last executing test programs:

5m12.493474896s ago: executing program 32 (id=740):
syz_usb_connect(0x5, 0x689, &(0x7f00000009c0)={{0x12, 0x1, 0x110, 0x7b, 0x56, 0xb5, 0xff, 0x12d1, 0x3b31, 0x214d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x677, 0x4, 0x3, 0xf3, 0x40, 0x38, [{{0x9, 0x4, 0xcb, 0x0, 0x5, 0xff, 0x5, 0x79, 0x5, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, 'c\b'}, {0x5, 0x24, 0x0, 0xc}, {0xd, 0x24, 0xf, 0x1, 0x40, 0x1c, 0x8, 0x7}, {0x6, 0x24, 0x1a, 0x8001, 0x13}, [@mdlm_detail={0xef, 0x24, 0x13, 0x81, "861c92a6fd243811ee2844c3a22bd7629a0386635bed8dd01235414946ee2ff98bec27d017e04b198c2deb7f3e64702255e4362fde251dd6acf47b68ed3b4b74b2090fdcceb1f4806bf9cadc1c338e51aab9b18e5537b6ae14dcaf995b759656604125720975322fecd8792cd4437f0bea95fd478423f6a4cfd00046cee55359d41b21763b7b9256b3f400a21b41b2bc355cec4e44d8d2d3a49f55edf9fbcc7bacd7f78cdb9447cb3c74cc9cecd851958f220138d6b5f11fa9890bcd8fe387733e3aad0680c22f7bda39b2c7ee8c1b910229e73078924be52f97fd87c5c7a175510791adbfab7f366edb1e"}, @mdlm={0x15, 0x24, 0x12, 0x5ac}]}], [{{0x9, 0x5, 0x6, 0x10, 0x50, 0x1, 0x81, 0x9, [@generic={0x7a, 0xd, "459cf8c12abb0585bbf28f3f31e32269faf41982ab374f28980a98fb4d387926bc210609fe58a38089b51078a4abd4932f85e17bca485f8ced27c27dd037a48e5eadf8679aa1606d3ae21c1b8a46f88017d149114725a3bb485cc217c030f02933526b38fef0a9a31fdd3ac58256e6df593449297bc779de"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x40, 0x6, 0x3, 0x81, [@generic={0x33, 0x4, "54d9b0111c90b71e2fdb342ba0b98fbd81603d829230efd057b55394ef0be0186196d04e49ac34f607af41e441a1848814"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0xf818}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x7, 0x1, 0xe8, [@generic={0x52, 0xd, "422e9ca480740e0d702d9bb0c1754d858aad5ddb45d3f0691eaedd30db4dcfba57a2231794689dd808fc3f227ba067c97f9b179fc99193b906a53205e9410bfe0d704583c4fe16ebc194d9cf66c047fb"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0xb1, 0x9, 0x5}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x8, 0x40, 0x47}}]}}, {{0x9, 0x4, 0x34, 0x3, 0x1, 0x9c, 0xaa, 0xa5, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0xda}}, @hid_hid={0x9, 0x21, 0x1, 0xd, 0x1, {0x22, 0xf62}}], [{{0x9, 0x5, 0x1, 0x1, 0x8, 0x3, 0xf9, 0x7, [@generic={0xa7, 0x22, "491ec112d53209d600a74518af753d4b0f62b69f3176707de88c17b03d17ce854768e6db18a0129d5c3290ac0d52442873a72eef66a3a50bf7f3625136c75517376d095b7b42cc881bf8f8d06acb92733e6537b87b1282763273643814e49b59b502c2ba9d6ed214190ecec9c67b80d11ca7ed7b4dc235c3d6841f6b5f8272b7f282b8408a4a26357f3c87dbc993086d8840d58e9f5d37287d662b75a05fa6a911ae5884d2"}]}}]}}, {{0x9, 0x4, 0x60, 0x1, 0x0, 0x4d, 0xe0, 0x4, 0x3, [@hid_hid={0x9, 0x21, 0x7fff, 0x5, 0x1, {0x22, 0x41f}}, @uac_as]}}, {{0x9, 0x4, 0xa6, 0x5, 0x6, 0x11, 0xa, 0x2e, 0x80, [@uac_control={{0xa, 0x24, 0x1, 0x80, 0x4}, [@feature_unit={0xd, 0x24, 0x6, 0x4, 0x5, 0x3, [0x9, 0x9, 0x4]}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x3, 0x9, "b2d7adff7a"}, @extension_unit={0xa, 0x24, 0x8, 0x1, 0xffff, 0x4, "860db5"}, @extension_unit={0xa, 0x24, 0x8, 0x2, 0x5, 0x6, "f4e212"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x100, 0x1, 0x6, 0xeb}]}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0xfffffff7, 0x0, 0x4, 0x7}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x1}]}], [{{0x9, 0x5, 0x6, 0x10, 0x10, 0xfc, 0x9, 0x7f, [@generic={0x52, 0x1, "57fa0ddcdefe1745f7fbe24408a09d1a4076b91dd4612bffde57e740b0669d13c90f4f5842cd73a488cfb7ff64cd2789b1338282ec97491ede406c1a727ba6617baeb234e3f86ad1f3f82fcb3db16709"}, @generic={0x10, 0x5, "331a9f34f9123d3cb9d49eea0b73"}]}}, {{0x9, 0x5, 0x9, 0x4, 0x10, 0x40, 0x1, 0xd, [@generic={0x57, 0xa, "532c5d6310f7adceb505154c32f95ca62e3afbc1532affb2812c8ca97b0f6b160bc10d7c569a726dec643bb728a5265e48aa579872293032569bb08e052f662955c2d77c5b0efc448c1e2942cefe7c83ce0a8083a0"}, @generic={0xfa, 0x21, "aeef98a7ccd8f5b177c29444826b1558e9a08ee2dae52f2f33db73cacf97f6449f45ae4d79ccb77c8093d080cf858145097987dd24f6090ac18a5ca1008d7eb41f692eccc889696ff501547bcc295a3de6d9794c9930bd7c341d847bcd727456a19a046ce0275b9eb34edaf55bbfe6a4fddb7241cd655c2ff9d9fbc8050384c7c561b842f6e4c0a93e8fe13a06f2169d87ce9c041d038ffb0820020558318b5a75cb2402f4c95d9597abd11e74b8cbbf7bba642a5bda7e0ce55a1073393f4c763fb244c3673732a0a49d76619e72e95c52bc6a91c8c78f1223bc8ba4602b2e325f881304276ffaad74af3ee79f4e280a8bae84edc3a510f2"}]}}, {{0x9, 0x5, 0x9, 0xc, 0x8, 0x5, 0x6, 0xf}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0xf, 0x66, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x2}]}}, {{0x9, 0x5, 0x1, 0x2, 0x38, 0x5, 0xf7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0xb480}, @generic={0x77, 0x22, "fba75cebc4782bfecc0b053319ec0b0286c2d5a9160155f526b6508611e7a06a21e3999ea5ccf172867da37b91799016a2126de896fc2c226e9eee8b688cd66915a653df806f51f0807c3bd51cab17ca3ca71918d490d175d2f11091fc211e6db55e35872e0ecf5890a66e9df1b675bc0ab05d29c9"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x10, 0xc, 0x8, 0x40, [@generic={0x60, 0x7, "61613e5443e7a42f9b33a4c4ba486490056bf3682039e5e4813751b7a057660d0f6a9398cd2cc7c88b29b5f331ad97b8789add851f7ee254c58f67e7b3fa9ea6a346de95e27b4571090e2a86409dbf7ae47d15a34721ce381a957b3bdeb8"}]}}]}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x310, 0x96, 0x1, 0x9, 0xff, 0x5}, 0x33, &(0x7f0000000340)={0x5, 0xf, 0x33, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "7162f811e5726e6eefd4fb1d8442889f"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0x9, 0xb3, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x9, 0xfe, 0x1ff}]}, 0x4, [{0x7f, &(0x7f00000003c0)=@string={0x7f, 0x3, "35ad567c0b8d8e9bc213250121927485fae0e847d05ecd922cd7bf6fd38ab2e0a3a707d8330d8cc2003b8e1b0c1d024b39d91530e5e2539e3b64978e8026b0dd39f23606af4a030d9580a8dfaa4a851dd9d6d75f5070a76a2a40790ab9441c6bf8ed7b14005a6b0c7de0134b7cb718e05474ec7a915ce44b89316c7196"}}, {0xe0, &(0x7f0000000440)=@string={0xe0, 0x3, "5c7244421e2b5d0074a55dbc48c361de467b84f003c44ad41056dd393ca1112e0d3f886f4f1fab3435222ce211bfe0467372c80324be83ebfbf033f27520df478447cb03ef94d0e0f4a0ec9857d020ae1314a6d8d4b8f598548ce35b92f23a8745075e86905dee6cb94ff0d4957dc6b32aa69eaa1318d2a6c2a74b1632c072cbc5c8e8642936e2b7e95b57b8afeef800e9fe9524621f6c37e51711b38e95a36795477d578ddc61856765de717c69565fb1b8355dd67ca102ecd943c125a2f9941f718036f678b8ef10f831bcbee7d3178cda39f750aba1cedaab410b89da"}}, {0x3, &(0x7f0000000540)=@string={0x3, 0x3, "83"}}, {0xcf, &(0x7f0000000640)=@string={0xcf, 0x3, "090f2538858b31d2609638ac23add546215be74bb1ad813bb505bb12d77c36c925ea31019f61cc02b037d3aa05df579e1a49a39adea6dc23b884931a8a04e7948b3b5a4fdfe832fd45591deb8afd63a2679d8397dd0c127c19e165aec9f2ff887f7c81d37a80db4d0d6ddc0e1d3bc7a84a1561c27211a77cc331b868c3349627ab00b116c25e55bfd8604ec6d02e4cbe6629320376d04b258c9faf908587419696a3689b7449113adef204090b5e769e4e983ccc5b7c4ad018bc4cc4054d42cabb981c4dabb9c72d7d310e5587"}}]})
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
read$FUSE(r3, &(0x7f0000005000)={0x2020}, 0x2020)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0)
r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000100)={0x1, 'gretap0\x00', {}, 0xffd9})
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xe)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
write$6lowpan_control(r6, &(0x7f0000000080)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0xc42, 0x400000000000009, 0x7ffc, 0x80000000, 0x80000000fffe, 0x4, 0x4012004c2, 0xfffffffffffffffe, 0x8000000000654, 0x0, 0x3ffffc, 0xfffffffffffffffc, 0x807fffffff, 0x20000000009, 0xffff, 0x1000000001], 0x100000})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r8, 0x4048ae9b, &(0x7f0000000000)={0x20003, 0x0, {[0x1, 0xfffffffffffffff7, 0x0, 0xa, 0x2, 0x0, 0xfffffffffffffff7, 0xe]}})
ioctl$KVM_RUN(r8, 0xae80, 0x0)

4m10.702580194s ago: executing program 1 (id=957):
syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x42982, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, 0x0, 0x0)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
lsm_get_self_attr(0x69, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r3, &(0x7f0000000080)="90", 0x1, 0x2000c851, 0x0, 0x0)
ptrace(0x10, r2)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000006, 0x20010, 0xffffffffffffffff, 0x0)
ptrace$poke(0x5, r2, &(0x7f0000000200), 0x0)
openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea})

4m8.911953417s ago: executing program 5 (id=960):
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4ea0, 0x0, @mcast2, 0x7}, 0x1c)
r1 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000)
sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, 0x3, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x40040)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x5411, 0x0)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r4=>r2, {0x3ff}}, './file0\x00'})
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100))
vmsplice(r3, &(0x7f0000001540)=[{&(0x7f0000000000)="3357126d033bc946e01580d873d6dd3c5e5fe149", 0x14}, {&(0x7f0000000080)="9cd9071ed6", 0x5}], 0x2, 0x1)
splice(r2, 0x0, r0, 0x0, 0x25a8, 0x4)

4m7.644649158s ago: executing program 5 (id=963):
syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x42982, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, 0x0, 0x0)
madvise(&(0x7f00004a1000/0x2000)=nil, 0x2000, 0x15)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
lsm_get_self_attr(0x69, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r3, &(0x7f0000000080)="90", 0x1, 0x2000c851, 0x0, 0x0)
ptrace(0x10, r2)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000006, 0x20010, 0xffffffffffffffff, 0x0)
ptrace$poke(0x5, r2, &(0x7f0000000200), 0x0)
openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea})

4m5.200427542s ago: executing program 1 (id=965):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x38, r3, 0x5, 0x2, 0x4, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x22f233a7d486d037]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x10)

4m3.652118833s ago: executing program 1 (id=968):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r0)
r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0xffffffff, 0x3}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000040)=0x38133, 0x4)
r5 = syz_open_dev$usbfs(0x0, 0x75, 0x40082)
ioctl$USBDEVFS_CLAIM_PORT(r5, 0x80045518, &(0x7f0000000000)=0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x6a, 0x3, 0x20000000, 0x4)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
dup(0xffffffffffffffff)
r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000100)=0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x7, 0x115}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x6c}}, 0x0)
r7 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$nci(r7, &(0x7f0000000380)=ANY=[@ANYBLOB="4001000000f86f6d8b020000000000000000009f36bb540cfcbdc6edfef1f76b3f361bfc2b4d22cdd71f0000000000000000000000000000eae6ee2b77aa9dd42b57d4b99e1745a0c9a7ab8459578b823f9f28c700625d4b893dac022e6e941c1c416e4e52a1206c47dca30e98ed42f287cdd4f9fa446558b4f53f46632cf4109472cfc09e71b89e779d7c9206d2fd17c5d0a9942aef5e78e2a029de09ca3eee7988d15ae5a404342c9f913c664e1a1552c61f765992586f2a1ab0a977731924c565fc047f6319e3554d260c2c7116176d666af6184be7dfbfcec1e1381f0afb703f0d1ec33f23fa64233a599131b96dd59964160931fa28f5504b4e798c6b6e533c4456e9bf81597328acce8a489493343d99dc1ef621cdfd493f4290e07e6694b6d04cec00c89c6f9fa390dcdd960d15f5cf77216dce4031a609e30a21e221620e7ed1ae5840f2f9ec93650d98476b176986"], 0x14)
syz_usb_connect(0x6, 0xfffffd40, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a9741d40b40101020301090212000100fc000000000000"], 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0xfffffffffffffffa}, 0x2d, 0xfffffffffffffff9)
add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0x3c0a, r1)

3m57.753364778s ago: executing program 5 (id=973):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000300600000000028290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef)
write(0xffffffffffffffff, &(0x7f0000000140)="fc00000018000703ab092500090007000a070000000000060000369321000700ff2500000005d00000000000000398996c92773411419da79bb94b46fe000000bc00020000036c6c256f1a272f2e117c22ebc205214000000000008934d07302ad031720d7d5bbc91a3e2e80772c05defd5a32e2", 0x74)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond0\x00'})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008000)
fsopen(0x0, 0x0)
openat$sequencer2(0xffffff9c, &(0x7f0000000280), 0x8000, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000c40)={0x8000203d})
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r4 = openat$sndseq(0xffffff9c, &(0x7f0000000180), 0x40)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a45320, &(0x7f00000000c0)={{0x80, 0x4}, 'port0\x00', 0x786520dbf34c80ff, 0x20a03, 0x122, 0x0, 0x0, 0xc, 0x400, 0x0, 0x0, 0x87})
r5 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2)
r6 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x4000200a})
ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f041})
r7 = openat$sequencer2(0xffffff9c, &(0x7f0000000040), 0x123482, 0x0)
dup3(r7, r4, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r8, 0x4008ae6a, &(0x7f0000000040)={0x1, 0x0, [{0x3, 0x5, 0x1, 0x0, @irqchip={0x1, 0x6}}]})

3m54.216028799s ago: executing program 1 (id=981):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}}, 0x0) (fail_nth: 9)

3m53.140292583s ago: executing program 5 (id=983):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
fanotify_mark(0xffffffffffffffff, 0x2, 0x1008, 0xffffffffffffffff, 0x0)
r0 = epoll_create1(0x80000)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000001c0)={0x90000000})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000000))
ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f00000000c0)={0x2, "da905a2b769a1817b471809822746479b7abdc117344bd7e5bd42f39d78ffa0b", 0x1, 0x3, 0xa64, 0x80000, 0x2})
r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="00150b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(r2, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000")
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r3, &(0x7f0000000000)=""/172, 0xac)

3m52.663683446s ago: executing program 1 (id=984):
syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x500)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, 0x0, 0x0)
madvise(&(0x7f00004a1000/0x2000)=nil, 0x2000, 0x15)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
lsm_get_self_attr(0x69, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r3, &(0x7f0000000080)="90", 0x1, 0x2000c851, 0x0, 0x0)
ptrace(0x10, r2)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000006, 0x20010, 0xffffffffffffffff, 0x0)
ptrace$poke(0x5, r2, &(0x7f0000000200), 0x0)
openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea})

3m43.438716836s ago: executing program 5 (id=989):
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
write$proc_mixer(r0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050004000000fedbdf250f00000008000300", @ANYRES8=r3, @ANYBLOB="04000e803574ed9df6d22ccc9c44c208000c0064000000"], 0x28}}, 0x0)

3m42.173042929s ago: executing program 1 (id=992):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @private=0xa010102}], 0x10)
r2 = memfd_create(&(0x7f0000000c80)='-B\xd5\xd2B\x17\xddl\x9fvp\x99\xf7lc\xa6\xba\xf2}NI\xc5j\x9a\b\x00\x00\x00\b\x84\xa2{\x00\v\x18\x004\x03\x96\x00\x00\xd7Uw\x00\xbc\xfa2\xb3\xbbl1?k7\x91v\x8d\xacs\xec\xbc\xae1Y\xef.\x00\x04\x0f\xc8\xc0:\x9cc\x10d\xee\xb5\x8b\x066<Y\x00\x00\xf6$\xff\x97k\xde\xc5\xe96\xddU)\xc98M?\x9a\x05\xb0l\x02@_\xc9\xbe\x81\xcd\xfb\xc83\xd7\xdb\x93\xcc]x\xaa\x8f\x85\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x81\x01\xe5\x98\r\x1d\xa1\xce\x8b\x19\xea\xff\xe3\x00\x00\x00\x00\x00\x00\xd0\n\x00\x00\x00\x00\x00\x00:\xd7\x802\xf3\r|\x86\x82\xf1\xb2\x06\xb0\x06\xbe\xb1l4\xf5\xd6\xf7\xbf\xd7%\v\"\xfa\xf8<\x0f\xa2\xa6\xed@\xb7\x0f\xda\x9d<\xd6', 0x3)
pipe2(&(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$binfmt_misc(r4, &(0x7f0000000b00), 0x91)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffe, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0xc6}, 0x0)
splice(r3, 0x0, r2, 0x0, 0x1, 0x4)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000100), 0x4)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x10, "24a113204f6b67ba709543f5bc2b8413"}, &(0x7f00000000c0)=0x18)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000080)={0x801400, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES8=r0])

3m41.039533374s ago: executing program 5 (id=993):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
socket$inet(0x2, 0x1, 0x0)
r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd)
r3 = syz_io_uring_setup(0xbdc, &(0x7f00000021c0)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=<r4=>0x0, &(0x7f0000002180)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r6 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000001c0)={'wlan1\x00'})
r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000180)=0x3)
writev(r10, &(0x7f0000001500)=[{&(0x7f0000000000)="52aaae73910d7492873af1edc032849211e7756a6c429e9f1a753cdc273ce7886df6f55b866f56d72d80bd04f5921c6c565b100568986d4cfc749b7860f76d2d472831bc867c286ccb03959beab2bcf2d511a43ef431f24cc975dcb1ffb06e12fee197c9f2376d863d2f89a8587e178010933948258f92838f581cfcb4072407d154ebbafe6e898d6070bc69cb28eeb7f1a7a4a16252b9b01bfc5a54131183f0fe85a2c0d3e279c15fb71917b7b5d93ec16fcd", 0xb3}, {&(0x7f00000000c0)="9c00e76e", 0x4}, {&(0x7f0000000200)="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", 0xfe}, {&(0x7f0000000300)="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", 0x648}], 0x4)
r11 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r11, 0xc0045009, &(0x7f0000000000)=0x8)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r12}, &(0x7f00000004c0), &(0x7f0000000500)=r13}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r13}, 0x10)
r14 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', <r15=>0x0})
setsockopt$packet_int(r14, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4)
sendto$packet(r14, &(0x7f0000000240)='V', 0x1, 0x0, &(0x7f0000000080)={0x11, 0x8, r15, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, 0x14)

3m25.757436257s ago: executing program 33 (id=992):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @private=0xa010102}], 0x10)
r2 = memfd_create(&(0x7f0000000c80)='-B\xd5\xd2B\x17\xddl\x9fvp\x99\xf7lc\xa6\xba\xf2}NI\xc5j\x9a\b\x00\x00\x00\b\x84\xa2{\x00\v\x18\x004\x03\x96\x00\x00\xd7Uw\x00\xbc\xfa2\xb3\xbbl1?k7\x91v\x8d\xacs\xec\xbc\xae1Y\xef.\x00\x04\x0f\xc8\xc0:\x9cc\x10d\xee\xb5\x8b\x066<Y\x00\x00\xf6$\xff\x97k\xde\xc5\xe96\xddU)\xc98M?\x9a\x05\xb0l\x02@_\xc9\xbe\x81\xcd\xfb\xc83\xd7\xdb\x93\xcc]x\xaa\x8f\x85\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x81\x01\xe5\x98\r\x1d\xa1\xce\x8b\x19\xea\xff\xe3\x00\x00\x00\x00\x00\x00\xd0\n\x00\x00\x00\x00\x00\x00:\xd7\x802\xf3\r|\x86\x82\xf1\xb2\x06\xb0\x06\xbe\xb1l4\xf5\xd6\xf7\xbf\xd7%\v\"\xfa\xf8<\x0f\xa2\xa6\xed@\xb7\x0f\xda\x9d<\xd6', 0x3)
pipe2(&(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$binfmt_misc(r4, &(0x7f0000000b00), 0x91)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfffffffe, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0xc6}, 0x0)
splice(r3, 0x0, r2, 0x0, 0x1, 0x4)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000100), 0x4)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000140)={0x0, 0x10, "24a113204f6b67ba709543f5bc2b8413"}, &(0x7f00000000c0)=0x18)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone3(&(0x7f0000000080)={0x801400, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES8=r0])

3m24.30550032s ago: executing program 34 (id=993):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
socket$inet(0x2, 0x1, 0x0)
r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0xd)
r3 = syz_io_uring_setup(0xbdc, &(0x7f00000021c0)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=<r4=>0x0, &(0x7f0000002180)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r6 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000001c0)={'wlan1\x00'})
r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000180)=0x3)
writev(r10, &(0x7f0000001500)=[{&(0x7f0000000000)="52aaae73910d7492873af1edc032849211e7756a6c429e9f1a753cdc273ce7886df6f55b866f56d72d80bd04f5921c6c565b100568986d4cfc749b7860f76d2d472831bc867c286ccb03959beab2bcf2d511a43ef431f24cc975dcb1ffb06e12fee197c9f2376d863d2f89a8587e178010933948258f92838f581cfcb4072407d154ebbafe6e898d6070bc69cb28eeb7f1a7a4a16252b9b01bfc5a54131183f0fe85a2c0d3e279c15fb71917b7b5d93ec16fcd", 0xb3}, {&(0x7f00000000c0)="9c00e76e", 0x4}, {&(0x7f0000000200)="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", 0xfe}, {&(0x7f0000000300)="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", 0x648}], 0x4)
r11 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r11, 0xc0045009, &(0x7f0000000000)=0x8)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r12}, &(0x7f00000004c0), &(0x7f0000000500)=r13}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r13}, 0x10)
r14 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', <r15=>0x0})
setsockopt$packet_int(r14, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4)
sendto$packet(r14, &(0x7f0000000240)='V', 0x1, 0x0, &(0x7f0000000080)={0x11, 0x8, r15, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, 0x14)

2m31.169980924s ago: executing program 4 (id=1036):
unshare(0x2c020400)
r0 = getpid()
r1 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x2, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000800)={{0x4, 0x0, 0x9, 0x8001, 'syz0\x00', 0xc22}, 0x2, 0x200, 0x9, r0, 0x0, 0x7fff, 'syz1\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000bc0)={0x5, 0x4, 0x5, 0xe2, 'syz1\x00', 0x1})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0)
ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="538fcc434582214c2b80a98a4791b885cf9348c441607b52f190502b27750f0b721bd8b8a5c96f776916976343899cd288a3067c281ef7581053262393815cd96806acd4bb373b53ffada31bd1ff3ba53ed9b6918733ac4d75de6ca00ddcc543ae43d147947b9fe35b8ef1c3692597741402b100f5fd2468f5d1816673fdcc7834e92aef0770dbafc25dc70e44a9a8d5e77fd46a1bb6ded43bd287", @ANYRESOCT=r3, @ANYRESHEX=r2, @ANYRES16=r4])
syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
r5 = epoll_create1(0x80000)
r6 = socket(0x1, 0x80802, 0x0)
syz_emit_ethernet(0x1f, &(0x7f00000001c0)=ANY=[], 0x0)
openat$ttynull(0xffffff9c, &(0x7f0000000000), 0x203, 0x0)
r7 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r7, &(0x7f0000000100)={0xa000000d})
r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000b00)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf0b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x41, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r8, 0x0, 0x0)
syz_usb_control_io(r8, &(0x7f00000003c0)={0x18, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000))
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)={0x10000001})
process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, &(0x7f0000c22fa0)=[{&(0x7f0000000080)}], 0x1, 0x0)
ptrace$setregs(0xd, 0x0, 0x5, 0x0)
pselect6(0x40, &(0x7f0000000200)={0x0, 0x92, 0x8000, 0x4, 0x7, 0x8, 0xb, 0x1007fff}, 0x0, 0x0, 0x0, 0x0)
r9 = gettid()
timer_create(0x0, &(0x7f0000000140)={0x0, 0x3a, 0x800000000004, @tid=r9}, &(0x7f0000000040)=<r10=>0x0)
timer_settime(r10, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x200001, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"})
syz_io_uring_setup(0xe26, 0x0, 0x0, &(0x7f0000000240))

2m29.99611609s ago: executing program 3 (id=1038):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
unshare(0x2040400)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time\x00')
setns(r1, 0x8000000)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c)
r2 = syz_io_uring_setup(0x606d, &(0x7f0000002700)={0x0, 0x2ec4, 0x1, 0x1, 0x1d0}, &(0x7f0000000280), &(0x7f0000002780))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, 0x100010, r2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r3 = syz_open_procfs(0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsopen(&(0x7f00000001c0)='devpts\x00', 0x0)
ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000240))
r6 = socket$inet(0xa, 0x801, 0x84)
r7 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$chown(0x4, r7, 0xffffffffffffffff, 0x0)
connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r8 = accept4(r6, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, 0x0, 0x0)
sendto$inet6(r8, &(0x7f0000000200), 0x0, 0x4000050, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r9, &(0x7f00000004c0), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r9, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
cachestat(r9, &(0x7f0000000040), &(0x7f000009de80), 0x0)

2m26.185032825s ago: executing program 4 (id=1039):
socket(0x400000000010, 0x3, 0x0)
syz_pidfd_open(0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
pipe2(&(0x7f00000000c0), 0x0)
unshare(0x8000000)
semget$private(0x0, 0x4000, 0x0)
semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
futex(&(0x7f0000004000)=0x2, 0x4, 0x0, 0x0, &(0x7f0000004000), 0xb201fffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x33, 0x0}}], 0x344, 0x40010162, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = dup(r4)
write$UHID_INPUT(r5, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa)
write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x3, {}, {}, @raw32={[0x2600]}}], 0x1c)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
write$sndseq(r6, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c)
r7 = socket$tipc(0x1e, 0x5, 0x0)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x4)
write$UHID_INPUT(r8, &(0x7f00000003c0)={0x8, {"ac4b292b84bd72a8d758c2b2ff1c72004134668d5e310b7d0088b3d7afc4ce236d4ac7c0365d389808a78b05023561f45af31a93113ba5f725e7e28370eee47ad75feff31d8835c190aa0f8e1a70095d64a50cc8cda17f827ba53540a6bb426526e912ab7f941dd459ab9bfcd6432eaf3598e278858b1e87554a958e31c2625045b8843a2853ea7f22be915fb9fb47c83624b3fa2be5c12acbe5eb4b2a67ecd5af46c393e88329deb4af45ebbe41f0e197245ca0b4b69c0168803c9fd27ac61b79bacb0da740f3aade73ecf04f363c4dfc691d939c573bb1222b0eb8e165d6d6edfbc770ce067bbef32856c6f514b0a38ce4cf86b89b5a4dca3dd0f48a4253cd3547f9a898f29836a51c60949ee877b24ecdb330ad61b5833a24e4e31d990dbf3a5195784d6dcd13cdad3869526b3531c5987dac7444d60e4b5334859825d5de308ade959d81e72f5593ce8adf26513d3a2c6037ac9c77c45ccae6d1de257b4dee8283fe2f47e8744ba7fd648697d55bd8582d9aba94a5caee75bad49b35f9465085d8f44b75a77515b6309bd284c305fd3a78c6526105c5d49e12d4d56938d259cebd663b6bf8e8b052be7e90c7c5a184c41068b14ec261b736e59b5a75a4f1db359971e653dc9ecdedb8ae9928fc6ca04d99995539be8ccc144dd3e0fdf46fa00638cff0e3f0ff92ae49cfe9a88c815971c52fff59935ed679fb7500b71bca52d5885c9d22fc5148b89c59bdc366786928c13430069666e03e42731c93c47508ff053d1193b15dfa6133dc3a3db587bc5ca05c697f498cb17496b5e8f6629164996f1b67f3aeb7aa282f5716d0d5bf8b9d0e674ebec3e6beccdd4e457254fd886457e4f51e454f1c1e7ce5ee5125bc825410e1303ac4e9fcff7eac2955bb43a6a01863f7f32cae717a7abc0afd2953396a19e930f06dcc5cf73aa089b6ff9b65ec2e954e87229670e42c2d44dfc79d7866968b08baee738ee6936539d22dec8a966f90fcce231c0c5232bbde8925da8abdae1efd04da31e9627bea70fb7941242588c2ed40b8e14a5d7406cf28c62b94530064b4b10dbce57ef97436d57e3cc81d05adb22838470e1c64bab7f198b3efaf753d12392465d285586fd484dfe0323536687523b175dacd2e91a959e1c0df2593a2954c44d489081915421114a38284cc6e62e43e3cb5073a8bc9989aef76332028b7c24178f47b1cba9a6a9e0a068445a75ae6f568031f617c37bc24a3ca3c950546aba27f7400029a7ffc11600e17cd5e4efd4e91963468d1185e8780db244c8da8ce027801a6ff13e2dfdb5add1800b66a1720c35f2a8219c7dbf439c7c524da32c64c7e6056b60b53c02cb620fb64c6d2f12f391a8b4a19fc0f2e0644b8302a24a2991291c726cef1d8cf765f63b1f994a479f0e81afd4e6e3300767c9debda23f2058d7f5d31497008fb1ff951ba3bcfac9abe0ea3fc8a3cfc770200d885b6fc758aef7df4b8bf305ce373e888205b90eed8f1528b33f198d0f0802eccce8ca133af7d8a27a00f8e9ec981c618f48486864cd782d3d803bdce926e1447b3ccc8f64314b6b07d3b42e563ecc4fe8fbe4ab414893191d5da7d00e30733c7b975aef14dd5a745927d10fb322ca2d079a698f8089ce1a7dd3cd83484cebdae7437dd988a00062ce950c77bf0eb1a4b40b4815685ada031fd16e4b89f66f7ec804e752efede8f3d79c78c1bd97d9e1eaa19f87715689ddc3ba55d787cae0b30dd950197da2b389838746fb853d5a65d1b281d51500b8c0c8430cc1b2b09e1794ce2ea0171d6e822ba87056dcf6663aa33396245897572ac8a762838a5738690dcc3f6bd2028a4a108355d69e801996f68828420919741b0af974856366d3196a71e606b20c153ce75a3ec121215a5b68ebccc5a15fadbfe2e703754c95dd5c77ca935944231557c480ed83b0b5a8b19f566f5003d51301a6b342cda98529b3a3ba2f76f19e70e8900a95e5de1153d6a302f985f6627a3d5d63cd7f1bc125236730ff3ddcc92a5fbbd1f4decd70752891dd71b1cd53f0841b8b3e9616b661f3b73f776c2ce7928bdeb978182c2a6eb3c94da356a9601fdf0b9b084b0bfa4b93323f0c49bf789699f77baa26ed98ac6d88e2c924f28715fa16a50d2f6382ef9f3eac4f71fc952b18c1f6710a8750921e130b7f90ac5d0006a3c8163f9a7962c87856600aec4e9cb28b7de3655eec56feb56afb525f63ab4efbb05458b702cb9c9998c241d33235e687fa16f17cc95d1e3903bc2da5b08dc511de3d7ed898eb29090b2afd2e894580c479e783374c2ae90034b55d05251d45106840b503e0b3211d0f2db7ff0bb45e9da9b900f4e80dabc95cc90d0606c72417a99794edd0fe10bf6d26248ddf04f43e565daa073832b47baf9953fb44e657dfe7beedf5bec4f0556e5cd5e308bf0857cfa984d4e2f65aff9beab8b4b000bfd9769986489f66ea5b242cb83403e47906ecaacb7dd627533d9bce8cd37d83147dc4fee263c96393a0f6cc41d502e9e49f232cbc3e2537a3aa76c1a7ccc6a83aea3041faf0f6df6a12fa6e6f7e9540e7a31c89d3c7645b5d6a17ede151761c607ce1456b303f9f64c80574690502ed3ec632bbd9860168ad5f2b7de7528c02fe2984bbc9b20ae0f1ec57a3d33b0432a96d92251a653ec39e6caf3f738485a41e38370d71da6fa538b54fa0976f9f7f3dd8763eef351d77b9b9354136d16326cf58022f1c67d801781daf637b092b43be7e467ab8b6382c570c8c32c7843b8ee7eb31db9a4fd484ba7f0f08dd87109caad8cd7b6f93ae606446b4be60baf61a65bbaa8d5309fea6aa151f12dc5725a890ba6f6c67a7ac6609ed44ba231aae3131ecc45bb69c92f98e843cc99b45fddd3ee672a3cc62d8e2056112b88995c586f56fcdb93362a018eee321e2ee9f6f5276f462486e255faaa8a7b65117cf9e744c82ab5795ce13078d8c76519d59f81013dc17083303dcad1847812a76f01b0d03d3c3621f6c75a0a749ae9d7a7c7da4d4f49a9f432a5418f40d5be850204b1ae66183c1bf83c7f74be4ccba2bc211383f9c1b9c6c5e216e5a93b091fffb0aee6aee2ccef5e200ba11428b8724690749aeb96ef39be5c4e63a7bd9dd093b96e0658cbbc54341a161356227795140d9bc5361c2c502e67acd84ef346c1e029465bd1329727f5056df7d63747cbd7c6f54a80f74bb824b07aa7006de2c18e31e49b04a52045a3895cd2567137937f22fa27f983a7e52eecf47652e2d80c4e03c55ad269550a97b37c94763cdf89b9244cddeb509429e2668fb088acdda97aea01f3bfd8df8910d8c39f5ccd46e851bb4077b392d66d56be56645295af3251aed0c8dd8cb097bfc77705e1f13c2ff79da0f9c26f08f903494295b1e1b566a4124b88f0536858039f9be3bfe7bcb66e57122bdf2fb679923ef156153d2ae1ba1de71a510d186dc9bed86265018299702e849a4ad99f655075aae194cc062d9b07c0573337538a5a6d6c6d2921fbd181d6e305df7a1d62a82154fcde4a1aafdd6f4e7e49a7f349f628ba372d49fcbcbbd71c23e234218b79cd80088b2b4ab4e20932eacaa2e91236a4c7fc82f6a49354436dcc806b50aca9264fcd9b199eafd6381178db163d4ce377389c67436fb07d58cd73e6a9204f447eb9c100c223ea391bcba8989426c5c8cdd0300279daa31bd5730d9ab69e5904d7386273a76f779335ce5e44f84d3f3686573ea71f2e64922e82bf2f08c877c54ee7cd160c79d68c500df6f69d033f2304d830c7cf109f5c993abacf15d94baefe49265e24f838af559cdb5695a8135ac2b6ca1d7b5600803b1f24dcc29148aa94905dda78a9f19b21fec2d780fb962dab7f1f7c7ea4aef475540fa0dc2b852f9cfdad43e8a6fed633854a1e1b96169f28961349a9ecd6d0f1f2473f036db92c0c0e64733668fc6d69becb06af2480ac856e9431439d914557a31e80badca76f85086fba1fc7374cc249c5983cc085c7bf3aa5ef12afb3bc72fe479507666bb38f50878fad0450dac4b39ea57ed01654b17590f9478dfab02e664ba0e34d4a764374d09de43b69d5007077b2bafb42e260aa8fd4aa3bef9a8d5dc8e2ecde7c2c2bfdaa21802b7d67588854288512602a41e25e09f59633fbd92df9478bc6e6a6b3b560dca5798a895e8dfa93ae9fea23729da6f3a40d4af3efcd4f6d2d02ffd2b0270960cdaea8af5004fdb18c5a510f2199724f17a8a18f3b1bc132df7affdf6f40310131e448c040fe446309352e24cb7fbc94ff9e1555e85f6479d4952854917eab50738aa6f4b70c445557703778056f7465f5d0d92bf10308a5a61574f5576702613770399805aed655d3443715dbf23190b6f0480e30c82840b59f69a71bbc19f00ac18d220af047ef89515d946dc77dd08c6abf28f6e796d3c70a4ae3d4ba01bb44fc6f03e31831ee89f583ef3d40f6c742778fac42ccf1e30367a469322d45a9725a1228ab0639de1f38c1f365c765ed9131a9d535cb6ffe49d556dee403e2202de0d04ec682c58e6d508fb377e3b7d9b748955ffc6b27b03207a3c15cd5114e631ca080c24e1147bb6d398629efcf288e3240d6311034057a031f9ff7efb07fc8ee34f19c32115f361f9e03b89f080111d141e2fbfbcd5a3d54e32c6ef1dde18c384d6bf2c4b5fa21e7efeb0b5c9c27a7740be213dce807e6a01acb09634aec0fe66bfb2ab4da89a13c42207577e38105e665afed154fb3805974d31289351937b4c67b937ae644d6cb3f913d2e05c3dce1917e1551304a5c437d69a2d13ab33989d729e6c2ed45f847b6cf5169ec4459d541c7a70199ebca316408f7adfb168e7ac452f507652ea3892e64a4d81d575825168426f39c41448beb5044ec5712f2e10b6d88d471eecf5f29085474fd2aae2791ffb41222a9dbb8c6d32847819c15201e95d0741ee1ab75ea046beca9bc8952b62ddd8a30fe2637996483d3104f540c9a985f8638ba17da2e618255f9a615fce90e1f96799d261cc551b9187cad7a9c5a9f6ff58e7cf9277856ca14e582efd62c3d384131e2fc21b9a01314bc69d54f235ce6118d756137b03c657bb26194b175a716ebe6ba03a01cb161a77815654da6a5ad327859e8af7d3f53cf1d34b84c0aafdbf8f3badaff20d010e97f794d83d5498b59a787ba94bb82d91637308313b4c92def68945b6d3d0e3654cb24b4926e46757e576d30024640fa293db106d789f41a1e481ace0c314920bdc82819e64720746ee22592a11f5917c1bde47db20902551fa838f81942fec3552f41261e2b7418e500ab9e5ea704141f0fc414a5cc6062c257214950de1c32b1951b169c7a613417695036e72bff2ce9c1a180fde1cf64cf85828f6eb9126465762686e64ab090e524e7edb6d03c3571f233f60ffc570b96a5c0839ce8d42bdc62499f8f56ee8c4a89ec4f35a7e38fe23c4b9b1625546c1a16087980d7a72c15fb7b50c9a212d9284a1cdaa1a4d45169a98ae6a730a2a07b8cb5adccdceb3131b1aa6c06b8fc7390f215a2c9ea2b2cac1026ed5965e92673608d28d55fc4e623034716ef0edf7d077809d09d8db38519d5d00a1a415b5bc431d8c6a4d558c930437565cd531c6e01631ee60d9e6e782580a409ab645c72a4b93f68100bc22a5275f66d54dbefc44365a07fafe99368b09a891767e5d376b1d0cbdc02679fb10f359d3ed8f7c268c7f0fbab77b483f44f08ee412c20a155d058addb21376fec84fbb3838c6b6aa4d5bd54e1b9770d87628f244e17e5ffc2b28eff9fb489f984b7", 0x1000}}, 0x1006)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)

2m24.654978938s ago: executing program 3 (id=1041):
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x6000c181)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019ef00000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (fail_nth: 2)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0)

2m23.272822868s ago: executing program 2 (id=1042):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc)
munmap(&(0x7f0000011000/0xc00000)=nil, 0xc00000)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000c80)='|', 0x1, 0xbcff, 0x0, 0x0)
writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1)

2m23.081529614s ago: executing program 2 (id=1043):
syz_usb_connect(0x5, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x201, 0xc0, 0x3a, 0x4d, 0x20, 0x1604, 0x8005, 0xb21d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x3, 0x0, 0x8c, 0x0, 0x8, [{{0x9, 0x4, 0x52, 0x98, 0x0, 0xa7, 0xa6, 0xae, 0x4}}, {{0x9, 0x4, 0x9f, 0x6, 0x0, 0xff, 0xff, 0xff, 0x5}}, {{0x9, 0x4, 0x9c, 0x3, 0x0, 0xff, 0xff, 0xff, 0xfb}}]}}]}}, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0})
socket$netlink(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x4e20, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7}, {0xa}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x32}, 0x2, @in=@rand_addr=0x400, 0x3506, 0x4}}, 0xe8)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
sendmmsg$inet6(r2, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000000)={0x8, @multicast2, 0x4e22, 0x0, 'lblcr\x00', 0x4, 0x0, 0x6d}, 0x2c)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x60, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xb4}}, 0x40880)

2m19.16324054s ago: executing program 2 (id=1044):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0})
ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61920b55f6f876b2ff"})
r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000800)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}})
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
r3 = socket$kcm(0x10, 0x2, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd='])
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x1010}, 0x8090)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r7, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r7, 0x28, 0x2, &(0x7f0000000000)=0x3, 0x8)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01109e6d00000000000f6b2cdf0e821a0c256b152bcae1bb92f00aeeeed56203ac3b1cc25325b0edf17aff2f92d55acd946d5ca9f6180da8d8f773ea37abc3a8dd07d0b72126912366e751fa53dc226a3c6a46c57c28503f0bc19d1644e07784d712255b4b518ff91e2c03374d77a8ca1a2bcbe61b3663cc6a750a1ff04f44a9a11cb8749f0f267e81ab0b9c598499ef0fc05e2fa06f3ade9764", @ANYRES32=r9, @ANYBLOB="0a0006000802110000000000060066008e8800002000330078bd0900589733b902f1ffffffffffff0802110000000250be000e80"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

2m18.951894663s ago: executing program 3 (id=1045):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0x4, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket(0x1d, 0x2, 0x6)
r1 = syz_io_uring_setup(0x4aa, &(0x7f0000000380)={0x0, 0xfffffffc, 0x10100, 0x10010000, 0x13a}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000200)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x18, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)='./file0\x00', 0x1, 0x402081, 0x23456})
io_uring_enter(r1, 0x8038d5, 0x416e, 0x0, 0x0, 0x0)
ptrace$setregset(0x4205, 0x0, 0x201, &(0x7f0000002c40)={&(0x7f0000002b40)="d215500920b7b689dbbab33c197b06fd194b6569a77419291f393b4709fcdcfd1b9261abbfb3c204dea871c12564f9e81312af990990b956a113f356794968c6abfe836b23eb996860207acd220fc6c213c7686b6eae50a48787efd0cc611682dfa96ca9f03dc9f0347196b3f35afaabe41ca6b5bf700ab233cf179db79e35b6da8f4af9566b12f572c92081544df51914e70001a5ff58c9964f8308f7058e234b0200dd1cb26716e265b1b409ba501e7bfc04ea6d704226a6c06f476c5cc92726da57553efbe657c483051fc5d0", 0xce})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="010010b6491e4847367368", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000180000000000000", @ANYRES32=r4], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x38)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100))
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010000080000000000839ee3632a2fe49386064242ae934d7480", @ANYRES32=r7, @ANYBLOB], 0x1c}}, 0x0)
r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'wrr\x00', 0x20, 0x6, 0x7f}, 0x2c)
pipe(0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x0)
r10 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r10, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r11 = userfaultfd(0x80001)
r12 = gettid()
process_vm_writev(r12, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)
process_vm_readv(r12, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000180)=""/101, 0x65}, {&(0x7f0000000580)=""/47, 0x2f}, {&(0x7f00000004c0)=""/140, 0x8c}, {&(0x7f00000015c0)=""/159, 0x9f}, {&(0x7f0000001680)=""/184, 0xb8}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x7, &(0x7f0000000340)=[{&(0x7f0000002740)=""/154, 0x9a}, {&(0x7f0000002800)=""/167, 0xa7}, {&(0x7f00000028c0)=""/202, 0xca}, {&(0x7f00000029c0)=""/132, 0x84}, {&(0x7f0000002a80)=""/143, 0x8f}], 0x5, 0x0)
ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749})

2m18.833163978s ago: executing program 4 (id=1046):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000240)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x402, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80)

2m17.835421518s ago: executing program 4 (id=1047):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e1f, @empty}}, 0xfffd}, 0x90)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9c, 0x32, 0x3f, 0x8, 0x4a5, 0x3003, 0x3ab2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0xf0, 0xf6}}]}}]}}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000000)={0x2c, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003aa000000aa03"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
chdir(0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$printer(r2, 0x0, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8000, &(0x7f0000000000)=0x5, 0x8, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)

2m17.393838235s ago: executing program 3 (id=1048):
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000002380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x28, 0x1, 0x0)
r2 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x2}, 0x1000000, 0x0, 0x0)
add_key$user(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0xfffffffffffffe47, r2)
syz_open_dev$ttys(0xc, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0xf0f020})
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000005dc0)={0x0, 0x0, &(0x7f0000005d80)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x44814)
gettid()
timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x40, 0x800000000004, @thr={&(0x7f0000000080)="b2db227bae9c53fc9b205e696f49356b904829a73111d8d3af49d917b72f06bd51f449", &(0x7f00000000c0)="77f68bdba021cfc2bf698a3d8d307cc688a605927037f8de7742c23325095e861757"}}, &(0x7f0000bbdffc))
madvise(&(0x7f0000088000/0x2000)=nil, 0x2000, 0x64)
r5 = open(&(0x7f00000000c0)='.\x00', 0x48800, 0x50)
preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0)
r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)
pwrite64(r8, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='./file0\x00')
getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8)

2m15.409585075s ago: executing program 2 (id=1049):
listen(0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, 0xffffffffffffffff, 0x1, 0x2}}, 0x20)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x401, 0x9, 0x8, 0x0, 0x7}, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000ba1000/0x1000)=nil, 0x1000, 0x0, 0x4, 0x1c0000)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x5ff, 0x2000)
timer_create(0x0, 0x0, 0x0)
syz_io_uring_setup(0x10d, 0x0, 0x0, 0x0)
r3 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f0000000400)='_', 0x1, 0xfffffffffffffffe)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x3)
r4 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
r5 = add_key$user(&(0x7f0000006400), &(0x7f0000000340)={'syz', 0x3}, &(0x7f0000000680)="3e12d23d346cfdeb1716f738274bc1c03bee4423fa20837e6e86b86592e9be8351aabbd6e24f37d5095f839fa4a3507df4f7526f2440e7988da94ccd868dd8741d1e43eba0b67b516be14a8b51a75bfd611b2d7ae6a21d056c2c5116a416a76b0204dc55ea62d43c809e0ed6e56163fdab317afd5c34d614367e4425bb9a97e38b8beb84ef6d549eed5aaa86dbe646fc77a9b3df93199c796fa597f452bed6b6fbcc812df9be8e35d8d15086609c033a5d2a42d5dcb0d103098fa302c5b1", 0xbe, 0xfffffffffffffffe)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x178, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x1, 0x0, 0x80}}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xfd}, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in=@loopback, 0x0, 0x2b}, 0x0, @in=@multicast1, 0x800000, 0x3, 0x1}, {{@in6=@local, 0x4d4, 0x6c}, 0x0, @in=@multicast1, 0x3}]}]}, 0x178}}, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x2, 0x13, 0x0, 0x8, 0x2, 0x0, 0x70bd2d, 0x25dfdbfd}, 0x10}}, 0x20000000)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha3-512-generic\x00'}})
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x0, 0x802e2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}})
pipe(&(0x7f0000000040))

2m12.581879626s ago: executing program 4 (id=1050):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x2)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000140)="e8", 0x1}], 0x1)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0)
socket$kcm(0x29, 0x5, 0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test', 0xc3a01, 0x0)
r3 = syz_open_dev$sndpcmc(&(0x7f00000001c0), 0x4, 0x62042)
sendfile(r3, r1, &(0x7f0000000000)=0x1, 0x8)
getpeername$l2tp(r1, &(0x7f0000000040)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x64, 0x2c, 0xf25, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {}, {0x8, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @local}, @TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0x6}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xff, 0xffffff00, 0xff, 0xffffffff]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
ioctl$UI_END_FF_UPLOAD(r2, 0x406055c9, &(0x7f0000000100)={0x5, 0x0, {0x53, 0x326, 0x0, {0x0, 0x2}, {0xe80, 0x8}, @ramp={0x7f, 0x7, {0x7d, 0x4, 0x3, 0x9}}}, {0x52, 0x3, 0x7, {0x7, 0x4b}, {0x4, 0x9}, @const={0x1, {0x0, 0x9, 0x2, 0x6}}}})
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000080))

2m12.28860955s ago: executing program 3 (id=1051):
getpid()
r0 = getpid()
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000})
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x8020000)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
r2 = socket$kcm(0x2b, 0x1, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000004000020000052c00048028000180080001006f7366001c0002800800014000000009080003400000040105000200020000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0)
sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)="d80000001000810468f70082db44b904021d080b01000000e8fe55a11800150006001400000000120800040043000000a80016000a00014006000d00036010fab94dcf5c0461c1d67f6f94000534cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x20000004)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080), 0x24)
close(r2)

2m12.105142873s ago: executing program 2 (id=1052):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_emit_ethernet(0x8e, &(0x7f0000000380)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x58, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0x4, {0x8, 0x6, "cd85b5", 0x7, 0x84, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, [], "aad25a7f302d4579b298392ccf95e1e48f10658b1a1c7edc1ffd13d9ccbf356d"}}}}}}}, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='htcp', 0x4)
r1 = syz_open_dev$video(&(0x7f0000000280), 0x80, 0x68c02)
r2 = syz_io_uring_setup(0x1e20, &(0x7f0000000100)={0x0, 0x86f7, 0x10100, 0x1}, &(0x7f0000002000)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd=r1, 0x3, &(0x7f00000000c0), 0x0, 0x4})
io_uring_enter(r2, 0x48ed, 0x1000000, 0x2, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r6, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", ""]}, 0x30}}, 0x4008000)
r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000240)={0x8, @sliced={0x3, [0xc88f, 0xe565, 0x4, 0xedfb, 0x0, 0x6, 0x1, 0x9, 0x1, 0x1ff, 0x9, 0x5, 0x1, 0xc, 0x100, 0xfffe, 0x89f6, 0xffff, 0x2, 0x2, 0x1, 0x81, 0x800, 0x8, 0x9, 0x4, 0x4, 0xa2, 0x6, 0x0, 0x3, 0x9328, 0xffff, 0x5, 0x8, 0x6, 0x6, 0xd4, 0x3, 0xe0, 0x6, 0x9, 0xfffb, 0x0, 0x2, 0x3, 0x6, 0x7], 0x40}})
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

2m11.705014819s ago: executing program 4 (id=1053):
socket$inet6_sctp(0xa, 0x5, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x28200, 0x0)
r4 = dup(r3)
r5 = syz_io_uring_setup(0xc0f, &(0x7f00000000c0)={0x0, 0x6efd, 0x80, 0xffffffff, 0x1a}, &(0x7f00000003c0)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r5, 0x47f5, 0x0, 0x0, 0x0, 0x0)
write$UHID_INPUT(r2, &(0x7f00000029c0)={0x9, {"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", 0x1000}}, 0x1006)

2m11.455702271s ago: executing program 3 (id=1054):
syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
recvmmsg(r0, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/153, 0x99}, {&(0x7f0000000080)=""/63, 0x3f}, {&(0x7f00000001c0)=""/115, 0x73}, {&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000380)=""/161, 0xa1}], 0x5, &(0x7f0000000440)=""/65, 0x41}}, {{&(0x7f00000004c0)=@generic, 0x80, &(0x7f0000000740)=[{&(0x7f0000000540)=""/221, 0xdd}, {&(0x7f0000000640)=""/255, 0xff}], 0x2, &(0x7f0000000780)=""/4096, 0x1000}, 0xe}], 0x2, 0x121, 0x0)
r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCGKEYCODE(r4, 0x80084504, &(0x7f0000000000)=""/97)

2m10.284981428s ago: executing program 2 (id=1055):
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000180)=@ethtool_cmd={0x3a, 0x1, 0x1, 0x2, 0x6, 0x7, 0x7, 0x5, 0x7, 0x6, 0x7, 0xcd, 0x54, 0x7, 0x1, 0xff, [0xd, 0x7]}})
openat$snapshot(0xffffff9c, &(0x7f0000000000), 0x101000, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@private1})
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r1, 0x0, 0x0, 0x20000000, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x1fc)
pause()
pause()
socket$inet_udp(0x2, 0x2, 0x0)
unshare(0x6a040000)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x18014)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
pause()
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0)
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb"})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = getpid()
process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
socket$packet(0x11, 0x3, 0x300)

1m55.97582003s ago: executing program 35 (id=1054):
syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
recvmmsg(r0, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)=""/153, 0x99}, {&(0x7f0000000080)=""/63, 0x3f}, {&(0x7f00000001c0)=""/115, 0x73}, {&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000380)=""/161, 0xa1}], 0x5, &(0x7f0000000440)=""/65, 0x41}}, {{&(0x7f00000004c0)=@generic, 0x80, &(0x7f0000000740)=[{&(0x7f0000000540)=""/221, 0xdd}, {&(0x7f0000000640)=""/255, 0xff}], 0x2, &(0x7f0000000780)=""/4096, 0x1000}, 0xe}], 0x2, 0x121, 0x0)
r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCGKEYCODE(r4, 0x80084504, &(0x7f0000000000)=""/97)

1m55.893805424s ago: executing program 36 (id=1053):
socket$inet6_sctp(0xa, 0x5, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001300), 0x28200, 0x0)
r4 = dup(r3)
r5 = syz_io_uring_setup(0xc0f, &(0x7f00000000c0)={0x0, 0x6efd, 0x80, 0xffffffff, 0x1a}, &(0x7f00000003c0)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r4, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r5, 0x47f5, 0x0, 0x0, 0x0, 0x0)
write$UHID_INPUT(r2, &(0x7f00000029c0)={0x9, {"a2e3ad214fc752f91b5d090936f70e0dd038e7ff7fc6e5539b324c078b089b3438076d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b35310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c482a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc311f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006)

1m51.832063323s ago: executing program 37 (id=1055):
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000180)=@ethtool_cmd={0x3a, 0x1, 0x1, 0x2, 0x6, 0x7, 0x7, 0x5, 0x7, 0x6, 0x7, 0xcd, 0x54, 0x7, 0x1, 0xff, [0xd, 0x7]}})
openat$snapshot(0xffffff9c, &(0x7f0000000000), 0x101000, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@private1})
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r1, 0x0, 0x0, 0x20000000, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x1fc)
pause()
pause()
socket$inet_udp(0x2, 0x2, 0x0)
unshare(0x6a040000)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x18014)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
pause()
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0)
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb"})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = getpid()
process_vm_readv(r5, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
socket$packet(0x11, 0x3, 0x300)

38.627779772s ago: executing program 7 (id=1205):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x70)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x34808521, 0x401, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xa4001f7e}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20c01, 0x36)
io_setup(0x202, &(0x7f0000000200)=<r5=>0x0)
io_submit(r5, 0x2, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r4, &(0x7f00000000c0)='!', 0xb7f40, 0x300000000000fffe}])
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
dup3(r4, r2, 0x0)

38.416210535s ago: executing program 8 (id=1206):
socket$igmp(0x2, 0x3, 0x2)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0)
listen(r0, 0x50)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8), 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="12015001020000402505a1a440000102030109025c0002010070000904000001020d0000052406"], 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80804120, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x1000}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r3, 0x0, 0x0, 0x0, 0x80800})
io_uring_enter(r4, 0x3516, 0x3e44, 0x8, 0x0, 0x0)

36.545685685s ago: executing program 7 (id=1213):
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
unshare(0x20040400)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1)
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)
open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0)
r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
tee(r3, r4, 0x3, 0x0)
r5 = syz_io_uring_setup(0x4e3, &(0x7f0000000480)={0x0, 0x938c, 0x10100, 0x3, 0x0, 0x0, r1}, &(0x7f0000000180)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
ioctl$TIOCSLCKTRMIOS(r8, 0x5457, 0x0)
io_uring_enter(r5, 0x708, 0xec72, 0x0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)

36.124089669s ago: executing program 6 (id=1216):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) (async)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x6779, &(0x7f0000000540)={0x0, 0x3, 0x10000, 0xfffffffa, 0x66}, &(0x7f0000000140), &(0x7f0000000280))
eventfd2(0x27, 0x0) (async)
r2 = eventfd2(0x27, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000040)=r2, 0x1) (async)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x7, &(0x7f0000000040)=r2, 0x1)
io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, 0x0, 0x1)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
unshare(0x2a020400)
sendto$inet6(r3, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
ioctl$BTRFS_IOC_RESIZE(r3, 0x50009403, &(0x7f0000000000)={{r3}, {@void, @actul_num={@void, 0x40, 0x4b}}})
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0x1, 0x6, 0xfe, 0x5, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}, 0xe)
recvmmsg(r3, &(0x7f0000005b00)=[{{0x0, 0x0, 0x0}, 0xfffff5c9}], 0x1, 0x20, 0x0)
shutdown(r3, 0x0)

35.007368246s ago: executing program 8 (id=1220):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_emit_ethernet(0x8e, &(0x7f0000000380)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x58, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@hopopts={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0x4, {0x8, 0x6, "cd85b5", 0x7, 0x84, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, [], "aad25a7f302d4579b298392ccf95e1e48f10658b1a1c7edc1ffd13d9ccbf356d"}}}}}}}, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='htcp', 0x4)
r1 = syz_open_dev$video(&(0x7f0000000280), 0x80, 0x68c02)
r2 = syz_io_uring_setup(0x1e20, &(0x7f0000000100)={0x0, 0x86f7, 0x10100, 0x1}, &(0x7f0000002000)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd=r1, 0x3, &(0x7f00000000c0), 0x0, 0x4})
io_uring_enter(r2, 0x48ed, 0x1000000, 0x2, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x14, 0x18, {0x0, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", "", "", ""]}, 0x30}}, 0x4008000)
r6 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000240)={0x8, @sliced={0x3, [0xc88f, 0xe565, 0x4, 0xedfb, 0x0, 0x6, 0x1, 0x9, 0x1, 0x1ff, 0x9, 0x5, 0x1, 0xc, 0x100, 0xfffe, 0x89f6, 0xffff, 0x2, 0x2, 0x1, 0x81, 0x800, 0x8, 0x9, 0x4, 0x4, 0xa2, 0x6, 0x0, 0x3, 0x9328, 0xffff, 0x5, 0x8, 0x6, 0x6, 0xd4, 0x3, 0xe0, 0x6, 0x9, 0xfffb, 0x0, 0x2, 0x3, 0x6, 0x7], 0x40}})
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

34.895837138s ago: executing program 7 (id=1222):
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000180)={[0xe, 0x7, 0x4, 0x1d0, 0x3ff, 0xd21, 0x7, 0x54e, 0x4, 0xfff, 0x1, 0x100, 0x0, 0x3, 0xa7a2], 0xeeeee001, 0x144000})
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000000), 0x10)
io_setup(0xc8d, &(0x7f0000000040)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0xfff8, r1, &(0x7f0000000200)="0500000093c21faf16da39de706f646800580f020000ecff3e420f000000000001580f02000000003f420f00000000000029ffffff000000", 0x38}])
io_setup(0x17, &(0x7f0000000000)=<r3=>0x0)
io_pgetevents(r3, 0x40, 0x0, 0x0, 0x0, 0xffffffffffffffff)
socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
shutdown(0xffffffffffffffff, 0x0)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x3, 0x0)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r8 = syz_io_uring_setup(0x8d2, &(0x7f0000000240)={0x0, 0x0, 0x1000, 0x6}, &(0x7f0000000040)=<r9=>0x0, &(0x7f0000000080)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r7, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044})
io_uring_enter(r8, 0x2afd, 0x308b, 0xc, 0x0, 0x0)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r11, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x4000010, r0, 0xb8fe4000)
ioctl$KVM_X86_SETUP_MCE(r11, 0x4008ae9c, &(0x7f0000000140)={0x14, 0xcf4e74310708dfc4, 0x4c})
syz_usbip_server_init(0x2)
r12 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
sendmmsg$inet6(r12, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0)
io_cancel(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8557defbdeab9bad, 0x4000, r4, &(0x7f0000000080)="819b39c20e972b41641adc684fb641b15eed6b289b8d9e2fe88bfa63a07528616d", 0x21, 0xa, 0x0, 0x0, r11}, &(0x7f0000000100))

34.66678036s ago: executing program 6 (id=1223):
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x4, 0xcf4e74310708dfc4, 0xc})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x18, r1, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c045}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x40000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xff, 0x4, 0x6d, 0xc9fa, 0x3}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000804)
ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r11 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r12=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x82, &(0x7f00000001c0)={r12}, 0x8)
ioctl$sock_netdev_private(r3, 0x89f1, &(0x7f0000000300)="71a6f70f9468f1b17f72637077019b7dd9f90dcb580bc3cdc7bf06ab34f1961692c315c3550a8e04be4ffbc33e945bd2cad509955f37e6cf42cc5df5d534b1a840fee5d69c3d58be6b45e2ba4424a8b3330c0d90110f1cc0fc96d4988870c6fc0176cce0c02d9c443c6012ad4343c91956854a359022a8b6111c74ae8af74a06abd0e09628807fda678522be32f11ebbf4609a7ee108fbd8ad5fc47d49446b239cf77b18dd9154cee23e5c45217c8be252c052b5028707d3aebbe0e9f18bc8e3ccac8bb72a4bd5d860b9acdc8b082f9be697b284ac19bd13f1d4b7c8e36d8445335c866b7876ccb6acc3b9c6d8a4bb0200000000000000")

34.560788595s ago: executing program 9 (id=1224):
r0 = socket(0x2, 0x3, 0xff)
setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0x200111, 0x7)
sendto$inet(r0, 0x0, 0x0, 0x40000, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10)
syz_emit_ethernet(0xae, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0)

34.526264757s ago: executing program 8 (id=1225):
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, 0x0, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=@newtfilter={0xa8, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x6, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc, 0xf}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x6, 0x1, 0xd9}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0xa8}}, 0x24044860)

34.342593863s ago: executing program 8 (id=1226):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', <r3=>0x0})
bind$packet(r1, &(0x7f0000000300)={0x11, 0x6, r3}, 0x14)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/29, 0x0, 0x8000000})
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680))
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00')
dup3(r1, r5, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f00000000c0)={0x0, r5})
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000000308010100000000000000000300000014000480080009400000d600060800012f439ff87fad9c030006000000a895c0130b79b6ff3cd41ec5474f15c201c157549e0355a87a8e58e9322892b994fa5724b4a45b55c0fb44932f570295c99a93deb57caf1f8d824463dbdbce76c7c30cf5a16d29fbb2"], 0x30}}, 0xc056)
ioprio_set$pid(0x1, 0x0, 0x0)
add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe)
unshare(0x22020400)
r7 = fsopen(&(0x7f0000000780)='proc\x00', 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, <r8=>0x0})
ptrace$setregs(0x2, r8, 0x8000, &(0x7f0000000500)="97ee8334d4a84ab667f6a299c1e95d9bd8b8691f45556302560d2cd83908670410fd87b475a4465b50b01a6959f683a302fe974d5006cdf809f05b24d46bc93f3be57020e9b1d918d441ff75566967666fe3d1d5089d07d9adf02b5a20793978cd07933871af7763c8325c82ffe9118e9ba296ef2af6298b99a829472002b6aba8ecb5f1b691f585adc9e91dd7aeb21c3f81623e4bd1565e37945b9a24fdcece89fb4bcbc114f64e864b68ccca")
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4082, 0xff2, 0x0, 0x0}, &(0x7f0000000300)=0x40)
fsmount(r7, 0x1, 0x8c)
ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0x2, 0x0, 0x0})

34.28804405s ago: executing program 9 (id=1227):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', <r3=>0x0})
bind$packet(r1, &(0x7f0000000300)={0x11, 0x6, r3}, 0x14)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/29, 0x0, 0x8000000})
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680))
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00')
dup3(r1, r5, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f00000000c0)={0x0, r5})
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000000308010100000000000000000300000014000480080009400000d600060800012f439ff87fad9c030006000000a895c0130b79b6ff3cd41ec5474f15c201c157549e0355a87a8e58e9322892b994fa5724b4a45b55c0fb44932f570295c99a93deb57caf1f8d824463dbdbce76c7c30cf5a16d29fbb2"], 0x30}}, 0xc056)
ioprio_set$pid(0x1, 0x0, 0x0)
add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe)
unshare(0x22020400)
r7 = fsopen(&(0x7f0000000780)='proc\x00', 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, <r8=>0x0})
ptrace$setregs(0x2, r8, 0x8000, &(0x7f0000000500)="97ee8334d4a84ab667f6a299c1e95d9bd8b8691f45556302560d2cd83908670410fd87b475a4465b50b01a6959f683a302fe974d5006cdf809f05b24d46bc93f3be57020e9b1d918d441ff75566967666fe3d1d5089d07d9adf02b5a20793978cd07933871af7763c8325c82ffe9118e9ba296ef2af6298b99a829472002b6aba8ecb5f1b691f585adc9e91dd7aeb21c3f81623e4bd1565e37945b9a24fdcece89fb4bcbc114f64e864b68ccca")
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r9, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0)
fsmount(r7, 0x1, 0x8c)
ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0x2, 0x0, 0x0})

33.936111496s ago: executing program 8 (id=1228):
syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x7}, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x42982, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, 0x0, 0x0)
madvise(&(0x7f00004a1000/0x2000)=nil, 0x2000, 0x15)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
lsm_get_self_attr(0x69, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r3, &(0x7f0000000080)="90", 0x1, 0x2000c851, 0x0, 0x0)
ptrace(0x10, r2)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000006, 0x20010, 0xffffffffffffffff, 0x0)
ptrace$poke(0x5, r2, &(0x7f0000000200), 0x0)
openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea})

33.857108103s ago: executing program 9 (id=1229):
r0 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81)
ioctl$HIDIOCGFEATURE(r3, 0xc0404807, &(0x7f0000000600)={0x9f, "029e455c444816865c7e41aca510ac366132a0240271a80b47fa2f70391c219a8192a52ed9390c921caaac308f7d6890c7d1d0090ad9254014396aa1f0751f9c"})
pipe2(&(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x84000)
r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
read$FUSE(r6, &(0x7f0000002400)={0x2020, 0x0, <r7=>0x0}, 0x2020)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000003c0)='wg1\x00', 0x4)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x2, @multicast1}, 0x10)
sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0)
write$FUSE_INTERRUPT(r5, &(0x7f0000000200)={0x10, 0xfffffffffffffffd, r7}, 0x4c)
splice(r4, 0x0, r6, 0x0, 0x10, 0x0)
sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f00000007c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="53340081ba60ccbb9d000000000000", 0xf}], 0x2}}], 0x1, 0x4004040)

32.22113812s ago: executing program 6 (id=1230):
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r4 = epoll_create1(0x0)
r5 = dup3(r3, r4, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000009000000000000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509feffffff00009500000000000000bf91000000000000b7020000010000008500000085040000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x1005, &(0x7f0000002840)=""/4101}, 0x94)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)={0x40002000})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
close(r7)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000001c0)={'vlan0\x00', 0x200})
r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r8)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r10)
r11 = socket$unix(0x1, 0x1, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x400000, {0x0, 0x0, 0x0, r13, {0x0, 0x6}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0xfffa, 0x7, 0x8, 0x5}, {0x6, 0x1, 0xd, 0x6, 0x6, 0xfb8e001}, 0x106, 0x4, 0x111e}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000015}, 0x24081)

32.217755935s ago: executing program 7 (id=1231):
socket$igmp(0x2, 0x3, 0x2)
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0)
listen(r0, 0x50)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8), 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$alg(r3, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58)
syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000001c0)=ANY=[@ANYBLOB="12015001020000402505a1a440000102030109025c0002010070000904000001020d0000052406"], 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80804120, 0x0)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xb423, 0x0, 0x5, 0x1000}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r3, 0x0, 0x0, 0x0, 0x80800})
io_uring_enter(r4, 0x3516, 0x3e44, 0x8, 0x0, 0x0)

31.604143623s ago: executing program 9 (id=1232):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000a00)=""/186, 0xba}], 0x1}, 0x2}], 0x1, 0x40000022, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0x12bc}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

31.428151296s ago: executing program 9 (id=1233):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f0000000040)=ANY=[], 0x118)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x2000000000000001, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40844)
r3 = fsopen(&(0x7f0000000100)='binder\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
fsmount(r3, 0x0, 0x1)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24000810}, 0x20004090)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4)
getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x2, 0x0, &(0x7f0000000040))
socket$inet(0x2, 0x80000, 0x6c)
r6 = fsopen(&(0x7f00000029c0)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, &(0x7f0000000400)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xda5\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f\xa1\xa8\x0f(\xae\xba\x99U\x9a\xe9\xf3=H\x99\x93j:\xd5\xd1\xf9\xa0\xab\xe1\x06T\xacs\xf0f\x88*\xf9\'\xe5\x8f\xe3\xf0\xa1\x95\xbb\xb4|\x04Hi\xab\xd3\x9d\xa9\xd8\x82\xaf@\xfe\x11\x1b\x98\xb5S\xec\xa0\xa3\xbf\xbc\xb7\xcb\xc23X\xd1h\a1\xccF\x17\x84%\xf8\x17a\xe9\x14\x80r\x1a\xf0.\x12\x19\xbe\xef\x93\xe0\xa72\x01K\x88\r\x0f]LN\xfc\x1db\xa25\r\x1fF\x8d\x87\xc1p\xaep\x13\xc5\xab\xa64\xea\x8b\xb7$%\x96i\x84\xb9\xb5\xf3\x19\xe7\xcf\xab\x19\x8a\xe6\xa3@\x04\x91\xd7p9', 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r0, 0x0)

31.09617531s ago: executing program 6 (id=1235):
ioctl$VIDIOC_S_JPEGCOMP(0xffffffffffffffff, 0x408c563e, &(0x7f0000002540)={0x2, 0x3, 0x1b, "526c99d0b30347ee25c0aba3437df17f45ab64c63a868348c84ed8a3070a7b23a2d766e29bbccfc8da6eebb8b7f6e21757bd5d41ce62e1d8d1060738", 0x30, "f63c922e58bbfd8795fc4b6e3b5fce085012cc32e1acbac0595e04ff61c0405da44aa3e4949cb7041579ce2dbe8374f273f1c6a2818ae6c5f2afa995", 0x8}) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020}, 0x2020)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4e, 0x9, 0x6, 0x0, 0x3}, 0x0) (async)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) (async)
r2 = userfaultfd(0x1)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4c0})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x14, &(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES32], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) (async, rerun: 64)
r7 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) (rerun: 64)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r6, r7, r7}, 0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={'md5-generic\x00'}}) (async)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
r8 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b03000100000000200012800800010067747000140002800800030001000000080002001ee91e522085524f41d68f8afd86b5f3790738920f13a188950bbd400b6f227a77b62ac74b3645622787", @ANYRES32, @ANYBLOB], 0x40}}, 0x20000000)

31.063377173s ago: executing program 0 (id=1236):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010102}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @empty}, @in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x3}, @in={0x2, 0x4e22, @remote}, @in6={0xa, 0x4e21, 0x200, @remote, 0x3}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e20, 0xfffffffd, @mcast2, 0xc}], 0xb4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}})
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000000000000000500060000000000050002"], 0x3c}}, 0x0)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r6, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r6, &(0x7f00000001c0)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x43, 0x0, {}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af83, &(0x7f0000000400)={0x1d})
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20)
r7 = accept4$alg(r2, 0x0, 0x0, 0x0)
read$alg(r7, &(0x7f00000012c0)=""/4109, 0x100d)
sendmsg$alg(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000e00)="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", 0xfc}, {&(0x7f0000002300)="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", 0xf12}], 0x2, &(0x7f0000001240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x8801}, 0x4000001)
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0)
r9 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000000)={0x30000011})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000fe00000005fcff837122a3ffff00000000", @ANYRES32=0x0, @ANYBLOB="1111020031880000200012800b0001006d61637365630000100002800c0004000300000100c2800008000500", @ANYRES32=r10, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0)
clock_gettime(0xfc040b904eac587b, &(0x7f0000000100))
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004500)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'i'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}]}], {0x14}}, 0x6c}}, 0x0)
r12 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000f2ff00000000000000f370e7fb72d7df7cfe845312de018ad1e86e6b02c96d9ee8545900000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0x19, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r12}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
socket(0x28, 0x5, 0x0)

30.942033472s ago: executing program 6 (id=1237):
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'})
sendmsg$nl_route_sched(r0, 0x0, 0x0)
sendmsg$nl_route_sched(r0, 0x0, 0x24044860)

30.880115882s ago: executing program 0 (id=1238):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', <r3=>0x0})
bind$packet(r1, &(0x7f0000000300)={0x11, 0x6, r3}, 0x14)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/29, 0x0, 0x8000000})
ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680))
r5 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00')
dup3(r1, r5, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f00000000c0)={0x0, r5})
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x3}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000000308010100000000000000000300000014000480080009400000d600060800012f439ff87fad9c030006000000a895c0130b79b6ff3cd41ec5474f15c201c157549e0355a87a8e58e9322892b994fa5724b4a45b55c0fb44932f570295c99a93deb57caf1f8d824463dbdbce76c7c30cf5a16d29fbb2"], 0x30}}, 0xc056)
ioprio_set$pid(0x1, 0x0, 0x0)
add_key(&(0x7f00000018c0)='big_key\x00', &(0x7f0000001900)={'syz', 0x1}, &(0x7f0000001940)='\f', 0xfffff, 0xfffffffffffffffe)
unshare(0x22020400)
r7 = fsopen(&(0x7f0000000780)='proc\x00', 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, <r8=>0x0})
ptrace$setregs(0x2, r8, 0x8000, &(0x7f0000000500)="97ee8334d4a84ab667f6a299c1e95d9bd8b8691f45556302560d2cd83908670410fd87b475a4465b50b01a6959f683a302fe974d5006cdf809f05b24d46bc93f3be57020e9b1d918d441ff75566967666fe3d1d5089d07d9adf02b5a20793978cd07933871af7763c8325c82ffe9118e9ba296ef2af6298b99a829472002b6aba8ecb5f1b691f585adc9e91dd7aeb21c3f81623e4bd1565e37945b9a24fdcece89fb4bcbc114f64e864b68ccca")
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r9, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r9, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002380)=""/4082, 0xff2, 0x0, 0x0}, &(0x7f0000000300)=0x40)
fsmount(r7, 0x1, 0x8c)
ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0x2, 0x0, 0x0})

30.659827692s ago: executing program 6 (id=1239):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x7fff0006}]})
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f00000002c0)={0x4, 0x1, 0x3})
r1 = memfd_secret(0x0)
futimesat(r1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x632c00, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x54}]})
close(0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_setup(0x7, &(0x7f0000000280))
openat$sysfs(0xffffff9c, &(0x7f00000000c0)='/sys/power/pm_async', 0x42, 0x8)
ptrace(0x10, 0x1)
landlock_create_ruleset(&(0x7f0000000080)={0x800, 0x2}, 0x18, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b4000000000000007910481f0000000071003000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xcd, &(0x7f0000000300)=""/205, 0x41000, 0x4, '\x00', 0x0, @sk_msg}, 0x94)
socket$kcm(0xa, 0x2, 0x3a)
openat$zero(0xffffff9c, &(0x7f00000001c0), 0x101000, 0x0)
mmap(&(0x7f00009fc000/0x1000)=nil, 0x1000, 0x2, 0x80010, 0xffffffffffffffff, 0x0)
ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000240))
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)

30.460037461s ago: executing program 8 (id=1240):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_procfs(0xffffffffffffffff, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
read$FUSE(r2, 0x0, 0x0)
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sigaltstack(&(0x7f00000000c0)={&(0x7f0000001740)=""/4118, 0x0, 0xfffffffffffffe7e}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xe0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000)
mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000)=0x1, 0x1ff, 0x3)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
wait4(r4, 0x0, 0x40000000, 0x0)
syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
unshare(0x66000080)
r6 = socket$netlink(0x10, 0x3, 0x0)
syz_usb_connect(0x6, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00'})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0)
gettid()
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, &(0x7f0000000280)=0x8, 0x4)

30.365401311s ago: executing program 0 (id=1241):
r0 = socket(0x10, 0x80003, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000000)=0x8001)
close_range(r0, 0xffffffffffffffff, 0x10000000)

30.056530811s ago: executing program 0 (id=1242):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x22400, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", <r3=>0xffffffffffffffff})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x5, "340b784fceefd131b8e6238c25f5998e5bf421e48f4b0a501922de974a3300", <r4=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r4, <r5=>0xffffffffffffffff})
ioctl$SYNC_IOC_FILE_INFO(r5, 0xc0383e04, &(0x7f00000001c0)={""/32, 0x0, 0x0, 0x500, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc01c64b9, &(0x7f0000000180)={&(0x7f00000000c0)=[<r7=>0x0], &(0x7f0000000140), 0x1, r6})
munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000)
socket$inet6_sctp(0xa, 0x1, 0x84)
r8 = socket$inet6(0xa, 0x3, 0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
mq_getsetattr(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(r8, 0x0, 0x0, 0x4000000)
sched_getattr(0xffffffffffffffff, &(0x7f0000000000)={0x38}, 0x38, 0x0)
r11 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00')
pread64(r11, &(0x7f0000000780)=""/185, 0xb9, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000000))
ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, &(0x7f00000001c0)={0x0, 0x0, r7})

28.404155279s ago: executing program 7 (id=1243):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000000", @ANYRES32=r2], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0xffffff1f, 0x70bd26, 0x1, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (fail_nth: 13)

28.384198912s ago: executing program 0 (id=1244):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
unshare(0x2040400)
r2 = socket(0x2d, 0x2, 0x0)
connect$qrtr(r2, &(0x7f0000002400)={0x2d, 0x1, 0xffff}, 0xc)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r3 = memfd_secret(0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r3, 0x0)
ftruncate(r3, 0x51a9497)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
pipe(&(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r5, 0x0, r7, 0x0, 0x1, 0x0)
vmsplice(r7, &(0x7f0000000380)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6)
ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, 0x0)
write(r4, 0x0, 0x0)
socket(0x2, 0x80805, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f0000000740)=[{{&(0x7f0000000480)=@ax25={{0x3, @null}, [@bcast, @null, @null, @netrom, @rose, @default, @netrom, @rose]}, 0x80, &(0x7f0000000700)}, 0x6}], 0x1, 0x22, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$procfs(0xffffff9c, &(0x7f0000000500)='/proc/bus/input/devices\x00', 0x0, 0x0)
r9 = syz_io_uring_setup(0x495, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x3, 0xd7}, &(0x7f0000000340)=<r10=>0x0, &(0x7f0000000280)=<r11=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r8, 0x4, 0x0})
ioctl$BTRFS_IOC_BALANCE_CTL(r6, 0x40049421, 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac14140008"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r12 = socket$inet_udplite(0x2, 0x2, 0x88)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
setsockopt$ARPT_SO_SET_REPLACE(r12, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x218, 0x218, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'pimreg1\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)
io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0x0)

28.163053158s ago: executing program 9 (id=1245):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x2, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000000)=0x7, 0x4)
setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4)
ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000240)=0x8000000000000001)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mlock(&(0x7f0000538000/0x3000)=nil, 0x3000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xef\xc8\xccH\xd1=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd6\x93S\xb3\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe)
ftruncate(r5, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r6, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000180))
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x20000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000c00))
sendmmsg(r4, &(0x7f00000031c0), 0x0, 0x90)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
io_setup(0x1, &(0x7f00000004c0)=<r8=>0x0)
io_submit(r8, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r7, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}])

27.828142118s ago: executing program 7 (id=1246):
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff})
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xaa000, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
r3 = socket$packet(0x11, 0x3, 0x300)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$packet_int(r3, 0x107, 0x8, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000000)=0x1)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'pim6reg1\x00', {0x2, 0x4e20, @local}})
getdents64(r0, &(0x7f0000000180)=""/243, 0xf3)

16.204525371s ago: executing program 0 (id=1247):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$alg(0x26, 0x5, 0x0)
socket$rxrpc(0x21, 0x2, 0xa)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x11)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_vhci(0x0, 0x0)
r3 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000400)={'#! ', './file1/../file0', [], 0xa, "0002783348b29e7bcaf3e29c2593b929f38db16e33ea"}, 0x2a)
write$UHID_INPUT(r4, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300"}})
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r6, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x20000000)
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x20000800)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x78, r8, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3f, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac}, 0x0, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x7, 0x3c, 0x2}}, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0xc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x78}}, 0x0)

0s ago: executing program 38 (id=1246):
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff})
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xaa000, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
r3 = socket$packet(0x11, 0x3, 0x300)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$packet_int(r3, 0x107, 0x8, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000000)=0x1)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'pim6reg1\x00', {0x2, 0x4e20, @local}})
getdents64(r0, &(0x7f0000000180)=""/243, 0xf3)

kernel console output (not intermixed with test programs):

d539 code=0x7ffc0000
[  372.643522][   T30] audit: type=1326 audit(1762148843.445:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9886 comm="syz.2.978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[  376.519465][   T30] audit: type=1326 audit(1762148843.445:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9886 comm="syz.2.978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[  377.951714][   T30] audit: type=1326 audit(1762148843.445:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9886 comm="syz.2.978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70dd539 code=0x7ffc0000
[  378.663323][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  378.669647][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  379.490596][   T30] audit: type=1326 audit(1762148843.445:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9886 comm="syz.2.978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[  379.704154][ T5900] usb 4-1: USB disconnect, device number 28
[  379.769977][   T30] audit: type=1326 audit(1762148843.455:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9886 comm="syz.2.978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf70dd539 code=0x7ffc0000
[  379.923510][   T30] audit: type=1326 audit(1762148843.455:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9886 comm="syz.2.978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[  380.113044][   T30] audit: type=1326 audit(1762148843.455:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9886 comm="syz.2.978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf70dd539 code=0x7ffc0000
[  380.550927][   T30] audit: type=1326 audit(1762148843.455:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9886 comm="syz.2.978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[  381.032738][   T30] audit: type=1326 audit(1762148843.455:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9886 comm="syz.2.978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[  381.155001][ T9930] netlink: 12 bytes leftover after parsing attributes in process `syz.5.989'.
[  382.028053][   T30] audit: type=1326 audit(1762148843.465:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9886 comm="syz.2.978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70dd539 code=0x7ffc0000
[  382.125792][   T30] audit: type=1326 audit(1762148843.465:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9886 comm="syz.2.978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[  382.383669][   T30] audit: type=1326 audit(1762148843.465:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9886 comm="syz.2.978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf70dd539 code=0x7ffc0000
[  382.411315][   T24] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  382.452090][   T30] audit: type=1326 audit(1762148843.465:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9886 comm="syz.2.978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[  382.491201][ T5900] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  382.584511][   T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  382.660690][   T24] usb 5-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00
[  382.759743][   T30] audit: type=1326 audit(1762148843.465:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9886 comm="syz.2.978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf70dd539 code=0x7ffc0000
[  382.782599][  T983] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  382.790650][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  382.850873][ T5900] usb 2-1: Using ep0 maxpacket: 32
[  382.957108][   T24] usb 5-1: config 0 descriptor??
[  382.972819][ T5900] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  382.991352][ T9941] syzkaller1: entered promiscuous mode
[  383.017838][ T5900] usb 2-1: config 0 has no interface number 0
[  383.068800][ T9941] syzkaller1: entered allmulticast mode
[  383.090765][  T983] usb 3-1: Using ep0 maxpacket: 8
[  383.119292][   T30] audit: type=1326 audit(1762148843.465:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9886 comm="syz.2.978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[  383.187730][  T983] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  383.217488][ T5900] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  383.357182][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.370663][  T983] usb 3-1: config 0 has no interfaces?
[  383.389049][   T30] audit: type=1326 audit(1762148843.465:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9886 comm="syz.2.978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70dd539 code=0x7ffc0000
[  383.412702][ T5900] usb 2-1: Product: syz
[  383.417007][ T5900] usb 2-1: Manufacturer: syz
[  383.433412][  T983] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  383.471290][ T5900] usb 2-1: SerialNumber: syz
[  383.477900][  T983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.489804][ T5900] usb 2-1: config 0 descriptor??
[  383.501284][  T983] usb 3-1: Product: syz
[  383.511919][   T30] audit: type=1326 audit(1762148843.465:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9886 comm="syz.2.978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[  383.543597][  T983] usb 3-1: Manufacturer: syz
[  383.586313][  T983] usb 3-1: SerialNumber: syz
[  383.600824][ T5900] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  383.623873][  T983] usb 3-1: config 0 descriptor??
[  383.784826][   T30] audit: type=1326 audit(1762148843.465:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9886 comm="syz.2.978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf70dd539 code=0x7ffc0000
[  383.811565][ T5900] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  384.046226][ T5900] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  384.131975][  T983] usb 3-1: USB disconnect, device number 30
[  384.350620][   T30] audit: type=1326 audit(1762148843.465:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9886 comm="syz.2.978" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70dd539 code=0x7ffc0000
[  384.656133][    C1] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short
[  384.699425][   T24] elecom 0003:056E:00FC.0011: unknown main item tag 0x0
[  384.838066][   T24] elecom 0003:056E:00FC.0011: unknown main item tag 0x0
[  384.868794][   T24] elecom 0003:056E:00FC.0011: unknown main item tag 0x0
[  384.880235][   T24] elecom 0003:056E:00FC.0011: unknown main item tag 0x0
[  384.887744][   T24] elecom 0003:056E:00FC.0011: unknown main item tag 0x0
[  384.909006][   T24] elecom 0003:056E:00FC.0011: hidraw0: USB HID vff.fe Device [HID 056e:00fc] on usb-dummy_hcd.4-1/input0
[  387.398831][ T1211] usb 5-1: USB disconnect, device number 32
[  388.399366][ T9959] netlink: 232 bytes leftover after parsing attributes in process `syz.4.996'.
[  395.428464][ T9972] random: crng reseeded on system resumption
[  395.700801][   T24] usb 3-1: new full-speed USB device number 31 using dummy_hcd
[  396.333808][   T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  396.374090][   T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  396.415190][   T24] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  396.492277][   T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  396.557010][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.916636][   T24] usb 3-1: Product: syz
[  396.950631][   T24] usb 3-1: Manufacturer: syz
[  397.554658][   T24] usb 3-1: SerialNumber: syz
[  397.708295][   T24] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing
[  397.739658][   T24] cdc_ncm 3-1:1.0: bind() failure
[  402.086865][  T983] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  402.350672][  T983] usb 5-1: config 0 has an invalid interface number: 69 but max is 0
[  402.394869][  T983] usb 5-1: config 0 has no interface number 0
[  402.401719][   T24] usb 3-1: USB disconnect, device number 31
[  402.470807][  T983] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[  402.570600][  T983] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  403.140737][  T983] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  403.149812][  T983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.251656][  T983] usb 5-1: Product: syz
[  403.313919][  T983] usb 5-1: Manufacturer: syz
[  403.351071][  T983] usb 5-1: SerialNumber: syz
[  406.212644][  T983] usb 5-1: config 0 descriptor??
[  407.740540][    C0] sched: DL replenish lagged too much
[  408.655390][ T5907] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  408.853066][  T983] usb 5-1: can't set config #0, error -71
[  408.922878][  T983] usb 5-1: USB disconnect, device number 33
[  409.451010][ T9993] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  409.458473][ T9993] batman_adv: batadv0: Removing interface: batadv_slave_0
[  409.681036][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  409.692235][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  409.701756][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  409.712184][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  409.720155][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  409.855584][ T5833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  409.869737][ T5833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  409.879419][ T5833] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  409.888358][ T5833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  409.908197][ T5833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  409.990618][  T983] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  410.030200][ T9993] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  410.108447][ T9993] batman_adv: batadv0: Removing interface: batadv_slave_1
[  410.167475][T10007] random: crng reseeded on system resumption
[  410.231759][ T9993] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  410.344395][ T9993] batman_adv: batadv0: Removing interface: ip6gretap1
[  410.387179][  T983] usb 5-1: Using ep0 maxpacket: 32
[  410.399797][T10010] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1009'.
[  410.423612][  T983] usb 5-1: config 0 has an invalid interface number: 28 but max is 0
[  410.440612][  T983] usb 5-1: config 0 has no interface number 0
[  410.487997][  T983] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  410.668722][  T983] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  410.698908][  T983] usb 5-1: config 0 descriptor??
[  410.720644][ T5907] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  411.410692][ T5907] usb 4-1: Using ep0 maxpacket: 32
[  411.709204][ T5907] usb 4-1: config 0 has an invalid interface number: 146 but max is 0
[  411.785056][ T5833] Bluetooth: hci5: command tx timeout
[  411.940990][ T5833] Bluetooth: hci6: command tx timeout
[  412.058502][ T5907] usb 4-1: config 0 has no interface number 0
[  412.172220][ T5907] usb 4-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  412.551316][  T983] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware
[  412.562332][ T5907] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  413.021091][ T5907] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[  413.065252][ T5907] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  413.086854][  T983] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  413.159002][ T5907] usb 4-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[  413.192310][  T983] dib0700: firmware download failed at 7 with -22
[  413.221700][ T5907] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  413.393318][ T5907] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  413.447024][ T5907] usb 4-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024
[  413.948055][T10010] syz.2.1009 (10010): drop_caches: 2
[  414.513518][ T5907] usb 4-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  414.560649][ T5907] usb 4-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  414.785711][ T5833] Bluetooth: hci5: command tx timeout
[  414.791216][ T5833] Bluetooth: hci6: command tx timeout
[  414.852223][ T5907] usb 4-1: string descriptor 0 read error: -71
[  414.869275][ T5907] usb 4-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[  414.879788][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  414.976502][ T5907] usb 4-1: config 0 descriptor??
[  415.107860][ T5907] usb 4-1: can't set config #0, error -71
[  415.150889][ T5907] usb 4-1: USB disconnect, device number 30
[  416.207582][ T5922] usb 5-1: USB disconnect, device number 34
[  416.837847][ T5833] Bluetooth: hci5: command tx timeout
[  416.843420][ T5829] Bluetooth: hci6: command tx timeout
[  416.943475][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  417.725206][ T5823] usb 2-1: USB disconnect, device number 33
[  417.824023][ T5823] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  418.050726][T10030] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1013'.
[  418.358373][T10031] netlink: 'syz.3.1011': attribute type 20 has an invalid length.
[  418.388088][ T9821] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  418.407061][ T5823] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  418.443530][T10031] IPv6: NLM_F_CREATE should be specified when creating new route
[  418.521155][T10000] chnl_net:caif_netlink_parms(): no params data found
[  418.551392][T10031] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  418.559300][T10031] IPv6: NLM_F_CREATE should be set when creating new route
[  418.604364][ T5823] quatech2 2-1:0.51: device disconnected
[  418.905682][ T5829] Bluetooth: hci5: command tx timeout
[  418.911253][ T5835] Bluetooth: hci6: command tx timeout
[  419.817097][ T9821] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  420.980706][ T5829] Bluetooth: hci6: command 0x0405 tx timeout
[  421.277918][ T9821] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.087299][ T9821] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.587941][ T5922] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0
[  425.634097][ T5922] hid-generic 0000:0000:0000.0012: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  427.023491][T10000] bridge0: port 1(bridge_slave_0) entered blocking state
[  427.196904][T10000] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.283946][T10000] bridge_slave_0: entered allmulticast mode
[  427.430725][T10000] bridge_slave_0: entered promiscuous mode
[  427.637080][T10005] chnl_net:caif_netlink_parms(): no params data found
[  427.743207][ T5922] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  427.791760][T10000] bridge0: port 2(bridge_slave_1) entered blocking state
[  427.813007][T10000] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.838621][T10000] bridge_slave_1: entered allmulticast mode
[  427.853171][T10000] bridge_slave_1: entered promiscuous mode
[  427.931382][ T5922] usb 4-1: Using ep0 maxpacket: 16
[  427.970325][ T5922] usb 4-1: config 255 has an invalid interface number: 47 but max is 0
[  427.986249][ T5922] usb 4-1: config 255 has no interface number 0
[  427.995300][ T5922] usb 4-1: config 255 interface 47 has no altsetting 0
[  428.050705][ T5922] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=b1.fc
[  428.083598][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  428.189708][ T5922] usb 4-1: Product: syz
[  428.252652][ T5922] usb 4-1: Manufacturer: syz
[  428.257292][ T5922] usb 4-1: SerialNumber: syz
[  428.298475][T10000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  429.613294][T10000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  429.871867][ T5922] legousbtower 4-1:255.47: interrupt endpoints not found
[  430.277700][ T5922] usb 4-1: USB disconnect, device number 31
[  431.161151][T10005] bridge0: port 1(bridge_slave_0) entered blocking state
[  431.207627][   T30] kauditd_printk_skb: 6 callbacks suppressed
[  431.207641][   T30] audit: type=1326 audit(1762148905.845:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10079 comm="syz.4.1020" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f64539 code=0x0
[  431.207737][T10005] bridge0: port 1(bridge_slave_0) entered disabled state
[  431.618775][T10005] bridge_slave_0: entered allmulticast mode
[  431.633384][T10005] bridge_slave_0: entered promiscuous mode
[  431.645614][T10000] team0: Port device team_slave_0 added
[  431.697773][T10084] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  432.244529][T10084] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  432.365197][T10005] bridge0: port 2(bridge_slave_1) entered blocking state
[  432.401308][T10005] bridge0: port 2(bridge_slave_1) entered disabled state
[  432.408574][T10005] bridge_slave_1: entered allmulticast mode
[  432.472600][T10005] bridge_slave_1: entered promiscuous mode
[  433.602963][T10000] team0: Port device team_slave_1 added
[  434.118670][T10114] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1024'.
[  434.705407][T10000] batman_adv: batadv0: Adding interface: batadv_slave_0
[  434.726117][T10000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  434.802636][T10000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  434.925273][T10005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  435.013496][T10005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  435.070841][ T9821] bridge_slave_1: left allmulticast mode
[  435.076536][ T9821] bridge_slave_1: left promiscuous mode
[  435.122600][ T9821] bridge0: port 2(bridge_slave_1) entered disabled state
[  435.192517][ T9821] bridge_slave_0: left allmulticast mode
[  435.208522][ T9821] bridge_slave_0: left promiscuous mode
[  435.225659][ T9821] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.105831][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  440.112506][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  440.237752][ T9821] bond0 (unregistering): (slave »»»»»»): Releasing backup interface
[  440.291639][ T9821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  440.354187][ T9821] bond0 (unregistering): Released all slaves
[  440.440047][T10127] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  440.541613][T10000] batman_adv: batadv0: Adding interface: batadv_slave_1
[  440.548587][T10000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  440.655015][T10000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  441.054250][ T5922] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0
[  441.164218][ T5922] hid-generic 0000:0000:0000.0013: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  441.320652][   T24] usb 4-1: new full-speed USB device number 32 using dummy_hcd
[  451.406249][   T24] usb 4-1: device descriptor read/all, error -71
[  452.002827][T10005] team0: Port device team_slave_0 added
[  452.411173][T10005] team0: Port device team_slave_1 added
[  452.456718][T10181] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1035'.
[  452.482283][T10000] hsr_slave_0: entered promiscuous mode
[  452.489120][T10000] hsr_slave_1: entered promiscuous mode
[  452.553031][T10000] debugfs: 'hsr0' already exists in 'hsr'
[  452.582196][T10000] Cannot create hsr debugfs directory
[  452.629111][T10177] fido_id[10177]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  452.711672][T10185] program syz.4.1036 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  453.122480][T10005] batman_adv: batadv0: Adding interface: batadv_slave_0
[  453.331552][ T5907] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  453.349986][T10005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  453.375957][    C0] vkms_vblank_simulate: vblank timer overrun
[  453.486486][T10005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  453.550598][ T5907] usb 5-1: Using ep0 maxpacket: 16
[  453.598850][ T5907] usb 5-1: config 0 interface 0 altsetting 65 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  453.621646][ T5922] usb 3-1: new full-speed USB device number 32 using dummy_hcd
[  453.651319][ T5907] usb 5-1: config 0 interface 0 altsetting 65 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  453.697115][ T9821] hsr_slave_0: left promiscuous mode
[  453.716549][ T5907] usb 5-1: config 0 interface 0 has no altsetting 0
[  453.768468][ T9821] hsr_slave_1: left promiscuous mode
[  453.785858][ T9821] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  453.845894][ T5907] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00
[  453.887644][ T5922] usb 3-1: config 0 has an invalid interface number: 133 but max is 0
[  453.897749][ T9821] batman_adv: batadv0: Removing interface: batadv_slave_0
[  453.920624][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  453.928714][ T5922] usb 3-1: config 0 has no interface number 0
[  454.066575][ T9821] batman_adv: batadv0: Interface deactivated: 
2
6±ÿ
[  454.156627][ T9821] batman_adv: batadv0: Removing interface: 
2
6±ÿ
[  454.176993][ T5907] usb 5-1: config 0 descriptor??
[  454.184883][ T5922] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  456.350625][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  456.358655][ T5922] usb 3-1: Product: syz
[  456.401382][ T5922] usb 3-1: Manufacturer: syz
[  456.406020][ T5922] usb 3-1: SerialNumber: syz
[  456.693881][ T5922] usb 3-1: config 0 descriptor??
[  457.230898][ T5907] usb 5-1: can't set config #0, error -71
[  457.314160][ T5907] usb 5-1: USB disconnect, device number 35
[  457.539611][ T9821] veth1_macvtap: left promiscuous mode
[  457.561310][ T9821] veth1_vlan: left promiscuous mode
[  457.566712][ T9821] veth0_vlan: left promiscuous mode
[  458.570728][ T5922] usb 3-1: can't set config #0, error -71
[  458.676997][ T5922] usb 3-1: USB disconnect, device number 32
[  459.192006][T10212] FAULT_INJECTION: forcing a failure.
[  459.192006][T10212] name failslab, interval 1, probability 0, space 0, times 0
[  459.316330][T10212] CPU: 1 UID: 0 PID: 10212 Comm: syz.3.1041 Not tainted syzkaller #0 PREEMPT(full) 
[  459.316353][T10212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  459.316364][T10212] Call Trace:
[  459.316372][T10212]  <TASK>
[  459.316380][T10212]  dump_stack_lvl+0x189/0x250
[  459.316407][T10212]  ? __pfx____ratelimit+0x10/0x10
[  459.316429][T10212]  ? __pfx_dump_stack_lvl+0x10/0x10
[  459.316451][T10212]  ? __pfx__printk+0x10/0x10
[  459.316475][T10212]  ? __pfx___might_resched+0x10/0x10
[  459.316493][T10212]  ? fs_reclaim_acquire+0x7d/0x100
[  459.316522][T10212]  should_fail_ex+0x414/0x560
[  459.316552][T10212]  should_failslab+0xa8/0x100
[  459.316571][T10212]  kmem_cache_alloc_node_noprof+0x77/0x710
[  459.316594][T10212]  ? __alloc_skb+0x112/0x2d0
[  459.316616][T10212]  __alloc_skb+0x112/0x2d0
[  459.316635][T10212]  netlink_sendmsg+0x5c6/0xb30
[  459.316662][T10212]  ? __pfx_netlink_sendmsg+0x10/0x10
[  459.316693][T10212]  ? __import_iovec+0x5d4/0x7f0
[  459.316712][T10212]  ? aa_sock_msg_perm+0xf1/0x1d0
[  459.316737][T10212]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  459.316754][T10212]  ? __pfx_netlink_sendmsg+0x10/0x10
[  459.316772][T10212]  __sock_sendmsg+0x21c/0x270
[  459.316796][T10212]  ____sys_sendmsg+0x52d/0x830
[  459.316820][T10212]  ? __pfx_____sys_sendmsg+0x10/0x10
[  459.316853][T10212]  ___sys_sendmsg+0x21f/0x2a0
[  459.316874][T10212]  ? __pfx____sys_sendmsg+0x10/0x10
[  459.316893][T10212]  ? __lock_acquire+0xab9/0xd20
[  459.316939][T10212]  ? __fget_files+0x2a/0x420
[  459.316954][T10212]  ? __fget_files+0x3a0/0x420
[  459.316981][T10212]  __sys_sendmmsg+0x28e/0x430
[  459.317005][T10212]  ? __pfx___sys_sendmmsg+0x10/0x10
[  459.317021][T10212]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  459.317068][T10212]  ? ksys_write+0x22a/0x250
[  459.317090][T10212]  ? exc_page_fault+0x82/0x100
[  459.317111][T10212]  ? __pfx_ksys_write+0x10/0x10
[  459.317139][T10212]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[  459.317161][T10212]  __do_fast_syscall_32+0xb6/0x2b0
[  459.317185][T10212]  ? lockdep_hardirqs_on+0x9c/0x150
[  459.317210][T10212]  do_fast_syscall_32+0x34/0x80
[  459.317233][T10212]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  459.317253][T10212] RIP: 0023:0xf7f85539
[  459.317268][T10212] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  459.317282][T10212] RSP: 002b:00000000f545555c EFLAGS: 00000206 ORIG_RAX: 0000000000000159
[  459.317301][T10212] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000
[  459.317313][T10212] RDX: 00000000000001f2 RSI: 0000000000000000 RDI: 0000000000000000
[  459.317324][T10212] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  459.317337][T10212] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  459.317348][T10212] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  459.317374][T10212]  </TASK>
[  460.927393][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  461.003269][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  461.046053][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  461.063103][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  461.071407][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  461.395333][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  461.406005][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  461.415034][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  461.424573][ T5907] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  461.434053][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  461.450740][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  461.630835][ T5907] usb 3-1: Using ep0 maxpacket: 32
[  461.639689][ T5907] usb 3-1: unable to get BOS descriptor or descriptor too short
[  461.667992][ T5907] usb 3-1: config 0 has an invalid interface number: 82 but max is 2
[  461.690115][ T5907] usb 3-1: config 0 has an invalid interface number: 159 but max is 2
[  461.698846][ T5907] usb 3-1: config 0 has an invalid interface number: 156 but max is 2
[  461.723871][ T5907] usb 3-1: config 0 has no interface number 0
[  461.730096][ T5907] usb 3-1: config 0 has no interface number 1
[  461.745992][ T5907] usb 3-1: config 0 has no interface number 2
[  461.755616][ T5907] usb 3-1: config 0 interface 82 has no altsetting 0
[  461.769126][ T5907] usb 3-1: config 0 interface 159 has no altsetting 0
[  461.800658][ T5907] usb 3-1: config 0 interface 156 has no altsetting 0
[  461.814353][ T5907] usb 3-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=b2.1d
[  461.832185][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  461.840350][ T5907] usb 3-1: Product: syz
[  461.845188][ T5907] usb 3-1: Manufacturer: syz
[  461.876806][ T5907] usb 3-1: SerialNumber: syz
[  461.889111][ T5907] usb 3-1: config 0 descriptor??
[  462.167286][ T9821] team0 (unregistering): Port device team_slave_1 removed
[  462.239832][T10233] IPVS: set_ctl: invalid protocol: 8 224.0.0.2:20002
[  462.353834][ T9821] team0 (unregistering): Port device team_slave_0 removed
[  463.221951][ T5833] Bluetooth: hci1: command tx timeout
[  463.547465][ T5833] Bluetooth: hci3: command tx timeout
[  464.129818][T10005] batman_adv: batadv0: Adding interface: batadv_slave_1
[  464.166016][T10005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  464.217134][T10005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  464.912826][ T5907] usb 3-1: USB disconnect, device number 33
[  465.002213][ T5922] IPVS: starting estimator thread 0...
[  465.027016][T10268] netlink: 'syz.4.1046': attribute type 10 has an invalid length.
[  465.110782][T10269] IPVS: using max 28 ests per chain, 67200 per kthread
[  465.263971][T10259] udevd[10259]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.159/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  465.315274][ T5833] Bluetooth: hci1: command tx timeout
[  465.418278][T10272] udevd[10272]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.156/sound/card5/controlC5/../uevent} for writing: No such file or directory
[  465.606168][T10178] udevd[10178]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.82/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  465.634003][ T5833] Bluetooth: hci3: command tx timeout
[  466.074842][T10261] netlink: 'syz.2.1044': attribute type 10 has an invalid length.
[  466.175632][T10261] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  466.330992][T10261] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1044'.
[  467.382600][ T5833] Bluetooth: hci1: command tx timeout
[  467.700681][ T5833] Bluetooth: hci3: command tx timeout
[  468.976542][T10301] netdevsim netdevsim2: Direct firmware load for ..€ failed with error -2
[  468.987324][T10301] netdevsim netdevsim2: Falling back to sysfs fallback for: ..€
[  469.418789][T10230] chnl_net:caif_netlink_parms(): no params data found
[  469.542307][ T5833] Bluetooth: hci1: command tx timeout
[  469.777893][T10228] chnl_net:caif_netlink_parms(): no params data found
[  469.787432][ T5833] Bluetooth: hci3: command tx timeout
[  471.640049][T10230] bridge0: port 1(bridge_slave_0) entered blocking state
[  471.681450][T10230] bridge0: port 1(bridge_slave_0) entered disabled state
[  471.702589][T10230] bridge_slave_0: entered allmulticast mode
[  471.742906][T10230] bridge_slave_0: entered promiscuous mode
[  471.850745][T10230] bridge0: port 2(bridge_slave_1) entered blocking state
[  471.857925][T10230] bridge0: port 2(bridge_slave_1) entered disabled state
[  471.937020][T10230] bridge_slave_1: entered allmulticast mode
[  471.984397][T10230] bridge_slave_1: entered promiscuous mode
[  472.450568][ T5907] usb 4-1: new full-speed USB device number 34 using dummy_hcd
[  472.504010][ T9821] bridge_slave_1: left allmulticast mode
[  472.504065][ T9821] bridge_slave_1: left promiscuous mode
[  472.504262][ T9821] bridge0: port 2(bridge_slave_1) entered disabled state
[  472.515363][ T9821] bridge_slave_0: left allmulticast mode
[  472.515388][ T9821] bridge_slave_0: left promiscuous mode
[  472.515608][ T9821] bridge0: port 1(bridge_slave_0) entered disabled state
[  472.535476][ T9821] bridge_slave_1: left allmulticast mode
[  472.535501][ T9821] bridge_slave_1: left promiscuous mode
[  472.535704][ T9821] bridge0: port 2(bridge_slave_1) entered disabled state
[  472.562917][ T9821] bridge_slave_0: left allmulticast mode
[  472.562944][ T9821] bridge_slave_0: left promiscuous mode
[  472.563139][ T9821] bridge0: port 1(bridge_slave_0) entered disabled state
[  472.605728][ T5907] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  472.605754][ T5907] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  472.605801][ T5907] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  472.605823][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.608487][ T5907] usb 4-1: config 0 descriptor??
[  472.611925][ T5907] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  472.611978][ T5907] dvb-usb: bulk message failed: -22 (3/0)
[  472.624054][ T5907] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  472.694739][ T5907] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  472.694808][ T5907] usb 4-1: media controller created
[  472.742941][ T5907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  472.790060][ T5907] dvb-usb: bulk message failed: -22 (6/0)
[  472.790203][ T5907] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  472.795956][ T5907] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input25
[  472.831032][ T5907] dvb-usb: schedule remote query interval to 150 msecs.
[  472.831057][ T5907] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  472.992233][ T5907] dvb-usb: bulk message failed: -22 (1/0)
[  472.992301][ T5907] dvb-usb: error while querying for an remote control event.
[  473.152191][ T5907] dvb-usb: bulk message failed: -22 (1/0)
[  473.152228][ T5907] dvb-usb: error while querying for an remote control event.
[  473.314686][ T5907] dvb-usb: bulk message failed: -22 (1/0)
[  473.314720][ T5907] dvb-usb: error while querying for an remote control event.
[  473.480668][ T5907] dvb-usb: bulk message failed: -22 (1/0)
[  473.480704][ T5907] dvb-usb: error while querying for an remote control event.
[  473.547795][ T9821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  473.567936][ T9821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  473.652572][ T5907] dvb-usb: bulk message failed: -22 (1/0)
[  473.652608][ T5907] dvb-usb: error while querying for an remote control event.
[  473.667568][ T9821] bond0 (unregistering): Released all slaves
[  473.822984][ T5907] dvb-usb: bulk message failed: -22 (1/0)
[  473.823019][ T5907] dvb-usb: error while querying for an remote control event.
[  473.980584][ T5907] dvb-usb: bulk message failed: -22 (1/0)
[  473.980622][ T5907] dvb-usb: error while querying for an remote control event.
[  474.149467][ T5907] dvb-usb: bulk message failed: -22 (1/0)
[  474.149504][ T5907] dvb-usb: error while querying for an remote control event.
[  474.302306][ T5907] dvb-usb: bulk message failed: -22 (1/0)
[  474.302341][ T5907] dvb-usb: error while querying for an remote control event.
[  474.460899][ T5907] dvb-usb: bulk message failed: -22 (1/0)
[  474.460935][ T5907] dvb-usb: error while querying for an remote control event.
[  474.481160][ T9821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  474.512334][ T9821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  474.743565][ T5907] dvb-usb: bulk message failed: -22 (1/0)
[  474.749832][ T5907] dvb-usb: error while querying for an remote control event.
[  475.625912][  T983] dvb-usb: bulk message failed: -22 (1/0)
[  475.680651][  T983] dvb-usb: error while querying for an remote control event.
[  476.488060][  T983] dvb-usb: bulk message failed: -22 (1/0)
[  476.488094][  T983] dvb-usb: error while querying for an remote control event.
[  476.642950][ T5907] dvb-usb: bulk message failed: -22 (1/0)
[  476.642985][ T5907] dvb-usb: error while querying for an remote control event.
[  478.957337][ T5907] dvb-usb: bulk message failed: -22 (1/0)
[  478.957374][ T5907] dvb-usb: error while querying for an remote control event.
[  479.115538][ T5907] dvb-usb: bulk message failed: -22 (1/0)
[  479.115572][ T5907] dvb-usb: error while querying for an remote control event.
[  479.235512][ T9821] bond0 (unregistering): Released all slaves
[  479.277462][ T5907] dvb-usb: bulk message failed: -22 (1/0)
[  479.277498][ T5907] dvb-usb: error while querying for an remote control event.
[  479.309651][T10230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  479.309913][T10228] bridge0: port 1(bridge_slave_0) entered blocking state
[  479.310020][T10228] bridge0: port 1(bridge_slave_0) entered disabled state
[  479.310164][T10228] bridge_slave_0: entered allmulticast mode
[  479.321764][T10228] bridge_slave_0: entered promiscuous mode
[  479.335079][T10228] bridge0: port 2(bridge_slave_1) entered blocking state
[  479.335190][T10228] bridge0: port 2(bridge_slave_1) entered disabled state
[  479.335389][T10228] bridge_slave_1: entered allmulticast mode
[  479.337327][T10228] bridge_slave_1: entered promiscuous mode
[  479.352378][T10230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  479.449953][ T5922] dvb-usb: bulk message failed: -22 (1/0)
[  479.449987][ T5922] dvb-usb: error while querying for an remote control event.
[  479.605636][ T5922] dvb-usb: bulk message failed: -22 (1/0)
[  479.605671][ T5922] dvb-usb: error while querying for an remote control event.
[  479.662960][T10343] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  479.663123][T10343] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  479.761432][ T5922] dvb-usb: bulk message failed: -22 (1/0)
[  479.761467][ T5922] dvb-usb: error while querying for an remote control event.
[  479.920760][ T5922] dvb-usb: bulk message failed: -22 (1/0)
[  479.920795][ T5922] dvb-usb: error while querying for an remote control event.
[  479.927178][T10343] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  479.996162][T10228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  480.020224][ T9821] hsr_slave_0: left promiscuous mode
[  480.027799][T10343] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  480.027934][T10343] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  480.030147][ T9821] hsr_slave_1: left promiscuous mode
[  480.061493][ T9821] batman_adv: batadv0: Removing interface: batadv_slave_0
[  480.080872][ T5907] dvb-usb: bulk message failed: -22 (1/0)
[  480.080908][ T5907] dvb-usb: error while querying for an remote control event.
[  480.095077][T10343] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  480.105641][ T9821] batman_adv: batadv0: Removing interface: batadv_slave_1
[  480.243605][ T5907] dvb-usb: bulk message failed: -22 (1/0)
[  480.243641][ T5907] dvb-usb: error while querying for an remote control event.
[  480.404144][ T5907] dvb-usb: bulk message failed: -22 (1/0)
[  480.404181][ T5907] dvb-usb: error while querying for an remote control event.
[  480.783948][ T5907] dvb-usb: bulk message failed: -22 (1/0)
[  480.783983][ T5907] dvb-usb: error while querying for an remote control event.
[  480.785497][ T9821] batman_adv: batadv0: Removing interface: batadv_slave_0
[  480.944092][ T5907] dvb-usb: bulk message failed: -22 (1/0)
[  480.944129][ T5907] dvb-usb: error while querying for an remote control event.
[  481.700643][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout
[  482.020593][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout
[  482.459255][ T5907] dvb-usb: bulk message failed: -22 (1/0)
[  482.459291][ T5907] dvb-usb: error while querying for an remote control event.
[  482.612816][ T5900] dvb-usb: bulk message failed: -22 (1/0)
[  482.612854][ T5900] dvb-usb: error while querying for an remote control event.
[  482.774220][ T5900] dvb-usb: bulk message failed: -22 (1/0)
[  482.774256][ T5900] dvb-usb: error while querying for an remote control event.
[  483.780644][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout
[  484.100636][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout
[  485.860625][ T5833] Bluetooth: hci1: command 0x0c1a tx timeout
[  486.180630][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout
[  486.410060][ T5900] dvb-usb: bulk message failed: -22 (1/0)
[  486.410096][ T5900] dvb-usb: error while querying for an remote control event.
[  486.470744][ T9821] batman_adv: batadv0: Removing interface: batadv_slave_1
[  486.564602][  T983] dvb-usb: bulk message failed: -22 (1/0)
[  486.564639][  T983] dvb-usb: error while querying for an remote control event.
[  486.724258][  T983] dvb-usb: bulk message failed: -22 (1/0)
[  486.724293][  T983] dvb-usb: error while querying for an remote control event.
[  486.882939][ T5907] dvb-usb: bulk message failed: -22 (1/0)
[  486.882974][ T5907] dvb-usb: error while querying for an remote control event.
[  487.345487][ T5907] dvb-usb: bulk message failed: -22 (1/0)
[  487.345524][ T5907] dvb-usb: error while querying for an remote control event.
[  487.504140][ T5907] dvb-usb: bulk message failed: -22 (1/0)
[  487.504176][ T5907] dvb-usb: error while querying for an remote control event.
[  487.660670][ T5922] dvb-usb: bulk message failed: -22 (1/0)
[  487.660707][ T5922] dvb-usb: error while querying for an remote control event.
[  487.820706][ T5907] dvb-usb: bulk message failed: -22 (1/0)
[  487.820742][ T5907] dvb-usb: error while querying for an remote control event.
[  487.981676][ T5900] dvb-usb: bulk message failed: -22 (1/0)
[  487.981709][ T5900] dvb-usb: error while querying for an remote control event.
[  488.006942][ T5922] usb 4-1: USB disconnect, device number 34
[  491.986332][ T5922] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  493.471528][ T9821] team0 (unregistering): Port device team_slave_1 removed
[  494.150086][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  494.155638][ T9821] team0 (unregistering): Port device team_slave_0 removed
[  494.166929][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  494.170993][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  494.171834][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  494.173548][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  494.174253][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  494.174914][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  494.176172][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  494.188744][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  494.210226][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  494.446764][ T5833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  494.448957][ T5833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  494.449742][ T5833] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  494.453064][ T5833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  494.453749][ T5833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  495.624458][ T9821] team0 (unregistering): Port device team_slave_1 removed
[  495.711671][ T9821] team0 (unregistering): Port device team_slave_0 removed
[  496.260706][ T5835] Bluetooth: hci0: command tx timeout
[  496.267310][ T5835] Bluetooth: hci5: command tx timeout
[  496.500687][ T5835] Bluetooth: hci6: command tx timeout
[  497.122054][T10230] team0: Port device team_slave_0 added
[  497.134731][T10228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  497.644592][T10230] team0: Port device team_slave_1 added
[  497.933400][T10228] team0: Port device team_slave_0 added
[  498.340705][ T5835] Bluetooth: hci5: command tx timeout
[  498.346156][ T5835] Bluetooth: hci0: command tx timeout
[  498.581694][ T5835] Bluetooth: hci6: command tx timeout
[  499.170032][T10230] batman_adv: batadv0: Adding interface: batadv_slave_0
[  499.185166][T10230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  499.216516][T10230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  499.234610][T10228] team0: Port device team_slave_1 added
[  499.465435][T10230] batman_adv: batadv0: Adding interface: batadv_slave_1
[  499.478252][T10230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  499.505620][T10230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  499.565651][T10228] batman_adv: batadv0: Adding interface: batadv_slave_0
[  499.585417][T10228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  499.624992][T10228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  499.639226][T10228] batman_adv: batadv0: Adding interface: batadv_slave_1
[  499.646748][T10228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  499.673177][T10228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  500.318179][T10230] hsr_slave_0: entered promiscuous mode
[  500.331968][T10230] hsr_slave_1: entered promiscuous mode
[  500.343199][T10230] debugfs: 'hsr0' already exists in 'hsr'
[  500.349009][T10230] Cannot create hsr debugfs directory
[  500.420688][ T5833] Bluetooth: hci5: command tx timeout
[  500.425941][ T5835] Bluetooth: hci0: command tx timeout
[  500.429151][T10228] hsr_slave_0: entered promiscuous mode
[  500.439223][T10228] hsr_slave_1: entered promiscuous mode
[  500.505167][T10228] debugfs: 'hsr0' already exists in 'hsr'
[  500.525312][T10228] Cannot create hsr debugfs directory
[  500.664886][ T5835] Bluetooth: hci6: command tx timeout
[  501.545273][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  501.553879][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  502.354278][ T9821] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  502.377070][T10370] chnl_net:caif_netlink_parms(): no params data found
[  502.403390][T10369] chnl_net:caif_netlink_parms(): no params data found
[  502.479560][T10372] chnl_net:caif_netlink_parms(): no params data found
[  502.500823][ T5835] Bluetooth: hci0: command tx timeout
[  502.502047][ T5833] Bluetooth: hci5: command tx timeout
[  502.513777][ T9821] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  502.617441][ T9821] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  502.692539][T10369] bridge0: port 1(bridge_slave_0) entered blocking state
[  502.699680][T10369] bridge0: port 1(bridge_slave_0) entered disabled state
[  502.707210][T10369] bridge_slave_0: entered allmulticast mode
[  502.716209][T10369] bridge_slave_0: entered promiscuous mode
[  502.724367][T10369] bridge0: port 2(bridge_slave_1) entered blocking state
[  502.731647][T10369] bridge0: port 2(bridge_slave_1) entered disabled state
[  502.738870][T10369] bridge_slave_1: entered allmulticast mode
[  502.745019][ T5833] Bluetooth: hci6: command tx timeout
[  502.752806][T10369] bridge_slave_1: entered promiscuous mode
[  502.768740][ T9821] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  502.820031][T10370] bridge0: port 1(bridge_slave_0) entered blocking state
[  502.828223][T10370] bridge0: port 1(bridge_slave_0) entered disabled state
[  502.836039][T10370] bridge_slave_0: entered allmulticast mode
[  502.843346][T10370] bridge_slave_0: entered promiscuous mode
[  502.863845][T10228] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  502.913569][T10370] bridge0: port 2(bridge_slave_1) entered blocking state
[  502.921508][T10370] bridge0: port 2(bridge_slave_1) entered disabled state
[  502.929031][T10370] bridge_slave_1: entered allmulticast mode
[  502.937290][T10370] bridge_slave_1: entered promiscuous mode
[  502.955441][T10228] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  502.978325][T10372] bridge0: port 1(bridge_slave_0) entered blocking state
[  502.986577][T10372] bridge0: port 1(bridge_slave_0) entered disabled state
[  502.994095][T10372] bridge_slave_0: entered allmulticast mode
[  503.001844][T10372] bridge_slave_0: entered promiscuous mode
[  503.032234][T10369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  503.041568][T10228] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  503.051968][T10228] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  503.063592][T10372] bridge0: port 2(bridge_slave_1) entered blocking state
[  503.071038][T10372] bridge0: port 2(bridge_slave_1) entered disabled state
[  503.078243][T10372] bridge_slave_1: entered allmulticast mode
[  503.085644][T10372] bridge_slave_1: entered promiscuous mode
[  503.120647][T10369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  503.179829][T10372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  503.192568][T10370] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  503.248034][T10372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  503.276236][T10370] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  503.296621][T10369] team0: Port device team_slave_0 added
[  503.309304][T10369] team0: Port device team_slave_1 added
[  503.361996][T10370] team0: Port device team_slave_0 added
[  503.392486][T10372] team0: Port device team_slave_0 added
[  503.409534][T10230] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  503.426667][T10370] team0: Port device team_slave_1 added
[  503.446759][T10369] batman_adv: batadv0: Adding interface: batadv_slave_0
[  503.454035][T10369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  503.480651][T10369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  503.494761][T10372] team0: Port device team_slave_1 added
[  503.504046][T10230] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  503.514421][T10230] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  503.546862][T10369] batman_adv: batadv0: Adding interface: batadv_slave_1
[  503.554437][T10369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  503.580840][T10369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  503.622925][T10372] batman_adv: batadv0: Adding interface: batadv_slave_0
[  503.630623][T10372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  503.656910][T10372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  503.669166][T10230] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  503.733465][T10372] batman_adv: batadv0: Adding interface: batadv_slave_1
[  503.741177][T10372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  503.767058][    C0] vkms_vblank_simulate: vblank timer overrun
[  503.775387][T10372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  503.788831][T10370] batman_adv: batadv0: Adding interface: batadv_slave_0
[  503.796139][T10370] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  503.822016][    C0] vkms_vblank_simulate: vblank timer overrun
[  503.828586][T10370] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  503.842751][T10370] batman_adv: batadv0: Adding interface: batadv_slave_1
[  503.849746][T10370] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  503.876279][T10370] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  503.911598][ T9821] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.938819][T10369] hsr_slave_0: entered promiscuous mode
[  503.946954][T10369] hsr_slave_1: entered promiscuous mode
[  503.956435][T10369] debugfs: 'hsr0' already exists in 'hsr'
[  503.962374][T10369] Cannot create hsr debugfs directory
[  504.056997][ T9821] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  504.146875][T10372] hsr_slave_0: entered promiscuous mode
[  504.153391][T10372] hsr_slave_1: entered promiscuous mode
[  504.159458][T10372] debugfs: 'hsr0' already exists in 'hsr'
[  504.165277][T10372] Cannot create hsr debugfs directory
[  504.191749][T10370] hsr_slave_0: entered promiscuous mode
[  504.198218][T10370] hsr_slave_1: entered promiscuous mode
[  504.204556][T10370] debugfs: 'hsr0' already exists in 'hsr'
[  504.210270][T10370] Cannot create hsr debugfs directory
[  504.229895][ T9821] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  504.457145][ T9821] team0: Port device netdevsim0 removed
[  504.465634][ T9821] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  504.779052][T10228] 8021q: adding VLAN 0 to HW filter on device bond0
[  504.903214][T10230] 8021q: adding VLAN 0 to HW filter on device bond0
[  504.933735][T10228] 8021q: adding VLAN 0 to HW filter on device team0
[  505.005845][T10369] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  505.028456][  T999] bridge0: port 1(bridge_slave_0) entered blocking state
[  505.035643][  T999] bridge0: port 1(bridge_slave_0) entered forwarding state
[  505.049243][T10369] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  505.135118][ T9821] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  505.156014][  T999] bridge0: port 2(bridge_slave_1) entered blocking state
[  505.163190][  T999] bridge0: port 2(bridge_slave_1) entered forwarding state
[  505.173446][T10369] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  505.192620][T10369] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  505.220080][T10230] 8021q: adding VLAN 0 to HW filter on device team0
[  505.260956][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  505.268155][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  505.296796][T10117] bridge0: port 2(bridge_slave_1) entered blocking state
[  505.304004][T10117] bridge0: port 2(bridge_slave_1) entered forwarding state
[  505.333443][ T9821] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  505.442315][ T9821] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  505.569710][ T9821] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  505.706083][T10228] 8021q: adding VLAN 0 to HW filter on device batadv0
[  505.844602][T10369] 8021q: adding VLAN 0 to HW filter on device bond0
[  505.860275][T10230] 8021q: adding VLAN 0 to HW filter on device batadv0
[  505.920089][T10228] veth0_vlan: entered promiscuous mode
[  505.946997][T10369] 8021q: adding VLAN 0 to HW filter on device team0
[  505.962618][T10228] veth1_vlan: entered promiscuous mode
[  505.997416][T10117] bridge0: port 1(bridge_slave_0) entered blocking state
[  506.004628][T10117] bridge0: port 1(bridge_slave_0) entered forwarding state
[  506.036311][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  506.043508][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  506.058418][T10230] veth0_vlan: entered promiscuous mode
[  506.094802][T10230] veth1_vlan: entered promiscuous mode
[  506.178128][T10228] veth0_macvtap: entered promiscuous mode
[  506.224283][T10228] veth1_macvtap: entered promiscuous mode
[  506.248947][T10230] veth0_macvtap: entered promiscuous mode
[  506.328871][T10230] veth1_macvtap: entered promiscuous mode
[  506.339988][T10369] 8021q: adding VLAN 0 to HW filter on device batadv0
[  506.355432][T10228] batman_adv: batadv0: Interface activated: batadv_slave_0
[  506.434122][T10228] batman_adv: batadv0: Interface activated: batadv_slave_1
[  506.493359][T10230] batman_adv: batadv0: Interface activated: batadv_slave_0
[  506.504522][ T9821] bridge_slave_1: left allmulticast mode
[  506.510193][ T9821] bridge_slave_1: left promiscuous mode
[  506.516395][ T9821] bridge0: port 2(bridge_slave_1) entered disabled state
[  506.525095][ T9821] bridge_slave_0: left allmulticast mode
[  506.531024][ T9821] bridge_slave_0: left promiscuous mode
[  506.536769][ T9821] bridge0: port 1(bridge_slave_0) entered disabled state
[  506.547553][ T9821] bridge0: port 3(batadv0) entered disabled state
[  506.558349][ T9821] bridge_slave_1: left allmulticast mode
[  506.564478][ T9821] bridge_slave_1: left promiscuous mode
[  506.570221][ T9821] bridge0: port 2(bridge_slave_1) entered disabled state
[  506.579572][ T9821] bridge_slave_0: left allmulticast mode
[  506.586528][ T9821] bridge_slave_0: left promiscuous mode
[  506.592652][ T9821] bridge0: port 1(bridge_slave_0) entered disabled state
[  506.604892][ T9821] bridge_slave_1: left allmulticast mode
[  506.611254][ T9821] bridge_slave_1: left promiscuous mode
[  506.616952][ T9821] bridge0: port 2(bridge_slave_1) entered disabled state
[  506.627365][ T9821] bridge_slave_0: left allmulticast mode
[  506.633239][ T9821] bridge_slave_0: left promiscuous mode
[  506.638931][ T9821] bridge0: port 1(bridge_slave_0) entered disabled state
[  507.085295][ T9821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  507.095812][ T9821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  507.107590][ T9821] bond0 (unregistering): Released all slaves
[  507.215434][ T9821] bond1 (unregistering): (slave veth3): Releasing active interface
[  507.227073][ T9821] bond1 (unregistering): Released all slaves
[  507.347891][ T9821] bond2 (unregistering): (slave gretap1): Releasing active interface
[  507.450046][ T9821] bond1 (unregistering): (slave bridge1): Releasing backup interface
[  507.458398][ T9821] bridge1 (unregistering): left promiscuous mode
[  507.601891][ T9821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  507.612539][ T9821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  507.622614][ T9821] bond0 (unregistering): Released all slaves
[  507.719654][ T9821] bond1 (unregistering): Released all slaves
[  507.733114][ T9821] bond2 (unregistering): Released all slaves
[  508.011714][ T9821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  508.023525][ T9821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  508.035294][ T9821] bond0 (unregistering): Released all slaves
[  508.047109][T10113] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  508.056595][T10113] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  508.079311][T10230] batman_adv: batadv0: Interface activated: batadv_slave_1
[  508.086923][T10113] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  508.096112][T10113] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  508.282360][   T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  508.293247][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  508.309344][ T9821] tipc: Left network mode
[  508.334106][T10372] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  508.357408][T10372] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  508.368407][   T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  508.377910][   T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  508.426263][T10369] veth0_vlan: entered promiscuous mode
[  508.433105][T10372] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  508.524176][T10372] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  508.588464][T10369] veth1_vlan: entered promiscuous mode
[  508.706264][T10105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  508.730209][T10105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  508.835933][T10105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  508.844893][T10105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  509.013568][T10369] veth0_macvtap: entered promiscuous mode
[  509.045355][T10370] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  509.073656][T10369] veth1_macvtap: entered promiscuous mode
[  509.083157][  T999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  509.093640][  T999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  509.133568][T10370] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  509.146552][T10370] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  509.167148][T10370] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  509.284957][T10093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  509.302289][T10093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  509.319288][T10369] batman_adv: batadv0: Interface activated: batadv_slave_0
[  509.374030][T10486] netlink: 'syz.6.1002': attribute type 21 has an invalid length.
[  509.412805][T10369] batman_adv: batadv0: Interface activated: batadv_slave_1
[  509.427214][T10486] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1002'.
[  509.447760][ T9821] hsr_slave_0: left promiscuous mode
[  509.454256][ T9821] hsr_slave_1: left promiscuous mode
[  509.465619][ T9821] hsr_slave_0: left promiscuous mode
[  509.475449][ T9821] hsr_slave_1: left promiscuous mode
[  509.495659][ T9821] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  509.511597][ T9821] batman_adv: batadv0: Removing interface: batadv_slave_0
[  509.525420][ T9821] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  509.533957][ T9821] batman_adv: batadv0: Removing interface: batadv_slave_1
[  509.548493][ T9821] hsr_slave_0: left promiscuous mode
[  509.554565][ T9821] hsr_slave_1: left promiscuous mode
[  509.560393][ T9821] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  509.568199][ T9821] batman_adv: batadv0: Removing interface: batadv_slave_0
[  509.576894][ T9821] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  509.584571][ T9821] batman_adv: batadv0: Removing interface: batadv_slave_1
[  509.646891][ T9821] veth1_macvtap: left promiscuous mode
[  509.652658][ T9821] veth0_macvtap: left promiscuous mode
[  509.658396][ T9821] veth1_vlan: left promiscuous mode
[  509.691972][ T9821] veth0_vlan: left promiscuous mode
[  509.722060][ T9821] veth1_macvtap: left promiscuous mode
[  509.727633][ T9821] veth0_macvtap: left promiscuous mode
[  509.734346][ T9821] veth1_vlan: left promiscuous mode
[  509.739580][ T9821] veth0_vlan: left promiscuous mode
[  509.753346][ T9821] veth1_macvtap: left promiscuous mode
[  509.765681][ T9821] veth0_macvtap: left promiscuous mode
[  509.771884][ T9821] veth1_vlan: left promiscuous mode
[  509.781657][ T9821] veth0_vlan: left promiscuous mode
[  509.997101][   T24] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  510.188075][   T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  510.217779][   T24] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  510.242049][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  510.273052][   T24] usb 7-1: config 0 descriptor??
[  510.315329][   T24] pwc: Askey VC010 type 2 USB webcam detected.
[  510.737695][ T9821] team0 (unregistering): Port device team_slave_1 removed
[  510.783511][   T24] pwc: recv_control_msg error -32 req 02 val 2b00
[  510.794152][   T24] pwc: recv_control_msg error -32 req 02 val 2700
[  510.804282][ T9821] team0 (unregistering): Port device team_slave_0 removed
[  510.812267][   T24] pwc: recv_control_msg error -32 req 02 val 2c00
[  510.833258][   T24] pwc: recv_control_msg error -32 req 04 val 1000
[  510.846197][   T24] pwc: recv_control_msg error -32 req 04 val 1300
[  510.855199][   T24] pwc: recv_control_msg error -32 req 04 val 1400
[  510.870736][   T24] pwc: recv_control_msg error -32 req 02 val 2000
[  510.879297][   T24] pwc: recv_control_msg error -32 req 02 val 2100
[  510.894705][   T24] pwc: recv_control_msg error -32 req 04 val 1500
[  510.923600][   T24] pwc: recv_control_msg error -32 req 02 val 2500
[  511.684663][ T9821] team0 (unregistering): Port device team_slave_1 removed
[  511.739036][ T9821] team0 (unregistering): Port device team_slave_0 removed
[  512.726094][ T9821] team0 (unregistering): Port device team_slave_1 removed
[  512.773250][ T9821] team0 (unregistering): Port device team_slave_0 removed
[  513.247696][T10110] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  513.275228][T10490] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1059'.
[  513.330989][T10110] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  513.365414][   T24] pwc: recv_control_msg error -71 req 02 val 2600
[  513.381200][   T24] pwc: recv_control_msg error -71 req 02 val 2900
[  513.412755][   T24] pwc: recv_control_msg error -71 req 02 val 2800
[  513.438093][   T24] pwc: recv_control_msg error -71 req 04 val 1100
[  513.445831][   T24] pwc: recv_control_msg error -71 req 04 val 1200
[  513.478447][T10372] 8021q: adding VLAN 0 to HW filter on device bond0
[  513.482263][   T24] pwc: Registered as video103.
[  513.498356][T10110] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  513.518346][T10110] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  513.522631][   T24] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input26
[  513.586411][   T24] usb 7-1: USB disconnect, device number 2
[  513.758200][T10372] 8021q: adding VLAN 0 to HW filter on device team0
[  513.833302][  T999] bridge0: port 1(bridge_slave_0) entered blocking state
[  513.840557][  T999] bridge0: port 1(bridge_slave_0) entered forwarding state
[  513.920940][T10502] sctp: [Deprecated]: syz.6.1060 (pid 10502) Use of struct sctp_assoc_value in delayed_ack socket option.
[  513.920940][T10502] Use struct sctp_sack_info instead
[  513.965690][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  514.013563][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  514.038004][T10093] bridge0: port 2(bridge_slave_1) entered blocking state
[  514.045198][T10093] bridge0: port 2(bridge_slave_1) entered forwarding state
[  514.126541][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  514.136720][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  514.219523][T10370] 8021q: adding VLAN 0 to HW filter on device bond0
[  514.459267][T10370] 8021q: adding VLAN 0 to HW filter on device team0
[  514.555658][T10105] bridge0: port 1(bridge_slave_0) entered blocking state
[  514.562866][T10105] bridge0: port 1(bridge_slave_0) entered forwarding state
[  514.659122][T10105] bridge0: port 2(bridge_slave_1) entered blocking state
[  514.666332][T10105] bridge0: port 2(bridge_slave_1) entered forwarding state
[  514.697715][T10372] 8021q: adding VLAN 0 to HW filter on device batadv0
[  514.851037][T10370] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  514.975467][T10372] veth0_vlan: entered promiscuous mode
[  515.015119][ T9821] IPVS: stop unused estimator thread 0...
[  515.037923][T10372] veth1_vlan: entered promiscuous mode
[  515.058615][T10370] 8021q: adding VLAN 0 to HW filter on device batadv0
[  515.210415][T10372] veth0_macvtap: entered promiscuous mode
[  515.265815][T10372] veth1_macvtap: entered promiscuous mode
[  515.335570][T10370] veth0_vlan: entered promiscuous mode
[  515.349706][T10372] batman_adv: batadv0: Interface activated: batadv_slave_0
[  515.398590][T10372] batman_adv: batadv0: Interface activated: batadv_slave_1
[  515.439064][T10370] veth1_vlan: entered promiscuous mode
[  515.523002][T10105] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  515.547141][T10105] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  515.576048][T10105] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  515.608404][T10105] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  515.728996][T10370] veth0_macvtap: entered promiscuous mode
[  515.777176][T10370] veth1_macvtap: entered promiscuous mode
[  515.887685][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  515.959234][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  516.092742][T10370] batman_adv: batadv0: Interface activated: batadv_slave_0
[  516.118315][T10370] batman_adv: batadv0: Interface activated: batadv_slave_1
[  516.145143][T10113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  516.164034][T10113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  516.179030][T10105] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  516.214582][T10105] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  516.337035][T10105] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  516.480372][T10105] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  516.778505][ T9821] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.275576][ T9821] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.409428][T10105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  517.417517][T10105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  517.739607][ T9821] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  518.039435][ T9821] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  518.472676][T10592] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1070'.
[  518.490672][T10592] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1070'.
[  518.499776][T10592] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1070'.
[  518.947206][T10110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  519.148852][T10110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  519.887971][ T9821] bridge_slave_1: left allmulticast mode
[  519.912410][ T9821] bridge_slave_1: left promiscuous mode
[  520.000862][ T9821] bridge0: port 2(bridge_slave_1) entered disabled state
[  520.016270][ T9821] bridge_slave_0: left allmulticast mode
[  520.023429][ T9821] bridge_slave_0: left promiscuous mode
[  520.030745][ T9821] bridge0: port 1(bridge_slave_0) entered disabled state
[  520.710924][   T30] audit: type=1326 audit(1762148995.045:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10603 comm="syz.6.1071" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000
[  520.894985][   T30] audit: type=1326 audit(1762148995.045:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10603 comm="syz.6.1071" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f06539 code=0x7ffc0000
[  521.151272][   T30] audit: type=1326 audit(1762148995.045:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10603 comm="syz.6.1071" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000
[  521.280659][   T30] audit: type=1326 audit(1762148995.045:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10603 comm="syz.6.1071" exe="/root/syz-executor" sig=0 arch=40000003 syscall=373 compat=1 ip=0xf7f06539 code=0x7ffc0000
[  521.303442][    C0] vkms_vblank_simulate: vblank timer overrun
[  521.358266][T10615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1073'.
[  521.391166][T10615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1073'.
[  521.482962][T10618] netlink: 'syz.0.1073': attribute type 1 has an invalid length.
[  521.495400][T10613] syz.8.1072 (10613): drop_caches: 2
[  521.518784][   T30] audit: type=1326 audit(1762148995.045:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10603 comm="syz.6.1071" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000
[  521.551170][T10618] netlink: 'syz.0.1073': attribute type 1 has an invalid length.
[  521.632181][   T30] audit: type=1326 audit(1762148995.055:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10603 comm="syz.6.1071" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f06539 code=0x7ffc0000
[  521.700518][   T30] audit: type=1326 audit(1762148995.055:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10603 comm="syz.6.1071" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000
[  521.813332][   T30] audit: type=1326 audit(1762148995.055:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10603 comm="syz.6.1071" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7f06539 code=0x7ffc0000
[  521.855108][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1074'.
[  521.897292][   T30] audit: type=1326 audit(1762148995.065:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10603 comm="syz.6.1071" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f06539 code=0x7ffc0000
[  521.975630][   T30] audit: type=1326 audit(1762148995.085:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10603 comm="syz.6.1071" exe="/root/syz-executor" sig=0 arch=40000003 syscall=365 compat=1 ip=0xf7f06539 code=0x7ffc0000
[  523.068976][T10639] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  523.409226][T10639] netlink: 'syz.7.1077': attribute type 8 has an invalid length.
[  524.199262][ T9821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  524.391194][ T9821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  524.706035][ T9821] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  524.771817][ T9821] bond0 (unregistering): Released all slaves
[  525.061930][ T9821] bond1 (unregistering): (slave veth3): Releasing active interface
[  525.069881][ T9821] vlan2: entered promiscuous mode
[  525.094304][ T9821] bond1 (unregistering): (slave vlan2): Releasing active interface
[  525.113013][ T9821] bond1 (unregistering): Released all slaves
[  525.152895][ T9821] bond2 (unregistering): Released all slaves
[  525.970862][   T10] usb 10-1: new full-speed USB device number 2 using dummy_hcd
[  526.105324][T10669] binder: 10661:10669 ioctl c018620c 80000100 returned -1
[  526.608342][   T10] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  526.633560][   T10] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2
[  526.649144][   T10] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  526.697355][   T10] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  526.709744][   T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  526.718459][   T10] usb 10-1: Product: syz
[  526.724817][   T10] usb 10-1: Manufacturer: syz
[  526.729700][   T10] usb 10-1: SerialNumber: syz
[  526.805931][ T9821] hsr_slave_0: left promiscuous mode
[  526.825514][   T10] cdc_ncm 10-1:1.0: NCM or ECM functional descriptors missing
[  526.844909][ T9821] hsr_slave_1: left promiscuous mode
[  526.920229][   T10] cdc_ncm 10-1:1.0: bind() failure
[  526.926698][ T9821] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  526.956623][ T9821] batman_adv: batadv0: Removing interface: batadv_slave_0
[  526.974968][ T9821] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  526.984266][ T9821] batman_adv: batadv0: Removing interface: batadv_slave_1
[  527.343163][ T9821] veth1_macvtap: left promiscuous mode
[  527.366453][ T9821] veth0_macvtap: left promiscuous mode
[  527.389266][ T9821] veth1_vlan: left promiscuous mode
[  527.398263][ T9821] veth0_vlan: left promiscuous mode
[  527.990594][T10684] fuse: Unknown parameter 'user_i00000000000000000000'
[  528.577850][T10697] netlink: 29 bytes leftover after parsing attributes in process `syz.6.1085'.
[  528.696257][ T1211] usb 10-1: USB disconnect, device number 2
[  529.145371][T10705] fuse: Unknown parameter 'fd·0x0000000000000007'
[  529.718576][T10710] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1088'.
[  530.041058][ T9821] team0 (unregistering): Port device team_slave_1 removed
[  530.154964][ T9821] team0 (unregistering): Port device team_slave_0 removed
[  530.717938][T10698] syzkaller0: entered promiscuous mode
[  530.723694][T10698] syzkaller0: entered allmulticast mode
[  531.054775][T10724] FAULT_INJECTION: forcing a failure.
[  531.054775][T10724] name failslab, interval 1, probability 0, space 0, times 0
[  531.089291][T10724] CPU: 1 UID: 0 PID: 10724 Comm: syz.9.1091 Not tainted syzkaller #0 PREEMPT(full) 
[  531.089316][T10724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  531.089326][T10724] Call Trace:
[  531.089333][T10724]  <TASK>
[  531.089340][T10724]  dump_stack_lvl+0x189/0x250
[  531.089369][T10724]  ? __pfx____ratelimit+0x10/0x10
[  531.089390][T10724]  ? __pfx_dump_stack_lvl+0x10/0x10
[  531.089411][T10724]  ? __pfx__printk+0x10/0x10
[  531.089433][T10724]  ? __pfx___might_resched+0x10/0x10
[  531.089450][T10724]  ? fs_reclaim_acquire+0x7d/0x100
[  531.089479][T10724]  should_fail_ex+0x414/0x560
[  531.089508][T10724]  should_failslab+0xa8/0x100
[  531.089528][T10724]  kmem_cache_alloc_noprof+0x74/0x6e0
[  531.089550][T10724]  ? alloc_empty_file+0x55/0x1d0
[  531.089573][T10724]  alloc_empty_file+0x55/0x1d0
[  531.089592][T10724]  alloc_file_pseudo+0x13d/0x210
[  531.089613][T10724]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  531.089632][T10724]  ? __pfx_hugetlb_reserve_pages+0x10/0x10
[  531.089649][T10724]  ? rcu_is_watching+0x15/0xb0
[  531.089675][T10724]  ? hugetlbfs_get_inode+0x448/0x660
[  531.089707][T10724]  hugetlb_file_setup+0x3ee/0x630
[  531.089735][T10724]  ksys_mmap_pgoff+0x22f/0x760
[  531.089763][T10724]  __do_fast_syscall_32+0xb6/0x2b0
[  531.089803][T10724]  ? lockdep_hardirqs_on+0x9c/0x150
[  531.089829][T10724]  do_fast_syscall_32+0x34/0x80
[  531.089852][T10724]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  531.089872][T10724] RIP: 0023:0xf708d539
[  531.089888][T10724] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  531.089903][T10724] RSP: 002b:00000000f547d55c EFLAGS: 00000206 ORIG_RAX: 00000000000000c0
[  531.089922][T10724] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000ff5000
[  531.089933][T10724] RDX: 0000000001000005 RSI: 00000000000ec071 RDI: 00000000ffffffff
[  531.089943][T10724] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  531.089952][T10724] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  531.089962][T10724] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  531.089997][T10724]  </TASK>
[  531.870644][T10739] kvm: user requested TSC rate below hardware speed
[  532.000888][ T5900] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  532.337353][ T5900] usb 7-1: Using ep0 maxpacket: 8
[  532.517280][ T5900] usb 7-1: config 0 has an invalid interface number: 112 but max is 1
[  532.528611][ T5900] usb 7-1: config 0 has an invalid interface number: 17 but max is 1
[  532.546611][ T5900] usb 7-1: config 0 has no interface number 0
[  532.559119][ T5900] usb 7-1: config 0 has no interface number 1
[  532.579678][ T5900] usb 7-1: New USB device found, idVendor=04c1, idProduct=009d, bcdDevice=1f.14
[  532.589564][ T5900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  532.610259][ T5900] usb 7-1: Product: syz
[  532.638649][ T5900] usb 7-1: Manufacturer: syz
[  532.692315][ T9821] IPVS: stop unused estimator thread 0...
[  532.703230][ T5900] usb 7-1: SerialNumber: syz
[  532.784640][ T5900] usb 7-1: config 0 descriptor??
[  533.543404][   T10] usb 1-1: new full-speed USB device number 20 using dummy_hcd
[  533.898535][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  533.910178][   T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  533.926138][   T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  534.124465][   T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  534.157589][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  534.185543][   T10] usb 1-1: Product: syz
[  534.232909][   T10] usb 1-1: Manufacturer: syz
[  534.243525][   T10] usb 1-1: SerialNumber: syz
[  534.476941][   T10] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing
[  534.550671][   T10] cdc_ncm 1-1:1.0: bind() failure
[  536.175873][T10813] syzkaller0: entered promiscuous mode
[  536.190009][T10813] syzkaller0: entered allmulticast mode
[  536.433086][   T10] usb 1-1: USB disconnect, device number 20
[  536.597977][ T5900] usb 7-1: USB disconnect, device number 3
[  536.879044][   T30] kauditd_printk_skb: 4 callbacks suppressed
[  536.879063][   T30] audit: type=1400 audit(1762149011.495:871): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=10818 comm="syz.7.1108"
[  538.050895][T10508] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  538.162871][T10850] CIFS: VFS: Malformed UNC in devname
[  538.251184][T10508] usb 7-1: device descriptor read/64, error -71
[  538.411796][T10854] batadv1: entered promiscuous mode
[  538.417815][T10854] 8021q: adding VLAN 0 to HW filter on device batadv1
[  538.490586][T10508] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  538.652212][T10508] usb 7-1: device descriptor read/64, error -71
[  538.761154][T10508] usb usb7-port1: attempt power cycle
[  539.130710][T10508] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  539.216375][T10508] usb 7-1: device descriptor read/8, error -71
[  539.405355][T10874] syzkaller0: entered promiscuous mode
[  539.419852][T10874] syzkaller0: entered allmulticast mode
[  539.468338][T10508] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  539.501343][T10874] netlink: 'syz.8.1119': attribute type 4 has an invalid length.
[  539.541091][T10508] usb 7-1: device descriptor read/8, error -71
[  539.691485][T10508] usb usb7-port1: unable to enumerate USB device
[  542.000587][   T10] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  542.448380][   T10] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  542.460392][   T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  542.483917][   T10] usb 10-1: Product: syz
[  542.493932][   T10] usb 10-1: Manufacturer: syz
[  542.515494][   T10] usb 10-1: SerialNumber: syz
[  542.559384][   T10] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  542.661831][ T5892] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  543.277572][T10962] binder: BINDER_SET_CONTEXT_MGR already set
[  543.283817][T10962] binder: 10959:10962 ioctl 4018620d 80000040 returned -16
[  543.350536][ T5900] usb 7-1: new full-speed USB device number 8 using dummy_hcd
[  543.532779][ T5900] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  543.546087][ T5900] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  543.573867][ T5900] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  543.638188][ T5900] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  543.647575][ T5900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  543.657869][ T5900] usb 7-1: Product: syz
[  543.662977][ T5900] usb 7-1: Manufacturer: syz
[  543.667589][ T5900] usb 7-1: SerialNumber: syz
[  543.719623][ T5900] cdc_ncm 7-1:1.0: NCM or ECM functional descriptors missing
[  543.720573][ T5892] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive
[  543.747880][ T5900] cdc_ncm 7-1:1.0: bind() failure
[  543.799095][ T5892] ath9k_htc: Failed to initialize the device
[  543.850164][ T5892] usb 10-1: ath9k_htc: USB layer deinitialized
[  543.914293][T10964] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  543.981754][T10964] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  544.025539][T10964] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  544.226623][T10969] syz.8.1137 (10969): drop_caches: 2
[  544.350504][   T10] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  544.544280][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  544.639352][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  544.724636][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  544.876607][    T9] usb 10-1: USB disconnect, device number 3
[  544.883739][   T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  545.089514][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  545.113432][   T10] usb 1-1: config 0 descriptor??
[  545.567830][   T10] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  545.685823][ T5900] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  545.694118][  T983] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  545.728752][ T5900] hid-generic 0000:0000:0000.0015: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  545.872296][  T983] usb 10-1: unable to get BOS descriptor or descriptor too short
[  545.884239][  T983] usb 10-1: config 3 has an invalid interface number: 19 but max is 0
[  545.898412][  T983] usb 10-1: config 3 has no interface number 0
[  545.919648][  T983] usb 10-1: config 3 interface 19 altsetting 9 bulk endpoint 0x8E has invalid maxpacket 32
[  545.958127][  T983] usb 10-1: config 3 interface 19 altsetting 9 bulk endpoint 0xC has invalid maxpacket 64
[  546.010155][  T983] usb 10-1: config 3 interface 19 has no altsetting 0
[  546.063092][  T983] usb 10-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=53.f5
[  546.077163][  T983] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  546.116611][  T983] usb 10-1: Product: syz
[  546.146033][   T10] usb 7-1: USB disconnect, device number 8
[  546.150604][  T983] usb 10-1: Manufacturer: syz
[  546.189381][  T983] usb 10-1: SerialNumber: syz
[  546.222830][T10986] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  546.231291][T10986] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  546.444164][T10986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  546.458075][T10986] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  546.492799][T10986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  546.515942][T10986] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  546.625462][  T983] pl2303 10-1:3.19: required interrupt-in endpoint missing
[  546.677875][  T983] usb 10-1: USB disconnect, device number 4
[  546.922196][    T9] usb 1-1: reset high-speed USB device number 21 using dummy_hcd
[  547.039660][T11015] netlink: 'syz.9.1143': attribute type 1 has an invalid length.
[  547.448658][T11024] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1146'.
[  547.476302][T11024] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1146'.
[  547.732101][   T10] usb 1-1: USB disconnect, device number 21
[  548.762355][T11054] netlink: 11 bytes leftover after parsing attributes in process `syz.8.1147'.
[  549.078980][T11066] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1152'.
[  549.459966][ T5900] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0
[  549.484033][ T5900] hid-generic 0000:0000:0000.0016: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  549.983568][ T1211] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  550.004739][T11084] syz.9.1157 (11084): drop_caches: 2
[  550.125815][T11098] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[  550.140649][ T1211] usb 9-1: Using ep0 maxpacket: 8
[  550.158512][ T1211] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  550.179329][T11098] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  550.202949][ T1211] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  550.213429][ T1211] usb 9-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00
[  550.305580][ T1211] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  550.317814][ T1211] usb 9-1: config 0 descriptor??
[  550.330108][ T1211] usbhid 9-1:0.0: can't add hid device: -22
[  550.344670][ T1211] usbhid 9-1:0.0: probe with driver usbhid failed with error -22
[  550.480513][    T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  550.680687][    T9] usb 7-1: Using ep0 maxpacket: 8
[  550.690207][    T9] usb 7-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab
[  550.700543][    T9] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  550.708796][    T9] usb 7-1: Product: syz
[  550.717065][    T9] usb 7-1: Manufacturer: syz
[  550.723566][    T9] usb 7-1: SerialNumber: syz
[  550.736701][    T9] usb 7-1: config 0 descriptor??
[  550.891184][  T983] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[  551.079394][  T983] usb 1-1: unable to get BOS descriptor or descriptor too short
[  551.090850][  T983] usb 1-1: not running at top speed; connect to a high speed hub
[  551.113456][  T983] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  551.125390][  T983] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4
[  551.136780][  T983] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  551.177259][  T983] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  551.186638][  T983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  551.203863][  T983] usb 1-1: Product: syz
[  551.217761][  T983] usb 1-1: Manufacturer: syz
[  551.235931][  T983] usb 1-1: SerialNumber: syz
[  551.311174][    T9] usb 7-1: USB disconnect, device number 9
[  551.377418][T10373] udevd[10373]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  551.447159][    C0] vkms_vblank_simulate: vblank timer overrun
[  552.582079][ T5835] Bluetooth: hci6: command 0x0405 tx timeout
[  552.615252][T10645] usb 9-1: USB disconnect, device number 2
[  552.801912][    T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  552.988841][    T9] usb 7-1: config index 0 descriptor too short (expected 45, got 36)
[  553.006508][    T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  553.046881][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  553.070104][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  553.095881][    T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  553.132004][    T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  553.168784][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  553.201653][    T9] usb 7-1: config 0 descriptor??
[  553.227392][T11133] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22
[  553.381834][  T983] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  553.445845][  T983] usb 1-1: USB disconnect, device number 22
[  553.492524][   T30] audit: type=1326 audit(1762149028.135:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11142 comm="syz.8.1166" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f42539 code=0x0
[  553.558382][T10373] udevd[10373]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  553.821458][    T9] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  553.844823][    T9] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  553.886019][    T9] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  553.935805][    T9] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  553.971123][    T9] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  554.038127][T11151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  554.055726][T11151] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  554.089097][    T9] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  554.100105][    T9] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  554.124750][    T9] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  554.132951][    T9] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  554.141908][    T9] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  554.244450][    T9] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  555.211102][  T983] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  555.290677][T10645] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  555.308730][T11195] syz.0.1175 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  555.354571][T11195] random: crng reseeded on system resumption
[  555.482371][T10645] usb 10-1: Using ep0 maxpacket: 32
[  555.490758][T10645] usb 10-1: unable to get BOS descriptor or descriptor too short
[  555.507054][T10645] usb 10-1: unable to read config index 0 descriptor/start: -61
[  555.599408][T10645] usb 10-1: can't read configurations, error -61
[  555.685718][ T5900] usb 7-1: USB disconnect, device number 10
[  555.804326][T10645] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  556.240545][T10645] usb 10-1: Using ep0 maxpacket: 32
[  556.250027][T10645] usb 10-1: unable to get BOS descriptor or descriptor too short
[  556.275088][T10645] usb 10-1: unable to read config index 0 descriptor/start: -61
[  556.297677][T10645] usb 10-1: can't read configurations, error -61
[  556.359170][T10645] usb usb10-port1: attempt power cycle
[  556.896450][T10645] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  556.984171][T10645] usb 10-1: Using ep0 maxpacket: 32
[  557.044368][T10645] usb 10-1: unable to get BOS descriptor or descriptor too short
[  557.054369][T10645] usb 10-1: unable to read config index 0 descriptor/start: -61
[  557.063117][T10645] usb 10-1: can't read configurations, error -61
[  557.227444][T10645] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  557.301304][T10645] usb 10-1: Using ep0 maxpacket: 32
[  557.325827][T10645] usb 10-1: unable to get BOS descriptor or descriptor too short
[  557.370285][T10645] usb 10-1: unable to read config index 0 descriptor/start: -61
[  557.392903][T10645] usb 10-1: can't read configurations, error -61
[  557.429370][T10645] usb usb10-port1: unable to enumerate USB device
[  557.468336][T11235] input: syz1 as /devices/virtual/input/input29
[  557.564043][    T9] usb 7-1: new full-speed USB device number 11 using dummy_hcd
[  557.795604][    T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  557.816390][    T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  557.826197][    T9] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  557.855973][    T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  557.868069][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  557.886625][    T9] usb 7-1: Product: syz
[  557.896985][    T9] usb 7-1: Manufacturer: syz
[  557.910494][    T9] usb 7-1: SerialNumber: syz
[  558.077148][    T9] cdc_ncm 7-1:1.0: NCM or ECM functional descriptors missing
[  558.160280][    T9] cdc_ncm 7-1:1.0: bind() failure
[  558.620557][  T983] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  558.756757][    C1] sd 0:0:1:0: [sda] tag#5220 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s
[  558.767346][    C1] sd 0:0:1:0: [sda] tag#5220 CDB: Write(6) 0a 00 00 00 00 00 00 00 fe 80 00 00
[  558.778887][T11262] netlink: 'syz.0.1188': attribute type 1 has an invalid length.
[  558.888635][T11265] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[  558.948401][  T983] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82
[  558.965622][  T983] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  558.994557][  T983] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.4b
[  559.030540][T11265] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  559.040396][  T983] usb 10-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0
[  559.066448][T11265] bond1: (slave vcan1): making interface the new active one
[  559.074381][  T983] usb 10-1: Product: syz
[  559.094948][T11265] bond1: (slave vcan1): Enslaving as an active interface with an up link
[  559.107153][  T983] usb 10-1: config 0 descriptor??
[  559.393248][  T983] ath6kl: Failed to submit usb control message: -71
[  559.404369][  T983] ath6kl: unable to send the bmi data to the device: -71
[  559.412041][  T983] ath6kl: Unable to send get target info: -71
[  559.442221][  T983] ath6kl: Failed to init ath6kl core: -71
[  559.449323][  T983] ath6kl_usb 10-1:0.0: probe with driver ath6kl_usb failed with error -71
[  559.703943][  T983] usb 10-1: USB disconnect, device number 9
[  559.932479][    T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  560.169140][T11289] fuse: Unknown parameter 'IuG^Ç$ì3Œm0100000'
[  560.268886][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  560.280282][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  560.299343][    T9] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  560.320662][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  560.397833][    T9] usb 1-1: config 0 descriptor??
[  560.780094][T11279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  560.797807][T11279] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  560.873841][T10645] usb 7-1: USB disconnect, device number 11
[  561.093292][T11304] netlink: 'syz.8.1194': attribute type 10 has an invalid length.
[  561.126092][T11304] 8021q: adding VLAN 0 to HW filter on device batadv0
[  561.136374][T11304] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  561.231249][T11307] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1195'.
[  561.262496][T11311] netlink: 'syz.8.1194': attribute type 10 has an invalid length.
[  561.276192][T11311] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1194'.
[  562.383706][ T5892] hid_parser_main: 5 callbacks suppressed
[  562.383724][ T5892] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  562.406438][ T5892] hid-generic 0000:0000:0000.0018: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  562.570666][T11311] batadv0: entered promiscuous mode
[  562.587712][T11311] batadv0: entered allmulticast mode
[  562.765086][T11311] bond0: (slave batadv0): Releasing backup interface
[  562.824895][    T9] usbhid 1-1:0.0: can't add hid device: -71
[  562.841470][    T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  562.890782][    T9] usb 1-1: USB disconnect, device number 23
[  562.984585][T11311] bridge0: port 3(batadv0) entered blocking state
[  562.994481][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  563.001373][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  563.047214][T11311] bridge0: port 3(batadv0) entered disabled state
[  563.410827][ T1107] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  563.420120][ T1107] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  563.641083][T11341] FAULT_INJECTION: forcing a failure.
[  563.641083][T11341] name failslab, interval 1, probability 0, space 0, times 0
[  563.677022][T11341] CPU: 0 UID: 0 PID: 11341 Comm: syz.0.1199 Not tainted syzkaller #0 PREEMPT(full) 
[  563.677048][T11341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  563.677058][T11341] Call Trace:
[  563.677065][T11341]  <TASK>
[  563.677073][T11341]  dump_stack_lvl+0x189/0x250
[  563.677101][T11341]  ? __pfx____ratelimit+0x10/0x10
[  563.677123][T11341]  ? __pfx_dump_stack_lvl+0x10/0x10
[  563.677143][T11341]  ? __pfx__printk+0x10/0x10
[  563.677162][T11341]  ? __pfx___might_resched+0x10/0x10
[  563.677178][T11341]  ? fs_reclaim_acquire+0x7d/0x100
[  563.677205][T11341]  should_fail_ex+0x414/0x560
[  563.677234][T11341]  should_failslab+0xa8/0x100
[  563.677253][T11341]  __kmalloc_cache_node_noprof+0x74/0x6f0
[  563.677276][T11341]  ? __get_vm_area_node+0x13f/0x300
[  563.677301][T11341]  __get_vm_area_node+0x13f/0x300
[  563.677324][T11341]  __vmalloc_node_range_noprof+0x30c/0x12d0
[  563.677347][T11341]  ? bpf_prog_alloc_no_stats+0x4a/0x4d0
[  563.677366][T11341]  ? kasan_save_track+0x4f/0x80
[  563.677388][T11341]  ? __kmalloc_cache_noprof+0x3d5/0x6f0
[  563.677410][T11341]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  563.677448][T11341]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  563.677480][T11341]  ? bpf_prog_alloc_no_stats+0x4a/0x4d0
[  563.677506][T11341]  __vmalloc_noprof+0xb1/0xf0
[  563.677528][T11341]  ? bpf_prog_alloc_no_stats+0x4a/0x4d0
[  563.677547][T11341]  bpf_prog_alloc_no_stats+0x4a/0x4d0
[  563.677569][T11341]  bpf_prog_alloc+0x3c/0x1a0
[  563.677595][T11341]  bpf_prog_create_from_user+0xa7/0x440
[  563.677618][T11341]  ? __pfx_seccomp_check_filter+0x10/0x10
[  563.677643][T11341]  do_seccomp+0x7b1/0xd90
[  563.677663][T11341]  ? __fget_files+0x3a0/0x420
[  563.677686][T11341]  ? __pfx_do_seccomp+0x10/0x10
[  563.677707][T11341]  ? ksys_write+0x22a/0x250
[  563.677726][T11341]  ? exc_page_fault+0x82/0x100
[  563.677752][T11341]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  563.677775][T11341]  ? lockdep_hardirqs_on+0x9c/0x150
[  563.677798][T11341]  __do_fast_syscall_32+0xb6/0x2b0
[  563.677820][T11341]  ? lockdep_hardirqs_on+0x9c/0x150
[  563.677844][T11341]  do_fast_syscall_32+0x34/0x80
[  563.677866][T11341]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  563.677885][T11341] RIP: 0023:0xf7f82539
[  563.677901][T11341] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  563.677915][T11341] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 0000000000000162
[  563.677934][T11341] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000000
[  563.677945][T11341] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000
[  563.677956][T11341] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  563.677966][T11341] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  563.677975][T11341] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  563.678002][T11341]  </TASK>
[  563.678225][T11341] syz.0.1199: vmalloc error: size 12288, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null)
[  563.914339][    C0] vkms_vblank_simulate: vblank timer overrun
[  564.082685][T11341] ,cpuset=/,mems_allowed=0-1
[  564.093447][T11341] CPU: 1 UID: 0 PID: 11341 Comm: syz.0.1199 Not tainted syzkaller #0 PREEMPT(full) 
[  564.093463][T11341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  564.093469][T11341] Call Trace:
[  564.093474][T11341]  <TASK>
[  564.093479][T11341]  dump_stack_lvl+0x189/0x250
[  564.093498][T11341]  ? __pfx_dump_stack_lvl+0x10/0x10
[  564.093510][T11341]  ? __pfx__printk+0x10/0x10
[  564.093521][T11341]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  564.093534][T11341]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  564.093547][T11341]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  564.093561][T11341]  warn_alloc+0x214/0x310
[  564.093578][T11341]  ? __pfx_warn_alloc+0x10/0x10
[  564.093596][T11341]  ? __get_vm_area_node+0x2b5/0x300
[  564.093613][T11341]  __vmalloc_node_range_noprof+0x331/0x12d0
[  564.093630][T11341]  ? kasan_save_track+0x4f/0x80
[  564.093643][T11341]  ? __kmalloc_cache_noprof+0x3d5/0x6f0
[  564.093656][T11341]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  564.093677][T11341]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  564.093696][T11341]  ? bpf_prog_alloc_no_stats+0x4a/0x4d0
[  564.093706][T11341]  __vmalloc_noprof+0xb1/0xf0
[  564.093718][T11341]  ? bpf_prog_alloc_no_stats+0x4a/0x4d0
[  564.093729][T11341]  bpf_prog_alloc_no_stats+0x4a/0x4d0
[  564.093741][T11341]  bpf_prog_alloc+0x3c/0x1a0
[  564.093752][T11341]  bpf_prog_create_from_user+0xa7/0x440
[  564.093766][T11341]  ? __pfx_seccomp_check_filter+0x10/0x10
[  564.093781][T11341]  do_seccomp+0x7b1/0xd90
[  564.093792][T11341]  ? __fget_files+0x3a0/0x420
[  564.093805][T11341]  ? __pfx_do_seccomp+0x10/0x10
[  564.093816][T11341]  ? ksys_write+0x22a/0x250
[  564.093828][T11341]  ? exc_page_fault+0x82/0x100
[  564.093844][T11341]  ? syscall_enter_from_user_mode_prepare+0x8f/0x110
[  564.093858][T11341]  ? lockdep_hardirqs_on+0x9c/0x150
[  564.093871][T11341]  __do_fast_syscall_32+0xb6/0x2b0
[  564.093885][T11341]  ? lockdep_hardirqs_on+0x9c/0x150
[  564.093898][T11341]  do_fast_syscall_32+0x34/0x80
[  564.093911][T11341]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  564.093922][T11341] RIP: 0023:0xf7f82539
[  564.093931][T11341] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  564.093939][T11341] RSP: 002b:00000000f547655c EFLAGS: 00000206 ORIG_RAX: 0000000000000162
[  564.093950][T11341] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000000000
[  564.093957][T11341] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000
[  564.093963][T11341] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  564.093968][T11341] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  564.093974][T11341] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  564.093988][T11341]  </TASK>
[  564.094001][T11341] Mem-Info:
[  564.380762][T11341] active_anon:9429 inactive_anon:0 isolated_anon:0
[  564.380762][T11341]  active_file:15976 inactive_file:3943 isolated_file:0
[  564.380762][T11341]  unevictable:768 dirty:176 writeback:0
[  564.380762][T11341]  slab_reclaimable:6465 slab_unreclaimable:100478
[  564.380762][T11341]  mapped:31230 shmem:1374 pagetables:1401
[  564.380762][T11341]  sec_pagetables:0 bounce:0
[  564.380762][T11341]  kernel_misc_reclaimable:0
[  564.380762][T11341]  free:1346286 free_pcp:16345 free_cma:0
[  564.426014][    C0] vkms_vblank_simulate: vblank timer overrun
[  564.531174][T11341] Node 0 active_anon:36216kB inactive_anon:0kB active_file:63892kB inactive_file:15632kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:121008kB dirty:704kB writeback:0kB shmem:3960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12756kB pagetables:5464kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  564.620836][T11341] Node 1 active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:12kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  564.764785][T11341] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  564.897100][T11341] lowmem_reserve[]: 0 2505 2505 2505 2505
[  564.924870][T11341] Node 0 DMA32 free:1480124kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28580kB inactive_anon:0kB active_file:63892kB inactive_file:15632kB unevictable:1536kB writepending:704kB zspages:0kB present:3129332kB managed:2565168kB mlocked:0kB bounce:0kB free_pcp:45484kB local_pcp:22564kB free_cma:0kB
[  565.105841][T11341] lowmem_reserve[]: 0 0 0 0 0
[  565.111554][T11341] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  565.156673][T11361] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.1204' sets config #0
[  565.174112][T11361] usb usb1: usbfs: interface 0 claimed by hub while 'syz.9.1204' sets config #1
[  565.244425][T11341] lowmem_reserve[]: 0 0 0 0 0
[  565.252945][T11341] Node 1 Normal free:3896848kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:140kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:20028kB local_pcp:9096kB free_cma:0kB
[  565.367200][T11341] lowmem_reserve[]: 0 0 0 0 0
[  565.429970][T11341] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  565.506937][T11341] Node 0 DMA32: 3599*4kB (UME) 3362*8kB (UME) 3809*16kB (UME) 1155*32kB (UME) 992*64kB (UME) 404*128kB (UME) 133*256kB (UME) 63*512kB (UME) 15*1024kB (UME) 5*2048kB (UM) 279*4096kB (M) = 1489084kB
[  565.812282][ T5892] usb 9-1: new full-speed USB device number 4 using dummy_hcd
[  565.910960][T11341] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  565.990543][T11341] Node 1 Normal: 170*4kB (UME) 67*8kB (UE) 47*16kB (UME) 107*32kB (UME) 32*64kB (UM) 6*128kB (UME) 2*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 947*4096kB (M) = 3896848kB
[  566.041731][T11341] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  566.077247][T11341] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[  566.108388][T11341] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  566.210569][ T5892] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  566.220542][T11341] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  566.247460][T11382] fuse: Unknown parameter 'IuG^Ç$ì3Œm0100000'
[  566.255869][T11341] 21561 total pagecache pages
[  566.260661][ T5892] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2
[  566.260717][ T5892] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  566.325847][ T5892] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  566.362921][ T5892] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  566.400592][ T5892] usb 9-1: Product: syz
[  566.407768][ T5892] usb 9-1: Manufacturer: syz
[  566.417899][ T5892] usb 9-1: SerialNumber: syz
[  566.454458][T11341] 0 pages in swap cache
[  566.458651][T11341] Free swap  = 124996kB
[  566.466837][ T5892] cdc_ncm 9-1:1.0: NCM or ECM functional descriptors missing
[  566.521488][T11387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  566.530269][ T5892] cdc_ncm 9-1:1.0: bind() failure
[  566.535856][T11341] Total swap = 124996kB
[  566.540033][T11341] 2097051 pages RAM
[  566.567146][T11387] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  566.642564][T11341] 0 pages HighMem/MovableOnly
[  566.647283][T11341] 424117 pages reserved
[  566.717526][T11341] 0 pages cma reserved
[  567.247085][T11401] netlink: 35 bytes leftover after parsing attributes in process `syz.9.1214'.
[  567.300655][T11401] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1214'.
[  567.490000][T10645] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0
[  567.569073][T10645] hid-generic 0000:0000:0000.0019: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  568.049072][T10645] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0
[  568.091611][T10645] hid-generic 0000:0000:0000.001A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  568.276649][T11426] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  568.309064][T11426] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1219'.
[  568.500785][T10645] usb 9-1: USB disconnect, device number 4
[  568.990554][T11443] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(9)
[  568.997119][T11443] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  569.035667][T11443] vhci_hcd vhci_hcd.0: Device attached
[  569.128628][T11458] tipc: Started in network mode
[  569.134898][T11458] tipc: Node identity ba5fe3909b17, cluster identity 4711
[  569.153541][T11458] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  569.191707][T11461] syzkaller0: entered promiscuous mode
[  569.210827][T11461] syzkaller0: entered allmulticast mode
[  569.221384][T10645] vhci_hcd: vhci_device speed not set
[  569.287619][T11458] tipc: Resetting bearer <eth:syzkaller0>
[  569.302472][T10645] usb 47-1: new full-speed USB device number 2 using vhci_hcd
[  569.339962][T11464] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1226'.
[  569.368152][T11465] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1227'.
[  569.587283][T11447] vhci_hcd: connection reset by peer
[  569.600713][  T999] vhci_hcd: stop threads
[  569.615178][  T999] vhci_hcd: release socket
[  569.650859][  T999] vhci_hcd: disconnect device
[  569.722337][ T5900] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  569.744034][ T5900] hid-generic 0000:0000:0000.001B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  569.830190][T11450] tipc: Resetting bearer <eth:syzkaller0>
[  569.910794][T11450] tipc: Disabling bearer <eth:syzkaller0>
[  571.121090][ T5900] tipc: Node number set to 558424976
[  572.158345][T11496] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  572.171904][T11494] tipc: Disabling bearer <eth:syzkaller0>
[  572.511076][ T1211] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  572.671282][ T1211] usb 10-1: too many configurations: 9, using maximum allowed: 8
[  572.716399][ T1211] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  572.771799][ T1211] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  572.832290][ T1211] usb 10-1: config 0 interface 0 has no altsetting 0
[  572.848524][T11532] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1238'.
[  572.944735][ T1211] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  572.962591][ T1211] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  572.982158][ T1211] usb 10-1: config 0 interface 0 has no altsetting 0
[  572.995791][ T1211] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  573.005410][ T1211] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  573.045468][ T1211] usb 10-1: config 0 interface 0 has no altsetting 0
[  573.080657][ T1211] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  573.104937][ T1211] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  573.157504][ T1211] usb 10-1: config 0 interface 0 has no altsetting 0
[  573.181804][ T1211] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  573.193442][ T1211] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  573.205873][   T30] audit: type=1326 audit(1762149047.825:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11539 comm="syz.8.1240" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f42539 code=0x0
[  573.241303][ T1211] usb 10-1: config 0 interface 0 has no altsetting 0
[  573.281607][ T1211] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  573.297076][ T1211] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  573.334133][ T1211] usb 10-1: config 0 interface 0 has no altsetting 0
[  573.351876][ T1211] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  573.370095][ T1211] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  573.405770][ T1211] usb 10-1: config 0 interface 0 has no altsetting 0
[  573.454862][ T1211] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9
[  573.484389][ T1211] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  573.554043][ T1211] usb 10-1: config 0 interface 0 has no altsetting 0
[  573.596709][ T1211] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  573.606719][ T1211] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  573.624472][   T30] audit: type=1326 audit(1762149048.265:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11547 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000
[  573.646531][    C0] vkms_vblank_simulate: vblank timer overrun
[  573.670260][ T1211] usb 10-1: Product: syz
[  573.679601][ T1211] usb 10-1: Manufacturer: syz
[  573.695278][ T1211] usb 10-1: SerialNumber: syz
[  574.932835][T10645] vhci_hcd: vhci_device speed not set
[  574.988612][ T1211] usb 10-1: config 0 descriptor??
[  574.997766][   T30] audit: type=1326 audit(1762149048.265:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11547 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=282 compat=1 ip=0xf7f82539 code=0x7ffc0000
[  575.094924][ T1211] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0
[  575.180527][   T30] audit: type=1326 audit(1762149048.265:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11547 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000
[  575.226231][T11559] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1243'.
[  575.290510][   T30] audit: type=1326 audit(1762149048.265:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11547 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7f82539 code=0x7ffc0000
[  575.312951][    C0] vkms_vblank_simulate: vblank timer overrun
[  575.371584][  T983] usb 10-1: USB disconnect, device number 10
[  575.377139][   T30] audit: type=1326 audit(1762149048.265:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11547 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000
[  575.399663][    C0] vkms_vblank_simulate: vblank timer overrun
[  575.461459][  T983] yurex 10-1:0.0: USB YUREX #0 now disconnected
[  575.502954][   T30] audit: type=1326 audit(1762149048.265:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11547 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=352 compat=1 ip=0xf7f82539 code=0x7ffc0000
[  575.670563][   T30] audit: type=1326 audit(1762149048.265:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11547 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000
[  575.800039][T11573] ptrace attach of "./syz-executor exec"[10228] was attempted by "./syz-executor exec"[11573]
[  576.864771][   T30] audit: type=1326 audit(1762149048.265:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11547 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f82539 code=0x7ffc0000
[  577.838691][   T30] audit: type=1326 audit(1762149048.265:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11547 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f82539 code=0x7ffc0000
[  579.021321][   T30] audit: type=1326 audit(1762149048.265:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11547 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000
[  587.372509][   T30] audit: type=1326 audit(1762149048.295:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11547 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=180 compat=1 ip=0xf7f82539 code=0x7ffc0000
[  599.593466][   T30] audit: type=1326 audit(1762149048.295:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11547 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000
[  599.615479][    C0] vkms_vblank_simulate: vblank timer overrun
[  609.039808][   T30] audit: type=1326 audit(1762149048.295:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11547 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f82539 code=0x7ffc0000
[  616.898940][   T30] audit: type=1326 audit(1762149048.295:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11547 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000
[  625.230682][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  625.241399][   T30] audit: type=1326 audit(1762149048.295:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11547 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f82539 code=0x7ffc0000
[  625.251663][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  625.263426][    C0] vkms_vblank_simulate: vblank timer overrun
[  626.745009][   T30] audit: type=1326 audit(1762149048.295:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11547 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000
[  638.770571][   T30] audit: type=1326 audit(1762149048.295:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11547 comm="syz.0.1242" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f82539 code=0x7ffc0000
[  638.792580][    C0] vkms_vblank_simulate: vblank timer overrun
[  656.872548][ T5829] Bluetooth: hci5: command tx timeout
[  656.894373][ T5829] Bluetooth: hci0: command tx timeout
[  684.290380][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  684.297362][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P11548/1:b..l
[  684.305755][    C0] rcu: 	(detected by 0, t=10503 jiffies, g=57953, q=904725 ncpus=2)
[  684.313762][    C0] task:syz.8.1240      state:R  running task     stack:24584 pid:11548 tgid:11539 ppid:10369  task_flags:0x40054c flags:0x10080002
[  684.328279][    C0] Call Trace:
[  684.331555][    C0]  <TASK>
[  684.334473][    C0]  __schedule+0x1798/0x4cc0
[  684.338974][    C0]  ? __pfx___schedule+0x10/0x10
[  684.343803][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  684.349685][    C0]  ? preempt_schedule_irq+0xaa/0x150
[  684.354949][    C0]  preempt_schedule_irq+0xb5/0x150
[  684.360045][    C0]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  684.365748][    C0]  ? rcu_irq_exit_check_preempt+0xdf/0x210
[  684.371533][    C0]  irqentry_exit+0x6f/0x90
[  684.375928][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  684.381887][    C0] RIP: 0010:lock_acquire+0x175/0x360
[  684.387153][    C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 ab dc d0 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e
[  684.406746][    C0] RSP: 0018:ffffc9000ef8ea98 EFLAGS: 00000206
[  684.412800][    C0] RAX: c8821c7c24f41400 RBX: 0000000000000000 RCX: c8821c7c24f41400
[  684.420755][    C0] RDX: 0000000000000000 RSI: ffffffff8d8f3eb0 RDI: ffffffff8bbf0760
[  684.428724][    C0] RBP: ffffffff81738d25 R08: 0000000000000000 R09: ffffffff81738d25
[  684.436694][    C0] R10: ffffc9000ef8ec58 R11: ffffffff81ac2f50 R12: 0000000000000002
[  684.444654][    C0] R13: ffffffff8df3d620 R14: 0000000000000000 R15: 0000000000000246
[  684.452629][    C0]  ? unwind_next_frame+0xa5/0x2390
[  684.457798][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  684.463960][    C0]  ? unwind_next_frame+0xa5/0x2390
[  684.469082][    C0]  ? unwind_next_frame+0xa5/0x2390
[  684.474190][    C0]  ? tlb_flush_mmu+0x3a0/0x680
[  684.478956][    C0]  ? unwind_next_frame+0xa5/0x2390
[  684.484059][    C0]  unwind_next_frame+0xc2/0x2390
[  684.488978][    C0]  ? unwind_next_frame+0xa5/0x2390
[  684.494074][    C0]  ? unwind_next_frame+0xa5/0x2390
[  684.499164][    C0]  ? free_pages_and_swap_cache+0x277/0x520
[  684.504952][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  684.511091][    C0]  arch_stack_walk+0x11c/0x150
[  684.515898][    C0]  ? tlb_flush_mmu+0x3a0/0x680
[  684.520642][    C0]  stack_trace_save+0x9c/0xe0
[  684.525303][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  684.530659][    C0]  save_stack+0xf5/0x1f0
[  684.534888][    C0]  ? __pfx_save_stack+0x10/0x10
[  684.539717][    C0]  ? free_unref_folios+0xdb3/0x14f0
[  684.544893][    C0]  ? folios_put_refs+0x584/0x670
[  684.549808][    C0]  ? free_pages_and_swap_cache+0x277/0x520
[  684.555593][    C0]  ? tlb_flush_mmu+0x3a0/0x680
[  684.560341][    C0]  ? page_ext_put+0x97/0xc0
[  684.564824][    C0]  __reset_page_owner+0x71/0x1f0
[  684.569743][    C0]  free_unref_folios+0xdb3/0x14f0
[  684.574754][    C0]  ? folio_unqueue_deferred_split+0x93/0x230
[  684.580711][    C0]  folios_put_refs+0x584/0x670
[  684.585457][    C0]  ? __pfx_folios_put_refs+0x10/0x10
[  684.590725][    C0]  ? free_swap_cache+0x109/0x300
[  684.595641][    C0]  free_pages_and_swap_cache+0x277/0x520
[  684.601259][    C0]  ? __pfx_free_pages_and_swap_cache+0x10/0x10
[  684.607414][    C0]  ? tlb_table_flush+0x145/0x410
[  684.612332][    C0]  tlb_flush_mmu+0x3a0/0x680
[  684.616904][    C0]  unmap_page_range+0x3b37/0x4370
[  684.621928][    C0]  ? __pfx_unmap_page_range+0x10/0x10
[  684.627283][    C0]  ? mas_find+0xb0e/0xd30
[  684.631593][    C0]  ? unmap_vmas+0x144/0x580
[  684.636074][    C0]  unmap_vmas+0x399/0x580
[  684.640383][    C0]  ? __pfx_unmap_vmas+0x10/0x10
[  684.645230][    C0]  exit_mmap+0x240/0xb40
[  684.649454][    C0]  ? uprobe_clear_state+0x20f/0x290
[  684.654703][    C0]  ? __pfx_exit_mmap+0x10/0x10
[  684.659457][    C0]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  684.665078][    C0]  ? __pfx_exit_aio+0x10/0x10
[  684.669740][    C0]  ? uprobe_clear_state+0x27c/0x290
[  684.674926][    C0]  __mmput+0x118/0x430
[  684.678975][    C0]  exit_mm+0x1da/0x2c0
[  684.683027][    C0]  ? __pfx_exit_mm+0x10/0x10
[  684.687621][    C0]  ? rcu_is_watching+0x15/0xb0
[  684.692367][    C0]  do_exit+0x648/0x2300
[  684.696505][    C0]  ? do_raw_spin_lock+0x121/0x290
[  684.701512][    C0]  ? __pfx_do_exit+0x10/0x10
[  684.706086][    C0]  do_group_exit+0x21c/0x2d0
[  684.710662][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  684.715842][    C0]  get_signal+0x1285/0x1340
[  684.720334][    C0]  arch_do_signal_or_restart+0xa0/0x790
[  684.725869][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  684.732005][    C0]  ? __se_sys_futex_time32+0x360/0x3e0
[  684.737448][    C0]  ? exit_to_user_mode_loop+0x40/0x130
[  684.742888][    C0]  exit_to_user_mode_loop+0x72/0x130
[  684.748156][    C0]  __do_fast_syscall_32+0x1f4/0x2b0
[  684.753344][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  684.758529][    C0]  do_fast_syscall_32+0x34/0x80
[  684.763362][    C0]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  684.769667][    C0] RIP: 0023:0xf7f42539
[  684.773716][    C0] RSP: 002b:00000000f4bae60c EFLAGS: 00000206 ORIG_RAX: 00000000000000f0
[  684.783753][    C0] RAX: fffffffffffffe00 RBX: 00000000f74051e8 RCX: 0000000000000080
[  684.791727][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f74051ec
[  684.799687][    C0] RBP: 0000000000000081 R08: 0000000000000000 R09: 0000000000000000
[  684.807641][    C0] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  684.815668][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  684.823653][    C0]  </TASK>
[  684.826823][    C0] vkms_vblank_simulate: vblank timer overrun