Debian GNU/Linux 9 syzkaller ttyS0

Warning: Permanently added '10.128.0.61' (ECDSA) to the list of known hosts.
2021/03/31 11:59:11 fuzzer started
2021/03/31 11:59:11 dialing manager at 10.128.0.169:43931
2021/03/31 11:59:14 syscalls: 3263
2021/03/31 11:59:14 code coverage: enabled
2021/03/31 11:59:14 comparison tracing: enabled
2021/03/31 11:59:14 extra coverage: enabled
2021/03/31 11:59:14 setuid sandbox: enabled
2021/03/31 11:59:14 namespace sandbox: enabled
2021/03/31 11:59:14 Android sandbox: /sys/fs/selinux/policy does not exist
2021/03/31 11:59:14 fault injection: enabled
2021/03/31 11:59:14 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2021/03/31 11:59:14 net packet injection: enabled
2021/03/31 11:59:14 net device setup: enabled
2021/03/31 11:59:14 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2021/03/31 11:59:14 devlink PCI setup: PCI device 0000:00:10.0 is not available
2021/03/31 11:59:14 USB emulation: enabled
2021/03/31 11:59:14 hci packet injection: enabled
2021/03/31 11:59:14 wifi device emulation: enabled
2021/03/31 11:59:14 802.15.4 emulation: enabled
2021/03/31 11:59:14 fetching corpus: 0, signal 0/2000 (executing program)
2021/03/31 11:59:14 fetching corpus: 50, signal 53396/57067 (executing program)
2021/03/31 11:59:15 fetching corpus: 100, signal 82717/87948 (executing program)
2021/03/31 11:59:15 fetching corpus: 149, signal 106178/112874 (executing program)
2021/03/31 11:59:15 fetching corpus: 199, signal 127353/135352 (executing program)
2021/03/31 11:59:15 fetching corpus: 248, signal 148659/157839 (executing program)
2021/03/31 11:59:15 fetching corpus: 298, signal 166545/176859 (executing program)
2021/03/31 11:59:15 fetching corpus: 348, signal 180031/191449 (executing program)
2021/03/31 11:59:15 fetching corpus: 398, signal 194843/207289 (executing program)
2021/03/31 11:59:15 fetching corpus: 448, signal 208769/222175 (executing program)
2021/03/31 11:59:16 fetching corpus: 498, signal 220873/235198 (executing program)
2021/03/31 11:59:16 fetching corpus: 547, signal 230126/245473 (executing program)
2021/03/31 11:59:16 fetching corpus: 597, signal 236580/252966 (executing program)
2021/03/31 11:59:16 fetching corpus: 647, signal 244958/262236 (executing program)
2021/03/31 11:59:16 fetching corpus: 697, signal 253343/271425 (executing program)
2021/03/31 11:59:16 fetching corpus: 747, signal 261773/280646 (executing program)
2021/03/31 11:59:16 fetching corpus: 797, signal 269398/289070 (executing program)
2021/03/31 11:59:16 fetching corpus: 846, signal 277975/298302 (executing program)
2021/03/31 11:59:17 fetching corpus: 896, signal 285626/306619 (executing program)
2021/03/31 11:59:17 fetching corpus: 946, signal 293250/314822 (executing program)
2021/03/31 11:59:17 fetching corpus: 995, signal 299570/321809 (executing program)
2021/03/31 11:59:17 fetching corpus: 1043, signal 304718/327695 (executing program)
2021/03/31 11:59:17 fetching corpus: 1092, signal 311595/335142 (executing program)
2021/03/31 11:59:17 fetching corpus: 1142, signal 317019/341205 (executing program)
2021/03/31 11:59:17 fetching corpus: 1191, signal 322315/347093 (executing program)
2021/03/31 11:59:18 fetching corpus: 1241, signal 329188/354419 (executing program)
2021/03/31 11:59:18 fetching corpus: 1291, signal 333340/359206 (executing program)
2021/03/31 11:59:18 fetching corpus: 1340, signal 337385/363914 (executing program)
2021/03/31 11:59:18 fetching corpus: 1390, signal 342351/369347 (executing program)
2021/03/31 11:59:18 fetching corpus: 1438, signal 347371/374848 (executing program)
2021/03/31 11:59:18 fetching corpus: 1488, signal 351307/379308 (executing program)
2021/03/31 11:59:18 fetching corpus: 1538, signal 356451/384872 (executing program)
2021/03/31 11:59:18 fetching corpus: 1588, signal 359678/388675 (executing program)
2021/03/31 11:59:19 fetching corpus: 1637, signal 365658/394927 (executing program)
2021/03/31 11:59:19 fetching corpus: 1687, signal 368334/398185 (executing program)
2021/03/31 11:59:19 fetching corpus: 1736, signal 373413/403558 (executing program)
2021/03/31 11:59:19 fetching corpus: 1785, signal 377516/408087 (executing program)
2021/03/31 11:59:19 fetching corpus: 1835, signal 382220/413061 (executing program)
2021/03/31 11:59:19 fetching corpus: 1883, signal 386864/417956 (executing program)
2021/03/31 11:59:19 fetching corpus: 1933, signal 390985/422362 (executing program)
2021/03/31 11:59:20 fetching corpus: 1983, signal 393013/424907 (executing program)
2021/03/31 11:59:20 fetching corpus: 2033, signal 396995/429196 (executing program)
2021/03/31 11:59:20 fetching corpus: 2083, signal 400398/432969 (executing program)
2021/03/31 11:59:20 fetching corpus: 2132, signal 404331/437131 (executing program)
2021/03/31 11:59:20 fetching corpus: 2182, signal 407553/440657 (executing program)
2021/03/31 11:59:20 fetching corpus: 2231, signal 410713/444145 (executing program)
2021/03/31 11:59:20 fetching corpus: 2280, signal 412339/446199 (executing program)
2021/03/31 11:59:21 fetching corpus: 2330, signal 415324/449464 (executing program)
2021/03/31 11:59:21 fetching corpus: 2379, signal 418742/453105 (executing program)
2021/03/31 11:59:21 fetching corpus: 2429, signal 422328/456855 (executing program)
2021/03/31 11:59:21 fetching corpus: 2477, signal 424879/459673 (executing program)
2021/03/31 11:59:21 fetching corpus: 2527, signal 428329/463247 (executing program)
2021/03/31 11:59:21 fetching corpus: 2576, signal 431947/466966 (executing program)
2021/03/31 11:59:21 fetching corpus: 2626, signal 435617/470622 (executing program)
2021/03/31 11:59:22 fetching corpus: 2676, signal 438290/473481 (executing program)
2021/03/31 11:59:22 fetching corpus: 2725, signal 440980/476286 (executing program)
2021/03/31 11:59:22 fetching corpus: 2775, signal 443116/478666 (executing program)
2021/03/31 11:59:22 fetching corpus: 2824, signal 445202/481061 (executing program)
2021/03/31 11:59:22 fetching corpus: 2873, signal 446885/483030 (executing program)
2021/03/31 11:59:22 fetching corpus: 2923, signal 449612/485885 (executing program)
2021/03/31 11:59:22 fetching corpus: 2970, signal 451456/487961 (executing program)
2021/03/31 11:59:22 fetching corpus: 3020, signal 453685/490351 (executing program)
2021/03/31 11:59:23 fetching corpus: 3069, signal 455780/492600 (executing program)
2021/03/31 11:59:23 fetching corpus: 3116, signal 457743/494768 (executing program)
2021/03/31 11:59:23 fetching corpus: 3165, signal 459376/496666 (executing program)
2021/03/31 11:59:23 fetching corpus: 3215, signal 464380/501173 (executing program)
2021/03/31 11:59:23 fetching corpus: 3264, signal 466888/503684 (executing program)
2021/03/31 11:59:23 fetching corpus: 3313, signal 471345/507762 (executing program)
2021/03/31 11:59:23 fetching corpus: 3360, signal 473315/509858 (executing program)
2021/03/31 11:59:23 fetching corpus: 3408, signal 476071/512594 (executing program)
2021/03/31 11:59:24 fetching corpus: 3455, signal 478433/514961 (executing program)
2021/03/31 11:59:24 fetching corpus: 3505, signal 481853/518173 (executing program)
2021/03/31 11:59:24 fetching corpus: 3555, signal 483692/520114 (executing program)
2021/03/31 11:59:24 fetching corpus: 3604, signal 485965/522381 (executing program)
2021/03/31 11:59:24 fetching corpus: 3654, signal 487799/524289 (executing program)
2021/03/31 11:59:24 fetching corpus: 3704, signal 490013/526438 (executing program)
2021/03/31 11:59:24 fetching corpus: 3752, signal 493625/529681 (executing program)
2021/03/31 11:59:24 fetching corpus: 3802, signal 495422/531544 (executing program)
2021/03/31 11:59:25 fetching corpus: 3851, signal 497274/533426 (executing program)
2021/03/31 11:59:25 fetching corpus: 3901, signal 499947/535922 (executing program)
2021/03/31 11:59:25 fetching corpus: 3951, signal 501881/537879 (executing program)
2021/03/31 11:59:25 fetching corpus: 3998, signal 504129/540033 (executing program)
2021/03/31 11:59:25 fetching corpus: 4046, signal 506981/542637 (executing program)
2021/03/31 11:59:25 fetching corpus: 4095, signal 509083/544587 (executing program)
2021/03/31 11:59:25 fetching corpus: 4145, signal 511358/546684 (executing program)
2021/03/31 11:59:26 fetching corpus: 4194, signal 513605/548791 (executing program)
2021/03/31 11:59:26 fetching corpus: 4243, signal 515229/550379 (executing program)
2021/03/31 11:59:26 fetching corpus: 4291, signal 516697/551845 (executing program)
2021/03/31 11:59:26 fetching corpus: 4338, signal 519897/554583 (executing program)
2021/03/31 11:59:26 fetching corpus: 4388, signal 521846/556397 (executing program)
2021/03/31 11:59:26 fetching corpus: 4436, signal 523917/558255 (executing program)
2021/03/31 11:59:26 fetching corpus: 4486, signal 525391/559701 (executing program)
2021/03/31 11:59:26 fetching corpus: 4536, signal 527821/561822 (executing program)
2021/03/31 11:59:27 fetching corpus: 4586, signal 529480/563314 (executing program)
2021/03/31 11:59:27 fetching corpus: 4636, signal 535428/567835 (executing program)
2021/03/31 11:59:27 fetching corpus: 4683, signal 537098/569341 (executing program)
2021/03/31 11:59:27 fetching corpus: 4733, signal 539719/571522 (executing program)
2021/03/31 11:59:27 fetching corpus: 4781, signal 541375/573000 (executing program)
2021/03/31 11:59:27 fetching corpus: 4831, signal 543992/575083 (executing program)
2021/03/31 11:59:27 fetching corpus: 4881, signal 546211/576913 (executing program)
2021/03/31 11:59:27 fetching corpus: 4930, signal 547813/578324 (executing program)
2021/03/31 11:59:28 fetching corpus: 4980, signal 548957/579405 (executing program)
2021/03/31 11:59:28 fetching corpus: 5030, signal 551422/581418 (executing program)
2021/03/31 11:59:28 fetching corpus: 5080, signal 553355/583058 (executing program)
2021/03/31 11:59:28 fetching corpus: 5130, signal 555408/584732 (executing program)
2021/03/31 11:59:28 fetching corpus: 5180, signal 556999/586073 (executing program)
2021/03/31 11:59:28 fetching corpus: 5230, signal 560789/588936 (executing program)
2021/03/31 11:59:28 fetching corpus: 5279, signal 562235/590159 (executing program)
2021/03/31 11:59:29 fetching corpus: 5329, signal 565407/592494 (executing program)
2021/03/31 11:59:29 fetching corpus: 5377, signal 567311/594050 (executing program)
2021/03/31 11:59:29 fetching corpus: 5427, signal 569573/595796 (executing program)
2021/03/31 11:59:29 fetching corpus: 5477, signal 571007/596987 (executing program)
2021/03/31 11:59:29 fetching corpus: 5526, signal 572411/598177 (executing program)
2021/03/31 11:59:29 fetching corpus: 5576, signal 573979/599440 (executing program)
2021/03/31 11:59:29 fetching corpus: 5626, signal 575755/600821 (executing program)
2021/03/31 11:59:29 fetching corpus: 5676, signal 577346/602084 (executing program)
2021/03/31 11:59:30 fetching corpus: 5726, signal 579029/603374 (executing program)
2021/03/31 11:59:30 fetching corpus: 5773, signal 581139/604888 (executing program)
2021/03/31 11:59:30 fetching corpus: 5822, signal 582527/605964 (executing program)
2021/03/31 11:59:30 fetching corpus: 5870, signal 584299/607317 (executing program)
2021/03/31 11:59:30 fetching corpus: 5919, signal 586250/608724 (executing program)
2021/03/31 11:59:30 fetching corpus: 5969, signal 588158/610115 (executing program)
2021/03/31 11:59:30 fetching corpus: 6019, signal 590179/611564 (executing program)
2021/03/31 11:59:30 fetching corpus: 6069, signal 591624/612620 (executing program)
2021/03/31 11:59:31 fetching corpus: 6118, signal 593844/614149 (executing program)
2021/03/31 11:59:31 fetching corpus: 6166, signal 594951/614986 (executing program)
2021/03/31 11:59:31 fetching corpus: 6216, signal 595950/615778 (executing program)
2021/03/31 11:59:31 fetching corpus: 6266, signal 597042/616569 (executing program)
2021/03/31 11:59:31 fetching corpus: 6314, signal 598454/617584 (executing program)
2021/03/31 11:59:31 fetching corpus: 6362, signal 599798/618557 (executing program)
2021/03/31 11:59:31 fetching corpus: 6411, signal 601309/619601 (executing program)
2021/03/31 11:59:31 fetching corpus: 6461, signal 602685/620577 (executing program)
2021/03/31 11:59:31 fetching corpus: 6511, signal 604099/621570 (executing program)
2021/03/31 11:59:32 fetching corpus: 6561, signal 605805/622712 (executing program)
2021/03/31 11:59:32 fetching corpus: 6610, signal 607950/624075 (executing program)
2021/03/31 11:59:32 fetching corpus: 6659, signal 609999/625389 (executing program)
2021/03/31 11:59:32 fetching corpus: 6706, signal 611098/626173 (executing program)
2021/03/31 11:59:32 fetching corpus: 6756, signal 612406/627082 (executing program)
2021/03/31 11:59:32 fetching corpus: 6804, signal 613718/627919 (executing program)
2021/03/31 11:59:32 fetching corpus: 6853, signal 615706/629160 (executing program)
2021/03/31 11:59:32 fetching corpus: 6903, signal 617504/630273 (executing program)
2021/03/31 11:59:33 fetching corpus: 6952, signal 618513/630911 (executing program)
2021/03/31 11:59:33 fetching corpus: 7002, signal 619795/631760 (executing program)
2021/03/31 11:59:33 fetching corpus: 7051, signal 620819/632468 (executing program)
2021/03/31 11:59:33 fetching corpus: 7100, signal 622304/633377 (executing program)
2021/03/31 11:59:33 fetching corpus: 7150, signal 624755/634792 (executing program)
2021/03/31 11:59:33 fetching corpus: 7199, signal 625770/635423 (executing program)
2021/03/31 11:59:33 fetching corpus: 7249, signal 627218/636275 (executing program)
2021/03/31 11:59:34 fetching corpus: 7297, signal 628536/637053 (executing program)
2021/03/31 11:59:34 fetching corpus: 7347, signal 629803/637795 (executing program)
2021/03/31 11:59:34 fetching corpus: 7396, signal 630841/638402 (executing program)
2021/03/31 11:59:34 fetching corpus: 7444, signal 631901/639036 (executing program)
2021/03/31 11:59:34 fetching corpus: 7494, signal 633017/639659 (executing program)
2021/03/31 11:59:34 fetching corpus: 7544, signal 634592/640523 (executing program)
2021/03/31 11:59:34 fetching corpus: 7594, signal 636099/641340 (executing program)
2021/03/31 11:59:34 fetching corpus: 7644, signal 637265/641984 (executing program)
2021/03/31 11:59:35 fetching corpus: 7694, signal 638474/642660 (executing program)
2021/03/31 11:59:35 fetching corpus: 7744, signal 639463/643198 (executing program)
2021/03/31 11:59:35 fetching corpus: 7787, signal 640497/643778 (executing program)
2021/03/31 11:59:35 fetching corpus: 7788, signal 640500/643802 (executing program)
2021/03/31 11:59:35 fetching corpus: 7788, signal 640500/643830 (executing program)
2021/03/31 11:59:35 fetching corpus: 7788, signal 640500/643856 (executing program)
2021/03/31 11:59:35 fetching corpus: 7788, signal 640500/643880 (executing program)
2021/03/31 11:59:35 fetching corpus: 7788, signal 640500/643904 (executing program)
2021/03/31 11:59:35 fetching corpus: 7788, signal 640504/643938 (executing program)
2021/03/31 11:59:35 fetching corpus: 7788, signal 640504/643957 (executing program)
2021/03/31 11:59:35 fetching corpus: 7788, signal 640504/643976 (executing program)
2021/03/31 11:59:35 fetching corpus: 7788, signal 640504/644003 (executing program)
2021/03/31 11:59:35 fetching corpus: 7788, signal 640504/644029 (executing program)
2021/03/31 11:59:35 fetching corpus: 7788, signal 640504/644047 (executing program)
2021/03/31 11:59:35 fetching corpus: 7788, signal 640504/644076 (executing program)
2021/03/31 11:59:35 fetching corpus: 7788, signal 640504/644096 (executing program)
2021/03/31 11:59:35 fetching corpus: 7788, signal 640504/644118 (executing program)
2021/03/31 11:59:35 fetching corpus: 7788, signal 640504/644138 (executing program)
2021/03/31 11:59:35 fetching corpus: 7788, signal 640504/644164 (executing program)
2021/03/31 11:59:35 fetching corpus: 7788, signal 640504/644187 (executing program)
2021/03/31 11:59:35 fetching corpus: 7788, signal 640504/644212 (executing program)
2021/03/31 11:59:35 fetching corpus: 7788, signal 640504/644233 (executing program)
2021/03/31 11:59:35 fetching corpus: 7788, signal 640504/644251 (executing program)
2021/03/31 11:59:35 fetching corpus: 7788, signal 640504/644270 (executing program)
2021/03/31 11:59:35 fetching corpus: 7788, signal 640504/644288 (executing program)
2021/03/31 11:59:35 fetching corpus: 7788, signal 640504/644312 (executing program)
2021/03/31 11:59:35 fetching corpus: 7788, signal 640504/644335 (executing program)
2021/03/31 11:59:35 fetching corpus: 7788, signal 640504/644363 (executing program)
2021/03/31 11:59:35 fetching corpus: 7788, signal 640504/644387 (executing program)
2021/03/31 11:59:35 fetching corpus: 7788, signal 640504/644414 (executing program)
2021/03/31 11:59:35 fetching corpus: 7788, signal 640504/644434 (executing program)
2021/03/31 11:59:35 fetching corpus: 7788, signal 640504/644463 (executing program)
2021/03/31 11:59:35 fetching corpus: 7788, signal 640504/644484 (executing program)
2021/03/31 11:59:35 fetching corpus: 7788, signal 640504/644506 (executing program)
2021/03/31 11:59:35 fetching corpus: 7788, signal 640504/644524 (executing program)
2021/03/31 11:59:35 fetching corpus: 7788, signal 640504/644549 (executing program)
2021/03/31 11:59:35 fetching corpus: 7788, signal 640504/644567 (executing program)
2021/03/31 11:59:35 fetching corpus: 7788, signal 640504/644585 (executing program)
2021/03/31 11:59:35 fetching corpus: 7789, signal 640506/644606 (executing program)
2021/03/31 11:59:35 fetching corpus: 7789, signal 640506/644632 (executing program)
2021/03/31 11:59:35 fetching corpus: 7789, signal 640506/644647 (executing program)
2021/03/31 11:59:35 fetching corpus: 7789, signal 640506/644673 (executing program)
2021/03/31 11:59:35 fetching corpus: 7790, signal 640529/644710 (executing program)
2021/03/31 11:59:35 fetching corpus: 7790, signal 640529/644741 (executing program)
2021/03/31 11:59:35 fetching corpus: 7790, signal 640529/644762 (executing program)
2021/03/31 11:59:35 fetching corpus: 7790, signal 640529/644790 (executing program)
2021/03/31 11:59:35 fetching corpus: 7790, signal 640529/644815 (executing program)
2021/03/31 11:59:35 fetching corpus: 7790, signal 640529/644844 (executing program)
2021/03/31 11:59:35 fetching corpus: 7790, signal 640529/644863 (executing program)
2021/03/31 11:59:35 fetching corpus: 7790, signal 640529/644885 (executing program)
2021/03/31 11:59:35 fetching corpus: 7790, signal 640529/644905 (executing program)
2021/03/31 11:59:35 fetching corpus: 7790, signal 640529/644931 (executing program)
2021/03/31 11:59:35 fetching corpus: 7790, signal 640529/644960 (executing program)
2021/03/31 11:59:35 fetching corpus: 7790, signal 640529/644991 (executing program)
2021/03/31 11:59:35 fetching corpus: 7790, signal 640529/645013 (executing program)
2021/03/31 11:59:35 fetching corpus: 7790, signal 640529/645038 (executing program)
2021/03/31 11:59:35 fetching corpus: 7790, signal 640529/645060 (executing program)
2021/03/31 11:59:35 fetching corpus: 7790, signal 640529/645081 (executing program)
2021/03/31 11:59:35 fetching corpus: 7790, signal 640529/645108 (executing program)
2021/03/31 11:59:35 fetching corpus: 7790, signal 640529/645141 (executing program)
2021/03/31 11:59:35 fetching corpus: 7790, signal 640529/645161 (executing program)
2021/03/31 11:59:35 fetching corpus: 7790, signal 640529/645176 (executing program)
2021/03/31 11:59:35 fetching corpus: 7790, signal 640529/645199 (executing program)
2021/03/31 11:59:35 fetching corpus: 7790, signal 640529/645222 (executing program)
2021/03/31 11:59:35 fetching corpus: 7790, signal 640529/645253 (executing program)
2021/03/31 11:59:35 fetching corpus: 7790, signal 640529/645276 (executing program)
2021/03/31 11:59:35 fetching corpus: 7790, signal 640529/645298 (executing program)
2021/03/31 11:59:35 fetching corpus: 7790, signal 640529/645326 (executing program)
2021/03/31 11:59:35 fetching corpus: 7790, signal 640529/645349 (executing program)
2021/03/31 11:59:35 fetching corpus: 7790, signal 640529/645371 (executing program)
2021/03/31 11:59:35 fetching corpus: 7790, signal 640529/645388 (executing program)
2021/03/31 11:59:35 fetching corpus: 7790, signal 640529/645403 (executing program)
2021/03/31 11:59:35 fetching corpus: 7791, signal 640531/645432 (executing program)
2021/03/31 11:59:35 fetching corpus: 7792, signal 640550/645463 (executing program)
2021/03/31 11:59:35 fetching corpus: 7792, signal 640550/645496 (executing program)
2021/03/31 11:59:35 fetching corpus: 7792, signal 640550/645527 (executing program)
2021/03/31 11:59:35 fetching corpus: 7792, signal 640550/645546 (executing program)
2021/03/31 11:59:35 fetching corpus: 7792, signal 640550/645564 (executing program)
2021/03/31 11:59:35 fetching corpus: 7792, signal 640550/645585 (executing program)
2021/03/31 11:59:35 fetching corpus: 7792, signal 640550/645607 (executing program)
2021/03/31 11:59:35 fetching corpus: 7792, signal 640550/645634 (executing program)
2021/03/31 11:59:35 fetching corpus: 7792, signal 640550/645663 (executing program)
2021/03/31 11:59:35 fetching corpus: 7792, signal 640550/645685 (executing program)
2021/03/31 11:59:35 fetching corpus: 7792, signal 640550/645713 (executing program)
2021/03/31 11:59:35 fetching corpus: 7792, signal 640550/645746 (executing program)
2021/03/31 11:59:35 fetching corpus: 7792, signal 640550/645775 (executing program)
2021/03/31 11:59:35 fetching corpus: 7792, signal 640550/645798 (executing program)
2021/03/31 11:59:35 fetching corpus: 7792, signal 640550/645818 (executing program)
2021/03/31 11:59:35 fetching corpus: 7792, signal 640550/645845 (executing program)
2021/03/31 11:59:35 fetching corpus: 7792, signal 640550/645867 (executing program)
2021/03/31 11:59:35 fetching corpus: 7792, signal 640550/645895 (executing program)
2021/03/31 11:59:35 fetching corpus: 7792, signal 640550/645918 (executing program)
2021/03/31 11:59:35 fetching corpus: 7792, signal 640550/645941 (executing program)
2021/03/31 11:59:35 fetching corpus: 7792, signal 640550/645962 (executing program)
2021/03/31 11:59:35 fetching corpus: 7792, signal 640550/645991 (executing program)
2021/03/31 11:59:35 fetching corpus: 7792, signal 640550/646013 (executing program)
2021/03/31 11:59:35 fetching corpus: 7792, signal 640550/646040 (executing program)
2021/03/31 11:59:35 fetching corpus: 7792, signal 640550/646060 (executing program)
2021/03/31 11:59:35 fetching corpus: 7792, signal 640550/646085 (executing program)
2021/03/31 11:59:35 fetching corpus: 7792, signal 640550/646109 (executing program)
2021/03/31 11:59:35 fetching corpus: 7792, signal 640550/646137 (executing program)
2021/03/31 11:59:35 fetching corpus: 7792, signal 640550/646166 (executing program)
2021/03/31 11:59:35 fetching corpus: 7792, signal 640550/646191 (executing program)
2021/03/31 11:59:35 fetching corpus: 7792, signal 640550/646215 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/646250 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/646267 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/646291 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/646322 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/646342 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/646371 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/646400 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/646421 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/646440 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/646456 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/646468 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/646490 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/646515 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/646535 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/646552 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/646570 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/646600 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/646627 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/646653 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/646670 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/646694 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/646719 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/646734 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/646757 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/646780 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/646805 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/646824 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/646843 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/646870 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/646898 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/646916 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/646937 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/646953 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/646992 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/647013 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/647036 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/647069 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/647090 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/647120 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/647139 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/647168 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/647202 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/647221 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/647242 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/647260 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/647291 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/647317 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/647336 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/647353 (executing program)
2021/03/31 11:59:36 fetching corpus: 7793, signal 640574/647379 (executing program)
2021/03/31 11:59:36 fetching corpus: 7794, signal 640578/647401 (executing program)
2021/03/31 11:59:36 fetching corpus: 7794, signal 640578/647424 (executing program)
2021/03/31 11:59:36 fetching corpus: 7794, signal 640578/647441 (executing program)
2021/03/31 11:59:36 fetching corpus: 7794, signal 640578/647466 (executing program)
2021/03/31 11:59:36 fetching corpus: 7794, signal 640578/647488 (executing program)
2021/03/31 11:59:36 fetching corpus: 7794, signal 640578/647512 (executing program)
2021/03/31 11:59:36 fetching corpus: 7794, signal 640578/647538 (executing program)
2021/03/31 11:59:36 fetching corpus: 7794, signal 640578/647553 (executing program)
2021/03/31 11:59:36 fetching corpus: 7794, signal 640578/647572 (executing program)
2021/03/31 11:59:36 fetching corpus: 7794, signal 640578/647598 (executing program)
2021/03/31 11:59:36 fetching corpus: 7794, signal 640578/647618 (executing program)
2021/03/31 11:59:36 fetching corpus: 7794, signal 640578/647641 (executing program)
2021/03/31 11:59:36 fetching corpus: 7794, signal 640578/647697 (executing program)
2021/03/31 11:59:36 fetching corpus: 7794, signal 640578/647716 (executing program)
2021/03/31 11:59:36 fetching corpus: 7794, signal 640578/647716 (executing program)
2021/03/31 11:59:37 starting 6 fuzzer processes
11:59:38 executing program 0:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = gettid()
tkill(r0, 0x39)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
preadv(r1, &(0x7f00000017c0), 0x32d, 0x0, 0x0)

11:59:38 executing program 1:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$lock(r0, 0x6, &(0x7f0000000180)={0x1, 0x0, 0x10000})
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x9})
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$lock(r2, 0x5, &(0x7f0000000180))

11:59:38 executing program 2:
r0 = socket$kcm(0x29, 0x5, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x2a, 0x0, &(0x7f00000006c0))

11:59:38 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x0, &(0x7f0000000380))
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
r2 = socket$l2tp(0x2, 0x2, 0x73)
dup3(r1, r2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x160, 0x0, 0x160, 0x160, 0x62029c01, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'vlan0\x00', 'bridge_slave_0\x00'}, 0xb003, 0x130, 0x160, 0x8, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bcc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x5a, 0x2}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

11:59:39 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0xffffffffffffffd4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
dup2(r2, r0)

syzkaller login: [   98.011690][ T8444] IPVS: ftp: loaded support on port[0] = 21
11:59:39 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x3d}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x348, &(0x7f0000000480)=""/195}, 0x48)

[   98.159063][ T8444] chnl_net:caif_netlink_parms(): no params data found
[   98.367714][ T8569] IPVS: ftp: loaded support on port[0] = 21
[   98.447779][ T8444] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.468975][ T8591] IPVS: ftp: loaded support on port[0] = 21
[   98.486527][ T8444] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.518469][ T8444] device bridge_slave_0 entered promiscuous mode
[   98.553316][ T8444] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.562609][ T8444] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.571378][ T8444] device bridge_slave_1 entered promiscuous mode
[   98.688347][ T8444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.702897][ T8632] IPVS: ftp: loaded support on port[0] = 21
[   98.758346][ T8444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.811807][ T8444] team0: Port device team_slave_0 added
[   98.825324][ T8444] team0: Port device team_slave_1 added
[   98.856748][ T8444] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.863723][ T8444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.911797][ T8444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.929020][ T8444] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.936270][ T8444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.962449][ T8697] IPVS: ftp: loaded support on port[0] = 21
[   98.972925][ T8444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   99.136847][ T8444] device hsr_slave_0 entered promiscuous mode
[   99.149621][ T8444] device hsr_slave_1 entered promiscuous mode
[   99.191746][ T8591] chnl_net:caif_netlink_parms(): no params data found
[   99.265939][ T8569] chnl_net:caif_netlink_parms(): no params data found
[   99.466224][ T8591] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.473338][ T8591] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.498163][ T8591] device bridge_slave_0 entered promiscuous mode
[   99.541292][ T8632] chnl_net:caif_netlink_parms(): no params data found
[   99.561828][ T8591] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.571590][ T8591] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.586507][ T8591] device bridge_slave_1 entered promiscuous mode
[   99.642697][ T8697] chnl_net:caif_netlink_parms(): no params data found
[   99.746979][ T8591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.748571][ T9127] IPVS: ftp: loaded support on port[0] = 21
[   99.821173][ T8591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   99.835555][ T8569] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.843522][ T8569] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.853353][ T8569] device bridge_slave_0 entered promiscuous mode
[   99.912815][ T8569] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.920032][ T8569] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.929316][ T8569] device bridge_slave_1 entered promiscuous mode
[   99.962470][ T8569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   99.985285][   T20] Bluetooth: hci0: command 0x0409 tx timeout
[  100.005432][ T8591] team0: Port device team_slave_0 added
[  100.028342][ T8569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.043491][ T8632] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.055842][ T8632] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.063502][ T8632] device bridge_slave_0 entered promiscuous mode
[  100.073774][ T8632] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.081203][ T8632] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.089591][ T8632] device bridge_slave_1 entered promiscuous mode
[  100.101666][ T8591] team0: Port device team_slave_1 added
[  100.156258][ T8697] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.163712][ T8697] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.174445][ T8697] device bridge_slave_0 entered promiscuous mode
[  100.186184][ T8569] team0: Port device team_slave_0 added
[  100.202102][ T8591] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.210419][ T8591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.236567][ T8591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.250166][ T8632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.260346][ T8591] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.268596][ T8591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.296501][ T2937] Bluetooth: hci1: command 0x0409 tx timeout
[  100.303312][ T8591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.316961][ T8697] bridge0: port 2(bridge_slave_1) entered blocking state
[  100.324041][ T8697] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.332080][ T8697] device bridge_slave_1 entered promiscuous mode
[  100.341929][ T8569] team0: Port device team_slave_1 added
[  100.368483][ T8632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.406867][ T8569] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.413840][ T8569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.441028][ T8569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.459545][ T8569] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.466680][ T4802] Bluetooth: hci2: command 0x0409 tx timeout
[  100.473220][ T8569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.502002][ T8569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.527061][ T8697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  100.542267][ T8697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  100.600902][ T8591] device hsr_slave_0 entered promiscuous mode
[  100.616033][ T8591] device hsr_slave_1 entered promiscuous mode
[  100.623278][ T8591] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  100.643078][ T8591] Cannot create hsr debugfs directory
[  100.659489][ T8444] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  100.673779][ T8632] team0: Port device team_slave_0 added
[  100.690203][ T8569] device hsr_slave_0 entered promiscuous mode
[  100.700327][ T8569] device hsr_slave_1 entered promiscuous mode
[  100.704858][ T4802] Bluetooth: hci3: command 0x0409 tx timeout
[  100.712919][ T8569] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  100.720718][ T8569] Cannot create hsr debugfs directory
[  100.754754][ T8444] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  100.769868][ T8697] team0: Port device team_slave_0 added
[  100.779631][ T8632] team0: Port device team_slave_1 added
[  100.806984][ T8444] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  100.848064][ T8697] team0: Port device team_slave_1 added
[  100.857581][ T8632] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.864728][ T8632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.890736][ T8632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.914149][ T8444] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  100.935050][ T4802] Bluetooth: hci4: command 0x0409 tx timeout
[  100.950745][ T8697] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.960049][ T8697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.986559][ T8697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.000508][ T8632] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.008091][ T8632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.035773][ T8632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  101.070912][ T9127] chnl_net:caif_netlink_parms(): no params data found
[  101.084051][ T8697] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.091232][ T8697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.119328][ T8697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  101.196156][ T8632] device hsr_slave_0 entered promiscuous mode
[  101.203734][ T8632] device hsr_slave_1 entered promiscuous mode
[  101.211650][ T8632] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  101.219394][ T8632] Cannot create hsr debugfs directory
[  101.353878][ T8697] device hsr_slave_0 entered promiscuous mode
[  101.371921][ T8697] device hsr_slave_1 entered promiscuous mode
[  101.379869][ T8697] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  101.389132][ T8697] Cannot create hsr debugfs directory
[  101.464155][ T9127] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.472322][ T9127] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.481276][ T9127] device bridge_slave_0 entered promiscuous mode
[  101.492378][ T9127] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.500520][ T9127] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.511685][ T9127] device bridge_slave_1 entered promiscuous mode
[  101.582681][ T9127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  101.623960][ T9127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  101.652108][ T9127] team0: Port device team_slave_0 added
[  101.664779][ T4835] Bluetooth: hci5: command 0x0409 tx timeout
[  101.689011][ T9127] team0: Port device team_slave_1 added
[  101.717744][ T8591] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  101.788745][ T8591] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  101.806507][ T9127] batman_adv: batadv0: Adding interface: batadv_slave_0
[  101.813469][ T9127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.842955][ T9127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  101.859852][ T8591] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  101.874969][ T9127] batman_adv: batadv0: Adding interface: batadv_slave_1
[  101.881950][ T9127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  101.909039][ T9127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  101.926538][ T8591] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  101.980325][ T9127] device hsr_slave_0 entered promiscuous mode
[  101.989626][ T9127] device hsr_slave_1 entered promiscuous mode
[  101.997588][ T9127] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  102.006749][ T9127] Cannot create hsr debugfs directory
[  102.054337][ T8569] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  102.054718][ T9663] Bluetooth: hci0: command 0x041b tx timeout
[  102.087524][ T8569] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  102.101591][ T8569] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  102.120689][ T8569] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  102.160241][ T8444] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.203865][ T8444] 8021q: adding VLAN 0 to HW filter on device team0
[  102.239988][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  102.250700][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  102.260843][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  102.272226][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  102.281625][ T2937] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.288891][ T2937] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.300880][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  102.310182][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  102.318952][ T2937] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.326140][ T2937] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.343484][ T8632] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  102.357199][ T8632] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  102.374606][ T9696] Bluetooth: hci1: command 0x041b tx timeout
[  102.395007][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  102.403009][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  102.414098][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  102.423108][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  102.433668][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  102.450275][ T8632] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  102.477400][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  102.497969][ T8632] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  102.545762][ T9683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  102.556835][ T9683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  102.567646][ T9683] Bluetooth: hci2: command 0x041b tx timeout
[  102.609513][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  102.625686][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  102.643804][ T8591] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.658503][ T8697] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  102.668449][ T8697] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  102.697048][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  102.706422][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  102.716056][ T8444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  102.738356][ T8697] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  102.748946][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  102.761172][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  102.782346][ T8697] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  102.789641][ T9727] Bluetooth: hci3: command 0x041b tx timeout
[  102.817443][ T8591] 8021q: adding VLAN 0 to HW filter on device team0
[  102.852460][ T9127] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  102.865288][ T9663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  102.879270][ T9663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  102.889072][ T9663] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.896210][ T9663] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.905155][ T9663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  102.923487][ T8444] 8021q: adding VLAN 0 to HW filter on device batadv0
[  102.948613][ T9127] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  102.959115][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  102.970032][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  102.978796][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  102.988488][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  102.997422][ T4835] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.004921][ T4835] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.025068][    T5] Bluetooth: hci4: command 0x041b tx timeout
[  103.046004][ T9127] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  103.060346][ T9127] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  103.071848][ T9696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  103.087920][ T9696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  103.128123][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  103.138956][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  103.149997][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  103.159741][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  103.169669][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  103.178936][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  103.210231][ T8569] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.225500][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  103.233458][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  103.243079][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  103.252205][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  103.261753][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  103.273571][ T8591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  103.318597][ T8569] 8021q: adding VLAN 0 to HW filter on device team0
[  103.333124][ T8632] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.345804][ T9728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  103.353693][ T9728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  103.369224][ T8444] device veth0_vlan entered promiscuous mode
[  103.396446][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  103.409943][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  103.421727][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  103.431287][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  103.440496][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.447599][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.473420][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  103.481470][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  103.490427][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  103.521977][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  103.531351][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  103.540662][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.547809][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.557150][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  103.566772][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  103.577508][ T8444] device veth1_vlan entered promiscuous mode
[  103.602692][ T8632] 8021q: adding VLAN 0 to HW filter on device team0
[  103.617185][ T8591] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.630385][ T9728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  103.639655][ T9728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  103.649039][ T9728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  103.697183][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  103.709897][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  103.720684][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  103.733512][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  103.743581][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  103.745295][ T9727] Bluetooth: hci5: command 0x041b tx timeout
[  103.759877][ T9535] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.767046][ T9535] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.776158][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  103.785275][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  103.793613][ T9535] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.800764][ T9535] bridge0: port 2(bridge_slave_1) entered forwarding state
[  103.820754][ T8697] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.848990][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  103.857354][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  103.867466][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  103.876591][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  103.885785][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  103.893989][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  103.903545][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  103.912430][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  103.932093][ T8569] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  103.948557][ T8569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  104.000004][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  104.010079][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  104.020230][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  104.032056][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  104.041541][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  104.051467][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  104.060933][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  104.070381][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  104.079917][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  104.089128][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  104.099134][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  104.108207][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  104.117316][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  104.127030][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  104.134930][ T9535] Bluetooth: hci0: command 0x040f tx timeout
[  104.152551][ T8697] 8021q: adding VLAN 0 to HW filter on device team0
[  104.177430][ T9127] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.195571][ T8632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  104.209871][ T8444] device veth0_macvtap entered promiscuous mode
[  104.218548][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  104.227193][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  104.236199][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  104.243923][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  104.252808][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  104.260529][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  104.288440][ T9127] 8021q: adding VLAN 0 to HW filter on device team0
[  104.300694][ T8444] device veth1_macvtap entered promiscuous mode
[  104.312940][ T9663] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  104.323554][ T9663] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  104.333306][ T9663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  104.342151][ T9663] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  104.352287][ T9663] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  104.361263][ T9663] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.368366][ T9663] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.407464][ T8569] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.418061][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  104.430697][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  104.439294][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  104.447771][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  104.457149][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  104.465668][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  104.475028][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  104.483346][ T9535] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.490455][ T9535] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.498609][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  104.508723][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  104.517371][ T9535] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.524536][ T9535] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.532071][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  104.541974][ T9535] Bluetooth: hci1: command 0x040f tx timeout
[  104.555681][ T8591] device veth0_vlan entered promiscuous mode
[  104.581686][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  104.590191][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  104.598181][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  104.606693][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  104.616311][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  104.626663][ T9739] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.633747][ T9739] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.642118][ T9739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  104.651380][ T9739] Bluetooth: hci2: command 0x040f tx timeout
[  104.669167][ T8444] batman_adv: batadv0: Interface activated: batadv_slave_0
[  104.682827][ T8591] device veth1_vlan entered promiscuous mode
[  104.707073][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  104.725138][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  104.733958][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  104.765892][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  104.775150][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  104.785054][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  104.793666][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  104.806727][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  104.820057][ T8632] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.838432][ T8444] batman_adv: batadv0: Interface activated: batadv_slave_1
[  104.854958][ T9696] Bluetooth: hci3: command 0x040f tx timeout
[  104.877590][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  104.886138][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  104.897084][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  104.906568][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  104.916158][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  104.926035][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  104.935886][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  104.945046][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  104.953363][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  104.962422][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  104.988978][ T8444] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.999259][ T8444] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.008533][ T8444] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.021115][ T8444] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.052470][ T9696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  105.061368][ T9696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  105.070612][ T9696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  105.080718][ T9696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  105.089499][ T9696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  105.099891][ T9696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  105.108955][ T9696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  105.117912][ T9696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  105.134459][ T9696] Bluetooth: hci4: command 0x040f tx timeout
[  105.141779][ T9696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  105.150961][ T9696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  105.159216][ T9696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  105.168465][ T9696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  105.177565][ T9696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  105.186855][ T9696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  105.204112][ T8569] device veth0_vlan entered promiscuous mode
[  105.215435][ T8697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  105.231299][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  105.244549][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  105.253545][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  105.269469][ T8569] device veth1_vlan entered promiscuous mode
[  105.327670][ T8591] device veth0_macvtap entered promiscuous mode
[  105.340902][ T9728] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  105.352923][ T9728] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  105.361766][ T9728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  105.370812][ T9728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  105.380288][ T8632] device veth0_vlan entered promiscuous mode
[  105.388376][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  105.399170][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  105.455134][ T8591] device veth1_macvtap entered promiscuous mode
[  105.469994][ T8697] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.485615][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  105.496087][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  105.505772][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  105.513232][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  105.521591][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  105.529472][ T2937] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  105.566141][ T8632] device veth1_vlan entered promiscuous mode
[  105.577596][ T9127] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.602203][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  105.643410][ T8591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  105.684087][ T8591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.706599][ T8591] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.758341][ T9728] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  105.772110][ T9728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  105.782115][ T9728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  105.791381][ T9728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  105.800228][ T9728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  105.809261][ T9728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  105.814622][   T20] Bluetooth: hci5: command 0x040f tx timeout
[  105.826943][ T8591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  105.837888][ T8591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.848880][ T8591] batman_adv: batadv0: Interface activated: batadv_slave_1
[  105.865464][ T8569] device veth0_macvtap entered promiscuous mode
[  105.883834][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  105.892751][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  105.902133][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  105.914614][ T8569] device veth1_macvtap entered promiscuous mode
[  105.938536][  T209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.969816][ T8591] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.981011][  T209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.003002][ T8591] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.016700][ T8591] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.029330][ T8591] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.072078][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  106.086463][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  106.094140][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  106.105207][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  106.113735][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  106.122999][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  106.132237][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  106.141072][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  106.157761][ T8632] device veth0_macvtap entered promiscuous mode
[  106.176457][ T8697] device veth0_vlan entered promiscuous mode
[  106.193523][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  106.202466][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  106.212208][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  106.214625][   T20] Bluetooth: hci0: command 0x0419 tx timeout
[  106.229816][ T8632] device veth1_macvtap entered promiscuous mode
[  106.239297][  T313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  106.248047][  T313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  106.269737][ T8569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  106.281814][ T8569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.296083][ T8569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  106.307023][ T8569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.323077][ T8569] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.344520][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  106.352620][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  106.363148][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  106.372525][ T9535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  106.382931][ T8697] device veth1_vlan entered promiscuous mode
[  106.437142][ T8569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  106.461736][ T8569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.473185][ T8569] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  106.484843][ T8569] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.505380][ T8569] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.521645][ T8632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  106.550411][ T8632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.568193][ T8632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  106.581713][ T8632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
11:59:48 executing program 0:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = gettid()
tkill(r0, 0x39)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
preadv(r1, &(0x7f00000017c0), 0x32d, 0x0, 0x0)

[  106.592105][ T8632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  106.603738][ T8632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.614865][ T9663] Bluetooth: hci1: command 0x0419 tx timeout
[  106.632920][ T8632] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.659905][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  106.671319][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  106.687381][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  106.694840][ T9663] Bluetooth: hci2: command 0x0419 tx timeout
[  106.698044][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  106.710110][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  106.723343][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  106.747942][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
11:59:48 executing program 0:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = gettid()
tkill(r0, 0x39)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
preadv(r1, &(0x7f00000017c0), 0x32d, 0x0, 0x0)

[  106.767771][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  106.796451][ T9127] device veth0_vlan entered promiscuous mode
[  106.823038][ T8569] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.852452][ T8569] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.894400][ T8569] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.903189][ T8569] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
11:59:48 executing program 0:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x2}}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = gettid()
tkill(r0, 0x39)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
preadv(r1, &(0x7f00000017c0), 0x32d, 0x0, 0x0)

[  106.935647][ T9696] Bluetooth: hci3: command 0x0419 tx timeout
[  106.972145][ T8632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
11:59:48 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x2, 0x0, 0xc)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3001a, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x3, 0x6, 0x0, 0x0, 0x0, 0x3ff, 0xc04a, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x448a, 0x4, @perf_config_ext={0x3}, 0x400, 0x52, 0x10001, 0x6, 0x0, 0xfc, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
exit_group(0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0xca, &(0x7f0000000340)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xffffffff, @broadcast=0xe0000001, {[@timestamp_prespec={0x44, 0xc, 0xcd, 0x3, 0x0, [{}]}]}}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "d1920a7471cdac7e0e5d117c1d9df8d7cc6c8eb749ed271b65afb5388f9b0e3e", "602d20180c55cc4fbf73d80c689976e9b99376e2e7c60938e13e94388b68e4f45d3dcef40317b2842f90e669c9e806c0", "50015e603cf14faff1c205fc00cc159ae15396d33695aedc8bb25253", {"0e29877e95752ce86f7f394018b485fd", "a029574b7f32dae54c7581ebf1501d20"}}}}}}}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x6)
mprotect(&(0x7f00006ab000/0x1000)=nil, 0x1000, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
readv(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x1)
openat$vsock(0xffffffffffffff9c, 0x0, 0x10000, 0x0)

[  107.012919][ T8632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.044415][ T8632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  107.065681][ T8632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.083622][ T8632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  107.105834][ T8632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  107.153296][ T8632] batman_adv: batadv0: Interface activated: batadv_slave_1
[  107.176288][ T9696] Bluetooth: hci4: command 0x0419 tx timeout
[  107.177544][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
11:59:48 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x2, 0x0, 0xc)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3001a, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x3, 0x6, 0x0, 0x0, 0x0, 0x3ff, 0xc04a, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x448a, 0x4, @perf_config_ext={0x3}, 0x400, 0x52, 0x10001, 0x6, 0x0, 0xfc, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
exit_group(0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0xca, &(0x7f0000000340)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xffffffff, @broadcast=0xe0000001, {[@timestamp_prespec={0x44, 0xc, 0xcd, 0x3, 0x0, [{}]}]}}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "d1920a7471cdac7e0e5d117c1d9df8d7cc6c8eb749ed271b65afb5388f9b0e3e", "602d20180c55cc4fbf73d80c689976e9b99376e2e7c60938e13e94388b68e4f45d3dcef40317b2842f90e669c9e806c0", "50015e603cf14faff1c205fc00cc159ae15396d33695aedc8bb25253", {"0e29877e95752ce86f7f394018b485fd", "a029574b7f32dae54c7581ebf1501d20"}}}}}}}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x6)
mprotect(&(0x7f00006ab000/0x1000)=nil, 0x1000, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
readv(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x1)
openat$vsock(0xffffffffffffff9c, 0x0, 0x10000, 0x0)

[  107.199331][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  107.221339][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  107.240488][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  107.325188][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.334028][ T8632] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.343877][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.367005][ T8632] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.392841][ T8632] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.406001][ T8632] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.443718][    C0] hrtimer: interrupt took 58527 ns
[  107.457030][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  107.471024][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
11:59:49 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x2, 0x0, 0xc)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3001a, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x3, 0x6, 0x0, 0x0, 0x0, 0x3ff, 0xc04a, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x448a, 0x4, @perf_config_ext={0x3}, 0x400, 0x52, 0x10001, 0x6, 0x0, 0xfc, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
exit_group(0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0xca, &(0x7f0000000340)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xffffffff, @broadcast=0xe0000001, {[@timestamp_prespec={0x44, 0xc, 0xcd, 0x3, 0x0, [{}]}]}}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "d1920a7471cdac7e0e5d117c1d9df8d7cc6c8eb749ed271b65afb5388f9b0e3e", "602d20180c55cc4fbf73d80c689976e9b99376e2e7c60938e13e94388b68e4f45d3dcef40317b2842f90e669c9e806c0", "50015e603cf14faff1c205fc00cc159ae15396d33695aedc8bb25253", {"0e29877e95752ce86f7f394018b485fd", "a029574b7f32dae54c7581ebf1501d20"}}}}}}}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x6)
mprotect(&(0x7f00006ab000/0x1000)=nil, 0x1000, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
readv(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x1)
openat$vsock(0xffffffffffffff9c, 0x0, 0x10000, 0x0)

[  107.491005][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  107.525879][ T9127] device veth1_vlan entered promiscuous mode
[  107.565454][ T8697] device veth0_macvtap entered promiscuous mode
11:59:49 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
set_mempolicy(0x2, 0x0, 0xc)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3001a, 0x0)
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x3, 0x6, 0x0, 0x0, 0x0, 0x3ff, 0xc04a, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x448a, 0x4, @perf_config_ext={0x3}, 0x400, 0x52, 0x10001, 0x6, 0x0, 0xfc, 0x2}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
exit_group(0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
connect(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0xca, &(0x7f0000000340)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xffffffff, @broadcast=0xe0000001, {[@timestamp_prespec={0x44, 0xc, 0xcd, 0x3, 0x0, [{}]}]}}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "d1920a7471cdac7e0e5d117c1d9df8d7cc6c8eb749ed271b65afb5388f9b0e3e", "602d20180c55cc4fbf73d80c689976e9b99376e2e7c60938e13e94388b68e4f45d3dcef40317b2842f90e669c9e806c0", "50015e603cf14faff1c205fc00cc159ae15396d33695aedc8bb25253", {"0e29877e95752ce86f7f394018b485fd", "a029574b7f32dae54c7581ebf1501d20"}}}}}}}, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x6)
mprotect(&(0x7f00006ab000/0x1000)=nil, 0x1000, 0x0)
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)
readv(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000001400)=""/4110, 0x100e}], 0x1)
openat$vsock(0xffffffffffffff9c, 0x0, 0x10000, 0x0)

[  107.660337][ T8697] device veth1_macvtap entered promiscuous mode
[  107.716829][   T25] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.735872][   T25] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.746023][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  107.763030][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  107.776400][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  107.843057][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  107.867634][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  107.885903][ T9127] device veth0_macvtap entered promiscuous mode
[  107.952967][   T36] Bluetooth: hci5: command 0x0419 tx timeout
[  107.972135][ T9127] device veth1_macvtap entered promiscuous mode
[  108.009643][ T8697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  108.068121][ T8697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.095625][ T8697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  108.122847][ T8697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.141636][ T8697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  108.163870][ T8697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.184318][ T8697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  108.206451][ T8697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.242148][ T8697] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.277413][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.290321][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  108.303670][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  108.323723][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.333178][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  108.353426][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  108.364796][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  108.404710][   T25] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.414598][   T25] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.450502][ T8697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  108.467687][ T8697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.482438][ T8697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  108.494744][ T8697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.507809][ T8697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  108.521451][ T8697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.531873][ T8697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  108.543674][ T8697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.558280][ T8697] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.572197][ T9683] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  108.585645][ T9683] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  108.599864][ T9683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  108.620011][ T9127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  108.642890][ T9127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.654193][ T9127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  108.671253][ T9127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.681462][ T9127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  108.692179][ T9127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.702514][ T9127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  108.713465][ T9127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.723376][ T9127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  108.738117][ T9127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.749566][ T9127] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.775409][ T9683] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  108.785722][ T9683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  108.803155][ T8697] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  108.812618][ T8697] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  108.829188][ T8697] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  108.838266][ T8697] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  108.856005][ T9127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  108.868802][ T9127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.879596][ T9127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  108.890429][ T9127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.900815][ T9127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  108.911589][ T9127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.921533][ T9127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  108.932674][ T9127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.945240][ T9127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  108.957552][ T9127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.970349][ T9127] batman_adv: batadv0: Interface activated: batadv_slave_1
[  108.995624][  T209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.995634][  T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.995718][  T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.003722][  T209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.028086][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  109.038096][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  109.047576][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  109.088557][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  109.103471][ T9127] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.112873][ T9127] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.122510][ T9127] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.131382][ T9127] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.303599][ T9870] xt_CT: You must specify a L4 protocol and not use inversions on it
[  109.325452][  T209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.333553][  T209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.373992][ T9878] xt_CT: You must specify a L4 protocol and not use inversions on it
[  109.444782][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  109.479361][  T209] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
11:59:51 executing program 1:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$lock(r0, 0x6, &(0x7f0000000180)={0x1, 0x0, 0x10000})
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x9})
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$lock(r2, 0x5, &(0x7f0000000180))

11:59:51 executing program 0:
r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80b6, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
syz_open_procfs(0x0, &(0x7f0000272000))

11:59:51 executing program 2:
r0 = socket$kcm(0x29, 0x5, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x2a, 0x0, &(0x7f00000006c0))

[  109.505758][  T209] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.536882][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  109.606682][  T313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.630966][  T313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.728628][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  109.760574][   T25] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.785642][   T25] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.831778][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
11:59:51 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0xffffffffffffffd4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
dup2(r2, r0)

11:59:52 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x3d}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x348, &(0x7f0000000480)=""/195}, 0x48)

11:59:52 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x0, &(0x7f0000000380))
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
r2 = socket$l2tp(0x2, 0x2, 0x73)
dup3(r1, r2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x160, 0x0, 0x160, 0x160, 0x62029c01, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'vlan0\x00', 'bridge_slave_0\x00'}, 0xb003, 0x130, 0x160, 0x8, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bcc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x5a, 0x2}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

11:59:52 executing program 2:
r0 = socket$kcm(0x29, 0x5, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x2a, 0x0, &(0x7f00000006c0))

11:59:52 executing program 1:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$lock(r0, 0x6, &(0x7f0000000180)={0x1, 0x0, 0x10000})
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x9})
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$lock(r2, 0x5, &(0x7f0000000180))

11:59:52 executing program 0:
r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80b6, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
syz_open_procfs(0x0, &(0x7f0000272000))

11:59:52 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0xffffffffffffffd4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
dup2(r2, r0)

[  110.830646][ T9938] xt_CT: You must specify a L4 protocol and not use inversions on it
11:59:52 executing program 2:
r0 = socket$kcm(0x29, 0x5, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x2a, 0x0, &(0x7f00000006c0))

11:59:52 executing program 1:
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$lock(r0, 0x6, &(0x7f0000000180)={0x1, 0x0, 0x10000})
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$lock(r1, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x9})
r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$lock(r2, 0x5, &(0x7f0000000180))

11:59:52 executing program 0:
r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80b6, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
syz_open_procfs(0x0, &(0x7f0000272000))

11:59:52 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0xffffffffffffffd4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
dup2(r2, r0)

11:59:52 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x0, &(0x7f0000000380))
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
r2 = socket$l2tp(0x2, 0x2, 0x73)
dup3(r1, r2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x160, 0x0, 0x160, 0x160, 0x62029c01, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'vlan0\x00', 'bridge_slave_0\x00'}, 0xb003, 0x130, 0x160, 0x8, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bcc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x5a, 0x2}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

11:59:52 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x3d}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x348, &(0x7f0000000480)=""/195}, 0x48)

[  111.151735][ T9953] xt_CT: You must specify a L4 protocol and not use inversions on it
11:59:52 executing program 0:
r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x80b6, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
syz_open_procfs(0x0, &(0x7f0000272000))

11:59:52 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x0, &(0x7f0000000380))
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
r2 = socket$l2tp(0x2, 0x2, 0x73)
dup3(r1, r2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x160, 0x0, 0x160, 0x160, 0x62029c01, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'vlan0\x00', 'bridge_slave_0\x00'}, 0xb003, 0x130, 0x160, 0x8, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bcc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x5a, 0x2}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

11:59:52 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x3d}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x348, &(0x7f0000000480)=""/195}, 0x48)

11:59:52 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0xffffffffffffffd4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
dup2(r2, r0)

11:59:52 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0xffffffffffffffd4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
dup2(r2, r0)

11:59:52 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x0, &(0x7f0000000380))
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
r2 = socket$l2tp(0x2, 0x2, 0x73)
dup3(r1, r2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x160, 0x0, 0x160, 0x160, 0x62029c01, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'vlan0\x00', 'bridge_slave_0\x00'}, 0xb003, 0x130, 0x160, 0x8, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bcc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x5a, 0x2}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

[  111.442154][ T9968] xt_CT: You must specify a L4 protocol and not use inversions on it
[  111.454008][ T9965] xt_CT: You must specify a L4 protocol and not use inversions on it
11:59:53 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0xffffffffffffffd4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
dup2(r2, r0)

11:59:53 executing program 0:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000020000000000024001200140001006272696467655f736c617665000000000c000500080005"], 0x3}}, 0x0)
ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="08f2")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r1, 0x0, 0x10000, 0x0)

11:59:53 executing program 5:
clock_gettime(0x8, &(0x7f0000000040))

11:59:53 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0xffffffffffffffd4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
dup2(r2, r0)

[  111.602099][ T9973] netlink: 'syz-executor.0': attribute type 5 has an invalid length.
11:59:53 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0xa79, 0x4)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x12, &(0x7f0000000040)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x100000530)

11:59:53 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x0, &(0x7f0000000380))
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
r2 = socket$l2tp(0x2, 0x2, 0x73)
dup3(r1, r2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x160, 0x0, 0x160, 0x160, 0x62029c01, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'vlan0\x00', 'bridge_slave_0\x00'}, 0xb003, 0x130, 0x160, 0x8, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bcc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x5a, 0x2}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

11:59:53 executing program 5:
clock_gettime(0x8, &(0x7f0000000040))

[  111.681043][ T9977] netlink: 'syz-executor.0': attribute type 5 has an invalid length.
11:59:53 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0xffffffffffffffd4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
dup2(r2, r0)

11:59:53 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0xffffffffffffffd4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup2(r3, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
dup2(r2, r0)

[  111.919511][ T9985] xt_CT: You must specify a L4 protocol and not use inversions on it
11:59:53 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x0, &(0x7f0000000380))
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
r2 = socket$l2tp(0x2, 0x2, 0x73)
dup3(r1, r2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x160, 0x0, 0x160, 0x160, 0x62029c01, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'vlan0\x00', 'bridge_slave_0\x00'}, 0xb003, 0x130, 0x160, 0x8, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bcc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x5a, 0x2}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)

11:59:53 executing program 0:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000020000000000024001200140001006272696467655f736c617665000000000c000500080005"], 0x3}}, 0x0)
ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="08f2")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r1, 0x0, 0x10000, 0x0)

11:59:53 executing program 5:
clock_gettime(0x8, &(0x7f0000000040))

11:59:53 executing program 2:
perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00', 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)

11:59:53 executing program 4:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x8000000000000003, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700000000004097c992000040", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076"], 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

[  112.216743][T10002] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
11:59:53 executing program 5:
clock_gettime(0x8, &(0x7f0000000040))

[  112.282700][T10000] xt_CT: You must specify a L4 protocol and not use inversions on it
[  112.309749][ T9999] netlink: 'syz-executor.0': attribute type 5 has an invalid length.
[  112.409437][T10005] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
11:59:54 executing program 2:
perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00', 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)

11:59:54 executing program 2:
perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00', 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)

11:59:54 executing program 0:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000020000000000024001200140001006272696467655f736c617665000000000c000500080005"], 0x3}}, 0x0)
ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="08f2")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r1, 0x0, 0x10000, 0x0)

11:59:54 executing program 4:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x8000000000000003, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700000000004097c992000040", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076"], 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

11:59:54 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000001500)}, {&(0x7f0000000180)="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", 0x141}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x36)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

11:59:54 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0xa79, 0x4)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x12, &(0x7f0000000040)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x100000530)

11:59:54 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0xa79, 0x4)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x12, &(0x7f0000000040)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x100000530)

[  112.720344][T10018] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  112.785456][T10028] netlink: 'syz-executor.0': attribute type 5 has an invalid length.
11:59:54 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000001500)}, {&(0x7f0000000180)="82bb7102cc6509f63760ce03f12c2baf577e6f0503c9ca91e9a868377ce26dc445a7443fdcde8856729a952b000000000000000000000093d5b8c2fc903c2b54706c05e4cb2e2875107608f9143f299d8e3f78f4bf076484885fd4089cb084607435b77c7f44cf0783279a494c8e4eba955b16e77f57966d4ba7560f29500352543b498fccba20bcae2b6f577b36b79f72f77e153f55e4fa6ad43af0d450a8f2c60baabf84ab4350874b05f4635c7449bac4383622ae4da09326e51bc3130b44a9df8704c9656b60912ff6bdb6fb1f138ece7e020fc235330fb8f4e6ad5d3e561792a74c8e64e97341416fe3afca604813bb1ec23456d33c37e2e8f442a020f278d7e36ceea132c1167920a621483e94e2cb8c7840f0fce7d0bd6b1aff7a577bc3d3123b31408a0c8cb3d88e189066bb4f389e7feed47c6f36ef5244cc5dc2985e", 0x141}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x36)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

11:59:54 executing program 2:
perf_event_open(&(0x7f0000000640)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500)='TIPC\x00', 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f00000013c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0)

11:59:54 executing program 4:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x8000000000000003, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700000000004097c992000040", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076"], 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

11:59:54 executing program 0:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000020000000000024001200140001006272696467655f736c617665000000000c000500080005"], 0x3}}, 0x0)
ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000001c0)="08f2")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r4, 0x0)
preadv(r4, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
splice(r0, 0x0, r1, 0x0, 0x10000, 0x0)

11:59:54 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000001500)}, {&(0x7f0000000180)="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", 0x141}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x36)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

[  113.058932][T10043] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
11:59:54 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

[  113.111879][T10044] netlink: 'syz-executor.0': attribute type 5 has an invalid length.
11:59:54 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {&(0x7f0000001500)}, {&(0x7f0000000180)="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", 0x141}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x5)
tkill(r0, 0x36)
ptrace$cont(0x18, r0, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4dc3", 0x2}], 0x1}, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
exit_group(0x0)

11:59:54 executing program 4:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x8000000000000003, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000001b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700000000004097c992000040", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076"], 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)

11:59:54 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

11:59:54 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000040)={0x57, ""/87})

[  113.382080][T10057] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
11:59:55 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0xa79, 0x4)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x12, &(0x7f0000000040)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x100000530)

11:59:55 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0xa79, 0x4)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x12, &(0x7f0000000040)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x100000530)

11:59:55 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="2673e46e35c90c53975005d6820592ebd8db44879a41380366b0ac136a317ad4944282f57e051113bea34efa4cc013ea17738d70b7a4", 0x36}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x1e)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x9, r0, 0x0, 0x0)

11:59:55 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000040)={0x57, ""/87})

11:59:55 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

11:59:55 executing program 4:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10)
write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[], 0xbaa8)

11:59:55 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

11:59:55 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000040)={0x57, ""/87})

11:59:55 executing program 2:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="0c010000aa016208cd061901e0560000000109021b0001000000000904000001d09cd30007058102"], 0x0)

11:59:55 executing program 4:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10)
write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[], 0xbaa8)

11:59:55 executing program 0:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000040)={0x57, ""/87})

11:59:55 executing program 4:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10)
write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[], 0xbaa8)

[  114.414698][   T20] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  114.654516][   T20] usb 3-1: Using ep0 maxpacket: 8
11:59:56 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0xa79, 0x4)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x12, &(0x7f0000000040)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x100000530)

[  114.784775][   T20] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  114.807512][   T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
11:59:56 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0xa79, 0x4)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
recvmsg(r0, &(0x7f0000000240)={0x0, 0x12, &(0x7f0000000040)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0x100)
write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x100000530)

[  114.837666][   T20] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  114.872664][   T20] usb 3-1: New USB device found, idVendor=06cd, idProduct=0119, bcdDevice=56.e0
[  114.890456][   T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.909123][   T20] usb 3-1: config 0 descriptor??
[  114.958661][   T20] keyspan 3-1:0.0: Keyspan 1 port adapter converter detected
[  114.973233][   T20] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87
[  115.000499][   T20] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7
[  115.053780][   T20] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1
[  115.088520][   T20] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2
[  115.111992][   T20] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85
[  115.121895][   T20] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5
[  115.151166][   T20] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  115.211405][   T20] usb 3-1: USB disconnect, device number 2
[  115.323210][   T20] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  115.361071][   T20] keyspan 3-1:0.0: device disconnected
[  115.964578][    T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  116.224623][    T8] usb 3-1: Using ep0 maxpacket: 8
[  116.365357][    T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  116.375613][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  116.386269][    T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  116.397119][    T8] usb 3-1: New USB device found, idVendor=06cd, idProduct=0119, bcdDevice=56.e0
[  116.406457][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.421075][    T8] usb 3-1: config 0 descriptor??
[  116.486767][    T8] keyspan 3-1:0.0: Keyspan 1 port adapter converter detected
[  116.509108][    T8] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87
[  116.519414][    T8] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7
[  116.543860][    T8] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1
[  116.570026][    T8] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2
[  116.584655][    T8] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85
[  116.592425][    T8] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5
[  116.608723][    T8] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  116.695794][   T20] usb 3-1: USB disconnect, device number 3
[  116.729530][   T20] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
11:59:58 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4, 0x7, 0x2, 0x2, 0x2, 0x3], 0x6, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0xfffffffd}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1000c000}, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', r0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e0000000", @ANYRES16, @ANYBLOB="010025bdf0ac11682826e5cd4fa8c00fa56f7000fcdbdf25060000001c00e70049506fc2c5e26dd80b87162ed713e83f7b581cb839830a557600e700d26ecbb54c4c2b49cc4cdc0659ec915d2a788d66f50971801c00e700d1b0e43be2795636dea99e1e2794eaf50a4c5a66b416d9d71800178004000500040002000400010004000400040003"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x800)

11:59:58 executing program 0:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10)
write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[], 0xbaa8)

11:59:58 executing program 4:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10)
write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[], 0xbaa8)

11:59:58 executing program 5:
timerfd_create(0x7, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00')
preadv(r0, &(0x7f0000001280)=[{&(0x7f0000000000)=""/140, 0x8c}], 0x1, 0x0, 0x0)

11:59:58 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x1, 0x800, {<r1=>0x0}, {}, 0x7, 0xdb3e})
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x74, 0x72, 0x0, 0x6, 0x0, 0x401, 0x10040, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_bp={&(0x7f0000000080), 0x3}, 0x8000, 0x8, 0x9, 0x9, 0x0, 0xfff, 0x7fff}, r1, 0xf, 0xffffffffffffffff, 0x1)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
listen(r0, 0x6)
setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00')
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x9, 0x8, 0x5, 0x2, 0x0, 0x0, 0x31204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xee00, 0x0, 0x1}}}, 0x0, 0x0, 0x0, &(0x7f0000002b00)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2b, 0x0, 0x10000000, 0x2000, 0x8}}}}, &(0x7f0000000a40)={0x20, 0x0, 0x8, {0x20f008, 0x4}}})
sendmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x5d, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0x1}], 0x1}}], 0x503, 0x0)

11:59:58 executing program 2:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="0c010000aa016208cd061901e0560000000109021b0001000000000904000001d09cd30007058102"], 0x0)

[  116.779829][   T20] keyspan 3-1:0.0: device disconnected
11:59:58 executing program 5:
timerfd_create(0x7, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00')
preadv(r0, &(0x7f0000001280)=[{&(0x7f0000000000)=""/140, 0x8c}], 0x1, 0x0, 0x0)

11:59:58 executing program 0:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10)
write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[], 0xbaa8)

11:59:58 executing program 5:
timerfd_create(0x7, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00')
preadv(r0, &(0x7f0000001280)=[{&(0x7f0000000000)=""/140, 0x8c}], 0x1, 0x0, 0x0)

[  117.249874][   T25] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.292384][   T25] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.305421][   T20] usb 3-1: new high-speed USB device number 4 using dummy_hcd
11:59:58 executing program 4:
timerfd_create(0x7, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00')
preadv(r0, &(0x7f0000001280)=[{&(0x7f0000000000)=""/140, 0x8c}], 0x1, 0x0, 0x0)

11:59:58 executing program 5:
timerfd_create(0x7, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00')
preadv(r0, &(0x7f0000001280)=[{&(0x7f0000000000)=""/140, 0x8c}], 0x1, 0x0, 0x0)

11:59:58 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4, 0x7, 0x2, 0x2, 0x2, 0x3], 0x6, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0xfffffffd}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1000c000}, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', r0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e0000000", @ANYRES16, @ANYBLOB="010025bdf0ac11682826e5cd4fa8c00fa56f7000fcdbdf25060000001c00e70049506fc2c5e26dd80b87162ed713e83f7b581cb839830a557600e700d26ecbb54c4c2b49cc4cdc0659ec915d2a788d66f50971801c00e700d1b0e43be2795636dea99e1e2794eaf50a4c5a66b416d9d71800178004000500040002000400010004000400040003"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x800)

[  117.544927][   T20] usb 3-1: Using ep0 maxpacket: 8
11:59:59 executing program 4:
timerfd_create(0x7, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00')
preadv(r0, &(0x7f0000001280)=[{&(0x7f0000000000)=""/140, 0x8c}], 0x1, 0x0, 0x0)

11:59:59 executing program 0:
perf_event_open(&(0x7f00000012c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10)
write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[], 0xbaa8)

[  117.664785][   T20] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
11:59:59 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4, 0x7, 0x2, 0x2, 0x2, 0x3], 0x6, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0xfffffffd}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1000c000}, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', r0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e0000000", @ANYRES16, @ANYBLOB="010025bdf0ac11682826e5cd4fa8c00fa56f7000fcdbdf25060000001c00e70049506fc2c5e26dd80b87162ed713e83f7b581cb839830a557600e700d26ecbb54c4c2b49cc4cdc0659ec915d2a788d66f50971801c00e700d1b0e43be2795636dea99e1e2794eaf50a4c5a66b416d9d71800178004000500040002000400010004000400040003"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x800)

[  117.709189][   T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  117.782699][   T20] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  117.829863][   T20] usb 3-1: New USB device found, idVendor=06cd, idProduct=0119, bcdDevice=56.e0
11:59:59 executing program 4:
timerfd_create(0x7, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00')
preadv(r0, &(0x7f0000001280)=[{&(0x7f0000000000)=""/140, 0x8c}], 0x1, 0x0, 0x0)

[  117.916834][   T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.996079][   T20] usb 3-1: config 0 descriptor??
[  118.045846][   T20] keyspan 3-1:0.0: Keyspan 1 port adapter converter detected
[  118.053398][   T20] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87
[  118.124167][   T20] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7
[  118.145454][   T20] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1
[  118.163770][   T20] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2
[  118.181390][   T20] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85
[  118.193726][   T20] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5
[  118.238465][   T20] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  118.278075][   T20] usb 3-1: USB disconnect, device number 4
[  118.339758][   T20] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  118.416035][   T20] keyspan 3-1:0.0: device disconnected
[  118.511844][  T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.524498][   T25] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.557052][   T25] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.567562][  T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
12:00:00 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNGETDEVNETNS(r0, 0x400454ca, 0x400030)
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)
ioctl$TUNGETIFF(r0, 0x400454cb, 0x0)

12:00:00 executing program 4:
rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x75f, 0x103382)
rt_sigtimedwait(0x0, 0x0, &(0x7f0000000400), 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
write$sysctl(r1, 0x0, 0x0)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000001180))
clone(0x2021400, &(0x7f0000000000)="5e8d", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000180)="90669ebdc926ff2e7a749addbb851028e46920c79ae979cd57a8300ba926e02cf0fcde425ad507f2ff7c488a7fd453605755a199e690069caa1cfa835330188e6de75e1acd3ece8633d498412be1f5df38d1092873aefdb6021f5cae1179e0b17bd580e0212fcbd2c1a85f405e83d0dd952a56a5f0bac5406034484872f958b720cdda5395468970fd16a75b0ddb310264a7af3928a24408a33b03743b9973d1ea79312a83e7a025c340be01e0f14addffc6cbd863c27acae7b03ced42d89a56ae1ebcdbab")
r2 = gettid()
tkill(r2, 0x40)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000003c0)={{}, 0x0, 0x0, 0x1})
sendfile(r0, r0, 0x0, 0x24002da8)

12:00:00 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4, 0x7, 0x2, 0x2, 0x2, 0x3], 0x6, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0xfffffffd}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1000c000}, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', r0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e0000000", @ANYRES16, @ANYBLOB="010025bdf0ac11682826e5cd4fa8c00fa56f7000fcdbdf25060000001c00e70049506fc2c5e26dd80b87162ed713e83f7b581cb839830a557600e700d26ecbb54c4c2b49cc4cdc0659ec915d2a788d66f50971801c00e700d1b0e43be2795636dea99e1e2794eaf50a4c5a66b416d9d71800178004000500040002000400010004000400040003"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x800)

12:00:00 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x1, 0x800, {<r1=>0x0}, {}, 0x7, 0xdb3e})
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x74, 0x72, 0x0, 0x6, 0x0, 0x401, 0x10040, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_bp={&(0x7f0000000080), 0x3}, 0x8000, 0x8, 0x9, 0x9, 0x0, 0xfff, 0x7fff}, r1, 0xf, 0xffffffffffffffff, 0x1)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
listen(r0, 0x6)
setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00')
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x9, 0x8, 0x5, 0x2, 0x0, 0x0, 0x31204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xee00, 0x0, 0x1}}}, 0x0, 0x0, 0x0, &(0x7f0000002b00)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2b, 0x0, 0x10000000, 0x2000, 0x8}}}}, &(0x7f0000000a40)={0x20, 0x0, 0x8, {0x20f008, 0x4}}})
sendmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x5d, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0x1}], 0x1}}], 0x503, 0x0)

12:00:00 executing program 2:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="0c010000aa016208cd061901e0560000000109021b0001000000000904000001d09cd30007058102"], 0x0)

[  119.554649][   T20] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  119.804967][   T20] usb 3-1: Using ep0 maxpacket: 8
[  119.895985][T10241] tun0: tun_chr_ioctl cmd 1074025675
[  119.901348][T10241] tun0: persist enabled
[  119.925115][   T20] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  119.935441][T10244] tun0: tun_chr_ioctl cmd 1074025675
[  119.940775][T10244] tun0: persist disabled
[  119.977810][   T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  120.062204][   T20] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  120.129481][   T20] usb 3-1: New USB device found, idVendor=06cd, idProduct=0119, bcdDevice=56.e0
[  120.155441][   T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.170732][   T20] usb 3-1: config 0 descriptor??
[  120.218463][   T20] keyspan 3-1:0.0: Keyspan 1 port adapter converter detected
[  120.243919][   T20] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87
12:00:01 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x1, 0x800, {<r1=>0x0}, {}, 0x7, 0xdb3e})
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x74, 0x72, 0x0, 0x6, 0x0, 0x401, 0x10040, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_bp={&(0x7f0000000080), 0x3}, 0x8000, 0x8, 0x9, 0x9, 0x0, 0xfff, 0x7fff}, r1, 0xf, 0xffffffffffffffff, 0x1)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
listen(r0, 0x6)
setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00')
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x9, 0x8, 0x5, 0x2, 0x0, 0x0, 0x31204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xee00, 0x0, 0x1}}}, 0x0, 0x0, 0x0, &(0x7f0000002b00)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2b, 0x0, 0x10000000, 0x2000, 0x8}}}}, &(0x7f0000000a40)={0x20, 0x0, 0x8, {0x20f008, 0x4}}})
sendmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x5d, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0x1}], 0x1}}], 0x503, 0x0)

[  120.306940][   T20] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7
[  120.345055][   T20] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1
[  120.388693][   T20] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2
[  120.440284][   T20] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85
[  120.478833][   T20] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5
[  120.546876][   T20] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  120.601208][   T20] usb 3-1: USB disconnect, device number 5
[  120.655172][   T20] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  120.695455][   T20] keyspan 3-1:0.0: device disconnected
[  120.962646][   T25] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
12:00:03 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4, 0x7, 0x2, 0x2, 0x2, 0x3], 0x6, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0xfffffffd}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1000c000}, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', r0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e0000000", @ANYRES16, @ANYBLOB="010025bdf0ac11682826e5cd4fa8c00fa56f7000fcdbdf25060000001c00e70049506fc2c5e26dd80b87162ed713e83f7b581cb839830a557600e700d26ecbb54c4c2b49cc4cdc0659ec915d2a788d66f50971801c00e700d1b0e43be2795636dea99e1e2794eaf50a4c5a66b416d9d71800178004000500040002000400010004000400040003"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x800)

[  121.489739][   T25] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.988475][   T25] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.602024][   T25] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.009478][T10343] IPVS: ftp: loaded support on port[0] = 21
[  124.445351][T10343] chnl_net:caif_netlink_parms(): no params data found
[  124.601270][T10343] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.609433][T10343] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.621662][T10343] device bridge_slave_0 entered promiscuous mode
[  124.725789][T10343] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.733013][T10343] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.742852][T10343] device bridge_slave_1 entered promiscuous mode
[  124.774179][T10343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  124.901877][T10343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  124.927981][T10343] team0: Port device team_slave_0 added
[  124.938995][T10343] team0: Port device team_slave_1 added
[  125.009427][T10343] batman_adv: batadv0: Adding interface: batadv_slave_0
[  125.017436][T10343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.045080][T10343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  125.164912][T10343] batman_adv: batadv0: Adding interface: batadv_slave_1
[  125.171928][T10343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.199009][T10343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  125.260292][   T25] device hsr_slave_0 left promiscuous mode
[  125.269035][   T25] device hsr_slave_1 left promiscuous mode
[  125.276708][   T25] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  125.284176][   T25] batman_adv: batadv0: Removing interface: batadv_slave_0
[  125.294526][   T25] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  125.301946][   T25] batman_adv: batadv0: Removing interface: batadv_slave_1
[  125.312122][   T25] device bridge_slave_1 left promiscuous mode
[  125.319280][   T25] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.336786][   T25] device bridge_slave_0 left promiscuous mode
[  125.343091][   T25] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.367891][   T25] device veth1_macvtap left promiscuous mode
[  125.375148][   T25] device veth0_macvtap left promiscuous mode
[  125.381228][   T25] device veth1_vlan left promiscuous mode
[  125.388672][   T25] device veth0_vlan left promiscuous mode
[  125.974653][ T9696] Bluetooth: hci1: command 0x0409 tx timeout
[  128.054964][ T9683] Bluetooth: hci1: command 0x041b tx timeout
[  130.122525][   T25] team0 (unregistering): Port device team_slave_1 removed
[  130.139757][   T25] team0 (unregistering): Port device team_slave_0 removed
[  130.147520][ T9683] Bluetooth: hci1: command 0x040f tx timeout
[  130.171193][   T25] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  130.190090][   T25] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  130.265065][   T25] bond0 (unregistering): Released all slaves
[  130.367715][T10343] device hsr_slave_0 entered promiscuous mode
[  130.375211][T10343] device hsr_slave_1 entered promiscuous mode
[  130.381985][T10343] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  130.389842][T10343] Cannot create hsr debugfs directory
[  130.560306][T10343] 8021q: adding VLAN 0 to HW filter on device bond0
[  130.574151][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  130.585781][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  130.598115][T10343] 8021q: adding VLAN 0 to HW filter on device team0
[  130.614706][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  130.623336][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  130.633417][    T5] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.640565][    T5] bridge0: port 1(bridge_slave_0) entered forwarding state
[  130.668719][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  130.678507][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  130.689880][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  130.700556][    T8] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.707705][    T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[  130.716683][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  130.725832][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  130.734585][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  130.743175][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  130.757519][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  130.766445][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  130.775898][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  130.801648][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  130.811346][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  130.821201][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  130.833761][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  130.847847][T10343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  130.878444][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  130.887954][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  130.908538][T10343] 8021q: adding VLAN 0 to HW filter on device batadv0
[  130.941372][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  130.974686][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  130.983225][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  130.997543][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  131.010840][T10343] device veth0_vlan entered promiscuous mode
[  131.030436][T10343] device veth1_vlan entered promiscuous mode
[  131.069991][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  131.080650][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  131.091094][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  131.116989][T10343] device veth0_macvtap entered promiscuous mode
[  131.134278][T10343] device veth1_macvtap entered promiscuous mode
[  131.165760][T10343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  131.184417][T10343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.194268][T10343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  131.210078][T10343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.221078][T10343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  131.232778][T10343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.243658][T10343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  131.256069][T10343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.272243][T10343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  131.284219][T10343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.297416][T10343] batman_adv: batadv0: Interface activated: batadv_slave_0
[  131.309243][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  131.320750][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  131.331079][    T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  131.345174][T10343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  131.357178][T10343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.370305][T10343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  131.384400][T10343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.397515][T10343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  131.410609][T10343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.422351][T10343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  131.434602][T10343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.446838][T10343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  131.458307][T10343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.470734][T10343] batman_adv: batadv0: Interface activated: batadv_slave_1
[  131.482525][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  131.493985][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  131.634170][  T105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.651659][  T105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.690587][   T20] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  131.749339][  T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.776195][  T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.802246][ T4802] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
12:00:13 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4, 0x7, 0x2, 0x2, 0x2, 0x3], 0x6, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0xfffffffd}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1000c000}, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', r0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e0000000", @ANYRES16, @ANYBLOB="010025bdf0ac11682826e5cd4fa8c00fa56f7000fcdbdf25060000001c00e70049506fc2c5e26dd80b87162ed713e83f7b581cb839830a557600e700d26ecbb54c4c2b49cc4cdc0659ec915d2a788d66f50971801c00e700d1b0e43be2795636dea99e1e2794eaf50a4c5a66b416d9d71800178004000500040002000400010004000400040003"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x800)

12:00:13 executing program 2:
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="0c010000aa016208cd061901e0560000000109021b0001000000000904000001d09cd30007058102"], 0x0)

12:00:13 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x1, 0x800, {<r1=>0x0}, {}, 0x7, 0xdb3e})
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x74, 0x72, 0x0, 0x6, 0x0, 0x401, 0x10040, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_bp={&(0x7f0000000080), 0x3}, 0x8000, 0x8, 0x9, 0x9, 0x0, 0xfff, 0x7fff}, r1, 0xf, 0xffffffffffffffff, 0x1)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
listen(r0, 0x6)
setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00')
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x9, 0x8, 0x5, 0x2, 0x0, 0x0, 0x31204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xee00, 0x0, 0x1}}}, 0x0, 0x0, 0x0, &(0x7f0000002b00)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2b, 0x0, 0x10000000, 0x2000, 0x8}}}}, &(0x7f0000000a40)={0x20, 0x0, 0x8, {0x20f008, 0x4}}})
sendmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x5d, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0x1}], 0x1}}], 0x503, 0x0)

12:00:13 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNGETDEVNETNS(r0, 0x400454ca, 0x400030)
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)
ioctl$TUNGETIFF(r0, 0x400454cb, 0x0)

12:00:13 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x1, 0x800, {<r1=>0x0}, {}, 0x7, 0xdb3e})
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x74, 0x72, 0x0, 0x6, 0x0, 0x401, 0x10040, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_bp={&(0x7f0000000080), 0x3}, 0x8000, 0x8, 0x9, 0x9, 0x0, 0xfff, 0x7fff}, r1, 0xf, 0xffffffffffffffff, 0x1)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
listen(r0, 0x6)
setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00')
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x9, 0x8, 0x5, 0x2, 0x0, 0x0, 0x31204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xee00, 0x0, 0x1}}}, 0x0, 0x0, 0x0, &(0x7f0000002b00)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2b, 0x0, 0x10000000, 0x2000, 0x8}}}}, &(0x7f0000000a40)={0x20, 0x0, 0x8, {0x20f008, 0x4}}})
sendmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x5d, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0x1}], 0x1}}], 0x503, 0x0)

12:00:13 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNGETDEVNETNS(r0, 0x400454ca, 0x400030)
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)
ioctl$TUNGETIFF(r0, 0x400454cb, 0x0)

[  132.203610][T10589] tun0: tun_chr_ioctl cmd 1074025675
[  132.217339][    T8] Bluetooth: hci1: command 0x0419 tx timeout
[  132.232035][T10589] tun0: persist enabled
[  132.256974][T10595] tun0: tun_chr_ioctl cmd 1074025675
[  132.281865][T10595] tun0: persist enabled
[  132.310021][T10596] tun0: tun_chr_ioctl cmd 1074025675
[  132.316857][T10596] tun0: persist disabled
[  132.335061][T10584] tun0: tun_chr_ioctl cmd 1074025675
[  132.340623][T10584] tun0: persist disabled
[  132.414812][ T9865] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  132.538793][ T3234] ieee802154 phy0 wpan0: encryption failed: -22
[  132.545927][ T3234] ieee802154 phy1 wpan1: encryption failed: -22
[  132.602877][  T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
12:00:14 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNGETDEVNETNS(r0, 0x400454ca, 0x400030)
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)
ioctl$TUNGETIFF(r0, 0x400454cb, 0x0)

12:00:14 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNGETDEVNETNS(r0, 0x400454ca, 0x400030)
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)
ioctl$TUNGETIFF(r0, 0x400454cb, 0x0)

[  132.655963][  T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.694990][ T9865] usb 3-1: Using ep0 maxpacket: 8
12:00:14 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ap_ssid=[0x4, 0x7, 0x2, 0x2, 0x2, 0x3], 0x6, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0xfffffffd}, 0x1c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1000c000}, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00', r0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="e0000000", @ANYRES16, @ANYBLOB="010025bdf0ac11682826e5cd4fa8c00fa56f7000fcdbdf25060000001c00e70049506fc2c5e26dd80b87162ed713e83f7b581cb839830a557600e700d26ecbb54c4c2b49cc4cdc0659ec915d2a788d66f50971801c00e700d1b0e43be2795636dea99e1e2794eaf50a4c5a66b416d9d71800178004000500040002000400010004000400040003"], 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x800)

[  132.814806][ T9865] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  132.845049][ T9865] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  132.897905][T10605] tun0: tun_chr_ioctl cmd 1074025675
[  132.906913][ T9865] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  132.933133][T10605] tun0: persist enabled
[  132.956301][ T9865] usb 3-1: New USB device found, idVendor=06cd, idProduct=0119, bcdDevice=56.e0
[  132.962934][T10612] tun0: tun_chr_ioctl cmd 1074025675
[  132.980816][T10612] tun0: persist disabled
[  133.003875][T10606] tun0: tun_chr_ioctl cmd 1074025675
[  133.011929][T10606] tun0: persist enabled
[  133.028623][ T9865] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.059752][T10606] tun0: tun_chr_ioctl cmd 1074025675
[  133.066314][T10606] tun0: persist disabled
[  133.112969][ T9865] usb 3-1: config 0 descriptor??
[  133.208146][ T9865] keyspan 3-1:0.0: Keyspan 1 port adapter converter detected
[  133.236570][ T9865] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87
12:00:14 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNGETDEVNETNS(r0, 0x400454ca, 0x400030)
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)
ioctl$TUNGETIFF(r0, 0x400454cb, 0x0)

[  133.255179][ T9865] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7
12:00:14 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNGETDEVNETNS(r0, 0x400454ca, 0x400030)
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xd)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)
ioctl$TUNGETIFF(r0, 0x400454cb, 0x0)

[  133.316213][ T9865] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1
[  133.358451][ T9865] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2
[  133.422128][ T9865] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85
[  133.436721][T10629] tun0: tun_chr_ioctl cmd 1074025675
[  133.452321][T10629] tun0: persist enabled
[  133.465487][T10629] tun0: tun_chr_ioctl cmd 1074025675
12:00:14 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x1, 0x800, {<r1=>0x0}, {}, 0x7, 0xdb3e})
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x74, 0x72, 0x0, 0x6, 0x0, 0x401, 0x10040, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_bp={&(0x7f0000000080), 0x3}, 0x8000, 0x8, 0x9, 0x9, 0x0, 0xfff, 0x7fff}, r1, 0xf, 0xffffffffffffffff, 0x1)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
listen(r0, 0x6)
setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00')
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x9, 0x8, 0x5, 0x2, 0x0, 0x0, 0x31204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xee00, 0x0, 0x1}}}, 0x0, 0x0, 0x0, &(0x7f0000002b00)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2b, 0x0, 0x10000000, 0x2000, 0x8}}}}, &(0x7f0000000a40)={0x20, 0x0, 0x8, {0x20f008, 0x4}}})
sendmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x5d, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0x1}], 0x1}}], 0x503, 0x0)

[  133.475412][ T9865] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5
[  133.498012][T10629] tun0: persist disabled
[  133.511903][ T9865] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  133.545881][T10634] tun0: tun_chr_ioctl cmd 1074025675
[  133.565126][T10634] tun0: persist enabled
[  133.584557][ T9865] usb 3-1: USB disconnect, device number 6
[  133.593731][T10634] tun0: tun_chr_ioctl cmd 1074025675
12:00:15 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x1, 0x800, {<r1=>0x0}, {}, 0x7, 0xdb3e})
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x74, 0x72, 0x0, 0x6, 0x0, 0x401, 0x10040, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_bp={&(0x7f0000000080), 0x3}, 0x8000, 0x8, 0x9, 0x9, 0x0, 0xfff, 0x7fff}, r1, 0xf, 0xffffffffffffffff, 0x1)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
listen(r0, 0x6)
setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00')
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x9, 0x8, 0x5, 0x2, 0x0, 0x0, 0x31204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xee00, 0x0, 0x1}}}, 0x0, 0x0, 0x0, &(0x7f0000002b00)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2b, 0x0, 0x10000000, 0x2000, 0x8}}}}, &(0x7f0000000a40)={0x20, 0x0, 0x8, {0x20f008, 0x4}}})
sendmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x5d, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0x1}], 0x1}}], 0x503, 0x0)

[  133.636805][T10634] tun0: persist disabled
[  133.650547][ T9865] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  133.710893][ T9865] keyspan 3-1:0.0: device disconnected
12:00:15 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x1, 0x800, {<r1=>0x0}, {}, 0x7, 0xdb3e})
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x74, 0x72, 0x0, 0x6, 0x0, 0x401, 0x10040, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_bp={&(0x7f0000000080), 0x3}, 0x8000, 0x8, 0x9, 0x9, 0x0, 0xfff, 0x7fff}, r1, 0xf, 0xffffffffffffffff, 0x1)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
listen(r0, 0x6)
setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00')
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x9, 0x8, 0x5, 0x2, 0x0, 0x0, 0x31204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xee00, 0x0, 0x1}}}, 0x0, 0x0, 0x0, &(0x7f0000002b00)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2b, 0x0, 0x10000000, 0x2000, 0x8}}}}, &(0x7f0000000a40)={0x20, 0x0, 0x8, {0x20f008, 0x4}}})
sendmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x5d, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0x1}], 0x1}}], 0x503, 0x0)

12:00:17 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x1, 0x800, {<r1=>0x0}, {}, 0x7, 0xdb3e})
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x74, 0x72, 0x0, 0x6, 0x0, 0x401, 0x10040, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_bp={&(0x7f0000000080), 0x3}, 0x8000, 0x8, 0x9, 0x9, 0x0, 0xfff, 0x7fff}, r1, 0xf, 0xffffffffffffffff, 0x1)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
listen(r0, 0x6)
setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00')
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x9, 0x8, 0x5, 0x2, 0x0, 0x0, 0x31204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xee00, 0x0, 0x1}}}, 0x0, 0x0, 0x0, &(0x7f0000002b00)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2b, 0x0, 0x10000000, 0x2000, 0x8}}}}, &(0x7f0000000a40)={0x20, 0x0, 0x8, {0x20f008, 0x4}}})
sendmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x5d, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0x1}], 0x1}}], 0x503, 0x0)

12:00:17 executing program 2:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001280)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, &(0x7f00000012c0)={@my=0x1})

12:00:17 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x1, 0x800, {<r1=>0x0}, {}, 0x7, 0xdb3e})
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x74, 0x72, 0x0, 0x6, 0x0, 0x401, 0x10040, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_bp={&(0x7f0000000080), 0x3}, 0x8000, 0x8, 0x9, 0x9, 0x0, 0xfff, 0x7fff}, r1, 0xf, 0xffffffffffffffff, 0x1)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
listen(r0, 0x6)
setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00')
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x9, 0x8, 0x5, 0x2, 0x0, 0x0, 0x31204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xee00, 0x0, 0x1}}}, 0x0, 0x0, 0x0, &(0x7f0000002b00)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2b, 0x0, 0x10000000, 0x2000, 0x8}}}}, &(0x7f0000000a40)={0x20, 0x0, 0x8, {0x20f008, 0x4}}})
sendmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x5d, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0x1}], 0x1}}], 0x503, 0x0)

12:00:17 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x1, 0x800, {<r1=>0x0}, {}, 0x7, 0xdb3e})
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x74, 0x72, 0x0, 0x6, 0x0, 0x401, 0x10040, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_bp={&(0x7f0000000080), 0x3}, 0x8000, 0x8, 0x9, 0x9, 0x0, 0xfff, 0x7fff}, r1, 0xf, 0xffffffffffffffff, 0x1)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
listen(r0, 0x6)
setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00')
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x9, 0x8, 0x5, 0x2, 0x0, 0x0, 0x31204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xee00, 0x0, 0x1}}}, 0x0, 0x0, 0x0, &(0x7f0000002b00)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2b, 0x0, 0x10000000, 0x2000, 0x8}}}}, &(0x7f0000000a40)={0x20, 0x0, 0x8, {0x20f008, 0x4}}})
sendmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x5d, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0x1}], 0x1}}], 0x503, 0x0)

12:00:17 executing program 2:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001280)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, &(0x7f00000012c0)={@my=0x1})

12:00:17 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x1, 0x800, {<r1=>0x0}, {}, 0x7, 0xdb3e})
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x74, 0x72, 0x0, 0x6, 0x0, 0x401, 0x10040, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_bp={&(0x7f0000000080), 0x3}, 0x8000, 0x8, 0x9, 0x9, 0x0, 0xfff, 0x7fff}, r1, 0xf, 0xffffffffffffffff, 0x1)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
listen(r0, 0x6)
setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00')
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x9, 0x8, 0x5, 0x2, 0x0, 0x0, 0x31204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xee00, 0x0, 0x1}}}, 0x0, 0x0, 0x0, &(0x7f0000002b00)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2b, 0x0, 0x10000000, 0x2000, 0x8}}}}, &(0x7f0000000a40)={0x20, 0x0, 0x8, {0x20f008, 0x4}}})
sendmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x5d, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0x1}], 0x1}}], 0x503, 0x0)

12:00:17 executing program 2:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001280)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, &(0x7f00000012c0)={@my=0x1})

12:00:17 executing program 2:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001280)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af00, &(0x7f00000012c0)={@my=0x1})

12:00:17 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x0, [0x486]})

[  136.322983][T10690] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
12:00:18 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x1, 0x800, {<r1=>0x0}, {}, 0x7, 0xdb3e})
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x74, 0x72, 0x0, 0x6, 0x0, 0x401, 0x10040, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_bp={&(0x7f0000000080), 0x3}, 0x8000, 0x8, 0x9, 0x9, 0x0, 0xfff, 0x7fff}, r1, 0xf, 0xffffffffffffffff, 0x1)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
listen(r0, 0x6)
setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00')
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x9, 0x8, 0x5, 0x2, 0x0, 0x0, 0x31204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xee00, 0x0, 0x1}}}, 0x0, 0x0, 0x0, &(0x7f0000002b00)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2b, 0x0, 0x10000000, 0x2000, 0x8}}}}, &(0x7f0000000a40)={0x20, 0x0, 0x8, {0x20f008, 0x4}}})
sendmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x5d, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0x1}], 0x1}}], 0x503, 0x0)

12:00:18 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x0, [0x486]})

12:00:18 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x0, [0x486]})

12:00:19 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x0, [0x486]})

12:00:19 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x0, [0x486]})

12:00:19 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x1, 0x800, {<r1=>0x0}, {}, 0x7, 0xdb3e})
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x74, 0x72, 0x0, 0x6, 0x0, 0x401, 0x10040, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_bp={&(0x7f0000000080), 0x3}, 0x8000, 0x8, 0x9, 0x9, 0x0, 0xfff, 0x7fff}, r1, 0xf, 0xffffffffffffffff, 0x1)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
listen(r0, 0x6)
setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00')
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x9, 0x8, 0x5, 0x2, 0x0, 0x0, 0x31204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xee00, 0x0, 0x1}}}, 0x0, 0x0, 0x0, &(0x7f0000002b00)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2b, 0x0, 0x10000000, 0x2000, 0x8}}}}, &(0x7f0000000a40)={0x20, 0x0, 0x8, {0x20f008, 0x4}}})
sendmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x5d, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0x1}], 0x1}}], 0x503, 0x0)

12:00:19 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x1, 0x800, {<r1=>0x0}, {}, 0x7, 0xdb3e})
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x74, 0x72, 0x0, 0x6, 0x0, 0x401, 0x10040, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_bp={&(0x7f0000000080), 0x3}, 0x8000, 0x8, 0x9, 0x9, 0x0, 0xfff, 0x7fff}, r1, 0xf, 0xffffffffffffffff, 0x1)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
listen(r0, 0x6)
setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00')
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x9, 0x8, 0x5, 0x2, 0x0, 0x0, 0x31204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xee00, 0x0, 0x1}}}, 0x0, 0x0, 0x0, &(0x7f0000002b00)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2b, 0x0, 0x10000000, 0x2000, 0x8}}}}, &(0x7f0000000a40)={0x20, 0x0, 0x8, {0x20f008, 0x4}}})
sendmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x5d, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0x1}], 0x1}}], 0x503, 0x0)

12:00:19 executing program 4:
r0 = syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x2a402, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000240))

12:00:19 executing program 2:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x1, 0x81, 0x7, 0x22, 0x0, 0x0, 0x1800, 0xd, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x2}, 0x66c5356e58dd2f29, 0x0, 0x80, 0x7, 0x3d, 0xffff}, r3, 0x3, r0, 0xa)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
perf_event_open(&(0x7f0000000c40)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x3000000, 0x0}}], 0x400000000000085, 0x0)
r6 = pidfd_getfd(r5, r2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x2, 0x2, 0x0, 0x7, {0xa, 0x4e23, 0x3, @mcast1, 0x5}}}, 0x3a)

12:00:19 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x0, [0x486]})

[  138.183445][T10744] netlink: 'syz-executor.2': attribute type 11 has an invalid length.
[  138.211137][T10751] 
[  138.213501][T10751] ============================================
[  138.219652][T10751] WARNING: possible recursive locking detected
[  138.225805][T10751] 5.12.0-rc5-syzkaller #0 Not tainted
[  138.231179][T10751] --------------------------------------------
[  138.237328][T10751] syz-executor.4/10751 is trying to acquire lock:
[  138.243747][T10751] ffff88802ca8b130 (&runtime->sleep){....}-{2:2}, at: io_poll_double_wake+0x25f/0x6a0
[  138.253388][T10751] 
[  138.253388][T10751] but task is already holding lock:
[  138.261724][T10751] ffff888060b93130 (&runtime->sleep){....}-{2:2}, at: __wake_up_common_lock+0xb4/0x130
[  138.271427][T10751] 
[  138.271427][T10751] other info that might help us debug this:
[  138.279498][T10751]  Possible unsafe locking scenario:
[  138.279498][T10751] 
[  138.286957][T10751]        CPU0
[  138.290279][T10751]        ----
[  138.293564][T10751]   lock(&runtime->sleep);
[  138.297999][T10751]   lock(&runtime->sleep);
[  138.302431][T10751] 
[  138.302431][T10751]  *** DEADLOCK ***
[  138.302431][T10751] 
[  138.310586][T10751]  May be due to missing lock nesting notation
[  138.310586][T10751] 
[  138.318915][T10751] 3 locks held by syz-executor.4/10751:
[  138.324476][T10751]  #0: ffff888060b93440 (&runtime->oss.params_lock){+.+.}-{3:3}, at: snd_pcm_oss_get_active_substream+0x142/0x1c0
[  138.336903][T10751]  #1: ffff88802092e108 (&group->lock){....}-{2:2}, at: snd_pcm_drop+0x131/0x320
[  138.346089][T10751]  #2: ffff888060b93130 (&runtime->sleep){....}-{2:2}, at: __wake_up_common_lock+0xb4/0x130
[  138.356303][T10751] 
[  138.356303][T10751] stack backtrace:
[  138.362195][T10751] CPU: 1 PID: 10751 Comm: syz-executor.4 Not tainted 5.12.0-rc5-syzkaller #0
[  138.370965][T10751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  138.381034][T10751] Call Trace:
[  138.384325][T10751]  dump_stack+0x141/0x1d7
[  138.388700][T10751]  __lock_acquire.cold+0x14c/0x3b4
[  138.393836][T10751]  ? lockdep_hardirqs_on_prepare+0x400/0x400
[  138.399856][T10751]  ? lockdep_unlock+0x11c/0x290
[  138.404725][T10751]  ? __lock_acquire+0x2506/0x54c0
[  138.409769][T10751]  lock_acquire+0x1ab/0x740
[  138.414305][T10751]  ? io_poll_double_wake+0x25f/0x6a0
[  138.419612][T10751]  ? lock_release+0x720/0x720
[  138.424336][T10751]  _raw_spin_lock+0x2a/0x40
[  138.428860][T10751]  ? io_poll_double_wake+0x25f/0x6a0
[  138.434187][T10751]  io_poll_double_wake+0x25f/0x6a0
[  138.439352][T10751]  __wake_up_common+0x147/0x650
[  138.444227][T10751]  __wake_up_common_lock+0xd0/0x130
[  138.449464][T10751]  ? __wake_up_common+0x650/0x650
[  138.454504][T10751]  ? _raw_spin_unlock_irqrestore+0x3d/0x70
[  138.460324][T10751]  ? snd_timer_notify+0x2fe/0x3d0
[  138.465369][T10751]  snd_pcm_post_stop+0xb9/0x1f0
[  138.470243][T10751]  snd_pcm_action+0x143/0x170
[  138.474939][T10751]  snd_pcm_drop+0x1ab/0x320
[  138.479459][T10751]  snd_pcm_kernel_ioctl+0x12f/0x240
[  138.484705][T10751]  snd_pcm_oss_change_params_locked+0x194b/0x39a0
[  138.491147][T10751]  ? snd_pcm_plugin_append+0x190/0x190
[  138.496622][T10751]  ? mutex_lock_io_nested+0xf70/0xf70
[  138.502017][T10751]  snd_pcm_oss_get_active_substream+0x164/0x1c0
[  138.508287][T10751]  snd_pcm_oss_ioctl+0x144f/0x3430
[  138.513418][T10751]  ? snd_pcm_oss_release+0x300/0x300
[  138.518726][T10751]  ? __fget_files+0x288/0x3d0
[  138.523418][T10751]  ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70
[  138.529677][T10751]  ? snd_pcm_oss_release+0x300/0x300
[  138.534983][T10751]  __x64_sys_ioctl+0x193/0x200
[  138.539765][T10751]  do_syscall_64+0x2d/0x70
[  138.544202][T10751]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  138.550126][T10751] RIP: 0033:0x466459
[  138.554026][T10751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48
[  138.573995][T10751] RSP: 002b:00007f180da8d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  138.582431][T10751] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466459
[  138.584732][T10744] netlink: 207800 bytes leftover after parsing attributes in process `syz-executor.2'.
[  138.590413][T10751] RDX: 0000000020000240 RSI: 00000000c0045002 RDI: 0000000000000004
12:00:20 executing program 4:
r0 = syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x2a402, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000240))

12:00:20 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000200)={0x7b, 0x0, [0x486]})

[  138.590433][T10751] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000
[  138.590447][T10751] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c008
[  138.590462][T10751] R13: 0000000000a9fb1f R14: 00007f180da8d300 R15: 0000000000022000
[  138.701141][T10744] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht'
12:00:20 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000140)={0x1, 0x800, {<r1=>0x0}, {}, 0x7, 0xdb3e})
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x74, 0x72, 0x0, 0x6, 0x0, 0x401, 0x10040, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x800, 0x2, @perf_bp={&(0x7f0000000080), 0x3}, 0x8000, 0x8, 0x9, 0x9, 0x0, 0xfff, 0x7fff}, r1, 0xf, 0xffffffffffffffff, 0x1)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
listen(r0, 0x6)
setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1)
connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10)
syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00')
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x9, 0x8, 0x5, 0x2, 0x0, 0x0, 0x31204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x1)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x0, &(0x7f00000005c0)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xee00, 0x0, 0x1}}}, 0x0, 0x0, 0x0, &(0x7f0000002b00)={0xa0, 0x0, 0x0, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2b, 0x0, 0x10000000, 0x2000, 0x8}}}}, &(0x7f0000000a40)={0x20, 0x0, 0x8, {0x20f008, 0x4}}})
sendmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x5d, &(0x7f0000000180)=[{&(0x7f0000000880)='T', 0x1}], 0x1}}], 0x503, 0x0)

12:00:20 executing program 4:
r0 = syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x2a402, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000240))

12:00:20 executing program 3:
r0 = syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x2a402, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000240))

12:00:20 executing program 2:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x1, 0x81, 0x7, 0x22, 0x0, 0x0, 0x1800, 0xd, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x2}, 0x66c5356e58dd2f29, 0x0, 0x80, 0x7, 0x3d, 0xffff}, r3, 0x3, r0, 0xa)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
perf_event_open(&(0x7f0000000c40)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x3000000, 0x0}}], 0x400000000000085, 0x0)
r6 = pidfd_getfd(r5, r2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x2, 0x2, 0x0, 0x7, {0xa, 0x4e23, 0x3, @mcast1, 0x5}}}, 0x3a)

12:00:20 executing program 4:
r0 = syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x2a402, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000240))

12:00:20 executing program 3:
r0 = syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x2a402, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000240))

[  139.077956][T10796] netlink: 'syz-executor.2': attribute type 11 has an invalid length.
[  139.107249][T10796] netlink: 207800 bytes leftover after parsing attributes in process `syz-executor.2'.
12:00:20 executing program 5:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x1, 0x81, 0x7, 0x22, 0x0, 0x0, 0x1800, 0xd, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x2}, 0x66c5356e58dd2f29, 0x0, 0x80, 0x7, 0x3d, 0xffff}, r3, 0x3, r0, 0xa)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
perf_event_open(&(0x7f0000000c40)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x3000000, 0x0}}], 0x400000000000085, 0x0)
r6 = pidfd_getfd(r5, r2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x2, 0x2, 0x0, 0x7, {0xa, 0x4e23, 0x3, @mcast1, 0x5}}}, 0x3a)

12:00:20 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x1, 0x81, 0x7, 0x22, 0x0, 0x0, 0x1800, 0xd, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x2}, 0x66c5356e58dd2f29, 0x0, 0x80, 0x7, 0x3d, 0xffff}, r3, 0x3, r0, 0xa)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
perf_event_open(&(0x7f0000000c40)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x3000000, 0x0}}], 0x400000000000085, 0x0)
r6 = pidfd_getfd(r5, r2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x2, 0x2, 0x0, 0x7, {0xa, 0x4e23, 0x3, @mcast1, 0x5}}}, 0x3a)

12:00:20 executing program 4:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x1, 0x81, 0x7, 0x22, 0x0, 0x0, 0x1800, 0xd, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x2}, 0x66c5356e58dd2f29, 0x0, 0x80, 0x7, 0x3d, 0xffff}, r3, 0x3, r0, 0xa)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
perf_event_open(&(0x7f0000000c40)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x3000000, 0x0}}], 0x400000000000085, 0x0)
r6 = pidfd_getfd(r5, r2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x2, 0x2, 0x0, 0x7, {0xa, 0x4e23, 0x3, @mcast1, 0x5}}}, 0x3a)

[  139.179821][T10796] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht'
12:00:20 executing program 3:
r0 = syz_io_uring_setup(0x86, &(0x7f0000000080), &(0x7f0000ffc000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x2a402, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r3}, 0x0)
io_uring_enter(r0, 0x2039, 0x0, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000240))

[  139.481229][T10808] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[  139.494765][T10808] netlink: 207800 bytes leftover after parsing attributes in process `syz-executor.5'.
12:00:21 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x2, 0x4, 0xcc, 0x9}, 0x40)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x2c)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000080), &(0x7f00000001c0)=""/145}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000080), &(0x7f00000001c0)=""/140}, 0x20)

12:00:21 executing program 3:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000018b7c540c215390065d20000000109021b000100000000090400000145e54f000905840346"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

[  139.587353][T10808] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht'
12:00:21 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x2, 0x4, 0xcc, 0x9}, 0x40)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x2c)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000080), &(0x7f00000001c0)=""/145}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000080), &(0x7f00000001c0)=""/140}, 0x20)

12:00:21 executing program 2:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x1, 0x81, 0x7, 0x22, 0x0, 0x0, 0x1800, 0xd, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x2}, 0x66c5356e58dd2f29, 0x0, 0x80, 0x7, 0x3d, 0xffff}, r3, 0x3, r0, 0xa)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
perf_event_open(&(0x7f0000000c40)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x3000000, 0x0}}], 0x400000000000085, 0x0)
r6 = pidfd_getfd(r5, r2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x2, 0x2, 0x0, 0x7, {0xa, 0x4e23, 0x3, @mcast1, 0x5}}}, 0x3a)

12:00:21 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x2, 0x4, 0xcc, 0x9}, 0x40)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x2c)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000080), &(0x7f00000001c0)=""/145}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000080), &(0x7f00000001c0)=""/140}, 0x20)

12:00:21 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x2, 0x4, 0xcc, 0x9}, 0x40)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x2c)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000080), &(0x7f00000001c0)=""/145}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000080), &(0x7f00000001c0)=""/140}, 0x20)

12:00:21 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x2, 0x4, 0xcc, 0x9}, 0x40)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x2c)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000080), &(0x7f00000001c0)=""/145}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000080), &(0x7f00000001c0)=""/140}, 0x20)

[  139.876955][T10814] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[  139.891187][T10814] netlink: 207800 bytes leftover after parsing attributes in process `syz-executor.0'.
[  139.916238][ T4802] usb 4-1: new high-speed USB device number 2 using dummy_hcd
12:00:21 executing program 5:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x1, 0x81, 0x7, 0x22, 0x0, 0x0, 0x1800, 0xd, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x2}, 0x66c5356e58dd2f29, 0x0, 0x80, 0x7, 0x3d, 0xffff}, r3, 0x3, r0, 0xa)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
perf_event_open(&(0x7f0000000c40)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x3000000, 0x0}}], 0x400000000000085, 0x0)
r6 = pidfd_getfd(r5, r2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x2, 0x2, 0x0, 0x7, {0xa, 0x4e23, 0x3, @mcast1, 0x5}}}, 0x3a)

[  139.959604][T10814] ieee80211 phy20: Selected rate control algorithm 'minstrel_ht'
12:00:21 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x2, 0x4, 0xcc, 0x9}, 0x40)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x2c)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000080), &(0x7f00000001c0)=""/145}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000080), &(0x7f00000001c0)=""/140}, 0x20)

[  140.132009][T10817] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  140.149927][T10817] netlink: 207800 bytes leftover after parsing attributes in process `syz-executor.4'.
12:00:21 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x1, 0x81, 0x7, 0x22, 0x0, 0x0, 0x1800, 0xd, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x2}, 0x66c5356e58dd2f29, 0x0, 0x80, 0x7, 0x3d, 0xffff}, r3, 0x3, r0, 0xa)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
perf_event_open(&(0x7f0000000c40)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x3000000, 0x0}}], 0x400000000000085, 0x0)
r6 = pidfd_getfd(r5, r2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x2, 0x2, 0x0, 0x7, {0xa, 0x4e23, 0x3, @mcast1, 0x5}}}, 0x3a)

[  140.179381][T10817] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht'
12:00:21 executing program 4:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x1, 0x81, 0x7, 0x22, 0x0, 0x0, 0x1800, 0xd, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x2}, 0x66c5356e58dd2f29, 0x0, 0x80, 0x7, 0x3d, 0xffff}, r3, 0x3, r0, 0xa)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
perf_event_open(&(0x7f0000000c40)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x3000000, 0x0}}], 0x400000000000085, 0x0)
r6 = pidfd_getfd(r5, r2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x2, 0x2, 0x0, 0x7, {0xa, 0x4e23, 0x3, @mcast1, 0x5}}}, 0x3a)

12:00:21 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x2, 0x4, 0xcc, 0x9}, 0x40)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x2c)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000080), &(0x7f00000001c0)=""/145}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000080), &(0x7f00000001c0)=""/140}, 0x20)

[  140.226611][T10846] netlink: 'syz-executor.2': attribute type 11 has an invalid length.
[  140.239091][T10846] netlink: 207800 bytes leftover after parsing attributes in process `syz-executor.2'.
[  140.294283][T10846] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht'
[  140.315159][ T4802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
12:00:21 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x2, 0x4, 0xcc, 0x9}, 0x40)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x2c)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000080), &(0x7f00000001c0)=""/145}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000080), &(0x7f00000001c0)=""/140}, 0x20)

[  140.345887][ T4802] usb 4-1: New USB device found, idVendor=15c2, idProduct=0039, bcdDevice=d2.65
[  140.378472][ T4802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.388323][ T4802] usb 4-1: config 0 descriptor??
[  140.436808][ T4802] input: iMON Panel, Knob and Mouse(15c2:0039) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5
[  140.589146][T10866] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[  140.606419][T10866] netlink: 207800 bytes leftover after parsing attributes in process `syz-executor.5'.
[  140.647605][T10866] ieee80211 phy23: Selected rate control algorithm 'minstrel_ht'
[  140.714463][ T4802] rc_core: IR keymap rc-imon-pad not found
[  140.723501][ T4802] Registered IR keymap rc-empty
[  140.748846][ T4802] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  140.811090][ T4802] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  140.880508][T10887] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[  140.894277][T10887] netlink: 207800 bytes leftover after parsing attributes in process `syz-executor.0'.
[  140.907510][ T4802] imon:send_packet: packet tx failed (-71)
[  140.939740][ T4802] imon 4-1:0.0: remote input dev register failed
[  140.947985][T10887] ieee80211 phy24: Selected rate control algorithm 'minstrel_ht'
[  140.958943][ T4802] imon 4-1:0.0: imon_init_intf0: rc device setup failed
[  140.997668][ T4802] imon 4-1:0.0: unable to initialize intf0, err 0
[  141.033940][ T4802] imon:imon_probe: failed to initialize context!
[  141.064041][ T4802] imon 4-1:0.0: unable to register, err -19
[  141.093300][T10895] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  141.109165][T10895] netlink: 207800 bytes leftover after parsing attributes in process `syz-executor.4'.
[  141.115335][ T4802] usb 4-1: USB disconnect, device number 2
[  141.157672][T10895] ieee80211 phy25: Selected rate control algorithm 'minstrel_ht'
[  141.714454][ T4802] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  142.145539][ T4802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  142.157043][ T4802] usb 4-1: New USB device found, idVendor=15c2, idProduct=0039, bcdDevice=d2.65
[  142.167039][ T4802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.178640][ T4802] usb 4-1: config 0 descriptor??
[  142.219764][ T4802] input: iMON Panel, Knob and Mouse(15c2:0039) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7
12:00:23 executing program 3:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000018b7c540c215390065d20000000109021b000100000000090400000145e54f000905840346"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

12:00:23 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x2, 0x4, 0xcc, 0x9}, 0x40)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x2c)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000080), &(0x7f00000001c0)=""/145}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000080), &(0x7f00000001c0)=""/140}, 0x20)

12:00:23 executing program 5:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x1, 0x81, 0x7, 0x22, 0x0, 0x0, 0x1800, 0xd, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x2}, 0x66c5356e58dd2f29, 0x0, 0x80, 0x7, 0x3d, 0xffff}, r3, 0x3, r0, 0xa)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
perf_event_open(&(0x7f0000000c40)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x3000000, 0x0}}], 0x400000000000085, 0x0)
r6 = pidfd_getfd(r5, r2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x2, 0x2, 0x0, 0x7, {0xa, 0x4e23, 0x3, @mcast1, 0x5}}}, 0x3a)

12:00:23 executing program 2:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x1, 0x81, 0x7, 0x22, 0x0, 0x0, 0x1800, 0xd, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x2}, 0x66c5356e58dd2f29, 0x0, 0x80, 0x7, 0x3d, 0xffff}, r3, 0x3, r0, 0xa)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
perf_event_open(&(0x7f0000000c40)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x3000000, 0x0}}], 0x400000000000085, 0x0)
r6 = pidfd_getfd(r5, r2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x2, 0x2, 0x0, 0x7, {0xa, 0x4e23, 0x3, @mcast1, 0x5}}}, 0x3a)

12:00:23 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x1, 0x81, 0x7, 0x22, 0x0, 0x0, 0x1800, 0xd, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x2}, 0x66c5356e58dd2f29, 0x0, 0x80, 0x7, 0x3d, 0xffff}, r3, 0x3, r0, 0xa)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
perf_event_open(&(0x7f0000000c40)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x3000000, 0x0}}], 0x400000000000085, 0x0)
r6 = pidfd_getfd(r5, r2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x2, 0x2, 0x0, 0x7, {0xa, 0x4e23, 0x3, @mcast1, 0x5}}}, 0x3a)

12:00:23 executing program 4:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = getpid()
perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x1, 0x81, 0x7, 0x22, 0x0, 0x0, 0x1800, 0xd, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x2}, 0x66c5356e58dd2f29, 0x0, 0x80, 0x7, 0x3d, 0xffff}, r3, 0x3, r0, 0xa)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0xa}, 0x1c)
perf_event_open(&(0x7f0000000c40)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030029000505d25a80308c63940d0424fc60100002400a000a00053582c137153e37040c188000f01700d1bd", 0x33fe0}], 0x1}, 0x0)
sendmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x3000000, 0x0}}], 0x400000000000085, 0x0)
r6 = pidfd_getfd(r5, r2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, r6, 0x2, 0x2, 0x0, 0x7, {0xa, 0x4e23, 0x3, @mcast1, 0x5}}}, 0x3a)

[  142.436638][ T4802] imon:send_packet: packet tx failed (-71)
[  142.474687][ T4802] imon 4-1:0.0: panel buttons/knobs setup failed
12:00:24 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x2, 0x4, 0xcc, 0x9}, 0x40)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x2c)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000080), &(0x7f00000001c0)=""/145}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000080), &(0x7f00000001c0)=""/140}, 0x20)

[  142.532780][T10987] netlink: 'syz-executor.4': attribute type 11 has an invalid length.
[  142.555080][T10987] netlink: 207800 bytes leftover after parsing attributes in process `syz-executor.4'.
[  142.578221][ T4802] rc_core: IR keymap rc-imon-pad not found
[  142.584858][ T4802] Registered IR keymap rc-empty
[  142.593824][T10987] ieee80211 phy26: Selected rate control algorithm 'minstrel_ht'
[  142.608242][ T4802] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  142.627698][ T4802] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
12:00:24 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000018b7c540c215390065d20000000109021b000100000000090400000145e54f000905840346"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

[  142.654787][ T4802] imon:send_packet: packet tx failed (-71)
[  142.676525][ T4802] imon 4-1:0.0: remote input dev register failed
[  142.683052][ T4802] imon 4-1:0.0: imon_init_intf0: rc device setup failed
[  142.745277][ T4802] imon 4-1:0.0: unable to initialize intf0, err 0
[  142.751766][ T4802] imon:imon_probe: failed to initialize context!
[  142.767185][ T4802] imon 4-1:0.0: unable to register, err -19
[  142.787103][ T4802] usb 4-1: USB disconnect, device number 3
[  142.950387][T10986] ieee80211 phy27: Selected rate control algorithm 'minstrel_ht'
12:00:24 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x2, 0x4, 0xcc, 0x9}, 0x40)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x2c)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000080), &(0x7f00000001c0)=""/145}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000080), &(0x7f00000001c0)=""/140}, 0x20)

[  143.016385][    T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd
12:00:24 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x2, 0x4, 0xcc, 0x9}, 0x40)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x2c)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000080), &(0x7f00000001c0)=""/145}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000080), &(0x7f00000001c0)=""/140}, 0x20)

12:00:24 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x2, 0x4, 0xcc, 0x9}, 0x40)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x2c)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000080), &(0x7f00000001c0)=""/145}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000080), &(0x7f00000001c0)=""/140}, 0x20)

[  143.197176][ T4802] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  143.277658][T10985] nla_validate_range_unsigned: 1 callbacks suppressed
[  143.277745][T10985] netlink: 'syz-executor.5': attribute type 11 has an invalid length.
[  143.320203][T10985] __nla_validate_parse: 1 callbacks suppressed
12:00:24 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x2, 0x4, 0xcc, 0x9}, 0x40)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x2c)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000080), &(0x7f00000001c0)=""/145}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000080), &(0x7f00000001c0)=""/140}, 0x20)

[  143.320225][T10985] netlink: 207800 bytes leftover after parsing attributes in process `syz-executor.5'.
[  143.341716][T10985] ieee80211 phy28: Selected rate control algorithm 'minstrel_ht'
[  143.387193][    T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  143.393090][T10989] netlink: 'syz-executor.2': attribute type 11 has an invalid length.
[  143.414152][    T8] usb 2-1: New USB device found, idVendor=15c2, idProduct=0039, bcdDevice=d2.65
[  143.431359][T10989] netlink: 207800 bytes leftover after parsing attributes in process `syz-executor.2'.
[  143.432159][    T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.453685][    T8] usb 2-1: config 0 descriptor??
[  143.468903][T10989] ieee80211 phy29: Selected rate control algorithm 'minstrel_ht'
[  143.496961][    T8] input: iMON Panel, Knob and Mouse(15c2:0039) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9
[  143.604656][ T4802] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  143.617827][ T4802] usb 4-1: New USB device found, idVendor=15c2, idProduct=0039, bcdDevice=d2.65
[  143.632734][ T4802] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.654747][ T4802] usb 4-1: config 0 descriptor??
[  143.816228][    T8] rc_core: IR keymap rc-imon-pad not found
[  143.822512][    T8] Registered IR keymap rc-empty
[  143.841779][    T8] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  143.861427][    T8] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  143.927982][    T8] imon:send_packet: packet tx failed (-71)
[  143.944636][    T8] imon 2-1:0.0: remote input dev register failed
[  143.951092][    T8] imon 2-1:0.0: imon_init_intf0: rc device setup failed
[  143.964533][    T8] imon 2-1:0.0: unable to initialize intf0, err 0
[  143.971155][    T8] imon:imon_probe: failed to initialize context!
[  143.978388][ T4802] input: iMON Panel, Knob and Mouse(15c2:0039) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input11
[  143.990859][    T8] imon 2-1:0.0: unable to register, err -19
[  144.015273][    T8] usb 2-1: USB disconnect, device number 2
[  144.114541][ T4802] rc_core: IR keymap rc-imon-pad not found
[  144.120360][ T4802] Registered IR keymap rc-empty
[  144.126221][ T4802] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  144.140577][ T4802] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  144.266583][ T4802] imon:send_packet: packet tx failed (-71)
[  144.284561][ T4802] imon 4-1:0.0: remote input dev register failed
[  144.290954][ T4802] imon 4-1:0.0: imon_init_intf0: rc device setup failed
[  144.325787][ T4802] imon 4-1:0.0: unable to initialize intf0, err 0
[  144.332314][ T4802] imon:imon_probe: failed to initialize context!
[  144.339114][ T4802] imon 4-1:0.0: unable to register, err -19
[  144.349202][ T4802] usb 4-1: USB disconnect, device number 4
12:00:26 executing program 3:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000018b7c540c215390065d20000000109021b000100000000090400000145e54f000905840346"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

12:00:26 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
syz_emit_ethernet(0x86, &(0x7f0000000380)={@local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0x7f000001, @loopback}, "00006371ae9b1c01"}}}}}, 0x0)

12:00:26 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2318, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe, 0x200000000011, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$netlink(r3, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0xd70c0}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18}, 0x0)
recvmmsg(r4, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0)

12:00:26 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x2, 0x4, 0xcc, 0x9}, 0x40)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x2c)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000080), &(0x7f00000001c0)=""/145}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000080), &(0x7f00000001c0)=""/140}, 0x20)

12:00:26 executing program 2:
timer_gettime(0x0, 0x0)

12:00:26 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000018b7c540c215390065d20000000109021b000100000000090400000145e54f000905840346"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

12:00:26 executing program 2:
timer_gettime(0x0, 0x0)

12:00:26 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
syz_emit_ethernet(0x86, &(0x7f0000000380)={@local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0x7f000001, @loopback}, "00006371ae9b1c01"}}}}}, 0x0)

12:00:26 executing program 2:
timer_gettime(0x0, 0x0)

12:00:26 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x2, 0x4, 0xcc, 0x9}, 0x40)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x2c)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000080), &(0x7f00000001c0)=""/145}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r1, &(0x7f0000000080), &(0x7f00000001c0)=""/140}, 0x20)

12:00:26 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
syz_emit_ethernet(0x86, &(0x7f0000000380)={@local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0x7f000001, @loopback}, "00006371ae9b1c01"}}}}}, 0x0)

12:00:26 executing program 2:
timer_gettime(0x0, 0x0)

[  145.104663][ T9696] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  145.134775][ T9865] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  145.504844][ T9696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  145.515988][ T9696] usb 2-1: New USB device found, idVendor=15c2, idProduct=0039, bcdDevice=d2.65
[  145.525842][ T9696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.537346][ T9696] usb 2-1: config 0 descriptor??
[  145.546540][ T9865] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  145.557730][ T9865] usb 4-1: New USB device found, idVendor=15c2, idProduct=0039, bcdDevice=d2.65
[  145.568258][ T9865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.578587][ T9696] input: iMON Panel, Knob and Mouse(15c2:0039) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input13
[  145.594085][ T9865] usb 4-1: config 0 descriptor??
[  145.844656][ T9696] rc_core: IR keymap rc-imon-pad not found
[  145.850608][ T9696] Registered IR keymap rc-empty
[  145.855681][ T9696] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  145.866032][ T9696] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  146.005687][ T9696] imon:send_packet: packet tx failed (-71)
[  146.034796][ T9696] imon 2-1:0.0: remote input dev register failed
[  146.041393][ T9696] imon 2-1:0.0: imon_init_intf0: rc device setup failed
[  146.064581][ T9696] imon 2-1:0.0: unable to initialize intf0, err 0
[  146.071028][ T9696] imon:imon_probe: failed to initialize context!
[  146.082107][ T9865] input: iMON Panel, Knob and Mouse(15c2:0039) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input15
[  146.095026][ T9696] imon 2-1:0.0: unable to register, err -19
[  146.104348][ T9696] usb 2-1: USB disconnect, device number 3
[  146.214690][ T9865] rc_core: IR keymap rc-imon-pad not found
[  146.220613][ T9865] Registered IR keymap rc-empty
[  146.226288][ T9865] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  146.241028][ T9865] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  146.356513][ T9865] imon:send_packet: packet tx failed (-71)
[  146.375170][ T9865] imon 4-1:0.0: remote input dev register failed
[  146.381583][ T9865] imon 4-1:0.0: imon_init_intf0: rc device setup failed
[  146.404572][ T9865] imon 4-1:0.0: unable to initialize intf0, err 0
[  146.411034][ T9865] imon:imon_probe: failed to initialize context!
[  146.422500][ T9865] imon 4-1:0.0: unable to register, err -19
[  146.437125][ T9865] usb 4-1: USB disconnect, device number 5
12:00:28 executing program 3:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000018b7c540c215390065d20000000109021b000100000000090400000145e54f000905840346"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

12:00:28 executing program 1:
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000018b7c540c215390065d20000000109021b000100000000090400000145e54f000905840346"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

12:00:28 executing program 5:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
syz_emit_ethernet(0x86, &(0x7f0000000380)={@local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0x7f000001, @loopback}, "00006371ae9b1c01"}}}}}, 0x0)

12:00:28 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
syz_emit_ethernet(0x86, &(0x7f0000000380)={@local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0x7f000001, @loopback}, "00006371ae9b1c01"}}}}}, 0x0)

12:00:28 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2318, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe, 0x200000000011, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$netlink(r3, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0xd70c0}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18}, 0x0)
recvmmsg(r4, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0)

12:00:28 executing program 0:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2318, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe, 0x200000000011, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$netlink(r3, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0xd70c0}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18}, 0x0)
recvmmsg(r4, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0)

12:00:28 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffff7a}]})
mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

12:00:28 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
syz_emit_ethernet(0x86, &(0x7f0000000380)={@local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0x7f000001, @loopback}, "00006371ae9b1c01"}}}}}, 0x0)

12:00:28 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffff7a}]})
mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

12:00:28 executing program 4:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
syz_emit_ethernet(0x86, &(0x7f0000000380)={@local, @random="e0d35b1004bb", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0x7f000001, @loopback}, "00006371ae9b1c01"}}}}}, 0x0)

12:00:28 executing program 2:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
preadv(r0, &(0x7f0000000280), 0x18, 0xd9f, 0x0)
r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2318, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xe, 0x200000000011, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$netlink(r3, &(0x7f0000001340)={0x0, 0x803e0000, &(0x7f0000001280)=[{&(0x7f0000001e80)={0x10}, 0xd70c0}], 0x1, &(0x7f0000001300)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18}, 0x0)
recvmmsg(r4, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001ec0)=""/4096, 0x20002ec0}], 0x1}}], 0x2, 0x0, 0x0)

12:00:28 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffff7a}]})
mount_setattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

[  147.176998][ T4802] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  147.224552][ T9663] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  147.544616][ T4802] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  147.556364][ T4802] usb 2-1: New USB device found, idVendor=15c2, idProduct=0039, bcdDevice=d2.65
[  147.565555][ T4802] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.579927][ T4802] usb 2-1: config 0 descriptor??
[  147.624544][ T9663] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  147.633147][ T4802] input: iMON Panel, Knob and Mouse(15c2:0039) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input17
[  147.636467][ T9663] usb 4-1: New USB device found, idVendor=15c2, idProduct=0039, bcdDevice=d2.65
[  147.658151][ T9663] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.668052][ T9663] usb 4-1: config 0 descriptor??
[  147.904727][ T4802] rc_core: IR keymap rc-imon-pad not found
[  147.910607][ T4802] Registered IR keymap rc-empty
[  147.915629][ T4802] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  147.925864][ T4802] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  148.064727][ T4802] imon:send_packet: packet tx failed (-71)
[  148.085013][ T4802] imon 2-1:0.0: remote input dev register failed
[  148.091465][ T4802] imon 2-1:0.0: imon_init_intf0: rc device setup failed
[  148.104559][ T4802] imon 2-1:0.0: unable to initialize intf0, err 0
[  148.111157][ T4802] imon:imon_probe: failed to initialize context!
[  148.117928][ T4802] imon 2-1:0.0: unable to register, err -19
[  148.118739][ T9663] input: iMON Panel, Knob and Mouse(15c2:0039) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input19
[  148.140430][ T4802] usb 2-1: USB disconnect, device number 4