last executing test programs:

6.910138211s ago: executing program 0 (id=13):
syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x16840)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001f80)=@newtfilter={0x8a0, 0x2c, 0x609, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x2}, {0x1, 0x6}, {0x300, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x870, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x3, 0x8}, {0xc22, 0x7, 0xfffff800, 0xfffffff3}}}]}]}, @TCA_CGROUP_POLICE={0x848, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x401, 0x10000000, 0xfffffffa, 0x9, 0x0, {0x6, 0x1, 0x9, 0x3, 0x4, 0x676}, {0x9, 0x1, 0xfffd, 0xc9, 0x3, 0x456}, 0x1, 0x503, 0xe}}, @TCA_POLICE_RATE={0x404, 0x2, [0x401, 0x1d4, 0x3, 0x401, 0x7, 0x5, 0x3, 0x0, 0x80, 0xd9, 0x0, 0x81, 0x4, 0x800002, 0x2, 0x3, 0x401, 0x3, 0x3, 0x4, 0x1, 0x10000, 0x8, 0x408, 0x1, 0x2, 0xff, 0x2, 0xb22, 0x3, 0x2, 0x7fff, 0x7, 0x6, 0xfffffffd, 0x22, 0x1c8b, 0x4, 0x10001, 0x4, 0x8, 0x80000001, 0x6, 0x4, 0x3, 0x7, 0xf92, 0x17, 0xa0f7, 0x225, 0x8, 0x6, 0x2, 0x10001, 0x6, 0xe1c3, 0x4d, 0x3, 0x6, 0x398, 0x0, 0xc1a, 0x4, 0x8, 0x101, 0x8, 0xfffffff8, 0x634, 0xb, 0x5, 0x6, 0xffffffc4, 0x5, 0x0, 0x2, 0x5, 0x1, 0x4, 0x5, 0x4eb6, 0x400, 0x8000, 0x3, 0x7, 0xf76, 0x3, 0xf20, 0x80000001, 0x73, 0x4, 0x2, 0x9, 0x8, 0x1, 0xa, 0x4d989b25, 0x5, 0x0, 0x3, 0x4, 0x1, 0x8, 0x1, 0x6, 0x6, 0xffff0001, 0x100, 0x1, 0xd0ef, 0x2, 0xc9, 0x7, 0x7, 0xffffffff, 0x4, 0x1, 0x6, 0x5, 0x44c1, 0xffffff01, 0xffffffff, 0xffff, 0x3ff, 0x8, 0x3, 0xb, 0x3, 0x1, 0xffffffff, 0x7fff, 0x4, 0x2, 0x7, 0xe, 0x9, 0x5, 0x2, 0x5, 0x5, 0x2, 0x4, 0x2, 0x8, 0x0, 0x8, 0x200, 0x5, 0x8, 0x7, 0x9, 0x7, 0x7, 0x4, 0x0, 0x6, 0x160d, 0x4, 0xfffffff9, 0xc, 0x5, 0x5, 0xff, 0xdc, 0x2, 0x9, 0x1ff, 0xa, 0x3, 0x437, 0x2, 0xfffffff9, 0xfa7, 0x9, 0x3, 0x80000001, 0x200, 0x10000, 0xea49, 0x8, 0xff, 0x5, 0xff, 0x3, 0x8, 0x81, 0x7, 0x1, 0x1, 0x1, 0x3, 0x7, 0xfc4, 0x0, 0x4, 0x9, 0x8, 0x2, 0x9, 0xd, 0x10, 0x3ff, 0x7, 0x5, 0x4, 0xe136, 0x48d, 0x6, 0x10, 0x0, 0x6, 0x3, 0x2, 0xdc, 0xfe, 0x3, 0x5, 0x1, 0x7, 0x1, 0x5, 0x0, 0x9, 0x8, 0x9, 0x4, 0x8, 0x7, 0x1, 0xfbf, 0x146e, 0x400, 0x0, 0xa, 0x3, 0x83e1, 0x1b, 0x888, 0x7, 0x288, 0x7ff, 0x6, 0x5, 0x10, 0x4, 0x80000001, 0x400, 0x4, 0x20, 0x6eb, 0x0, 0xfffffff8, 0x4, 0x1, 0x5, 0x1, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x9, 0x7fffffff, 0x1, 0x9, 0x0, 0xfffffc4c, 0x1, 0x200, 0x7, 0x15, 0x7a5, 0x4, 0x1, 0x3, 0xfffffffc, 0x3, 0xab, 0x8142, 0x2, 0x0, 0x1000, 0x8, 0x40, 0x74e, 0x3623, 0x8, 0x86, 0x5, 0x5, 0x8001, 0x5045c494, 0x5, 0x8, 0x326a, 0x1, 0x0, 0x9, 0x1, 0x2, 0x7ffffbff, 0x1000, 0x9e, 0xd5, 0x7, 0x56fc, 0xd, 0xfffffcfb, 0x3, 0x9, 0x7, 0xffff, 0x5, 0x80000000, 0x9, 0x4, 0x9, 0x2c72, 0x8, 0x5, 0x3, 0xa5, 0xa, 0x0, 0x9, 0x80000000, 0xfc, 0x0, 0x79255d0e, 0x8, 0xfffffff7, 0x6963, 0x0, 0x1, 0x5, 0x400, 0x0, 0x8, 0xf, 0x7fff, 0xfffffffd, 0x1, 0xffffffff, 0x7, 0x2, 0xa, 0xef8f, 0x0, 0x5, 0x0, 0x9, 0x2, 0x10000000, 0x0, 0x80000001, 0x0, 0xffffffff, 0x83, 0x4, 0x8, 0x2, 0x0, 0xff, 0xc3e, 0x7, 0xccb, 0xfffffff8, 0xfffffff9, 0xab, 0x10000, 0x0, 0x3, 0x752a5eb9, 0x1, 0x7, 0xedf4, 0x2b3, 0x1, 0x6, 0x3, 0x100, 0x8, 0x5, 0x6, 0x6, 0x7, 0x3, 0xfffff145, 0x1, 0x7, 0xff, 0x48, 0x2e8, 0x3, 0x10, 0x7e69c17e, 0x9, 0x7648, 0x1000, 0x8, 0xf1, 0x3, 0xd7, 0x6, 0x3, 0x7, 0x9, 0x7f, 0x5, 0x200, 0x0, 0x9, 0x7, 0x5e, 0x4, 0x2, 0x7, 0x7, 0x7ff, 0x9a, 0x200345f, 0xe, 0x7fffffff, 0x6, 0x7fffffff, 0xfffffffb, 0x9, 0x4, 0x8, 0x9, 0x3, 0xfffffff7, 0x3, 0x7, 0x1, 0xf7a5, 0x0, 0x1, 0x9, 0x400, 0x81, 0x8, 0x7, 0x7ff, 0x5, 0x7f, 0x1, 0xfffffffe, 0xffffffff, 0x6, 0xff, 0x10001, 0x7, 0x1, 0x7, 0x6, 0xde3, 0xfffffffa, 0x200, 0x8, 0x8, 0xfffffff8, 0x9, 0x0, 0x0, 0x9, 0x6, 0xc, 0x6, 0x0, 0xffffffff, 0x5, 0x8667, 0x80, 0x0, 0x6, 0x9, 0x2, 0x4, 0x5, 0x6ae3, 0x1, 0x1, 0x7, 0x3, 0x1, 0xffff, 0x5, 0x0, 0xfffffffa, 0x81, 0x3, 0x6, 0x8, 0x10000, 0x7, 0x7, 0x8001, 0x1, 0x2, 0x6, 0x2, 0x226c0000, 0x5f7e, 0xffffffff, 0x5, 0x0, 0xff, 0xad9, 0x4d3ae222, 0xfffffffe, 0x5, 0x9, 0x0, 0x9, 0x2]}]}]}}]}, 0x8a0}, 0x1, 0x0, 0x0, 0x8001}, 0x4000001)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a300000000008000240"], 0xcd0}}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)}, 0x40085)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7fffffff, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="300000000000000029000000040000008402300400000000040200030401", @ANYRES8], 0x30}, 0x40)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x804, 0x0)
ioctl$SOUND_MIXER_READ_STEREODEVS(r2, 0x80044dfb, &(0x7f0000000040))
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240))
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r3, &(0x7f0000000200)='m', 0x1)
r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100))
r5 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
write$snddsp(r5, &(0x7f0000000200)="a3", 0x1)

6.278962307s ago: executing program 0 (id=21):
openat$tun(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003540)={&(0x7f00000022c0)=ANY=[@ANYBLOB='(\x00\b\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf258800000008000300", @ANYRES32=r3, @ANYBLOB="0a0006000802110000010000"], 0x28}, 0x1, 0x0, 0x0, 0x40081}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r4)
r5 = socket$packet(0x11, 0x2, 0x300)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd6", 0xf)
accept4$alg(r6, 0x0, 0x0, 0x0)
r7 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000002c0)={0x0, 0x30b5, 0x0, 0x401, 0x158}, &(0x7f0000000100)=<r8=>0x0, &(0x7f0000000280)=<r9=>0x0, &(0x7f0000000140)=<r10=>0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(r7, r8, r9, r10, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r11=>0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0x3, 0x9}}}, 0x24}}, 0x0)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r13 = dup(r12)
syz_ublk_setup_queues(r13, r11, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x185}, &(0x7f0000000600)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xffffdffe, 0x34f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x100, 0x0, 0x1f0, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x200, 0x2, 0x252, 0x0, r7}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, r13, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
r14 = epoll_create1(0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4)
epoll_ctl$EPOLL_CTL_ADD(r14, 0x1, r5, &(0x7f0000000000)={0x2, 0x3000000})
socket$inet6_sctp(0xa, 0x638754227197674a, 0x84)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000100)='pim6reg1\x00', 0x10)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0xa080)

5.149316637s ago: executing program 0 (id=26):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x2)
syz_open_dev$tty1(0xc, 0x4, 0x3)
socket$igmp6(0xa, 0x3, 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
keyctl$clear(0x11, 0xfffffffffffffffd)
getsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000500)=""/200, &(0x7f0000000600)=0xc8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280))
add_key(&(0x7f0000000d80)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x559, r1)
keyctl$unlink(0x9, 0x0, r1)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7472616e733d76697274696f2c756e616d653d11242c6163636573733d757365722c00"])
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x3}, 0x4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x1, 0x1}, 0x8)
r3 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x7fff, @empty, 0x19f4d29}], 0x1c)
r4 = memfd_create(&(0x7f0000000240)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1fb;(\xb5\xe1jS\xd6\x91B\xb4\xe5=\xc1+\xb9\x12\xde0\x02\xcc\x18\xae%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa7^\xff\xf5\x95\xd2q#\xc6\xca\x97\b\x00\x00\x00\x00\x00\x00\x00&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdlC\xec\xe4\x9a\xc2\fX\x0e\xbc\xa4$\x9dU\xab\xbf\xbb\x12\xe6\x9f\x1d\xe4\x8a\x00\x00\x00\x00\x00\x00\x00\xa0W\xf1H\xb4~$\x05bIp+\x81Y\x9d\xd2!\"\x9d]zs\xb7\xfc,\b\xdd9\xc6\xe03t9\tT\n\xe8\x1f\x84\x1f\xf5\xc5\xf6}\xd7\xa3SL\xfa\xda\x97\x84\xa5Oj\x9by\xd3\x03 u(\x19\xd1\xc0\x8dG\xd8a\xad\x90jz\x12\xbc\xc3\xd7\x04~\xbe\xba\xccTO\xc1\xb2:\xdd\xc1M$\xbb\xe1{\x04\xb3\x13>\xf2n\xee\xab\x83%k\x92\x16\t\xe0\xe1\xa0\xa62\xef\x12\x96\x8b\x1es:\xfe&\x00'/318, 0x0)
ftruncate(0xffffffffffffffff, 0x2022ad)
fsetxattr$security_ima(r4, &(0x7f0000000080), &(0x7f0000000140)=ANY=[], 0x2, 0x0)
execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

4.14992291s ago: executing program 0 (id=28):
r0 = openat$kvm(0xffffff9c, &(0x7f0000000500), 0xc00, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x12, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41100, 0x45, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r4 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', <r5=>0x0})
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x22, 0x2, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x4]}}]}}]}, 0x8c}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x7, 0x4002004c2, 0x803, 0x9, 0x0, 0x400, 0x80, 0x89, 0xfffffffffffffffd, 0x8, 0x8d], 0x100000, 0x240046})
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8102, 0x0)
r8 = syz_open_dev$loop(&(0x7f0000000180), 0x800000000000006, 0x128202)
syz_usb_connect(0x3, 0x120, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0xb6, 0xc, 0x46, 0xff, 0x5c6, 0x9034, 0xe954, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x10e, 0x1, 0xb6, 0x6, 0x55f6be670a6bc05e, 0xc, "", [{{0x9, 0x4, 0x5, 0x8, 0x2, 0x1f, 0xa3, 0xad, 0x0, [], [{{0x9, 0x5, 0x1, 0x4, 0x200, 0x87, 0xd5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4f, 0x1ff}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x6, 0x7, 0x70, [@generic={0xdc, 0x21, "eb1dd4189f27ac19e127b0595003e6869e0ac6f232812be4800a6f45a14371c58d66c5285444e6ac05618ff9d8797cb528d4d01a4d3f9ca84f8ad562ff8e88525864b9d05862f4d128a78e75dff7540df6891c4dd70658949f60b44db79d20360ff100d0db55eaefdb2d3b7eeb5dba566b55aaa3af63b91563ac2e98cf2c208f73f6bce1c3beeff4d35627b8203475ea694790fa8094fe936fe3886b3c815659353826598653dc80f344de9193cdf9ec5b2afc860acf9d5c2e626df158a063205d2170bd790ad2b6c099bc7044aa8e9e354c364a148237f5ca92"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x10}]}}]}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x201, 0x1, 0x6, 0x8, 0x8, 0x7}, 0x5, &(0x7f00000004c0)={0x5, 0xf, 0x5}, 0xa, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x80a}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x440a}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1c09}}, {0x54, &(0x7f0000000640)=@string={0x54, 0x3, "e477919c50bfb226e14c9be01c312827a68ed546957bdb1b394650894d87697ed336c45faa162c57a0ed0703b31141e16e65818964b586ed849c5ae087e71825f93a5458faf19bea89310d1ba911818be57e"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x140c}}, {0x2c, &(0x7f0000000700)=@string={0x2c, 0x3, "0a3be1fd1ab5882170ad9fabbbc61fac82dbe0936e7f7e4db3c99feffc832856a27bc902b4c64b5be812"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x1004}}, {0xb5, &(0x7f0000000880)=@string={0xb5, 0x3, "69a23aedf495184d1d9646411a2a8b3377b32254993bc754eacc5dba561c7c58305c11a1c0e152899631fc1177db6d1099223a08776bca055e80e12a0f025b6474507abe9660a930cd600b0e3c0e8cfb0e6406b22204f6cc7c8b9807877323fbf57620859fc7d2e674890cfb05ec233102dcb96a0d3186992baf6cd9aba7fc8ece83f001bb2a9a89f4567d3af1a14f01deb2055f14744bc86af00adcfed2c24539c89e6154b6f7c87f792c73bbe6e06a6e8f0b"}}]})
ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000001ac0)={r7, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0xe, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f54016d1a85a056f5d759ded130e04d528539f3d328973747a75d1f3d000017deb7d6193b3e7772fd29f35239d200000000008000", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x6]}})
r9 = dup(r8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, r9, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.105560628s ago: executing program 1 (id=44):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @in6=@dev={0xfe, 0x80, '\x00', 0x31}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x4000000001, 0x0, 0x40000000000, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffff8}, {0x3, 0x3, 0x400000000}, 0xfff9, 0x6e6bb3}}, 0xb4}}, 0x4c050)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f00000001c0)={0xffff, 0xffff})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f000014b000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000080)=0x200080)
pwritev(r5, &(0x7f0000000040)=[{&(0x7f0000000300)="80fd0fa67941", 0x6}], 0x1, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r4}, @flat=@weak_binder={0x77622a85, 0x1001, 0x1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

1.968950516s ago: executing program 1 (id=45):
syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x16840)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001f80)=@newtfilter={0x8a0, 0x2c, 0x609, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x2}, {0x1, 0x6}, {0x300, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x870, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x3, 0x8}, {0xc22, 0x7, 0xfffff800, 0xfffffff3}}}]}]}, @TCA_CGROUP_POLICE={0x848, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x401, 0x10000000, 0xfffffffa, 0x9, 0x0, {0x6, 0x1, 0x9, 0x3, 0x4, 0x676}, {0x9, 0x1, 0xfffd, 0xc9, 0x3, 0x456}, 0x1, 0x503, 0xe}}, @TCA_POLICE_RATE={0x404, 0x2, [0x401, 0x1d4, 0x3, 0x401, 0x7, 0x5, 0x3, 0x0, 0x80, 0xd9, 0x0, 0x81, 0x4, 0x800002, 0x2, 0x3, 0x401, 0x3, 0x3, 0x4, 0x1, 0x10000, 0x8, 0x408, 0x1, 0x2, 0xff, 0x2, 0xb22, 0x3, 0x2, 0x7fff, 0x7, 0x6, 0xfffffffd, 0x22, 0x1c8b, 0x4, 0x10001, 0x4, 0x8, 0x80000001, 0x6, 0x4, 0x3, 0x7, 0xf92, 0x17, 0xa0f7, 0x225, 0x8, 0x6, 0x2, 0x10001, 0x6, 0xe1c3, 0x4d, 0x3, 0x6, 0x398, 0x0, 0xc1a, 0x4, 0x8, 0x101, 0x8, 0xfffffff8, 0x634, 0xb, 0x5, 0x6, 0xffffffc4, 0x5, 0x0, 0x2, 0x5, 0x1, 0x4, 0x5, 0x4eb6, 0x400, 0x8000, 0x3, 0x7, 0xf76, 0x3, 0xf20, 0x80000001, 0x73, 0x4, 0x2, 0x9, 0x8, 0x1, 0xa, 0x4d989b25, 0x5, 0x0, 0x3, 0x4, 0x1, 0x8, 0x1, 0x6, 0x6, 0xffff0001, 0x100, 0x1, 0xd0ef, 0x2, 0xc9, 0x7, 0x7, 0xffffffff, 0x4, 0x1, 0x6, 0x5, 0x44c1, 0xffffff01, 0xffffffff, 0xffff, 0x3ff, 0x8, 0x3, 0xb, 0x3, 0x1, 0xffffffff, 0x7fff, 0x4, 0x2, 0x7, 0xe, 0x9, 0x5, 0x2, 0x5, 0x5, 0x2, 0x4, 0x2, 0x8, 0x0, 0x8, 0x200, 0x5, 0x8, 0x7, 0x9, 0x7, 0x7, 0x4, 0x0, 0x6, 0x160d, 0x4, 0xfffffff9, 0xc, 0x5, 0x5, 0xff, 0xdc, 0x2, 0x9, 0x1ff, 0xa, 0x3, 0x437, 0x2, 0xfffffff9, 0xfa7, 0x9, 0x3, 0x80000001, 0x200, 0x10000, 0xea49, 0x8, 0xff, 0x5, 0xff, 0x3, 0x8, 0x81, 0x7, 0x1, 0x1, 0x1, 0x3, 0x7, 0xfc4, 0x0, 0x4, 0x9, 0x8, 0x2, 0x9, 0xd, 0x10, 0x3ff, 0x7, 0x5, 0x4, 0xe136, 0x48d, 0x6, 0x10, 0x0, 0x6, 0x3, 0x2, 0xdc, 0xfe, 0x3, 0x5, 0x1, 0x7, 0x1, 0x5, 0x0, 0x9, 0x8, 0x9, 0x4, 0x8, 0x7, 0x1, 0xfbf, 0x146e, 0x400, 0x0, 0xa, 0x3, 0x83e1, 0x1b, 0x888, 0x7, 0x288, 0x7ff, 0x6, 0x5, 0x10, 0x4, 0x80000001, 0x400, 0x4, 0x20, 0x6eb, 0x0, 0xfffffff8, 0x4, 0x1, 0x5, 0x1, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x9, 0x7fffffff, 0x1, 0x9, 0x0, 0xfffffc4c, 0x1, 0x200, 0x7, 0x15, 0x7a5, 0x4, 0x1, 0x3, 0xfffffffc, 0x3, 0xab, 0x8142, 0x2, 0x0, 0x1000, 0x8, 0x40, 0x74e, 0x3623, 0x8, 0x86, 0x5, 0x5, 0x8001, 0x5045c494, 0x5, 0x8, 0x326a, 0x1, 0x0, 0x9, 0x1, 0x2, 0x7ffffbff, 0x1000, 0x9e, 0xd5, 0x7, 0x56fc, 0xd, 0xfffffcfb, 0x3, 0x9, 0x7, 0xffff, 0x5, 0x80000000, 0x9, 0x4, 0x9, 0x2c72, 0x8, 0x5, 0x3, 0xa5, 0xa, 0x0, 0x9, 0x80000000, 0xfc, 0x0, 0x79255d0e, 0x8, 0xfffffff7, 0x6963, 0x0, 0x1, 0x5, 0x400, 0x0, 0x8, 0xf, 0x7fff, 0xfffffffd, 0x1, 0xffffffff, 0x7, 0x2, 0xa, 0xef8f, 0x0, 0x5, 0x0, 0x9, 0x2, 0x10000000, 0x0, 0x80000001, 0x0, 0xffffffff, 0x83, 0x4, 0x8, 0x2, 0x0, 0xff, 0xc3e, 0x7, 0xccb, 0xfffffff8, 0xfffffff9, 0xab, 0x10000, 0x0, 0x3, 0x752a5eb9, 0x1, 0x7, 0xedf4, 0x2b3, 0x1, 0x6, 0x3, 0x100, 0x8, 0x5, 0x6, 0x6, 0x7, 0x3, 0xfffff145, 0x1, 0x7, 0xff, 0x48, 0x2e8, 0x3, 0x10, 0x7e69c17e, 0x9, 0x7648, 0x1000, 0x8, 0xf1, 0x3, 0xd7, 0x6, 0x3, 0x7, 0x9, 0x7f, 0x5, 0x200, 0x0, 0x9, 0x7, 0x5e, 0x4, 0x2, 0x7, 0x7, 0x7ff, 0x9a, 0x200345f, 0xe, 0x7fffffff, 0x6, 0x7fffffff, 0xfffffffb, 0x9, 0x4, 0x8, 0x9, 0x3, 0xfffffff7, 0x3, 0x7, 0x1, 0xf7a5, 0x0, 0x1, 0x9, 0x400, 0x81, 0x8, 0x7, 0x7ff, 0x5, 0x7f, 0x1, 0xfffffffe, 0xffffffff, 0x6, 0xff, 0x10001, 0x7, 0x1, 0x7, 0x6, 0xde3, 0xfffffffa, 0x200, 0x8, 0x8, 0xfffffff8, 0x9, 0x0, 0x0, 0x9, 0x6, 0xc, 0x6, 0x0, 0xffffffff, 0x5, 0x8667, 0x80, 0x0, 0x6, 0x9, 0x2, 0x4, 0x5, 0x6ae3, 0x1, 0x1, 0x7, 0x3, 0x1, 0xffff, 0x5, 0x0, 0xfffffffa, 0x81, 0x3, 0x6, 0x8, 0x10000, 0x7, 0x7, 0x8001, 0x1, 0x2, 0x6, 0x2, 0x226c0000, 0x5f7e, 0xffffffff, 0x5, 0x0, 0xff, 0xad9, 0x4d3ae222, 0xfffffffe, 0x5, 0x9, 0x0, 0x9, 0x2]}]}]}}]}, 0x8a0}, 0x1, 0x0, 0x0, 0x8001}, 0x4000001)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a300000000008000240"], 0xcd0}}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b00", 0x34}], 0x1}, 0x40085)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r2, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7fffffff, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="300000000000000029000000040000008402300400000000040200030401", @ANYRES8], 0x30}, 0x40)
r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0)
r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x804, 0x0)
ioctl$SOUND_MIXER_READ_STEREODEVS(r4, 0x80044dfb, &(0x7f0000000040))
write$proc_mixer(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='VOLUME \'Line\' 0'], 0x2a)
socket$nl_generic(0x10, 0x3, 0x10)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r5, &(0x7f0000000200)='m', 0x1)
r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000100))
r7 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
write$snddsp(r7, &(0x7f0000000200)="a3", 0x1)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r7, 0x4144, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0)
syz_emit_ethernet(0x5e, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r7, 0x40084146, &(0x7f0000000140)=0xfff)
close(r3)

1.861802243s ago: executing program 2 (id=47):
openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180500000000000000000000060001008500000011000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400000000004, 0x7, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
semget$private(0x0, 0x4, 0x12)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/stat\x00')
ioctl$DVD_AUTH(r1, 0x5392, &(0x7f0000000040)=@lstk={0x7, 0x0, 'Ha3Lj', 0x6, 0x0, 0x0, 0x2})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg2\x00', <r2=>0x0})
r3 = openat$hpet(0xffffff9c, &(0x7f0000000100), 0x20000, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000400000000000000", @ANYRES32=r1, @ANYBLOB="0100"/20, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="050000000008000000d61df800"/28], 0x50)

1.62759243s ago: executing program 3 (id=48):
add_key$user(&(0x7f0000000340), &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000500)="b383134a92977de17e7ae6e91c3b32d2ce0d73596b87aeb5c47f2d3ad8d4fac1166073a0a08f9067d32376305399da113f17ceb0750adfe41abea29d662f154a76f0b88e386cf992416eb0dc83dd52e4dd8fac37a2c8986d0a7f57c616eb6764090f7ade62d94048cf89dc59494ef686586c48b48e1a0e31942da55b5d78cc868180b08e2bb67dbb75f7bff80673e47054118c2cd8213aa7e45ec2b21f64d916e4c99cc78d1a68723c3724ad2614bdfd786ed13da0a086608e207ccafa3a857c", 0xc0, 0xfffffffffffffffd)
add_key$user(&(0x7f00000003c0), &(0x7f00000001c0), &(0x7f00000000c0)="eaa8729b31b3a8d180ba", 0xa, 0xfffffffffffffffd)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5800000010000304000000000000000000000100", @ANYRES32, @ANYRESDEC], 0x58}}, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 00000000000'], 0x2a, 0xfffffffffffffffc)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
syz_usb_connect$uac3(0x0, 0x9f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040ba0d001040000102030109028d000301635006080b00ff010130020904000000010130000a24010a2900010000000c240b07010500000007f800132403060206030407"], 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r5, 0x0, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00')
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket(0x10, 0x3, 0x0)
ioperm(0x2, 0x1, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=<r7=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.627198062s ago: executing program 2 (id=49):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x175, 0x0, 0x119}]})
syz_emit_ethernet(0x22, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000cc00000000000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0xa, &(0x7f0000000040)=ANY=[@ANYRESHEX=r4, @ANYRESDEC, @ANYRES32=r0], &(0x7f0000000400)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
symlink(0x0, &(0x7f0000000300)='./file0/file0\x00')
r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r7, 0x40946400, 0x0)
ioctl$COMEDI_INSNLIST(r7, 0x8008640b, &(0x7f00000edb40)={0x1, &(0x7f00000ed9c0)=[{0xe000003, 0x19, &(0x7f00000016c0)=[0xe6, 0x1ff, 0x3, 0x2, 0x502dd8b8, 0x4b03, 0x4, 0x4, 0x3e69, 0x0, 0x9, 0xbb, 0x4, 0x1, 0x200, 0x9, 0xa3c, 0x8000, 0xf, 0x4, 0x3, 0x8001, 0x5, 0x8, 0x18], 0xa145, 0x7}]})
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
read$FUSE(r8, &(0x7f0000005200)={0x2020}, 0x2020)

958.881462ms ago: executing program 0 (id=50):
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x9c}]})
syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r0, &(0x7f0000001300)="92", 0x2)
ioctl$HIDIOCGRDESC(r0, 0x4008c002, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000002c0))
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x20040080)
io_uring_setup(0x1a8, &(0x7f00000000c0)={0x0, 0xb1e1, 0x2, 0x2000003, 0x22c})
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000048882, 0x0)
dup(r2)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x8300, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000000000))
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
msync(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x6)

920.36294ms ago: executing program 1 (id=51):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000340)=@newtfilter={0x23, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x1b0, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x8}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}, @TCA_BASIC_EMATCHES={0x14c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x98, 0x2, 0x0, 0x1, [@TCF_EM_META={0x7c, 0x1, 0x0, 0x0, {{0x4, 0x4, 0x2ad}, [@TCA_EM_META_RVALUE={0x2b, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="760d7faa95d4", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="19a12501", @TCF_META_TYPE_VAR="f0eb3a13642737daf3", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x16, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="c191749236a3", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x7}, {0x8, 0x5, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xec3, 0x6}, {0xe8dc, 0x62, 0x3}}}, @TCA_EM_META_RVALUE={0xa, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="d26a"]}]}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x3ff, 0x2, 0x4}, {0x9, 0x8, 0x2, "7107455a0b91c203"}}}]}, @TCA_EMATCH_TREE_LIST={0x98, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x15, 0x2, 0x8be}, {0x10, 0x3, 0x0, "f4ebe5"}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x10, 0x8, 0x1}, {0x4, 0x4, 0x1}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x5d8, 0x1, 0xe}, {0xffffffff, 0xfffffff5, 0x6c63, 0xa, 0x2, 0x0, 0x2}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0xf7, 0x2, 0x6}, {0x7, 0x4, 0x0, "6f5e21ab"}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x101, 0x3, 0x1}, {0xc, 0x651, 0x4, 0x4}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x3, 0x2, 0x6}, {0x6, 0x5, 0x3, "153fcd7bee"}}}, @TCF_EM_IPT={0x0, 0x2, 0x0, 0x0, {{0x8001, 0x9, 0x2}, [@TCA_EM_IPT_NFPROTO, @TCA_EM_IPT_MATCH_NAME, @TCA_EM_IPT_HOOK, @TCA_EM_IPT_MATCH_DATA={0x0, 0x5, "dc"}, @TCA_EM_IPT_MATCH_NAME]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x200}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xa}}]}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

916.206284ms ago: executing program 3 (id=52):
rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r0, 0x0, 0x40000000, 0x0)
timer_create(0x2, &(0x7f0000000140)={0x0, 0x3f, 0x1, @thr={&(0x7f0000000000)="5e14cb6e70", &(0x7f0000000080)="f2ab401cbfbef18421b1541fcc2a152fca8aad58a2277b08894c95183ecc698cda99d9432b32a81e4ff4c4224558eae0d506f594c07bc6f6dd4ca4a1a31d15e6b60d"}}, &(0x7f0000000180))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)

739.5462ms ago: executing program 1 (id=53):
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES16], 0x48)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15)
r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000001b40)={0x0, 0x0, 0x400}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000001b00)=<r5=>0x0)
r6 = syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=<r7=>0x0)
syz_io_uring_submit$UBLK(r3, r4, r5, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, <r8=>r1, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {<r9=>r6, 0xffff, 0x0, 0x0}})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x14, r11, 0xb11, 0x0, 0x25dfdbfe, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x44010)
syz_open_dev$ublk_chdev(&(0x7f0000002000), r6, 0x2)
syz_ublk_setup_queues(r2, r7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc5a4, 0x0, 0x0, 0x0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x969c}}, {0x0, 0x0, 0xffffffffffffffff, {}, <r12=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x4}}], 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, 0x0)
getpid()
syz_io_uring_submit$UBLK(r3, r4, r5, 0x0)
io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r3, r4)
nanosleep(0x0, 0x0)
r13 = syz_open_dev$ublk_bdev(0x0, r6, 0x0)
pread64$ublk_bdev(r13, 0x0, 0x0, 0x0)
syz_ublk_process_io(0x0, 0x0, 0x1, 0x0, 0x0)
syz_io_uring_submit$UBLK(r3, r4, r5, &(0x7f0000000f00)=@ublk_stop_dev_sqe={0x2e, 0x0, 0x0, r1, 0xc0207507, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r6}})
io_uring_enter(r2, 0x2a53, 0x1, 0x3, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffc0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r14 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r14, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r15 = accept4(r10, &(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @remote}}, &(0x7f0000000280)=0x80, 0x800)
tee(r12, r15, 0x5, 0xc)
r16 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r16, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x7a, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x67, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x64010102, {[@cipso={0x86, 0x3b, 0xffffffffffffffff, [{0x0, 0x8, "08c82ce8da6e"}, {0x1, 0x2}, {0x0, 0x9, "7434954373561d"}, {0x0, 0x2}, {0x2, 0x6, "cf0a0000"}, {0x6, 0x4, '\x00\x00'}, {0x7, 0x10, "73bc23f9ffffffa30900a301c846"}, {0x0, 0x6, "c8f46976"}]}]}}}}}}}, 0x0)

738.900391ms ago: executing program 1 (id=54):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050429bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="040002805f39ca9e007483a3a200"], 0x20}, 0x1, 0x0, 0x0, 0x4040df5}, 0x4040084)
r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x82)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8})
r6 = openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0)
pread64(r6, &(0x7f0000000240)=""/91, 0x5b, 0x7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota')
r7 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188)
quotactl_fd$Q_SETINFO(r7, 0xffffffff80000601, 0xee01, &(0x7f0000000300)={0xffffffffffff8001, 0x7, 0x0, 0x7})
r8 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
r9 = fsmount(r8, 0x0, 0x1)
fchdir(r9)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000a06010100000000000000000a0000c5d17f9d8eea1d0505"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x880)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0)

680.187787ms ago: executing program 3 (id=55):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000a80)={'a', ' *:* ', 'r\x00'}, 0x8)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0086426, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{<r2=>0x0}]})
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f00000000c0)={r2, 0x2})

679.702901ms ago: executing program 3 (id=56):
syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x16840)
socket$kcm(0x10, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001f80)=@newtfilter={0x8a0, 0x2c, 0x609, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x2}, {0x1, 0x6}, {0x300, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x870, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x3, 0x8}, {0xc22, 0x7, 0xfffff800, 0xfffffff3}}}]}]}, @TCA_CGROUP_POLICE={0x848, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x401, 0x10000000, 0xfffffffa, 0x9, 0x0, {0x6, 0x1, 0x9, 0x3, 0x4, 0x676}, {0x9, 0x1, 0xfffd, 0xc9, 0x3, 0x456}, 0x1, 0x503, 0xe}}, @TCA_POLICE_RATE={0x404, 0x2, [0x401, 0x1d4, 0x3, 0x401, 0x7, 0x5, 0x3, 0x0, 0x80, 0xd9, 0x0, 0x81, 0x4, 0x800002, 0x2, 0x3, 0x401, 0x3, 0x3, 0x4, 0x1, 0x10000, 0x8, 0x408, 0x1, 0x2, 0xff, 0x2, 0xb22, 0x3, 0x2, 0x7fff, 0x7, 0x6, 0xfffffffd, 0x22, 0x1c8b, 0x4, 0x10001, 0x4, 0x8, 0x80000001, 0x6, 0x4, 0x3, 0x7, 0xf92, 0x17, 0xa0f7, 0x225, 0x8, 0x6, 0x2, 0x10001, 0x6, 0xe1c3, 0x4d, 0x3, 0x6, 0x398, 0x0, 0xc1a, 0x4, 0x8, 0x101, 0x8, 0xfffffff8, 0x634, 0xb, 0x5, 0x6, 0xffffffc4, 0x5, 0x0, 0x2, 0x5, 0x1, 0x4, 0x5, 0x4eb6, 0x400, 0x8000, 0x3, 0x7, 0xf76, 0x3, 0xf20, 0x80000001, 0x73, 0x4, 0x2, 0x9, 0x8, 0x1, 0xa, 0x4d989b25, 0x5, 0x0, 0x3, 0x4, 0x1, 0x8, 0x1, 0x6, 0x6, 0xffff0001, 0x100, 0x1, 0xd0ef, 0x2, 0xc9, 0x7, 0x7, 0xffffffff, 0x4, 0x1, 0x6, 0x5, 0x44c1, 0xffffff01, 0xffffffff, 0xffff, 0x3ff, 0x8, 0x3, 0xb, 0x3, 0x1, 0xffffffff, 0x7fff, 0x4, 0x2, 0x7, 0xe, 0x9, 0x5, 0x2, 0x5, 0x5, 0x2, 0x4, 0x2, 0x8, 0x0, 0x8, 0x200, 0x5, 0x8, 0x7, 0x9, 0x7, 0x7, 0x4, 0x0, 0x6, 0x160d, 0x4, 0xfffffff9, 0xc, 0x5, 0x5, 0xff, 0xdc, 0x2, 0x9, 0x1ff, 0xa, 0x3, 0x437, 0x2, 0xfffffff9, 0xfa7, 0x9, 0x3, 0x80000001, 0x200, 0x10000, 0xea49, 0x8, 0xff, 0x5, 0xff, 0x3, 0x8, 0x81, 0x7, 0x1, 0x1, 0x1, 0x3, 0x7, 0xfc4, 0x0, 0x4, 0x9, 0x8, 0x2, 0x9, 0xd, 0x10, 0x3ff, 0x7, 0x5, 0x4, 0xe136, 0x48d, 0x6, 0x10, 0x0, 0x6, 0x3, 0x2, 0xdc, 0xfe, 0x3, 0x5, 0x1, 0x7, 0x1, 0x5, 0x0, 0x9, 0x8, 0x9, 0x4, 0x8, 0x7, 0x1, 0xfbf, 0x146e, 0x400, 0x0, 0xa, 0x3, 0x83e1, 0x1b, 0x888, 0x7, 0x288, 0x7ff, 0x6, 0x5, 0x10, 0x4, 0x80000001, 0x400, 0x4, 0x20, 0x6eb, 0x0, 0xfffffff8, 0x4, 0x1, 0x5, 0x1, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x9, 0x7fffffff, 0x1, 0x9, 0x0, 0xfffffc4c, 0x1, 0x200, 0x7, 0x15, 0x7a5, 0x4, 0x1, 0x3, 0xfffffffc, 0x3, 0xab, 0x8142, 0x2, 0x0, 0x1000, 0x8, 0x40, 0x74e, 0x3623, 0x8, 0x86, 0x5, 0x5, 0x8001, 0x5045c494, 0x5, 0x8, 0x326a, 0x1, 0x0, 0x9, 0x1, 0x2, 0x7ffffbff, 0x1000, 0x9e, 0xd5, 0x7, 0x56fc, 0xd, 0xfffffcfb, 0x3, 0x9, 0x7, 0xffff, 0x5, 0x80000000, 0x9, 0x4, 0x9, 0x2c72, 0x8, 0x5, 0x3, 0xa5, 0xa, 0x0, 0x9, 0x80000000, 0xfc, 0x0, 0x79255d0e, 0x8, 0xfffffff7, 0x6963, 0x0, 0x1, 0x5, 0x400, 0x0, 0x8, 0xf, 0x7fff, 0xfffffffd, 0x1, 0xffffffff, 0x7, 0x2, 0xa, 0xef8f, 0x0, 0x5, 0x0, 0x9, 0x2, 0x10000000, 0x0, 0x80000001, 0x0, 0xffffffff, 0x83, 0x4, 0x8, 0x2, 0x0, 0xff, 0xc3e, 0x7, 0xccb, 0xfffffff8, 0xfffffff9, 0xab, 0x10000, 0x0, 0x3, 0x752a5eb9, 0x1, 0x7, 0xedf4, 0x2b3, 0x1, 0x6, 0x3, 0x100, 0x8, 0x5, 0x6, 0x6, 0x7, 0x3, 0xfffff145, 0x1, 0x7, 0xff, 0x48, 0x2e8, 0x3, 0x10, 0x7e69c17e, 0x9, 0x7648, 0x1000, 0x8, 0xf1, 0x3, 0xd7, 0x6, 0x3, 0x7, 0x9, 0x7f, 0x5, 0x200, 0x0, 0x9, 0x7, 0x5e, 0x4, 0x2, 0x7, 0x7, 0x7ff, 0x9a, 0x200345f, 0xe, 0x7fffffff, 0x6, 0x7fffffff, 0xfffffffb, 0x9, 0x4, 0x8, 0x9, 0x3, 0xfffffff7, 0x3, 0x7, 0x1, 0xf7a5, 0x0, 0x1, 0x9, 0x400, 0x81, 0x8, 0x7, 0x7ff, 0x5, 0x7f, 0x1, 0xfffffffe, 0xffffffff, 0x6, 0xff, 0x10001, 0x7, 0x1, 0x7, 0x6, 0xde3, 0xfffffffa, 0x200, 0x8, 0x8, 0xfffffff8, 0x9, 0x0, 0x0, 0x9, 0x6, 0xc, 0x6, 0x0, 0xffffffff, 0x5, 0x8667, 0x80, 0x0, 0x6, 0x9, 0x2, 0x4, 0x5, 0x6ae3, 0x1, 0x1, 0x7, 0x3, 0x1, 0xffff, 0x5, 0x0, 0xfffffffa, 0x81, 0x3, 0x6, 0x8, 0x10000, 0x7, 0x7, 0x8001, 0x1, 0x2, 0x6, 0x2, 0x226c0000, 0x5f7e, 0xffffffff, 0x5, 0x0, 0xff, 0xad9, 0x4d3ae222, 0xfffffffe, 0x5, 0x9, 0x0, 0x9, 0x2]}]}]}}]}, 0x8a0}, 0x1, 0x0, 0x0, 0x8001}, 0x4000001)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a300000000008000240"], 0xcd0}}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)}, 0x40085)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r1, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7fffffff, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="300000000000000029000000040000008402300400000000040200030401", @ANYRES8], 0x30}, 0x40)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x804, 0x0)
ioctl$SOUND_MIXER_READ_STEREODEVS(r2, 0x80044dfb, &(0x7f0000000040))
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240))
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r3, &(0x7f0000000200)='m', 0x1)
r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100))
r5 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
write$snddsp(r5, &(0x7f0000000200)="a3", 0x1)

619.109618ms ago: executing program 2 (id=57):
mkdirat(0xffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv6/conf/all/force_mld_version\x00', 0x1, 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x800, 0x0)
mkdir(&(0x7f00000000c0)='./file0/file1\x00', 0x81)
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
creat(&(0x7f00000003c0)='./file0\x00', 0x11)
quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000000)=@md0, 0x0, &(0x7f00000001c0)={0x8e8, 0x9, 0x9, 0x0, 0x3, 0x2, 0x9, 0x6, 0x1c0a})
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
name_to_handle_at(r1, &(0x7f00000001c0)='./file0/file1\x00', 0x0, 0x0, 0x400)
write$cgroup_int(r0, &(0x7f0000000080)=0x7, 0x12)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES8=r2, @ANYBLOB="6217901b01d82e1a43d48c0d3d72630cd62c1ebca0878313fb7a1583c11d61cb776693e9c2e8261520abcf9c45f64763d393b16b89b0023138cf418cee24b1ffb755243d283b65c6b62a28d80cf46252bea3d3cfe34b6f38edf0e449c725d4bb12195c54f6593c5066575bc006dc0bb5e20a87298eadf0db76afcd5d5930a8676202842f13e65142ae40d0bad763952a7cd47518359aeef907353306fce13819595a1b158de108438d07270a35e6729ac1249f1c4520f5ca09b13eea30094481853204be60f12373ad44c406b2", @ANYRESDEC=r2], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x404c010)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r2)
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000900)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4002}, 0xc, &(0x7f00000008c0)={&(0x7f0000000480)={0x414, r3, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4785}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2d6}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffa246}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xed65}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe43}]}, @TIPC_NLA_BEARER={0xe4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4840}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x2, @mcast1, 0x100}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'dvmrp1\x00'}}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xeed}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x25}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf5d}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9, @local, 0xfff}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xe216, @dev={0xfe, 0x80, '\x00', 0x41}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xf6b0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6ee}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2d6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}]}, 0x414}, 0x1, 0x0, 0x0, 0xee93af8e73cfb655}, 0x814)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, &(0x7f0000000100)={0x7ffffffffffffffe, 0x1, 0x100000000, 0x0, 0x23, 0x6, 0x6, 0xfffffffffffffffc, 0x194})
writev(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)="248924800cebcc7605254d61804911ec17f4bd7707c1ba9dfc2568dcea5d0e8eeb4e37b6ce3a11c7b6eef9f83fd08e57cf181ec79308785e7f4cd1520a4a0be4f2b8bfa80916bcd594a8ea603f118f58b6782e5dabdab4dbd4aceeeb8dc671978c0e922a9669d8e477d20b2dba5406aa57f419cafc2e449c6449d078f8ae48de0388fef9732382b3494e77ddfb3c094d2cf28cb6a92851c63711aa2b182bbf1bc6b4", 0xa2}], 0x1)

618.857496ms ago: executing program 2 (id=58):
bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000200000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000100000000000000b7a3a4902b6dc062072266774aed1d9c462f5cc173e8aec78e0a76fd8bb3fd009709d0cecb75cdea910ae03e09ab4065c13e2c8ee41783b6e9b7b47deac56cace43d2ab5ff8759f06c4c", @ANYRES32], 0x48)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d")
ioctl(r0, 0xc138fd05, &(0x7f0000000000)="0400000000000000000100006e0100003801")

559.898611ms ago: executing program 1 (id=59):
syz_open_dev$video4linux(&(0x7f0000000040), 0x0, 0x16840)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001f80)=@newtfilter={0x8a0, 0x2c, 0x609, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x2}, {0x1, 0x6}, {0x300, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x870, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x3, 0x8}, {0xc22, 0x7, 0xfffff800, 0xfffffff3}}}]}]}, @TCA_CGROUP_POLICE={0x848, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x401, 0x10000000, 0xfffffffa, 0x9, 0x0, {0x6, 0x1, 0x9, 0x3, 0x4, 0x676}, {0x9, 0x1, 0xfffd, 0xc9, 0x3, 0x456}, 0x1, 0x503, 0xe}}, @TCA_POLICE_RATE={0x404, 0x2, [0x401, 0x1d4, 0x3, 0x401, 0x7, 0x5, 0x3, 0x0, 0x80, 0xd9, 0x0, 0x81, 0x4, 0x800002, 0x2, 0x3, 0x401, 0x3, 0x3, 0x4, 0x1, 0x10000, 0x8, 0x408, 0x1, 0x2, 0xff, 0x2, 0xb22, 0x3, 0x2, 0x7fff, 0x7, 0x6, 0xfffffffd, 0x22, 0x1c8b, 0x4, 0x10001, 0x4, 0x8, 0x80000001, 0x6, 0x4, 0x3, 0x7, 0xf92, 0x17, 0xa0f7, 0x225, 0x8, 0x6, 0x2, 0x10001, 0x6, 0xe1c3, 0x4d, 0x3, 0x6, 0x398, 0x0, 0xc1a, 0x4, 0x8, 0x101, 0x8, 0xfffffff8, 0x634, 0xb, 0x5, 0x6, 0xffffffc4, 0x5, 0x0, 0x2, 0x5, 0x1, 0x4, 0x5, 0x4eb6, 0x400, 0x8000, 0x3, 0x7, 0xf76, 0x3, 0xf20, 0x80000001, 0x73, 0x4, 0x2, 0x9, 0x8, 0x1, 0xa, 0x4d989b25, 0x5, 0x0, 0x3, 0x4, 0x1, 0x8, 0x1, 0x6, 0x6, 0xffff0001, 0x100, 0x1, 0xd0ef, 0x2, 0xc9, 0x7, 0x7, 0xffffffff, 0x4, 0x1, 0x6, 0x5, 0x44c1, 0xffffff01, 0xffffffff, 0xffff, 0x3ff, 0x8, 0x3, 0xb, 0x3, 0x1, 0xffffffff, 0x7fff, 0x4, 0x2, 0x7, 0xe, 0x9, 0x5, 0x2, 0x5, 0x5, 0x2, 0x4, 0x2, 0x8, 0x0, 0x8, 0x200, 0x5, 0x8, 0x7, 0x9, 0x7, 0x7, 0x4, 0x0, 0x6, 0x160d, 0x4, 0xfffffff9, 0xc, 0x5, 0x5, 0xff, 0xdc, 0x2, 0x9, 0x1ff, 0xa, 0x3, 0x437, 0x2, 0xfffffff9, 0xfa7, 0x9, 0x3, 0x80000001, 0x200, 0x10000, 0xea49, 0x8, 0xff, 0x5, 0xff, 0x3, 0x8, 0x81, 0x7, 0x1, 0x1, 0x1, 0x3, 0x7, 0xfc4, 0x0, 0x4, 0x9, 0x8, 0x2, 0x9, 0xd, 0x10, 0x3ff, 0x7, 0x5, 0x4, 0xe136, 0x48d, 0x6, 0x10, 0x0, 0x6, 0x3, 0x2, 0xdc, 0xfe, 0x3, 0x5, 0x1, 0x7, 0x1, 0x5, 0x0, 0x9, 0x8, 0x9, 0x4, 0x8, 0x7, 0x1, 0xfbf, 0x146e, 0x400, 0x0, 0xa, 0x3, 0x83e1, 0x1b, 0x888, 0x7, 0x288, 0x7ff, 0x6, 0x5, 0x10, 0x4, 0x80000001, 0x400, 0x4, 0x20, 0x6eb, 0x0, 0xfffffff8, 0x4, 0x1, 0x5, 0x1, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x9, 0x7fffffff, 0x1, 0x9, 0x0, 0xfffffc4c, 0x1, 0x200, 0x7, 0x15, 0x7a5, 0x4, 0x1, 0x3, 0xfffffffc, 0x3, 0xab, 0x8142, 0x2, 0x0, 0x1000, 0x8, 0x40, 0x74e, 0x3623, 0x8, 0x86, 0x5, 0x5, 0x8001, 0x5045c494, 0x5, 0x8, 0x326a, 0x1, 0x0, 0x9, 0x1, 0x2, 0x7ffffbff, 0x1000, 0x9e, 0xd5, 0x7, 0x56fc, 0xd, 0xfffffcfb, 0x3, 0x9, 0x7, 0xffff, 0x5, 0x80000000, 0x9, 0x4, 0x9, 0x2c72, 0x8, 0x5, 0x3, 0xa5, 0xa, 0x0, 0x9, 0x80000000, 0xfc, 0x0, 0x79255d0e, 0x8, 0xfffffff7, 0x6963, 0x0, 0x1, 0x5, 0x400, 0x0, 0x8, 0xf, 0x7fff, 0xfffffffd, 0x1, 0xffffffff, 0x7, 0x2, 0xa, 0xef8f, 0x0, 0x5, 0x0, 0x9, 0x2, 0x10000000, 0x0, 0x80000001, 0x0, 0xffffffff, 0x83, 0x4, 0x8, 0x2, 0x0, 0xff, 0xc3e, 0x7, 0xccb, 0xfffffff8, 0xfffffff9, 0xab, 0x10000, 0x0, 0x3, 0x752a5eb9, 0x1, 0x7, 0xedf4, 0x2b3, 0x1, 0x6, 0x3, 0x100, 0x8, 0x5, 0x6, 0x6, 0x7, 0x3, 0xfffff145, 0x1, 0x7, 0xff, 0x48, 0x2e8, 0x3, 0x10, 0x7e69c17e, 0x9, 0x7648, 0x1000, 0x8, 0xf1, 0x3, 0xd7, 0x6, 0x3, 0x7, 0x9, 0x7f, 0x5, 0x200, 0x0, 0x9, 0x7, 0x5e, 0x4, 0x2, 0x7, 0x7, 0x7ff, 0x9a, 0x200345f, 0xe, 0x7fffffff, 0x6, 0x7fffffff, 0xfffffffb, 0x9, 0x4, 0x8, 0x9, 0x3, 0xfffffff7, 0x3, 0x7, 0x1, 0xf7a5, 0x0, 0x1, 0x9, 0x400, 0x81, 0x8, 0x7, 0x7ff, 0x5, 0x7f, 0x1, 0xfffffffe, 0xffffffff, 0x6, 0xff, 0x10001, 0x7, 0x1, 0x7, 0x6, 0xde3, 0xfffffffa, 0x200, 0x8, 0x8, 0xfffffff8, 0x9, 0x0, 0x0, 0x9, 0x6, 0xc, 0x6, 0x0, 0xffffffff, 0x5, 0x8667, 0x80, 0x0, 0x6, 0x9, 0x2, 0x4, 0x5, 0x6ae3, 0x1, 0x1, 0x7, 0x3, 0x1, 0xffff, 0x5, 0x0, 0xfffffffa, 0x81, 0x3, 0x6, 0x8, 0x10000, 0x7, 0x7, 0x8001, 0x1, 0x2, 0x6, 0x2, 0x226c0000, 0x5f7e, 0xffffffff, 0x5, 0x0, 0xff, 0xad9, 0x4d3ae222, 0xfffffffe, 0x5, 0x9, 0x0, 0x9, 0x2]}]}]}}]}, 0x8a0}, 0x1, 0x0, 0x0, 0x8001}, 0x4000001)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a300000000008000240"], 0xcd0}}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b00", 0x34}], 0x1}, 0x40085)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r2, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7fffffff, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="300000000000000029000000040000008402300400000000040200030401", @ANYRES8], 0x30}, 0x40)
r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0)
r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x804, 0x0)
ioctl$SOUND_MIXER_READ_STEREODEVS(r4, 0x80044dfb, &(0x7f0000000040))
write$proc_mixer(r3, &(0x7f0000000280)=ANY=[@ANYBLOB='VOLUME \'Line\' 0'], 0x2a)
socket$nl_generic(0x10, 0x3, 0x10)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$dsp(r5, &(0x7f0000000200)='m', 0x1)
r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000100))
r7 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65)
write$snddsp(r7, &(0x7f0000000200)="a3", 0x1)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r7, 0x4144, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x4, 0x8, 0x80}, 0x0, &(0x7f00000002c0)={0x3ff, 0x30e3, 0x0, 0x3, 0x8, 0x8000000000, 0x80000001, 0xfffffffffffffffc}, 0x0, 0x0)
syz_emit_ethernet(0x5e, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r7, 0x40084146, &(0x7f0000000140)=0xfff)
close(r3)

559.061211ms ago: executing program 2 (id=60):
write$nci(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0x10e6)

508.403036ms ago: executing program 2 (id=61):
add_key$user(&(0x7f0000000340), &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000500)="b383134a92977de17e7ae6e91c3b32d2ce0d73596b87aeb5c47f2d3ad8d4fac1166073a0a08f9067d32376305399da113f17ceb0750adfe41abea29d662f154a76f0b88e386cf992416eb0dc83dd52e4dd8fac37a2c8986d0a7f57c616eb6764090f7ade62d94048cf89dc59494ef686586c48b48e1a0e31942da55b5d78cc868180b08e2bb67dbb75f7bff80673e47054118c2cd8213aa7e45ec2b21f64d916e4c99cc78d1a68723c3724ad2614bdfd786ed13da0a086608e207ccafa3a857c", 0xc0, 0xfffffffffffffffd)
add_key$user(&(0x7f00000003c0), &(0x7f00000001c0), &(0x7f00000000c0)="eaa8729b31b3a8d180ba", 0xa, 0xfffffffffffffffd)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5800000010000304000000000000000000000100", @ANYRES32, @ANYRESDEC], 0x58}}, 0x0)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 00000000000'], 0x2a, 0xfffffffffffffffc)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
syz_usb_connect$uac3(0x0, 0x9f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040ba0d001040000102030109028d000301635006080b00ff010130020904000000010130000a24010a2900010000000c240b07010500000007f800132403060206030407"], 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00')
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket(0x10, 0x3, 0x0)
ioperm(0x2, 0x1, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=<r7=>0x0)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x2000}}, [], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

419.736741ms ago: executing program 0 (id=62):
socket$packet(0x11, 0x2, 0x300)
openat$vmci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder0\x00', 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='status\x00')
r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x800, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
listen(r3, 0x2400000)
mount$9p_tcp(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', &(0x7f00000006c0), 0x28410, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e22'])
accept4$inet(r3, 0x0, 0x0, 0x80800)
readv(r0, &(0x7f0000000000), 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x52)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x10000, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$RTC_WIE_ON(r1, 0x700f)
r5 = syz_ublk_setup_io_uring(0x1a, &(0x7f0000000040)={0x0, 0x1a16, 0x0, 0x6, 0x158}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0, &(0x7f0000000400)=<r8=>0x0)
syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480))
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)

59.29938ms ago: executing program 3 (id=63):
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES16], 0x48)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15)
r1 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000001b40)={0x0, 0x0, 0x400}, &(0x7f00000000c0)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000001b00)=<r5=>0x0)
r6 = syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, r1, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=<r7=>0x0)
syz_io_uring_submit$UBLK(r3, r4, r5, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, <r8=>r1, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {<r9=>r6, 0xffff, 0x0, 0x0}})
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)={0x14, r11, 0xb11, 0x0, 0x25dfdbfe, {0x24}}, 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x44010)
syz_open_dev$ublk_chdev(&(0x7f0000002000), r6, 0x2)
syz_ublk_setup_queues(r2, r7, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc5a4, 0x0, 0x0, 0x0, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x969c}}, {0x0, 0x0, 0xffffffffffffffff, {}, <r12=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x4}}], 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, 0x0}}, 0x0)
getpid()
syz_io_uring_submit$UBLK(r3, r4, r5, 0x0)
io_uring_enter(r2, 0x1, 0x1, 0x1, 0x0, 0x0)
syz_io_uring_complete(r3, r4)
nanosleep(0x0, 0x0)
r13 = syz_open_dev$ublk_bdev(0x0, r6, 0x0)
pread64$ublk_bdev(r13, 0x0, 0x0, 0x0)
syz_ublk_process_io(0x0, 0x0, 0x1, 0x0, 0x0)
syz_io_uring_submit$UBLK(r3, r4, r5, &(0x7f0000000f00)=@ublk_stop_dev_sqe={0x2e, 0x0, 0x0, r1, 0xc0207507, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r6}})
io_uring_enter(r2, 0x2a53, 0x1, 0x3, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffc0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r14 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r14, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r15 = accept4(r10, &(0x7f0000000180)=@pptp={0x18, 0x2, {0x0, @remote}}, &(0x7f0000000280)=0x80, 0x800)
tee(r12, r15, 0x5, 0xc)
r16 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$SO_BINDTODEVICE(r16, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x7a, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x67, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x64010102, {[@cipso={0x86, 0x3b, 0xffffffffffffffff, [{0x0, 0x8, "08c82ce8da6e"}, {0x1, 0x2}, {0x0, 0x9, "7434954373561d"}, {0x0, 0x2}, {0x2, 0x6, "cf0a0000"}, {0x6, 0x4, '\x00\x00'}, {0x7, 0x10, "73bc23f9ffffffa30900a301c846"}, {0x0, 0x6, "c8f46976"}]}]}}}}}}}, 0x0)

0s ago: executing program 3 (id=64):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff)
ftruncate(r0, 0xf4240)
mkdir(&(0x7f0000000180)='./config\x00', 0x1ff)
open(&(0x7f0000000000)='./config\x00', 0x40, 0x2)
mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f00000013c0)="000000000008000073a8ecb2c344", 0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000040))
mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff)
mkdir(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff)
sendmsg$NET_DM_CMD_STOP(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8800)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0x2b, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9, 0x0, @opaque='`'}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2006}, 0x94)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0)
r5 = fsopen(&(0x7f0000000180)='configfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r5, 0x0, 0x9)
fchdir(r6)
r7 = open(&(0x7f00000000c0)='.\x00', 0x8400, 0xd0)
lseek(r7, 0x8000000000000000, 0x1)
write(r4, &(0x7f00000003c0)='file0', 0x5)
read$FUSE(r4, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:46934' (ED25519) to the list of known hosts.
[   33.415303][ T5668] cgroup: Unknown subsys name 'net'
[   33.554477][ T5668] cgroup: Unknown subsys name 'cpuset'
[   33.556696][ T5668] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   34.691714][ T5668] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   38.606652][ T5747] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   38.610753][ T5747] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   38.611240][ T5750] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   38.611443][ T5749] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   38.611461][ T5748] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   38.614785][ T5750] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   38.615628][ T5750] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   38.615715][ T5749] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   38.616219][ T5749] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   38.616495][ T5749] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   38.618183][ T5750] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   38.618963][ T5098] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   38.620183][ T5748] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   38.623256][ T5748] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   38.623805][ T5098] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   38.626150][ T5098] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   38.626689][ T5098] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   38.627010][ T5098] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   38.632438][ T5748] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   38.633178][ T5738] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   39.177851][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.177951][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.178012][ T5736] bridge_slave_0: entered allmulticast mode
[   39.178791][ T5736] bridge_slave_0: entered promiscuous mode
[   39.212804][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.212884][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.212979][ T5736] bridge_slave_1: entered allmulticast mode
[   39.214738][ T5736] bridge_slave_1: entered promiscuous mode
[   39.258235][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.258280][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.258332][ T5735] bridge_slave_0: entered allmulticast mode
[   39.259121][ T5735] bridge_slave_0: entered promiscuous mode
[   39.281504][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.281926][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.281994][ T5735] bridge_slave_1: entered allmulticast mode
[   39.282736][ T5735] bridge_slave_1: entered promiscuous mode
[   39.291569][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   39.319830][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.319916][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.319972][ T5737] bridge_slave_0: entered allmulticast mode
[   39.320721][ T5737] bridge_slave_0: entered promiscuous mode
[   39.324359][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   39.338533][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   39.340834][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   39.344633][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.344707][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.344785][ T5737] bridge_slave_1: entered allmulticast mode
[   39.345503][ T5737] bridge_slave_1: entered promiscuous mode
[   39.367056][ T5736] team0: Port device team_slave_0 added
[   39.377115][ T5735] team0: Port device team_slave_0 added
[   39.390213][ T5736] team0: Port device team_slave_1 added
[   39.390395][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state
[   39.390518][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state
[   39.390581][ T5734] bridge_slave_0: entered allmulticast mode
[   39.391274][ T5734] bridge_slave_0: entered promiscuous mode
[   39.398525][ T5735] team0: Port device team_slave_1 added
[   39.400815][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   39.407264][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.407338][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state
[   39.407400][ T5734] bridge_slave_1: entered allmulticast mode
[   39.408107][ T5734] bridge_slave_1: entered promiscuous mode
[   39.421501][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   39.438387][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0
[   39.438398][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.438410][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   39.439674][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1
[   39.439682][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.439695][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   39.455135][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0
[   39.455148][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.455168][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   39.470581][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   39.472235][ T5737] team0: Port device team_slave_0 added
[   39.473320][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1
[   39.473331][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.473349][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   39.491510][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   39.503347][ T5737] team0: Port device team_slave_1 added
[   39.538091][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0
[   39.538102][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.538117][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   39.539157][ T5734] team0: Port device team_slave_0 added
[   39.545325][ T5734] team0: Port device team_slave_1 added
[   39.550159][ T5735] hsr_slave_0: entered promiscuous mode
[   39.550906][ T5735] hsr_slave_1: entered promiscuous mode
[   39.557724][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1
[   39.557738][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.557756][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   39.565654][ T5736] hsr_slave_0: entered promiscuous mode
[   39.566141][ T5736] hsr_slave_1: entered promiscuous mode
[   39.566463][ T5736] debugfs: 'hsr0' already exists in 'hsr'
[   39.566511][ T5736] Cannot create hsr debugfs directory
[   39.573165][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0
[   39.573175][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.573188][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   39.574415][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1
[   39.574422][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   39.574434][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   39.624931][ T5737] hsr_slave_0: entered promiscuous mode
[   39.625376][ T5737] hsr_slave_1: entered promiscuous mode
[   39.625671][ T5737] debugfs: 'hsr0' already exists in 'hsr'
[   39.625681][ T5737] Cannot create hsr debugfs directory
[   39.648977][ T5734] hsr_slave_0: entered promiscuous mode
[   39.649403][ T5734] hsr_slave_1: entered promiscuous mode
[   39.649965][ T5734] debugfs: 'hsr0' already exists in 'hsr'
[   39.649977][ T5734] Cannot create hsr debugfs directory
[   39.934834][ T5736] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   39.939625][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   39.940312][ T5736] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   39.943441][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   39.944500][ T5736] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   39.950363][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   39.961661][ T5736] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   39.968243][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   40.034353][ T5735] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   40.037148][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   40.037687][ T5735] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   40.039783][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   40.040226][ T5735] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   40.046127][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   40.057413][ T5735] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   40.059901][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   40.097332][ T5734] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   40.100447][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   40.101636][ T5734] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   40.107397][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   40.108024][ T5734] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   40.113863][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   40.115415][ T5734] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   40.119033][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   40.178534][ T5737] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   40.180926][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   40.181744][ T5737] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   40.186776][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   40.189567][ T5737] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   40.195857][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   40.196362][ T5737] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   40.198976][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   40.212505][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0
[   40.251701][ T5736] 8021q: adding VLAN 0 to HW filter on device team0
[   40.263483][  T109] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.263567][  T109] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.271145][  T109] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.271189][  T109] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.278052][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0
[   40.313751][ T5735] 8021q: adding VLAN 0 to HW filter on device team0
[   40.327688][  T232] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.327765][  T232] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.331126][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0
[   40.348501][  T232] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.348589][  T232] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.359878][ T5734] 8021q: adding VLAN 0 to HW filter on device team0
[   40.373060][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0
[   40.378322][  T232] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.378371][  T232] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.379336][  T232] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.379376][  T232] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.424090][ T5737] 8021q: adding VLAN 0 to HW filter on device team0
[   40.433476][  T109] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.433520][  T109] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.450525][  T109] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.450570][  T109] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.624484][ T5738] Bluetooth: hci1: command tx timeout
[   40.698000][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.701751][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.702846][ T5738] Bluetooth: hci0: command tx timeout
[   40.702988][ T5738] Bluetooth: hci2: command tx timeout
[   40.703303][ T5738] Bluetooth: hci3: command tx timeout
[   40.755162][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.758084][ T5735] veth0_vlan: entered promiscuous mode
[   40.760078][ T5736] veth0_vlan: entered promiscuous mode
[   40.764578][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0
[   40.770429][ T5735] veth1_vlan: entered promiscuous mode
[   40.773719][ T5736] veth1_vlan: entered promiscuous mode
[   40.832310][ T5735] veth0_macvtap: entered promiscuous mode
[   40.835680][ T5737] veth0_vlan: entered promiscuous mode
[   40.840238][ T5734] veth0_vlan: entered promiscuous mode
[   40.840673][ T5735] veth1_macvtap: entered promiscuous mode
[   40.855447][ T5736] veth0_macvtap: entered promiscuous mode
[   40.858430][ T5737] veth1_vlan: entered promiscuous mode
[   40.866287][ T5736] veth1_macvtap: entered promiscuous mode
[   40.871412][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.872951][ T5734] veth1_vlan: entered promiscuous mode
[   40.879520][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.894790][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.899616][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.913230][ T5737] veth0_macvtap: entered promiscuous mode
[   40.923387][ T5737] veth1_macvtap: entered promiscuous mode
[   40.933156][ T5734] veth0_macvtap: entered promiscuous mode
[   40.939947][ T5734] veth1_macvtap: entered promiscuous mode
[   40.946626][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0
[   40.948455][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1
[   40.952585][ T5813] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.952770][ T5813] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.952789][ T5813] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.952812][ T5813] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.952833][ T5813] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.952851][ T5813] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.952869][ T5813] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.952886][ T5813] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.952904][ T5813] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   40.952924][ T5813] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   40.952945][ T5813] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   40.952963][ T5813] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   40.994068][  T109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.994088][  T109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.007135][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0
[   41.011754][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1
[   41.036200][  T734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.036213][  T734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.077182][  T734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.077200][  T734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.083385][  T734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.083400][  T734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.100674][  T734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.100686][  T734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.104630][ T5841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   41.104793][ T5841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   41.104949][ T5841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   41.105075][ T5841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   41.128055][  T734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.128072][  T734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.136811][ T5735] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   41.140946][ T5735] ebtables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   41.150688][ T5735] arp_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   41.151560][ T5735] ip_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   41.165345][  T734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.165363][  T734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.167490][ T5735] ip6_tables: xtables 32bit compat interface no longer supported in namespaces and will be removed soon.
[   41.198731][   T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   41.198748][   T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   41.333170][ T5892] sctp: [Deprecated]: syz.2.3 (pid 5892) Use of int in max_burst socket option.
[   41.333170][ T5892] Use struct sctp_assoc_value instead
[   41.467605][ T5904] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5'.
[   41.942060][   T30] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   42.114438][   T30] usb 6-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[   42.116487][   T30] usb 6-1: config 1 has an invalid descriptor of length 112, skipping remainder of the config
[   42.116507][   T30] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[   42.118433][   T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   42.118453][   T30] usb 6-1: Product: syz
[   42.118464][   T30] usb 6-1: Manufacturer: syz
[   42.118477][   T30] usb 6-1: SerialNumber: syz
[   42.195468][ T5916] C: renamed from veth1_to_team (while UP)
[   42.197538][ T5916] netlink: 'syz.3.8': attribute type 2 has an invalid length.
[   42.197605][ T5916] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8'.
[   42.197645][ T5916] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   42.395541][ T5736] cgroup: fork rejected by pids controller in /syz2
[   42.491994][   T30] usb 6-1: unit 4 not found!
[   42.517966][   T30] usb 6-1: USB disconnect, device number 2
[   42.554179][ T5742] udevd[5742]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   42.791885][ T5741] Bluetooth: hci3: command tx timeout
[   42.791906][ T5741] Bluetooth: hci2: command tx timeout
[   42.791918][ T5741] Bluetooth: hci0: command tx timeout
[   43.911600][ T5946] C: renamed from veth1_to_team (while UP)
[   43.917408][ T5946] netlink: 'syz.1.19': attribute type 2 has an invalid length.
[   43.917426][ T5946] netlink: 156 bytes leftover after parsing attributes in process `syz.1.19'.
[   43.917437][ T5946] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   43.984284][ T5841] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.186938][ T5741] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   44.187898][ T5741] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   44.188231][ T5741] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   44.188787][ T5741] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   44.189073][ T5741] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   44.477742][ T5841] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.537170][ T5841] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.608049][ T5841] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   44.657396][ T5957] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.657525][ T5957] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.657833][ T5957] bridge_slave_0: entered allmulticast mode
[   44.659880][ T5957] bridge_slave_0: entered promiscuous mode
[   44.664070][ T5957] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.664177][ T5957] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.664256][ T5957] bridge_slave_1: entered allmulticast mode
[   44.665028][ T5957] bridge_slave_1: entered promiscuous mode
[   44.682472][ T5957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.685957][ T5957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.726405][ T5957] team0: Port device team_slave_0 added
[   44.730026][ T5957] team0: Port device team_slave_1 added
[   44.752516][ T5980] netlink: 'syz.3.22': attribute type 1 has an invalid length.
[   44.770904][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_0
[   44.770920][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   44.770939][ T5957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   44.774882][ T5957] batman_adv: batadv0: Adding interface: batadv_slave_1
[   44.774895][ T5957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   44.774915][ T5957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   44.777017][ T5980] 8021q: VLANs not supported on vxcan1
[   44.814665][ T5841] bridge_slave_1: left allmulticast mode
[   44.814701][ T5841] bridge_slave_1: left promiscuous mode
[   44.816474][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.830007][ T5841] bridge_slave_0: left allmulticast mode
[   44.830022][ T5841] bridge_slave_0: left promiscuous mode
[   44.830158][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.872174][ T5741] Bluetooth: hci0: command tx timeout
[   44.872207][ T5741] Bluetooth: hci2: command tx timeout
[   44.872241][ T5738] Bluetooth: hci3: command tx timeout
[   45.009687][ T5841] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   45.022158][ T5841] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   45.027508][ T5841] bond0 (unregistering): Released all slaves
[   45.121682][ T5957] hsr_slave_0: entered promiscuous mode
[   45.131123][ T5957] hsr_slave_1: entered promiscuous mode
[   45.131419][ T5957] debugfs: 'hsr0' already exists in 'hsr'
[   45.131429][ T5957] Cannot create hsr debugfs directory
[   45.332128][ T5842] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   45.493222][ T5842] usb 6-1: Using ep0 maxpacket: 8
[   45.507065][ T5997] process 'syz.0.26' launched '/dev/fd/9' with NULL argv: empty string added
[   45.532888][ T5451] 8021q: adding VLAN 0 to HW filter on device eth2
[   45.536482][ T5842] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   45.600919][ T5841] hsr_slave_0: left promiscuous mode
[   45.604278][ T5841] hsr_slave_1: left promiscuous mode
[   45.606203][ T5841] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   45.606221][ T5841] batman_adv: batadv0: Removing interface: batadv_slave_0
[   45.612758][ T5841] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   45.612823][ T5841] batman_adv: batadv0: Removing interface: batadv_slave_1
[   45.626831][ T5842] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[   45.626847][ T5842] usb 6-1: config 0 has no interface number 0
[   45.626866][ T5842] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   45.626886][ T5842] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   46.096111][ T5841] veth1_macvtap: left promiscuous mode
[   46.097080][ T5841] veth0_macvtap: left promiscuous mode
[   46.099266][ T5841] veth1_vlan: left promiscuous mode
[   46.104469][ T5841] veth0_vlan: left promiscuous mode
[   46.222627][ T5738] Bluetooth: hci1: command tx timeout
[   46.254978][ T5842] usb 6-1: config 0 descriptor??
[   46.270853][ T5842] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[   46.406232][ T5841] team0 (unregistering): Port device team_slave_1 removed
[   46.422406][ T5841] team0 (unregistering): Port device team_slave_0 removed
[   46.473256][ T1354] usb 6-1: USB disconnect, device number 3
[   46.660408][ T5957] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   46.664624][ T5957] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   46.666144][   T64] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   46.671001][ T5957] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   46.675997][ T5957] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   46.676686][ T5957] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   46.686633][ T5957] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   46.689384][ T5957] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   46.693337][ T5957] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   46.754310][ T5957] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.767644][ T5957] 8021q: adding VLAN 0 to HW filter on device team0
[   46.774124][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.774171][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.779227][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.779276][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.802028][   T64] usb 5-1: device descriptor read/64, error -71
[   46.942134][ T5738] Bluetooth: hci2: command tx timeout
[   46.942167][ T5738] Bluetooth: hci3: command tx timeout
[   46.942169][ T5748] Bluetooth: hci0: command tx timeout
[   47.039438][ T5957] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.042388][   T64] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   47.078640][ T5957] veth0_vlan: entered promiscuous mode
[   47.090580][ T5957] veth1_vlan: entered promiscuous mode
[   47.095877][ T6053] netlink: 'syz.1.33': attribute type 2 has an invalid length.
[   47.095890][ T6053] netlink: 156 bytes leftover after parsing attributes in process `syz.1.33'.
[   47.095898][ T6053] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   47.107949][ T5957] veth0_macvtap: entered promiscuous mode
[   47.111423][ T5957] veth1_macvtap: entered promiscuous mode
[   47.130190][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_0
[   47.138091][ T5957] batman_adv: batadv0: Interface activated: batadv_slave_1
[   47.173729][   T64] usb 5-1: device descriptor read/64, error -71
[   47.199868][ T1227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.199890][ T1227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.222373][ T1227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   47.222393][ T1227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   47.232327][ T5813] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   47.232363][ T5813] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   47.232389][ T5813] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   47.232414][ T5813] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   47.282180][   T64] usb usb5-port1: attempt power cycle
[   47.522061][   T42] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   47.632183][   T64] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   47.653098][   T64] usb 5-1: device descriptor read/8, error -71
[   47.665696][ T6065] xt_ecn: cannot match TCP bits for non-tcp packets
[   47.672156][ T6065] binder_alloc: 6064: binder_alloc_buf, no vma
[   47.672684][   T42] usb 7-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[   47.673734][   T42] usb 7-1: config 1 has an invalid descriptor of length 112, skipping remainder of the config
[   47.673753][   T42] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[   47.677318][   T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   47.677337][   T42] usb 7-1: Product: syz
[   47.677348][   T42] usb 7-1: Manufacturer: syz
[   47.677359][   T42] usb 7-1: SerialNumber: syz
[   47.724381][ T6067] FAULT_INJECTION: forcing a failure.
[   47.724381][ T6067] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   47.724400][ T6067] CPU: 0 UID: 0 PID: 6067 Comm: syz.1.37 Not tainted syzkaller #0 PREEMPT(full) 
[   47.724413][ T6067] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   47.724419][ T6067] Call Trace:
[   47.724424][ T6067]  <TASK>
[   47.724448][ T6067]  dump_stack_lvl+0x100/0x190
[   47.724469][ T6067]  should_fail_ex.cold+0x5/0xa
[   47.724484][ T6067]  _copy_from_user+0x2e/0xd0
[   47.724500][ T6067]  get_compat_msghdr+0xb3/0x480
[   47.724513][ T6067]  ? __pfx_get_compat_msghdr+0x10/0x10
[   47.724530][ T6067]  ___sys_sendmsg+0x1b6/0x1e0
[   47.724548][ T6067]  ? __pfx____sys_sendmsg+0x10/0x10
[   47.724568][ T6067]  ? find_held_lock+0x2b/0x80
[   47.724588][ T6067]  __sys_sendmsg+0x160/0x210
[   47.724605][ T6067]  ? __pfx___sys_sendmsg+0x10/0x10
[   47.724626][ T6067]  ? __pfx_ksys_write+0x10/0x10
[   47.724641][ T6067]  __do_fast_syscall_32+0x13a/0x8b0
[   47.724653][ T6067]  ? lockdep_hardirqs_on+0x7d/0x110
[   47.724665][ T6067]  do_fast_syscall_32+0x32/0x70
[   47.724678][ T6067]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   47.724692][ T6067] RIP: 0023:0xf7f48fec
[   47.724704][ T6067] Code: Unable to access opcode bytes at 0xf7f48fc2.
[   47.724709][ T6067] RSP: 002b:00000000f540650c EFLAGS: 00000292 ORIG_RAX: 0000000000000172
[   47.724720][ T6067] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040
[   47.724727][ T6067] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000
[   47.724733][ T6067] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   47.724739][ T6067] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   47.724745][ T6067] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   47.724758][ T6067]  </TASK>
[   47.891904][   T64] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   47.922700][   T64] usb 5-1: device descriptor read/8, error -71
[   47.975793][   T42] usb 7-1: unit 4 not found!
[   48.032388][   T42] usb 7-1: USB disconnect, device number 2
[   48.034250][   T64] usb usb5-port1: unable to enumerate USB device
[   48.048549][ T5742] udevd[5742]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   48.302138][ T5741] Bluetooth: hci1: command tx timeout
[   48.371062][ T6085] bond1: entered promiscuous mode
[   48.371101][ T6085] bond1: entered allmulticast mode
[   48.371385][ T6085] 8021q: adding VLAN 0 to HW filter on device bond1
[   48.373021][ T6089] binder: 6088:6089 ioctl c010f508 800001c0 returned -22
[   48.470388][ T6095] netlink: 'syz.1.45': attribute type 2 has an invalid length.
[   48.470408][ T6095] netlink: 156 bytes leftover after parsing attributes in process `syz.1.45'.
[   48.470421][ T6095] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   48.515927][ T6097] batadv_slave_1: entered promiscuous mode
[   48.516740][ T6097] batadv_slave_1: left promiscuous mode
[   49.061928][   T30] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   49.232364][   T30] usb 8-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[   49.233169][   T30] usb 8-1: config 1 has an invalid descriptor of length 112, skipping remainder of the config
[   49.233181][   T30] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[   49.234678][   T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   49.234690][   T30] usb 8-1: Product: syz
[   49.234697][   T30] usb 8-1: Manufacturer: syz
[   49.234704][   T30] usb 8-1: SerialNumber: syz
[   49.514692][   T30] usb 8-1: unit 4 not found!
[   49.530508][   T30] usb 8-1: USB disconnect, device number 2
[   49.571040][ T5742] udevd[5742]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   49.806789][ T6132] Zero length message leads to an empty skb
[   49.870438][ T6137] netlink: 'syz.1.59': attribute type 2 has an invalid length.
[   49.870452][ T6137] netlink: 156 bytes leftover after parsing attributes in process `syz.1.59'.
[   49.870460][ T6137] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[   50.251944][   T30] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[   50.392360][ T5741] Bluetooth: hci1: command tx timeout
[   50.425674][   T30] usb 7-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[   50.426621][   T30] usb 7-1: config 1 has an invalid descriptor of length 112, skipping remainder of the config
[   50.426638][   T30] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[   50.428394][   T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   50.428411][   T30] usb 7-1: Product: syz
[   50.428444][   T30] usb 7-1: Manufacturer: syz
[   50.428454][   T30] usb 7-1: SerialNumber: syz
[   50.492483][ T6156] LUN: removable file: (no medium)
[   50.554305][ T6157] 
[   50.555369][ T6157] ============================================
[   50.557924][ T6157] WARNING: possible recursive locking detected
[   50.560457][ T6157] syzkaller #0 Not tainted
[   50.562371][ T6157] --------------------------------------------
[   50.564909][ T6157] syz.3.64/6157 is trying to acquire lock:
[   50.567335][ T6157] ffff888022afe460 (sb_writers#14){.+.+}-{0:0}, at: lookup_open+0x150/0x1990
[   50.570942][ T6157] 
[   50.570942][ T6157] but task is already holding lock:
[   50.573939][ T6157] ffff888022afe460 (sb_writers#14){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[   50.577492][ T6157] 
[   50.577492][ T6157] other info that might help us debug this:
[   50.580762][ T6157]  Possible unsafe locking scenario:
[   50.580762][ T6157] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   50.583804][ T6157]        CPU0
[   50.585331][ T6157]        ----
[   50.586729][ T6157]   lock(sb_writers#14);
[   50.588565][ T6157]   lock(sb_writers#14);
[   50.590338][ T6157] 
[   50.590338][ T6157]  *** DEADLOCK ***
[   50.590338][ T6157] 
[   50.593672][ T6157]  May be due to missing lock nesting notation
[   50.593672][ T6157] 
[   50.597203][ T6157] locks held by syz.3.64/6157: 5, last CPU#0:
[   50.599710][ T6157]  #0: ffff88806037f270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380
[   50.603432][ T6157]  #1: ffff888022afe460 (sb_writers#14){.+.+}-{0:0}, at: ksys_write+0x12a/0x250
[   50.607135][ T6157]  #2: ffff88804ceede80 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0
[   50.611142][ T6157]  #3: ffff888021f5fc70 (&p->frag_sem){.+.+}-{4:4}, at: configfs_write_iter+0x218/0x4e0
[   50.615102][ T6157]  #4: ffff8880144f2120 (&common->filesem){+.+.}-{4:4}, at: fsg_store_file+0x193/0x450
[   50.619067][ T6157] 
[   50.619067][ T6157] stack backtrace:
[   50.621503][ T6157] CPU: 0 UID: 0 PID: 6157 Comm: syz.3.64 Not tainted syzkaller #0 PREEMPT(full) 
[   50.625197][ T6157] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[   50.629286][ T6157] Call Trace:
[   50.630693][ T6157]  <TASK>
[   50.631934][ T6157]  dump_stack_lvl+0x100/0x190
[   50.633913][ T6157]  print_deadlock_bug.cold+0xbd/0xca
[   50.636118][ T6157]  __lock_acquire+0x13f4/0x1f40
[   50.638170][ T6157]  lock_acquire+0x1d1/0x380
[   50.640062][ T6157]  ? lookup_open+0x150/0x1990
[   50.642089][ T6157]  ? __pfx___might_resched+0x10/0x10
[   50.644270][ T6157]  ? find_held_lock+0x2b/0x80
[   50.645977][ T6157]  mnt_want_write+0x6f/0x420
[   50.647479][ T6157]  ? lookup_open+0x150/0x1990
[   50.649038][ T6157]  lookup_open+0x150/0x1990
[   50.650522][ T6157]  path_openat+0xa2c/0x2440
[   50.652093][ T6157]  ? __pfx_path_openat+0x10/0x10
[   50.654254][ T6157]  ? kasan_save_stack+0x3f/0x50
[   50.656225][ T6157]  ? kasan_save_stack+0x30/0x50
[   50.658195][ T6157]  ? kasan_save_track+0x14/0x30
[   50.660135][ T6157]  ? __kasan_slab_alloc+0x89/0x90
[   50.661884][ T6157]  ? kmem_cache_alloc_noprof+0x269/0x6a0
[   50.663644][ T6157]  ? do_getname_kernel+0x5d/0x250
[   50.665238][ T6157]  ? filp_open+0x1d/0x50
[   50.666582][ T6157]  do_file_open+0x20e/0x430
[   50.668024][ T6157]  ? __pfx_do_file_open+0x10/0x10
[   50.669633][ T6157]  file_open_name+0x1c3/0x3e0
[   50.671123][ T6157]  ? __pfx_file_open_name+0x10/0x10
[   50.672795][ T6157]  ? do_getname_kernel+0x5d/0x250
[   50.674526][ T6157]  ? __asan_memcpy+0x3c/0x60
[   50.676329][ T6157]  ? do_getname_kernel+0x1be/0x250
[   50.678254][ T6157]  filp_open+0x2e/0x50
[   50.679723][ T6157]  fsg_lun_open+0x6b/0x7b0
[   50.681453][ T6157]  ? __pfx_down_read+0x10/0x10
[   50.683204][ T6157]  ? __kmalloc_cache_noprof+0x2f8/0x6d0
[   50.685270][ T6157]  fsg_store_file+0x1e7/0x450
[   50.686742][ T6157]  configfs_write_iter+0x302/0x4e0
[   50.688685][ T6157]  vfs_write+0x6af/0x1050
[   50.690272][ T6157]  ? __pfx_configfs_write_iter+0x10/0x10
[   50.692321][ T6157]  ? __pfx_vfs_write+0x10/0x10
[   50.694108][ T6157]  ? find_held_lock+0x2b/0x80
[   50.695838][ T6157]  ksys_write+0x12a/0x250
[   50.697241][ T6157]  ? __pfx_ksys_write+0x10/0x10
[   50.698790][ T6157]  __do_fast_syscall_32+0x13a/0x8b0
[   50.700600][ T6157]  do_fast_syscall_32+0x32/0x70
[   50.702162][ T6157]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[   50.704246][ T6157] RIP: 0023:0xf703efec
[   50.705645][ T6157] Code: Unable to access opcode bytes at 0xf703efc2.
[   50.707806][ T6157] RSP: 002b:00000000f540c50c EFLAGS: 00000292 ORIG_RAX: 0000000000000004
[   50.710438][ T6157] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000800003c0
[   50.712958][ T6157] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000000
[   50.715461][ T6157] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[   50.717982][ T6157] R10: 0000000000000000 R11: 0000000000000292 R12: 0000000000000000
[   50.720507][ T6157] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[   50.723055][ T6157]  </TASK>
[   50.733153][ T6157] mass_storage.0/lun.0: unable to open backing file: file0
[   51.249395][   T30] usb 7-1: unit 4 not found!
[   51.263285][ T5813] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.266623][   T30] usb 7-1: USB disconnect, device number 3
[   51.274620][ T5742] udevd[5742]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   51.297033][ T5813] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.326890][ T5813] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.376176][ T5813] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   51.471166][ T5813] bridge_slave_1: left allmulticast mode
[   51.471187][ T5813] bridge_slave_1: left promiscuous mode
[   51.471330][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.474822][ T5813] bridge_slave_0: left allmulticast mode
[   51.474842][ T5813] bridge_slave_0: left promiscuous mode
[   51.474971][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.516444][ T5813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   51.517766][ T5813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   51.518310][ T5813] bond0 (unregistering): Released all slaves
[   51.637584][ T5451] 8021q: adding VLAN 0 to HW filter on device eth2
[   51.671396][ T5813] hsr_slave_0: left promiscuous mode
[   51.671772][ T5813] hsr_slave_1: left promiscuous mode
[   51.672273][ T5813] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   51.672286][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_0
[   51.674348][ T5813] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   51.674359][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_1
[   51.678437][ T5813] veth1_macvtap: left promiscuous mode
[   51.678467][ T5813] veth0_macvtap: left promiscuous mode
[   51.678525][ T5813] veth1_vlan: left promiscuous mode
[   51.678553][ T5813] veth0_vlan: left promiscuous mode
[   51.745482][ T5813] team0 (unregistering): Port device team_slave_1 removed
[   51.749663][ T5813] team0 (unregistering): Port device team_slave_0 removed
[   51.793030][ T5451] 8021q: adding VLAN 0 to HW filter on device eth3
[   51.897876][ T5451] 8021q: adding VLAN 0 to HW filter on device eth4
[   51.986207][ T5451] 8021q: adding VLAN 0 to HW filter on device eth5
[   52.066600][ T5813] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.107385][ T5813] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.156049][ T5813] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.226860][ T5813] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.301146][ T5813] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.365679][ T5813] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.404941][ T5451] 8021q: adding VLAN 0 to HW filter on device eth6
[   52.418106][ T5813] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.477157][ T5813] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.499460][ T5451] 8021q: adding VLAN 0 to HW filter on device eth7
[   52.542836][ T5813] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.606494][ T5813] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.636105][ T5451] 8021q: adding VLAN 0 to HW filter on device eth8
[   52.670384][ T5813] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.739616][ T5451] 8021q: adding VLAN 0 to HW filter on device eth9
[   52.746734][ T5813] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   52.814542][ T5813] bridge_slave_1: left allmulticast mode
[   52.814556][ T5813] bridge_slave_1: left promiscuous mode
[   52.814642][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.815692][ T5813] bridge_slave_0: left allmulticast mode
[   52.815704][ T5813] bridge_slave_0: left promiscuous mode
[   52.815763][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.824421][ T5813] bridge_slave_1: left allmulticast mode
[   52.824434][ T5813] bridge_slave_1: left promiscuous mode
[   52.824493][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.828716][ T5813] bridge_slave_0: left allmulticast mode
[   52.828727][ T5813] bridge_slave_0: left promiscuous mode
[   52.828783][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.840999][ T5813] bridge_slave_1: left allmulticast mode
[   52.841020][ T5813] bridge_slave_1: left promiscuous mode
[   52.841133][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.844206][ T5813] bridge_slave_0: left allmulticast mode
[   52.844225][ T5813] bridge_slave_0: left promiscuous mode
[   52.844318][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.904361][ T5813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   52.905526][ T5813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   52.906123][ T5813] bond0 (unregistering): Released all slaves
[   52.907250][ T5813] bond1 (unregistering): Released all slaves
[   52.941246][ T5813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   52.945273][ T5813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   52.946111][ T5813] bond0 (unregistering): Released all slaves
[   52.976977][ T5813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   52.978377][ T5813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   52.979214][ T5813] bond0 (unregistering): Released all slaves
[   52.981476][ T5451] 8021q: adding VLAN 0 to HW filter on device eth10
[   53.084831][ T5451] 8021q: adding VLAN 0 to HW filter on device eth11
[   53.210665][ T5451] 8021q: adding VLAN 0 to HW filter on device eth13
[   53.312192][ T5451] 8021q: adding VLAN 0 to HW filter on device eth12
[   53.349213][ T5813] hsr_slave_0: left promiscuous mode
[   53.349584][ T5813] hsr_slave_1: left promiscuous mode
[   53.349993][ T5813] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   53.350007][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_0
[   53.350394][ T5813] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   53.350406][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_1
[   53.362736][ T5813] hsr_slave_0: left promiscuous mode
[   53.363440][ T5813] hsr_slave_1: left promiscuous mode
[   53.363854][ T5813] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   53.363867][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_0
[   53.367167][ T5813] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   53.367181][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_1
[   53.379952][ T5813] hsr_slave_0: left promiscuous mode
[   53.383226][ T5813] hsr_slave_1: left promiscuous mode
[   53.383460][ T5813] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   53.383470][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_0
[   53.386231][ T5813] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   53.386245][ T5813] batman_adv: batadv0: Removing interface: batadv_slave_1
[   53.393484][ T5813] veth1_macvtap: left promiscuous mode
[   53.393509][ T5813] veth0_macvtap: left promiscuous mode
[   53.393550][ T5813] veth1_vlan: left promiscuous mode
[   53.393580][ T5813] veth0_vlan: left promiscuous mode
[   53.404355][ T5813] veth1_macvtap: left promiscuous mode
[   53.404371][ T5813] veth0_macvtap: left promiscuous mode
[   53.404429][ T5813] veth1_vlan: left promiscuous mode
[   53.404470][ T5813] veth0_vlan: left promiscuous mode
[   53.413252][ T5813] veth1_macvtap: left promiscuous mode
[   53.413275][ T5813] veth0_macvtap: left promiscuous mode
[   53.413303][ T5813] veth1_vlan: left promiscuous mode
[   53.413342][ T5813] veth0_vlan: left promiscuous mode
[   53.515197][ T5813] team0 (unregistering): Port device team_slave_1 removed
[   53.517092][ T5813] team0 (unregistering): Port device team_slave_0 removed
[   53.597042][ T5813] team0 (unregistering): Port device team_slave_1 removed
[   53.599310][ T5813] team0 (unregistering): Port device team_slave_0 removed
[   53.655205][ T5813] team0 (unregistering): Port device team_slave_1 removed
[   53.657751][ T5813] team0 (unregistering): Port device team_slave_0 removed
[   53.679085][ T5451] 8021q: adding VLAN 0 to HW filter on device eth14
[   53.799779][ T5451] 8021q: adding VLAN 0 to HW filter on device eth15
[   53.920602][ T5451] 8021q: adding VLAN 0 to HW filter on device eth16
[   54.046545][ T5451] 8021q: adding VLAN 0 to HW filter on device eth17