last executing test programs:

14.626606438s ago: executing program 4 (id=104):
socket$vsock_stream(0x28, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80000)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x8, 0x4, 0x1ffe00, 0x80, 0x1d})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0)

12.47915362s ago: executing program 4 (id=108):
syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00')
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000cc0)="adf802e5370fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

11.881951122s ago: executing program 2 (id=110):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
fcntl$lock(0xffffffffffffffff, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c)
sendto$inet6(r3, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0)

11.766290989s ago: executing program 0 (id=111):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000480)}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e", 0x62}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2", 0x39}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6", 0xcb}, {&(0x7f0000000bc0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x3, 0x20000044)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

10.656059856s ago: executing program 2 (id=112):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000bc0)={0x0, 0x95, @pic={0x0, 0x0, 0x68, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x40, 0x9, @empty, 0x6}, 0x1c)
socket$netlink(0x10, 0x3, 0x8000000004)
capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04)
r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x0, 0xfffffffa, &(0x7f0000000400)})

10.643763113s ago: executing program 1 (id=113):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be167", 0x66}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000780)}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e", 0x62}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90", 0x4c}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6", 0xcb}, {&(0x7f0000000bc0)}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x3, 0x20000044)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

10.543275041s ago: executing program 4 (id=114):
bpf$MAP_CREATE(0x0, 0x0, 0xc1)
syz_clone3(&(0x7f00000005c0)={0x200000, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0], 0x3}, 0x58)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8002, 0x0, 0x9, 0x100000002, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00')
socket(0x2b, 0x1, 0x1)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$unix(0x1, 0x1, 0x0)
socket$kcm(0x11, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x38, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x7, 0x9, 0x5, 0x1, 0x401}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4c1}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

10.293106926s ago: executing program 1 (id=116):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, &(0x7f0000000bc0)={0x0, 0x95, @pic={0x0, 0x0, 0x68, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, 0x0, 0x0)
connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x40, 0x9, @empty, 0x6}, 0x1c)
socket$netlink(0x10, 0x3, 0x8000000004)
capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
ioctl$USBDEVFS_BULK(r4, 0xc0105502, &(0x7f0000000740)={{{0x7}}, 0x31, 0x9, &(0x7f0000002c00)="1e6fdcbdcc77e201d9a8c5e816ff80f62adcbc9650c4c951157fee38c73d672e6d11b057b732e0ebd4697c7ea5cc016149"})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04)
r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x0, 0xfffffffa, &(0x7f0000000400)})

10.184626046s ago: executing program 0 (id=117):
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80000)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r2, 0xffffffffffffffff, 0x0)

8.924916466s ago: executing program 0 (id=120):
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd)
r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0)
sendfile(r0, r0, 0x0, 0x2000ff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280))
sched_setattr(0x0, 0x0, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
r4 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r5 = dup3(r4, r3, 0x0)
recvmmsg(r5, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0)
read$FUSE(r5, 0x0, 0x0)
syz_usb_connect(0x0, 0x4a, 0x0, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000300)=0xf)

6.575593192s ago: executing program 2 (id=124):
syz_emit_ethernet(0x2e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x8, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$kcm(0x29, 0x2, 0x0)
sendmmsg$inet(r1, &(0x7f0000000e80)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000300)="608bfcb7934ed402f79f89778a7d6d338002ac5ed7854718edc0d120a2dd42fe5aea648fbd9ddc5899fc9b3626f59789104360a426671dd03a21186c5e177398d9c20741104f5a86fb327af333080d0ec1", 0x51}, {&(0x7f0000000380)="fd5d44782235c7dc102c5c8b2ab1304ef389699f493ff1effaa59aeade2aeb3aebbb1ce98ee76f4e49430c5a6914fd2df0a564662e02ad1a498aa190a93b0cce1a5b291894874c0e90fc21103dafcdf91607ec284963e31bf8465ab6ea1e878a8944f682783ef02b2282c714778d09328497eabbb2be", 0x76}, {&(0x7f0000000480)="1bd547b8ab141eeb17bde3b8e82dec775fd4ea4164d6a610748d85782e5e850a2839f35ea5ccac177e892174dae3916593537d09d15fdf7ead17f62f0d590c4a011ae65dfa01227c08623fdb516f127e6f7ce63d98a511edc55a72f2252db09ebe43beb8ea414f3d", 0x68}, {&(0x7f0000000540)="532cd84d21871311d311755826508456264df384d68d488da9dbbf67ac78e4b4dd77f4237a2e8c524be308533f7ca8a4f05034c03dc46a9461df1a246f9d4cd643484138eab3786317a448e6cdc6ea2d06a0784380e7a2787cce4414734114211eafc73960105792132b3078cca0c05558f165ecff19", 0x76}, {&(0x7f00000005c0)="1271ea5695e90723e2c60126aee5eb771b8ea58755e18e9a0b6d2223f15b72c0a4ddb49651ccbfac5d1e7340c918d4f77fed69f438a02546292139e19d48c0d583a446a7220b101b0d6dc89748c037f1eaf1a7c18f0735213195c6c051b3c378d00097a6bf3e4d299a93f51df334131896d594438893083a97e204825edaee86453f37cda48dfcef414268a712dd16bb55b42c2344b66c3817ef779f9145d9650bb9c6666069ac6cfc9e73f52adea819a59252b5817adc5366", 0xb9}, {&(0x7f0000000680)="e7610c54f741dfd887959664c270d79e7fc2c57ec66ed8c24bf6e5d2de7e672d823d89a677496e4eea97254e1f0dd75af3807b3b840f5463cdc8105499a2fb416e1e181c0ba22dd61118e38a1fce76185ca4cd17e9616574bf35334614d2c1a6c098c41663557960a33f70760a5ab666304cc487bdd1ce5afbb8fac15a7867fde15ac10f034e08c41d5135ad9337b23502ae866fa27cbb4d934b5574fe29650f", 0xa0}, {&(0x7f0000000740)="5679757aebb7118073125cb74987652b508103842f907af00b6331fc10f33bedbf2db5c0ac016c4cf16883596356481b525ceb50ab5a2a052b4dc64c91e0053cbc8801ccaaad662b461ca9540bf20e4fabc5ea37737d5698bac608e87510113ba31ac80f5b17c1562dc3796ced1dce9fa4fa082fa533fa87bb92720e96e23e7bafc015acd59ec14911ab2ca0ef4193119b1cd06fbfd241be7241a3e364a3812957fbebbbcc4881a68748", 0xaa}, {&(0x7f0000000800)="cec069fb255fe2aa7eb50933bfe00b3a83f006ac310dd003c095787b884dbd751f23af685e4923404a", 0x29}], 0x8}}, {{&(0x7f0000000880)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000e00)=[{&(0x7f00000008c0)="d87755746ded3f7c1aa88472a927137f37cbd8696898e18dd250379a6e373aff4f13f5dd76c6e41efcd0cd46ac8be13580a9a4fa26cf2e3699d6fb4f274d2ad672c629c7326cac96a9f94d27b37612a164f7ac161e9ff7a39373b66a451398155e955118f727ae30c35bb1e2885cdbe269a6bfb5861fab5c91f6b2cb80334dbb26dcaa2429d279af0b98ef20fced0fc8fbcbc8", 0x93}, {&(0x7f0000000980)="e431d5d43230e9c9fefa1a2074f9fad064ec39f08b0afa610123cb31351bf81d55e336d0287fadba10b4990d434b9acfea4da03d4724d50d76c65c048bdb14603d05386a3f141acba4967e8bfd486fcc1b0acf1cf9a56857f9ef7a3fb3a8ca26b1cd970dd7701e641dc6a8cf1e84e54ca11f3612d87f716f4b84d546966d9079906d522cc168fdc9f689989370a68051f9460191866ae1830afca50fabb9f3d91b5d7e9f0f3dbdb7e6979bb0f56881e4a1fd90958ef51181c591d45421ebd636bab45ac74a83d446aec4d767a63286c11bb2f026be0bde443cfd245094fc6e719c281b7a", 0xe4}, {&(0x7f0000000a80)="9ab8932cf10cea060823308c2171a2d6e3654acc191797e35788395b0d043c116471692b5214e45eb2d034dd2ffe385b378f4b8bfa26b0b582d23096e757b650170a552fbd3f84c6bd088c57b327c13973c3f92aa91e", 0x56}, {&(0x7f0000000b00)="97faa9b8fe9e519886e2b47ad32a800f696daa6c65c7d0ac3eb22c61c979f82fe2c7df6ede43b714839adfbcd2c444e7f6218c6a4e95e25f08012b4b5148dce0375dec7e947e06b92b68aea4060069b5d97217d1e1ca9bbca901c41b837652b25fca49c227fee569d0c771c4335a2152223e9dc96f554dac04c235a359befb4db6e60cfeb2659e9b159e0929c88ed815b2d55ddf39f4aae8c5e590afd00ecb684eee0328c12d4319438b11192d0ac2538f98f9e9c1", 0xb5}, {&(0x7f0000000bc0)="cf393cd0eb32ba353ebd06877199f0", 0xf}, {&(0x7f0000000c00)="8c48c9df132cfa74fcee72c6a4721a9983097ea7f5872fead6d4cd48516864a39298d8fa8b616081ae7d85280f64403f41dd9c4e90cfa658d3a05ac3495c1b1cb86b78d9a4b8374ecb14d8cbe199ca2df2b5eafc50f314a10e6e96eb17c62dd89a33a36a8b7c7f886c397f1b61a7bb12dd57e6fb954053288dc263f2436ebc2fe643689055df594b06246dfd81d21fba4c75398dba", 0x95}, {&(0x7f0000000cc0)="9154283f0a9c6cedf9e57d23d4ea20ebe49f975908688305011e4736bda1725d7800555160c5af50808993a3b14d15e99bbcd221e3deb00e3808267ed1a4cf6ae931386d175b32ce52957c821bb6928f2d32e0b781bf4448f87d2c09fd60e9dd3e070aeff49f08468a669f798888f1713e74d9818f748cce10fa7a2079ccbf266508d979cfc8a2a7baf5ac558b5ad2fc03ed6bb09fdaa1c0b097d4e95efcca8cd4c261e4dbe0991d6e4016f885", 0xad}, {&(0x7f0000000d80)="52f9510f451c8db2030f22c9f0af0e670b0b999f89e92621e11976237014ed3e4a2ded86a1afc0d79098d2f502115f3402", 0x31}, {&(0x7f0000000dc0)}], 0x9}}], 0x2, 0x4000080)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d507df08c410448200dc01020301090212000100000000090400000003"], 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
r3 = openat$sysfs(0xffffff9c, &(0x7f00000002c0)='/sys/kernel/hardlockup_count', 0x10801, 0x50)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r3, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000500)={0x24, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$unix(0x1, 0x1, 0x0)

6.380247495s ago: executing program 1 (id=125):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0)
sendmmsg$inet(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222", 0x5}], 0x1}}], 0x1, 0x20008000)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@gcm_128={{}, "9005451377480361", "bbad434d19477339418b5b79f10c141a", "dc717b03", "72f2ea1a3290afcc"}, 0x28)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, 0x0, &(0x7f0000000300))
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0)
r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x9, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0xffffffff, @loopback, 0x10000bff}, @ib={0x1b, 0xd9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x8000000000000001, 0x2, 0x3}}}, 0x118)
sendmsg$nl_route_sched(r4, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="2f00000000000000000000006a3f7860d3ee6eb4b2c5f9c5d04b88356fa0a922c422cc23ac16635b1024517a42fc1dd3ece66beee92cf5132e4b382ddcd6244bcc7ba5f912ac24968ee3031f62673a49be5669c781fc1c8cd4a7ad3bed45bcfcc321b4d085566dfb44", @ANYRES64=0x0], 0x20)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x40)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r2, 0x0, 0x25, 0x11, @val=@tcx={@void, @value=r2, @void, @void, r6}}, 0x1c)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0)

6.230781554s ago: executing program 3 (id=127):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb7", 0x85}, {&(0x7f0000000480)}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e", 0x62}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2", 0x39}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6", 0xcb}, {&(0x7f0000000bc0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x3, 0x20000044)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

6.109217663s ago: executing program 3 (id=128):
landlock_restrict_self(0xffffffffffffffff, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040)
lseek(r2, 0x6, 0x0)
unshare(0x2040400)
r5 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
unshare(0x2000400)
fsmount(r5, 0x0, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000019300)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a4, 0xf0, 0x18c, 0x203, 0xf0, 0x19030000, 0x1dc, 0x2e0, 0x2e0, 0x1dc, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xc8, 0xf0, 0x0, {}, [@common=@eui64={{0x24}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x300)

5.150926613s ago: executing program 1 (id=129):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0)
syz_emit_ethernet(0x5a, &(0x7f0000000180)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local, {[@generic={0x7, 0xf, "0476bc4b4c9e3e260cbfad9904"}, @timestamp_addr={0x44, 0x14, 0xb, 0x1, 0x0, [{@multicast1}, {@multicast1}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd25, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xfe, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7ffe}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x62}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008005}, 0x44)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0)
write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7)

5.098430976s ago: executing program 4 (id=130):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0)
r1 = socket$inet(0x2, 0x2, 0x1)
setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f00000000c0)='0', 0xfffffffffffffc91)
syz_io_uring_submit(0x0, 0x0, 0x0, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x4, 0x1, 0xe}}, 0x30)
socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000001200)={'wlan1\x00', &(0x7f0000001100)=@ethtool_rxnfc={0x2a, 0x8, 0x7e1ab084, {0x3, @usr_ip4_spec={@multicast1, @multicast1, 0x53, 0x7f, 0x1, 0x9}, {0x0, @random="7729ba522e59", 0xa, 0x0, [0x10000, 0x3]}, @hdata="a86b57371eff451fd353517f755532b803741b5b2aade83e68f35d937d79d8993111b4ca75f0612da64df99e636e9cb7eb62b35f", {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x9, 0x6, [0x6]}, 0x3, 0x6}}})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00'})
bind$packet(r4, 0x0, 0x0)
writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_emit_ethernet(0xce, &(0x7f0000000b00)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x98, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20000, 0x1000300, [{0x1, 0xc, "23d13a9528da89ca8687857fa1c05623e430a7e05df65bb50a75504311ee5de0f521d4ef8bdff765650746569fc64eab97bd29f1573ea4d0bf29234512d00dd30ae604dd40e3c151fd4d595866b48657d2cb4ed8721f45e586a02af6449001"}, {0x5, 0x4, "ef1dc0373c7ae5822ff95684d179152a6da7097d9a664860876ec7127430d92386b1dae46b"}]}}}}}}, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
ppoll(&(0x7f0000000300)=[{r7, 0x4080}], 0x1, 0x0, 0x0, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
truncate(&(0x7f0000000200)='./mnt\x00', 0x4)
bind$inet(r8, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)

4.714867822s ago: executing program 1 (id=131):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r4 = socket(0x10, 0x3, 0x0)
close(r3)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4008810)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

4.396173289s ago: executing program 2 (id=132):
syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/key-users\x00', 0x0, 0x0)
r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4})
r4 = socket$rds(0x15, 0x5, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffe1a, 0xfa00, {0x0, 0x0, 0x2, 0x2}}, 0x20)
ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, &(0x7f0000000000))

4.331934154s ago: executing program 0 (id=133):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4.038146885s ago: executing program 3 (id=134):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000bc0)={0x0, 0x95, @pic={0x0, 0x0, 0x68, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x40, 0x9, @empty, 0x6}, 0x1c)
socket$netlink(0x10, 0x3, 0x8000000004)
capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04)
r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x0, 0xfffffffa, &(0x7f0000000400)})

2.925935536s ago: executing program 1 (id=135):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0)
utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x2)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r2=>0xffffffffffffffff}, 0x106, 0x8}}, 0x20)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000400000000000000000000000200002000a00000000000000fc"], 0x6c}}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r2, 0x4734}}, 0x10)
close(r1)
socket$inet6_tcp(0xa, 0x1, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)

2.845020647s ago: executing program 2 (id=136):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100039042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0118020003110000280012800b00010065727370616e000018000280040012000500170000000000050016"], 0x48}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4000000}, 0x0)

2.398688036s ago: executing program 2 (id=137):
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd)
r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0)
sendfile(r0, r0, 0x0, 0x2000ff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockname$inet(0xffffffffffffffff, 0x0, &(0x7f0000002280))
sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0)
r3 = socket(0x1e, 0x4, 0x0)
r4 = socket(0x1e, 0x2, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, 0x0, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r5 = dup3(r4, r3, 0x0)
recvmmsg(r5, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0)
read$FUSE(r5, 0x0, 0x0)
syz_usb_connect(0x0, 0x4a, 0x0, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000300)=0xf)

2.254889655s ago: executing program 3 (id=138):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be167", 0x66}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000780)}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e", 0x62}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90", 0x4c}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6", 0xcb}, {&(0x7f0000000bc0)}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa464613c", 0xf}], 0x1}}], 0x3, 0x20000044)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

2.161441237s ago: executing program 3 (id=139):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aeb2, &(0x7f0000000bc0)={0x0, 0x95, @pic={0x0, 0x0, 0x68, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, 0x0, 0x0)
connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x40, 0x9, @empty, 0x6}, 0x1c)
socket$netlink(0x10, 0x3, 0x8000000004)
capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
ioctl$USBDEVFS_BULK(r4, 0xc0105502, &(0x7f0000000740)={{{0x7}}, 0x5c, 0x9, &(0x7f0000002c00)="1e6fdcbdcc77e201d9a8c5e816ff80f62adcbc9650c4c951157fee38c73d672e6d11b057b732e0ebd4697c7ea5cc01614940cb8b98619a459bd009d4cdb1bdbd06fa9a20714e2c6b9f8d5b8ce36edfe313fc52dcc1cce0bfab358ed6"})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04)
r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x0, 0xfffffffa, &(0x7f0000000400)})

1.75030339s ago: executing program 4 (id=140):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="120000000400000004000000050000", @ANYRES32=0x1, @ANYBLOB="0700ffffffff5ca4328900"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a000d615000008009f0005000000080026000816"], 0x40}}, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="0500"], 0x10)
ioctl$FICLONE(r4, 0x40049409, r0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map=r0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40380, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r8=>0x0})
bind$can_j1939(r7, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
close(r9)
sendmmsg(r7, &(0x7f0000003dc0)=[{{&(0x7f0000000180)=@can, 0x80, &(0x7f0000001840)=[{&(0x7f0000000440)="4e358ed59ee7a636d3a35d9bb1a218701d8f6d70ee6d34b9", 0x18}], 0x1}}], 0x1, 0x48010)
sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, r8, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)
ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000100)={0xc, <r10=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r10})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4}, './file0\x00'})
r11 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$sock_timeval(r11, 0x1, 0x43, 0xffffffffffffffff, &(0x7f0000000000))
r12 = socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66}]}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)

1.51855988s ago: executing program 0 (id=141):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x80000)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r2, 0xffffffffffffffff, 0x0)

809.301654ms ago: executing program 0 (id=142):
syz_emit_ethernet(0x2e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x3200, 0x88be, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x8, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$kcm(0x29, 0x2, 0x0)
sendmmsg$inet(r1, &(0x7f0000000e80)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000300)="608bfcb7934ed402f79f89778a7d6d338002ac5ed7854718edc0d120a2dd42fe5aea648fbd9ddc5899fc9b3626f59789104360a426671dd03a21186c5e177398d9c20741104f5a86fb327af333080d0ec1", 0x51}, {&(0x7f0000000380)="fd5d44782235c7dc102c5c8b2ab1304ef389699f493ff1effaa59aeade2aeb3aebbb1ce98ee76f4e49430c5a6914fd2df0a564662e02ad1a498aa190a93b0cce1a5b291894874c0e90fc21103dafcdf91607ec284963e31bf8465ab6ea1e878a8944f682783ef02b2282c714778d09328497eabbb2be", 0x76}, {&(0x7f0000000480)="1bd547b8ab141eeb17bde3b8e82dec775fd4ea4164d6a610748d85782e5e850a2839f35ea5ccac177e892174dae3916593537d09d15fdf7ead17f62f0d590c4a011ae65dfa01227c08623fdb516f127e6f7ce63d98a511edc55a72f2252db09ebe43beb8ea414f3d", 0x68}, {&(0x7f0000000540)="532cd84d21871311d311755826508456264df384d68d488da9dbbf67ac78e4b4dd77f4237a2e8c524be308533f7ca8a4f05034c03dc46a9461df1a246f9d4cd643484138eab3786317a448e6cdc6ea2d06a0784380e7a2787cce4414734114211eafc73960105792132b3078cca0c05558f165ecff19", 0x76}, {&(0x7f00000005c0)="1271ea5695e90723e2c60126aee5eb771b8ea58755e18e9a0b6d2223f15b72c0a4ddb49651ccbfac5d1e7340c918d4f77fed69f438a02546292139e19d48c0d583a446a7220b101b0d6dc89748c037f1eaf1a7c18f0735213195c6c051b3c378d00097a6bf3e4d299a93f51df334131896d594438893083a97e204825edaee86453f37cda48dfcef414268a712dd16bb55b42c2344b66c3817ef779f9145d9650bb9c6666069ac6cfc9e73f52adea819a59252b5817adc5366", 0xb9}, {&(0x7f0000000680)="e7610c54f741dfd887959664c270d79e7fc2c57ec66ed8c24bf6e5d2de7e672d823d89a677496e4eea97254e1f0dd75af3807b3b840f5463cdc8105499a2fb416e1e181c0ba22dd61118e38a1fce76185ca4cd17e9616574bf35334614d2c1a6c098c41663557960a33f70760a5ab666304cc487bdd1ce5afbb8fac15a7867fde15ac10f034e08c41d5135ad9337b23502ae866fa27cbb4d934b5574fe29650f", 0xa0}, {&(0x7f0000000740)="5679757aebb7118073125cb74987652b508103842f907af00b6331fc10f33bedbf2db5c0ac016c4cf16883596356481b525ceb50ab5a2a052b4dc64c91e0053cbc8801ccaaad662b461ca9540bf20e4fabc5ea37737d5698bac608e87510113ba31ac80f5b17c1562dc3796ced1dce9fa4fa082fa533fa87bb92720e96e23e7bafc015acd59ec14911ab2ca0ef4193119b1cd06fbfd241be7241a3e364a3812957fbebbbcc4881a68748", 0xaa}, {&(0x7f0000000800)="cec069fb255fe2aa7eb50933bfe00b3a83f006ac310dd003c095787b884dbd751f23af685e4923404a", 0x29}], 0x8}}, {{&(0x7f0000000880)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000e00)=[{&(0x7f00000008c0)="d87755746ded3f7c1aa88472a927137f37cbd8696898e18dd250379a6e373aff4f13f5dd76c6e41efcd0cd46ac8be13580a9a4fa26cf2e3699d6fb4f274d2ad672c629c7326cac96a9f94d27b37612a164f7ac161e9ff7a39373b66a451398155e955118f727ae30c35bb1e2885cdbe269a6bfb5861fab5c91f6b2cb80334dbb26dcaa2429d279af0b98ef20fced0fc8fbcbc8", 0x93}, {&(0x7f0000000980)="e431d5d43230e9c9fefa1a2074f9fad064ec39f08b0afa610123cb31351bf81d55e336d0287fadba10b4990d434b9acfea4da03d4724d50d76c65c048bdb14603d05386a3f141acba4967e8bfd486fcc1b0acf1cf9a56857f9ef7a3fb3a8ca26b1cd970dd7701e641dc6a8cf1e84e54ca11f3612d87f716f4b84d546966d9079906d522cc168fdc9f689989370a68051f9460191866ae1830afca50fabb9f3d91b5d7e9f0f3dbdb7e6979bb0f56881e4a1fd90958ef51181c591d45421ebd636bab45ac74a83d446aec4d767a63286c11bb2f026be0bde443cfd245094fc6e719c281b7a", 0xe4}, {&(0x7f0000000a80)="9ab8932cf10cea060823308c2171a2d6e3654acc191797e35788395b0d043c116471692b5214e45eb2d034dd2ffe385b378f4b8bfa26b0b582d23096e757b650170a552fbd3f84c6bd088c57b327c13973c3f92aa91e", 0x56}, {&(0x7f0000000b00)="97faa9b8fe9e519886e2b47ad32a800f696daa6c65c7d0ac3eb22c61c979f82fe2c7df6ede43b714839adfbcd2c444e7f6218c6a4e95e25f08012b4b5148dce0375dec7e947e06b92b68aea4060069b5d97217d1e1ca9bbca901c41b837652b25fca49c227fee569d0c771c4335a2152223e9dc96f554dac04c235a359befb4db6e60cfeb2659e9b159e0929c88ed815b2d55ddf39f4aae8c5e590afd00ecb684eee0328c12d4319438b11192d0ac2538f98f9e9c1", 0xb5}, {&(0x7f0000000bc0)="cf393cd0eb32ba353ebd06877199f0", 0xf}, {&(0x7f0000000c00)="8c48c9df132cfa74fcee72c6a4721a9983097ea7f5872fead6d4cd48516864a39298d8fa8b616081ae7d85280f64403f41dd9c4e90cfa658d3a05ac3495c1b1cb86b78d9a4b8374ecb14d8cbe199ca2df2b5eafc50f314a10e6e96eb17c62dd89a33a36a8b7c7f886c397f1b61a7bb12dd57e6fb954053288dc263f2436ebc2fe643689055df594b06246dfd81d21fba4c75398dba", 0x95}, {&(0x7f0000000cc0)="9154283f0a9c6cedf9e57d23d4ea20ebe49f975908688305011e4736bda1725d7800555160c5af50808993a3b14d15e99bbcd221e3deb00e3808267ed1a4cf6ae931386d175b32ce52957c821bb6928f2d32e0b781bf4448f87d2c09fd60e9dd3e070aeff49f08468a669f798888f1713e74d9818f748cce10fa7a2079ccbf266508d979cfc8a2a7baf5ac558b5ad2fc03ed6bb09fdaa1c0b097d4e95efcca8cd4c261e4dbe0991d6e4016f885", 0xad}, {&(0x7f0000000d80)="52f9510f451c8db2030f22c9f0af0e670b0b999f89e92621e11976237014ed3e4a2ded86a1afc0d79098d2f502115f3402", 0x31}, {&(0x7f0000000dc0)}], 0x9}}], 0x2, 0x4000080)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d507df08c410448200dc01020301090212000100000000090400000003"], 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
r3 = openat$sysfs(0xffffff9c, &(0x7f00000002c0)='/sys/kernel/hardlockup_count', 0x10801, 0x50)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r3, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000500)={0x24, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$unix(0x1, 0x1, 0x0)

394.566836ms ago: executing program 4 (id=143):
syz_open_dev$dri(0x0, 0x1, 0x0)
openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil)
mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil)
mremap(&(0x7f0000678000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil)
mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000045e000/0x3000)=nil)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
unshare(0x28060400)

0s ago: executing program 3 (id=144):
landlock_restrict_self(0xffffffffffffffff, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040)
lseek(r2, 0x6, 0x0)
unshare(0x2040400)
r5 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
unshare(0x2000400)
fsmount(r5, 0x0, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000019300)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a4, 0xf0, 0x18c, 0x203, 0xf0, 0x19030000, 0x1dc, 0x2e0, 0x2e0, 0x1dc, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xc8, 0xf0, 0x0, {}, [@common=@eui64={{0x24}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x300)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.125' (ED25519) to the list of known hosts.
[   70.535768][ T5782] cgroup: Unknown subsys name 'net'
[   70.756311][ T5782] cgroup: Unknown subsys name 'cpuset'
[   70.812428][ T5782] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   71.398658][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[   71.398750][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[   72.385608][ T5782] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   74.540310][   T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   74.543156][ T5808] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   74.566833][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   74.567604][ T5809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   74.568699][ T5809] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   74.569806][ T5809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   74.573109][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   74.573549][ T5809] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   74.574027][ T5809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   74.575198][ T5809] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   74.576272][ T5809] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   74.577325][ T5809] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   74.580269][ T5811] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   74.580392][ T5809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   74.581758][ T5809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   74.582932][ T5809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   74.583598][ T5812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   74.589622][ T5811] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   74.590337][ T5811] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   74.595042][   T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   74.596592][   T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   74.618792][ T5811] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   74.655984][ T5113] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   74.697309][ T5808] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   74.701061][ T5808] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   75.431006][ T5792] chnl_net:caif_netlink_parms(): no params data found
[   75.509809][ T5794] chnl_net:caif_netlink_parms(): no params data found
[   75.516943][ T5793] chnl_net:caif_netlink_parms(): no params data found
[   75.573754][ T5796] chnl_net:caif_netlink_parms(): no params data found
[   75.600697][ T5795] chnl_net:caif_netlink_parms(): no params data found
[   75.759011][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.759998][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.760106][ T5792] bridge_slave_0: entered allmulticast mode
[   75.761588][ T5792] bridge_slave_0: entered promiscuous mode
[   75.821355][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.821434][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.821534][ T5792] bridge_slave_1: entered allmulticast mode
[   75.823805][ T5792] bridge_slave_1: entered promiscuous mode
[   75.888651][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.888741][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.888834][ T5794] bridge_slave_0: entered allmulticast mode
[   75.890188][ T5794] bridge_slave_0: entered promiscuous mode
[   75.893177][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state
[   75.893376][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.893531][ T5793] bridge_slave_0: entered allmulticast mode
[   75.894958][ T5793] bridge_slave_0: entered promiscuous mode
[   75.983807][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.983924][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.984085][ T5794] bridge_slave_1: entered allmulticast mode
[   75.985817][ T5794] bridge_slave_1: entered promiscuous mode
[   75.987613][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state
[   75.987694][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.987783][ T5793] bridge_slave_1: entered allmulticast mode
[   75.989077][ T5793] bridge_slave_1: entered promiscuous mode
[   76.025951][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.027272][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.027457][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.027611][ T5796] bridge_slave_0: entered allmulticast mode
[   76.031153][ T5796] bridge_slave_0: entered promiscuous mode
[   76.073830][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.074011][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.074527][ T5795] bridge_slave_0: entered allmulticast mode
[   76.076882][ T5795] bridge_slave_0: entered promiscuous mode
[   76.083672][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.083848][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.083953][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.084086][ T5796] bridge_slave_1: entered allmulticast mode
[   76.086523][ T5796] bridge_slave_1: entered promiscuous mode
[   76.126742][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.126882][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.127030][ T5795] bridge_slave_1: entered allmulticast mode
[   76.130639][ T5795] bridge_slave_1: entered promiscuous mode
[   76.170487][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.174679][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.215960][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.218160][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.245015][ T5792] team0: Port device team_slave_0 added
[   76.247663][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.277950][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.279893][ T5792] team0: Port device team_slave_1 added
[   76.281773][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.315865][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.333880][ T5794] team0: Port device team_slave_0 added
[   76.347799][ T5793] team0: Port device team_slave_0 added
[   76.373475][ T5794] team0: Port device team_slave_1 added
[   76.387892][ T5793] team0: Port device team_slave_1 added
[   76.663519][ T5808] Bluetooth: hci0: command tx timeout
[   76.663738][ T5804] Bluetooth: hci1: command tx timeout
[   76.742049][ T5804] Bluetooth: hci4: command tx timeout
[   76.743773][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.743782][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.743795][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.752006][ T5808] Bluetooth: hci3: command tx timeout
[   76.752221][ T5804] Bluetooth: hci2: command tx timeout
[   76.779190][ T5796] team0: Port device team_slave_0 added
[   76.784180][ T5795] team0: Port device team_slave_0 added
[   76.785172][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.785184][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.785205][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.827447][ T5796] team0: Port device team_slave_1 added
[   76.830046][ T5795] team0: Port device team_slave_1 added
[   76.845470][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.845485][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.845508][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.847802][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.847815][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.847837][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.888094][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.888110][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.888132][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.891014][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.891027][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.891048][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.957502][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.957518][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.957547][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.960290][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.960302][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.960323][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.984709][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.984725][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.984747][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.988926][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.988941][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   76.988962][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.065551][ T5792] hsr_slave_0: entered promiscuous mode
[   77.067224][ T5792] hsr_slave_1: entered promiscuous mode
[   77.124408][ T5794] hsr_slave_0: entered promiscuous mode
[   77.125580][ T5794] hsr_slave_1: entered promiscuous mode
[   77.126537][ T5794] debugfs: 'hsr0' already exists in 'hsr'
[   77.126652][ T5794] Cannot create hsr debugfs directory
[   77.239935][ T5793] hsr_slave_0: entered promiscuous mode
[   77.241554][ T5793] hsr_slave_1: entered promiscuous mode
[   77.243074][ T5793] debugfs: 'hsr0' already exists in 'hsr'
[   77.243097][ T5793] Cannot create hsr debugfs directory
[   77.284286][ T5796] hsr_slave_0: entered promiscuous mode
[   77.285053][ T5796] hsr_slave_1: entered promiscuous mode
[   77.285585][ T5796] debugfs: 'hsr0' already exists in 'hsr'
[   77.285606][ T5796] Cannot create hsr debugfs directory
[   77.311067][ T5795] hsr_slave_0: entered promiscuous mode
[   77.313252][ T5795] hsr_slave_1: entered promiscuous mode
[   77.314177][ T5795] debugfs: 'hsr0' already exists in 'hsr'
[   77.314198][ T5795] Cannot create hsr debugfs directory
[   78.157705][ T5792] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   78.182145][ T5792] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   78.217801][ T5792] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   78.267218][ T5792] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   78.367231][ T5794] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   78.409021][ T5794] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   78.449149][ T5794] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   78.498542][ T5794] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   78.596084][ T5793] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   78.634054][ T5793] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   78.686807][ T5793] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   78.719872][ T5793] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   78.742263][ T5808] Bluetooth: hci0: command tx timeout
[   78.742347][ T5804] Bluetooth: hci1: command tx timeout
[   78.822093][ T5808] Bluetooth: hci3: command tx timeout
[   78.822120][ T5808] Bluetooth: hci4: command tx timeout
[   78.822212][ T5804] Bluetooth: hci2: command tx timeout
[   78.829903][ T5796] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   78.887411][ T5796] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   78.918354][ T5796] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   78.955309][ T5796] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   79.051494][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.084731][ T5795] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   79.134895][ T5795] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   79.173377][ T5795] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   79.208726][ T5795] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   79.281669][ T5792] 8021q: adding VLAN 0 to HW filter on device team0
[   79.313802][  T164] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.314354][  T164] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.333381][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.350335][  T164] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.350544][  T164] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.414183][ T5794] 8021q: adding VLAN 0 to HW filter on device team0
[   79.440976][  T164] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.441125][  T164] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.460569][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.490574][  T164] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.490691][  T164] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.538653][ T5793] 8021q: adding VLAN 0 to HW filter on device team0
[   79.568742][  T164] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.568929][  T164] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.575251][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.621383][  T164] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.621592][  T164] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.717041][ T5796] 8021q: adding VLAN 0 to HW filter on device team0
[   79.736157][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.770003][ T1793] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.770206][ T1793] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.846415][ T1793] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.852708][ T1793] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.886998][ T5795] 8021q: adding VLAN 0 to HW filter on device team0
[   79.925967][ T2154] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.926235][ T2154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.963935][ T1793] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.964082][ T1793] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.054844][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.207821][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.334339][ T5792] veth0_vlan: entered promiscuous mode
[   80.394668][ T5792] veth1_vlan: entered promiscuous mode
[   80.460297][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.488023][ T5794] veth0_vlan: entered promiscuous mode
[   80.524487][ T5794] veth1_vlan: entered promiscuous mode
[   80.527167][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.573971][ T5792] veth0_macvtap: entered promiscuous mode
[   80.598885][ T5792] veth1_macvtap: entered promiscuous mode
[   80.627335][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.679924][ T5793] veth0_vlan: entered promiscuous mode
[   80.700475][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.731561][ T5794] veth0_macvtap: entered promiscuous mode
[   80.744119][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1
[   80.754684][ T5793] veth1_vlan: entered promiscuous mode
[   80.761816][ T5794] veth1_macvtap: entered promiscuous mode
[   80.798231][   T43] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   80.804261][ T5796] veth0_vlan: entered promiscuous mode
[   80.805917][   T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   80.823873][ T5811] Bluetooth: hci1: command tx timeout
[   80.823901][ T5811] Bluetooth: hci0: command tx timeout
[   80.830893][   T43] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   80.868245][   T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   80.902161][ T5811] Bluetooth: hci4: command tx timeout
[   80.902191][ T5811] Bluetooth: hci3: command tx timeout
[   80.902315][ T5804] Bluetooth: hci2: command tx timeout
[   80.952903][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0
[   80.957217][ T5796] veth1_vlan: entered promiscuous mode
[   81.036967][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.115812][ T2154] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.130291][ T2154] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.147229][ T2154] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.172236][ T5793] veth0_macvtap: entered promiscuous mode
[   81.175483][ T2154] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.213157][ T5793] veth1_macvtap: entered promiscuous mode
[   81.215808][ T2154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.215823][ T2154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.411161][  T164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.411179][  T164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.420148][ T5796] veth0_macvtap: entered promiscuous mode
[   81.476197][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.489725][ T5796] veth1_macvtap: entered promiscuous mode
[   81.527203][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.540292][  T164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.540315][  T164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.541097][ T5795] veth0_vlan: entered promiscuous mode
[   81.569555][ T1212] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.571660][ T1212] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.600665][ T1212] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.614884][ T1212] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.636914][   T36] cfg80211: failed to load regulatory.db
[   81.655731][ T5795] veth1_vlan: entered promiscuous mode
[   81.664798][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.738140][ T1793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   81.738158][ T1793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   81.797437][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.921811][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.928205][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.931597][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.016151][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.211699][  T164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.211728][  T164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.488800][ T5795] veth0_macvtap: entered promiscuous mode
[   82.902057][ T5804] Bluetooth: hci0: command tx timeout
[   82.902085][ T5804] Bluetooth: hci1: command tx timeout
[   82.982079][ T5808] Bluetooth: hci2: command tx timeout
[   82.982109][ T5808] Bluetooth: hci3: command tx timeout
[   82.982126][ T5808] Bluetooth: hci4: command tx timeout
[   83.468414][ T5795] veth1_macvtap: entered promiscuous mode
[   83.481956][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.481973][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.559442][ T2154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.559460][ T2154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.614698][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.678677][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.715882][  T742] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.720426][  T742] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.720650][  T742] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.720671][  T742] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.774644][  T742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.774661][  T742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.662559][ T1793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.662577][ T1793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.222143][   T36] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   86.282126][ T1793] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.282147][ T1793] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.423023][   T36] usb 4-1: Using ep0 maxpacket: 32
[   86.439259][   T36] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[   86.439283][   T36] usb 4-1: config 4 has 0 interfaces, different from the descriptor's value: 1
[   86.447125][   T36] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   86.447152][   T36] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   86.447168][   T36] usb 4-1: Product: syz
[   86.447181][   T36] usb 4-1: Manufacturer: syz
[   86.902494][ T5957] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   87.875339][   T31] usb 4-1: USB disconnect, device number 2
[   88.981981][   T10] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   89.331431][   T10] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[   89.331458][   T10] usb 3-1: config 0 has no interface number 0
[   89.331544][   T10] usb 3-1: config 0 interface 41 has no altsetting 0
[   89.392962][   T10] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[   89.393251][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.393309][   T10] usb 3-1: Product: syz
[   89.393368][   T10] usb 3-1: Manufacturer: syz
[   89.393421][   T10] usb 3-1: SerialNumber: syz
[   89.671080][   T10] usb 3-1: config 0 descriptor??
[   90.477725][   T10] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -32
[   91.659461][   T36] usb 3-1: USB disconnect, device number 2
[   93.067344][ T6020] netlink: 40 bytes leftover after parsing attributes in process `syz.4.28'.
[   94.194642][   T36] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   94.755751][   T36] usb 5-1: config 0 has an invalid interface number: 106 but max is 0
[   94.755768][   T36] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   94.755778][   T36] usb 5-1: config 0 has no interface number 0
[   94.755809][   T36] usb 5-1: config 0 interface 106 altsetting 0 has an endpoint descriptor with address 0xEC, changing to 0x8C
[   94.755822][   T36] usb 5-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[   94.755844][   T36] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[   94.755855][   T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.761202][   T36] usb 5-1: config 0 descriptor??
[   95.221900][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   95.287398][   T36] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[   95.310992][  T164] usb 5-1: Failed to submit usb control message: -71
[   95.311025][  T164] usb 5-1: unable to send the bmi data to the device: -71
[   95.311040][  T164] usb 5-1: unable to get target info from device
[   95.311067][  T164] usb 5-1: could not get target info (-71)
[   95.311090][  T164] usb 5-1: could not probe fw (-71)
[   95.387799][   T36] usb 5-1: USB disconnect, device number 2
[   96.149765][ T5878] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   96.612005][ T5844] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   96.612171][ T5878] usb 4-1: Using ep0 maxpacket: 32
[   96.615310][ T5878] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[   96.615337][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.684125][ T5878] usb 4-1: config 0 descriptor??
[   96.690430][ T5878] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[   96.804999][ T5844] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   96.805025][ T5844] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   96.845617][ T5844] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   96.845673][ T5844] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   96.845683][ T5844] usb 3-1: SerialNumber: syz
[   96.927774][ T5878] gspca_vc032x: reg_r err -32
[   96.927832][ T5878] gspca_vc032x: I2c Bus Busy Wait 00
[   96.927839][ T5878] gspca_vc032x: I2c Bus Busy Wait 00
[   96.927843][ T5878] gspca_vc032x: I2c Bus Busy Wait 00
[   96.927847][ T5878] gspca_vc032x: I2c Bus Busy Wait 00
[   96.927851][ T5878] gspca_vc032x: I2c Bus Busy Wait 00
[   96.927856][ T5878] gspca_vc032x: I2c Bus Busy Wait 00
[   96.927859][ T5878] gspca_vc032x: I2c Bus Busy Wait 00
[   96.927864][ T5878] gspca_vc032x: I2c Bus Busy Wait 00
[   96.927867][ T5878] gspca_vc032x: I2c Bus Busy Wait 00
[   96.927871][ T5878] gspca_vc032x: I2c Bus Busy Wait 00
[   96.927875][ T5878] gspca_vc032x: I2c Bus Busy Wait 00
[   96.927879][ T5878] gspca_vc032x: I2c Bus Busy Wait 00
[   96.927883][ T5878] gspca_vc032x: I2c Bus Busy Wait 00
[   96.927887][ T5878] gspca_vc032x: I2c Bus Busy Wait 00
[   96.927891][ T5878] gspca_vc032x: I2c Bus Busy Wait 00
[   96.927895][ T5878] gspca_vc032x: I2c Bus Busy Wait 00
[   96.927898][ T5878] gspca_vc032x: I2c Bus Busy Wait 00
[   96.927902][ T5878] gspca_vc032x: I2c Bus Busy Wait 00
[   96.927908][ T5878] gspca_vc032x: Unknown sensor...
[   96.927990][ T5878] vc032x 4-1:0.0: probe with driver vc032x failed with error -22
[   97.109194][ T5844] usb 3-1: 0:2 : does not exist
[   97.245248][ T5844] usb 3-1: USB disconnect, device number 3
[   97.287407][ T5946] udevd[5946]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   98.741227][ T5844] usb 4-1: USB disconnect, device number 3
[   99.503874][ T6089] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   99.643730][ T6091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.49'.
[   99.979824][ T6091] bridge_slave_1: left allmulticast mode
[   99.979844][ T6091] bridge_slave_1: left promiscuous mode
[  100.018402][ T6091] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.198253][ T6091] bridge_slave_0: left allmulticast mode
[  101.198273][ T6091] bridge_slave_0: left promiscuous mode
[  101.218468][ T6091] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.908072][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.54'.
[  102.975541][ T6109] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  103.014840][ T6109] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  103.491948][ T5877] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  103.648183][ T5877] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  103.648210][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  103.648227][ T5877] usb 3-1: Product: syz
[  103.648239][ T5877] usb 3-1: SerialNumber: syz
[  103.681998][ T5878] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  103.861782][ T5877] usb 3-1: config 0 descriptor??
[  103.880763][ T5878] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  103.880787][ T5878] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  103.942811][ T5878] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  103.942837][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  103.942854][ T5878] usb 2-1: SerialNumber: syz
[  104.284077][ T5877] hso 3-1:0.0: Failed to find BULK IN ep
[  104.337724][ T5878] usb 2-1: 0:2 : does not exist
[  104.599211][ T5878] usb 2-1: USB disconnect, device number 2
[  104.717706][ T5946] udevd[5946]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  106.651043][ T5877] usb 3-1: USB disconnect, device number 4
[  107.081881][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  107.904073][ T6160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.69'.
[  107.906246][ T6160] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  108.262301][   T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  108.469006][   T31] usb 1-1: Using ep0 maxpacket: 8
[  108.476318][   T31] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  108.476343][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.476359][   T31] usb 1-1: Product: syz
[  108.476371][   T31] usb 1-1: Manufacturer: syz
[  108.476383][   T31] usb 1-1: SerialNumber: syz
[  108.562646][   T31] usb 1-1: config 0 descriptor??
[  108.568655][   T31] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244)
[  108.632345][   T36] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  108.671881][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  108.691893][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  108.701890][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  108.711899][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  108.721886][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  108.731878][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  108.741889][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  108.751894][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  109.684111][   T36] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  109.684135][   T36] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  109.685254][   T36] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  109.685277][   T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  109.685331][   T36] usb 2-1: SerialNumber: syz
[  110.037218][   T36] usb 2-1: 0:2 : does not exist
[  110.066442][   T31] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -71
[  110.066748][   T31] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  110.098415][   T31] usb 1-1: USB disconnect, device number 2
[  110.300244][   T36] usb 2-1: USB disconnect, device number 3
[  110.390981][ T5946] udevd[5946]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  114.051971][ T5877] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  114.202096][ T5877] usb 4-1: Using ep0 maxpacket: 8
[  114.208538][ T5877] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  114.208555][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.208564][ T5877] usb 4-1: Product: syz
[  114.208571][ T5877] usb 4-1: Manufacturer: syz
[  114.208577][ T5877] usb 4-1: SerialNumber: syz
[  114.507134][ T5877] usb 4-1: config 0 descriptor??
[  114.759203][ T5877] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244)
[  115.194696][ T5877] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -71
[  115.194993][ T5877] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  115.266260][ T5877] usb 4-1: USB disconnect, device number 4
[  117.329092][ T5878] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  117.351977][ T5877] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  117.480043][ T5878] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  117.480075][ T5878] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  117.480086][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.517057][ T5878] usb 2-1: config 0 descriptor??
[  117.529067][ T5878] pwc: Askey VC010 type 2 USB webcam detected.
[  117.551755][ T5877] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  117.551891][ T5877] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  117.562915][ T5877] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  117.562941][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  117.563011][ T5877] usb 3-1: SerialNumber: syz
[  117.693419][ T5901] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  117.870575][ T5877] usb 3-1: 0:2 : does not exist
[  117.900850][ T5901] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  117.900878][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  117.900895][ T5901] usb 4-1: Product: syz
[  117.901032][ T5901] usb 4-1: SerialNumber: syz
[  117.917291][ T5901] usb 4-1: config 0 descriptor??
[  118.435231][ T5878] pwc: recv_control_msg error -32 req 02 val 2b00
[  118.685589][ T5878] pwc: recv_control_msg error -32 req 02 val 2700
[  118.817027][ T5878] pwc: recv_control_msg error -32 req 02 val 2c00
[  118.884688][ T5878] pwc: recv_control_msg error -32 req 04 val 1000
[  118.896448][ T5878] pwc: recv_control_msg error -32 req 04 val 1300
[  118.906139][ T5878] pwc: recv_control_msg error -32 req 04 val 1400
[  118.907477][ T5878] pwc: recv_control_msg error -32 req 02 val 2000
[  118.923037][ T5878] pwc: recv_control_msg error -32 req 02 val 2100
[  118.937340][ T5878] pwc: recv_control_msg error -32 req 04 val 1500
[  118.937783][    C0] raw-gadget.0 gadget.1: ignoring, device is not running
[  118.938012][ T5878] pwc: recv_control_msg error -32 req 02 val 2500
[  118.938373][    C0] raw-gadget.0 gadget.1: ignoring, device is not running
[  118.938501][ T5878] pwc: recv_control_msg error -32 req 02 val 2400
[  118.938837][    C0] raw-gadget.0 gadget.1: ignoring, device is not running
[  118.939018][ T5878] pwc: recv_control_msg error -32 req 02 val 2600
[  118.939366][    C0] raw-gadget.0 gadget.1: ignoring, device is not running
[  118.939494][ T5878] pwc: recv_control_msg error -32 req 02 val 2900
[  118.939828][    C0] raw-gadget.0 gadget.1: ignoring, device is not running
[  118.940009][ T5878] pwc: recv_control_msg error -32 req 02 val 2800
[  118.940544][    C0] raw-gadget.0 gadget.1: ignoring, device is not running
[  118.941011][ T5878] pwc: recv_control_msg error -32 req 04 val 1100
[  118.941462][    C0] raw-gadget.0 gadget.1: ignoring, device is not running
[  119.046876][ T5878] pwc: recv_control_msg error -32 req 04 val 1200
[  119.084026][ T5901] hso 4-1:0.0: Failed to find BULK IN ep
[  119.773569][ T6330] Zero length message leads to an empty skb
[  119.884776][ T5878] pwc: Registered as video103.
[  119.888173][ T5878] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5
[  119.981346][ T5877] usb 3-1: USB disconnect, device number 5
[  120.205055][ T5878] usb 2-1: USB disconnect, device number 4
[  121.779350][ T5844] usb 4-1: USB disconnect, device number 5
[  121.809751][ T6305] udevd[6305]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  126.171996][   T31] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  126.340005][   T37] audit: type=1326 audit(1775679812.318:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6389 comm="syz.1.125" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb20bfdc819 code=0x0
[  126.345909][   T31] usb 3-1: Using ep0 maxpacket: 8
[  126.710250][   T31] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  126.710278][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.710293][   T31] usb 3-1: Product: syz
[  126.710305][   T31] usb 3-1: Manufacturer: syz
[  126.710316][   T31] usb 3-1: SerialNumber: syz
[  126.730751][   T31] usb 3-1: config 0 descriptor??
[  126.784899][   T31] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244)
[  127.382007][   T31] radio-usb-si4713 3-1:0.0: probe with driver radio-usb-si4713 failed with error -71
[  127.382332][   T31] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  127.439740][   T31] usb 3-1: USB disconnect, device number 6
[  127.672048][ T5899] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  127.697401][ T6411] syzkaller0: entered promiscuous mode
[  127.697425][ T6411] syzkaller0: entered allmulticast mode
[  127.793578][ T6412] netlink: 44 bytes leftover after parsing attributes in process `syz.1.131'.
[  127.848866][ T5899] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  127.848884][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  127.848894][ T5899] usb 5-1: Product: syz
[  127.848901][ T5899] usb 5-1: SerialNumber: syz
[  127.854219][ T5899] usb 5-1: config 0 descriptor??
[  128.345596][ T6409] netlink: 'syz.4.130': attribute type 4 has an invalid length.
[  128.794613][ T5878] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  129.466601][ T5878] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  129.466652][ T5878] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  129.466672][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.504099][ T5878] usb 1-1: config 0 descriptor??
[  129.509787][ T5878] pwc: Askey VC010 type 2 USB webcam detected.
[  129.943442][ T5878] pwc: recv_control_msg error -32 req 02 val 2b00
[  129.944326][ T5878] pwc: recv_control_msg error -32 req 02 val 2700
[  129.970153][ T5878] pwc: recv_control_msg error -32 req 02 val 2c00
[  129.970725][ T5878] pwc: recv_control_msg error -32 req 04 val 1000
[  129.971283][ T5878] pwc: recv_control_msg error -32 req 04 val 1300
[  129.992155][ T5878] pwc: recv_control_msg error -32 req 04 val 1400
[  129.993000][ T5878] pwc: recv_control_msg error -32 req 02 val 2000
[  129.993798][ T5878] pwc: recv_control_msg error -32 req 02 val 2100
[  130.199136][ T5878] pwc: recv_control_msg error -71 req 02 val 2500
[  130.199637][ T5878] pwc: recv_control_msg error -71 req 02 val 2400
[  130.200090][ T5878] pwc: recv_control_msg error -71 req 02 val 2600
[  130.200529][ T5878] pwc: recv_control_msg error -71 req 02 val 2900
[  130.200990][ T5878] pwc: recv_control_msg error -71 req 02 val 2800
[  130.201654][ T5878] pwc: recv_control_msg error -71 req 04 val 1100
[  130.255161][ T5878] pwc: recv_control_msg error -71 req 04 val 1200
[  130.324364][ T5878] pwc: Registered as video103.
[  130.340997][ T5878] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6
[  130.368396][ T5878] usb 1-1: USB disconnect, device number 3
[  130.527399][   T36] usb 5-1: USB disconnect, device number 3
[  131.881955][ T5844] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  132.031969][ T5844] usb 1-1: Using ep0 maxpacket: 8
[  132.048296][ T5844] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  132.048313][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.048323][ T5844] usb 1-1: Product: syz
[  132.048329][ T5844] usb 1-1: Manufacturer: syz
[  132.048336][ T5844] usb 1-1: SerialNumber: syz
[  132.086735][ T5844] usb 1-1: config 0 descriptor??
[  132.091383][ T5844] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244)
[  132.718234][ T5844] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -71
[  132.718740][ T5844] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  132.749923][ T5844] usb 1-1: USB disconnect, device number 4
[  132.750620][ T6256] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.827980][ T1322] ieee802154 phy0 wpan0: encryption failed: -22
[  132.828038][ T1322] ieee802154 phy1 wpan1: encryption failed: -22
[  133.032290][ T5844] ==================================================================
[  133.032304][ T5844] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130
[  133.032338][ T5844] Read of size 8 at addr ffffc9000e872008 by task kworker/0:3/5844
[  133.032349][ T5844] 
[  133.032368][ T5844] CPU: 0 UID: 0 PID: 5844 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  133.032387][ T5844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  133.032395][ T5844] Workqueue: usb_hub_wq hub_event
[  133.032424][ T5844] Call Trace:
[  133.032431][ T5844]  <TASK>
[  133.032437][ T5844]  dump_stack_lvl+0xe8/0x150
[  133.032458][ T5844]  print_report+0xba/0x230
[  133.032475][ T5844]  ? __list_add_valid_or_report+0x4e/0x130
[  133.032490][ T5844]  kasan_report+0x117/0x150
[  133.032505][ T5844]  ? __list_add_valid_or_report+0x4e/0x130
[  133.032521][ T5844]  __list_add_valid_or_report+0x4e/0x130
[  133.032536][ T5844]  kcov_remote_stop+0x457/0x680
[  133.032553][ T5844]  hub_event+0x49d8/0x4f60
[  133.032584][ T5844]  ? __pfx_hub_event+0x10/0x10
[  133.032601][ T5844]  ? process_scheduled_works+0xa8d/0x18c0
[  133.032620][ T5844]  ? process_scheduled_works+0xa8d/0x18c0
[  133.032637][ T5844]  process_scheduled_works+0xb6e/0x18c0
[  133.032664][ T5844]  ? __pfx_process_scheduled_works+0x10/0x10
[  133.032682][ T5844]  ? assign_work+0x3d5/0x5e0
[  133.032700][ T5844]  worker_thread+0xa53/0xfc0
[  133.032738][ T5844]  kthread+0x388/0x470
[  133.032752][ T5844]  ? __pfx_worker_thread+0x10/0x10
[  133.032769][ T5844]  ? __pfx_kthread+0x10/0x10
[  133.032782][ T5844]  ret_from_fork+0x51e/0xb90
[  133.032802][ T5844]  ? __pfx_ret_from_fork+0x10/0x10
[  133.032818][ T5844]  ? __switch_to+0xc7d/0x1450
[  133.032835][ T5844]  ? __pfx_kthread+0x10/0x10
[  133.032848][ T5844]  ret_from_fork_asm+0x1a/0x30
[  133.032868][ T5844]  </TASK>
[  133.032874][ T5844] 
[  133.032878][ T5844] The buggy address belongs to a vmalloc virtual mapping
[  133.032893][ T5844] Memory state around the buggy address:
[  133.032901][ T5844]  ffffc9000e871f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  133.032911][ T5844]  ffffc9000e871f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  133.032920][ T5844] >ffffc9000e872000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  133.032925][ T5844]                       ^
[  133.032932][ T5844]  ffffc9000e872080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  133.032939][ T5844]  ffffc9000e872100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[  133.032945][ T5844] ==================================================================
[  133.032964][ T5844] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  133.032974][ T5844] CPU: 0 UID: 0 PID: 5844 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  133.032989][ T5844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  133.032997][ T5844] Workqueue: usb_hub_wq hub_event
[  133.033012][ T5844] Call Trace:
[  133.033017][ T5844]  <TASK>
[  133.033022][ T5844]  vpanic+0x56c/0xa60
[  133.033042][ T5844]  ? __pfx_vpanic+0x10/0x10
[  133.033062][ T5844]  panic+0xc5/0xd0
[  133.033079][ T5844]  ? __pfx_panic+0x10/0x10
[  133.033097][ T5844]  ? __list_add_valid_or_report+0x4e/0x130
[  133.033112][ T5844]  ? rcu_is_watching+0x15/0xb0
[  133.033128][ T5844]  ? __list_add_valid_or_report+0x4e/0x130
[  133.033141][ T5844]  check_panic_on_warn+0x89/0xb0
[  133.033157][ T5844]  ? __list_add_valid_or_report+0x4e/0x130
[  133.033171][ T5844]  end_report+0x73/0x180
[  133.033184][ T5844]  ? __list_add_valid_or_report+0x4e/0x130
[  133.033200][ T5844]  kasan_report+0x128/0x150
[  133.033213][ T5844]  ? __list_add_valid_or_report+0x4e/0x130
[  133.033232][ T5844]  __list_add_valid_or_report+0x4e/0x130
[  133.033249][ T5844]  kcov_remote_stop+0x457/0x680
[  133.033267][ T5844]  hub_event+0x49d8/0x4f60
[  133.033298][ T5844]  ? __pfx_hub_event+0x10/0x10
[  133.033317][ T5844]  ? process_scheduled_works+0xa8d/0x18c0
[  133.033335][ T5844]  ? process_scheduled_works+0xa8d/0x18c0
[  133.033353][ T5844]  process_scheduled_works+0xb6e/0x18c0
[  133.033380][ T5844]  ? __pfx_process_scheduled_works+0x10/0x10
[  133.033400][ T5844]  ? assign_work+0x3d5/0x5e0
[  133.033417][ T5844]  worker_thread+0xa53/0xfc0
[  133.033445][ T5844]  kthread+0x388/0x470
[  133.033461][ T5844]  ? __pfx_worker_thread+0x10/0x10
[  133.033480][ T5844]  ? __pfx_kthread+0x10/0x10
[  133.033495][ T5844]  ret_from_fork+0x51e/0xb90
[  133.033516][ T5844]  ? __pfx_ret_from_fork+0x10/0x10
[  133.033536][ T5844]  ? __switch_to+0xc7d/0x1450
[  133.033557][ T5844]  ? __pfx_kthread+0x10/0x10
[  133.033575][ T5844]  ret_from_fork_asm+0x1a/0x30
[  133.033598][ T5844]  </TASK>
[  133.033729][ T5844] Kernel Offset: disabled