last executing test programs:

25.995316649s ago: executing program 4 (id=5):
r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff)
r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x1e, r0, r1, 0xfffffffffffffffb, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r2 = syz_open_dev$media(&(0x7f0000000000), 0xe, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r2, 0xc0487c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66667a4, 0x0, &(0x7f0000000fc0)})
r3 = signalfd(r2, &(0x7f0000000340)={[0x3]}, 0x8)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000380)={0xc, 0x0, <r5=>0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0)
r6 = userfaultfd(0x801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x2, 0x1, "fa"}, 0x9)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000580)={0x0, 0xfa, "bde6a9d00e55e59929822d391c982477b645ca19b283e839f3ba21b2c6222eea665717c4813d4f6802cb03d21ff1700409370f30be0a7dc8cda95849500f38095a1035d1cef53191a86556d5ef309e46c802d4826b46ff4b64cdfedee92cb0bd33c8ec3214125b2b52e78f82cfb600ce234afee4384ac1d8dd5a778044f0d0e04326aa9c804f43c9fe75b56550a0869f88819cb9d213280d78412a3a8617dc71810b71d4f77e916882461fa8e348a5bfd775b4f7cb8cc35de86aa0621fb7c0b0f0765aa699e6850ad480ae00b41e3282ac23b4da3c27fe42df1b747deeed16fc0b0c31ed8d4db67edecac149b8d5b1350b72b41b869506826f0b"}, &(0x7f00000006c0)=0x102)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
write(r7, &(0x7f0000000340), 0x11000)
write$sequencer(r7, &(0x7f0000000140)=[@raw={0xfe, 0xe, "1c8a8ab2a55c"}, @raw={0xfe, 0x2, "c5bd2ea32d72"}, @e={0xff, 0x605d6c24e1cdbd1a, 0xa, 0xe, @generic=0x80, 0xfe, 0x0, 0x4}, @l={0x92, 0xf, 0xb0, 0x1c, 0x96, 0x1, 0x9}, @e={0xff, 0x0, 0x1, 0x0, @SEQ_CONTROLLER=0xfe, 0x5c, 0x1, 0x7}], 0x28)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
ioctl$UFFDIO_MOVE(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000fee000/0xf000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0xf000, 0x2})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r5, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x14, r8})
close(0x3)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0x6}, {0x6}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x24000084)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r9)

23.606361888s ago: executing program 4 (id=11):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00')
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f00000002c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00')
keyctl$dh_compute(0x17, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={'rmd160-generic\x00'}})
r5 = socket(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7)
getsockname$packet(r7, &(0x7f0000000680)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x84, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0x8, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x54, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x8, 0x5, 0x1, 0x5, 0x17, 0x16, 0x5}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x2, 0x0, 0x6, 0xe, 0x19, 0xc, 0x8}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xc4d, 0xb7, 0x8, 0x17, 0x1d, 0xd}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x9, 0xa79, 0x6, 0x5, 0x20, 0x12, 0x4}}]}}]}, 0x84}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x8070bd29, 0x4, {0x0, 0x0, 0x0, r8, {0x9}, {0xffff}, {0x0, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x40)
sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

20.58628506s ago: executing program 4 (id=21):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_usb_connect(0x0, 0x6d4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x0)
r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff, 0x3, 0x2}, 0x18, 0x0)
r3 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x0)
read$usbmon(r3, 0x0, 0x0)
landlock_restrict_self(r2, 0x9)
r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x73, 0x90001)
ioctl$VIDIOC_QUERYCTRL(r5, 0xc0445624, &(0x7f0000000040)={0x32d, 0x100, "13075fcb96d003bdcb954cd4853f8def82903c793f13705b5438f34ee4f03695", 0x6, 0x6, 0x6, 0x5})
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f00000002c0)={0x9, 0xc, 0x0, 0x8000000000000001, 0x1d01})
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, 0x0, 0x0)
r8 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
ioctl$UFFDIO_ZEROPAGE(r8, 0xc020aa04, 0x0)
r9 = syz_open_dev$ptys(0xc, 0x3, 0x0)
r10 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
fchdir(r10)
exit(0x0)
getcwd(0x0, 0x0)
ioctl$TIOCL_SETSEL(r9, 0x541c, &(0x7f0000000180)={0x2, {0x2, 0x3ff, 0x1, 0x4, 0xf, 0x3}})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff)
r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="11072abd7000ffdbdf250500000008000300", @ANYRES16=r13], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
r14 = dup2(r2, r6)
getsockopt$inet_sctp_SCTP_RECVRCVINFO(r14, 0x84, 0x20, &(0x7f0000000140), &(0x7f00000001c0)=0x4)

20.173778945s ago: executing program 4 (id=22):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
dup(r2) (async)
r3 = dup(r2)
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000080)="f36b4e96df5d3a7c5469b7868c00000080", 0x11}], 0x1) (async)
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000080)="f36b4e96df5d3a7c5469b7868c00000080", 0x11}], 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000e40)={0x30, 0x5, 0x0, {0x0, 0x5, 0xfff}}, 0x30)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) (async)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x10)
ftruncate(r5, 0x200004)
sendfile(r3, r5, 0x0, 0x80001d00c0d5) (async)
sendfile(r3, r5, 0x0, 0x80001d00c0d5)
sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c084}, 0x4000)
write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff2, 0x1, 0xda2, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x5, 0x9, 0xf, 0xb, 0x10, 0x80000000, 0x9, 0xb50, 0x0, 0x800, 0x3, 0xffffffff, 0x7, 0xfffffffe, 0x8, 0x8, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x4b1a3e4b, 0xfffffff9, 0x4, 0x3, 0x8e, 0x7, 0x13e, 0x9, 0x4, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x40, 0x7ff, 0x7ff, 0x5, 0x7, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x6, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x8fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xade, 0x7f, 0x9], [0x8396, 0x7, 0x6, 0x9, 0x8000, 0x1, 0x9, 0xe88, 0x8, 0x6, 0x0, 0x400, 0xfffffff3, 0x9, 0x6e, 0x8000, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb0f, 0x1e, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x4, 0xe, 0x6, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x40, 0x3, 0x0, 0x7, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xc, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0x0, 0x7, 0x8ac1, 0x3, 0x4, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffffffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) (async)
write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff2, 0x1, 0xda2, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x5, 0x9, 0xf, 0xb, 0x10, 0x80000000, 0x9, 0xb50, 0x0, 0x800, 0x3, 0xffffffff, 0x7, 0xfffffffe, 0x8, 0x8, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x4b1a3e4b, 0xfffffff9, 0x4, 0x3, 0x8e, 0x7, 0x13e, 0x9, 0x4, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x40, 0x7ff, 0x7ff, 0x5, 0x7, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x6, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x8fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xade, 0x7f, 0x9], [0x8396, 0x7, 0x6, 0x9, 0x8000, 0x1, 0x9, 0xe88, 0x8, 0x6, 0x0, 0x400, 0xfffffff3, 0x9, 0x6e, 0x8000, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb0f, 0x1e, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x4, 0xe, 0x6, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x40, 0x3, 0x0, 0x7, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xc, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0x0, 0x7, 0x8ac1, 0x3, 0x4, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffffffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_CREATE(r0, 0x5501)

19.29307617s ago: executing program 32 (id=22):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
dup(r2) (async)
r3 = dup(r2)
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000080)="f36b4e96df5d3a7c5469b7868c00000080", 0x11}], 0x1) (async)
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000080)="f36b4e96df5d3a7c5469b7868c00000080", 0x11}], 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000e40)={0x30, 0x5, 0x0, {0x0, 0x5, 0xfff}}, 0x30)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) (async)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x10)
ftruncate(r5, 0x200004)
sendfile(r3, r5, 0x0, 0x80001d00c0d5) (async)
sendfile(r3, r5, 0x0, 0x80001d00c0d5)
sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c084}, 0x4000)
write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff2, 0x1, 0xda2, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x5, 0x9, 0xf, 0xb, 0x10, 0x80000000, 0x9, 0xb50, 0x0, 0x800, 0x3, 0xffffffff, 0x7, 0xfffffffe, 0x8, 0x8, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x4b1a3e4b, 0xfffffff9, 0x4, 0x3, 0x8e, 0x7, 0x13e, 0x9, 0x4, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x40, 0x7ff, 0x7ff, 0x5, 0x7, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x6, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x8fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xade, 0x7f, 0x9], [0x8396, 0x7, 0x6, 0x9, 0x8000, 0x1, 0x9, 0xe88, 0x8, 0x6, 0x0, 0x400, 0xfffffff3, 0x9, 0x6e, 0x8000, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb0f, 0x1e, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x4, 0xe, 0x6, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x40, 0x3, 0x0, 0x7, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xc, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0x0, 0x7, 0x8ac1, 0x3, 0x4, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffffffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) (async)
write$uinput_user_dev(r0, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x24, [0x10000, 0xeba, 0x7, 0xe6a, 0x8, 0x1, 0x5, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x9, 0x9, 0xfffffff7, 0x7, 0x40000, 0xa, 0x23, 0x2, 0x0, 0x3ff, 0xfffffff2, 0x1, 0xda2, 0x3, 0xa7, 0xeb36, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x1, 0x1, 0x5, 0x9, 0xf, 0xb, 0x10, 0x80000000, 0x9, 0xb50, 0x0, 0x800, 0x3, 0xffffffff, 0x7, 0xfffffffe, 0x8, 0x8, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x4b1a3e4b, 0xfffffff9, 0x4, 0x3, 0x8e, 0x7, 0x13e, 0x9, 0x4, 0x2, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x8, 0x2, 0x5, 0x40, 0x7ff, 0x7ff, 0x5, 0x7, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0xfffffff7, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x6, 0x0, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x80, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x8fd, 0xfffffffa, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xade, 0x7f, 0x9], [0x8396, 0x7, 0x6, 0x9, 0x8000, 0x1, 0x9, 0xe88, 0x8, 0x6, 0x0, 0x400, 0xfffffff3, 0x9, 0x6e, 0x8000, 0x7, 0x3, 0x6, 0x5, 0x3, 0xc9, 0x2, 0x3, 0x0, 0x2, 0x2, 0xc, 0x5, 0xb0f, 0x1e, 0x3, 0x800, 0x8, 0x9, 0x3, 0x4, 0xfffffff7, 0x4, 0xe, 0x6, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x87ff, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x40, 0x3, 0x0, 0x7, 0x9, 0x1, 0x3], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x3, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0xfffffff8, 0xc, 0x4, 0x3, 0x103, 0x6, 0xcc, 0x6, 0x4000400, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x40, 0x9, 0x0, 0x9, 0x1, 0x0, 0x7, 0x8ac1, 0x3, 0x4, 0x80000002, 0x80000002, 0xff, 0x6, 0x3, 0xfffff801, 0xffffffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0x9, 0x6eaf, 0x0, 0x401, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_CREATE(r0, 0x5501)

16.395828314s ago: executing program 2 (id=34):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, 0x0, &(0x7f0000000000))
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = gettid()
sched_setattr(r3, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0xc, 0xdb, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000800000/0x11000)=nil, &(0x7f0000a5f000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000581000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, r2}, 0x68)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000440), 0x3)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.dequeue\x00', 0x275a, 0x0)
linkat(r5, &(0x7f0000000000)='\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1400)
ptrace(0x10, 0x1)
sendmsg$NFT_MSG_GETRULE(r4, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x58, 0x7, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0xc004}, 0x20000000)
userfaultfd(0x80001)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40), 0x0, 0x20040040)
socket$alg(0x26, 0x5, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r2, 0x29, 0xc9, &(0x7f00000001c0)=0xd, 0x4)
bind$inet6(r6, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e23, 0x401, @private2, 0x1e}, 0x1c)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet6(r7, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$TIPC_MCAST_REPLICAST(r8, 0x10f, 0x86)
socket$inet_sctp(0x2, 0x400000000001, 0x84)

15.301255786s ago: executing program 0 (id=37):
r0 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000005c0)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})
r2 = syz_open_dev$loop(&(0x7f0000000040), 0x100, 0xa8503)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001280)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400000000000000000000000000000000000000000000000402", [0x800]}})

15.002494021s ago: executing program 0 (id=39):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380100002100010000000000feffffff00000000000000000000000000000000fe80000000000000000000000000001dfffc0000000100000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200000000000000e8001100fe800000000000000000000000000011e0000002000000000000000000000000e0000001000000000000000000000000fe80000000ff840000000000000000bb3c000000000000000a000a00fe80"], 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0)

14.771236104s ago: executing program 0 (id=41):
syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd'], 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004850)
sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280))
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
getresuid(&(0x7f0000000100), 0x0, 0x0)
fchownat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x100)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50)
r3 = socket$inet6(0xa, 0x805, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x1050, 0x8130}}, 0x20}}, 0x0)
getsockopt$bt_hci(r3, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc)
unshare(0x62040200)
syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x6, &(0x7f0000000700)=ANY=[@ANYRESHEX], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x480c5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

13.706470741s ago: executing program 2 (id=43):
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', <r1=>0x0})
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r3 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x0, 0x8, 0xa5b4}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x10) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x0, 0x8, 0xa5b4}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r4)
r5 = socket(0x10, 0x803, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f000000000000090e0000850000002e000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f000000000000090e0000850000002e000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$AUTOFS_IOC_PROTOVER(r5, 0x80049363, &(0x7f0000000000))
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6})
readv(r8, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1)
close_range(r8, r8, 0x0) (async)
close_range(r8, r8, 0x0)
r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
close_range(r9, r9, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a30000000005c000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d3000000000000020000000000a03001000000000000000070000090900010073797a3000000000140000001100010000000000000000000000000a"], 0xc4}, 0x1, 0x1000000}, 0x0)

13.066266114s ago: executing program 2 (id=45):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000200)={0xb, "34ad9987ffed3bbabd18cf501922de974a27000000000000000000f6ffffff00"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x10000, "58d761a99ef702f8066485d7947206c192671f79dda31a7875af68e91c4a4269"})
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
r3 = accept$inet6(r0, 0x0, &(0x7f00000000c0))
recvmmsg(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/95, 0x5f}, {&(0x7f00000002c0)=""/54, 0x36}, {&(0x7f0000000300)=""/194, 0xc2}, {&(0x7f0000000400)=""/23, 0x17}, {&(0x7f0000000440)=""/74, 0x4a}, {&(0x7f00000004c0)=""/32, 0x20}], 0x6, &(0x7f0000000580)=""/70, 0x46}, 0x3ff}, {{&(0x7f0000000600)=@hci, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000680)=""/15, 0xf}], 0x1, &(0x7f0000000700)=""/221, 0xdd}, 0xf3fe}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000800)=""/165, 0xa5}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/249, 0xf9}, {&(0x7f00000019c0)=""/22, 0x16}], 0x4, &(0x7f0000001a40)=""/251, 0xfb}, 0x1}, {{&(0x7f0000001b40)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000001f80)=[{&(0x7f0000001bc0)=""/147, 0x93}, {&(0x7f0000001c80)=""/162, 0xa2}, {&(0x7f0000001d40)=""/102, 0x66}, {&(0x7f0000001dc0)=""/30, 0x1e}, {&(0x7f0000001e00)=""/129, 0x81}, {&(0x7f0000001ec0)=""/65, 0x41}, {&(0x7f0000001f40)=""/45, 0x2d}], 0x7, &(0x7f0000002000)}, 0xe2}, {{&(0x7f0000002040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000002240)=[{&(0x7f00000020c0)=""/72, 0x48}, {&(0x7f0000002140)=""/44, 0x2c}, {&(0x7f0000002180)=""/167, 0xa7}], 0x3, &(0x7f0000002280)=""/243, 0xf3}, 0xc8}], 0x5, 0x41, &(0x7f00000024c0)={0x77359400})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)

8.822092441s ago: executing program 3 (id=48):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@private2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0x4e22, 0x0, 0xa, 0xa0, 0x20, 0x1}, {0x4, 0x40c, 0x7ff, 0x1, 0x3, 0x9, 0x4, 0xb87d}, {0x3, 0x8, 0x200, 0x9}, 0x0, 0x6e6bc0, 0x2, 0x1, 0x3, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x6c}, 0x2, @in=@multicast2, 0x3500, 0x0, 0x0, 0x4, 0x10000, 0x7, 0x401}}, 0xe8)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee", 0x4b}], 0x1}}], 0x1, 0x20008000)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{}, "0200", "00001d00082000004515f8d394a8f061", '\x00', "72f2ea1a3290afcc"}, 0x28)

8.025246472s ago: executing program 3 (id=49):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f00000001c0)={0x5, 0x10, 0xfa00, {0x0}}, 0x18)
ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000040)={'xfrm0\x00'})
r2 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {<r4=>r1}}, './file0\x00'})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x5}, 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x3, 0x7, 0x1, 0x2, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4, 0xd}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000680)={0x1, <r8=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{0xffffffffffffffff, <r9=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)='%pi6   \x00'}, 0x20)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x1, 0x4, 0x3, 0x80, 0xffffffffffffffff, 0xb, '\x00', 0x0, r1, 0x1, 0x4, 0x4, 0x6}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x16, 0x27, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffff3776, 0x0, 0x0, 0x0, 0x8}, @ldst={0x0, 0xbe10e673f6095c61, 0x2, 0x7, 0x8, 0xfffffffffffffff0, 0x8}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, @map_val={0x18, 0x6, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0xfffffffa, 0x16, &(0x7f0000000400)=""/22, 0x40f00, 0x40, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r5, 0x7, &(0x7f0000000800)=[r6, r7, r8, r9, r10], &(0x7f0000000840)=[{0x0, 0x3, 0x8, 0x9}, {0x2, 0x4, 0x8}, {0x5, 0x3, 0x0, 0xa}, {0x0, 0x4, 0x5, 0x1}, {0x3, 0x1, 0x0, 0xb}, {0x5, 0x3, 0x6, 0x6}, {0x0, 0x2, 0x9, 0xa}], 0x10, 0x800}, 0x94)
sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000074c0000000c0a01020000000000000000010000000900020073797a3200000000200003801c0000800400018008000340000000010c00044000000000000000000900010073797a300000000038000000020a01"], 0x110}}, 0x0)
add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="e70c298290e93084d773f6ee4cbdc2f5ccdcfb7a69629ed6615c9f21d26ebc8254bc7e848e0df33aa0de00b04c0281010bfa32cb510eef2c1ae64eb728fd1252546f49ab9ba45b22b0d79529a3d7b1d8daf4d82f45f02e30dd14bfbb2916a3c9f24f0faa276b57888ea1a25d26c048634684bfe102f915052c093586352ef379223408907415b1727edb123f030fce19a72828bc6ad8f8277ed6692b58d1caaa4465bc4fd4ac295548e7f57f", 0xac, r2)

7.622804419s ago: executing program 2 (id=50):
r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000140)={&(0x7f0000000040)=[<r1=>0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0], 0x5, 0x9, 0x4, 0x1})
ioctl$DRM_IOCTL_PANTHOR_BO_QUERY_INFO(0xffffffffffffffff, 0xc0106450, &(0x7f0000000180)={<r2=>0x0, 0x0, 0x2})
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000001c0)={0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000200)={0x0, 0x7cb, 0xb677, 0xffffffff, 0x1, [0x0, 0x0, 0x0, <r4=>0x0], [0x4, 0x8, 0xfffffffe, 0x605], [0x1, 0x9, 0x6, 0x800], [0x9, 0x4, 0x4, 0x5]})
r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r7=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000001380)={0x0, 0x0, r7, <r8=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f00000012c0)={r8, 0x8002, 0x7fff, 0x0, 0x0, [<r9=>0x0], [0x2], [0x0, 0x4, 0xfffffffe, 0x5e8]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r9})
r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r10, 0xaf01, 0x0)
r11 = open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0)
r12 = eventfd2(0x0, 0x0)
r13 = dup2(r12, r11)
write$eventfd(r12, &(0x7f0000000000)=0xfffffffffffffffe, 0x8)
ioctl$VHOST_SET_VRING_ERR(r10, 0x4008af22, &(0x7f0000000000)={0x0, r11})
ioctl$VHOST_SET_VRING_ADDR(r10, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r10, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/73, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r10, 0x4008af03, &(0x7f0000000480))
ioctl$VHOST_VSOCK_SET_RUNNING(r10, 0x4004af61, &(0x7f0000000340)=0xffffffff)
ioctl$VHOST_SET_VRING_KICK(r10, 0x4008af20, &(0x7f00000000c0)={0x1, r13})
r14 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x6, 0x7fff7ffc}]})
close_range(r14, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000002c0)={r1, 0x5, 0x7, 0x4, 0x3, [r2, r3, r4, r9], [0xb, 0x1, 0x81, 0x4d6b], [0x8a, 0x101, 0x9, 0x81], [0x0, 0x7, 0x7, 0x2fd]})
syz_usb_connect$midi(0x0, 0x38, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xfc08, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x26, 0x1, 0x1, 0x8, 0xe0, 0x40, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0xa, [@midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x2, 0x5}], [{{0x9, 0x5, 0xc, 0x3, 0x200, 0x3, 0x9, 0x81, {0x5, 0x25, 0x1, 0x1, "c3"}}}]}}}}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})

7.42971629s ago: executing program 3 (id=51):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x6be1c3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
write$binfmt_script(r3, &(0x7f0000000580)={'#! ', './file0', [{0x20, '&{'}, {0x20, '\x00'}, {0x20, 'new '}, {0x20, 'user:'}], 0xa, "e230b9a9ba2d7706ef2b55cc0fb018e6577f1315fb37388921507163a9b156f6cd27c718dbd69f6da5ead40ab2d178588ff4da8bd0938f442048b254352b9d95e91b46cb21931336abb60afee27ee0d00bb8ab4bbc1aca776d151844353ff4fe"}, 0x7b)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x3, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x4000f2, 0x1000)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0)
r5 = add_key(&(0x7f0000000200)='id_legacy\x00', &(0x7f0000000180), &(0x7f00000002c0)="4d81959928f6ad075f5e30c7f667c671c70acdffca26dadc96a0b2f07eb680467c35ee27c1cec2b4fcfc754218b6734309e8b85ecff0460e914ac11588799c28de1a65effbe50de35d62749df0d855ddb08f29f3be2d7ae6007b7ae04d5cfd9dc04fae0cebf40fe69caa54a9661b0d5979d1520c1a228eb0", 0x78, 0xfffffffffffffffe)
keyctl$setperm(0x5, r5, 0x82004)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000540)={0x0, &(0x7f0000001140)=""/4096, &(0x7f0000000300), &(0x7f00000001c0), 0x5, r6}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000006000000000000000c00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000063bb0001fcffffff18180000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
add_key$user(0x0, &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd)
keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x0, 0x5, 0x4})
r8 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r8, 0x541c, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000100)="80fd", 0x2}, {&(0x7f0000000040)="e8", 0x1}], 0x2, 0x4, 0x0)

5.755424668s ago: executing program 2 (id=52):
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001900)={{0xffffffffffffffff, 0x0, 0x140, 0x0, 0x7, 0x0, 0x0}, 0x0, 0x0})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) (async)
close(r2) (async, rerun: 32)
write(r0, 0x0, 0x0) (rerun: 32)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x3000) (async)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) (async)
r5 = accept4(r4, 0x0, 0x0, 0x80800)
sendmmsg$alg(r5, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="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", 0x155}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffe8d}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18, 0x800}], 0x1, 0x40800) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async)
r6 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) (async, rerun: 32)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32)
ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000100)=@v={0x93, 0xe, 0x0, 0x4, @generic=0x5f, 0xe6, 0x6})
ioctl$FE_GET_PROPERTY(r6, 0x80106f53, &(0x7f0000000400)={0x4, &(0x7f0000000580)=[{0x1d, '\x00', @st={0x4, [{0x1, @uvalue=0x1}, {0x1, @svalue=0x3}, {0x2, @uvalue=0x4}, {0x1, @uvalue=0x6}]}, 0x87}, {0x15, '\x00', @st={0x4, [{0x1, @uvalue=0x9}, {0x2, @svalue=0x3}, {0x0, @svalue=0x1}, {0x1, @svalue=0x400}]}, 0x6}, {0xc, '\x00', @data=0x7, 0x6}, {0x3, '\x00', @data=0xa, 0x2b1d}]}) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) (async)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'ip6erspan0\x00', 0x20}, 0x18)
getsockopt$IP_VS_SO_GET_DAEMON(r9, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30)
ioctl$SG_GET_LOW_DMA(r8, 0x227a, &(0x7f00000000c0)) (async, rerun: 32)
r10 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 32)
setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, 0x0, 0x0)
connect$inet(r10, &(0x7f0000000040)={0x2, 0x6e23, @loopback}, 0x10)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r10, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'bridge0\x00', 0x1}, 0x18)
syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)

5.606674839s ago: executing program 0 (id=53):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$key(0xf, 0x3, 0x2)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="b8010000100001002cbc7000000000002b80c0c91e9877c892bc0e0cf70280eefc010000000000000000e2ffffff000100000000000000000000ffff7f000001", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1b8}}, 0x44050)

4.149118932s ago: executing program 0 (id=54):
unshare(0x22020400)
r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x7, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x41, 0x18e, 0x6, 0x6, 0x0, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0x11, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x10f0, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x15, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x9, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x200, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0x7, 0x1, 0x5, 0x1, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0xff, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfffffff8]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0)

3.636810535s ago: executing program 2 (id=55):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x48)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x33c, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4840)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x808001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x9, 0xfff}, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f00006ef000/0x4000)=nil, 0x4000, 0x9, 0x10, 0xffffffffffffffff, 0x8000000)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1})
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000000)='\x00\x00\x00', 0x3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94)
r6 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r7, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={<r8=>0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000040)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000200)={r8, @in={{0x2, 0x4e23, @empty}}, 0x7, 0x400, 0x2, 0x41, 0x6, 0xffff, 0x10}, &(0x7f0000000080)=0x9c)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x24048180)
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x880)
syz_usb_connect$cdc_ncm(0x0, 0x98, &(0x7f0000000900)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3}, {0x6}, [@mdlm={0x15, 0x24, 0x12, 0x8}, @mdlm={0x15, 0x24, 0x12, 0x7e2}]}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x0, 0x80, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40}}}}}}}]}}, 0x0)

3.512826209s ago: executing program 1 (id=56):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000780), 0x2000000000000002, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}})

2.662305584s ago: executing program 1 (id=57):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000097000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b500050082000000181200ff", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.238814078s ago: executing program 1 (id=58):
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x0, 0x0})
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) (async)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0}) (async)
epoll_create1(0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x40000040, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x3, 0x9, 0x0, 0x3de}]}) (async)
r4 = shmat(0x0, &(0x7f0000ffc000/0x3000)=nil, 0x5000)
shmdt(r4) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) (async)
syz_emit_ethernet(0x95, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000001c0)={0x1, 0x1, [0xf74, 0x4e0, 0xe4b, 0xa20]}) (async)
syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) (async)
munlockall() (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
r5 = dup(r2)
r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) (async)
r7 = syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100) (async)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0xc, r1, 0x0, 0xfffffffffffffffc, 0x1541}) (async)
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000002c0)={0x28, 0x7, r1, 0x0, &(0x7f000007f000/0x3000)=nil, 0x3000, 0x2}) (async)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff7ffc}, {0xfff, 0x6, 0x9, 0x1}, {0x6, 0x1, 0x4, 0x2}]})
close_range(r8, 0xffffffffffffffff, 0x0) (async)
lseek(r7, 0x4000006, 0x3)

2.103870206s ago: executing program 3 (id=59):
syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, "", [{{0x9, 0x4, 0x0, 0x10, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x83, 0x0, 0x1, {0x22, 0x27}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xb, 0xff}}}}}]}}]}}, 0x0) (async)
socket$can_j1939(0x1d, 0x2, 0x7) (async)
socket$packet(0x11, 0x3, 0x300) (async)
r0 = msgget$private(0x0, 0x10)
msgrcv(r0, 0x0, 0x0, 0x1, 0x800) (async)
openat(0xffffffffffffff9c, 0x0, 0x20942, 0x0) (async)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffee6}, 0x68) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r1 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) (async)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {&(0x7f0000000100)}], 0x2)
io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) (async)
futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, 0x0, 0x2) (async)
syz_open_dev$I2C(0x0, 0x1000, 0x600440)
syz_usb_connect(0x1, 0x188, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x59, 0xb5, 0xc1, 0x8, 0x3ee, 0x2501, 0x7ec8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x176, 0x1, 0x8, 0x2, 0xd0, 0x6, "", [{{0x9, 0x4, 0x2, 0x2, 0x6, 0xab, 0xf6, 0x21, 0x6, [], [{{0x9, 0x5, 0xe, 0x1, 0x200, 0x24, 0xf, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0xb}]}}, {{0x9, 0x5, 0x2, 0x2, 0x7bf, 0x8, 0x81, 0x9, [@generic={0xa4, 0x6, "41cba947dae76758d20dcf213c05df602e311de6f3c5fd9b91dae1480dc186691d55c5f314834c53d985293b96d1f8422bb8c4244f8d13c1d9fda3f044c57f6915f948941eb96c42898ea8aeadfda80a7a2f3971ffd4d7fbfd78746046a27d8a42b416fe3148958d271b737f7d0303910a32d4e3912ad9aa8b00ef1abc45727db79a095342770208b002cdd8d7a59b05d24e689597a7ec4e2e522a43a38583fe140e"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x51e}]}}, {{0x9, 0x5, 0xe, 0x3, 0x10, 0x8, 0x2, 0x1, [@generic={0xb, 0x23, "6f922860b50c99daa8"}, @generic={0x6a, 0x6, "6882710afbef2d04fb0ab3f855f3bca3a4a4df6a3c33db5630cdf2efa27fae1fb693b2fd51f39cc7b73cf6222ffd4012dac118bc2c8d8887bc0fabf962f2dafd4ee70e2bb3776725a18be66dda1eada7affd30baffb9ab665bf150bc0d431bca5816fc1477e1d0cd"}]}}, {{0x9, 0x5, 0x4, 0x1, 0x20, 0x9, 0x1, 0x2}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x7f, 0x5, 0xa3}}, {{0x9, 0x5, 0xf, 0x4, 0x400, 0x6, 0x20, 0x7}}]}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0xff, 0x80, 0xd, 0x8, 0x7}, 0x10, &(0x7f0000000240)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1a, 0x80, 0xd, 0x45a0, 0x7f}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x4ff}}, {0xfe95, &(0x7f0000000380)=@lang_id={0x4}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1b1f7}}]})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) (async)
r4 = accept4$alg(r3, 0x0, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000004540)=[{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000000)="6f89", 0x2}], 0x1, 0x0, 0x0, 0x44000}], 0x1, 0x40010)
io_setup(0x9, &(0x7f00000003c0)=<r5=>0x0)
io_submit(r5, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r4, &(0x7f0000000340), 0x41}]) (async)
r6 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(r6, 0x4188aec6, 0x0)

1.75740261s ago: executing program 3 (id=60):
syz_usb_connect$midi(0x5, 0x59, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x2a39, 0x3fd3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0x1a, 0x10, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x6, [@midi_out_jack={0xb, 0x24, 0x3, 0x0, 0x0, 0x2, [{0x4c, 0x5}, {0x36, 0x5e}], 0x7}, @midi_out_jack={0x9, 0x24, 0x3, 0x0, 0x40, 0x1, [{0x5, 0x3a}], 0x1}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x4, 0x3}, @ms_header={0x7, 0x24, 0x1, 0x7e78, 0x7}, @ms_header={0x7, 0x24, 0x1, 0xf, 0x7}], [{{0x9, 0x5, 0x8e, 0xb, 0x200, 0xf, 0xd7, 0x2, {0x4}}}]}}}}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x7f, &(0x7f0000000080)=@string={0x7f, 0x3, "72b4b18a9e47f1f142b4cf6206f33731ac3cd57b19b1a729a2258b730631a9b719f5fa5163e9df6b3470343a49e77b9afc4ae48aafd635820bbe1e986dec1128b4a0a70c235fe52b072125a3f40893fd1efd0b430556879b2e19d45a5f28173b990e1694f764ca9aba44354cdf60d601c7a5323e816c273bab10c33437"}}]})
sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x10804)
socket$unix(0x1, 0x2, 0x0)

1.732969075s ago: executing program 1 (id=61):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000970000000000000000003e0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b5001c008200000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000070000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.418218033s ago: executing program 1 (id=62):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x240, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x6, 0xa4}}, 0x30)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="26000000030000000000000000ebffff0400000000000000050000000000000028243a215e00"], 0x26)
ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000040))
unshare(0x20000400)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
userfaultfd(0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x5, 0x2})
ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x1, r4})
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f0000000000)={0x3fb, 0x7, 0x5, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0)
close_range(r7, 0xffffffffffffffff, 0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/crypto\x00', 0x0, 0x0)
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x40086315}], 0x0, 0x0, 0x0})
r10 = epoll_create(0x3)
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r8, &(0x7f0000000040)={0x30000002})
sendmmsg$inet6(r0, &(0x7f0000000440)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @local}, 0xce4d}, 0x1c, &(0x7f0000000080)}}, {{&(0x7f0000001c80)={0xa, 0x4e23, 0x5b, @mcast2, 0xffff}, 0x1c, &(0x7f0000001cc0)}}], 0x2, 0x441)

1.046244233s ago: executing program 1 (id=63):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x0, 0x0})
syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100008b4cd740402053d8f6f8410203010902120001020000000904"], 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_ext={0x1c, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffa49}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x89, &(0x7f0000000480)=""/137, 0x40f00, 0x31, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x3, 0xd, 0x80000000, 0x1a000}, 0x10, 0x174db, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000b00)=[{0x5, 0x2, 0xe, 0x4}, {0x0, 0x1, 0x9, 0x8}, {0x2, 0x5, 0x1, 0x4}], 0x10, 0x5}, 0x94) (async)
r1 = socket$kcm(0x11, 0x2, 0x0) (async)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x191c07, 0xfffffffe, 0x0, 0x9}) (async, rerun: 32)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x101842, 0x0) (rerun: 32)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32)
readv(r2, &(0x7f00000000c0)=[{0x0}], 0x1) (async, rerun: 32)
fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) (async)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) (async, rerun: 32)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (rerun: 32)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async, rerun: 32)
ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) (rerun: 32)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[<r5=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000003c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000200)=[0x0, 0x0], 0x0, 0x0, 0x63, 0x2}) (async, rerun: 64)
ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, 0x0, <r7=>0x0}) (rerun: 64)
ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, 0x0, r7, 0x1, 0x800, 0x81, 0x3, {0xc, 0xfacd, 0xd, 0xa2a4, 0xfff9, 0x7, 0x8, 0x81, 0xff, 0x0, 0x1000, 0x7, 0x7, 0x6, "0bcc13d30df5fd54520c2e0db22142cf8957703ef62a79518b9d7ff3a31faf87"}}) (async)
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000140)={r5, 0x0, 0x0, 0x1, 0x80, 0x1, 0x7, 0x6, 0x7, 0x8001, 0x8, 0x100}) (async)
syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @local}, "260086dd04ffffff"}}}}}, 0x0)
setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4)
sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0)
syz_open_dev$midi(&(0x7f0000000000), 0x40000006, 0x402c00)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x1a)

500.305303ms ago: executing program 0 (id=64):
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008e88052086800095d89301020301090212000100000000090401"], 0x0)
syz_usb_connect$cdc_ecm(0x4, 0xd6, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc4, 0x1, 0x1, 0x8, 0x80, 0xf, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x7, {{0xa, 0x24, 0x6, 0x0, 0x0, "90d54e475b"}, {0x5, 0x24, 0x0, 0x40}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x8, 0x0, 0x2}, [@mdlm_detail={0x67, 0x24, 0x13, 0x9, "fdfa841d687573b054e4a690bbe7c240c2811bd2b523404f50f87f1d91987af4158065a8ea23a270638d49a5eb068c355546af663a5bec03ff09cb3b82f91b0da29d434a72c3a5dc373eef5d31b3d4b5ee1a17753cb74b4da73e4915e8059a548a03de"}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x2, 0x0, 0x3, 0x1000, 0x4}, @country_functional={0x8, 0x24, 0x7, 0xe0, 0x8, [0x200]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0xee, 0xfb, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x208, 0x70, 0x8, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7, 0x4, 0x7}}}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0xf8, 0x7, 0x0, 0x40}, 0xaf, &(0x7f0000000300)={0x5, 0xf, 0xaf, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x2, 0x9, 0x58c0}, @ssp_cap={0x18, 0x10, 0xa, 0x3, 0x3, 0x8, 0xff0f, 0xda1, [0x0, 0xc000, 0xffffc0]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x51, 0x8, 0xffff}, @ptm_cap={0x3}, @generic={0x71, 0x10, 0x2, "d4b722e7f423b3b7c3c62b3bdf4323826fbf6eb2c63e7361a5ff92395d3710f33c1cc7601d798d61272d24e55b1fc4406ec37518dfe8642f820ce321602c1ca1a408cdc4eb14de83dcf38f421a9dff767be52ec4599601f820eec7cc18511ee97c9fc3fd9d6c0ae798e03c3075a5"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x5, 0x1, 0x3}]}, 0x9, [{0xcf, &(0x7f00000003c0)=@string={0xcf, 0x3, "0bf738360270dcdaa393c3e7f2aaecc56e23d1916b1a1c127d091ef79f8b5321e206e09f25096c1e8eb7163e1da50cf352c7be81473ea78c100cc0c5c496eec453c5b634f01a507ae58203edd3f2b10557f12399f05bbeea96e4ab33657b221a3eb8e4cf3d4fad358fb7373dcb564f1831fffac09b2f694a87c2be3b89252157b03ef596c0f601368ad118168213dfa0724368b4588bd7e1b7dd8705755a09242261b4a87d6c1e5094ad0556da21cd28ca8539bb40ab811cf2ade4b2a92b6f774362867b9bd348bb87df6e1d64"}}, {0x32, &(0x7f00000004c0)=@string={0x32, 0x3, "7240772c6516b3dd4bef5bc03e084abff61b7dbb78febea57c3fe56aa557869e55e91a0ad2fa5f7bcd381455986b8110"}}, {0x23, &(0x7f0000000500)=@string={0x23, 0x3, "b6d3cb7d9a221896f72170e37cfd1cd00cf0fbeaf3542724c8ec447c9b42cf7c01"}}, {0x67, &(0x7f0000000540)=@string={0x67, 0x3, "b8558b4955d2160634fcba08822bc88393e9860f5ced729bc64eb07a2394885b816f5eb977bec884d3633f591e00fd602e154ee1cc217e0f464718e2f943a6b23815ce8c220febbed232cf43689c07b081ab7713e35af40e9d5bbf388335f01e1ac9de2fe7"}}, {0x31, &(0x7f00000005c0)=@string={0x31, 0x3, "118923c06438cb830e8349b2a8a08dfd7b3d9a4a820afe004815dc1e9eadc8d833176deb1100074c40ed35d9b8be50"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x80c}}, {0xc3, &(0x7f0000000680)=@string={0xc3, 0x3, "74f76723929fd424b7755a32e5a21c2cf85011145ce397dd06686839847da5e89ce419c5407f532e1b6f6586b9199c16b61bc0a8eadab85e652f6d2537cdca95a5f9ee697c119efec5bc7a07e4751d0b98d8094c08ddd1c6e8c58ab08783dab0b832b564aefc2becc4836c1a0a1ce0aac49b84785ca2cb6abec62d6e21b482986d343c527e5f71bd7b56f1aec13861ad07d21c05f3a74df38471b25e8c982b59c42200f1e331065af8d56cc234f42af0c08759a7b9acbc74fe3fd164a133b6296c"}}, {0x30, &(0x7f0000000780)=@string={0x30, 0x3, "0cde1ca4e51c24a61a4c4c938d109356e9d0db00a7e2a3035e78945fe8ceaffe2c193f00f9ac5bee5bfe68ea4faa"}}]})
r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f00000002c0)=[{0x1e, 0x7a00, 0x0, 0x0}, {0x7, 0xa001, 0x0, 0x0}], 0x2})

0s ago: executing program 3 (id=65):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="e00000001300010026bd7000ffdbdf2573686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000412000"/224], 0xe0}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f0000002080)={0xc, {"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", 0x100f}}, 0x1006)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
syz_usb_connect$uac1(0x0, 0xa2, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000206b1d01014000010203010902900003010000000904000000010100000a240100000002010211240600000500000000000000000000000b2407000000002e387cf009040100000102000009040101010102000009050109000000008007250100000000090402000001020000090402010101020000072401000003000e2402030e000000f5138d22419e0905820940"], 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400192340834b67040d8c560a06e5ffff7f100000004001000058000b48040e5be8a06eb5a8440038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1)
syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000002600)={0x34, &(0x7f00000002c0)={0x0, 0x31, 0x2, "aba2"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r3, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000280)={0x40, 0x17, 0x2, "aaa2"}, 0x0, 0x0})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.120' (ED25519) to the list of known hosts.
[   77.298006][ T5611] cgroup: Unknown subsys name 'net'
[   77.459893][ T5611] cgroup: Unknown subsys name 'cpuset'
[   77.469655][ T5611] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   79.180749][ T5611] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   81.387412][   T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   81.409471][ T5635] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   81.422216][ T5635] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   81.430612][ T5635] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   81.439418][ T5635] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   81.447847][ T5637] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   81.449417][ T5635] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   81.463122][ T5637] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   81.464183][ T5635] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   81.474557][ T5637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   81.479806][ T5635] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   81.486404][ T5637] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   81.500176][ T5635] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   81.501260][ T5637] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   81.511963][ T5635] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   81.522792][ T5635] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   81.524614][ T5637] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   81.530664][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   81.538260][ T5637] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   81.551955][ T5640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   81.553975][ T5637] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   81.560289][ T5639] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   81.567451][ T5637] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   81.573576][ T5640] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   81.591499][ T5639] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   82.643347][ T5641] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.650849][ T5641] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.658816][ T5641] bridge_slave_0: entered allmulticast mode
[   82.666221][ T5641] bridge_slave_0: entered promiscuous mode
[   82.725248][ T5641] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.733166][ T5641] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.741334][ T5641] bridge_slave_1: entered allmulticast mode
[   82.749924][ T5641] bridge_slave_1: entered promiscuous mode
[   82.821785][ T5644] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.829721][ T5644] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.837276][ T5644] bridge_slave_0: entered allmulticast mode
[   82.844402][ T5644] bridge_slave_0: entered promiscuous mode
[   82.858264][ T5642] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.865549][ T5642] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.873273][ T5642] bridge_slave_0: entered allmulticast mode
[   82.880830][ T5642] bridge_slave_0: entered promiscuous mode
[   82.914904][ T5644] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.922150][ T5644] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.930110][ T5644] bridge_slave_1: entered allmulticast mode
[   82.937483][ T5644] bridge_slave_1: entered promiscuous mode
[   82.969558][ T5642] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.976772][ T5642] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.983904][ T5642] bridge_slave_1: entered allmulticast mode
[   82.991337][ T5642] bridge_slave_1: entered promiscuous mode
[   83.001179][ T5641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.055581][ T5641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.065157][ T5645] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.072388][ T5645] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.079736][ T5645] bridge_slave_0: entered allmulticast mode
[   83.086823][ T5645] bridge_slave_0: entered promiscuous mode
[   83.098158][ T5644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.144945][ T5645] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.152153][ T5645] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.159594][ T5645] bridge_slave_1: entered allmulticast mode
[   83.166730][ T5645] bridge_slave_1: entered promiscuous mode
[   83.176106][ T5644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.193864][ T5642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.205359][ T5641] team0: Port device team_slave_0 added
[   83.243125][ T5642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.264076][ T5641] team0: Port device team_slave_1 added
[   83.324816][ T5645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.337204][ T5644] team0: Port device team_slave_0 added
[   83.354711][ T5642] team0: Port device team_slave_0 added
[   83.373930][ T5645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.385744][ T5644] team0: Port device team_slave_1 added
[   83.391578][ T5643] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.399049][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.406426][ T5643] bridge_slave_0: entered allmulticast mode
[   83.413595][ T5643] bridge_slave_0: entered promiscuous mode
[   83.422857][ T5642] team0: Port device team_slave_1 added
[   83.429440][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.436852][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.463320][ T5641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.496313][ T5643] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.503518][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.511270][ T5643] bridge_slave_1: entered allmulticast mode
[   83.519022][ T5643] bridge_slave_1: entered promiscuous mode
[   83.544397][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.551565][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.577985][ T5641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.621603][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.628854][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.656245][ T5639] Bluetooth: hci4: command tx timeout
[   83.656252][ T5637] Bluetooth: hci0: command tx timeout
[   83.656478][ T5637] Bluetooth: hci2: command tx timeout
[   83.662555][ T5639] Bluetooth: hci1: command tx timeout
[   83.668379][ T5632] Bluetooth: hci3: command tx timeout
[   83.675490][ T5642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.709227][ T5645] team0: Port device team_slave_0 added
[   83.715636][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.722685][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.748992][ T5644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.771502][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.778589][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.805301][ T5642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.819555][ T5645] team0: Port device team_slave_1 added
[   83.826025][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.833103][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.859793][ T5644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.873327][ T5643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.910973][ T5643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.942980][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.950389][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   83.976466][ T5645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.028964][ T5645] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.036102][ T5645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.062373][ T5645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.088343][ T5641] hsr_slave_0: entered promiscuous mode
[   84.095081][ T5641] hsr_slave_1: entered promiscuous mode
[   84.118622][ T5642] hsr_slave_0: entered promiscuous mode
[   84.125191][ T5642] hsr_slave_1: entered promiscuous mode
[   84.131260][ T5642] debugfs: 'hsr0' already exists in 'hsr'
[   84.137228][ T5642] Cannot create hsr debugfs directory
[   84.151004][ T5643] team0: Port device team_slave_0 added
[   84.159559][ T5643] team0: Port device team_slave_1 added
[   84.181464][ T5644] hsr_slave_0: entered promiscuous mode
[   84.187918][ T5644] hsr_slave_1: entered promiscuous mode
[   84.193947][ T5644] debugfs: 'hsr0' already exists in 'hsr'
[   84.199785][ T5644] Cannot create hsr debugfs directory
[   84.277241][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.284333][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.310879][ T5643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.367264][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.374590][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   84.401044][ T5643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.468094][ T5645] hsr_slave_0: entered promiscuous mode
[   84.474972][ T5645] hsr_slave_1: entered promiscuous mode
[   84.481135][ T5645] debugfs: 'hsr0' already exists in 'hsr'
[   84.487033][ T5645] Cannot create hsr debugfs directory
[   84.648229][ T5643] hsr_slave_0: entered promiscuous mode
[   84.654731][ T5643] hsr_slave_1: entered promiscuous mode
[   84.660854][ T5643] debugfs: 'hsr0' already exists in 'hsr'
[   84.666659][ T5643] Cannot create hsr debugfs directory
[   85.035791][ T5641] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   85.049430][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   85.057592][ T5641] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   85.067936][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   85.090362][ T5641] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   85.101252][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   85.109405][ T5641] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   85.119163][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   85.200966][ T5644] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   85.213057][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   85.222014][ T5644] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   85.234045][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   85.242226][ T5644] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   85.251681][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   85.263177][ T5644] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   85.272869][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   85.366752][ T5642] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   85.378513][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   85.386675][ T5642] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   85.398176][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   85.407434][ T5642] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   85.419946][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   85.430895][ T5642] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   85.442220][ T5642] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   85.561593][ T5643] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   85.572814][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   85.581218][ T5643] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   85.593160][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   85.616309][ T5643] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   85.627247][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   85.636337][ T5643] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   85.647766][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   85.699516][ T5641] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.735133][ T5632] Bluetooth: hci3: command tx timeout
[   85.740902][ T5637] Bluetooth: hci2: command tx timeout
[   85.744960][ T5623] Bluetooth: hci1: command tx timeout
[   85.746742][ T5632] Bluetooth: hci4: command tx timeout
[   85.751802][ T5639] Bluetooth: hci0: command tx timeout
[   85.810930][ T5641] 8021q: adding VLAN 0 to HW filter on device team0
[   85.831745][ T5644] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.841653][ T5645] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   85.851472][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   85.867014][ T5645] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   85.878844][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   85.892341][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.900052][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.917110][ T5645] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   85.928591][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   85.937290][ T5645] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   85.949221][ T5645] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   85.972201][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.979373][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.024050][ T5644] 8021q: adding VLAN 0 to HW filter on device team0
[   86.080936][ T3338] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.088191][ T3338] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.123208][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.130377][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.161971][ T5642] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.216345][ T5642] 8021q: adding VLAN 0 to HW filter on device team0
[   86.241062][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.248241][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.304440][ T5643] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.316546][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.323681][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.343892][ T5641] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.411749][ T5643] 8021q: adding VLAN 0 to HW filter on device team0
[   86.433519][ T5645] 8021q: adding VLAN 0 to HW filter on device bond0
[   86.465310][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.472483][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.526038][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.533757][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.550301][ T5645] 8021q: adding VLAN 0 to HW filter on device team0
[   86.607817][ T5644] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.627672][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   86.634892][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   86.651540][ T5641] veth0_vlan: entered promiscuous mode
[   86.671189][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   86.678376][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   86.704047][ T5641] veth1_vlan: entered promiscuous mode
[   86.744954][ T5642] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.845317][ T5641] veth0_macvtap: entered promiscuous mode
[   86.874322][ T5641] veth1_macvtap: entered promiscuous mode
[   86.903675][ T5644] veth0_vlan: entered promiscuous mode
[   86.923636][ T5643] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.970374][ T5644] veth1_vlan: entered promiscuous mode
[   87.031184][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.067164][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.080899][ T5642] veth0_vlan: entered promiscuous mode
[   87.102319][ T5645] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.141841][   T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.153812][   T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.171081][ T5642] veth1_vlan: entered promiscuous mode
[   87.202900][   T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.230051][   T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.276208][ T5644] veth0_macvtap: entered promiscuous mode
[   87.332081][ T5644] veth1_macvtap: entered promiscuous mode
[   87.360260][ T5643] veth0_vlan: entered promiscuous mode
[   87.418498][ T5643] veth1_vlan: entered promiscuous mode
[   87.438129][ T5642] veth0_macvtap: entered promiscuous mode
[   87.467922][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.479001][ T5642] veth1_macvtap: entered promiscuous mode
[   87.513731][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.543007][ T5645] veth0_vlan: entered promiscuous mode
[   87.552430][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.560990][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.590887][ T1165] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.600660][ T1165] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.611500][ T1165] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.623347][ T5645] veth1_vlan: entered promiscuous mode
[   87.641179][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.650843][ T1165] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.688024][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.700484][ T3338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.710623][ T3338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.763799][ T1007] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.789297][   T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.800125][   T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.815338][ T5623] Bluetooth: hci2: command tx timeout
[   87.821083][   T50] Bluetooth: hci3: command tx timeout
[   87.825079][ T5639] Bluetooth: hci4: command tx timeout
[   87.829264][   T50] Bluetooth: hci0: command tx timeout
[   87.832193][ T5623] Bluetooth: hci1: command tx timeout
[   87.853828][ T5643] veth0_macvtap: entered promiscuous mode
[   87.856742][ T5641] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   87.875706][   T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.912418][ T5643] veth1_macvtap: entered promiscuous mode
[   88.070507][ T5645] veth0_macvtap: entered promiscuous mode
[   88.094264][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.113054][ T5645] veth1_macvtap: entered promiscuous mode
[   88.121369][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.130550][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.185703][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.233116][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.246574][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.259195][  T133] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.304667][  T133] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.315853][  T133] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.349342][  T133] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.392779][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.404676][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.413730][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.425981][ T5645] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.499844][  T133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.529320][  T133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.572875][ T3338] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.611595][ T3338] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.629443][ T3338] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.669610][ T3338] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.750570][ T3338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.810577][ T3338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.942818][ T5733] Zero length message leads to an empty skb
[   88.951352][ T5736] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   89.204348][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.246734][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.280158][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.312410][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.467528][ T3338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.503985][ T3338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.897609][ T5632] Bluetooth: hci3: command tx timeout
[   89.903365][ T5623] Bluetooth: hci2: command tx timeout
[   89.909137][ T5637] Bluetooth: hci0: command tx timeout
[   89.914892][ T5639] Bluetooth: hci1: command tx timeout
[   89.920955][   T50] Bluetooth: hci4: command tx timeout
[   89.989573][ T5625] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   90.050546][ T5625] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[   90.121633][ T5754] netlink: 'syz.0.1': attribute type 12 has an invalid length.
[   90.121655][ T5754] netlink: 'syz.0.1': attribute type 29 has an invalid length.
[   90.121693][ T5754] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1'.
[   90.152774][ T5754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   90.412165][ T5760] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8'.
[   90.485112][ T5762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9'.
[   90.600932][ T5735] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   91.526618][ T5727] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   91.594058][ T5777] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11'.
[   91.725668][ T5727] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[   91.749471][ T5727] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.805100][ T5727] usb 1-1: config 0 descriptor??
[   91.834120][ T5727] gspca_main: STV06xx-2.14.0 probing 046d:0870
[   92.073061][  T807] cfg80211: failed to load regulatory.db
[   92.197507][ T5723] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   92.366133][ T5723] usb 3-1: Using ep0 maxpacket: 32
[   92.390933][ T5723] usb 3-1: unable to get BOS descriptor or descriptor too short
[   92.417303][ T5723] usb 3-1: config 128 has an invalid interface number: 127 but max is 3
[   92.440752][ T5723] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[   92.459703][ T5723] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4
[   92.483448][ T5727] gspca_stv06xx: I2C: Read error writing address: -71
[   92.516573][ T5723] usb 3-1: config 128 has no interface number 0
[   92.550939][ T5723] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7
[   92.581122][ T5727] usb 1-1: USB disconnect, device number 2
[   92.633169][ T5723] usb 3-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0
[   92.675094][ T5723] usb 3-1: config 128 interface 127 has no altsetting 0
[   92.679378][ T5723] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[   92.679412][ T5723] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.679433][ T5723] usb 3-1: Product: syz
[   92.679449][ T5723] usb 3-1: Manufacturer: syz
[   92.679464][ T5723] usb 3-1: SerialNumber: syz
[   92.921690][ T5787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   92.922040][ T5787] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   92.929527][ T5787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   92.946509][ T5787] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   92.956216][ T5787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   92.965779][ T5787] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   92.967126][ T5787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   92.990769][ T5787] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   92.991949][ T5787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.004289][ T5805] fuse: Bad value for 'fd'
[   93.032232][ T5787] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   93.145031][ T5727] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   93.316121][ T5727] usb 1-1: Using ep0 maxpacket: 32
[   93.325807][ T5727] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   93.325832][ T5727] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   93.325857][ T5727] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   93.325871][ T5727] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.340295][ T5727] usb 1-1: config 0 descriptor??
[   93.376236][ T5727] hub 1-1:0.0: USB hub found
[   93.644612][ T5696] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   93.671452][ T5727] hub 1-1:0.0: 26 ports detected
[   93.680031][ T5727] hub 1-1:0.0: insufficient power available to use all downstream ports
[   93.760743][ T5723] usb 3-1: USB disconnect, device number 2
[   93.880344][ T5696] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[   93.924705][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.000904][ T5696] usb 4-1: Product: syz
[   94.026943][ T5737] udevd[5737]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   94.045928][ T5696] usb 4-1: Manufacturer: syz
[   94.061134][ T5696] usb 4-1: SerialNumber: syz
[   94.093482][ T5809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.103794][ T5696] usb 4-1: config 0 descriptor??
[   94.150298][ T5809] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.210275][ T5696] hub 4-1:0.0: bad descriptor, ignoring hub
[   94.228482][ T5727] usb 1-1: USB disconnect, device number 3
[   94.236117][ T5696] hub 4-1:0.0: probe with driver hub failed with error -5
[   94.271536][ T5809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.367060][ T5809] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.382932][ T5723] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   94.495350][ T5696] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[   94.677557][ T5696] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   94.749678][ T5696] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[   94.781405][ T5723] usb 3-1: device not accepting address 3, error -71
[   94.787815][ T5696] usb 4-1: media controller created
[   94.830309][ T1007] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.929677][ T5696] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   95.081647][ T1007] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.133357][ T5696] DVB: Unable to find symbol dib7000p_attach()
[   95.140259][ T5696] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[   95.217459][ T1007] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.236349][ T5696] rc_core: IR keymap rc-dib0700-rc5 not found
[   95.247292][ T5696] Registered IR keymap rc-empty
[   95.263173][ T5696] dvb-usb: could not initialize remote control.
[   95.270209][ T5696] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[   95.318589][ T1007] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.730278][ T5823] netlink: 'syz.2.27': attribute type 1 has an invalid length.
[   95.943774][   T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   95.958585][   T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   95.968560][   T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   95.982081][   T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   95.991448][   T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   96.025337][ T1007] bridge_slave_1: left allmulticast mode
[   96.080034][ T1007] bridge_slave_1: left promiscuous mode
[   96.124111][ T1007] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.210590][ T1007] bridge_slave_0: left allmulticast mode
[   96.225089][ T5688] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   96.238483][ T1007] bridge_slave_0: left promiscuous mode
[   96.258592][ T1007] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.394983][ T5688] usb 1-1: Using ep0 maxpacket: 32
[   96.412367][ T5688] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.427375][  T807] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   96.459818][ T5688] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.508670][ T5688] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   96.542708][ T5688] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   96.574948][ T5688] usb 1-1: Product: syz
[   96.584957][  T807] usb 2-1: device descriptor read/64, error -71
[   96.591524][ T5688] usb 1-1: Manufacturer: syz
[   96.633822][ T5688] hub 1-1:4.0: USB hub found
[   96.784661][ T5696] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   96.846483][  T807] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   96.927139][ T1007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   96.949053][ T1007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   96.967533][ T5696] usb 3-1: config index 0 descriptor too short (expected 8192, got 36)
[   96.968426][ T1007] bond0 (unregistering): Released all slaves
[   96.999363][ T5696] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   97.016916][  T807] usb 2-1: device descriptor read/64, error -71
[   97.026631][ T5688] hub 1-1:4.0: config failed, can't read hub descriptor (err -22)
[   97.044411][ T5696] usb 3-1: config 0 has no interfaces?
[   97.072226][ T5696] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   97.108345][ T5696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.149510][  T807] usb usb2-port1: attempt power cycle
[   97.156056][ T5696] usb 3-1: config 0 descriptor??
[   97.524675][  T807] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   97.567594][  T807] usb 2-1: device descriptor read/8, error -71
[   97.647580][ T5727] usb 4-1: USB disconnect, device number 2
[   97.655860][ T5696] usb 3-1: string descriptor 0 read error: -71
[   97.729181][ T5696] usb 3-1: USB disconnect, device number 5
[   97.827812][  T807] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   97.849812][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1
[   97.867593][  T807] usb 2-1: device descriptor read/8, error -71
[   97.870902][ T5727] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[   97.985503][  T807] usb usb2-port1: unable to enumerate USB device
[   98.005135][ T1007] hsr_slave_0: left promiscuous mode
[   98.013903][ T1007] hsr_slave_1: left promiscuous mode
[   98.025500][ T1007] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   98.033010][ T1007] batman_adv: batadv0: Removing interface: batadv_slave_0
[   98.042558][ T1007] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   98.050589][ T1007] batman_adv: batadv0: Removing interface: batadv_slave_1
[   98.058105][   T50] Bluetooth: hci2: command tx timeout
[   98.073030][ T1007] veth1_macvtap: left promiscuous mode
[   98.079612][ T1007] veth0_macvtap: left promiscuous mode
[   98.085605][ T1007] veth1_vlan: left promiscuous mode
[   98.091253][ T1007] veth0_vlan: left promiscuous mode
[   98.296109][ T5727] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[   98.329155][ T5696] usb 1-1: USB disconnect, device number 4
[   98.478960][ T5727] usb 4-1: unable to get BOS descriptor or descriptor too short
[   98.507218][ T5727] usb 4-1: not running at top speed; connect to a high speed hub
[   98.526325][ T5727] usb 4-1: config 5 has an invalid interface number: 246 but max is 0
[   98.541684][ T5727] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[   98.556697][ T5727] usb 4-1: config 5 has no interface number 0
[   98.563468][ T5727] usb 4-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[   98.574863][ T5727] usb 4-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   98.595607][ T5727] usb 4-1: config 5 interface 246 has no altsetting 0
[   98.615447][ T5727] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4
[   98.632270][ T5727] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.632861][ T1007] team0 (unregistering): Port device team_slave_1 removed
[   98.640878][ T5727] usb 4-1: Product: syz
[   98.660236][ T5727] usb 4-1: Manufacturer: syz
[   98.670289][ T5727] usb 4-1: SerialNumber: syz
[   98.693199][ T1007] team0 (unregistering): Port device team_slave_0 removed
[   98.718290][ T5869] ptrace attach of "./syz-executor exec"[5641] was attempted by "./syz-executor exec"[5869]
[   98.951595][   T60] usb 4-1: Failed to submit usb control message: -71
[   98.959307][ T5727] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[   98.970062][   T60] usb 4-1: unable to send the bmi data to the device: -71
[   98.986486][   T60] usb 4-1: unable to get target info from device
[   98.996980][ T5727] usb 4-1: USB disconnect, device number 3
[   99.013507][   T60] usb 4-1: could not get target info (-71)
[   99.027377][   T60] usb 4-1: could not probe fw (-71)
[   99.349774][ T5878] netlink: 16 bytes leftover after parsing attributes in process `syz.0.35'.
[  100.023947][ T5896] netlink: 'syz.3.40': attribute type 10 has an invalid length.
[  100.038667][ T5727] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  100.134709][   T50] Bluetooth: hci2: command tx timeout
[  100.188477][ T5896] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  100.241946][ T5727] usb 2-1: Using ep0 maxpacket: 32
[  100.252338][ T5896] team0: Failed to send port change of device netdevsim1 via netlink (err -105)
[  100.252887][ T5727] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  100.276941][ T5727] usb 2-1: config 0 has no interface number 0
[  100.293529][ T5727] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  100.312371][ T5727] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  100.328459][ T5906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.41'.
[  100.337717][ T5727] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  100.349118][ T5727] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.363283][ T5896] team0: Failed to send options change via netlink (err -105)
[  100.372913][ T5896] team0: Port device netdevsim1 added
[  100.385429][ T5727] usb 2-1: config 0 descriptor??
[  100.588512][   T13] team0: Failed to send port change of device netdevsim1 via netlink (err -105)
[  100.710102][ T5727] usbhid 2-1:0.1: can't add hid device: -71
[  100.735933][ T5727] usbhid 2-1:0.1: probe with driver usbhid failed with error -71
[  100.817200][ T5727] usb 2-1: USB disconnect, device number 6
[  100.882522][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.932250][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.975723][ T5833] bridge_slave_0: entered allmulticast mode
[  101.008779][ T5833] bridge_slave_0: entered promiscuous mode
[  101.073518][ T5923] bridge0: port 3(veth0_vlan) entered blocking state
[  101.086488][ T5923] bridge0: port 3(veth0_vlan) entered disabled state
[  101.120590][ T5923] veth0_vlan: entered allmulticast mode
[  101.145405][ T5696] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  101.174248][ T5923] veth0_vlan: left allmulticast mode
[  101.198524][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.233219][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.272896][ T5833] bridge_slave_1: entered allmulticast mode
[  101.316193][ T5833] bridge_slave_1: entered promiscuous mode
[  101.368129][ T5696] usb 1-1: Using ep0 maxpacket: 16
[  101.398999][ T5696] usb 1-1: config 0 has no interfaces?
[  101.435412][ T5696] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  101.456059][ T5696] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  101.490745][ T5696] usb 1-1: Manufacturer: syz
[  101.517916][ T5696] usb 1-1: config 0 descriptor??
[  101.541160][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2
[  101.755619][ T5727] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  101.841963][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  101.970851][ T5727] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  101.994967][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  102.006763][ T5727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.024527][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  102.052005][ T5727] usb 2-1: Product: syz
[  102.074158][ T5727] usb 2-1: Manufacturer: syz
[  102.103634][ T5727] usb 2-1: SerialNumber: syz
[  102.144642][   T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  102.204045][ T5727] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  102.217637][   T50] Bluetooth: hci2: command tx timeout
[  102.317601][  T992] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  102.344733][   T24] usb 3-1: Using ep0 maxpacket: 16
[  102.368756][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.437075][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  102.468826][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  102.516778][   T24] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  102.554659][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.606772][   T24] usb 3-1: config 0 descriptor??
[  103.034512][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  103.094545][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  103.214535][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  103.274512][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  103.334543][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  103.344530][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  103.374771][ T5703] usb 2-1: USB disconnect, device number 7
[  103.414827][  T992] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  103.477224][  T992] ath9k_htc: Failed to initialize the device
[  103.524273][ T5933] netlink: 'syz.2.45': attribute type 13 has an invalid length.
[  103.532165][ T5703] usb 2-1: ath9k_htc: USB layer deinitialized
[  103.635137][ T5933] netlink: 'syz.2.45': attribute type 17 has an invalid length.
[  104.294685][   T50] Bluetooth: hci2: command tx timeout
[  104.617142][ T5942] loop4: detected capacity change from 0 to 7
[  104.644539][    T0] NOHZ tick-stop error: local softirq work is pending, handler #3c0!!!
[  104.711810][ T5942] Dev loop4: unable to read RDB block 7
[  104.755203][ T5942]  loop4: unable to read partition table
[  104.784030][ T5942] loop4: partition table beyond EOD, truncated
[  104.824008][ T5942] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑච) failed (rc=-5)
[  106.344528][    T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!!
[  106.993082][ T5833] team0: Port device team_slave_0 added
[  107.065478][   T24] usbhid 3-1:0.0: can't add hid device: -71
[  107.118523][   T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  107.176294][ T5833] team0: Port device team_slave_1 added
[  107.183172][   T24] usb 3-1: USB disconnect, device number 6
[  107.400040][ T5962] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size.
[  107.477459][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3
[  107.605313][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[  107.633268][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  107.710831][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  107.755781][ T5696] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  107.934752][ T5696] usb 3-1: Using ep0 maxpacket: 32
[  107.959022][ T5696] usb 3-1: unable to get BOS descriptor or descriptor too short
[  107.978710][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[  107.980148][ T5696] usb 3-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40
[  107.999915][ T5696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.009738][ T5696] usb 3-1: Product: syz
[  108.014006][ T5696] usb 3-1: Manufacturer: syz
[  108.023645][ T5696] usb 3-1: SerialNumber: syz
[  108.029851][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  108.099650][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.471377][ T5833] hsr_slave_0: entered promiscuous mode
[  108.503850][ T5833] hsr_slave_1: entered promiscuous mode
[  108.567037][ T5833] debugfs: 'hsr0' already exists in 'hsr'
[  108.621959][ T5833] Cannot create hsr debugfs directory
[  108.936121][ T5696] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  108.991683][ T5696] usb 3-1: MIDIStreaming interface descriptor not found
[  109.033541][  T807] usb 1-1: USB disconnect, device number 5
[  109.748434][ T5696] usb 3-1: USB disconnect, device number 7
[  110.401701][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  111.228512][ T5688] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  111.279479][ T5833] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  111.387266][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  111.419253][ T5833] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  111.460917][ T5688] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  111.489869][ T5999] loop4: detected capacity change from 0 to 7
[  111.504504][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  111.514388][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  111.539009][ T5833] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  111.558631][ T5688] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  111.581303][ T5999] Dev loop4: unable to read RDB block 7
[  111.588546][ T5688] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  111.629909][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  111.635205][ T5688] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  111.663528][ T5999]  loop4: unable to read partition table
[  111.677241][ T5688] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  111.696419][ T5833] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  111.726203][ T5999] loop4: partition table beyond EOD, truncated
[  111.759985][ T5833] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  111.760156][ T5688] usb 1-1: Product: syz
[  111.787238][ T5999] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑච) failed (rc=-5)
[  111.808330][ T5688] usb 1-1: Manufacturer: syz
[  111.851520][ T5688] usb 1-1: SerialNumber: syz
[  111.944669][   T42] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  112.141116][   T42] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.256415][   T42] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16
[  112.295245][ T5688] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  112.622520][   T42] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64
[  112.771357][   T42] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  112.811538][   T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.837516][   T42] usb 3-1: Product: syz
[  112.846972][   T42] usb 3-1: Manufacturer: syz
[  112.859487][   T42] usb 3-1: SerialNumber: syz
[  112.961711][   T42] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[  112.996532][   T42] cdc_ncm 3-1:1.0: bind() failure
[  113.034592][ T5696] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  113.104224][   T42] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  113.158253][   T42] cdc_ncm 3-1:1.1: bind() failure
[  113.544593][  T992] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  113.715121][  T992] usb 4-1: Using ep0 maxpacket: 8
[  113.731620][  T992] usb 4-1: unable to get BOS descriptor or descriptor too short
[  113.762611][  T992] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40
[  113.776861][  T992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.798083][  T992] usb 4-1: Product: syz
[  113.811172][  T992] usb 4-1: Manufacturer: syz
[  113.838318][  T992] usb 4-1: SerialNumber: syz
[  114.102469][  T992] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  114.116000][  T992] usb 4-1: MIDIStreaming interface descriptor not found
[  114.136149][ T5696] usb 2-1: device descriptor read/64, error -71
[  114.221273][   T42] usb 1-1: USB disconnect, device number 6
[  114.271510][   T42] usblp0: removed
[  114.323747][ T5290] 8021q: adding VLAN 0 to HW filter on device eth4
[  114.404585][ T5696] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  114.503186][  T992] usb 4-1: USB disconnect, device number 4
[  114.630788][ T5696] usb 2-1: New USB device found, idVendor=2040, idProduct=d853, bcdDevice=f8.f6
[  114.685128][ T5696] usb 2-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3
[  114.730509][ T5696] usb 2-1: Product: syz
[  114.754710][ T5696] usb 2-1: Manufacturer: syz
[  114.805279][ T5696] usb 2-1: SerialNumber: syz
[  114.854844][   T42] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  114.916266][ T5696] usb 2-1: dvb_usb_v2: found a 'Hauppauge Mercury' in warm state
[  114.926572][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[  114.965755][ T5681] udevd[5681]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  115.025145][ T5696] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  115.030273][ T5696] dvbdev: DVB: registering new adapter (Hauppauge Mercury)
[  115.030356][ T5696] usb 2-1: media controller created
[  115.048789][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[  115.104840][   T42] usb 1-1: Using ep0 maxpacket: 32
[  115.106817][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.106982][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.109744][   T42] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  115.109771][   T42] usb 1-1: config 0 has no interface number 0
[  115.121526][   T42] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8
[  115.121560][   T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.121582][   T42] usb 1-1: Product: syz
[  115.121598][   T42] usb 1-1: Manufacturer: syz
[  115.121612][   T42] usb 1-1: SerialNumber: syz
[  115.149888][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  115.150001][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  115.156198][   T42] usb 1-1: config 0 descriptor??
[  115.193826][ T5696] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  115.197107][   T42] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  115.197137][   T42] usb 1-1: selecting invalid altsetting 1
[  115.197154][   T42] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  115.248067][   T42] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  115.382971][ T5688] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  115.407781][ T6038] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000018: 0000 [#1] SMP KASAN PTI
[  115.407810][ T6038] KASAN: null-ptr-deref in range [0x00000000000000c0-0x00000000000000c7]
[  115.407833][ T6038] CPU: 1 UID: 0 PID: 6038 Comm: syz.0.64 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  115.407861][ T6038] Tainted: [L]=SOFTLOCKUP
[  115.407869][ T6038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  115.407881][ T6038] RIP: 0010:__mutex_lock+0x14e/0x1550
[  115.407912][ T6038] Code: e0 33 44 9a 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 40 12 00 00 83 3d b0 09 9b 0e 00 75 23 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 56 b4 87 f6 4d 39 64 24 58 0f 85 6c 11 00
[  115.407930][ T6038] RSP: 0018:ffffc90003a57420 EFLAGS: 00010206
[  115.407951][ T6038] RAX: 0000000000000018 RBX: 0000000000000000 RCX: ffffffff9a443303
[  115.407965][ T6038] RDX: 0000000000000000 RSI: ffffffff8e217007 RDI: 00000000000000c0
[  115.407979][ T6038] RBP: ffffc90003a575d8 R08: ffffc90003a57547 R09: 0000000000000000
[  115.407994][ T6038] R10: ffffc90003a57520 R11: fffff5200074aea9 R12: 0000000000000068
[  115.408008][ T6038] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff9200074ae9c
[  115.408022][ T6038] FS:  00007fcb5621f6c0(0000) GS:ffff888125393000(0000) knlGS:0000000000000000
[  115.408040][ T6038] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  115.408054][ T6038] CR2: 000000110c3b34b5 CR3: 0000000062116000 CR4: 00000000003526f0
[  115.408079][ T6038] Call Trace:
[  115.408087][ T6038]  <TASK>
[  115.408097][ T6038]  ? __mutex_lock+0x319/0x1550
[  115.408123][ T6038]  ? __mutex_trylock_common+0x158/0x260
[  115.408150][ T6038]  ? dvb_usbv2_generic_write+0x26/0x60
[  115.408175][ T6038]  ? __pfx___mutex_lock+0x10/0x10
[  115.408198][ T6038]  ? __pfx___mutex_lock+0x10/0x10
[  115.408223][ T6038]  ? __mutex_lock+0x319/0x1550
[  115.408249][ T6038]  dvb_usbv2_generic_write+0x26/0x60
[  115.408271][ T6038]  mxl111sf_ctrl_msg+0x160/0x2f0
[  115.408300][ T6038]  mxl111sf_write_reg+0xa9/0x1b0
[  115.408326][ T6038]  ? __pfx_mxl111sf_write_reg+0x10/0x10
[  115.408351][ T6038]  ? trace_contention_end+0x8a/0x140
[  115.408379][ T6038]  mxl111sf_i2c_xfer+0x496/0x5100
[  115.408411][ T6038]  ? unwind_next_frame+0xa6/0x2550
[  115.408436][ T6038]  ? unwind_next_frame+0xa6/0x2550
[  115.408459][ T6038]  ? rcu_is_watching+0x15/0xb0
[  115.408483][ T6038]  ? rcu_is_watching+0x15/0xb0
[  115.408509][ T6038]  ? __pfx_mxl111sf_i2c_xfer+0x10/0x10
[  115.408539][ T6038]  ? is_bpf_text_address+0x292/0x2b0
[  115.408561][ T6038]  ? is_bpf_text_address+0x26/0x2b0
[  115.408581][ T6038]  ? kernel_text_address+0xa5/0xe0
[  115.408618][ T6038]  ? __kernel_text_address+0xd/0x30
[  115.408645][ T6038]  ? unwind_get_return_address+0x4d/0x90
[  115.408669][ T6038]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  115.408699][ T6038]  ? arch_stack_walk+0xfb/0x150
[  115.408730][ T6038]  ? stack_trace_save+0xa9/0x100
[  115.408758][ T6038]  ? __pfx_stack_trace_save+0x10/0x10
[  115.408788][ T6038]  ? check_path+0x21/0x40
[  115.408810][ T6038]  ? check_noncircular+0xda/0x150
[  115.408836][ T6038]  ? add_lock_to_list+0xc7/0x100
[  115.408861][ T6038]  ? lockdep_unlock+0x5d/0xd0
[  115.408878][ T6038]  ? __lock_acquire+0x146e/0x2cf0
[  115.408912][ T6038]  __i2c_transfer+0x79a/0x1f70
[  115.408941][ T6038]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  115.408962][ T6038]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  115.408982][ T6038]  ? i2c_transfer+0xc8/0x2d0
[  115.409010][ T6038]  i2c_transfer+0x1cc/0x2d0
[  115.409038][ T6038]  i2cdev_ioctl_rdwr+0x460/0x740
[  115.409071][ T6038]  i2cdev_ioctl+0x6a5/0x880
[  115.409104][ T6038]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  115.409132][ T6038]  ? __fget_files+0x3a0/0x420
[  115.409156][ T6038]  ? __fget_files+0x2a/0x420
[  115.409179][ T6038]  ? bpf_lsm_file_ioctl+0x9/0x20
[  115.409208][ T6038]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  115.409234][ T6038]  __se_sys_ioctl+0xfc/0x170
[  115.409264][ T6038]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.409286][ T6038]  do_syscall_64+0x15f/0xf80
[  115.409307][ T6038]  ? trace_irq_disable+0x3b/0x140
[  115.409336][ T6038]  ? clear_bhb_loop+0x40/0x90
[  115.409357][ T6038]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  115.409376][ T6038] RIP: 0033:0x7fcb5539cdd9
[  115.409393][ T6038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  115.409410][ T6038] RSP: 002b:00007fcb5621f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  115.409432][ T6038] RAX: ffffffffffffffda RBX: 00007fcb55615fa0 RCX: 00007fcb5539cdd9
[  115.409447][ T6038] RDX: 00002000000000c0 RSI: 0000000000000707 RDI: 0000000000000005
[  115.409460][ T6038] RBP: 00007fcb55432d69 R08: 0000000000000000 R09: 0000000000000000
[  115.409473][ T6038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  115.409485][ T6038] R13: 00007fcb55616038 R14: 00007fcb55615fa0 R15: 00007fcb5573fa48
[  115.409507][ T6038]  </TASK>
[  115.409514][ T6038] Modules linked in:
[  115.409549][ T6038] ---[ end trace 0000000000000000 ]---
[  115.422693][ T5696] usb 2-1: selecting invalid altsetting 1
[  115.431457][ T6038] RIP: 0010:__mutex_lock+0x14e/0x1550
[  115.439406][   T42] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  115.462104][ T5833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  115.524636][ T6038] Code: e0 33 44 9a 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 40 12 00 00 83 3d b0 09 9b 0e 00 75 23 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 56 b4 87 f6 4d 39 64 24 58 0f 85 6c 11 00
[  115.624566][ T5688] usb 4-1: Using ep0 maxpacket: 16
[  115.648667][ T5696] set interface failed
[  116.093787][   T42] usb 1-1: media controller created
[  116.101525][   T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  116.102270][ T6038] RSP: 0018:ffffc90003a57420 EFLAGS: 00010206
[  116.102297][ T6038] RAX: 0000000000000018 RBX: 0000000000000000 RCX: ffffffff9a443303
[  116.102314][ T6038] RDX: 0000000000000000 RSI: ffffffff8e217007 RDI: 00000000000000c0
[  116.102328][ T6038] RBP: ffffc90003a575d8 R08: ffffc90003a57547 R09: 0000000000000000
[  116.102343][ T6038] R10: ffffc90003a57520 R11: fffff5200074aea9 R12: 0000000000000068
[  116.102357][ T6038] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff9200074ae9c
[  116.102372][ T6038] FS:  00007fcb5621f6c0(0000) GS:ffff888125393000(0000) knlGS:0000000000000000
[  116.102390][ T6038] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  116.102405][ T6038] CR2: 00007f025594da08 CR3: 0000000062116000 CR4: 00000000003526f0
[  116.102428][ T6038] Kernel panic - not syncing: Fatal exception
[  116.102617][ T6038] Kernel Offset: disabled