last executing test programs:

9m40.873917867s ago: executing program 32 (id=1071):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0)
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="b0000000", @ANYRES16=r1, @ANYBLOB="010027bd7000ffdbdf250300000014000300fe8000000025000000000000000000bb2900070073797374656d5f753a6f626a6563745f723a617564697463746c5f657865635f743a7330000000001400060076657468310000000000000000000000080004007f00010114000200"], 0xb0}, 0x1, 0x0, 0x0, 0x24004884}, 0x0)

9m38.855001529s ago: executing program 33 (id=1081):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000e80)="4490", 0x2}], 0x1}}], 0x1, 0x2090)
sendmmsg$inet(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000011c0)="a2", 0x1}], 0x1, 0x0, 0x0, 0xc2000000}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001780)="d1ef1bb59f70ec9b719b1589c8f3d0678afd96", 0x13}, {&(0x7f00000017c0)="dad5b14f2f8f950502cf28805d8714f935c655d7ea96bc", 0x17}, {&(0x7f0000001800)="e9d7b200bf6ecf325e1a9c0dccd8c357998ad687717f392aab546e2ad010fb16c3120d5c20a62654dfa7da737faea449d323a40f6b39ce3ccea07331a90678979abfde57efde701f4c14b7897b8ef0530b2eecee7536d3c0186c646980b6c78eaf6f4d9d55d211f1d5a38fe9f95f95e72127a07b02bd5f5b3bcb265680ae107e6cf387fb56fca7ecd4e7257f1dc5a9ac14a40036a3f8675e691f6f6e9067617ffa6045157cf5b7562f68838b5e13843d24", 0xb1}], 0x3}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001ac0)="6c5b0b3e474f01bac640e7eb9064ec8e2ccac8b36c7d9ab464dc0bd7221bbae89e38ef0efc78f3e2f90e6236ad1ad1fb3dbd3e4fd8f2de84e526dfafb354837ff3958d97c8366471850ce9c14b83bb6e9a7c282a1d3e03cdfb675b61e1dbacc6ebcd08e105d4df684f2cd13262d10ffb8b0794f39b3e490416530423da29406a6a4b5a356dc898052883f1e54fd041e5a82247a4bbb784ce30ce321a2805b28d30", 0xa1}, {&(0x7f0000001b80)="66a7d24b8451d3e0201a73aaabe1e3fe371dfbf029efdbc2de3742c687d72207cab9988bc15b9e27135be8e1d84bbeb01ccf943eb163a18b6a02c752c829c5f24c", 0x41}, {&(0x7f0000001c00)="811e3e8966b4199496dc8329eca81fa24aedba0078949553b10b0df3cc25de83324cb3fb6672cbb763e260abad0adca5ab04cf5988b6c9a912e96ba01b3508998595bfad50323f42fa943adb8d0324801ae6efa1e38cda7fa68458db8fce3f84fe3c3ed16f", 0x65}], 0x3}}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000002f00)="5f97b46d7adb8b68ff35da0f147fef1c6c6c60db5c1fb54496a27c9eeb14cf97ceed1ac5e9d95d093d6400f4996e3c5f73fa7edad49015f697bdc1a17f731cd7b4e404954a2fbc069f73e9fa86cab27babb16a9004571326e20d84cb662973ba616c", 0x62}], 0x1}}], 0x4, 0x40000)

9m32.375758424s ago: executing program 34 (id=1107):
r0 = socket$kcm(0x2, 0x2, 0x73)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000340)=@req3={0x801000, 0xfffffff9, 0x1000, 0x37, 0x7ff, 0xf83, 0x3}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10)
r2 = syz_clone(0x8c8000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000440), &(0x7f0000000480)=ANY=[@ANYBLOB="00fb28000071456fe00051129eff01365b360000000000000006baca33d7d861cb477b1946749126"], 0x28, 0x2)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, 0x0)
r4 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f0000000140), &(0x7f0000000000)=0x80)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r5=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r5, 0x1, &(0x7f0000000040), 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r7, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
rmdir(&(0x7f0000000000)='./file0\x00')
close_range(r6, 0xffffffffffffffff, 0x0)
r8 = socket$kcm(0x2, 0x2, 0x73)
bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10)

9m25.732982973s ago: executing program 35 (id=1117):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f903e37935344c32512c5a9076ecf3a6277d1d49a0458b36292cf673988d50b6f56d8f5abd8d50f67102806d767a8f7bbcb5178e1397e7034f2293b89a62f6ded4487d601328faf2436c3538bb9be32eddc0d12ceb3167a0f3a7d231dee218ea41fba5583133c3853fb524ad535dbbba6e59971033fceaef315466797d2e3c6d4469b827f82699dccb59d12532e582735cc307f56e30d610faafe2cc82fad768be"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0)
recvmmsg(r2, &(0x7f00000011c0)=[{{0x0, 0x0, &(0x7f00000007c0)}, 0xffffff81}, {{0x0, 0x0, 0xfffffffffffffffe}, 0x3}], 0x2, 0x40020062, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x8)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000080)={0x2, {0xc, 0x117, 0x5, 0x101, 0x95f}})

8m50.768304295s ago: executing program 36 (id=1250):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@volatile}], [], 0x2c})
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, <r2=>0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, 0x0, 0x0, 0x0, 0xdead, 0xffffff0b, &(0x7f0000000040)})
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x24000)
ioctl$SNDRV_TIMER_IOCTL_TRIGGER(r3, 0x54a6)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
read$FUSE(r4, &(0x7f00000043c0)={0x2020}, 0x2020)

8m47.674539231s ago: executing program 37 (id=1262):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000180)={0x0, 0x9})
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$netlink(0x10, 0x3, 0x4)
socket(0x10, 0x803, 0x0)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0)
fanotify_init(0x1, 0x101801)
openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1300, 0x1d)
socket$igmp6(0xa, 0x3, 0x2)
r2 = socket(0x2, 0x3, 0x6)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYBLOB='\a'], 0x0)
r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0)
r4 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
r6 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "fb0c6b63cee53d7a887cf960b2bed02788fd6931d58dd7060ca024b5e02f51f081ef3dc9a202c28a6c2136ee57579935077f5c181e8d11bcf0523c8879230f4a", 0x17}, 0x48, 0xfffffffffffffffd)
keyctl$read(0xb, r6, 0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=<r7=>0x0)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x5, 0xfffffffa, 0xdb}, 0x10)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[], [{@uid_eq={'uid', 0x3d, r7}}]}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000980)={<r9=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000040)={'macvlan0\x00', @random="0100"})
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f0000000140)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB=' \n.'], 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0)

8m43.951777129s ago: executing program 38 (id=1271):
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[0xa21, 0x4]})
syz_usb_connect(0x3, 0x7c, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x4, 0xa7, 0xc0, 0x8, 0x187f, 0x600, 0x137b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x1, 0x56, 0xb, 0x0, 0x1, "", [{{0x9, 0x4, 0x45, 0x80, 0x0, 0x89, 0x70, 0x7c, 0x4, [@hid_hid={0x9, 0x21, 0xfffd, 0xfa, 0x1, {0x22, 0x68e}}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x8, 0x8, 0x4}, [@mbim={0xc, 0x24, 0x1b, 0x3300, 0x5, 0x3, 0x8, 0x6, 0x4}, @network_terminal={0x7, 0x24, 0xa, 0xa4, 0x9, 0x6, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x6}, @ncm={0x6, 0x24, 0x1a, 0x7, 0x40}, @call_mgmt={0x5, 0x24, 0x1, 0x1}, @obex={0x5, 0x24, 0x15, 0x4}]}]}}]}}]}}, &(0x7f00000006c0)={0x59, 0x0, 0x0, 0x0})

8m39.821548998s ago: executing program 39 (id=1280):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000a40)={0x44, 0x0, &(0x7f0000000800)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0}}], 0x0, 0x0, 0x0})

8m17.29507987s ago: executing program 40 (id=1306):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x7d4165c9)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r3, 0x7d4165c9)
listen(r2, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r4, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8)
listen(r5, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000010000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0)

7m40.632925809s ago: executing program 41 (id=1467):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b"], 0x0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002640)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000004040)=ANY=[@ANYRESDEC, @ANYRESDEC], 0x1000)
ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, &(0x7f00000000c0)={0x1, 0x12})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x4, @multicast1}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r2, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3000004, 0x100010, 0xffffffffffffffff, 0xa8a87000)
setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000180)=0x101, 0x4)
recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x45833af92e4b38ff, 0x0)
ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="030000200000000000001734891fe579b6ba2f8da1da140000004506004000680000050690780a010102ac14140b4eff4e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b101000a907800080202001312cf7148e74eea33d7e7ba207a786f4428000000"], 0x4e)

7m8.097956858s ago: executing program 42 (id=1615):
r0 = socket$kcm(0x2b, 0x1, 0x0)
sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x18, 0x0, 0x0, 0x300}, 0x2000c08d)
shutdown(r0, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x6a4, 0x0, 0x2}]})
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f00000014c0)={0xf})
r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
readv(r6, &(0x7f0000000380)=[{&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f0000002680)=""/4107, 0x100b}, {&(0x7f0000001680)=""/4082, 0xfe16}], 0x3)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28)
recvfrom(r1, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1)
r7 = syz_open_dev$vim2m(&(0x7f0000000340), 0x4000000000001, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000140)={0x19, 0x0, 0x4, "18e889d15b38429faa8ff62438eaed752e68f3a6d09382b392b049e33958b16c"})
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x4)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4)

7m5.241065037s ago: executing program 43 (id=1635):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
openat$kvm(0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0xc43, 0x0)
r1 = eventfd(0x5ef)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x70000, 0x0, r1})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0)
setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x6a, 0x2, 0x20000002, 0x3)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800fc001400e9990000000000000000fc000000000000000000000000000000ac1e000100"], 0xb8}}, 0x20040000)

7m1.501170563s ago: executing program 44 (id=1645):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched_retired(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd, 0x9}, {0xfff3, 0xa}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d05, 0x0, 0x1}]})
write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904008100000020010000000000000800040001", 0x21)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r5)
sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x38, r6, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x88}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x8094)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)={0x48, r9, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xe}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4060}, 0x20008800)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000280)={'wpan4\x00', <r11=>0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000140)='./file0\x00')
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r12, &(0x7f00000000c0), 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r12, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000002c0)={'wpan0\x00', <r13=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r14=>0x0})
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x50, r9, 0x0, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x4020)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff})
write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00')

6m57.116924874s ago: executing program 45 (id=1654):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xc2c1, 0x0)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
syz_80211_inject_frame(0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wlan1\x00'})
pwritev(r0, &(0x7f0000000280)=[{&(0x7f0000000480)="e1", 0x1}], 0x1, 0x7fffffffffffffff, 0x0)
ioctl$XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f0000000080)={{0x3c, 0x4, 0x8, 0x0, 0x794}, &(0x7f00000002c0)=[{}, {}]})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
mmap$panthor(&(0x7f00003e8000/0x4000)=nil, 0x4000, 0x4, 0x810, r0, 0xf0d4)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000180)={'syztnl1\x00', <r3=>0x0, 0x1, 0x10, 0x7fff, 0xcd08, {{0x6, 0x4, 0x1, 0x34, 0x18, 0x64, 0x0, 0x3, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x17}, {[@noop, @noop]}}}}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r4=>0x0})
r5 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x1}], 0x1}}], 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg2\x00', <r8=>0x0})
r9 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', <r10=>0x0})
bind$packet(r9, &(0x7f0000000140)={0x11, 0x0, r10, 0x1, 0x6, 0x6, @remote}, 0x14)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0xe0, r2, 0x100, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x80)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)

6m31.884356168s ago: executing program 46 (id=1684):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth0_macvtap\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x51}}) (async, rerun: 64)
r1 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) (rerun: 64)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0}, 0x8044)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r3, 0x800448d2, &(0x7f0000000040)) (async, rerun: 64)
r4 = syz_open_dev$swradio(&(0x7f00000005c0), 0x1, 0x2) (rerun: 64)
poll(&(0x7f00000000c0)=[{r4, 0xe7d4c009da6c1985}], 0x1, 0x4) (async)
r5 = syz_open_dev$swradio(&(0x7f0000000f80), 0x1, 0x2)
read(r5, 0x0, 0x0) (async)
close_range(r2, 0xffffffffffffffff, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x6c, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @uid}, @generic="428184a477201ac90f24d8c531680464a01e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3db"]}, @nested={0x8, 0x5, 0x0, 0x1, [@generic="0bad07e0"]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x804) (async)
memfd_create(&(0x7f0000000140)='-\t:\xfd\xff\xff\xff\xff\xff\xff$\xdcG|\xbd1\xc2\xb1\x00\xadSP\xb3\xc9\x9c\x9d\xd2\x1f,\xc6\xea\x1fj\xac\xa35\x86\xe5\xechC\x0fz\'\xa9\xb3\x86\r&\"\xe6\xc8\x13\xc3e\xdf\x1bh\x031\xda\x1bNG\xac\xf3O\x02\x83\x96', 0x0) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fec000/0x13000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async)
get_mempolicy(0x0, &(0x7f00000000c0), 0x1423, &(0x7f0000062000/0x4000)=nil, 0x2)
syz_io_uring_setup(0x6, &(0x7f0000000040)={0x0, 0x900389b, 0x1c481, 0x0, 0x3b2}, 0x0, 0x0) (async, rerun: 32)
r7 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32)
setsockopt$inet_buf(r7, 0x0, 0x10, &(0x7f00000006c0), 0x0)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000011c0)={0x44, &(0x7f0000000f80)=ANY=[@ANYBLOB="40081a0000009136000000f9f18a96cf5f293b438f4bfc3dd7a82ae0d1d02135"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$sierra_net(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000d80)={0x1c, &(0x7f0000000a40)=ANY=[@ANYBLOB='\x00\t%\x00\x00\x00k'], 0x0, 0x0})

5m45.583845391s ago: executing program 9 (id=2005):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r2=>0x0})
sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r5=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000a00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f00000003c0)={0x5f4, 0x0, 0x4, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x7, 0xd, 0x1, 0x7}, {0x1, 0x4, 0x1, 0xffff}, {0x9097, 0x9, 0xb, 0x1}, {0xffff, 0x40, 0xfc, 0x9}, {0x8, 0xd, 0x62, 0x3}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe9e}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x304}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8001}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r2}, {0x190, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xfa10, 0x5, 0x2b, 0x401}, {0x5, 0x9, 0x2, 0x3}, {0xe, 0x6, 0x6, 0x5}, {0x9, 0xb, 0x4, 0x80000000}, {0x75, 0x7, 0x3, 0x4}, {0xf001, 0x7, 0x2}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xeb}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x565}}}]}}, {{0x8, 0x1, r6}, {0x84, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0xb7, 0xa, 0x40}, {0x144, 0x8, 0x2, 0x8000}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x5f4}, 0x1, 0x0, 0x0, 0x40800}, 0x400c851)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="300000004a00010040000000000000000a008000"], 0x30}}, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r7)
ptrace$peeksig(0x4209, r7, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f0000000a80)=[{}])
r8 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
mknodat(r0, &(0x7f0000000340)='./file0\x00', 0x80, 0x7)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r9, 0x400455c8, 0x1)
ioctl$TIOCVHANGUP(r9, 0x5437, 0x0)
prlimit64(0xffffffffffffffff, 0x4, &(0x7f0000000040)={0x4, 0x5}, &(0x7f0000000080))

5m44.688209981s ago: executing program 9 (id=2008):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendmmsg$inet(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000011c0)="a2", 0x1}], 0x1}, 0xf0ff}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001780)="d1ef1bb59f70ec9b719b1589c8f3d0678afd96", 0x13}, {&(0x7f00000017c0)="dad5b14f2f8f950502cf2880", 0xc}, {&(0x7f0000001800)="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", 0xfa}, {&(0x7f0000001900)="8d70e326292a261d6ca941faf3", 0xd}], 0x4}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001ac0)="6c5b0b3e474f01bac640e7eb9064ec8e2ccac8b36c7d9ab464dc0bd7221bbae89e38ef0efc78f3e2f90e6236ad1ad1fb3dbd3e4fd8f2de84e526dfafb354837ff3958d97c8366471850ce9c14b83bb6e9a7c282a1d3e03cdfb675b61e1dbacc6ebcd08e105d4df684f2cd13262d10ffb8b0794f39b3e490416530423da29406a6a4b5a356dc898052883f1e54fd041e5a82247a4bbb784ce30ce321a2805b28d30", 0xa1}, {&(0x7f0000001b80)="66a7d24b8451d3e0201a73aaabe1e3fe371dfbf029efdbc2de3742c687d72207cab9988bc15b9e27135be8e1d84bbeb01ccf943eb163a18b6a02c752c829c5f24ccd2c02f1c208e64deb4d916ff1727fe172", 0x52}, {&(0x7f0000001c00)="811e3e8966b4199496dc8329eca81fa24aedba0078949553b10b0df3cc25de83324cb3fb6672cbb763e260abad0adca5ab04cf5988b6c9a912e96ba01b3508998595bfad50323f42fa943adb8d0324801ae6efa1e3", 0x55}], 0x3}}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000002f00)="5f97b46d7adb8b68ff35da0f147fef1c6c6c60db5c1fb54496a27c9eeb14cf97ceed1ac5e9d95d093d6400f4996e3c5f73fa7edad49015f697bdc1a17f731cd7b4e404954a2fbc069f73e9fa86cab27babb16a9004571326e20d84cb662973ba616c4ba4126e45ad1a7230b6c86c600a3dd01872c0f5823fadc0eb8b73f3d98c63881cd2131d63411f51e40a122182507d2d4be44f5fdec44f415e3448ebda832a6831bbd48324e11fe96400d92fae40f4a9ed9f376c56e6c6c703fe76dac9c3b4aed05a81b2b2adadc3e2ba8fd5cfc361420e61014782eeb5a921fd042bdc9cbfff5dac3df5711d5710e1d0a11d6e637dddd79ccd700dbc4924e22f8a50f0f43b6082b706c748e6d552178aa8d5959d8a3a175bf1d2b61b363fbad94b53505fb7ac302a0dec14a19141120d958b484f6e5e6f087267680eecfc91d11295a6bbd062cb7c99299681481a9ee65f157852aa46b21936e52611dbd9a8019b7566ec79b5fe8db94259c20842af9384aaf33dfafd15bb97d051743f467399caa4ee74394664c3de94449b4597bb90787c75a468f320be5e8faa11d13b589231eca2f9f4072cd44f0a1cbc874233a71901f5e027fc301caeadbe77f76206257f006e483b6b78b9319b57399a0f736f01df368726ee362c6224aaef36cff42bf221a2e03fb153bcdc240b594b22a043adc163f9004ed1ef0f152f0d960a58a18d709236df500abd672436b916c67c7e6fe7508530fe05b040c7cbeb2645f43259f3a142583a3051ea146281b901f732ba819f84050007c5f07e3848ddb7de602171525c7df8427475137a845796f12214b69dc7fb8cd458e9f2fac518b9dc84da1a13d8e95eb32cf4c14d2647b6e8bd808a91d258da905bac6e87ef6485e19ba85442c12b15c2fe95f5da8fd93f3b0c080703626eb7213954f38bdb5806393b0394532a886d896bed1b964984ba35de5de4674eab5e97312b6331fec90b0e9ad08cbb564d73a0428a", 0x2c5}, {&(0x7f0000003f00)="1f4af8fed7be58fd8686039093816fed8bf780c28e9a3e381dc0823276cb353324cbbad17108c2ad8e4946bc715057581728500e074e757687d75fe12890941341bf811dbc105949cabdb27ed4ae27fe50777d312307fc0c04ab7f7d4f968803d5bc4b5cc680b3a19aaefaa9732507680a8a20e345a4b33dfa18ee960931a539ac0c2b4b612bb28ec51ff4eb27b2622fad3d3dcb03f588ffb8ccf60cb2a2911435c978591f348959cf65d98788", 0xad}, {&(0x7f0000004000)="e4a979bc13e5ab701983256e", 0xc}, {&(0x7f0000004080)="e3f6b565db913652c092094a86c4b5a91acd35f6ddc50b99965b4d30bd2f08fae8a65f51c43b04efe10753719f42e035c70becaf563fdba9d11ae1ea7b1455506195fc159029c2c154efe0d3c9c43212720fd37317f13a7d07338ff66b6e554923856d6fba076ff9c5bde30d552863729ab6ae67d9531250b7d00ec881d7fd18770f5f2f52521017188b8c7055", 0x8d}], 0x4}}], 0x4, 0x40000)

5m35.444316246s ago: executing program 47 (id=1978):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd49033000030020000000600000000004110081e949b93897bc3b0000070000007d01ff020000000000000000000000000001"], 0xfdef)

5m31.383963366s ago: executing program 48 (id=1997):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x01\xe1=\x8d\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x20000000, 0x0)

5m29.422752317s ago: executing program 49 (id=2008):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendmmsg$inet(r0, &(0x7f0000004240)=[{{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f00000011c0)="a2", 0x1}], 0x1}, 0xf0ff}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001780)="d1ef1bb59f70ec9b719b1589c8f3d0678afd96", 0x13}, {&(0x7f00000017c0)="dad5b14f2f8f950502cf2880", 0xc}, {&(0x7f0000001800)="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", 0xfa}, {&(0x7f0000001900)="8d70e326292a261d6ca941faf3", 0xd}], 0x4}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001ac0)="6c5b0b3e474f01bac640e7eb9064ec8e2ccac8b36c7d9ab464dc0bd7221bbae89e38ef0efc78f3e2f90e6236ad1ad1fb3dbd3e4fd8f2de84e526dfafb354837ff3958d97c8366471850ce9c14b83bb6e9a7c282a1d3e03cdfb675b61e1dbacc6ebcd08e105d4df684f2cd13262d10ffb8b0794f39b3e490416530423da29406a6a4b5a356dc898052883f1e54fd041e5a82247a4bbb784ce30ce321a2805b28d30", 0xa1}, {&(0x7f0000001b80)="66a7d24b8451d3e0201a73aaabe1e3fe371dfbf029efdbc2de3742c687d72207cab9988bc15b9e27135be8e1d84bbeb01ccf943eb163a18b6a02c752c829c5f24ccd2c02f1c208e64deb4d916ff1727fe172", 0x52}, {&(0x7f0000001c00)="811e3e8966b4199496dc8329eca81fa24aedba0078949553b10b0df3cc25de83324cb3fb6672cbb763e260abad0adca5ab04cf5988b6c9a912e96ba01b3508998595bfad50323f42fa943adb8d0324801ae6efa1e3", 0x55}], 0x3}}, {{0x0, 0x0, &(0x7f0000004180)=[{&(0x7f0000002f00)="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", 0x2c5}, {&(0x7f0000003f00)="1f4af8fed7be58fd8686039093816fed8bf780c28e9a3e381dc0823276cb353324cbbad17108c2ad8e4946bc715057581728500e074e757687d75fe12890941341bf811dbc105949cabdb27ed4ae27fe50777d312307fc0c04ab7f7d4f968803d5bc4b5cc680b3a19aaefaa9732507680a8a20e345a4b33dfa18ee960931a539ac0c2b4b612bb28ec51ff4eb27b2622fad3d3dcb03f588ffb8ccf60cb2a2911435c978591f348959cf65d98788", 0xad}, {&(0x7f0000004000)="e4a979bc13e5ab701983256e", 0xc}, {&(0x7f0000004080)="e3f6b565db913652c092094a86c4b5a91acd35f6ddc50b99965b4d30bd2f08fae8a65f51c43b04efe10753719f42e035c70becaf563fdba9d11ae1ea7b1455506195fc159029c2c154efe0d3c9c43212720fd37317f13a7d07338ff66b6e554923856d6fba076ff9c5bde30d552863729ab6ae67d9531250b7d00ec881d7fd18770f5f2f52521017188b8c7055", 0x8d}], 0x4}}], 0x4, 0x40000)

5m24.28312998s ago: executing program 50 (id=2017):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440)
ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000001600)={0x1, @raw_data="3455454dbfe142d4c7ec06d087a470aa3f6b56753db1148793aafae1c953d8ce7512c960575015c0a0c6f4f23fc68191f8d6362798531e15a728c74afe972b308c32fb47e17488d64753c131e77384f1b115ee5ee002d40faa7c68960bd4e2220a70f1adc3fbb820b8b79750dfdaf44533248842d527d0ce1dc748c152f139c3b001fe9ff9e46e7b00573324113ffb6540241200bf94ec83a1b376493e6acd02755371d5b21860da5442ec7a3f08bc3bf68f8c840981236bd70e69848a6fe62174d1766dc3e06b26"})

5m12.082160488s ago: executing program 51 (id=2026):
mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) (async)
mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0)
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10)

5m2.016355495s ago: executing program 52 (id=2040):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f40)=@acquire={0x128, 0x17, 0x1, 0xfbfffffe, 0x0, {{@in=@private=0xa0100ff}, @in=@broadcast, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x84}, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x10, 0x4, 0x2, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x4, 0x8000000, 0x9}, {0x10, 0x0, 0x0, 0xa}, 0x9, 0x6e6bba, 0x2}, 0x400}}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xfffffffffffffe03)
r2 = syz_open_dev$video4linux(&(0x7f0000001380), 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0x80085617, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)

1m55.944904722s ago: executing program 53 (id=3131):
socket$kcm(0xa, 0x3, 0x87)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
pselect6(0x40, &(0x7f0000000040)={0x7, 0x100000000, 0x100000000000000, 0x1, 0xfdb1, 0xc, 0x288100000400000b, 0x7}, 0x0, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003083a00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)

1m52.259265889s ago: executing program 54 (id=3144):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca00090506"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x40, 0xf, 0x40, {0x40, 0xd, "50a60dc0aa254059d69fd89ad74cce6914cc0c44ba34dfd43d03af379465576d8e0274d6f842e899b87dd9684109e40724a3c1c772091a12bf9b80adcade"}}, &(0x7f00000000c0)={0x0, 0x3, 0xde, @string={0xde, 0x3, "d6256f1ca1101f5313f9d12d01d5fed7f9f11c3c7ac86995a30540a8fb2b2d98e56390659f1096635cffb6a29267530f1e89ca134f9c2aeafd40e3a4e85090a9322a3ab076d5254bd4bce17ff082a93a6f33869b651a87a99dc391e9d2bd66eca9a60151b3769786c2fe4c4239e38dba7d4d40202813287535a84069502339183e7ba180ed8c5c748411ec530fba839d2ac79bb3beafa900b1877b35d627f87da5b4032867fc8d64eb21e6743bd49824f999e2069db5fea10f264bc963e93d859d5219b7a88ff606f65463043ba55a3a735dff2bdfe7bbc7c8859939"}}}, &(0x7f0000000580)={0x44, &(0x7f0000000240)={0x0, 0x18, 0x1c, "1cd75940ed59385925c70472e2ac3d0a70eb0c4c49a980286bde96d0"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xf7}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000300)={0x20, 0x81, 0x3, '-7?'}, &(0x7f0000000340)={0x20, 0x82, 0x1, '>'}, &(0x7f0000000380)={0x20, 0x83, 0x3, 'y59'}, &(0x7f00000003c0)={0x20, 0x84, 0x1, '*'}, &(0x7f0000000400)={0x20, 0x85, 0x3, "348b45"}})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m47.780056865s ago: executing program 55 (id=3158):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509"], 0x0)
syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r4, 0xffffffffffffffff, 0x0)
ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000140))
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002ec0)=ANY=[@ANYBLOB="6c17000040000200feffffff00000000017c0000040042801400018006000600800a000008001600", @ANYRESHEX, @ANYBLOB="0400028090133b80e010e38008006200", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="dd000300", @ANYRESDEC=r2, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0800ee800400be001000de800800f800", @ANYRES32, @ANYBLOB="040008809a03388060013e80287720b499dd0d795823a32d2a063f8a9352416597f7c91a6720fbdd1da8cf365fb5471a70254ac64ab611942ad10e0282e299a1d41d731c8180c649c814bed1c545a83ccb835855cbcd44b45631fecaafa95aad27b97b2f3242df4a4d1aaea18559e47b0f154a82f280c12a4fc70f5a06140900d6caebc680e2e6b1aaf1bdc127987f4b9f825ae1b3878d3f488d1f9ff7ced66a0400148008001400", @ANYRESDEC=r1, @ANYBLOB="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", @ANYRES32, @ANYBLOB="a2014180ded2bd45c3cfe761f2379a05f6b1abe95f7805b0e4a44c9218d542bee5402ae7e12dd8b4b11b1c16566fda162c5a416790085b403fca12d7ea996946e258386961e2bb83061115324be2910db14ba2a34435c1937acdd44f72c5d9907034093471d152271cb45bc44f4d6874e39fb810f3adfcbafab3fb1db1c06ebe6b4439fc1f4bc4cd157e9581d302e682796a418a0100dc60135ea1ee9959970e3ac388e23bf104cbb3da49068311818e4041788b1135835003adc2176f2b9452708aab7f155b2da43a3cf2f0ecaf19fe47dfe8ef3c8e82a9d53c7af3c033c36068c7650319da26c45a15e3eab014fda737f2eca7889847b9b74f1b511897d1a31fc95b7f9ef06b1dbe8bfe08aade712c36decf93ccbd627751101bff87198a3aab14d99f900c03ba7aa87b9bc76dacb6346ed75b84247f83980536081767a5a03ef1224b4fb13f1886854ccc536546ff77c91546f2ea61bdfe1d27d394eb6fabfc88cd946919c2f89f3c9a634a436a154e48330a98af0a93abeacc9bb53cf10b1d3d09e786423e4b53215facfddc6d8520da85a905abe81330f8708ee65e0400688000000000"], 0x176c}, 0x1, 0x0, 0x0, 0x48815}, 0x4000)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80000)
landlock_restrict_self(r5, 0x1)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r6, 0x400448ca, &(0x7f00000002c0))
r7 = socket$kcm(0x2, 0xa, 0x2)
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x0, 0xfffffffd}, 0x24)
write(r8, &(0x7f0000000100)="240000001a007f0214f9f407000904f702000000000000000002000008000f40fe00000e31", 0x25)
r9 = socket$inet(0x2, 0x3, 0x4)
r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000000)=0x7, 0x4)
setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000040), 0x4)
syz_usb_control_io$cdc_ncm(r10, 0x0, 0x0)
syz_usb_control_io(r10, 0x0, 0x0)
syz_usb_control_io$hid(r10, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="20ff07000000004e623b"], 0x0, 0x0, 0x0, 0x0})
setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10)
sendmmsg$inet(r9, &(0x7f00000016c0)=[{{&(0x7f0000000300)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0}}, {{&(0x7f0000000380)={0x2, 0x4e23, @broadcast}, 0x10, 0x0}}], 0x2, 0xe840)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})

1m35.076478958s ago: executing program 9 (id=3194):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r2)
ptrace$peeksig(0x4209, r2, &(0x7f0000000140), 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
mknodat(r0, &(0x7f0000000340)='./file0\x00', 0x80, 0x7)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x1)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
prlimit64(0xffffffffffffffff, 0x4, &(0x7f0000000040)={0x4, 0x5}, &(0x7f0000000080))

1m34.103940743s ago: executing program 9 (id=3226):
r0 = socket$inet(0x2, 0x3, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10)
sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f00000000c0)={0x2, 0x4e01, @local}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="3400001400000000", @ANYRES64=r0], 0x38}}], 0x1, 0x46000)

1m29.088707968s ago: executing program 4 (id=3258):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r2)
ptrace$peeksig(0x4209, r2, &(0x7f0000000140), 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
mknodat(r0, &(0x7f0000000340)='./file0\x00', 0x80, 0x7)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x1)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
prlimit64(0xffffffffffffffff, 0x4, &(0x7f0000000040)={0x4, 0x5}, &(0x7f0000000080))

1m26.547783742s ago: executing program 4 (id=3264):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000001c0)={0x1, 0x0, 0x0})
write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0f)

1m21.544132997s ago: executing program 5 (id=3273):
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@s={0x5, @generic=0x8, 0x11, 0xb})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x68000)

1m18.516943348s ago: executing program 56 (id=3226):
r0 = socket$inet(0x2, 0x3, 0x4)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='ip6_vti0\x00', 0x10)
sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f00000000c0)={0x2, 0x4e01, @local}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="3400001400000000", @ANYRES64=r0], 0x38}}], 0x1, 0x46000)

1m14.468623014s ago: executing program 57 (id=3249):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x103100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0xc0000100, 0x0, 0x2}]})
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00')
r4 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
r5 = syz_open_dev$swradio(&(0x7f0000000700), 0x1, 0x2)
preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000100)=""/200, 0xc8}], 0x1, 0x1000, 0x3f2f0fde)
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0)
syz_usb_ep_write(r4, 0x82, 0x0, 0x0)
lseek(r3, 0x0, 0x4)

1m12.624709217s ago: executing program 7 (id=3277):
prctl$PR_GET_SECUREBITS(0x1b)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt(r0, 0xff, 0x1ff, &(0x7f00000004c0)="bca954e0", 0x0)
mknod$loop(0x0, 0x6000, 0x1)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f001, 0x1})

1m12.542043744s ago: executing program 7 (id=3278):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x38, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x4}]}, 0x38}, 0x1, 0x0, 0x700, 0x4010}, 0x0)

1m12.41611296s ago: executing program 7 (id=3279):
syz_usb_connect(0x2, 0x5e, &(0x7f0000000080)=ANY=[@ANYBLOB="120100006b0500207b06a1279bb00102030109024c0001000010000904"], 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f0000000040)=0xffffffff)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0)
io_setup(0x7, &(0x7f0000000280)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000b40)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x8655, r2, 0x0}])
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x1c, 0x4, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0xa, 0x3, 0xff)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$inet6(r5, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0xa, 0x7, @mcast2}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="671723d7c6012c", 0x20}, {&(0x7f0000000280)="9e91d91a92dc7c8f2c658bb539e2ffb332c99223a7dfe52c1f51218206f5abfd2a", 0x21}], 0x2}, 0x20008b88)
read(r2, 0x0, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00')
pread64(r7, &(0x7f0000033240)=""/102385, 0x18ff1, 0x41e)
sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000003c0)=ANY=[], 0x28}], 0x1, 0x0, 0x0, 0x10000}, 0x0)

1m11.379435459s ago: executing program 58 (id=3264):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000001c0)={0x1, 0x0, 0x0})
write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0f)

1m10.903607093s ago: executing program 7 (id=3281):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r2)
ptrace$peeksig(0x4209, r2, &(0x7f0000000140), &(0x7f0000000a80))
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
mknodat(r0, &(0x7f0000000340)='./file0\x00', 0x80, 0x7)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x1)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
prlimit64(0xffffffffffffffff, 0x4, &(0x7f0000000040)={0x4, 0x5}, &(0x7f0000000080))

1m7.883250376s ago: executing program 7 (id=3282):
socket$can_j1939(0x1d, 0x2, 0x7)
socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a8894fb96648e582006e9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x40, 0x40, 0x10001, 0x4, {{0x24, 0x4, 0x3, 0x23, 0x90, 0x64, 0x0, 0x8, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x2f, 0xffffffffffffffff, [{0x6, 0x7, "1850a6861f"}, {0x6, 0x2}, {0x6, 0xc, "f78b12699e10ebd86425"}, {0x1, 0xc, "3429bfd62b646a65e184"}, {0x0, 0x8, "ec6ef53139a8"}]}, @lsrr={0x83, 0xf, 0xe4, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x30}, @broadcast]}, @timestamp_addr={0x44, 0x3c, 0x69, 0x1, 0xf, [{@dev={0xac, 0x14, 0x14, 0x24}, 0x5}, {@empty, 0xbf7}, {@multicast1, 0x4}, {@local, 0x6}, {@remote, 0x3}, {@private=0xa010102, 0x1000}, {@private=0xa010100, 0x3}]}]}}}}})
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f00000003c0)=0x1000, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14)
sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x88, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8080}, 0x4008000)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1m5.844374641s ago: executing program 59 (id=3273):
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@s={0x5, @generic=0x8, 0x11, 0xb})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x68000)

1m2.527357728s ago: executing program 3 (id=3284):
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'})
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000c80)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000d00)=[@assoc={0x18, 0x117, 0x4, 0xc4d}], 0x18, 0x4000}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000003c0)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x40, &(0x7f0000000100)=ANY=[])
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)

1m1.871954783s ago: executing program 3 (id=3285):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f00000010c0)={0x7, {"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", 0x1000}}, 0x1006)

1m1.810750581s ago: executing program 3 (id=3286):
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
ioctl$KVM_CLEAR_DIRTY_LOG(r0, 0xc018aec0, &(0x7f0000000200)={0x10003, 0x80, 0x200, &(0x7f00000006c0)=[0x6, 0x1, 0x32, 0x9, 0x8001, 0x4, 0x6, 0x4, 0xc, 0x1, 0xfa, 0xffff, 0x461c2e6c, 0x4, 0xd4a1, 0x639, 0x3, 0x2, 0x7ff, 0xff, 0x9, 0x200, 0x2, 0x6, 0x5, 0xfffffffffffffffe, 0x3, 0x8, 0x7, 0xf40, 0x8, 0xfffffffffffffff7, 0x2, 0x4a, 0x3, 0x7ed, 0x86c, 0x0, 0x100000001, 0x2, 0x3, 0x3, 0x8, 0xf, 0xfffffffffffffffc, 0x1, 0x0, 0x8001, 0xa6, 0x0, 0xc, 0x3, 0x8, 0xcf, 0x3, 0x0, 0xc, 0x5, 0x0, 0x0, 0x80000000, 0x8, 0xa73, 0x8, 0x0, 0x2, 0x6838, 0x0, 0x5, 0xe, 0x8, 0x8000000000000001, 0xa, 0x28000000000, 0x80000000, 0x0, 0xa, 0xffff, 0x0, 0x4, 0x80, 0x2, 0x6, 0x7, 0x9e, 0xffffffffffffff40, 0x3, 0x1, 0x3ff, 0x8, 0x9, 0x5, 0x401, 0x375, 0x800, 0xff, 0x4, 0x100000001, 0x0, 0x0, 0x3, 0x0, 0x4, 0xe, 0x2, 0x8, 0x3, 0x252, 0x6, 0x8, 0x100, 0xfffffffffffffffe, 0x0, 0x3, 0x7fff, 0x1, 0x100, 0x3, 0xb82, 0x5, 0x0, 0x4, 0x400, 0x80000000, 0x3, 0x8000000000000000, 0x5, 0x2]})
mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@local})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local, 0x6}, 0x400, "787c2ce2fba15d4e9f8e96bc11e2ca247a20c3e26661b174fe1825253be9e8480cb4f3524914f59ba189c1429727ef39b4164f93bb821987b3b7f73495bc8e745304668e0e46798c7f5917ea8428d41cab5612336f04000300000000008e9c1c86a394feb64fb06f77dadbcb20fc62741432b7dca37007d68e98fe46135d6a1c5ed42102f58daa5211319db84aa9abac734be47c908dc3ffa3aa7b61ec16d3d1209fc618f6c4532ea582628502ac46d167db6d53d8f3184df68414e6b6ec0109664c570e155654e03d58dadd0e5a7bab42bbb4a9afdefc115eb1609e7b50dbd94b94ba09000000000000001c9e4a41d3e16af21d6c897a1121bc14de16e78d6d7f2ae79db44e302539fd926e0b91e0fc589e2fa19b218d0508b5ce3ad40d03936693ca5aa41ddc07cf492874569ab037e0530e38245b98131ae0c9afd871df5f51331938764f5a7dd96890edd467b2fbc335ed081729b5ea722a98b34d0dac6de995de4ee263c81b2567b3f87e0897857edd5d7e97d61fc67076eab4846010d4828cc879f95cddb69ff6438f2a109285c46d8224c36069d30c3c9cf4a6800ae224111136bd9c1e06c4bfc4685d7bb6a72345772b3ce9bf105490743dc4b700f24ce6b250b95e6c383fe44967a55d140baf0ec339e3815b29a2246cb5c953048c43266485bbd9d0caecf00e9501a4433b54930cba54e06607ada2f5d818e4804294fcf53058e58e0d33d4aa6dc943811056908fe9116e65cdddac1d2fb24d1eacee389af38b7e5a7056d0de50c6b49fb38388cf28c2d6dd3dbbab84ffbef4b0c02a77f018e8a9749a557909e6aa96185d268dad7744b094d8c6134b89efe26674d65f908f9c3a8c201f661fc26efe0eff248d3a473fe32a5b3643bfad8f186c2af3fbaa1d38560c1244c79a0e48893eefb792af281650f34f6c2d9a6c622aba234b63586713cb66179a0897d98ee5228569c32c1a682807c8db7eb197ccbbd6549db86a6a9aebbf5dc14060f22e2b07d6166f43c25ae0c88be7a4dc38e7ed08972a355b0e5d6fc43b8e5594fa6b36a36a44bb94b75eaff11dc17105f54beda54da2a1ea1acfab354745057dd2e7725f2c8450b19fdf37e19f6ce43449e9191f5a5beb4a1bc176f6130052e83acefd8ff18d592bb75f15f86c9113e4bd67ad420c33ae706cdc10060277b83ef30a50d4ac19c9a791b309377aa20a4743bbb799abc3ba58071b628c9ba8103bbfe389939e55296ec9b4f8d3a03aff30ce9aa0dd6e5158a672be8f3da8349ed4ad82f6ca67ee29e8b234840cf7846e604e5b8135abd94d71fe0a79180e75d4e193ea8df466c087b660fe984943751a9f6df8545699701d478c2b3daa949155770e74835bcd972de27afd20b02ce0e504c15b0237437200"}, 0x418, 0x7fffffff})
ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r1, 0x7ac, &(0x7f0000000bc0)={0x0, 0x0, 0x9})
r2 = userfaultfd(0x801)
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r3, 0x29, 0x4, 0x0, 0x0)
readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4)
readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/79, 0x4f)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x10})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000b72000/0x400000)=nil, 0x400000}, 0x1})
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19)

1m1.436367563s ago: executing program 3 (id=3287):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, 0x0})
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="5800000012140100"], 0x58}, 0x1, 0x0, 0x0, 0x20004044}, 0x20000000)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f00000000c0), 0x10)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r2], 0x448}}, 0x0)
sendmmsg$inet(r2, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0)
r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x440000, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7})

1m1.217832895s ago: executing program 3 (id=3288):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r2)
ptrace$peeksig(0x4209, r2, &(0x7f0000000140), &(0x7f0000000a80))
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
mknodat(r0, &(0x7f0000000340)='./file0\x00', 0x80, 0x7)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x1)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
prlimit64(0xffffffffffffffff, 0x4, &(0x7f0000000040)={0x4, 0x5}, &(0x7f0000000080))

58.368912575s ago: executing program 3 (id=3292):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1}) (fail_nth: 90)

58.024339732s ago: executing program 8 (id=3295):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c40)={0x3c, r2, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x8040)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x40, 0x25, 0x109, 0x870bd22, 0xfffffff9, {0x17}, [@generic="125f4044d7e7fe54ed0b5ef3ea112b293d728f9b0ee2022b9207139d8f576884cb280746384a8a8ffffd"]}, 0x40}, 0x1, 0x0, 0x0, 0x1000c957}, 0x24000040)

57.965354347s ago: executing program 8 (id=3296):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, 0x0})
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="5800000012140100"], 0x58}, 0x1, 0x0, 0x0, 0x20004044}, 0x20000000)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f00000000c0), 0x10)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r2], 0x448}}, 0x0)
sendmmsg$inet(r2, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0)

57.875269637s ago: executing program 8 (id=3297):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, 0x0, 0x4000080)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000300000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0xc800)

57.732167076s ago: executing program 8 (id=3298):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$packet(0x11, 0x3, 0x300)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xec, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x300000000000000, 0x7ffffffe}, 0x2}, 0x1c)

57.67629278s ago: executing program 8 (id=3299):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r2)
ptrace$peeksig(0x4209, r2, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f0000000a80)=[{}])
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0)
mknodat(r0, &(0x7f0000000340)='./file0\x00', 0x80, 0x7)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x1)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
prlimit64(0xffffffffffffffff, 0x4, &(0x7f0000000040)={0x4, 0x5}, &(0x7f0000000080))

56.737510643s ago: executing program 8 (id=3302):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x34, r2, 0x205, 0x0, 0x2, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}]}, 0x34}}, 0x4000)
ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000000))
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0)
syz_usb_control_io$uac2(r3, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x0)
ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0305616, &(0x7f00000000c0)={0x0, @reserved})
ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f00000001c0)={0x2, 0x9db, 0x8d, &(0x7f0000000080)=""/141})
syz_open_dev$ptys(0xc, 0x3, 0x1)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000140)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}})

56.184439157s ago: executing program 2 (id=3306):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan1\x00', <r1=>0x0}) (async)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), r0)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x1c, r2, 0x5, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10)
r3 = socket(0x10, 0x3, 0x0)
sendto$inet6(r3, &(0x7f0000000280)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008200800000000000000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) (async)
r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f0000000080)=[@in_dx={0x69, 0x20, {0x15b3, 0x7}}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_create_vm={0x12d, 0x18, 0x2}, @code={0xa, 0x5b, {"0f239a6636260f30c442799ffd8f6978db49000f20c035200000000f22c0260f019b00400000f244a7c74424000b000000c7442402d6000000c7442406000000000f011424dacd0f2189"}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0xad, 0x1, 0x5, 0x1}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x9b, 0x2, 0x7, 0x3}}, @enable_nested={0x12c, 0x18}], 0x143})
ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0xc028ae92, &(0x7f0000000240)={0x29, 0x400})

56.08045446s ago: executing program 2 (id=3307):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x10507e, 0xa6)
io_setup(0x7d, &(0x7f0000000600)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0xfffffdff, 0x0, 0x1, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}])

55.965365792s ago: executing program 2 (id=3308):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000100)=0x479da00c16d2f605)
sendfile(r1, r0, &(0x7f0000000140)=0x6c3cc440, 0x1)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x4f, 0x1, 0x10, "0ba7dfad1cfbb5a12e6a2bdee79988ae2930351c4a0026d174932d4600"})

55.9079697s ago: executing program 2 (id=3309):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0x8001, 0x6, 0x1, 0x0, 0x2, 0xcc7, 0x8, 0x7, 0x654, 0x100, 0x80002, 0x1, 0x6, 0x4, 0x6, 0xffffffff, 0x1, 0x1a449, 0x6, 0x40000004, 0x89, 0x3, 0xf23, 0x6, 0x8, 0x8, 0x3, 0x8, 0x4, 0x10000, 0xfffffff8, 0x41]})

55.791834727s ago: executing program 2 (id=3310):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r2)
ptrace$peeksig(0x4209, r2, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f0000000a80)=[{}])
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0)
mknodat(r0, &(0x7f0000000340)='./file0\x00', 0x80, 0x7)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x1)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
prlimit64(0xffffffffffffffff, 0x4, &(0x7f0000000040)={0x4, 0x5}, &(0x7f0000000080))

53.358527162s ago: executing program 2 (id=3311):
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x0, 0x0, 0x2a9, 0x0, 0xf})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5de00987f70e06d038e7ff7fc6e5539b0d650e8b089b3f353b6e090890e0878f0e1ac6e7049b3b43959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8041800005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb0200000000000000aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82fb3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870900000000000000ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491230600000000000000e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d0bfa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d868420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0005000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276fbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3070054da9a050000004e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d49ffdac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c0150730100020000338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b5e3576a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd72583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eafb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f17b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607cbac2a3559ad4f75461f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd5644462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7d80965eae5c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f1900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e33319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de01bab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000005900000000d80a4fe654578376e599aff3565b1d531f30912b9945032681ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0ea8953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0009000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd9d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b8a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000002eec082d62b58df000000000000000000000000000000000000000000000000000100", 0x1000}}, 0x1006)
rt_sigqueueinfo(0x0, 0x4, &(0x7f0000000080)={0x34, 0x1, 0x100})
socket$inet6_udp(0xa, 0x2, 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b05000009058d67c0002a000009050502000000000009058b6e", @ANYRESOCT], 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x0, 0x0, 0x2a9, 0x0, 0xf}) (async)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
dup(r0) (async)
write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5de00987f70e06d038e7ff7fc6e5539b0d650e8b089b3f353b6e090890e0878f0e1ac6e7049b3b43959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07410936cd3b78130daa61d8e8041800005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb0200000000000000aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82fb3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870900000000000000ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491230600000000000000e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d0bfa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d868420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0005000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276fbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3070054da9a050000004e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d49ffdac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c0150730100020000338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b5e3576a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd72583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eafb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f17b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607cbac2a3559ad4f75461f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd5644462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7d80965eae5c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f1900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e33319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de01bab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000005900000000d80a4fe654578376e599aff3565b1d531f30912b9945032681ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0ea8953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0009000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd9d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b8a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000002eec082d62b58df000000000000000000000000000000000000000000000000000100", 0x1000}}, 0x1006) (async)
rt_sigqueueinfo(0x0, 0x4, &(0x7f0000000080)={0x34, 0x1, 0x100}) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b05000009058d67c0002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) (async)

52.340673811s ago: executing program 60 (id=3282):
socket$can_j1939(0x1d, 0x2, 0x7)
socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffffffffffffba, &(0x7f0000000080)=[{&(0x7f0000000500)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00b17d10cc40a8894fb96648e582006e9644fb02faf23884372d474d8235b094550aff7f", 0x33fe0}], 0x1}, 0x8000)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x40, 0x40, 0x10001, 0x4, {{0x24, 0x4, 0x3, 0x23, 0x90, 0x64, 0x0, 0x8, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x2f, 0xffffffffffffffff, [{0x6, 0x7, "1850a6861f"}, {0x6, 0x2}, {0x6, 0xc, "f78b12699e10ebd86425"}, {0x1, 0xc, "3429bfd62b646a65e184"}, {0x0, 0x8, "ec6ef53139a8"}]}, @lsrr={0x83, 0xf, 0xe4, [@rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x30}, @broadcast]}, @timestamp_addr={0x44, 0x3c, 0x69, 0x1, 0xf, [{@dev={0xac, 0x14, 0x14, 0x24}, 0x5}, {@empty, 0xbf7}, {@multicast1, 0x4}, {@local, 0x6}, {@remote, 0x3}, {@private=0xa010102, 0x1000}, {@private=0xa010100, 0x3}]}]}}}}})
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f00000003c0)=0x1000, 0x4)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14)
sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x88, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8080}, 0x4008000)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

43.007927371s ago: executing program 61 (id=3292):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r1, 0x0, 0x97, 0x8000000})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r1, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r1}) (fail_nth: 90)

40.937229504s ago: executing program 62 (id=3302):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x34, r2, 0x205, 0x0, 0x2, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}]}, 0x34}}, 0x4000)
ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000000))
r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0)
syz_usb_control_io$uac2(r3, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0)
r4 = syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x0)
ioctl$VIDIOC_S_DV_TIMINGS(r4, 0xc0305616, &(0x7f00000000c0)={0x0, @reserved})
ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f00000001c0)={0x2, 0x9db, 0x8d, &(0x7f0000000080)=""/141})
syz_open_dev$ptys(0xc, 0x3, 0x1)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000140)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}})

38.289826061s ago: executing program 63 (id=3311):
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x0, 0x0, 0x2a9, 0x0, 0xf})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006)
rt_sigqueueinfo(0x0, 0x4, &(0x7f0000000080)={0x34, 0x1, 0x100})
socket$inet6_udp(0xa, 0x2, 0x0)
syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b05000009058d67c0002a000009050502000000000009058b6e", @ANYRESOCT], 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x0, 0x0, 0x2a9, 0x0, 0xf}) (async)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
dup(r0) (async)
write$UHID_INPUT(r1, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) (async)
rt_sigqueueinfo(0x0, 0x4, &(0x7f0000000080)={0x34, 0x1, 0x100}) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b05000009058d67c0002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) (async)

30.560966704s ago: executing program 9 (id=3319):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r2)
ptrace$peeksig(0x4209, r2, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f0000000a80)=[{}])
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0)
mknodat(r0, &(0x7f0000000340)='./file0\x00', 0x80, 0x7)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x1)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
prlimit64(0xffffffffffffffff, 0x4, &(0x7f0000000040)={0x4, 0x5}, &(0x7f0000000080))

30.360086277s ago: executing program 1 (id=3360):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, 0x0})
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x15)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="5800000012140100"], 0x58}, 0x1, 0x0, 0x0, 0x20004044}, 0x20000000)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f00000000c0), 0x10)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r2], 0x448}}, 0x0)
sendmmsg$inet(r2, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0)

30.238138549s ago: executing program 1 (id=3361):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x2c000, 0x1000, 0x10, 0x1}, 0x20)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x406})

30.099942839s ago: executing program 1 (id=3362):
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './file0'}}, {@metacopy_on}, {@verity_off}], [], 0x2c})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000001c0)=0x3)
ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000100)={0xb6, 0x0, 0x6})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
setxattr(&(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000200)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0xffffffffffffff6f, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0), 0x2, &(0x7f0000001a00)=ANY=[@ANYRES32=r2], 0x10b8}, 0x106)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58)
r5 = accept$alg(r4, 0x0, 0x0)
sendmmsg$alg(r5, &(0x7f00000000c0), 0x4924b01, 0xe897)
accept4(r5, 0x0, 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2002, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r8, 0x640a4000)
r9 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r9, 0x107, 0xc, &(0x7f0000000200)=0x5, 0x4)
syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000102505a1a440000010010109024400010100000009041b00120206"], 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)
r11 = ioctl$KVM_GET_STATS_FD_cpu(r10, 0xaece)
preadv(r11, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/121, 0x79}, {0x0, 0x500}], 0x2, 0x971, 0x0)
recvmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40002042)

27.716302871s ago: executing program 9 (id=3367):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000001880)={'pcm3724\x00', [0x9, 0x3, 0x4000000, 0x10, 0x3, 0xcc7, 0xc9, 0x5c952399, 0xb, 0x3ff, 0x802, 0x9, 0x1, 0x8000, 0xf06a, 0x0, 0x1, 0x7, 0xfffffff4, 0x10000, 0x2f000000, 0xfffffffd, 0xfffffffa, 0xfffffff5, 0x8, 0x3, 0x100004, 0x202, 0x200, 0x2]})

26.932888396s ago: executing program 1 (id=3374):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0)
sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x58, r1, 0x1, 0x70bd27, 0x25dfdbfa, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x1c, 0x8041}, 0x8054)

26.901138416s ago: executing program 1 (id=3375):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r2)
ptrace$peeksig(0x4209, r2, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f0000000a80)=[{}])
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
mknodat(r0, 0x0, 0x80, 0x7)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x1)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
prlimit64(0xffffffffffffffff, 0x4, &(0x7f0000000040)={0x4, 0x5}, &(0x7f0000000080))

25.952506032s ago: executing program 1 (id=3379):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r0, 0x2285, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x7}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0xffff}, {}, {}, @quote}], 0x38)
write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {0x10}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xc4)
write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4)
write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54)
write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x4}, {}, {}, @result}, {0x0, 0xfd, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0xfd, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick=0x40000, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time={0x32}, {}, {0xd}, @time=@time={0x100, 0x2}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4)
write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c)
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54)
write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4)
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c)
write$sndseq(r1, &(0x7f0000000540)=[{0x2, 0x40, 0x4, 0x2, @tick=0x8, {0x3, 0x7}, {0x3, 0x4}, @quote={{0x7, 0x5}, 0x3}}, {0x7, 0x8, 0x0, 0x8, @time={0x8, 0x29c}, {0x8}, {0x2, 0x9}, @control={0x6, 0x9, 0x6}}, {0x66, 0xfc, 0x98, 0x81, @time={0x6, 0x3}, {0x3, 0x6}, {0x7f, 0xc}, @connect={{0x3c}, {0x5, 0x7}}}, {0x9, 0xd, 0x9, 0x9, @tick=0x9, {0x40, 0x6}, {0x7}, @addr={0x6, 0xbc}}, {0x81, 0x9, 0x1, 0x6, @time={0xa, 0x9}, {0x80, 0x7}, {0x4, 0x2}, @control={0x0, 0x6, 0x6}}], 0x8c)
write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time={0x0, 0xd000000}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time={0x7f, 0x4}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0x9, 0x308}, {}, {0xfd}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c)

25.375847093s ago: executing program 6 (id=3383):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x1100, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff060002000800395032303030"], 0x15)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)

25.357674385s ago: executing program 6 (id=3384):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(0xffffffffffffffff, &(0x7f0000000080)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x2, 0x1, 0x18, 0x68, 0x0, 0x5, 0x6, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xb}, {[@timestamp={0x44, 0x4, 0x40}]}}, {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x1, 0xa, 0x0, 0x8}}}}, 0x3a)

25.239104808s ago: executing program 6 (id=3385):
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000b80)={0x48})
r1 = socket(0x10, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0xdb0e6363c0599da}, 0x4000000)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000043000100000000000000000002004000140001"], 0x28}}, 0x0)
ioctl$OCFS2_IOC_GROUP_ADD(0xffffffffffffffff, 0x40186f02, &(0x7f0000000000)={0x0, 0x40000, 0x2, 0x2})
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x14, 0x1, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000800)

25.148252496s ago: executing program 6 (id=3386):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, 0x0})
socket$nl_rdma(0x10, 0x3, 0x14)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f00000000c0), 0x10)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x448}}, 0x0)
sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0)

25.13183647s ago: executing program 6 (id=3387):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r2)
ptrace$peeksig(0x4209, r2, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f0000000a80)=[{}])
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
mknodat(r0, 0x0, 0x80, 0x7)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x1)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
prlimit64(0xffffffffffffffff, 0x4, &(0x7f0000000040)={0x4, 0x5}, &(0x7f0000000080))

22.729486014s ago: executing program 6 (id=3397):
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
kexec_load(0x0, 0x1, &(0x7f0000000480)=[{0x0, 0x0, 0x12008000, 0x1008000}], 0x3e00)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil)
syz_open_procfs(0x0, &(0x7f0000000200)='net\x00')
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x47c94)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x1)

19.632080677s ago: executing program 0 (id=3401):
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000680)={0x0, 0xe, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) (async)
r1 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0) (async)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0) (async)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$sierra_net(r1, 0x0, 0x0)
syz_usb_control_io$sierra_net(r1, 0x0, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$rtl8150(r1, 0x0, 0x0) (async)
syz_usb_control_io$rtl8150(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000ff000040720501cb6526010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c}}}, 0x0) (async)
syz_usb_control_io$uac1(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c}}}, 0x0)
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000900)={0x14, &(0x7f0000000800)={0x20, 0x23, 0x90, {0x90, 0x23, "85bf4f6a672907566f5865cf6864d613a6a9a34c02c898e60d4ab4d9698d54ed05780d6d0f1d54eed39901c93b3be0c444375ae3792f2fdd0a68cadef44cf9edb27e51006614cde9a56fceeb90a596882e43deaa1063654486281e38eda1f2bcd25ae5e186fe47b3151137262aa4ae7962897ef7ffb6a56b7bdbcceb3c93275ef9497bffcecedf16da970789f644"}}, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000a00)={0x1c, &(0x7f0000000940)={0x40, 0x1, 0x17, "5c30688268f44c5351f13d13d7024af85fe395d9472499"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x3f}})
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
shutdown(r3, 0x0)
close_range(r3, r3, 0x0)
syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)={0x40, 0xf}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1e}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)={0x40, 0xf}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x1e}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, &(0x7f0000000240)={0x2c, &(0x7f0000000100)={0x0, 0x3, 0x81, {0x81, 0x7, "ada0e109fc3b1ab3065c36b6f4c214b47e055ff1867dd72f965474e1f42571ca4c21b5f9735f506c631ab5d66bf5fdbd86790c95030d8d93db00ced37f27d01926a1b2c814a1dc17abc0a0490675ba69d33ed5c6af5b94072a20ec86d4601cfbe7136619cd0fc29281127781560246b07b1b4e6f9d10be676eac934b3f4711"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x810}}, 0xfffffffffffffffe, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x2, 0x7, 0x28, "4d3765e5", "08fa5a30"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x1b, 0x90, 0x3, 0x1, 0x7, 0x8}}}, &(0x7f0000000740)={0x84, &(0x7f00000002c0)={0x40, 0xf, 0x78, "c69890438c4171b9054d8440758898525edf8b27e52c5c718f30862e31c41d3d8a1b537dc4991e1930fd14992920d3c210385269ed35a4c78dcd71d3cf873d06344df5f29f10084288be25fc48d633604b0ef43c307cecf1fbce6d505d8e9cddc35ac36bf3c26d0e623be67da681a10224edc4279efed359"}, &(0x7f0000000340)={0x0, 0xa, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x100, 0x2}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0xff}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "e762"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000540)={0x40, 0x13, 0x6, @local}, &(0x7f0000000580)={0x40, 0x17, 0x6, @remote}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "e635"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x2}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0xf7}}) (async)
syz_usb_control_io(r1, &(0x7f0000000240)={0x2c, &(0x7f0000000100)={0x0, 0x3, 0x81, {0x81, 0x7, "ada0e109fc3b1ab3065c36b6f4c214b47e055ff1867dd72f965474e1f42571ca4c21b5f9735f506c631ab5d66bf5fdbd86790c95030d8d93db00ced37f27d01926a1b2c814a1dc17abc0a0490675ba69d33ed5c6af5b94072a20ec86d4601cfbe7136619cd0fc29281127781560246b07b1b4e6f9d10be676eac934b3f4711"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x810}}, 0xfffffffffffffffe, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x2, 0x7, 0x28, "4d3765e5", "08fa5a30"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x1b, 0x90, 0x3, 0x1, 0x7, 0x8}}}, &(0x7f0000000740)={0x84, &(0x7f00000002c0)={0x40, 0xf, 0x78, "c69890438c4171b9054d8440758898525edf8b27e52c5c718f30862e31c41d3d8a1b537dc4991e1930fd14992920d3c210385269ed35a4c78dcd71d3cf873d06344df5f29f10084288be25fc48d633604b0ef43c307cecf1fbce6d505d8e9cddc35ac36bf3c26d0e623be67da681a10224edc4279efed359"}, &(0x7f0000000340)={0x0, 0xa, 0x1}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x100, 0x2}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x5}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0xff}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "e762"}, &(0x7f0000000500)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000540)={0x40, 0x13, 0x6, @local}, &(0x7f0000000580)={0x40, 0x17, 0x6, @remote}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "e635"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x2}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0xff}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0xf7}})
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
ioctl$KVM_CAP_MSR_PLATFORM_INFO(r0, 0x4068aea3, &(0x7f0000000000)={0x9f, 0x0, 0x1})

16.617824398s ago: executing program 0 (id=3402):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0xf0ff, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000380)={@flat=@handle={0x73682a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@handle={0x73682a85, 0x101}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

16.57379806s ago: executing program 0 (id=3403):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000700000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0xc800)

16.480651723s ago: executing program 0 (id=3404):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, 0x0})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f00000000c0), 0x10)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x448}}, 0x0)
sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0)

16.447136915s ago: executing program 0 (id=3405):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r2)
ptrace$peeksig(0x4209, r2, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f0000000a80)=[{}])
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
mknodat(r0, 0x0, 0x80, 0x7)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x1)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
prlimit64(0xffffffffffffffff, 0x4, &(0x7f0000000040)={0x4, 0x5}, &(0x7f0000000080))

13.985894345s ago: executing program 0 (id=3406):
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_sniff_subrate={{0x2e, 0xb}, {0x4, 0xc9, 0x5, 0x0, 0x8, 0x9}}}, 0xe)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2)

11.943545443s ago: executing program 64 (id=3367):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000001880)={'pcm3724\x00', [0x9, 0x3, 0x4000000, 0x10, 0x3, 0xcc7, 0xc9, 0x5c952399, 0xb, 0x3ff, 0x802, 0x9, 0x1, 0x8000, 0xf06a, 0x0, 0x1, 0x7, 0xfffffff4, 0x10000, 0x2f000000, 0xfffffffd, 0xfffffffa, 0xfffffff5, 0x8, 0x3, 0x100004, 0x202, 0x200, 0x2]})

10.90949936s ago: executing program 65 (id=3379):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r0, 0x2285, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x7}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0xffff}, {}, {}, @quote}], 0x38)
write$sndseq(r1, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {0x10}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfd}, {}, @connect}], 0xc4)
write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x8}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control={0x6, 0x7fff, 0x8}}, {0x0, 0x0, 0x0, 0x0, @time={0xffffff81}, {}, {}, @time=@time}], 0xc4)
write$sndseq(r1, &(0x7f0000002840)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}], 0x54)
write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time={0x0, 0x4}, {}, {}, @result}, {0x0, 0xfd, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0xfd, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick=0x40000, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time={0x32}, {}, {0xd}, @time=@time={0x100, 0x2}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4)
write$sndseq(r1, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @tick=0x8}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c)
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0x54)
write$sndseq(r1, &(0x7f0000000f80)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}, {}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xc4)
write$sndseq(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}], 0x8c)
write$sndseq(r1, &(0x7f0000000540)=[{0x2, 0x40, 0x4, 0x2, @tick=0x8, {0x3, 0x7}, {0x3, 0x4}, @quote={{0x7, 0x5}, 0x3}}, {0x7, 0x8, 0x0, 0x8, @time={0x8, 0x29c}, {0x8}, {0x2, 0x9}, @control={0x6, 0x9, 0x6}}, {0x66, 0xfc, 0x98, 0x81, @time={0x6, 0x3}, {0x3, 0x6}, {0x7f, 0xc}, @connect={{0x3c}, {0x5, 0x7}}}, {0x9, 0xd, 0x9, 0x9, @tick=0x9, {0x40, 0x6}, {0x7}, @addr={0x6, 0xbc}}, {0x81, 0x9, 0x1, 0x6, @time={0xa, 0x9}, {0x80, 0x7}, {0x4, 0x2}, @control={0x0, 0x6, 0x6}}], 0x8c)
write$sndseq(r1, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time={0x0, 0xd000000}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time={0x7f, 0x4}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0x9, 0x308}, {}, {0xfd}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}], 0x8c)

6.873254188s ago: executing program 66 (id=3397):
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0)
kexec_load(0x0, 0x1, &(0x7f0000000480)=[{0x0, 0x0, 0x12008000, 0x1008000}], 0x3e00)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil)
syz_open_procfs(0x0, &(0x7f0000000200)='net\x00')
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)}, 0x47c94)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x1)

2.365928661s ago: executing program 4 (id=3407):
socket$kcm(0xa, 0x3, 0x87)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
pselect6(0x40, &(0x7f0000000040)={0x7, 0x100000000, 0x100000000000000, 0x1, 0xfdb1, 0xc, 0x288100000400000b, 0x5}, 0x0, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000001203088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)

1.721027865s ago: executing program 5 (id=3408):
capset(&(0x7f00000001c0)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xfffffffe}) (async)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"])
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000100)={<r2=>0x0, 0x9}, &(0x7f0000000140)=0x8)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x20012122, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x1, @link_local, 'vlan0\x00'}}, 0x80)
r3 = socket(0x10, 0x6, 0x0)
syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) (async)
sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) (async)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x1, 0x0, 0x10000, 0x184, r2}, 0x10)
listen(r1, 0x0) (async)
setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000040), 0x4) (async)
mkdir(&(0x7f0000000000)='./file0\x00', 0x20) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$tipc(0x1e, 0x5, 0x0) (async)
socket$tipc(0x1e, 0x2, 0x0) (async)
creat(&(0x7f0000001380)='./file0\x00', 0x4) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
socket$can_j1939(0x1d, 0x2, 0x7)
pipe2(&(0x7f00000003c0), 0x0) (async)
r4 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82002)
close(r4) (async)
sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)={0x1d4, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfd92}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xdd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffd}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff01}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xaa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x119}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x55}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xab4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc0000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfd0}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}]}, @TIPC_NLA_NODE={0x4}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x40018}, 0x4000080) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket$igmp6(0xa, 0x3, 0x2) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r5], 0xc4}}, 0x0)

1.569184127s ago: executing program 5 (id=3410):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r3=>r0, {0x5}}, './file0\x00'})
setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000040)=0x4, 0x4)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="88000000", @ANYRES16=r1, @ANYBLOB="050026bd707dd2c8ba5441bbfe0008000300", @ANYRES32=r2, @ANYBLOB="4c000e0080000000ffffffffffff08021100000008021100000000000000000000000000640001002d1a01001d00000000000000a60200fe0004000000000009000000037206030303030303080026006c09"], 0x88}}, 0x20000014)

1.425513981s ago: executing program 5 (id=3411):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, 0x0, 0x4000080)
socket$inet6_udp(0xa, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000011300000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0xc800)

1.252665019s ago: executing program 4 (id=3412):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x1400, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff060002000800395032303030"], 0x15)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)

1.25246187s ago: executing program 5 (id=3413):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000001c0)={0x0, 0x0, 0x0})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f00000000c0), 0x10)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x448}}, 0x0)
sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0)

1.153632758s ago: executing program 4 (id=3414):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
timer_create(0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r2)
ptrace$peeksig(0x4209, r2, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f0000000a80)=[{}])
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
mknodat(r0, &(0x7f0000000340)='./file0\x00', 0x80, 0x7)
r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x1)
ioctl$TIOCVHANGUP(r4, 0x5437, 0x0)
prlimit64(0xffffffffffffffff, 0x4, &(0x7f0000000040)={0x4, 0x5}, &(0x7f0000000080))

1.107928411s ago: executing program 5 (id=3415):
socket$can_j1939(0x1d, 0x2, 0x7)
r0 = syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0)
ioctl$LOOP_SET_FD(r0, 0xc0045003, 0xffffffffffffffff)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x4, 0x77110f4f, 0x9a64, 0x8000, 0x200, 0xffeffffa, 0x0, 0x0, 0x10, 0x103}}, 0x50)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x40)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000280), 0x200040)
r1 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102460109022d0001000000000904000003030000000905be3b"], 0x0)
syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000a00)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="200600010000dbf8e83ca741399a68b07c9e6f03c600bea9854eda431ae73f6c5a07f8396f4694fb99dcf5ca04b063a41489ab15217460acded74d3658dc8ebbb1ba77e388acfb89ae6c29a7dc3af1fb4fd394fbe6711f42120f105b52dcf0736812aaf6160183aaa93083fa2e5787515acd5951de4c60a807493ac017689893021f2a02ab024f399aa65e47f084bc4c11a19bae6538460e749ab21bb4315380044e19db918056799742f4a7f2750e15a6383b90d0018b5ac603a4f030544c763680bffca49ed329c4fe49889ac743f54e5cede6b9d68b2eee42bca4c84b48be7cb29a70ac99a704c9cc021f8c8da0ab"], 0x0, 0x0, 0x0, 0x0})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, &(0x7f0000000200)={0x14, 0x0, 0x0}, &(0x7f0000000440)={0x34, &(0x7f0000000240)={0x0, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x80, 0x0)
unshare(0x2040400)
mq_timedsend(r3, 0x0, 0x0, 0x6, 0x0)
mq_timedreceive(r3, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0)
ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f00000003c0)={0x8, 0x9})
lseek(r4, 0x405, 0x1)
syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000300000010392a8c3f4000010203010902600003010910040904000000010100000a240100000a000201020904010000010200000904010101010200000905010900040601080725010000ef660904020000010200000904020101010200000905820908000501090725010407eeff"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})

128.409129ms ago: executing program 4 (id=3416):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x2c000, 0x1000, 0x10, 0x1}, 0x20)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000})

0s ago: executing program 7 (id=3409):
r0 = userfaultfd(0x80801)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f00000000c0)=ANY=[])
read$FUSE(r2, &(0x7f000000c3c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f00000001c0)={0x50, 0x0, r3, {0x7, 0x1f, 0x9, 0x10001100, 0x40, 0x5, 0x6, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x20, 0x0, 0x3, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x22801, 0x4)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38010000100013070000000000000000ff0100000000000000000000000000010000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000000000000000000000000000000001001ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000004000000000000000000000025bd700000000000020000006e000000000000004800010078636263286165732900"/240], 0x138}}, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffe, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x4, 0xfffffffffffffffd, 0x5, 0xf3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x6, 0x0, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x3486, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x4, 0x0, 0x20000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79a2, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4a44e74b]})
r6 = eventfd(0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$AUTOFS_IOC_PROTOVER(r4, 0x80049363, &(0x7f0000000600))
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000300)=r6)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r6})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000880)=""/99, &(0x7f0000000800)=""/90})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0xfffffffe)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x54})
r7 = userfaultfd(0x801)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f0000000100)={{&(0x7f000050c000/0x3000)=nil, 0x3000}, 0x1})
ioctl$UFFDIO_CONTINUE(r7, 0xc020aa07, &(0x7f00000005c0)={{&(0x7f0000a7d000/0x2000)=nil, 0x2000}})
madvise(&(0x7f0000d9c000/0x1000)=nil, 0x1000, 0x17)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})

kernel console output (not intermixed with test programs):

e
[  684.116510][T20190] veth1_macvtap: entered promiscuous mode
[  684.156861][T20190] batman_adv: batadv0: Interface activated: batadv_slave_0
[  684.182516][T20190] batman_adv: batadv0: Interface activated: batadv_slave_1
[  684.206006][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  684.228619][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  684.240821][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  684.254710][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  684.425485][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  684.452731][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  684.510405][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  684.520283][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  684.889398][ T5160] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  684.898406][T10063] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[  684.913136][ T5160] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  684.936898][ T5160] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  684.953519][ T5160] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  684.965933][ T5160] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  685.079265][T10063] usb 6-1: Using ep0 maxpacket: 32
[  685.089174][T10063] usb 6-1: config 0 has an invalid interface number: 85 but max is 0
[  685.112647][T10063] usb 6-1: config 0 has no interface number 0
[  685.125384][T10063] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  685.147653][T10063] usb 6-1: config 0 interface 85 has no altsetting 0
[  685.173552][T10063] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  685.192516][T10063] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  685.215793][T10063] usb 6-1: Product: syz
[  685.229340][T10063] usb 6-1: Manufacturer: syz
[  685.239890][T10063] usb 6-1: SerialNumber: syz
[  685.247855][ T5160] Bluetooth: hci2: command tx timeout
[  685.264875][T10063] usb 6-1: config 0 descriptor??
[  685.517844][   T30] audit: type=1326 audit(1773810817.185:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20295 comm="syz.4.3185" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f283699c799 code=0x0
[  685.684413][T20298] chnl_net:caif_netlink_parms(): no params data found
[  685.736439][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[  685.743004][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[  685.896870][T10063] appletouch 6-1:0.85: Geyser mode initialized.
[  685.924021][T10063] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input142
[  685.952052][T20298] bridge0: port 1(bridge_slave_0) entered blocking state
[  685.989370][T20298] bridge0: port 1(bridge_slave_0) entered disabled state
[  686.020253][T20298] bridge_slave_0: entered allmulticast mode
[  686.049292][T20298] bridge_slave_0: entered promiscuous mode
[  686.102202][T20298] bridge0: port 2(bridge_slave_1) entered blocking state
[  686.136446][T20298] bridge0: port 2(bridge_slave_1) entered disabled state
[  686.164970][T20298] bridge_slave_1: entered allmulticast mode
[  686.174085][T10063] usb 6-1: USB disconnect, device number 34
[  686.180189][    C0] appletouch 6-1:0.85: atp_complete: usb_submit_urb failed with result -19
[  686.198006][T20298] bridge_slave_1: entered promiscuous mode
[  686.254799][T10063] appletouch 6-1:0.85: input: appletouch disconnected
[  686.324612][T20298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  686.380341][T20298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  686.434187][T20298] team0: Port device team_slave_0 added
[  686.448130][T20298] team0: Port device team_slave_1 added
[  686.495985][T20298] batman_adv: batadv0: Adding interface: batadv_slave_0
[  686.503225][T20298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  686.542872][T20298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  686.587626][T20298] batman_adv: batadv0: Adding interface: batadv_slave_1
[  686.605011][T20298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  686.658860][T20298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  686.773769][ T1172] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  686.851103][T20298] hsr_slave_0: entered promiscuous mode
[  686.866923][T20298] hsr_slave_1: entered promiscuous mode
[  686.875324][T20298] debugfs: 'hsr0' already exists in 'hsr'
[  686.881788][T20298] Cannot create hsr debugfs directory
[  686.915513][ T1172] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  687.028964][ T5844] Bluetooth: hci3: command tx timeout
[  687.037727][ T5842] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  687.049243][ T1172] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  687.153979][ T1172] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  687.200000][ T5842] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  687.227588][ T5842] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  687.246924][ T5842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  687.257421][ T5842] usb 6-1: SerialNumber: syz
[  687.344219][ T5844] Bluetooth: hci2: command tx timeout
[  687.727189][ T5844] Bluetooth: hci5: command 0x1003 tx timeout
[  687.730058][ T5160] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  688.104010][ T5842] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71
[  688.143864][ T5842] usb 6-1: USB disconnect, device number 35
[  688.880410][T20416] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  689.000351][T20424] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3192'.
[  689.087903][ T5160] Bluetooth: hci3: command tx timeout
[  689.417687][ T5160] Bluetooth: hci2: command tx timeout
[  689.489372][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  689.512128][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  689.521108][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  689.533214][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  689.542776][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  689.763258][ T1172] bridge_slave_1: left allmulticast mode
[  689.793479][ T1172] bridge_slave_1: left promiscuous mode
[  689.816911][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state
[  689.845992][  T808] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  689.882455][ T1172] bridge_slave_0: left allmulticast mode
[  689.896817][ T1172] bridge_slave_0: left promiscuous mode
[  689.914199][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state
[  689.922026][  T808] hid-generic 0000:0000:0000.001F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  689.978982][   T30] audit: type=1326 audit(1773810821.645:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20426 comm="syz.4.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283699c799 code=0x7fc00000
[  690.048183][   T30] audit: type=1326 audit(1773810821.665:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20426 comm="syz.4.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f283699c799 code=0x7fc00000
[  690.110851][   T30] audit: type=1326 audit(1773810821.665:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20426 comm="syz.4.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283699c799 code=0x7fc00000
[  690.177909][   T30] audit: type=1326 audit(1773810821.665:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20426 comm="syz.4.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283699c799 code=0x7fc00000
[  690.228117][   T30] audit: type=1326 audit(1773810821.665:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20426 comm="syz.4.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283699c799 code=0x7fc00000
[  690.285317][   T30] audit: type=1326 audit(1773810821.665:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20426 comm="syz.4.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283699c799 code=0x7fc00000
[  690.355764][   T30] audit: type=1326 audit(1773810821.665:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20426 comm="syz.4.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283699c799 code=0x7fc00000
[  690.391078][   T30] audit: type=1326 audit(1773810821.665:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20426 comm="syz.4.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283699c799 code=0x7fc00000
[  690.480785][   T30] audit: type=1326 audit(1773810821.665:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20426 comm="syz.4.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283699c799 code=0x7fc00000
[  690.528740][   T30] audit: type=1326 audit(1773810821.665:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20426 comm="syz.4.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283699c799 code=0x7fc00000
[  690.551875][   T30] audit: type=1326 audit(1773810821.665:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20426 comm="syz.4.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283699c799 code=0x7fc00000
[  690.576913][   T30] audit: type=1326 audit(1773810821.665:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20426 comm="syz.4.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283699c799 code=0x7fc00000
[  690.600378][   T30] audit: type=1326 audit(1773810821.665:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20426 comm="syz.4.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283699c799 code=0x7fc00000
[  690.624002][   T30] audit: type=1326 audit(1773810821.665:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20426 comm="syz.4.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283699c799 code=0x7fc00000
[  690.647786][   T30] audit: type=1326 audit(1773810821.665:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20426 comm="syz.4.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283699c799 code=0x7fc00000
[  690.670909][   T30] audit: type=1326 audit(1773810821.665:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20426 comm="syz.4.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283699c799 code=0x7fc00000
[  690.695828][   T30] audit: type=1326 audit(1773810821.665:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20426 comm="syz.4.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283699c799 code=0x7fc00000
[  690.722671][   T30] audit: type=1326 audit(1773810821.665:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20426 comm="syz.4.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283699c799 code=0x7fc00000
[  690.746271][   T30] audit: type=1326 audit(1773810821.665:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20426 comm="syz.4.3193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f283699c799 code=0x7fc00000
[  690.775490][ T1172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  690.789596][ T1172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  690.800437][ T1172] bond0 (unregistering): Released all slaves
[  691.167350][ T5844] Bluetooth: hci3: command tx timeout
[  691.510462][  T808] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[  691.654121][ T5844] Bluetooth: hci4: command tx timeout
[  691.679923][  T808] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  691.716712][  T808] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  691.730452][  T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  691.742952][  T808] usb 5-1: SerialNumber: syz
[  691.798659][ T1172] hsr_slave_0: left promiscuous mode
[  691.813938][ T1172] hsr_slave_1: left promiscuous mode
[  691.826486][ T1172] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  691.850879][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_0
[  691.868683][ T1172] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  691.886439][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_1
[  691.963391][ T1172] veth1_macvtap: left promiscuous mode
[  691.978306][ T1172] veth0_macvtap: left promiscuous mode
[  691.988475][ T1172] veth1_vlan: left promiscuous mode
[  691.999465][ T1172] veth0_vlan: left promiscuous mode
[  692.558687][ T1172] team0 (unregistering): Port device team_slave_1 removed
[  692.591906][  T808] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71
[  692.630647][ T1172] team0 (unregistering): Port device team_slave_0 removed
[  692.641407][  T808] usb 5-1: USB disconnect, device number 92
[  693.178150][   T24] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  693.261184][ T5844] Bluetooth: hci3: command tx timeout
[  693.347426][   T24] usb 6-1: too many configurations: 151, using maximum allowed: 8
[  693.419436][   T24] usb 6-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7
[  693.428945][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130
[  693.444047][   T24] usb 6-1: Product: syz
[  693.451674][   T24] usb 6-1: Manufacturer: syz
[  693.478985][   T24] usb 6-1: SerialNumber: syz
[  693.491452][   T24] usb 6-1: config 0 descriptor??
[  693.638958][T11013] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[  693.727472][ T5844] Bluetooth: hci4: command tx timeout
[  693.785589][T20437] chnl_net:caif_netlink_parms(): no params data found
[  693.807553][T11013] usb 5-1: Using ep0 maxpacket: 32
[  693.832633][T11013] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[  693.845884][T11013] usb 5-1: config 0 has no interface number 0
[  693.845964][T20298] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  693.856688][  T808] usb 6-1: USB disconnect, device number 36
[  693.865153][T11013] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  693.889886][T11013] usb 5-1: config 0 interface 85 has no altsetting 0
[  693.908745][T11013] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  693.922840][T11013] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  693.932519][T11013] usb 5-1: Product: syz
[  693.936719][T11013] usb 5-1: Manufacturer: syz
[  693.943428][T11013] usb 5-1: SerialNumber: syz
[  693.949840][T20298] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  693.958306][T11013] usb 5-1: config 0 descriptor??
[  694.021574][T20298] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  694.096084][T20298] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  694.311567][ T1172] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  694.368618][T11013] appletouch 5-1:0.85: Geyser mode initialized.
[  694.386689][T11013] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input143
[  694.470465][T20437] bridge0: port 1(bridge_slave_0) entered blocking state
[  694.500747][T20437] bridge0: port 1(bridge_slave_0) entered disabled state
[  694.517381][T20437] bridge_slave_0: entered allmulticast mode
[  694.530773][T20437] bridge_slave_0: entered promiscuous mode
[  694.556681][T20437] bridge0: port 2(bridge_slave_1) entered blocking state
[  694.578353][    C0] appletouch 5-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64
[  694.583324][T20437] bridge0: port 2(bridge_slave_1) entered disabled state
[  694.614334][T20437] bridge_slave_1: entered allmulticast mode
[  694.636693][T20437] bridge_slave_1: entered promiscuous mode
[  694.717743][ T1172] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  694.909350][ T1172] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  694.980822][T20437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  695.002788][T20437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  695.032786][ T1172] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  695.057156][T11013] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  695.089546][T20437] team0: Port device team_slave_0 added
[  695.108505][T20437] team0: Port device team_slave_1 added
[  695.213642][T20437] batman_adv: batadv0: Adding interface: batadv_slave_0
[  695.219665][T11013] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  695.222916][T20437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  695.248798][T11013] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  695.286600][T11013] usb 6-1: Product: syz
[  695.288161][T20437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  695.294117][T11013] usb 6-1: Manufacturer: syz
[  695.313117][T20437] batman_adv: batadv0: Adding interface: batadv_slave_1
[  695.320596][T20437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  695.341699][T11013] usb 6-1: SerialNumber: syz
[  695.358540][T20437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  695.394970][T11013] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  695.437942][T10320] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  695.716311][T20437] hsr_slave_0: entered promiscuous mode
[  695.734855][T20437] hsr_slave_1: entered promiscuous mode
[  695.746482][T20437] debugfs: 'hsr0' already exists in 'hsr'
[  695.754900][T20437] Cannot create hsr debugfs directory
[  695.807297][ T5844] Bluetooth: hci4: command tx timeout
[  695.814199][ T1172] bridge_slave_1: left allmulticast mode
[  695.829422][ T1172] bridge_slave_1: left promiscuous mode
[  695.845564][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state
[  695.869340][ T1172] bridge_slave_0: left allmulticast mode
[  695.875044][ T1172] bridge_slave_0: left promiscuous mode
[  695.881025][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state
[  695.961540][T20567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  695.993532][T20567] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  696.063064][T20570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  696.095671][T20570] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  696.177602][ T1172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  696.191093][ T1172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  696.203082][ T1172] bond0 (unregistering): Released all slaves
[  696.224614][ T5950] usb 6-1: USB disconnect, device number 37
[  696.350360][T20298] 8021q: adding VLAN 0 to HW filter on device bond0
[  696.397477][T10094] usb 5-1: USB disconnect, device number 93
[  696.491770][T10094] appletouch 5-1:0.85: input: appletouch disconnected
[  696.529504][T10320] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  696.555772][T10320] ath9k_htc: Failed to initialize the device
[  696.592669][ T5950] usb 6-1: ath9k_htc: USB layer deinitialized
[  696.714469][T20581] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3208'.
[  696.777481][T20298] 8021q: adding VLAN 0 to HW filter on device team0
[  696.886745][T20588] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3209'.
[  696.913001][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  696.920234][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  697.009164][ T1172] hsr_slave_0: left promiscuous mode
[  697.034836][ T1172] hsr_slave_1: left promiscuous mode
[  697.055152][ T1172] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  697.069697][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_0
[  697.080573][ T1172] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  697.090988][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_1
[  697.113016][ T1172] veth1_macvtap: left promiscuous mode
[  697.120735][ T1172] veth0_macvtap: left promiscuous mode
[  697.126440][ T1172] veth1_vlan: left promiscuous mode
[  697.134848][ T1172] veth0_vlan: left promiscuous mode
[  697.167233][T11013] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[  697.307219][T11013] usb 5-1: device descriptor read/64, error -71
[  697.352301][ T1172] team0 (unregistering): Port device team_slave_1 removed
[  697.366121][ T1172] team0 (unregistering): Port device team_slave_0 removed
[  697.408307][T10320] usb 6-1: new full-speed USB device number 38 using dummy_hcd
[  697.547162][T11013] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[  697.570776][T10320] usb 6-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30
[  697.574143][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  697.587644][T10320] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  697.588946][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  697.600365][T10320] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  697.617320][T10320] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  697.633317][T10320] usb 6-1: config 0 interface 0 has no altsetting 0
[  697.643027][T10320] usb 6-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00
[  697.654020][T10320] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  697.679971][T10320] usb 6-1: config 0 descriptor??
[  697.687364][T11013] usb 5-1: device descriptor read/64, error -71
[  697.828157][T11013] usb usb5-port1: attempt power cycle
[  697.889463][ T5844] Bluetooth: hci4: command tx timeout
[  698.020103][ T1172] IPVS: stop unused estimator thread 0...
[  698.102270][T10320] usbhid 6-1:0.0: can't add hid device: -71
[  698.113341][T10320] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  698.144670][T10320] usb 6-1: USB disconnect, device number 38
[  698.167130][T11013] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[  698.207741][T11013] usb 5-1: device descriptor read/8, error -71
[  698.232673][T20298] 8021q: adding VLAN 0 to HW filter on device batadv0
[  698.449697][T11013] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[  698.487742][T11013] usb 5-1: device descriptor read/8, error -71
[  698.604440][T11013] usb usb5-port1: unable to enumerate USB device
[  698.670363][T20437] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  698.705965][T20437] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  698.742405][T20437] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  698.755818][T20437] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  698.782359][T20298] veth0_vlan: entered promiscuous mode
[  698.837052][T20298] veth1_vlan: entered promiscuous mode
[  698.950662][T20298] veth0_macvtap: entered promiscuous mode
[  698.980436][T20298] veth1_macvtap: entered promiscuous mode
[  699.030763][T20298] batman_adv: batadv0: Interface activated: batadv_slave_0
[  699.056756][T20298] batman_adv: batadv0: Interface activated: batadv_slave_1
[  699.100838][   T36] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  699.110859][   T36] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  699.126738][T20437] 8021q: adding VLAN 0 to HW filter on device bond0
[  699.141480][   T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  699.159287][   T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  699.274525][T20437] 8021q: adding VLAN 0 to HW filter on device team0
[  699.326769][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  699.334009][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  699.363661][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  699.364438][ T5950] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  699.370938][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  699.405518][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  699.418980][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  699.519731][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  699.538924][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  699.538986][ T5950] usb 6-1: Using ep0 maxpacket: 8
[  699.575261][ T5950] usb 6-1: config 6 has an invalid interface number: 220 but max is 0
[  699.601676][ T5950] usb 6-1: config 6 has no interface number 0
[  699.620628][ T5950] usb 6-1: config 6 interface 220 has no altsetting 0
[  699.632831][ T5950] usb 6-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=40.10
[  699.655979][ T5950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  699.679669][ T5950] usb 6-1: Product: syz
[  699.690471][ T5950] usb 6-1: Manufacturer: syz
[  699.705985][ T5950] usb 6-1: SerialNumber: syz
[  699.880088][T20437] 8021q: adding VLAN 0 to HW filter on device batadv0
[  700.000616][ T5950] uvcvideo 6-1:6.220: Found multiple Units with ID 4
[  700.035173][ T5950] uvcvideo 6-1:6.220: Found Unit with invalid ID 0
[  700.054614][ T5950] uvcvideo 6-1:6.220: Found UVC 7.ff device syz (174f:5212)
[  700.082968][ T5950] uvcvideo 6-1:6.220: Entity type for entity Output 4 was not initialized!
[  700.117565][ T5950] uvcvideo 6-1:6.220: Failed to create links for entity 4
[  700.133515][ T5950] uvcvideo 6-1:6.220: Failed to register entities (-22).
[  700.160059][ T5950] usb 6-1: USB disconnect, device number 39
[  700.317479][   T24] usb 7-1: new high-speed USB device number 37 using dummy_hcd
[  700.478889][   T24] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  700.510912][   T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  700.522641][   T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  700.538670][   T24] usb 7-1: SerialNumber: syz
[  700.643076][T20437] veth0_vlan: entered promiscuous mode
[  700.866719][T20437] veth1_vlan: entered promiscuous mode
[  701.037167][  T825] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  701.040917][T20702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3219'.
[  701.080650][T20437] veth0_macvtap: entered promiscuous mode
[  701.101438][T20437] veth1_macvtap: entered promiscuous mode
[  701.144027][T20437] batman_adv: batadv0: Interface activated: batadv_slave_0
[  701.172693][T20437] batman_adv: batadv0: Interface activated: batadv_slave_1
[  701.195114][T20708] loop4: detected capacity change from 0 to 1
[  701.201803][  T825] usb 6-1: Using ep0 maxpacket: 32
[  701.211897][   T49] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  701.223641][  T825] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[  701.235678][   T49] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  701.241386][  T825] usb 6-1: config 0 has no interface number 0
[  701.255011][  T825] usb 6-1: config 0 interface 184 has no altsetting 0
[  701.264862][   T49] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  701.280218][  T825] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  701.289564][T15090] Dev loop4: unable to read RDB block 1
[  701.295463][T15090]  loop4: unable to read partition table
[  701.301944][  T825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  701.310993][T15090] loop4: partition table beyond EOD, truncated
[  701.320179][  T825] usb 6-1: Product: syz
[  701.339405][  T825] usb 6-1: Manufacturer: syz
[  701.347832][   T49] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  701.358092][T20708] Dev loop4: unable to read RDB block 1
[  701.366000][  T825] usb 6-1: SerialNumber: syz
[  701.384296][T20708]  loop4: unable to read partition table
[  701.393944][  T825] usb 6-1: config 0 descriptor??
[  701.409627][T20708] loop4: partition table beyond EOD, truncated
[  701.416251][   T24] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71
[  701.451540][T20708] loop_reread_partitions: partition scan of loop4 (îÝ·ÂU@™:ÖB$Œ{
WÎÉ´å) failed (rc=-5)
[  701.469854][   T24] usb 7-1: USB disconnect, device number 37
[  701.598499][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  701.623124][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  701.681687][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  701.694905][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  701.845259][T20696] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3217'.
[  701.875702][T20696] 0·: renamed from hsr_slave_1 (while UP)
[  701.915913][T20696] 0·: entered allmulticast mode
[  701.949178][T20696] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  702.000659][T20724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  702.023079][T20724] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  702.074976][  T825] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  702.126545][  T825] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[  702.166604][  T825] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  702.194912][  T825] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -61
[  702.253534][   T30] kauditd_printk_skb: 11 callbacks suppressed
[  702.253548][   T30] audit: type=1326 audit(1773810833.915:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20720 comm="syz.9.3194" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb04299c799 code=0x0
[  702.429007][ T5900] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[  702.430167][ T5160] Bluetooth: hci1: sending frame failed (-49)
[  702.450273][ T5844] Bluetooth: hci1: Opcode 0x1003 failed: -49
[  702.589656][ T5900] usb 5-1: Using ep0 maxpacket: 32
[  702.598675][ T5900] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x62, changing to 0x2
[  702.621871][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 140, changing to 11
[  702.633580][T10063] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[  702.644764][ T5900] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59326, setting to 1024
[  702.662575][ T5900] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  702.672053][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  702.687509][ T5900] usb 5-1: Product: syz
[  702.691947][ T5900] usb 5-1: Manufacturer: syz
[  702.706893][ T5900] usb 5-1: SerialNumber: syz
[  702.714131][ T5900] usb 5-1: config 0 descriptor??
[  702.723536][T20733] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  702.746855][ T5900] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  702.817415][T10063] usb 7-1: Using ep0 maxpacket: 8
[  702.832005][T10063] usb 7-1: config 6 has an invalid interface number: 220 but max is 0
[  702.850058][T10063] usb 7-1: config 6 has no interface number 0
[  702.856211][T10063] usb 7-1: config 6 interface 220 has no altsetting 0
[  702.870164][T10063] usb 7-1: New USB device found, idVendor=174f, idProduct=5212, bcdDevice=40.10
[  702.883229][T10063] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  702.891284][T10063] usb 7-1: Product: syz
[  702.895690][T10063] usb 7-1: Manufacturer: syz
[  702.900872][T10063] usb 7-1: SerialNumber: syz
[  702.951293][  T114] usb 5-1: Failed to submit usb control message: -71
[  702.964462][T10320] usb 5-1: USB disconnect, device number 98
[  702.976075][  T114] usb 5-1: unable to send the bmi data to the device: -71
[  702.990655][  T114] usb 5-1: unable to get target info from device
[  702.998558][  T114] usb 5-1: could not get target info (-71)
[  703.006210][  T114] usb 5-1: could not probe fw (-71)
[  703.131966][T10063] uvcvideo 7-1:6.220: Found multiple Units with ID 4
[  703.139771][T10063] uvcvideo 7-1:6.220: Found Unit with invalid ID 0
[  703.147702][T10063] uvcvideo 7-1:6.220: Found UVC 7.ff device syz (174f:5212)
[  703.155258][T10063] uvcvideo 7-1:6.220: Entity type for entity Output 4 was not initialized!
[  703.164184][T10063] uvcvideo 7-1:6.220: Failed to create links for entity 4
[  703.176723][T10063] uvcvideo 7-1:6.220: Failed to register entities (-22).
[  703.195397][T10063] usb 7-1: USB disconnect, device number 38
[  703.538669][T20782] syzkaller1: entered promiscuous mode
[  703.551211][T20782] syzkaller1: entered allmulticast mode
[  703.918660][T10320] usb 6-1: USB disconnect, device number 40
[  704.122054][T20809] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  704.347260][T10320] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  704.518808][T10320] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  704.544593][   T30] audit: type=1326 audit(1773810836.205:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20819 comm="syz.6.3234" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb60439c799 code=0x0
[  704.571512][T10320] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  704.584244][T10320] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  704.593173][T10320] usb 6-1: SerialNumber: syz
[  705.337274][T10063] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[  705.436297][T10320] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71
[  705.459894][T10320] usb 6-1: USB disconnect, device number 41
[  705.497107][T10063] usb 5-1: Using ep0 maxpacket: 32
[  705.520956][T10063] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  705.530078][T10063] usb 5-1: config 0 has no interface number 0
[  705.536225][T10063] usb 5-1: config 0 interface 184 has no altsetting 0
[  705.547980][T10063] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  705.557233][T10063] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  705.565256][T10063] usb 5-1: Product: syz
[  705.570480][T10063] usb 5-1: Manufacturer: syz
[  705.575562][T10063] usb 5-1: SerialNumber: syz
[  705.583141][T10063] usb 5-1: config 0 descriptor??
[  706.230361][T20895] xt_nfacct: accounting object `\�$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist
[  706.333979][   T30] audit: type=1800 audit(1773810837.995:384): pid=20900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3243" name="bus" dev="overlay" ino=141 res=0 errno=0
[  706.596058][T10063] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71
[  706.624512][T10063] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  706.653884][T10063] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  706.684215][T10063] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  706.693486][ T5160] Bluetooth: hci1: command 0x1003 tx timeout
[  706.695199][ T5844] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  706.719274][T10063] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  706.729913][T10063] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  706.740048][T10063] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71
[  706.755733][T10063] usb 5-1: USB disconnect, device number 99
[  706.780664][T11013] IPVS: starting estimator thread 0...
[  706.897914][T20919] IPVS: using max 32 ests per chain, 76800 per kthread
[  707.458806][ T5900] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  707.465843][T20956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3256'.
[  707.619675][ T5900] usb 6-1: Using ep0 maxpacket: 32
[  707.636062][ T5900] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x62, changing to 0x2
[  707.657572][ T5900] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 140, changing to 11
[  707.671380][ T5900] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59326, setting to 1024
[  707.694547][ T5900] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  707.710363][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  707.719998][ T5900] usb 6-1: Product: syz
[  707.724194][ T5900] usb 6-1: Manufacturer: syz
[  707.731069][ T5900] usb 6-1: SerialNumber: syz
[  707.742722][ T5900] usb 6-1: config 0 descriptor??
[  707.750918][T20942] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  707.783196][ T5900] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  707.991507][   T49] usb 6-1: Failed to submit usb control message: -71
[  707.999240][T10320] usb 6-1: USB disconnect, device number 42
[  708.021998][   T49] usb 6-1: unable to send the bmi data to the device: -71
[  708.042682][   T49] usb 6-1: unable to get target info from device
[  708.052185][   T30] audit: type=1326 audit(1773810839.715:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20972 comm="syz.4.3258" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f283699c799 code=0x0
[  708.074134][   T49] usb 6-1: could not get target info (-71)
[  708.081445][   T49] usb 6-1: could not probe fw (-71)
[  708.556862][T21002] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3259'.
[  709.457250][T10094] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[  709.617209][T10094] usb 6-1: Using ep0 maxpacket: 32
[  709.630286][T10094] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  709.639651][T10094] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  709.648773][T10094] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  709.658111][T10094] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  709.668226][T10094] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  709.680748][T10094] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  709.694106][T10094] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  709.703509][T10094] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  709.715297][T10094] usb 6-1: config 0 descriptor??
[  709.938640][T10094] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 43 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  709.973784][T10320] usb 6-1: USB disconnect, device number 43
[  710.010892][T10320] usblp0: removed
[  710.072521][T21074] syzkaller1: entered promiscuous mode
[  710.080621][T21074] syzkaller1: entered allmulticast mode
[  710.207220][ T5844] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  710.215628][ T5160] Bluetooth: hci1: command 0x1003 tx timeout
[  710.392628][T21087] netlink: 348 bytes leftover after parsing attributes in process `syz.5.3265'.
[  711.827464][ T5900] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[  711.987902][ T5900] usb 6-1: Using ep0 maxpacket: 8
[  711.995330][ T5900] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 36, changing to 9
[  712.007000][ T5900] usb 6-1: config 1 interface 0 has no altsetting 0
[  712.015288][ T5900] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.40
[  712.024372][ T5900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  712.032429][ T5900] usb 6-1: Product: ј
[  712.036491][ T5900] usb 6-1: Manufacturer: �䙮Ą䜕ᢈ쎞ϊ♄�䫹䕜唖뜜癈�웹钇彰틔រ�曌봀ﲡ�綺轞�糃⒘瀞��ೲ釯⌖�咢≥兙쓺ꎛ㷯톽栢蒈ꊵᗶ�쯚咅䴻觀幆�
[  712.056118][ T5900] usb 6-1: SerialNumber: �
[  712.476701][ T5900] usbhid 6-1:1.0: can't add hid device: -71
[  712.482829][ T5900] usbhid 6-1:1.0: probe with driver usbhid failed with error -71
[  712.494206][ T5900] usb 6-1: USB disconnect, device number 44
[  713.130261][   T30] audit: type=1326 audit(1773810844.795:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21153 comm="syz.5.3272" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb06099c799 code=0x0
[  715.251725][ T5160] Bluetooth: hci1: command 0x1003 tx timeout
[  715.258027][ T5844] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  718.474811][ T5160] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  718.494779][ T5160] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  718.502979][ T5160] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  718.512621][ T5160] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  718.521206][ T5160] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  718.748371][T21168] chnl_net:caif_netlink_parms(): no params data found
[  718.819659][T21168] bridge0: port 1(bridge_slave_0) entered blocking state
[  718.826902][T21168] bridge0: port 1(bridge_slave_0) entered disabled state
[  718.834590][T21168] bridge_slave_0: entered allmulticast mode
[  718.844786][T21168] bridge_slave_0: entered promiscuous mode
[  718.854472][T21168] bridge0: port 2(bridge_slave_1) entered blocking state
[  718.861902][T21168] bridge0: port 2(bridge_slave_1) entered disabled state
[  718.869361][T21168] bridge_slave_1: entered allmulticast mode
[  718.877577][T21168] bridge_slave_1: entered promiscuous mode
[  718.924120][T21168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  718.941403][T21168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  718.994136][   T36] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  719.028394][T21168] team0: Port device team_slave_0 added
[  719.036609][T21168] team0: Port device team_slave_1 added
[  719.091262][   T36] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  719.108087][T21168] batman_adv: batadv0: Adding interface: batadv_slave_0
[  719.115055][T21168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  719.141343][T21168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  719.154983][T21168] batman_adv: batadv0: Adding interface: batadv_slave_1
[  719.163897][T21168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  719.190377][T21168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  719.225428][   T36] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  719.274920][T21168] hsr_slave_0: entered promiscuous mode
[  719.281984][T21168] hsr_slave_1: entered promiscuous mode
[  719.288607][T21168] debugfs: 'hsr0' already exists in 'hsr'
[  719.294330][T21168] Cannot create hsr debugfs directory
[  719.324674][   T36] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  719.617611][   T36] bridge_slave_1: left allmulticast mode
[  719.623288][   T36] bridge_slave_1: left promiscuous mode
[  719.629414][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  719.639999][   T36] bridge_slave_0: left allmulticast mode
[  719.645633][   T36] bridge_slave_0: left promiscuous mode
[  719.652126][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  719.803310][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  719.815538][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  719.826059][   T36] bond0 (unregistering): Released all slaves
[  720.085859][   T36] hsr_slave_0: left promiscuous mode
[  720.095220][   T36] hsr_slave_1: left promiscuous mode
[  720.101512][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  720.108967][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  720.117465][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  720.124878][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  720.143456][   T36] veth1_macvtap: left promiscuous mode
[  720.149248][   T36] veth0_macvtap: left promiscuous mode
[  720.154828][   T36] veth1_vlan: left promiscuous mode
[  720.161819][   T36] veth0_vlan: left promiscuous mode
[  720.435375][   T36] team0 (unregistering): Port device team_slave_1 removed
[  720.449936][   T36] team0 (unregistering): Port device team_slave_0 removed
[  720.607592][ T5160] Bluetooth: hci1: command tx timeout
[  721.497743][T21168] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  721.524787][T21168] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  721.537248][T21168] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  721.549027][T21168] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  721.676898][T21168] 8021q: adding VLAN 0 to HW filter on device bond0
[  721.706599][T21168] 8021q: adding VLAN 0 to HW filter on device team0
[  721.725996][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  721.733215][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  721.752783][  T114] bridge0: port 2(bridge_slave_1) entered blocking state
[  721.759999][  T114] bridge0: port 2(bridge_slave_1) entered forwarding state
[  722.051273][T21168] 8021q: adding VLAN 0 to HW filter on device batadv0
[  722.351980][T21168] veth0_vlan: entered promiscuous mode
[  722.398960][T21168] veth1_vlan: entered promiscuous mode
[  722.504409][T21168] veth0_macvtap: entered promiscuous mode
[  722.546701][T21168] veth1_macvtap: entered promiscuous mode
[  722.583510][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  722.600680][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  722.611298][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  722.624110][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  722.634082][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  722.687347][ T5844] Bluetooth: hci1: command tx timeout
[  722.698155][T21168] batman_adv: batadv0: Interface activated: batadv_slave_0
[  722.738290][T21168] batman_adv: batadv0: Interface activated: batadv_slave_1
[  722.773521][  T114] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  722.794570][  T114] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  722.833225][  T114] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  722.857976][  T114] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  723.206142][T20595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  723.219735][T20595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  723.369926][  T114] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  723.401307][T21269] chnl_net:caif_netlink_parms(): no params data found
[  723.425540][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  723.451251][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  723.581733][  T114] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  723.621995][T21292] comedi comedi3: comedi_config --init_data is deprecated
[  723.774707][  T114] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  723.864487][  T114] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  723.886563][T21269] bridge0: port 1(bridge_slave_0) entered blocking state
[  723.897387][T21269] bridge0: port 1(bridge_slave_0) entered disabled state
[  723.904732][T21269] bridge_slave_0: entered allmulticast mode
[  723.912947][T21269] bridge_slave_0: entered promiscuous mode
[  723.934540][T21269] bridge0: port 2(bridge_slave_1) entered blocking state
[  723.942527][T21269] bridge0: port 2(bridge_slave_1) entered disabled state
[  723.949939][T21269] bridge_slave_1: entered allmulticast mode
[  723.960746][T21269] bridge_slave_1: entered promiscuous mode
[  724.002329][T21269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  724.023454][T21269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  724.122382][T21269] team0: Port device team_slave_0 added
[  724.151623][T21269] team0: Port device team_slave_1 added
[  724.275665][T21269] batman_adv: batadv0: Adding interface: batadv_slave_0
[  724.289600][T21269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  724.337213][T21269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  724.393345][T21269] batman_adv: batadv0: Adding interface: batadv_slave_1
[  724.403726][T21269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  724.458207][T21269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  724.476851][  T114] bridge_slave_1: left allmulticast mode
[  724.483256][  T114] bridge_slave_1: left promiscuous mode
[  724.489327][  T114] bridge0: port 2(bridge_slave_1) entered disabled state
[  724.499878][  T114] bridge_slave_0: left allmulticast mode
[  724.505577][  T114] bridge_slave_0: left promiscuous mode
[  724.513124][  T114] bridge0: port 1(bridge_slave_0) entered disabled state
[  724.682309][  T808] usb 8-1: new full-speed USB device number 30 using dummy_hcd
[  724.690182][ T5844] Bluetooth: hci4: command tx timeout
[  724.756475][  T114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  724.767153][ T5844] Bluetooth: hci1: command tx timeout
[  724.773629][  T114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  724.783904][  T114] bond0 (unregistering): Released all slaves
[  724.852245][  T808] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  724.868856][T21269] hsr_slave_0: entered promiscuous mode
[  724.876060][T21269] hsr_slave_1: entered promiscuous mode
[  724.914211][T21269] debugfs: 'hsr0' already exists in 'hsr'
[  724.921284][  T808] usb 8-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b
[  724.934764][  T808] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  724.943600][T21269] Cannot create hsr debugfs directory
[  724.953336][  T808] usb 8-1: Product: syz
[  724.957846][  T808] usb 8-1: Manufacturer: syz
[  724.962483][  T808] usb 8-1: SerialNumber: syz
[  724.988473][  T808] usb 8-1: config 0 descriptor??
[  725.007581][  T808] plusb 8-1:0.0: probe with driver plusb failed with error -22
[  725.205935][  T114] hsr_slave_0: left promiscuous mode
[  725.223778][  T114] hsr_slave_1: left promiscuous mode
[  725.238382][  T114] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  725.246358][  T114] batman_adv: batadv0: Removing interface: batadv_slave_0
[  725.259187][  T114] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  725.266702][  T114] batman_adv: batadv0: Removing interface: batadv_slave_1
[  725.286963][  T114] veth1_macvtap: left promiscuous mode
[  725.293749][  T114] veth0_macvtap: left promiscuous mode
[  725.299894][  T114] veth1_vlan: left promiscuous mode
[  725.305231][  T114] veth0_vlan: left promiscuous mode
[  725.318816][    T9] usb 8-1: USB disconnect, device number 30
[  725.699085][ T5160] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  725.719988][ T5160] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  725.728433][ T5160] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  725.736368][ T5160] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  725.747488][ T5160] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  725.796865][  T114] team0 (unregistering): Port device team_slave_1 removed
[  725.821652][  T114] team0 (unregistering): Port device team_slave_0 removed
[  726.544611][   T30] audit: type=1326 audit(1773810858.205:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21344 comm="syz.7.3281" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fabdcb9c799 code=0x0
[  726.767890][ T5160] Bluetooth: hci4: command tx timeout
[  726.857716][ T5160] Bluetooth: hci1: command tx timeout
[  726.999682][T21342] chnl_net:caif_netlink_parms(): no params data found
[  727.093164][ T1172] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  727.281595][ T1172] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  727.413794][ T1172] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  727.518965][ T1172] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  727.597754][T21342] bridge0: port 1(bridge_slave_0) entered blocking state
[  727.605097][T21342] bridge0: port 1(bridge_slave_0) entered disabled state
[  727.613570][T21342] bridge_slave_0: entered allmulticast mode
[  727.622242][T21342] bridge_slave_0: entered promiscuous mode
[  727.632075][T21342] bridge0: port 2(bridge_slave_1) entered blocking state
[  727.646292][T21342] bridge0: port 2(bridge_slave_1) entered disabled state
[  727.659337][T21342] bridge_slave_1: entered allmulticast mode
[  727.668300][T21342] bridge_slave_1: entered promiscuous mode
[  727.807211][ T5160] Bluetooth: hci3: command tx timeout
[  727.826237][T21342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  727.889810][T21342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  727.983923][T21269] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  728.021560][T21269] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  728.086453][T21342] team0: Port device team_slave_0 added
[  728.092484][T21269] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  728.113052][T21342] team0: Port device team_slave_1 added
[  728.122644][T21269] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  728.202263][ T1172] bridge_slave_1: left allmulticast mode
[  728.211586][ T1172] bridge_slave_1: left promiscuous mode
[  728.217903][ T1172] bridge0: port 2(bridge_slave_1) entered disabled state
[  728.228958][ T1172] bridge_slave_0: left allmulticast mode
[  728.234612][ T1172] bridge_slave_0: left promiscuous mode
[  728.241089][ T1172] bridge0: port 1(bridge_slave_0) entered disabled state
[  728.506118][ T1172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  728.518100][ T1172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  728.528342][ T1172] bond0 (unregistering): Released all slaves
[  728.544096][T21342] batman_adv: batadv0: Adding interface: batadv_slave_0
[  728.551135][T21342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  728.577406][T21342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  728.598556][T21342] batman_adv: batadv0: Adding interface: batadv_slave_1
[  728.631369][T21342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  728.660530][T21342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  728.783176][ T5844] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  728.803867][T21342] hsr_slave_0: entered promiscuous mode
[  728.810998][T21342] hsr_slave_1: entered promiscuous mode
[  728.817987][T21342] debugfs: 'hsr0' already exists in 'hsr'
[  728.823755][T21342] Cannot create hsr debugfs directory
[  728.861756][ T5160] Bluetooth: hci4: command tx timeout
[  729.243753][ T1172] hsr_slave_0: left promiscuous mode
[  729.252771][ T1172] hsr_slave_1: left promiscuous mode
[  729.264483][ T1172] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  729.273032][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_0
[  729.281542][ T1172] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  729.290792][ T1172] batman_adv: batadv0: Removing interface: batadv_slave_1
[  729.305579][ T1172] veth1_macvtap: left promiscuous mode
[  729.311485][ T1172] veth0_macvtap: left promiscuous mode
[  729.317789][ T1172] veth1_vlan: left promiscuous mode
[  729.323038][ T1172] veth0_vlan: left promiscuous mode
[  729.624281][ T1172] team0 (unregistering): Port device team_slave_1 removed
[  729.655407][ T1172] team0 (unregistering): Port device team_slave_0 removed
[  729.887825][ T5160] Bluetooth: hci3: command tx timeout
[  730.225643][T21269] 8021q: adding VLAN 0 to HW filter on device bond0
[  730.341960][ T1172] IPVS: stop unused estimator thread 0...
[  730.352483][T21269] 8021q: adding VLAN 0 to HW filter on device team0
[  730.372120][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  730.379344][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  730.458858][  T114] bridge0: port 2(bridge_slave_1) entered blocking state
[  730.465981][  T114] bridge0: port 2(bridge_slave_1) entered forwarding state
[  730.900880][T21342] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  730.920185][T21342] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  730.927306][ T5160] Bluetooth: hci4: command tx timeout
[  730.941662][T21342] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  730.961853][T21269] 8021q: adding VLAN 0 to HW filter on device batadv0
[  730.971610][T21342] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  731.216897][T21269] veth0_vlan: entered promiscuous mode
[  731.274628][T21269] veth1_vlan: entered promiscuous mode
[  731.301350][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  731.315325][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  731.326193][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  731.336348][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  731.346274][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  731.472487][T21342] 8021q: adding VLAN 0 to HW filter on device bond0
[  731.616668][T21342] 8021q: adding VLAN 0 to HW filter on device team0
[  731.758561][T21269] veth0_macvtap: entered promiscuous mode
[  731.776567][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state
[  731.783798][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state
[  731.820722][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state
[  731.827953][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state
[  731.844171][T21269] veth1_macvtap: entered promiscuous mode
[  731.969940][ T5160] Bluetooth: hci3: command tx timeout
[  732.215876][  T744] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  732.284889][T21269] batman_adv: batadv0: Interface activated: batadv_slave_0
[  732.354337][T21269] batman_adv: batadv0: Interface activated: batadv_slave_1
[  732.421590][  T744] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  732.496420][T21485] chnl_net:caif_netlink_parms(): no params data found
[  732.541081][   T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  732.559606][   T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  732.658208][  T744] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  732.714609][   T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  732.737196][   T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  732.835323][  T744] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  733.090248][T21485] bridge0: port 1(bridge_slave_0) entered blocking state
[  733.103199][T21485] bridge0: port 1(bridge_slave_0) entered disabled state
[  733.139270][T21485] bridge_slave_0: entered allmulticast mode
[  733.148299][T21485] bridge_slave_0: entered promiscuous mode
[  733.161059][T21485] bridge0: port 2(bridge_slave_1) entered blocking state
[  733.169759][T21485] bridge0: port 2(bridge_slave_1) entered disabled state
[  733.181890][T21485] bridge_slave_1: entered allmulticast mode
[  733.191125][T21485] bridge_slave_1: entered promiscuous mode
[  733.359704][T21485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  733.373958][T21485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  733.407244][ T5160] Bluetooth: hci0: command tx timeout
[  733.426272][T21342] 8021q: adding VLAN 0 to HW filter on device batadv0
[  733.436675][  T114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  733.454119][  T114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  733.510720][T21485] team0: Port device team_slave_0 added
[  733.521601][T21485] team0: Port device team_slave_1 added
[  733.616731][T21485] batman_adv: batadv0: Adding interface: batadv_slave_0
[  733.623859][T21485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  733.650323][T21485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  733.661730][  T744] bridge_slave_1: left allmulticast mode
[  733.668685][  T744] bridge_slave_1: left promiscuous mode
[  733.679758][  T744] bridge0: port 2(bridge_slave_1) entered disabled state
[  733.690050][  T744] bridge_slave_0: left allmulticast mode
[  733.695760][  T744] bridge_slave_0: left promiscuous mode
[  733.702395][  T744] bridge0: port 1(bridge_slave_0) entered disabled state
[  733.963287][  T744] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  733.975488][  T744] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  733.986165][  T744] bond0 (unregistering): Released all slaves
[  734.007268][  T114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  734.015674][  T114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  734.020278][T21485] batman_adv: batadv0: Adding interface: batadv_slave_1
[  734.044053][T21485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  734.079141][ T5160] Bluetooth: hci3: command tx timeout
[  734.103814][T21485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  734.294039][T21485] hsr_slave_0: entered promiscuous mode
[  734.315736][T21485] hsr_slave_1: entered promiscuous mode
[  734.332977][T21485] debugfs: 'hsr0' already exists in 'hsr'
[  734.358037][T21485] Cannot create hsr debugfs directory
[  734.526225][  T744] hsr_slave_0: left promiscuous mode
[  734.532681][  T744] 0·: left promiscuous mode
[  734.538569][  T744] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  734.545994][  T744] batman_adv: batadv0: Removing interface: batadv_slave_0
[  734.557940][  T744] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  734.565399][  T744] batman_adv: batadv0: Removing interface: batadv_slave_1
[  734.580377][  T744] veth1_macvtap: left promiscuous mode
[  734.585909][  T744] veth0_macvtap: left promiscuous mode
[  734.592527][  T744] veth1_vlan: left promiscuous mode
[  734.597905][  T744] veth0_vlan: left promiscuous mode
[  734.955658][  T744] team0 (unregistering): Port device team_slave_1 removed
[  734.990447][  T744] team0 (unregistering): Port device team_slave_0 removed
[  735.414488][T21342] veth0_vlan: entered promiscuous mode
[  735.508347][ T5160] Bluetooth: hci0: command tx timeout
[  735.514463][T21598] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3287'.
[  735.633830][T21342] veth1_vlan: entered promiscuous mode
[  735.918099][T21485] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  735.990133][  T744] IPVS: stop unused estimator thread 0...
[  736.004737][T21342] veth0_macvtap: entered promiscuous mode
[  736.056959][T21342] veth1_macvtap: entered promiscuous mode
[  736.142152][   T30] audit: type=1326 audit(1773810867.805:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21602 comm="syz.3.3288" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb658d9c799 code=0x0
[  736.169495][T21485] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  736.196158][T21342] batman_adv: batadv0: Interface activated: batadv_slave_0
[  736.215153][T21342] batman_adv: batadv0: Interface activated: batadv_slave_1
[  736.235908][ T1172] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  736.252974][ T1172] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  736.329048][T21485] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  736.358238][ T1172] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  736.367945][ T1172] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  736.425250][T21485] batman_adv: batadv0: Removing interface: netdevsim0
[  736.440644][T21485] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  736.622901][  T744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  736.636754][  T744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  736.736129][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  736.744402][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  736.836031][T21485] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  736.876580][T21485] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  736.894095][T21485] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  736.912227][T21485] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  737.049305][T21637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3289'.
[  737.085688][T21485] 8021q: adding VLAN 0 to HW filter on device bond0
[  737.130126][T21485] 8021q: adding VLAN 0 to HW filter on device team0
[  737.161795][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  737.169034][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  737.192497][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  737.199668][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  737.527187][T10093] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[  737.534608][T21485] 8021q: adding VLAN 0 to HW filter on device batadv0
[  737.568509][ T5844] Bluetooth: hci0: command tx timeout
[  737.687539][T10093] usb 3-1: Using ep0 maxpacket: 32
[  737.699224][T10093] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[  737.716681][T10093] usb 3-1: config 0 has no interface number 0
[  737.728561][T10093] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  737.756490][T10093] usb 3-1: config 0 interface 85 has no altsetting 0
[  737.773402][T10093] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  737.788302][T10093] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  737.796672][T10093] usb 3-1: Product: syz
[  737.801182][T10093] usb 3-1: Manufacturer: syz
[  737.811100][T10093] usb 3-1: SerialNumber: syz
[  737.825955][T10093] usb 3-1: config 0 descriptor??
[  737.858253][T21485] veth0_vlan: entered promiscuous mode
[  737.878770][T21485] veth1_vlan: entered promiscuous mode
[  737.934657][T21485] veth0_macvtap: entered promiscuous mode
[  737.948501][T21485] veth1_macvtap: entered promiscuous mode
[  737.984455][T21485] batman_adv: batadv0: Interface activated: batadv_slave_0
[  738.005606][T21485] batman_adv: batadv0: Interface activated: batadv_slave_1
[  738.030748][   T36] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  738.063062][   T36] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  738.099076][   T36] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  738.114758][   T36] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  738.249572][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  738.264356][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  738.287775][ T5844] Bluetooth: hci2: command 0x1003 tx timeout
[  738.301283][ T5160] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  738.362016][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  738.371881][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  738.454952][T10093] appletouch 3-1:0.85: Geyser mode initialized.
[  738.478358][T10093] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input144
[  738.656531][ T5932] usb 3-1: USB disconnect, device number 75
[  738.674056][ T5932] appletouch 3-1:0.85: input: appletouch disconnected
[  738.750641][T21669] tipc: Started in network mode
[  738.755678][T21669] tipc: Node identity 4, cluster identity 4711
[  738.762543][T21669] tipc: Node number set to 4
[  738.863873][T21674] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3295'.
[  738.921962][T21677] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3296'.
[  739.585825][   T30] audit: type=1326 audit(1773810871.245:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21692 comm="syz.8.3299" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4cf3b9c799 code=0x0
[  739.649092][ T5160] Bluetooth: hci0: command tx timeout
[  740.572580][T21734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3304'.
[  740.803427][   T30] audit: type=1800 audit(1773810872.465:390): pid=21749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3307" name="bus" dev="overlay" ino=77 res=0 errno=0
[  740.996380][T21759] comedi comedi3: comedi_config --init_data is deprecated
[  741.279395][   T30] audit: type=1326 audit(1773810872.945:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21761 comm="syz.2.3310" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7abff9c799 code=0x0
[  743.419862][ T5160] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  744.748084][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  744.763713][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  744.772334][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  744.780350][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  744.815633][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  745.144371][T21934] chnl_net:caif_netlink_parms(): no params data found
[  745.436191][   T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  745.461284][T21934] bridge0: port 1(bridge_slave_0) entered blocking state
[  745.472706][T21934] bridge0: port 1(bridge_slave_0) entered disabled state
[  745.480431][T21934] bridge_slave_0: entered allmulticast mode
[  745.494198][T21934] bridge_slave_0: entered promiscuous mode
[  745.511681][T21934] bridge0: port 2(bridge_slave_1) entered blocking state
[  745.519401][T21934] bridge0: port 2(bridge_slave_1) entered disabled state
[  745.526764][T21934] bridge_slave_1: entered allmulticast mode
[  745.536053][T21934] bridge_slave_1: entered promiscuous mode
[  745.586374][   T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  745.633501][T21934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  745.649643][T21934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  745.704505][   T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  745.751372][T21934] team0: Port device team_slave_0 added
[  745.761398][T21934] team0: Port device team_slave_1 added
[  745.815435][   T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  745.860576][T21934] batman_adv: batadv0: Adding interface: batadv_slave_0
[  745.876568][T21934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  745.908548][T21934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  745.952590][T21934] batman_adv: batadv0: Adding interface: batadv_slave_1
[  745.963300][T21934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  745.991785][T21934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  746.128871][T21934] hsr_slave_0: entered promiscuous mode
[  746.136103][T21934] hsr_slave_1: entered promiscuous mode
[  746.143473][T21934] debugfs: 'hsr0' already exists in 'hsr'
[  746.149508][T21934] Cannot create hsr debugfs directory
[  746.315887][   T13] bridge_slave_1: left allmulticast mode
[  746.322667][   T13] bridge_slave_1: left promiscuous mode
[  746.328856][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  746.341372][   T13] bridge_slave_0: left allmulticast mode
[  746.347268][   T13] bridge_slave_0: left promiscuous mode
[  746.353046][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  746.643714][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  746.655393][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  746.666506][   T13] bond0 (unregistering): Released all slaves
[  746.857319][ T5844] Bluetooth: hci2: command tx timeout
[  747.096917][   T13] hsr_slave_0: left promiscuous mode
[  747.103901][   T13] hsr_slave_1: left promiscuous mode
[  747.110720][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  747.120537][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  747.129203][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  747.136635][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  747.153856][   T13] veth1_macvtap: left promiscuous mode
[  747.159607][   T13] veth0_macvtap: left promiscuous mode
[  747.165339][   T13] veth1_vlan: left promiscuous mode
[  747.180778][   T13] veth0_vlan: left promiscuous mode
[  747.202222][ T1314] ieee802154 phy0 wpan0: encryption failed: -22
[  747.211273][ T1314] ieee802154 phy1 wpan1: encryption failed: -22
[  747.502177][   T13] team0 (unregistering): Port device team_slave_1 removed
[  747.526737][   T13] team0 (unregistering): Port device team_slave_0 removed
[  748.263751][T21934] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  748.282690][T21934] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  748.296251][T21934] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  748.313968][T21934] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  748.463120][T21934] 8021q: adding VLAN 0 to HW filter on device bond0
[  748.492977][T21934] 8021q: adding VLAN 0 to HW filter on device team0
[  748.511296][T20595] bridge0: port 1(bridge_slave_0) entered blocking state
[  748.518530][T20595] bridge0: port 1(bridge_slave_0) entered forwarding state
[  748.552501][T20595] bridge0: port 2(bridge_slave_1) entered blocking state
[  748.559705][T20595] bridge0: port 2(bridge_slave_1) entered forwarding state
[  748.808105][T21934] 8021q: adding VLAN 0 to HW filter on device batadv0
[  748.881447][T21934] veth0_vlan: entered promiscuous mode
[  748.896740][T21934] veth1_vlan: entered promiscuous mode
[  748.929130][ T5844] Bluetooth: hci2: command tx timeout
[  748.949143][T21934] veth0_macvtap: entered promiscuous mode
[  748.963034][T21934] veth1_macvtap: entered promiscuous mode
[  749.001110][T21934] batman_adv: batadv0: Interface activated: batadv_slave_0
[  749.025058][T21934] batman_adv: batadv0: Interface activated: batadv_slave_1
[  749.048863][   T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  749.073059][   T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  749.100090][   T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  749.121352][   T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  749.280037][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  749.300932][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  749.345301][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  749.362603][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  751.021823][ T5160] Bluetooth: hci2: command tx timeout
[  753.087438][ T5160] Bluetooth: hci2: command tx timeout
[  754.117764][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  754.137438][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  754.147154][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  754.159907][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  754.170440][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  754.550440][T22296] chnl_net:caif_netlink_parms(): no params data found
[  754.624550][   T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  754.738267][   T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  754.766613][T22296] bridge0: port 1(bridge_slave_0) entered blocking state
[  754.774251][T22296] bridge0: port 1(bridge_slave_0) entered disabled state
[  754.782683][T22296] bridge_slave_0: entered allmulticast mode
[  754.790309][T22296] bridge_slave_0: entered promiscuous mode
[  754.800952][T22296] bridge0: port 2(bridge_slave_1) entered blocking state
[  754.808503][T22296] bridge0: port 2(bridge_slave_1) entered disabled state
[  754.815860][T22296] bridge_slave_1: entered allmulticast mode
[  754.823453][T22296] bridge_slave_1: entered promiscuous mode
[  754.876126][   T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  754.899214][T22296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  754.912122][T22296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  754.949135][T22296] team0: Port device team_slave_0 added
[  754.973602][   T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  754.995327][T22296] team0: Port device team_slave_1 added
[  755.024906][T22296] batman_adv: batadv0: Adding interface: batadv_slave_0
[  755.034879][T22296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  755.067524][T22296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  755.083481][T22296] batman_adv: batadv0: Adding interface: batadv_slave_1
[  755.101990][T22296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  755.128925][T22296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  755.206800][T22296] hsr_slave_0: entered promiscuous mode
[  755.220816][T22296] hsr_slave_1: entered promiscuous mode
[  755.228487][T22296] debugfs: 'hsr0' already exists in 'hsr'
[  755.234283][T22296] Cannot create hsr debugfs directory
[  755.474952][   T49] bridge_slave_1: left allmulticast mode
[  755.481330][   T49] bridge_slave_1: left promiscuous mode
[  755.492588][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  755.504258][   T49] bridge_slave_0: left allmulticast mode
[  755.510160][   T49] bridge_slave_0: left promiscuous mode
[  755.515937][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  755.723306][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  755.734358][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  755.745368][   T49] bond0 (unregistering): Released all slaves
[  756.184600][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  756.201270][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  756.218240][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  756.231599][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  756.241174][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  756.289081][ T5160] Bluetooth: hci1: command tx timeout
[  756.621635][T22349] syzkaller1: entered promiscuous mode
[  756.629021][T22349] syzkaller1: entered allmulticast mode
[  756.669114][   T49] hsr_slave_0: left promiscuous mode
[  756.681302][   T49] hsr_slave_1: left promiscuous mode
[  756.700038][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  756.717291][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  756.739121][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  756.757464][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  756.780433][   T49] veth1_macvtap: left promiscuous mode
[  756.786610][   T49] veth0_macvtap: left promiscuous mode
[  756.792266][   T49] veth1_vlan: left promiscuous mode
[  756.797685][   T49] veth0_vlan: left promiscuous mode
[  756.971058][   T49] team0 (unregistering): Port device team_slave_1 removed
[  756.993889][   T49] team0 (unregistering): Port device team_slave_0 removed
[  757.514590][T22367] comedi comedi3: pcm3724: I/O port conflict (0x9,16)
[  757.645818][T22337] chnl_net:caif_netlink_parms(): no params data found
[  758.025750][   T49] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  758.054610][T22337] bridge0: port 1(bridge_slave_0) entered blocking state
[  758.065186][T22337] bridge0: port 1(bridge_slave_0) entered disabled state
[  758.072908][T22337] bridge_slave_0: entered allmulticast mode
[  758.083894][T22337] bridge_slave_0: entered promiscuous mode
[  758.096918][T22337] bridge0: port 2(bridge_slave_1) entered blocking state
[  758.108130][T22337] bridge0: port 2(bridge_slave_1) entered disabled state
[  758.115556][T22337] bridge_slave_1: entered allmulticast mode
[  758.124645][T22337] bridge_slave_1: entered promiscuous mode
[  758.213579][   T49] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  758.251787][T22337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  758.267471][T22337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  758.276928][T22296] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  758.287363][ T5160] Bluetooth: hci4: command tx timeout
[  758.350795][   T49] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  758.367605][ T5160] Bluetooth: hci1: command tx timeout
[  758.373598][T22296] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  758.409932][T22296] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  758.430633][T22337] team0: Port device team_slave_0 added
[  758.470863][   T49] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  758.493598][T22296] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  758.495938][T22397] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3330'.
[  758.516707][T22337] team0: Port device team_slave_1 added
[  758.585642][T22337] batman_adv: batadv0: Adding interface: batadv_slave_0
[  758.607715][T22337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  758.635366][T22337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  758.718891][T22337] batman_adv: batadv0: Adding interface: batadv_slave_1
[  758.729601][T22337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  758.765089][T22337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  758.913495][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  758.934064][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  758.942777][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  758.951890][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  758.959822][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  759.060981][T22337] hsr_slave_0: entered promiscuous mode
[  759.078765][T22337] hsr_slave_1: entered promiscuous mode
[  759.086631][T22337] debugfs: 'hsr0' already exists in 'hsr'
[  759.116253][T22337] Cannot create hsr debugfs directory
[  759.249881][T22428] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  759.586010][   T49] bridge_slave_1: left allmulticast mode
[  759.592421][   T49] bridge_slave_1: left promiscuous mode
[  759.599391][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  759.609949][   T49] bridge_slave_0: left allmulticast mode
[  759.615623][   T49] bridge_slave_0: left promiscuous mode
[  759.621815][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  759.806002][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  759.819093][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  759.830794][   T49] bond0 (unregistering): Released all slaves
[  759.956584][   T49] tipc: Left network mode
[  760.026949][T22442] bridge0: entered allmulticast mode
[  760.091619][T22446] loop4: detected capacity change from 0 to 1
[  760.158089][T22446] loop4: detected capacity change from 1 to 0
[  760.313484][T22450] rdma_op ffff88807b8d19f0 conn xmit_rdma 0000000000000000
[  760.370342][T22296] 8021q: adding VLAN 0 to HW filter on device bond0
[  760.388095][ T5160] Bluetooth: hci4: command tx timeout
[  760.421761][   T49] hsr_slave_0: left promiscuous mode
[  760.431016][   T49] hsr_slave_1: left promiscuous mode
[  760.437355][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  760.444767][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  760.452418][ T5160] Bluetooth: hci1: command tx timeout
[  760.459850][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  760.467438][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  760.478179][   T49] veth1_macvtap: left promiscuous mode
[  760.483680][   T49] veth0_macvtap: left promiscuous mode
[  760.489357][   T49] veth1_vlan: left promiscuous mode
[  760.494602][   T49] veth0_vlan: left promiscuous mode
[  760.685555][   T49] team0 (unregistering): Port device team_slave_1 removed
[  760.700980][   T49] team0 (unregistering): Port device team_slave_0 removed
[  760.896365][T22414] chnl_net:caif_netlink_parms(): no params data found
[  760.960893][T22296] 8021q: adding VLAN 0 to HW filter on device team0
[  760.997990][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state
[  761.005178][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state
[  761.019487][ T5160] Bluetooth: hci0: command tx timeout
[  761.164317][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  761.171533][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  761.183012][T22414] bridge0: port 1(bridge_slave_0) entered blocking state
[  761.190382][T22414] bridge0: port 1(bridge_slave_0) entered disabled state
[  761.198114][T22414] bridge_slave_0: entered allmulticast mode
[  761.205511][T22414] bridge_slave_0: entered promiscuous mode
[  761.233336][T22414] bridge0: port 2(bridge_slave_1) entered blocking state
[  761.244066][T22414] bridge0: port 2(bridge_slave_1) entered disabled state
[  761.252546][T22414] bridge_slave_1: entered allmulticast mode
[  761.262892][T22414] bridge_slave_1: entered promiscuous mode
[  761.337971][T22414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  761.355642][T22414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  761.392305][T22414] team0: Port device team_slave_0 added
[  761.401331][T22414] team0: Port device team_slave_1 added
[  761.454615][T22414] batman_adv: batadv0: Adding interface: batadv_slave_0
[  761.470452][T22414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  761.496848][T22414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  761.511089][T22414] batman_adv: batadv0: Adding interface: batadv_slave_1
[  761.519033][T22414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  761.546036][T22414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  761.672535][T22414] hsr_slave_0: entered promiscuous mode
[  761.680252][T22414] hsr_slave_1: entered promiscuous mode
[  761.686774][T22414] debugfs: 'hsr0' already exists in 'hsr'
[  761.692780][T22414] Cannot create hsr debugfs directory
[  761.776956][  T114] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  761.923440][  T114] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  762.001008][T22337] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  762.013632][T22337] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  762.023626][T22337] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  762.074941][  T114] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  762.092452][T22337] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  762.199397][  T114] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  762.244690][T22296] 8021q: adding VLAN 0 to HW filter on device batadv0
[  762.447906][ T5160] Bluetooth: hci4: command tx timeout
[  762.494668][T22296] veth0_vlan: entered promiscuous mode
[  762.541478][ T5160] Bluetooth: hci1: command tx timeout
[  762.588759][T22296] veth1_vlan: entered promiscuous mode
[  762.660893][  T114] bridge_slave_1: left allmulticast mode
[  762.667519][  T114] bridge_slave_1: left promiscuous mode
[  762.673301][  T114] bridge0: port 2(bridge_slave_1) entered disabled state
[  762.682600][  T114] bridge_slave_0: left allmulticast mode
[  762.689039][  T114] bridge_slave_0: left promiscuous mode
[  762.694768][  T114] bridge0: port 1(bridge_slave_0) entered disabled state
[  762.859405][  T114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  762.872132][  T114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  762.883115][  T114] bond0 (unregistering): Released all slaves
[  762.914269][T22337] 8021q: adding VLAN 0 to HW filter on device bond0
[  762.981023][T22296] veth0_macvtap: entered promiscuous mode
[  763.019647][T22296] veth1_macvtap: entered promiscuous mode
[  763.052604][T22337] 8021q: adding VLAN 0 to HW filter on device team0
[  763.080039][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  763.087278][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  763.094726][ T5160] Bluetooth: hci0: command tx timeout
[  763.115862][T22296] batman_adv: batadv0: Interface activated: batadv_slave_0
[  763.130219][T22296] batman_adv: batadv0: Interface activated: batadv_slave_1
[  763.152134][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  763.159310][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  763.193305][  T744] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  763.203463][  T744] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  763.222278][  T744] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  763.233721][  T744] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  763.289266][  T114] hsr_slave_0: left promiscuous mode
[  763.309662][  T114] hsr_slave_1: left promiscuous mode
[  763.317171][  T114] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  763.324609][  T114] batman_adv: batadv0: Removing interface: batadv_slave_0
[  763.333807][  T114] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  763.344803][  T114] batman_adv: batadv0: Removing interface: batadv_slave_1
[  763.360736][T22467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3341'.
[  763.369852][  T114] veth1_macvtap: left promiscuous mode
[  763.375344][  T114] veth0_macvtap: left promiscuous mode
[  763.381212][  T114] veth1_vlan: left promiscuous mode
[  763.388116][  T114] veth0_vlan: left promiscuous mode
[  763.675446][  T114] team0 (unregistering): Port device team_slave_1 removed
[  763.692873][  T114] team0 (unregistering): Port device team_slave_0 removed
[  764.225773][T20595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  764.250361][T20595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  764.395749][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  764.409940][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  764.450987][T22414] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  764.465558][T22414] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  764.486518][T22414] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  764.510573][T22414] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  764.537916][ T5160] Bluetooth: hci4: command tx timeout
[  764.561467][T22337] 8021q: adding VLAN 0 to HW filter on device batadv0
[  764.899437][T22414] 8021q: adding VLAN 0 to HW filter on device bond0
[  764.984075][T22414] 8021q: adding VLAN 0 to HW filter on device team0
[  765.033275][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state
[  765.040493][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state
[  765.051520][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state
[  765.058714][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state
[  765.059095][T22512] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3352'.
[  765.167475][ T5160] Bluetooth: hci0: command tx timeout
[  765.269169][T22337] veth0_vlan: entered promiscuous mode
[  765.303405][T22337] veth1_vlan: entered promiscuous mode
[  765.446143][T22337] veth0_macvtap: entered promiscuous mode
[  765.460602][ T5950] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  765.481061][T22337] veth1_macvtap: entered promiscuous mode
[  765.542299][T22337] batman_adv: batadv0: Interface activated: batadv_slave_0
[  765.576306][T22337] batman_adv: batadv0: Interface activated: batadv_slave_1
[  765.625890][   T36] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  765.638300][   T36] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  765.648508][   T36] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  765.654696][ T5950] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  765.674109][ T5950] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  765.689613][ T5950] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  765.690541][   T36] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  765.707882][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  765.726587][T22414] 8021q: adding VLAN 0 to HW filter on device batadv0
[  765.734121][ T5950] usb 2-1: Product: syz
[  765.739794][ T5950] usb 2-1: Manufacturer: syz
[  765.751681][ T5950] usb 2-1: SerialNumber: syz
[  765.765009][ T5950] usb 2-1: 0:2 : does not exist
[  765.978181][ T5950] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  765.989620][T20595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  766.005929][T20595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  766.111312][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  766.133434][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  766.164414][ T5950] usb 2-1: USB disconnect, device number 15
[  766.536542][T22414] veth0_vlan: entered promiscuous mode
[  766.545185][T22554] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3360'.
[  766.574629][T22414] veth1_vlan: entered promiscuous mode
[  766.685384][T22414] veth0_macvtap: entered promiscuous mode
[  766.733441][T22414] veth1_macvtap: entered promiscuous mode
[  766.778864][T22562] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  766.788944][   T30] audit: type=1326 audit(1773810898.455:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22546 comm="syz.9.3319" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f240bd9c799 code=0x0
[  766.794301][T22414] batman_adv: batadv0: Interface activated: batadv_slave_0
[  766.812462][T22562] overlayfs: missing 'lowerdir'
[  766.870575][T22414] batman_adv: batadv0: Interface activated: batadv_slave_1
[  766.895329][  T114] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  766.956575][  T114] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  766.988876][  T114] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  767.020406][  T114] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  767.186797][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  767.200132][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  767.235684][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  767.247508][ T5844] Bluetooth: hci0: command tx timeout
[  767.255694][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  767.977106][   T24] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[  768.147318][   T24] usb 7-1: Using ep0 maxpacket: 32
[  768.162106][   T24] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[  768.172844][   T24] usb 7-1: config 0 has no interface number 0
[  768.180603][   T24] usb 7-1: config 0 interface 184 has no altsetting 0
[  768.191060][   T24] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  768.211762][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  768.220215][   T24] usb 7-1: Product: syz
[  768.224489][   T24] usb 7-1: Manufacturer: syz
[  768.230529][   T24] usb 7-1: SerialNumber: syz
[  768.240551][   T24] usb 7-1: config 0 descriptor??
[  769.007150][ T5160] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  769.008172][ T5844] Bluetooth: hci3: command 0x1003 tx timeout
[  769.185914][T22658] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3368'.
[  769.324103][T22664] comedi comedi3: pcm3724: I/O port conflict (0x9,16)
[  769.342296][   T24] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71
[  769.369327][T22666] netlink: 'syz.0.3370': attribute type 3 has an invalid length.
[  769.373950][   T24] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  769.378619][T22666] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3370'.
[  769.411641][   T24] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  769.422803][   T24] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  769.449359][   T24] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  769.470682][   T24] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  769.493281][   T24] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71
[  769.522454][   T24] usb 7-1: USB disconnect, device number 39
[  770.379325][   T30] audit: type=1326 audit(1773810902.045:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22699 comm="syz.1.3375" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f926899c799 code=0x0
[  770.458271][ T5844] Bluetooth: hci3: sending frame failed (-49)
[  770.469397][ T5160] Bluetooth: hci3: Opcode 0x1003 failed: -49
[  770.900390][T22732] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3378'.
[  771.156326][T22747] syzkaller1: entered promiscuous mode
[  771.165138][T22747] syzkaller1: entered allmulticast mode
[  771.964189][   T30] audit: type=1326 audit(1773810903.625:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22783 comm="syz.6.3387" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa81059c799 code=0x0
[  773.706239][T22874] input: syz1 as /devices/virtual/input/input145
[  773.800163][T22880] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3394'.
[  774.054136][ T5160] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  777.062601][T23043] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3399'.
[  777.073367][T23043] netlink: 'syz.0.3399': attribute type 2 has an invalid length.
[  777.207373][T23056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  777.234991][T23056] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  777.244719][T23056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  777.268192][T23056] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  780.641000][   T30] audit: type=1326 audit(1773810912.305:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23217 comm="syz.0.3405" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9dfa99c799 code=0x0
[  782.767234][ T5160] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  782.768942][ T5844] Bluetooth: hci3: command 0x1003 tx timeout
[  785.150275][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  785.176254][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  785.186641][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  785.196763][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  785.206867][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  785.633491][T23448] chnl_net:caif_netlink_parms(): no params data found
[  785.715664][   T49] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  785.861877][   T49] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  785.934428][T23448] bridge0: port 1(bridge_slave_0) entered blocking state
[  785.950168][T23448] bridge0: port 1(bridge_slave_0) entered disabled state
[  785.971282][T23448] bridge_slave_0: entered allmulticast mode
[  785.979771][T23448] bridge_slave_0: entered promiscuous mode
[  785.993674][T23448] bridge0: port 2(bridge_slave_1) entered blocking state
[  786.006243][T23448] bridge0: port 2(bridge_slave_1) entered disabled state
[  786.015980][T23448] bridge_slave_1: entered allmulticast mode
[  786.041261][T23448] bridge_slave_1: entered promiscuous mode
[  786.102423][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  786.120191][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  786.134493][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  786.145243][   T49] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  786.157218][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  786.166449][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  786.267806][   T49] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  786.342855][T23448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  786.383713][T23448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  786.543572][T23448] team0: Port device team_slave_0 added
[  786.562827][T23448] team0: Port device team_slave_1 added
[  786.752322][T23448] batman_adv: batadv0: Adding interface: batadv_slave_0
[  786.759682][T23448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  786.787107][T23448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  786.801202][T23448] batman_adv: batadv0: Adding interface: batadv_slave_1
[  786.808767][T23448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  786.836078][T23448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  786.965063][T23448] hsr_slave_0: entered promiscuous mode
[  786.972324][T23448] hsr_slave_1: entered promiscuous mode
[  786.979000][T23448] debugfs: 'hsr0' already exists in 'hsr'
[  786.984750][T23448] Cannot create hsr debugfs directory
[  787.009930][   T49] bridge_slave_1: left allmulticast mode
[  787.015976][   T49] bridge_slave_1: left promiscuous mode
[  787.022932][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  787.032073][   T49] bridge_slave_0: left allmulticast mode
[  787.038302][   T49] bridge_slave_0: left promiscuous mode
[  787.043998][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  787.192212][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  787.203103][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  787.214163][   T49] bond0 (unregistering): Released all slaves
[  787.247250][ T5844] Bluetooth: hci3: command tx timeout
[  787.355690][T23472] chnl_net:caif_netlink_parms(): no params data found
[  787.599431][T23472] bridge0: port 1(bridge_slave_0) entered blocking state
[  787.626503][T23472] bridge0: port 1(bridge_slave_0) entered disabled state
[  787.636544][T23472] bridge_slave_0: entered allmulticast mode
[  787.648893][T23472] bridge_slave_0: entered promiscuous mode
[  787.674284][   T49] hsr_slave_0: left promiscuous mode
[  787.680580][   T49] hsr_slave_1: left promiscuous mode
[  787.686750][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  787.695734][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  787.709363][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  787.716823][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  787.732894][   T49] veth1_macvtap: left promiscuous mode
[  787.740575][   T49] veth0_macvtap: left promiscuous mode
[  787.746723][   T49] veth1_vlan: left promiscuous mode
[  787.752786][   T49] veth0_vlan: left promiscuous mode
[  788.012890][   T49] team0 (unregistering): Port device team_slave_1 removed
[  788.026630][   T49] team0 (unregistering): Port device team_slave_0 removed
[  788.129827][T23472] bridge0: port 2(bridge_slave_1) entered blocking state
[  788.137443][T23472] bridge0: port 2(bridge_slave_1) entered disabled state
[  788.144694][T23472] bridge_slave_1: entered allmulticast mode
[  788.155855][T23472] bridge_slave_1: entered promiscuous mode
[  788.244712][T23472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  788.280811][T23472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  788.298610][ T5844] Bluetooth: hci4: command tx timeout
[  788.509542][T23472] team0: Port device team_slave_0 added
[  788.542412][T23472] team0: Port device team_slave_1 added
[  788.640471][T23472] batman_adv: batadv0: Adding interface: batadv_slave_0
[  788.655093][T23472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  788.705738][T23472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  788.771047][T23472] batman_adv: batadv0: Adding interface: batadv_slave_1
[  788.778876][T23472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  788.805262][T23472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  788.896039][T23472] hsr_slave_0: entered promiscuous mode
[  788.902802][T23472] hsr_slave_1: entered promiscuous mode
[  788.912906][T23472] debugfs: 'hsr0' already exists in 'hsr'
[  788.918763][T23472] Cannot create hsr debugfs directory
[  789.115271][   T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  789.218156][   T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  789.327264][ T5844] Bluetooth: hci3: command tx timeout
[  789.335500][T23448] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  789.375992][   T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  789.395853][T23448] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  789.408420][T23448] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  789.422588][T23448] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  789.505126][   T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  789.804105][T23448] 8021q: adding VLAN 0 to HW filter on device bond0
[  789.901232][T23448] 8021q: adding VLAN 0 to HW filter on device team0
[  789.908974][   T49] bridge_slave_1: left allmulticast mode
[  789.914636][   T49] bridge_slave_1: left promiscuous mode
[  789.921160][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  789.930420][   T49] bridge_slave_0: left allmulticast mode
[  789.936056][   T49] bridge_slave_0: left promiscuous mode
[  789.943779][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  790.136191][ T5160] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  790.154659][ T5160] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  790.170135][ T5160] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  790.182190][ T5160] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  790.192117][ T5160] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  790.284249][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  790.303727][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  790.314782][   T49] bond0 (unregistering): Released all slaves
[  790.380392][ T5844] Bluetooth: hci4: command tx timeout
[  790.450535][T20595] bridge0: port 1(bridge_slave_0) entered blocking state
[  790.457684][T20595] bridge0: port 1(bridge_slave_0) entered forwarding state
[  790.554680][T23472] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  790.568238][T23472] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  790.581705][T23472] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  790.602778][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  790.610004][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  790.652421][T23472] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  790.795120][   T49] hsr_slave_0: left promiscuous mode
[  790.801044][   T49] hsr_slave_1: left promiscuous mode
[  790.806855][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  790.818532][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  790.826512][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  790.834312][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  790.845299][   T49] veth1_macvtap: left promiscuous mode
[  790.851185][   T49] veth0_macvtap: left promiscuous mode
[  790.858062][   T49] veth1_vlan: left promiscuous mode
[  790.863369][   T49] veth0_vlan: left promiscuous mode
[  791.050655][   T49] team0 (unregistering): Port device team_slave_1 removed
[  791.064151][   T49] team0 (unregistering): Port device team_slave_0 removed
[  791.355995][T23529] chnl_net:caif_netlink_parms(): no params data found
[  791.412566][ T5844] Bluetooth: hci3: command tx timeout
[  791.606818][T23472] 8021q: adding VLAN 0 to HW filter on device bond0
[  791.613937][T23529] bridge0: port 1(bridge_slave_0) entered blocking state
[  791.621304][T23529] bridge0: port 1(bridge_slave_0) entered disabled state
[  791.628772][T23529] bridge_slave_0: entered allmulticast mode
[  791.636131][T23529] bridge_slave_0: entered promiscuous mode
[  791.649902][T23529] bridge0: port 2(bridge_slave_1) entered blocking state
[  791.657372][T23529] bridge0: port 2(bridge_slave_1) entered disabled state
[  791.664678][T23529] bridge_slave_1: entered allmulticast mode
[  791.672609][T23529] bridge_slave_1: entered promiscuous mode
[  791.709789][T23529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  791.723243][T23529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  791.762981][T23529] team0: Port device team_slave_0 added
[  791.774611][T23529] team0: Port device team_slave_1 added
[  791.820374][T23529] batman_adv: batadv0: Adding interface: batadv_slave_0
[  791.828746][T23529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  791.854901][T23529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  791.879684][T23472] 8021q: adding VLAN 0 to HW filter on device team0
[  791.889051][T23529] batman_adv: batadv0: Adding interface: batadv_slave_1
[  791.896008][T23529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  791.922346][T23529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  791.981292][   T49] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  792.020387][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  792.027533][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  792.044374][T23448] 8021q: adding VLAN 0 to HW filter on device batadv0
[  792.122561][   T49] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  792.162074][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  792.169265][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  792.185799][T23529] hsr_slave_0: entered promiscuous mode
[  792.196015][T23529] hsr_slave_1: entered promiscuous mode
[  792.211196][T23529] debugfs: 'hsr0' already exists in 'hsr'
[  792.222869][T23529] Cannot create hsr debugfs directory
[  792.266257][   T49] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  792.287547][ T5844] Bluetooth: hci1: command tx timeout
[  792.381765][   T49] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  792.447792][ T5844] Bluetooth: hci4: command tx timeout
[  792.870896][   T49] bridge_slave_1: left allmulticast mode
[  792.878100][   T49] bridge_slave_1: left promiscuous mode
[  792.883964][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  792.894376][   T49] bridge_slave_0: left allmulticast mode
[  792.902293][   T49] bridge_slave_0: left promiscuous mode
[  792.908316][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  793.062106][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  793.073536][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  793.083541][   T49] bond0 (unregistering): Released all slaves
[  793.095471][T23448] veth0_vlan: entered promiscuous mode
[  793.165550][T23472] 8021q: adding VLAN 0 to HW filter on device batadv0
[  793.188187][T23448] veth1_vlan: entered promiscuous mode
[  793.304864][T23448] veth0_macvtap: entered promiscuous mode
[  793.364101][T23448] veth1_macvtap: entered promiscuous mode
[  793.405464][T23448] batman_adv: batadv0: Interface activated: batadv_slave_0
[  793.434668][T23448] batman_adv: batadv0: Interface activated: batadv_slave_1
[  793.453068][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  793.471872][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  793.502871][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  793.510326][ T5844] Bluetooth: hci3: command tx timeout
[  793.513896][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  793.535924][   T49] hsr_slave_0: left promiscuous mode
[  793.544092][   T49] hsr_slave_1: left promiscuous mode
[  793.550210][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  793.557700][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  793.565566][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  793.573957][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  793.586894][   T49] veth1_macvtap: left promiscuous mode
[  793.593910][   T49] veth0_macvtap: left promiscuous mode
[  793.599907][   T49] veth1_vlan: left promiscuous mode
[  793.605214][   T49] veth0_vlan: left promiscuous mode
[  793.782233][   T49] team0 (unregistering): Port device team_slave_1 removed
[  793.796160][   T49] team0 (unregistering): Port device team_slave_0 removed
[  794.251185][T23472] veth0_vlan: entered promiscuous mode
[  794.270203][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  794.285945][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  794.303378][T23472] veth1_vlan: entered promiscuous mode
[  794.357641][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  794.370542][ T5844] Bluetooth: hci1: command tx timeout
[  794.372889][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  794.481117][T23472] veth0_macvtap: entered promiscuous mode
[  794.508949][T23472] veth1_macvtap: entered promiscuous mode
[  794.529214][ T5844] Bluetooth: hci4: command tx timeout
[  794.600338][T23472] batman_adv: batadv0: Interface activated: batadv_slave_0
[  794.652217][T23472] batman_adv: batadv0: Interface activated: batadv_slave_1
[  794.663093][T23529] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  794.677616][T23529] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  794.692655][T23529] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  794.705971][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  794.715057][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  794.728808][T23529] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  794.739834][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  794.749296][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  794.956802][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  794.965918][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  795.013975][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  795.021498][T23529] 8021q: adding VLAN 0 to HW filter on device bond0
[  795.025172][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  795.072771][T23529] 8021q: adding VLAN 0 to HW filter on device team0
[  795.110564][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  795.117779][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  795.142233][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  795.149449][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  795.369933][T23585] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3410'.
[  795.591058][T23529] 8021q: adding VLAN 0 to HW filter on device batadv0
[  796.107445][T11013] usb 6-1: new full-speed USB device number 45 using dummy_hcd
[  796.131960][   T30] audit: type=1326 audit(1773810927.795:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23602 comm="syz.4.3414" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4cb519c799 code=0x0
[  796.181306][T23529] veth0_vlan: entered promiscuous mode
[  796.201771][T23529] veth1_vlan: entered promiscuous mode
[  796.268617][T11013] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  796.281366][T23529] veth0_macvtap: entered promiscuous mode
[  796.292521][T11013] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  796.309335][T23529] veth1_macvtap: entered promiscuous mode
[  796.318977][T11013] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  796.343944][T11013] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  796.363600][T23529] batman_adv: batadv0: Interface activated: batadv_slave_0
[  796.371797][T11013] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  796.390346][T11013] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  796.399673][T11013] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=70
[  796.410312][T11013] usb 6-1: Product: syz
[  796.414613][T11013] usb 6-1: Manufacturer: syz
[  796.422352][T11013] usb 6-1: SerialNumber: syz
[  796.430619][T23529] batman_adv: batadv0: Interface activated: batadv_slave_1
[  796.444784][T11013] usb 6-1: config 0 descriptor??
[  796.464098][   T49] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  796.464500][ T5844] Bluetooth: hci1: command tx timeout
[  796.489784][   T49] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  796.502835][   T49] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  796.514114][   T49] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  796.671973][T11013] radio-si470x 6-1:0.0: DeviceID=0xf8e8 ChipID=0x3ca7
[  796.721644][  T114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  796.744787][  T114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  796.794783][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  796.810285][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  796.880397][T11013] radio-si470x 6-1:0.0: software version 248, hardware version 232
[  797.056141][T23643] 
[  797.058508][T23643] ======================================================
[  797.065599][T23643] WARNING: possible circular locking dependency detected
[  797.072705][T23643] syzkaller #0 Tainted: G             L     
[  797.078687][T23643] ------------------------------------------------------
[  797.085771][T23643] syz.7.3409/23643 is trying to acquire lock:
[  797.091834][T23643] ffff8880655d8338 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xaf/0x130
[  797.100800][T23643] 
[  797.100800][T23643] but task is already holding lock:
[  797.108167][T23643] ffff88807a3bab30 (&ctx->map_changing_lock){++++}-{4:4}, at: mfill_get_vma+0x162/0x660
[  797.117921][T23643] 
[  797.117921][T23643] which lock already depends on the new lock.
[  797.117921][T23643] 
[  797.128313][T23643] 
[  797.128313][T23643] the existing dependency chain (in reverse order) is:
[  797.137307][T23643] 
[  797.137307][T23643] -> #1 (&ctx->map_changing_lock){++++}-{4:4}:
[  797.145744][T23643]        down_write+0x96/0x200
[  797.150497][T23643]        mremap_userfaultfd_prep+0x117/0x190
[  797.156464][T23643]        move_vma+0xcaa/0x1900
[  797.161212][T23643]        mremap_to+0x788/0x850
[  797.165964][T23643]        __se_sys_mremap+0xe6d/0x11d0
[  797.171325][T23643]        do_syscall_64+0x14d/0xf80
[  797.176419][T23643]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  797.182817][T23643] 
[  797.182817][T23643] -> #0 (&mm->mmap_lock){++++}-{4:4}:
[  797.190359][T23643]        __lock_acquire+0x15a5/0x2cf0
[  797.195722][T23643]        lock_acquire+0xf0/0x2e0
[  797.200640][T23643]        __might_fault+0xcb/0x130
[  797.205648][T23643]        userfaultfd_ioctl+0x2372/0x4c70
[  797.211272][T23643]        __se_sys_ioctl+0xfc/0x170
[  797.216374][T23643]        do_syscall_64+0x14d/0xf80
[  797.221472][T23643]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  797.227867][T23643] 
[  797.227867][T23643] other info that might help us debug this:
[  797.227867][T23643] 
[  797.238077][T23643]  Possible unsafe locking scenario:
[  797.238077][T23643] 
[  797.245533][T23643]        CPU0                    CPU1
[  797.250941][T23643]        ----                    ----
[  797.256303][T23643]   rlock(&ctx->map_changing_lock);
[  797.261500][T23643]                                lock(&mm->mmap_lock);
[  797.268333][T23643]                                lock(&ctx->map_changing_lock);
[  797.275949][T23643]   rlock(&mm->mmap_lock);
[  797.280347][T23643] 
[  797.280347][T23643]  *** DEADLOCK ***
[  797.280347][T23643] 
[  797.288538][T23643] 2 locks held by syz.7.3409/23643:
[  797.293712][T23643]  #0: ffff8880881edbc8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  797.302977][T23643]  #1: ffff88807a3bab30 (&ctx->map_changing_lock){++++}-{4:4}, at: mfill_get_vma+0x162/0x660
[  797.313168][T23643] 
[  797.313168][T23643] stack backtrace:
[  797.319045][T23643] CPU: 1 UID: 0 PID: 23643 Comm: syz.7.3409 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  797.319065][T23643] Tainted: [L]=SOFTLOCKUP
[  797.319070][T23643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  797.319078][T23643] Call Trace:
[  797.319087][T23643]  <TASK>
[  797.319093][T23643]  dump_stack_lvl+0xe8/0x150
[  797.319115][T23643]  print_circular_bug+0x2e1/0x300
[  797.319131][T23643]  check_noncircular+0x12e/0x150
[  797.319145][T23643]  __lock_acquire+0x15a5/0x2cf0
[  797.319163][T23643]  ? __kernel_text_address+0xd/0x30
[  797.319180][T23643]  ? unwind_get_return_address+0x4d/0x90
[  797.319192][T23643]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  797.319209][T23643]  lock_acquire+0xf0/0x2e0
[  797.319225][T23643]  ? __might_fault+0xaf/0x130
[  797.319242][T23643]  ? __might_fault+0xaf/0x130
[  797.319256][T23643]  __might_fault+0xcb/0x130
[  797.319270][T23643]  ? __might_fault+0xaf/0x130
[  797.319285][T23643]  userfaultfd_ioctl+0x2372/0x4c70
[  797.319301][T23643]  ? __kasan_slab_free+0x5c/0x80
[  797.319312][T23643]  ? kfree+0x1c5/0x650
[  797.319329][T23643]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  797.319350][T23643]  ? kasan_quarantine_put+0xbb/0x1f0
[  797.319368][T23643]  ? tomoyo_path_number_perm+0x219/0x630
[  797.319391][T23643]  ? tomoyo_path_number_perm+0x219/0x630
[  797.319406][T23643]  ? do_vfs_ioctl+0x1166/0x1530
[  797.319419][T23643]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  797.319435][T23643]  ? do_futex+0x395/0x420
[  797.319457][T23643]  ? __fget_files+0x2a/0x420
[  797.319474][T23643]  ? __fget_files+0x2a/0x420
[  797.319487][T23643]  ? __fget_files+0x3a0/0x420
[  797.319500][T23643]  ? __fget_files+0x2a/0x420
[  797.319515][T23643]  ? bpf_lsm_file_ioctl+0x9/0x20
[  797.319527][T23643]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  797.319542][T23643]  __se_sys_ioctl+0xfc/0x170
[  797.319554][T23643]  do_syscall_64+0x14d/0xf80
[  797.319566][T23643]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  797.319579][T23643]  ? clear_bhb_loop+0x40/0x90
[  797.319592][T23643]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  797.319605][T23643] RIP: 0033:0x7f7ee3b9c799
[  797.319618][T23643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  797.319629][T23643] RSP: 002b:00007f7ee1db4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  797.319643][T23643] RAX: ffffffffffffffda RBX: 00007f7ee3e16180 RCX: 00007f7ee3b9c799
[  797.319652][T23643] RDX: 00002000000005c0 RSI: 00000000c020aa07 RDI: 0000000000000009
[  797.319661][T23643] RBP: 00007f7ee3c32c99 R08: 0000000000000000 R09: 0000000000000000
[  797.319670][T23643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  797.319677][T23643] R13: 00007f7ee3e16218 R14: 00007f7ee3e16180 R15: 00007ffef19ce368
[  797.319691][T23643]  </TASK>
[  797.618798][T11013] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -110
[  797.627413][T11013] radio-si470x 6-1:0.0: submitting int urb failed (-90)
[  797.634742][T11013] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -32
[  797.643305][T11013] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -22
[  798.251266][   T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  798.313336][   T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  798.328478][T10093] usb 6-1: USB disconnect, device number 45
[  798.392916][   T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  798.453246][   T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  798.549177][   T49] bridge_slave_1: left allmulticast mode
[  798.555903][   T49] bridge_slave_1: left promiscuous mode
[  798.562200][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  798.571261][   T49] bridge_slave_0: left allmulticast mode
[  798.576941][   T49] bridge_slave_0: left promiscuous mode
[  798.582910][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  798.704487][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  798.716248][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  798.730183][   T49] bond0 (unregistering): Released all slaves
[  798.969986][   T49] hsr_slave_0: left promiscuous mode
[  798.975815][   T49] hsr_slave_1: left promiscuous mode
[  798.983879][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  798.995456][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  799.003641][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  799.012872][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  799.023908][   T49] veth1_macvtap: left promiscuous mode
[  799.029809][   T49] veth0_macvtap: left promiscuous mode
[  799.035382][   T49] veth1_vlan: left promiscuous mode
[  799.041005][   T49] veth0_vlan: left promiscuous mode
[  799.200379][   T49] team0 (unregistering): Port device team_slave_1 removed
[  799.214235][   T49] team0 (unregistering): Port device team_slave_0 removed
[  799.664901][   T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  799.756187][   T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  799.791373][   T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  799.852590][   T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  799.946041][   T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  800.007556][   T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  800.075036][   T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  800.132566][   T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  800.228740][   T49] bridge_slave_1: left allmulticast mode
[  800.236553][   T49] bridge_slave_1: left promiscuous mode
[  800.243137][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  800.252433][   T49] bridge_slave_0: left allmulticast mode
[  800.259138][   T49] bridge_slave_0: left promiscuous mode
[  800.264872][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  800.274715][   T49] bridge_slave_1: left allmulticast mode
[  800.281018][   T49] bridge_slave_1: left promiscuous mode
[  800.288487][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[  800.299969][   T49] bridge_slave_0: left allmulticast mode
[  800.305649][   T49] bridge_slave_0: left promiscuous mode
[  800.315525][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[  800.463425][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  800.478867][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  800.490758][   T49] bond0 (unregistering): Released all slaves
[  800.534941][   T49] bridge0 (unregistering): left allmulticast mode
[  800.576429][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  800.586849][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  800.596916][   T49] bond0 (unregistering): Released all slaves
[  800.979190][   T49] hsr_slave_0: left promiscuous mode
[  800.985005][   T49] hsr_slave_1: left promiscuous mode
[  800.992975][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  801.000700][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  801.014390][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  801.023270][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  801.035948][   T49] hsr_slave_0: left promiscuous mode
[  801.047707][   T49] hsr_slave_1: left promiscuous mode
[  801.053528][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  801.061429][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[  801.072396][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  801.080043][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[  801.093247][   T49] veth1_macvtap: left promiscuous mode
[  801.099668][   T49] veth0_macvtap: left promiscuous mode
[  801.105234][   T49] veth1_vlan: left promiscuous mode
[  801.111008][   T49] veth0_vlan: left promiscuous mode
[  801.121645][   T49] veth1_macvtap: left promiscuous mode
[  801.127217][   T49] veth0_macvtap: left promiscuous mode
[  801.132724][   T49] veth1_vlan: left promiscuous mode
[  801.138043][   T49] veth0_vlan: left promiscuous mode
[  801.255515][   T49] team0 (unregistering): Port device team_slave_1 removed
[  801.267206][   T49] team0 (unregistering): Port device team_slave_0 removed
[  801.375012][   T49] team0 (unregistering): Port device team_slave_1 removed
[  801.385213][   T49] team0 (unregistering): Port device team_slave_0 removed