ T5911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 8610, setting to 1024
[  202.327786][ T5911] usb 7-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  202.342095][ T5911] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.365995][ T5911] usb 7-1: Product: syz
[  202.389071][ T5911] usb 7-1: Manufacturer: syz
[  202.393775][ T5911] usb 7-1: SerialNumber: syz
[  202.398701][   T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  202.406550][ T5838] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[  202.417633][ T5911] usb 7-1: config 0 descriptor??
[  202.435519][ T5838] usb 3-1: device descriptor read/8, error -71
[  202.446647][   T24] usb 1-1: device descriptor read/8, error -71
[  202.500170][ T5954] aqc111 4-1:1.105: probe with driver aqc111 failed with error -22
[  202.694351][ T5838] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  202.704300][   T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  202.715152][ T5838] usb 3-1: device descriptor read/8, error -71
[  202.760224][   T24] usb 1-1: device descriptor read/8, error -71
[  202.824771][ T5838] usb usb3-port1: unable to enumerate USB device
[  202.884754][   T24] usb usb1-port1: unable to enumerate USB device
[  203.964343][ T5856] Bluetooth: hci0: command tx timeout
[  204.170231][ T7496] Falling back ldisc for ptm0.
[  204.364834][   T30] kauditd_printk_skb: 19 callbacks suppressed
[  204.364866][   T30] audit: type=1800 audit(1753948849.596:125): pid=7500 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.397" name="bus" dev="overlay" ino=103 res=0 errno=0
[  205.175392][ T5954] usb 4-1: USB disconnect, device number 27
[  205.818844][ T7515] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  207.764743][ T7540] delete_channel: no stack
[  208.622595][ T7550] overlayfs: conflicting options: nfs_export=on,index=off
[  209.073338][ T7549] netlink: 48 bytes leftover after parsing attributes in process `syz.7.416'.
[  209.114459][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.7.416'.
[  209.318964][ T1209] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  209.504393][ T1209] usb 1-1: Using ep0 maxpacket: 8
[  209.553538][ T1209] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  209.579982][ T1209] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  209.873662][ T1209] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  209.979362][ T1209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.590076][ T1209] hub 1-1:1.0: bad descriptor, ignoring hub
[  210.647767][ T1209] hub 1-1:1.0: probe with driver hub failed with error -5
[  210.774736][ T7582] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.825305][ T7582] bond0: (slave rose0): Enslaving as an active interface with an up link
[  211.050288][   T30] audit: type=1326 audit(1753948856.326:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7579 comm="syz.7.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb072b8e9a9 code=0x7ffc0000
[  211.296484][   T30] audit: type=1326 audit(1753948856.426:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7579 comm="syz.7.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb072b8e9a9 code=0x7ffc0000
[  212.193148][ T1209] usb 1-1: reset high-speed USB device number 17 using dummy_hcd
[  212.227825][   T30] audit: type=1326 audit(1753948857.496:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7579 comm="syz.7.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb072b8d310 code=0x7ffc0000
[  212.250166][   T30] audit: type=1326 audit(1753948857.496:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7579 comm="syz.7.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fb072b901d7 code=0x7ffc0000
[  212.271746][    C0] vkms_vblank_simulate: vblank timer overrun
[  212.278958][   T30] audit: type=1326 audit(1753948857.496:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7579 comm="syz.7.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb072b8e9a9 code=0x7ffc0000
[  212.302827][   T30] audit: type=1326 audit(1753948857.496:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7579 comm="syz.7.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fb072b901d7 code=0x7ffc0000
[  212.324269][    C0] vkms_vblank_simulate: vblank timer overrun
[  212.562100][ T7597] random: crng reseeded on system resumption
[  212.564380][   T43] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  212.590857][   T30] audit: type=1326 audit(1753948857.496:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7579 comm="syz.7.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb072b8d60a code=0x7ffc0000
[  212.738860][ T7600] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  212.795399][   T43] usb 3-1: device descriptor read/64, error -71
[  213.501846][   T30] audit: type=1326 audit(1753948857.496:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7579 comm="syz.7.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb072b8e9a9 code=0x7ffc0000
[  213.523397][    C0] vkms_vblank_simulate: vblank timer overrun
[  213.534021][   T43] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  213.644834][ T1209] usb 1-1: USB disconnect, device number 17
[  213.784490][   T30] audit: type=1326 audit(1753948857.556:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7579 comm="syz.7.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb072b8e9a9 code=0x7ffc0000
[  213.809442][   T30] audit: type=1326 audit(1753948857.556:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7579 comm="syz.7.422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb072b8e9a9 code=0x7ffc0000
[  213.846420][   T43] usb 3-1: device descriptor read/64, error -71
[  213.989951][   T43] usb usb3-port1: attempt power cycle
[  214.663447][ T7607] delete_channel: no stack
[  214.758564][ T7611] batman_adv: batadv0: Adding interface: dummy0
[  214.788803][ T7611] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.889868][ T7611] batman_adv: batadv0: Interface activated: dummy0
[  214.907604][ T7615] netlink: 24 bytes leftover after parsing attributes in process `syz.3.430'.
[  214.994467][ T5950] usb 8-1: new low-speed USB device number 2 using dummy_hcd
[  215.140142][ T7616] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  215.152341][ T7616] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  215.471486][ T5950] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  215.490863][ T5950] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  215.608809][ T5950] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  215.768165][ T5950] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  215.802444][ T5950] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  215.822845][ T5950] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  215.830835][ T5950] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  215.954266][   T43] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  215.991919][ T5950] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  216.107783][ T5950] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  216.127634][   T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  216.150750][   T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  216.173919][   T43] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  216.190014][   T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.374518][   T43] usb 3-1: config 0 descriptor??
[  216.387887][ T5950] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  217.385458][   T43] lg-g15 0003:046D:C222.0005: unknown main item tag 0x0
[  217.398504][   T43] lg-g15 0003:046D:C222.0005: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0
[  217.449603][ T5950] usb 8-1: config 168 descriptor has 1 excess byte, ignoring
[  217.555907][ T5950] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  217.612233][ T5950] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  217.628383][ T5950] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  217.680202][ T5950] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8
[  217.755972][ T5950] usb 8-1: string descriptor 0 read error: -71
[  217.769909][ T5950] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  217.783137][    T9] usb 3-1: USB disconnect, device number 25
[  217.987825][ T5950] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.012297][ T5950] usb 8-1: can't set config #168, error -71
[  218.039421][ T5950] usb 8-1: USB disconnect, device number 2
[  218.355825][ T7644] trusted_key: syz.3.438 sent an empty control message without MSG_MORE.
[  218.909416][ T5950] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  218.944275][ T5910] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  219.893599][ T5950] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  219.903074][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.939308][ T5950] usb 3-1: Product: syz
[  219.959605][ T5950] usb 3-1: Manufacturer: syz
[  220.007888][ T5950] usb 3-1: SerialNumber: syz
[  220.030736][ T5950] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  220.053882][    T9] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  220.204563][ T5910] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  220.294214][ T5910] usb 4-1: config 1 interface 0 altsetting 32 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  220.354706][ T5910] usb 4-1: config 1 interface 0 has no altsetting 0
[  220.402846][ T5910] usb 4-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice= 0.40
[  220.445606][ T5910] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.514164][ T5910] usb 4-1: Product: syz
[  220.516678][ T7649] netlink: 48 bytes leftover after parsing attributes in process `syz.2.439'.
[  220.518480][ T5910] usb 4-1: Manufacturer: syz
[  220.604273][ T5910] usb 4-1: SerialNumber: syz
[  220.616209][ T7660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  220.694820][ T7660] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  220.963451][ T7661] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0'
[  221.037156][   T24] usb 3-1: USB disconnect, device number 26
[  221.168326][    T9] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  221.183808][    T9] ath9k_htc: Failed to initialize the device
[  221.200173][   T24] usb 3-1: ath9k_htc: USB layer deinitialized
[  222.511557][ T5910] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input13
[  222.534142][ T5191] bcm5974 4-1:1.0: could not read from device
[  222.595912][ T5910] usb 4-1: USB disconnect, device number 28
[  222.600907][ T5191] bcm5974 4-1:1.0: could not read from device
[  222.634500][    T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  222.780585][ T7671] delete_channel: no stack
[  223.601214][ T5911] iguanair 7-1:0.0: failed to get version
[  223.626860][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  223.634660][ T5911] iguanair 7-1:0.0: probe with driver iguanair failed with error -110
[  223.658814][ T5911] usb 7-1: USB disconnect, device number 5
[  223.744343][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 7
[  223.779039][   T30] kauditd_printk_skb: 14 callbacks suppressed
[  223.779052][   T30] audit: type=1326 audit(1753948869.036:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7676 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7db8e9a9 code=0x7ffc0000
[  223.852976][    T9] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  223.972850][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.972897][   T30] audit: type=1326 audit(1753948869.036:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7676 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7db8e9a9 code=0x7ffc0000
[  224.046663][    T9] usb 3-1: config 0 descriptor??
[  224.164162][ T7685] netlink: 24 bytes leftover after parsing attributes in process `syz.0.448'.
[  224.491851][    T9] gspca_main: spca561-2.14.0 probing abcd:cdee
[  224.687266][ T7689] netlink: 4 bytes leftover after parsing attributes in process `syz.7.449'.
[  225.097730][    T9] spca561 3-1:0.0: probe with driver spca561 failed with error -22
[  225.230666][    T9] usb 3-1: USB disconnect, device number 27
[  225.268579][   T30] audit: type=1326 audit(1753948869.036:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7676 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f3f7db8e9a9 code=0x7ffc0000
[  225.300791][   T30] audit: type=1326 audit(1753948869.036:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7676 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7db8e9a9 code=0x7ffc0000
[  225.520477][   T30] audit: type=1326 audit(1753948869.036:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7676 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7db8e9a9 code=0x7ffc0000
[  225.542255][   T30] audit: type=1326 audit(1753948869.046:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7676 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f7db8e9a9 code=0x7ffc0000
[  226.147508][   T30] audit: type=1326 audit(1753948869.046:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7676 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7db8e9a9 code=0x7ffc0000
[  226.169675][   T30] audit: type=1326 audit(1753948869.046:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7676 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3f7db8e9a9 code=0x7ffc0000
[  226.192191][   T30] audit: type=1326 audit(1753948869.046:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7676 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f7db8e9a9 code=0x7ffc0000
[  226.234447][   T30] audit: type=1326 audit(1753948869.046:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7676 comm="syz.3.447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f3f7db8e9a9 code=0x7ffc0000
[  226.470790][ T7703] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  226.972755][ T5910] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  227.194213][ T5910] usb 8-1: Using ep0 maxpacket: 8
[  227.202525][ T5910] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  227.217025][ T5910] usb 8-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  227.248889][ T7724] syz.0.460: attempt to access beyond end of device
[  227.248889][ T7724] loop0: rw=0, sector=16, nr_sectors = 2 limit=0
[  227.275270][ T5910] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.304015][ T5910] usb 8-1: config 0 descriptor??
[  227.335721][ T5910] gspca_main: vc032x-2.14.0 probing 046d:0892
[  227.888799][ T7722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  228.724915][ T7749] kernel read not supported for file /� lhOb��~�
�h����3��J��y�x����v�L�=Q�R�n��FGr���q�ςû~QV7��"qH���d0��������%Nny���D (pid: 7749 comm: syz.0.467)
[  228.952359][ T7752] netlink: 'syz.2.468': attribute type 1 has an invalid length.
[  228.963174][ T5910] gspca_vc032x: reg_w err -71
[  228.968148][ T5910] vc032x 8-1:0.0: probe with driver vc032x failed with error -71
[  228.978533][ T5910] usb 8-1: USB disconnect, device number 3
[  229.102173][ T7758] mmap: syz.2.470 (7758): VmData 37728256 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data.
[  229.503784][ T7767] netlink: 24 bytes leftover after parsing attributes in process `syz.3.473'.
[  229.665633][ T7768] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  230.052607][ T7771] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  230.713499][ T7789] delete_channel: no stack
[  231.438693][ T7792] netlink: 136 bytes leftover after parsing attributes in process `syz.6.477'.
[  231.448048][ T7792] netlink: 136 bytes leftover after parsing attributes in process `syz.6.477'.
[  232.549093][ T7806] netlink: 'syz.0.481': attribute type 21 has an invalid length.
[  232.557650][ T7806] netlink: 156 bytes leftover after parsing attributes in process `syz.0.481'.
[  232.966992][ T7812] netlink: 16 bytes leftover after parsing attributes in process `syz.7.482'.
[  232.998042][ T7812] netlink: 48 bytes leftover after parsing attributes in process `syz.7.482'.
[  233.068217][ T7813] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] SMP KASAN PTI
[  233.080248][ T7813] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f]
[  233.088796][ T7813] CPU: 0 UID: 0 PID: 7813 Comm: syz.7.482 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  233.098732][ T7813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  233.108988][ T7813] RIP: 0010:bcsp_recv+0x13d/0x1740
[  233.114132][ T7813] Code: 89 4c 24 40 48 89 54 24 28 48 c1 ea 03 48 89 54 24 68 48 89 5c 24 20 48 c1 eb 03 48 89 5c 24 60 4c 89 7c 24 38 48 8b 44 24 58 <42> 80 3c 30 00 74 08 4c 89 ff e8 14 e7 c9 f9 49 8b 1f 31 ff 48 89
[  233.134099][ T7813] RSP: 0018:ffffc90003437c00 EFLAGS: 00010206
[  233.140162][ T7813] RAX: 0000000000000021 RBX: 0000000000000030 RCX: 000000000000002f
[  233.148223][ T7813] RDX: 000000000000002f RSI: 0000000000000001 RDI: 0000000000000000
[  233.156282][ T7813] RBP: ffffc90003437d60 R08: ffff88803424b41f R09: 1ffff11006849683
[  233.164257][ T7813] R10: dffffc0000000000 R11: ffffffff885624a0 R12: 0000000000000001
[  233.172315][ T7813] R13: ffffc90003437e00 R14: dffffc0000000000 R15: 0000000000000108
[  233.180286][ T7813] FS:  00007fb073a066c0(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000
[  233.189737][ T7813] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  233.196311][ T7813] CR2: 00007fb0739e5d58 CR3: 000000007a2e2000 CR4: 00000000003526f0
[  233.204297][ T7813] Call Trace:
[  233.207569][ T7813]  <TASK>
[  233.210556][ T7813]  ? __pfx_bcsp_recv+0x10/0x10
[  233.215318][ T7813]  ? rcu_read_lock_any_held+0xb3/0x120
[  233.220801][ T7813]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  233.226774][ T7813]  ? tty_audit_push+0x7c/0x250
[  233.231582][ T7813]  hci_uart_tty_receive+0x194/0x220
[  233.236783][ T7813]  ? __pfx_hci_uart_tty_receive+0x10/0x10
[  233.242613][ T7813]  tiocsti+0x23c/0x2c0
[  233.246698][ T7813]  ? __pfx_tiocsti+0x10/0x10
[  233.251380][ T7813]  ? __fget_files+0x2a/0x420
[  233.255975][ T7813]  ? __fget_files+0x3a0/0x420
[  233.260746][ T7813]  ? __fget_files+0x2a/0x420
[  233.265334][ T7813]  tty_ioctl+0x626/0xde0
[  233.269577][ T7813]  ? __pfx_tty_ioctl+0x10/0x10
[  233.274348][ T7813]  __se_sys_ioctl+0xfc/0x170
[  233.279071][ T7813]  do_syscall_64+0xfa/0x3b0
[  233.283566][ T7813]  ? lockdep_hardirqs_on+0x9c/0x150
[  233.288776][ T7813]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.294843][ T7813]  ? clear_bhb_loop+0x60/0xb0
[  233.299517][ T7813]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  233.305410][ T7813] RIP: 0033:0x7fb072b8e9a9
[  233.309835][ T7813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  233.329445][ T7813] RSP: 002b:00007fb073a06038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  233.337865][ T7813] RAX: ffffffffffffffda RBX: 00007fb072db6080 RCX: 00007fb072b8e9a9
[  233.345839][ T7813] RDX: 0000200000000140 RSI: 0000000000005412 RDI: 0000000000000009
[  233.353894][ T7813] RBP: 00007fb072c10d69 R08: 0000000000000000 R09: 0000000000000000
[  233.361863][ T7813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  233.369871][ T7813] R13: 0000000000000000 R14: 00007fb072db6080 R15: 00007ffd654c7ca8
[  233.377948][ T7813]  </TASK>
[  233.380962][ T7813] Modules linked in:
[  233.385669][ T7813] ---[ end trace 0000000000000000 ]---
[  233.442553][ T7813] RIP: 0010:bcsp_recv+0x13d/0x1740
[  233.448516][ T7813] Code: 89 4c 24 40 48 89 54 24 28 48 c1 ea 03 48 89 54 24 68 48 89 5c 24 20 48 c1 eb 03 48 89 5c 24 60 4c 89 7c 24 38 48 8b 44 24 58 <42> 80 3c 30 00 74 08 4c 89 ff e8 14 e7 c9 f9 49 8b 1f 31 ff 48 89
[  233.469662][ T7813] RSP: 0018:ffffc90003437c00 EFLAGS: 00010206
[  233.674429][ T7813] RAX: 0000000000000021 RBX: 0000000000000030 RCX: 000000000000002f
[  233.683404][ T7813] RDX: 000000000000002f RSI: 0000000000000001 RDI: 0000000000000000
[  233.692025][ T7813] RBP: ffffc90003437d60 R08: ffff88803424b41f R09: 1ffff11006849683
[  233.700950][ T7813] R10: dffffc0000000000 R11: ffffffff885624a0 R12: 0000000000000001
[  233.900035][ T7813] R13: ffffc90003437e00 R14: dffffc0000000000 R15: 0000000000000108
[  233.938573][ T7813] FS:  00007fb073a066c0(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000
[  233.956544][ T7813] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  233.972790][ T7813] CR2: 000000110c340412 CR3: 000000007a2e2000 CR4: 00000000003526f0
[  233.983066][ T7813] Kernel panic - not syncing: Fatal exception
[  233.989557][ T7813] Kernel Offset: disabled
[  233.993921][ T7813] Rebooting in 86400 seconds..