last executing test programs:

13.58189637s ago: executing program 0 (id=18):
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0)
ioctl$SG_SCSI_RESET(r0, 0x227b, 0x1000000000000) (async, rerun: 64)
syz_usb_connect(0x0, 0x1b, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x76, 0x3b, 0xd5, 0x40, 0x17ef, 0xa387, 0x4b3e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x6c, 0x2, 0xa0, 0x4}}]}}, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0}) (rerun: 64)

11.130365024s ago: executing program 0 (id=28):
r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc5, 0xaa, 0x6d, 0x8, 0xccd, 0x38, 0x9903, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x84, 0xdc, 0x6a}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d00090509"], 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="ff5f730f01c566b8c3008ec80f2f4639b8070000000f23c00f21f835020001000f23f80fc7adf00600000f322e0f01d1660f3882a1f17f00000f20d8", 0x3c}], 0x1, 0x6d, 0x0, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='fdinfo\x00')
getdents64(r3, &(0x7f0000000100)=""/43, 0x2b)
r4 = io_uring_setup(0x2292, &(0x7f00000009c0)={0x0, 0xb18, 0x10000, 0x2, 0x1cc})
syz_io_uring_setup(0x263f, &(0x7f0000000840)={0x0, 0x8e69, 0x186a, 0x0, 0x0, 0x0, r4}, 0x0, 0x0)
getdents64(r3, 0x0, 0xffffffff00000018)
r5 = dup(r2)
ioctl$PTP_EXTTS_REQUEST2(r5, 0x40603d07, &(0x7f0000000040))
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="04159a5fde54"], 0x0, 0x0})

10.228046094s ago: executing program 4 (id=33):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mlock2(&(0x7f00002a2000/0x3000)=nil, 0x3000, 0x1)
r0 = syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xc00000, 0x4, &(0x7f0000400000/0xc00000)=nil)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/pids.max\x00', 0x2, 0x0)
writev(r1, &(0x7f00000016c0)=[{&(0x7f0000000200)="665488704ebb63163b6bec63c2736a7d9ccefc30ba246f9dfffb1dc0b9264fe9a3ca4fe77b9cbc0103ed54e8c0371d3944482120c2aaa76eb8ded5e2d00314c670d635b369cb348f4df8a96737b4babaa3a3417b193d65029709ec6cc9a1345272723484d04d1ca049042076407975e1b05c8135755cafbf1373f4f9b279ae9eb0de93f74b07b7e938a252263244c0994e61e58ba0e2fecad721c6e18201989f8d6c2fa9057713f71244e072697f6f3267bd6b9fa4dde7edb1b2e403c1655cfdc804bc61447c490baff4c1701f796f671988aed0ed10308cd3f6ef", 0xdb}, {&(0x7f0000001700)="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", 0xf24}], 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14, 0x80800)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
syz_open_procfs(r0, &(0x7f0000000340)='net/rfcomm\x00')
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0})
r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000003a8407a730b93bf0280b3"], 0x0}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGREPORT(r3, 0x400c4807, &(0x7f00000000c0)={0x2, 0x2})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1})
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(0xffffffffffffffff, 0x7a6, &(0x7f0000000180)={0x7ae, 0x20000000008, 0x100000000026, 0x7ff, 0x4, 0x5})
socket$inet6_udp(0xa, 0x2, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x900, 0x0)
ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(0xffffffffffffffff, 0x7b0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00')
syz_open_procfs(0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)

7.220661705s ago: executing program 0 (id=44):
unshare(0x62040200)
syz_usb_connect(0x0, 0x4a, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd27, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x901}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

6.270948822s ago: executing program 0 (id=48):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, <r2=>0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000240)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x2066012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r5, 0x0, 0x11)
syz_fuse_handle_req(r1, &(0x7f0000008480)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xb0, 0x0, 0x0, [{{0x0, 0x2, 0x7, 0x3, 0x8, 0x80, {0x3, 0x10001, 0x4, 0x101, 0xffffffff, 0x55709b4b, 0xad33, 0x1, 0x40, 0x6000, 0x10000, r3, r4, 0x8, 0x1}}, {0x1, 0x7, 0x4, 0x5, '\'*-/'}}]}, 0x0, 0x0, 0x0})
mprotect(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x2000004)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x5}, &(0x7f0000000200)=0x8)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x0)
r7 = fcntl$dupfd(r6, 0x406, r6)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0xc0a85320, &(0x7f00000000c0)={0x1080, 0x4, 0xfffffffd})
ioctl$SG_GET_TIMEOUT(r7, 0x2202, 0x0)

5.863737705s ago: executing program 0 (id=49):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
setrlimit(0x40000000000008, &(0x7f0000000000))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x0, 0x2b36af21e7e087dc, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0)
r5 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
userfaultfd(0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0)
ioctl$TCSETSW2(r6, 0x5434, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = add_key$user(0x0, &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000340), 0x0, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000040)={r7, r7, r7}, &(0x7f0000000140)=""/58, 0x3a, &(0x7f0000000100)={&(0x7f0000000080)={'sha1-ssse3\x00'}})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007400000000b180006801400040020010000000000000000000000000001"], 0xac}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @multicast2}, {0x0, 0x2, @local}}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x0, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv6={{0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0x21}}, {0x0, 0x4, @private2}}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xffffffbb, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0xe, 0x0, 0x0)

5.578948181s ago: executing program 4 (id=50):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
bind$unix(r2, 0x0, 0x0)
r4 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$tcp_mem(r4, 0x0, 0x0)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xd)
ioctl$TCFLSH(r5, 0x540b, 0x2)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0)
ioctl$EXT4_IOC_MIGRATE(r1, 0x6609)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x400)
epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0xfffffff5, 0x0, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r7=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20000000110001010000", @ANYRES32=r7], 0x20}}, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14)

5.226363876s ago: executing program 2 (id=52):
set_mempolicy(0x1, &(0x7f0000000000)=0x9, 0x5) (async)
set_mempolicy(0x1, &(0x7f0000000000)=0x9, 0x5)
set_mempolicy(0x3, &(0x7f0000000080)=0x7, 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x201, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x27) (async)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f00000004c0)=0x27)
setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) (async)
setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000240)=@assoc_value={r3, 0xf3e}, 0x8)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) (async)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02)
syz_usbip_server_init(0x3)
syz_clone(0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_clone(0x41000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = userfaultfd(0x800)
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00003a6000/0x4000)=nil, 0x4000}, 0x7})

4.804740442s ago: executing program 1 (id=53):
ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, &(0x7f0000000000)=0x6)
r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x8a000, 0x0)
ftruncate(r0, 0x2)
r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x80000, &(0x7f0000000100)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1600}}], [{@fsuuid={'fsuuid', 0x3d, {[0x37, 0x64, 0x37, 0x31, 0x38, 0x66, 0x39, 0x36], 0x2d, [0x37, 0x34, 0x36, 0x37], 0x2d, [0x34, 0x37, 0x34, 0x66], 0x2d, [0x63, 0x33, 0x36, 0x36], 0x2d, [0x37, 0x66, 0x66, 0xc5, 0x32, 0x32, 0x51, 0x30]}}}, {@uid_gt={'uid>', 0xee00}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/ptp0\x00'}}]}}, 0x1, 0x0, &(0x7f0000000200)="f1b0c88e09fc395bdbb293b5283aed668c023a0f4faca7afdda3a5403193b40ffa6fe4772ec23d87d8af1c1fbcf35b2cb4d3d7a408ea5e03ad")
execveat(r1, &(0x7f0000000240)='./file0\x00', &(0x7f0000000440)={[&(0x7f0000000280)='-#-:&&\x00', &(0x7f00000002c0)='/dev/ptp0\x00', &(0x7f0000000300)='\\-&\x00', &(0x7f0000000340)='!\x00', &(0x7f0000000380)='^\x00', &(0x7f00000003c0)='/dev/ptp0\x00', &(0x7f0000000400)=':+##)&\x1c]^\x1d:\x00']}, &(0x7f00000004c0)={[&(0x7f0000000480)='\x00']}, 0x1000)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000500), 0x20101, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000540), 0xf, 0x10000)
pread64(r0, &(0x7f0000000580)=""/66, 0x42, 0x3)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000680)={{{@in=@local, @in6=@ipv4={""/10, ""/2, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @remote}}}}, &(0x7f0000000780)=0xe8)
getresgid(&(0x7f00000007c0)=<r4=>0x0, &(0x7f0000000800), &(0x7f0000000840))
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000880)={{{@in6=@private1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f0000000980)=0xe8)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000009c0)={{0x1, 0x1, 0x18, <r6=>r0, {<r7=>0xee01, <r8=>0xee01}}, './file0\x00'})
r9 = syz_mount_image$fuse(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x1004, &(0x7f0000000a00)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x2}}, {@blksize={'blksize', 0x3d, 0xa00}}, {@default_permissions}], [{@dont_measure}, {@subj_type}, {@euid_lt={'euid<', r5}}, {@dont_measure}, {@measure}, {@flag='ro'}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@uid_lt={'uid<', r7}}]}}, 0x1, 0x0, &(0x7f0000000b40)="ff09249a61581e5fc847fbbdede74c371f568143a102efe1f6cac767c5b416da2a612b8e30e8eb1a7c56238c23e27ca6225a2b4182dc45a69d722efd23a7badb564674563afe76f61bbe1f3ae149fb34d755e950833e21ff4ff8ac8debd9a7af4d68069276a0ff0e571cd5e1e4a709c76d6331f955e46bc30d149d1ed531beb739b526c58ff13555b57b1c87ee54acf25aac40270d3600fe131bc4f2c282fae28070d3057d38ff43d6eaed2918d6af09de97552069cf1fe751bec28b25fe66120ab30a340f2e8625514c0fc584da07a52e8033102f3299216996fdcdbfcaed3b103ee735a3dd983959d12e05fbc8b2a530ef1dae3b")
r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000c40), 0x52d102, 0x0)
fchown(r2, r3, r8)
openat$dir(0xffffffffffffff9c, &(0x7f0000000c80)='./file0\x00', 0x8200, 0x28)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r10, 0xc00c642d, &(0x7f0000000cc0)={0x0, 0x80000, <r11=>0xffffffffffffffff})
open_by_handle_at(r11, &(0x7f0000000d00)=@GFS2_SMALL_FH_SIZE={0x10, 0x4, {0x5, 0x2ecacbc, 0x0, 0x4a}}, 0x500000)
ioctl$PPPIOCGL2TPSTATS(r6, 0x80487436, &(0x7f0000000d40)="2b2eb77dca25d75a125b12e115e70686ec44593fcb901fe738718878b4297751a177944a2aa582d445838c497d18108df5")
r12 = fanotify_init(0x8, 0x40000)
ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000d80)={{0x9}, {0x4, 0xd73f}, 0x2})
setsockopt$packet_int(r10, 0x107, 0x1e, &(0x7f0000000dc0)=0xfcd, 0x4)
splice(r12, &(0x7f0000000e00)=0x6, r9, &(0x7f0000000e40)=0xffff, 0x5, 0x9)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000e80)={<r13=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r10, 0xc01064c2, &(0x7f0000000ec0)={<r14=>0x0, 0x0, r10})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r11, 0xc00864bf, &(0x7f0000000f00)={<r15=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000f40)={<r16=>0x0, 0x4f46d633828baa60})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r6, 0xc01064c2, &(0x7f0000000f80)={<r17=>0x0, 0x0, r10})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r11, 0xc01064c2, &(0x7f0000000fc0)={<r18=>0x0, 0x0, r6})
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r11, 0xc01064c5, &(0x7f0000001040)={&(0x7f0000001000)=[r13, 0x0, r14, r15, r16, r17, r18], 0x7})

4.292636253s ago: executing program 1 (id=54):
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0xab4, 0xc2002)
ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0xfffffffffffffffe)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0xffb)
fcntl$setstatus(r0, 0x4, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r3 = syz_open_pts(r2, 0xe0b03)
r4 = dup(r3)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3)
close_range(r1, 0xffffffffffffffff, 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000000140), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0x1000, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x10001, 'syz1\x00', 0x0})

4.08614598s ago: executing program 1 (id=56):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
r3 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc72, 0x0, 0x3}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r8 = dup(r7)
write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$IOMMU_VFIO_IOAS$GET(r8, 0x3b88, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x8, 0x0, @fd_index=0x8, 0x8, {}, 0x6, 0xa, 0x1, {0x0, r6, r8}})
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r9 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000240)={0x2000042, 0x1, 0x3}, 0x10)
close(0xffffffffffffffff)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
connect$unix(r8, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x8000000}, 0x6e)
syz_io_uring_setup(0x10f, &(0x7f0000000400)={0x0, 0xb3c5}, &(0x7f0000000240)=<r10=>0x0, &(0x7f0000000180)=<r11=>0x0)
syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x0, 0x4000, 0x1})
r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
flistxattr(r12, &(0x7f00000003c0)=""/48, 0x30)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
syslog(0x3, &(0x7f0000002180)=""/183, 0xb7)

3.516749659s ago: executing program 2 (id=58):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_DATA={0x3}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010102}}}, 0x84)

3.302464165s ago: executing program 2 (id=59):
mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0xffffffff)
lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0)
lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0)
unlink(&(0x7f00000003c0)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@textreal={0x8, &(0x7f0000000000)="66b9390a00000f320f20e06635000040000f22e01a320f01c8bad00466edbaf80c66b89742d38d66efbafc0cb09aeeb800008ec80f01c80f3566b91a0100000f32", 0x41}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
r4 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc72, 0x0, 0x3}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0x1, 0x1, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x88080000, 0x1, 0xff, 0x0, 0xfffd, 0x9}, 0x20)
syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x8, 0x0, @fd_index=0x8, 0x8, {0x0, r3}, 0x6, 0xa, 0x1})
io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_procs(r8, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)

2.992338358s ago: executing program 0 (id=61):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x1, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0xfff]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7fffffff}, @CTA_LABELS_MASK={0xc, 0x17, [0x6, 0x3]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x15)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x1410, 0x100, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4890)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000200)=0xf, 0x4)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r1)
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x80, r2, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xae}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2d3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x81}, 0x4000000)
syz_open_dev$sndctrl(&(0x7f00000003c0), 0x101, 0x202)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x237, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x1, 0x20, 0xc, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x0, 0xe, {0x9, 0x21, 0x3ff, 0x97, 0x1, {0x22, 0x368}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x10}}}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x250, 0xff, 0x7, 0x2, 0x10, 0xff}, 0x12, &(0x7f0000000480)={0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x6, 0xf, 0x9}]}, 0x5, [{0x8b, &(0x7f00000004c0)=@string={0x8b, 0x3, "829984c73511d43e701ea71bd48e02b1daccee862d3b2ea99ad605a864705ee893f8ba232eda10e8d570b206c921a66f82b21b94a18e7c421a55213009a5d5cd2e18b209ae637610eedba4174e883510ca2c111404cf0aee62f78bedf71e40daf62eed6257ddcf237b47b4b1cb8b94016dfc022579934f7cd706fb1d4b65361971d536a2af361d1967"}}, {0x33, &(0x7f0000000580)=@string={0x33, 0x3, "847cdd3bec5fbd3b645c9e642821fb78d529a191ca22b23adb3e4bdb1c1f53c16a6182eac69dc4405bdabdeb70cfb7f857"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x439}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1009}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x180a}}]})
gettid()
r3 = signalfd4(r1, &(0x7f0000000700)={[0x10]}, 0x8, 0x0)
ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0xb)
syz_open_dev$vim2m(&(0x7f0000000740), 0x1, 0x2)
socket(0x23, 0xa, 0x0)
r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000780)='.log\x00', 0x402040, 0x84)
ioctl$UI_SET_MSCBIT(r3, 0x40045568, 0x697)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)}, &(0x7f0000000840)=0x10)
r5 = add_key$fscrypt_v1(&(0x7f0000000880), &(0x7f00000008c0)={'fscrypt:', @auto=[0x31, 0x65, 0x34, 0x39, 0x64, 0x33, 0x61, 0x35, 0x35, 0x32, 0x32, 0x32, 0x38, 0x66, 0x66, 0x34]}, &(0x7f0000000900)={0x0, "cce04d2195508887a84c13fd6eeae322f8a7f60133e54669b043a37362fb56c90615dd1672ac03d3e49c78e02a9837dfbc8dc5cb6c51c654cc7d7bbfe914c706", 0x2c}, 0x48, 0xfffffffffffffffc)
keyctl$read(0xb, r5, &(0x7f0000000980)=""/226, 0xe2)
pipe(&(0x7f0000000a80)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000b80)={0x28, 0x3, 0x0, 0x0, <r7=>0x0, 0x0, 0x0, 0x8b, &(0x7f0000000ac0)="94de3c1c33fe43c4bd095e7f1e07912242b2bffe9b637d25364b4f734068d134fe38de242c14d8a9f685e67e87a6dabeb2c73b5e965840a657651095db408743a6f064424972547703415997c9eca86aac6e5b5eda81ee4ae3d828bada2e450382fd57b369ef9c125b26e2f367c15ee406b43d9741e4ced9649eec3824f85ad03890514eeb4faf00bbcba1"})
ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r6, 0x3b8c, &(0x7f0000000cc0)={0x30, r7, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x9, &(0x7f0000000bc0)=""/249})
lstat(&(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, r3, {0xee00, <r9=>0xffffffffffffffff}}, './file0\x00'})
keyctl$chown(0x4, r5, r8, r9)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendmmsg(r10, &(0x7f0000000e00), 0x0, 0x20008000)
ioctl$NBD_SET_SIZE_BLOCKS(r4, 0xab07, 0x6)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_WOWLAN(r11, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x20, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x8, 0x75}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x810)

2.859620442s ago: executing program 1 (id=62):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x2}, 0x1c)
close(r0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x80000)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0)
getsockname$packet(r4, &(0x7f0000000300)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r5, @ANYBLOB="0100000000000000240012000c000100627269646765000e14000200080007004a"], 0x44}}, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
r7 = socket(0x10, 0x2, 0x6)
sendmsg$nl_route_sched(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0)
r8 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r9 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r9, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
getsockname$packet(r7, &(0x7f00000001c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3)
bind$packet(r6, &(0x7f00000000c0)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendto$inet6(r6, &(0x7f0000000100)="0503460008003e00000002008100", 0x36, 0x0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f0000000100))
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r11 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r12 = socket$l2tp6(0xa, 0x2, 0x73)
close_range(r2, r12, 0x0)
r13 = dup(r11)
syz_kvm_setup_cpu$x86(r2, r13, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0, 0x1b}], 0x1, 0x40, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"])

2.208644971s ago: executing program 1 (id=64):
syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) (async)
r0 = syz_io_uring_setup(0x422d, &(0x7f0000000340)={0x0, 0xfffffffd, 0x10100, 0x3}, &(0x7f0000000000), &(0x7f0000000140)=<r1=>0x0) (async)
r2 = syz_io_uring_setup(0x1866, &(0x7f00000003c0), &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000100))
syz_io_uring_submit(r3, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
io_uring_enter(r0, 0x184d, 0x0, 0x42, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@multicast, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x66, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x4010001, 0x0, 0xfffffffc}}}}}, 0x0)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xee}}}}}]}}]}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x10, r2, 0x0) (async)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f0000000d40)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="0021be"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000200)={0x24, &(0x7f00000000c0)={0x20, 0x23, 0xa3, {0xa3, 0x23, "62e897a3b92c615ee9ea2e41abf110cf5c927669a6f3db1d3978bb119e80737e6e4b9e958b09cb7562599346fe0116947f10f1b0899a79605e82972ed9f9a434aed54fd7337fe6df340c18b030804cb65bce524010a852f7ef33b4e32c4eb0873619b3fb93e768e9cc52640b5bd88f3b3cc4266e3911759e4d4c7d214448c7e5ec5eac5f205d92013538bd2705a4757e9436a7eb5ed242f0bfc39ca6d3931bde9c"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x423}}, &(0x7f0000000180)={0x0, 0x22, 0x17, {[@global=@item_012={0x2, 0x1, 0x4, '{1'}, @local=@item_4={0x3, 0x2, 0x7, "4b623893"}, @local=@item_4={0x3, 0x2, 0x9, "4d4203d3"}, @local=@item_4={0x3, 0x2, 0x8, "50e5fe53"}, @main=@item_4={0x3, 0x0, 0x8, "77fe596f"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1000, 0x4, 0x1, {0x22, 0x3ea}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x40, 0x10, 0xb4, "d716b85483bfa9ceacd79807823107b3b61a5a2a6a992e43958f9ef9e37a24a7d89132ad40fe44c06e74f4a10af76886aec0bbb3811fd013bcfe6cbbc10ce95f95c4c7b8b676b8d178a5d9cc6567d0af9e3823b4cbe290ea9bb1abcf54a38e7e8127f91f2ef07ed8f416fac6616e4b6740ad8e71c7d453f7fbb2646ab0fb634f84d58e2ba10559d4361c42d7cc3e3b3599a1f564adff1ae6996e22a39b406ce449c0d7a2b0b6bf32b77c7d2f2f75003017f0a0ef"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x40}, &(0x7f0000000380)={0x20, 0x1, 0xdc, "90fef9ce07451a8f7ce7858261e430906e24b9d9c007141492bd2acad632db2392d841119921c4febf2550bdd6006c356d06dcc996984fd63a108fb52bd3a880c4f9f96e435fa07df900351c9a266eb425ef1138cd6def19afd3975200658310a355142d79acab214ea23390d68ebdfe33d751802083ff0d03675bfc70387690121b7363f93608a9d68d6fd1f7387df41a1560a2ffb950cbdd35c4622608df178fe81b08a6ad502b42d312da1c16b302eaa453d86b3b14fcddf5ed5b59f03728ea2833d58f2a8c5e0fe5aa399e5c080e12813a66ede64dc32383990a"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0xe5}})
syz_usb_control_io$hid(r4, 0x0, 0x0)

2.116530829s ago: executing program 4 (id=65):
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$P9_RSTAT(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="5c0000007d010000005500010107000000000000000002000000000000000000000101040000050000000f002f6465762f6472692f63617264230011002f6465762f76686f73742d76736f636b0001002f0100210000000000000000"], 0x5c)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
openat$ppp(0xffffffffffffff9c, 0x0, 0x400000, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'lo\x00'})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000240))
pipe(&(0x7f0000000d00)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc)
sendmsg$nl_route(r3, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=@delnexthop={0x60, 0x69, 0x400, 0x70bd29, 0x25dfdbfd, {}, [{0x8}, {0x8}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}, {0x8}, {0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x24008000}, 0x10)
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1)
sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="fc00000019000100fdffffff00000000ac1414bb000000000000010000000000ac1414aa00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000004400080064010101000000000000000000000000000000002b00000000000000fe80000000000000000000000000000c00"/180], 0xfc}, 0x1, 0x0, 0x0, 0x8081}, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0)
r5 = fsopen(&(0x7f00000000c0)='overlay\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="5400000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800800010073697400286e2beccfdae179cb9e2cebe9d7db95d300028014000b00fc01000007000000008a8667191d71290000000000000148"], 0x54}}, 0x0)

1.872947053s ago: executing program 3 (id=66):
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00')
utimensat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x100)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$sock_int(r2, 0x1, 0x34, &(0x7f00000004c0)=0x1, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000240)={0x0, 0x44, &(0x7f0000000200)={&(0x7f00000000c0)={0x20, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x0)
socket$packet(0x11, 0x2, 0x300)
ioctl$TCXONC(r1, 0x5608, 0x2)

1.787906062s ago: executing program 3 (id=67):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476005e0400028008000a00", @ANYRES32], 0x3c}}, 0x0)

1.576454892s ago: executing program 2 (id=68):
r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CHANGE_FD(r0, 0x301, 0xffffffffffffffff)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={<r2=>0x0, @loopback, @multicast2}, &(0x7f00000000c0)=0xc)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getqdisc={0x30, 0x26, 0x20, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x10, 0xd}, {0x1, 0x3}, {0x4, 0xb}}, [{0x4}, {0x4}, {0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x20000090)
r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x64}}, 0x0)
readv(r3, &(0x7f0000000340)=[{&(0x7f0000000480)=""/14, 0xe}, {&(0x7f0000000080)=""/30, 0x1e}, {&(0x7f0000003a40)=""/4097, 0x1001}, {&(0x7f0000001680)=""/4082, 0xff2}], 0x4)

1.536077823s ago: executing program 3 (id=69):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time\x00', 0x275a, 0x0)
write$tcp_mem(0xffffffffffffffff, &(0x7f0000000200)={0xfffffffffffffffe, 0x20, 0xfffffffffffffffb, 0x20, 0x20000000000005}, 0x48)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000500", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})

1.479570436s ago: executing program 2 (id=70):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@textreal={0x8, &(0x7f0000000040)="66b9390a00000f320f20e06635000040000f22e01a320f01c8bad01dd1d1edbaf80c66efdffcfe0c0c9aeeb800008ec80f01c80f3566b91a0100000f32", 0x3d}], 0x1, 0x43, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400680, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.320688492s ago: executing program 2 (id=71):
syz_usb_connect(0x3, 0x2d, &(0x7f0000000180)=ANY=[@ANYRES64, @ANYRESOCT=0x0], 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
gettid()
r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x841, 0x40, 0x2, {0x9, @sdr={0x0, 0xffffffff}}, 0x9b7})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, <r1=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4})

1.297712956s ago: executing program 3 (id=72):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
r3 = syz_io_uring_setup(0xa07, &(0x7f0000000200)={0x0, 0xcc72, 0x0, 0x3}, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r8 = dup(r7)
write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$IOMMU_VFIO_IOAS$GET(r8, 0x3b88, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x8, 0x0, @fd_index=0x8, 0x8, {}, 0x6, 0xa, 0x1, {0x0, r6, r8}})
io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r9 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000240)={0x2000042, 0x1, 0x3}, 0x10)
close(0xffffffffffffffff)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
connect$unix(r8, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x8000000}, 0x6e)
syz_io_uring_setup(0x10f, &(0x7f0000000400)={0x0, 0xb3c5}, &(0x7f0000000240)=<r10=>0x0, &(0x7f0000000180)=<r11=>0x0)
syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x0, 0x4000, 0x1})
r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]})
flistxattr(r12, &(0x7f00000003c0)=""/48, 0x30)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
syslog(0x3, &(0x7f0000002180)=""/183, 0xb7)

1.218803076s ago: executing program 4 (id=73):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x1)
write$binfmt_script(r0, 0x0, 0x0)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0xc4)
r2 = socket$kcm(0xa, 0x922000000003, 0x11)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, &(0x7f0000000000)={0x6})
setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f00000000c0), 0x4)
r4 = socket$kcm(0x10, 0x2, 0x4)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000740)={0x30}, 0x30)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00')
fchdir(r6)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r7)
close(r7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x183741, 0x42)
sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f", 0x3c}], 0x1}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c)
socket$inet6(0xa, 0x1, 0x2)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x47d4f4969e9397ca, 0xc, 0x5, 0x8}}}, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000f40)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000780)}, {&(0x7f00000002c0)="80dd606ce630aead76222577452ed8f5727f0d7f621aa944283d43e18c24fcec75de74ec7624d6f43c962a50763535f8a18b7d708f3a413f9d1db56c8504fecb7bb75d50624067bcd213a6e9a7cbf6ba39c8d9d6cc32e64b0e9c3b1bc69ec2828f0ad9b1c7760c8b73ce20deae4e3af0e92564f78eba058b25b84f0fb755c465b9c70183920f9c237c91f408016d4b66e1eee0ba76ef4c5b1e03b3a63eda4b5acd7066fcdb358e602dc93d5789c0e553b1bf3832059edbd2c084b2f4c48ba4add6a9f2d0182cb110ff3d1d9c36cef73a0ece1e62b74e841b420d60c2b7e825302ee972c88414f7cd90cbfa2795ad", 0xee}], 0x2}, 0x40)

351.9705ms ago: executing program 3 (id=74):
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x0, 0x18)
ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000040))
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)={0x4, &(0x7f00000001c0)=[{0x8, 0x0, 0x2, 0x6}, {0xdb, 0x9, 0xd}, {0x0, 0x7, 0xb0, 0x6}, {0x7e, 0x1, 0x2, 0x9}]})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0)
ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000280)={0x8, 0xffff, [{0x6, 0x0, 0x5}, {0x5, 0x0, 0xd3}, {0x4, 0x0, 0x9}, {0x800, 0x0, 0x3}, {0x12, 0x0, 0x8000000000000001}, {0x1000, 0x0, 0x2}, {0x10000, 0x0, 0x3}, {0x7, 0x0, 0x8}]})
vmsplice(r1, &(0x7f0000000540)=[{&(0x7f0000000340)="0c3150319d52963c6446eb28d46780b0f3592b00e2a5d88c8fca55094dec8751ce45c308c988945fcc581ec6d220b624000d7580e11c3cc5b06f6783e13f", 0x3e}, {&(0x7f0000000380)="7bf3e3d49b7b222c9925c4bca1f651295a02e34f7d65a35c56ff10da563a9ba400f293a7f31491992c1ef226dfe23a4318732de6a572882d127fc5b33741f6f75bf16743f3720ec4b707b696043bb35bec8a29098e3b54701f2842dee6da628d2741ff575ebca510b24bc1aa14c5fbcb9821755f58d6b6ca875146e1b4195caea62c46860d597ac9ed1e1b8342095266a0d26fce07e5f7f96581ff8ee9ba81db3a75871c8ad4ac8a4b96e97b44c6f7b5045cec71ffc417c48c7d932d04bbd0aa3b7ce479423b0a710d05de9e6b7aadf96f98482f2542faf49bf7a6f13846", 0xde}, {&(0x7f0000000480)="ca15c2ce5e488ef9e25ed16988821208f46022d6ff70a6561ae2559f050be8a6ece122725704d901bb7de196a774", 0x2e}, {&(0x7f00000004c0)="33eee074fa1d0a151b3d284d15559197301d846dd886c3c11fa7266901814f112ef3850e52e52a", 0x27}, {&(0x7f0000000500)="79539cb70c6b830f31d946", 0xb}], 0x5, 0x1)
ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x2)
r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000600), 0x8001, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r2)
write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000640)={0xa, {0x5, 0x4, 0x40}}, 0xa)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000680)={0x7, 'bridge_slave_1\x00', {0x10}, 0x3})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), r3)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r3)
sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x48, r5, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_SEQ={0x11, 0xa, "b44b19f93cd038ffcc41bd39cd"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x48}}, 0x8040)
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000880)={<r6=>0x0, 0x6}, &(0x7f00000008c0)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000900)={r6, 0x240000}, 0xc)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000a40)={&(0x7f0000000940), 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x50, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0x400}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8841}, 0x20000041)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000a80)=0x5, 0x4)
renameat(r0, &(0x7f0000000ac0)='./file0\x00', r0, &(0x7f0000000b00)='./file0\x00')
r7 = dup2(r3, r3)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r7, 0x8010671f, &(0x7f0000001b40)={&(0x7f0000000b40)=""/4096, 0x1000})
ioctl$PPPIOCSDEBUG(r2, 0x40047440, &(0x7f0000001b80)=0x7)
syz_open_dev$usbfs(&(0x7f0000001bc0), 0x7, 0x40100)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001c40), r3)
sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000001f40)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001c80)={0x274, r8, 0x1, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf30}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'ip6gretap0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x1a4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_batadv\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x691cfcd0}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3e}}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb0000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}, 0xd}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3522}]}]}, 0x274}, 0x1, 0x0, 0x0, 0x1}, 0x810)
utimensat(r0, &(0x7f0000001f80)='./file0\x00', &(0x7f0000001fc0)={{0x0, 0x2710}, {0x77359400}}, 0x100)
socket$packet(0x11, 0x2, 0x300)
ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000002000)={{0xeeee0000, 0xeeef0000, 0x8, 0xa, 0x6, 0x0, 0x4, 0xfc, 0x10, 0x8, 0x8, 0x66}, {0xffff1000, 0x6bca7e68727324ea, 0xd, 0xfe, 0x5, 0x8, 0x2, 0xec, 0x4, 0xb6, 0x0, 0x9b}, {0x88082804, 0x6000, 0x10, 0x7, 0xf2, 0x3, 0x7, 0x5, 0xaf, 0x3, 0x53, 0x5}, {0x0, 0xeeef0000, 0x19, 0x4, 0x4, 0x9, 0xfb, 0x9, 0x0, 0x1, 0x8, 0x9}, {0xd000, 0xeeef0000, 0xc, 0x7, 0x9, 0x45, 0x2, 0x5, 0x5, 0x9, 0xbe, 0x40}, {0x5000, 0x5000, 0x17, 0x6, 0x81, 0x81, 0x19, 0xb, 0x6, 0xef, 0x4, 0x81}, {0x1d002, 0x80a0000, 0x4, 0x2, 0x4, 0xf, 0x8, 0x7, 0x5, 0x9, 0x8, 0x7}, {0x100001, 0x80a0000, 0x56118b88b50594f8, 0x4, 0x1, 0x8, 0x9, 0x6, 0xb6, 0x8, 0xb, 0x8}, {0x4000, 0x7}, {0x8080000, 0x76}, 0x0, 0x0, 0x4000, 0x120000, 0x4, 0x2c00, 0x2, [0x4, 0x4, 0x7, 0x200]})
symlinkat(&(0x7f0000002140)='./file0\x00', r2, &(0x7f0000002180)='./file0\x00')

315.196784ms ago: executing program 4 (id=75):
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20c0, 0x0) (async)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x0) (async)
write$binfmt_misc(r0, &(0x7f0000000080)="d14a80941eb6ebda3adc5da03360d504ebcac3480920179e29e4c74683edbb7e515e2ee7232bbe9c7f2015879c225ebb4738c75e3f1a0f6a69e2946bed931f9f5adfa80d031591a88dde6923bcb159ac317c504982974d1aaee90302c445316d79935a3e7e4c38b252673c133da369874446aadaae46e538e0e44bfe2f4264d0bfb920898cdb0869df7881bf195ab3334638afeb13720febe39263c0948ff15fce000dc9dd4289b72c9f5d8fff169654a22d4a96f4b686c444893106ebfdeffacd96fe340beb2e067c911e7d7dc6ee0eb9ed2e3e31de3bb175208840c8d603a4b291b304351df2a96f55", 0xea) (async)
syz_usb_connect(0x2, 0xb7, &(0x7f0000000400)=ANY=[@ANYBLOB="12010003cf7e8f4040201f7262f2010203010902a500018104004f0904870b06020102092403050703020496062404029cfe09050b00400080000007250181f7090009050d0000046404050725010300bfbb0905020200040a410307250103070c000725010108040009050b001000030509072501010702000905050000042703080905010c00024e090709050a0c20000501000725010102d00009058008200000b4ac09050701ff03043b1000"/183], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x7, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000600), 0x40000, 0x0) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$vcsn(0x0, 0x3f0b, 0x117001) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340), &(0x7f0000000300)) (async)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0xc000, 0x0) (async)
r4 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) (async)
ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000002dc0)=@multiplanar_userptr={0x0, 0x1, 0x4, 0x100, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x47, 0x2, 0x0, "488dc807"}, 0x80000, 0x2, {0x0}, 0xfffffffc}) (async)
ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000140)={0x4000000}) (async)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000005cc96b56000000080004000000", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48)
sendmsg$xdp(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)="10bd82bb8aa405deba14313420b527c370d8c457ba85af0867a64bbd217647bb6fa1e1101f04c2b93cce4b0f1cb15099a24bf73155bb9c937103917c5b376953f5", 0x41}, {&(0x7f0000000400)}, {&(0x7f00000004c0)="6d2ad9b9402584ca231a114eb355a4244623614b050d73fcc392de7653ded72ac5a2addb0645c3713122b8dc81eeaa4a9dfbaa391a1262bf41f4620de7cafc19d52ff48381de1139b4be9d451ac5539f225a2e89a7617ef7d9161e11104dc62da3f4fc6f6b8e66c3157263a462500b0fc3e96e5d8daceafe6b3c71dd5c788d7a14d8027caee2a1348e8ea1ed015dc606ecb9", 0x92}, {&(0x7f0000000580)="ab2ddb79f2d836c79af7c913f5f2094ca04d2f0a428c7a7323556069b3ab1f915963cd736cd0ab410e787cb0ff8cfde03f728313f5383403661b2f801fbb88e39ca228510b6bed19e838c56918a6caccb0b9f9134e77ad", 0x57}, {&(0x7f0000000640)="324609d55da0bf918fd5cb64fc4acb73c5f5ddbe2c082b24b5de7daacec3b1d31047f934285121d7b6b4c403f57207897452db19055a27ea799e067b8cae772568576a3cd4efbc868edbeec1b9ee6c953e65e197f822f0ab4b0493938752985cffd8a8e489741ce3ad4e30acfbb5", 0x6e}, {0x0}], 0x6, 0x0, 0x0, 0x4}, 0x4008810) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf090000000000004509010000000000ac00000000000000bf98000000000000560800000000000085000000fd000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x107342, 0x0) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) (async)
ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, &(0x7f0000000240)={0x6, @pix={0x7, 0x1, 0x4c47504a, 0x5, 0x45fa, 0x966, 0xa, 0xba, 0x1, 0x7, 0x0, 0x5}})
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e1"], 0x0) (async)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)

108.507987ms ago: executing program 4 (id=76):
unshare(0x8040600)
r0 = socket(0x22, 0x2, 0x4)
getsockname(r0, 0x0, 0x0)
rt_sigaction(0x1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0))
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
lseek(r1, 0x9, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffe}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaa2439b60a41318988a8101081000f000004f0fcf2ac530884"], &(0x7f00000001c0)={0x0, 0x2, [0x88b, 0xfa9, 0x5b9, 0x3f3]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3})
r4 = socket(0x10, 0x3, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x361080, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r8 = socket$inet(0x2, 0x6, 0x0)
connect$inet(r8, &(0x7f0000000140)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10)
write$FUSE_NOTIFY_DELETE(r7, &(0x7f00000000c0)=ANY=[@ANYRES64=r4], 0x2a)
r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffd)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r1, 0x3b8b, &(0x7f0000000300)={0x10, 0x1})
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001a00a10a29bd7000040045000400"/28], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x0, 0x168, 0x0, 0x0, 0xa, 0x350, 0x250, 0x250, 0x350, 0x250, 0x3, 0x0, {[{{@uncond, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x300, 0x6, 0x1001}}}, @common=@hl={{}, {0x1, 0x3}}]}, @common=@unspec=@CONNSECMARK={0x0, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@hl={{}, {0x0, 0x7}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0xffff}, 0x0, 0x31}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x357)
syz_kvm_setup_cpu$x86(r6, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0)

61.442917ms ago: executing program 3 (id=77):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'wlan0\x00', &(0x7f0000000100)=@ethtool_rxnfc={0x4a, 0x1, 0xffffffff, {0xe, @tcp_ip6_spec={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4e22, 0x4e23, 0x6}, {0x0, @random='\x00\x00 \x00', 0xa, 0x4b5, [0x6, 0x5]}, @ah_ip6_spec={@dev={0xfe, 0x80, '\x00', 0x27}, @mcast1, 0x1, 0x8}, {0x0, @remote, 0x7, 0x5, [0x5, 0x47000000]}, 0x67e4, 0x28}}})
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x200, 0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth0\x00', <r4=>0x0})
sendto$packet(r2, &(0x7f0000000180)="0b041000e0ff020002004788aa96a13bb1000000000088641100", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000182000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)

0s ago: executing program 1 (id=78):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$qrtr(0x2a, 0x2, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
sync_file_range(r2, 0x2249, 0x7, 0x6)

0s ago: executing program 3 (id=79):
r0 = socket$inet6(0xa, 0x1, 0x100)
setsockopt$inet6_mreq(r0, 0x29, 0x1e, &(0x7f0000000100)={@remote}, 0x14)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r1=>0x0})
add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="f3710610a4456f794f44599de5589b5ffcae02a400849014b987d303a1e2b0961eebce6250b0ea6d1732f93dd50aa2f3dec16dfd3967c0a51f1ffa7e9f7a460c", 0x40, 0xfffffffffffffff8)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.242' (ED25519) to the list of known hosts.
[   82.723554][ T5830] cgroup: Unknown subsys name 'net'
[   82.859778][ T5830] cgroup: Unknown subsys name 'cpuset'
[   82.868451][ T5830] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   84.424577][ T5830] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   87.033290][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   87.077205][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   87.078186][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   87.084970][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   87.093191][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   87.099407][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   87.106433][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   87.113141][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   87.126463][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   87.127943][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   87.135118][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   87.141729][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   87.155972][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   87.165658][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   87.175682][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   87.185712][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   87.185906][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   87.212779][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   87.220737][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   87.230049][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   87.231161][ T5857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   87.237701][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   87.245825][ T5857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   87.252524][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   87.266622][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   87.931549][ T5859] chnl_net:caif_netlink_parms(): no params data found
[   88.037160][ T5863] chnl_net:caif_netlink_parms(): no params data found
[   88.131037][ T5865] chnl_net:caif_netlink_parms(): no params data found
[   88.307189][ T5864] chnl_net:caif_netlink_parms(): no params data found
[   88.339198][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.346569][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.353917][ T5859] bridge_slave_0: entered allmulticast mode
[   88.361433][ T5859] bridge_slave_0: entered promiscuous mode
[   88.369531][ T5860] chnl_net:caif_netlink_parms(): no params data found
[   88.403132][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.410380][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.417963][ T5859] bridge_slave_1: entered allmulticast mode
[   88.425467][ T5859] bridge_slave_1: entered promiscuous mode
[   88.532099][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.539701][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.549647][ T5865] bridge_slave_0: entered allmulticast mode
[   88.557211][ T5865] bridge_slave_0: entered promiscuous mode
[   88.580844][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.594360][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.619959][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.627338][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.634478][ T5863] bridge_slave_0: entered allmulticast mode
[   88.641980][ T5863] bridge_slave_0: entered promiscuous mode
[   88.649819][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.657480][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.664621][ T5865] bridge_slave_1: entered allmulticast mode
[   88.672686][ T5865] bridge_slave_1: entered promiscuous mode
[   88.728954][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.737060][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.744225][ T5863] bridge_slave_1: entered allmulticast mode
[   88.753860][ T5863] bridge_slave_1: entered promiscuous mode
[   88.781229][ T5859] team0: Port device team_slave_0 added
[   88.849630][ T5859] team0: Port device team_slave_1 added
[   88.871902][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.883643][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.938025][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.962008][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.998961][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.006590][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.013744][ T5860] bridge_slave_0: entered allmulticast mode
[   89.022007][ T5860] bridge_slave_0: entered promiscuous mode
[   89.042049][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.049517][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.056957][ T5864] bridge_slave_0: entered allmulticast mode
[   89.064164][ T5864] bridge_slave_0: entered promiscuous mode
[   89.072019][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.079198][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.086393][ T5864] bridge_slave_1: entered allmulticast mode
[   89.093965][ T5864] bridge_slave_1: entered promiscuous mode
[   89.116303][ T5863] team0: Port device team_slave_0 added
[   89.123081][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.132707][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.140076][ T5860] bridge_slave_1: entered allmulticast mode
[   89.147982][ T5860] bridge_slave_1: entered promiscuous mode
[   89.156455][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.163450][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.189866][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.228961][ T5863] team0: Port device team_slave_1 added
[   89.263958][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.271200][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.297746][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.315778][ T5843] Bluetooth: hci2: command tx timeout
[   89.321418][ T5856] Bluetooth: hci1: command tx timeout
[   89.321429][ T5857] Bluetooth: hci3: command tx timeout
[   89.332924][ T5853] Bluetooth: hci0: command tx timeout
[   89.345690][ T5865] team0: Port device team_slave_0 added
[   89.382287][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.394896][ T5853] Bluetooth: hci4: command tx timeout
[   89.402683][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.413938][ T5865] team0: Port device team_slave_1 added
[   89.421161][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.428242][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.455155][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.468094][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.475241][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.501267][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.515337][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.527482][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.622261][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.629430][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.655643][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.682155][ T5860] team0: Port device team_slave_0 added
[   89.717331][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.724313][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.750477][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.769245][ T5859] hsr_slave_0: entered promiscuous mode
[   89.775613][ T5859] hsr_slave_1: entered promiscuous mode
[   89.783925][ T5860] team0: Port device team_slave_1 added
[   89.792685][ T5864] team0: Port device team_slave_0 added
[   89.825481][ T5863] hsr_slave_0: entered promiscuous mode
[   89.831784][ T5863] hsr_slave_1: entered promiscuous mode
[   89.838295][ T5863] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   89.846952][ T5863] Cannot create hsr debugfs directory
[   89.869360][ T5864] team0: Port device team_slave_1 added
[   89.907719][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.914763][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.941548][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.982032][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.989422][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.016156][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.042311][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.049381][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.075950][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.122440][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.132224][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.158622][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.258457][ T5865] hsr_slave_0: entered promiscuous mode
[   90.265479][ T5865] hsr_slave_1: entered promiscuous mode
[   90.271481][ T5865] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.280799][ T5865] Cannot create hsr debugfs directory
[   90.353707][ T5864] hsr_slave_0: entered promiscuous mode
[   90.361388][ T5864] hsr_slave_1: entered promiscuous mode
[   90.367775][ T5864] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.375381][ T5864] Cannot create hsr debugfs directory
[   90.551617][ T5860] hsr_slave_0: entered promiscuous mode
[   90.561635][ T5860] hsr_slave_1: entered promiscuous mode
[   90.568053][ T5860] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.575854][ T5860] Cannot create hsr debugfs directory
[   90.910529][ T5859] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   90.936579][ T5859] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   90.970660][ T5859] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   90.996482][ T5859] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   91.048303][ T5863] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   91.068713][ T5863] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   91.094307][ T5863] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   91.105841][ T5863] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   91.184063][ T5865] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   91.221340][ T5865] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   91.251914][ T5865] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   91.277622][ T5864] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   91.288600][ T5865] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   91.300679][ T5864] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   91.345273][ T5864] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   91.358467][ T5864] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   91.395316][ T5843] Bluetooth: hci1: command tx timeout
[   91.395817][ T5857] Bluetooth: hci2: command tx timeout
[   91.400816][ T5856] Bluetooth: hci3: command tx timeout
[   91.411857][ T5853] Bluetooth: hci0: command tx timeout
[   91.431698][ T5860] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   91.456526][ T5860] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   91.474920][ T5853] Bluetooth: hci4: command tx timeout
[   91.490273][ T5860] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   91.519518][ T5860] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   91.560634][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.645893][ T5859] 8021q: adding VLAN 0 to HW filter on device team0
[   91.690876][ T3010] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.698126][ T3010] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.712695][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.730559][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.761361][  T148] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.768515][  T148] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.808053][   T24] cfg80211: failed to load regulatory.db
[   91.825889][ T5863] 8021q: adding VLAN 0 to HW filter on device team0
[   91.851317][ T5865] 8021q: adding VLAN 0 to HW filter on device team0
[   91.877721][  T148] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.884896][  T148] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.907457][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.932882][ T3010] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.940034][ T3010] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.967574][ T3010] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.974753][ T3010] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.990956][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.998128][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.050188][ T5864] 8021q: adding VLAN 0 to HW filter on device team0
[   92.072798][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.079961][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.104244][ T5859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   92.153554][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.160748][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.181731][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.203216][ T5865] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   92.216269][ T5865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   92.281265][ T5864] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   92.292644][ T5864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   92.326421][ T5860] 8021q: adding VLAN 0 to HW filter on device team0
[   92.359838][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.388814][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.407143][  T148] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.414297][  T148] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.469402][ T3010] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.476763][ T3010] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.517781][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.541277][ T5865] veth0_vlan: entered promiscuous mode
[   92.564566][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.616448][ T5859] veth0_vlan: entered promiscuous mode
[   92.647971][ T5865] veth1_vlan: entered promiscuous mode
[   92.722237][ T5864] veth0_vlan: entered promiscuous mode
[   92.732653][ T5859] veth1_vlan: entered promiscuous mode
[   92.762386][ T5865] veth0_macvtap: entered promiscuous mode
[   92.782905][ T5864] veth1_vlan: entered promiscuous mode
[   92.799219][ T5863] veth0_vlan: entered promiscuous mode
[   92.813592][ T5863] veth1_vlan: entered promiscuous mode
[   92.828998][ T5865] veth1_macvtap: entered promiscuous mode
[   92.844523][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0
[   92.883930][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.897866][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.932427][ T5865] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.942025][ T5865] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.951997][ T5865] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.960805][ T5865] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.973353][ T5859] veth0_macvtap: entered promiscuous mode
[   92.999478][ T5859] veth1_macvtap: entered promiscuous mode
[   93.020087][ T5863] veth0_macvtap: entered promiscuous mode
[   93.042327][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.054006][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.066166][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.081989][ T5864] veth0_macvtap: entered promiscuous mode
[   93.090798][ T5863] veth1_macvtap: entered promiscuous mode
[   93.123803][ T5859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.134541][ T5859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.146514][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.160090][ T5864] veth1_macvtap: entered promiscuous mode
[   93.177342][ T5863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.189332][ T5863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.199263][ T5863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.210722][ T5863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.222262][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.232883][ T5859] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.242636][ T5859] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.251716][ T5859] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.262007][ T5859] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.289505][ T5863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.300247][ T5863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.312265][ T5863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.328625][ T5863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.340096][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.361002][ T5860] veth0_vlan: entered promiscuous mode
[   93.390387][ T5863] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.400588][ T5863] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.410097][ T5863] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.418933][ T5863] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.441886][ T5864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.457875][ T5864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.468218][ T5864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.479160][ T5853] Bluetooth: hci0: command tx timeout
[   93.484596][ T5853] Bluetooth: hci3: command tx timeout
[   93.490129][ T5856] Bluetooth: hci1: command tx timeout
[   93.490162][ T5843] Bluetooth: hci2: command tx timeout
[   93.495729][ T5864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.510934][ T5864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.521498][ T5864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.533207][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0
[   93.555503][ T5843] Bluetooth: hci4: command tx timeout
[   93.591119][  T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.597269][ T5864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.610304][ T5864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.621296][ T5864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.631881][  T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.632277][ T5864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.650752][ T5864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   93.661250][ T5864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   93.672740][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1
[   93.681349][ T5860] veth1_vlan: entered promiscuous mode
[   93.714461][ T5864] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   93.724031][ T5864] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   93.735124][ T5864] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   93.744073][ T5864] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   93.784793][ T1001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.792640][ T1001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.895156][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.903048][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.907056][ T5860] veth0_macvtap: entered promiscuous mode
[   93.951760][ T5860] veth1_macvtap: entered promiscuous mode
[   93.973289][  T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.985922][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   93.997495][  T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.998037][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.015628][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.026793][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.036964][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.047923][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.057834][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.068374][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.080279][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0
[   94.100028][ T5865] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   94.109330][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.132171][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.142095][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.152707][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.162582][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.173245][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.183127][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   94.194406][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.209495][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1
[   94.240146][ T5860] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.252154][ T5860] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.284771][ T5860] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.305037][ T5860] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.346808][  T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.361099][ T5905] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   94.366472][  T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.462695][ T1001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.484952][ T1001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.508469][ T2975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.521042][ T2975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.659914][  T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.685463][  T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.760880][  T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   94.784949][  T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   94.955198][   T52] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   94.962924][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.000549][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.148775][   T52] usb 5-1: config 0 has an invalid interface number: 50 but max is 0
[   95.184835][   T52] usb 5-1: config 0 has no interface number 0
[   95.208733][   T52] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   95.298291][   T52] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[   95.329669][   T52] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   95.355951][   T52] usb 5-1: Product: syz
[   95.370607][   T52] usb 5-1: Manufacturer: syz
[   95.393335][   T52] usb 5-1: SerialNumber: syz
[   95.443421][ T5926] netlink: 'syz.3.7': attribute type 4 has an invalid length.
[   95.478055][   T52] usb 5-1: config 0 descriptor??
[   95.505592][ T5928] =======================================================
[   95.505592][ T5928] WARNING: The mand mount option has been deprecated and
[   95.505592][ T5928]          and is ignored by this kernel. Remove the mand
[   95.505592][ T5928]          option from the mount to silence this warning.
[   95.505592][ T5928] =======================================================
[   95.559094][ T5843] Bluetooth: hci3: command tx timeout
[   95.566439][ T5843] Bluetooth: hci1: command tx timeout
[   95.570980][ T5857] Bluetooth: hci2: command tx timeout
[   95.571865][ T5853] Bluetooth: hci0: command tx timeout
[   95.601115][   T52] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0
[   95.638131][ T5843] Bluetooth: hci4: command tx timeout
[   95.768177][ T5912] @: renamed from vlan0 (while UP)
[   95.846092][ T5934] vcan0: tx drop: invalid da for name 0x0000000000000001
[   95.855196][ T5898] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[   95.905254][ T5934] vcan0: tx drop: invalid da for name 0x0000000000000001
[   96.019195][ T5934] vcan0: tx drop: invalid da for name 0x0000000000000001
[   96.031727][ T5934] vcan0: tx drop: invalid da for name 0x0000000000000001
[   96.081639][ T5898] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   96.112810][ T5920] usb 5-1: USB disconnect, device number 2
[   96.145922][ T5898] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   96.165069][ T5934] vcan0: tx drop: invalid da for name 0x0000000000000001
[   96.186987][   T52] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   96.196168][ T5920] yurex 5-1:0.50: USB YUREX #0 now disconnected
[   96.231472][ T5934] vcan0: tx drop: invalid da for name 0x0000000000000001
[   96.301810][ T5898] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[   96.339710][ T5934] vcan0: tx drop: invalid da for name 0x0000000000000001
[   96.340801][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.347204][ T5934] vcan0: tx drop: invalid da for name 0x0000000000000001
[   96.386167][ T5934] vcan0: tx drop: invalid da for name 0x0000000000000001
[   96.393445][ T5934] vcan0: tx drop: invalid da for name 0x0000000000000001
[   96.414558][ T5934] vcan0: tx drop: invalid da for name 0x0000000000000001
[   96.431213][ T5934] vcan0: tx drop: invalid da for name 0x0000000000000001
[   96.498689][ T5934] vcan0: tx drop: invalid da for name 0x0000000000000001
[   96.559414][ T5934] vcan0: tx drop: invalid da for name 0x0000000000000001
[   96.593257][ T5934] vcan0: tx drop: invalid da for name 0x0000000000000001
[   96.659074][ T5898] usb 2-1: usb_control_msg returned -32
[   96.665014][ T5934] vcan0: tx drop: invalid da for name 0x0000000000000001
[   96.672215][ T5934] vcan0: tx drop: invalid da for name 0x0000000000000001
[   96.710065][ T5898] usbtmc 2-1:16.0: can't read capabilities
[   96.845428][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   96.854176][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   96.862736][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   96.919573][ T5947] fuse: Unknown parameter 'rmotmode'
[   97.026499][ T5952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.095523][ T5952] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.120768][ T5955] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   97.185285][ T5955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'.
[   97.212494][ T5955] bridge_slave_1: left allmulticast mode
[   97.220821][ T5955] bridge_slave_1: left promiscuous mode
[   97.227905][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.240583][   T54] usb 2-1: USB disconnect, device number 2
[   97.249157][ T5955] bridge_slave_0: left allmulticast mode
[   97.259102][ T5955] bridge_slave_0: left promiscuous mode
[   97.271212][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.417974][ T5902] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   97.585485][ T5902] usb 3-1: config 1 interface 0 has no altsetting 0
[   97.603475][ T5902] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.40
[   97.624586][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.650219][ T5902] usb 3-1: Product: ᐓ膧Ȏ
[   97.668772][ T5902] usb 3-1: Manufacturer: ч
[   97.673351][ T5902] usb 3-1: SerialNumber: ӿ
[   97.704588][ T5974] sctp: failed to load transform for md5: -2
[   97.744811][   T54] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   97.886224][   T54] usb 5-1: device descriptor read/64, error -71
[   97.974464][ T5987] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   97.997519][ T5958] dccp_close: ABORT with 64 bytes unread
[   98.117172][ T5898] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   98.125212][   T54] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   98.212216][ T5902] usbhid 3-1:1.0: can't add hid device: -71
[   98.221466][ T5902] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[   98.248684][ T5902] usb 3-1: USB disconnect, device number 2
[   98.275908][   T54] usb 5-1: device descriptor read/64, error -71
[   98.285958][ T5930] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   98.334812][ T5898] usb 1-1: config 108 has no interfaces?
[   98.345091][ T5898] usb 1-1: New USB device found, idVendor=17ef, idProduct=a387, bcdDevice=4b.3e
[   98.355515][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.363542][ T5898] usb 1-1: Product: syz
[   98.384809][ T5898] usb 1-1: Manufacturer: syz
[   98.389920][   T54] usb usb5-port1: attempt power cycle
[   98.420380][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   98.485802][ T5930] usb 2-1: Using ep0 maxpacket: 32
[   98.494885][ T5898] usb 1-1: SerialNumber: syz
[   98.504985][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   98.514774][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   98.565921][ T5930] usb 2-1: unable to get BOS descriptor or descriptor too short
[   98.595019][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   98.625118][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   98.731659][ T5930] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[   98.748467][ T5898] r8152-cfgselector 1-1: Unknown version 0x0000
[   98.758547][ T5930] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   98.771408][ T5930] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   98.784938][ T5930] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   98.794412][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.806945][ T5930] usb 2-1: Product: syz
[   98.811215][ T5930] usb 2-1: Manufacturer: syz
[   98.816496][ T5930] usb 2-1: SerialNumber: syz
[   98.875129][ T5900] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   98.972620][ T5985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.023172][ T5985] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.049784][ T5900] usb 4-1: config 0 has no interfaces?
[   99.077877][ T5900] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[   99.090315][ T5985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.092359][   T54] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   99.114730][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.124340][ T5985] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.144858][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   99.164165][ T5900] usb 4-1: Product: syz
[   99.179867][   T54] usb 5-1: device descriptor read/8, error -71
[   99.191562][ T5900] usb 4-1: Manufacturer: syz
[   99.208738][ T5900] usb 4-1: SerialNumber: syz
[   99.214216][ T5985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.217492][ T5930] usb 2-1: 0:2 : does not exist
[   99.244118][ T5985] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.244325][ T5900] usb 4-1: config 0 descriptor??
[   99.307266][ T5985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.318341][ T5930] usb 2-1: USB disconnect, device number 3
[   99.390851][ T5985] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.423699][ T5985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.440488][   T54] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   99.441983][ T5985] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.466688][   T54] usb 5-1: device descriptor read/8, error -71
[   99.531633][ T5940] udevd[5940]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   99.588302][   T54] usb usb5-port1: unable to enumerate USB device
[   99.635421][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   99.660058][   T30] audit: type=1800 audit(1743812081.718:2): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.22" name="file0" dev="tmpfs" ino=49 res=0 errno=0
[   99.692884][ T5898] r8152-cfgselector 1-1: USB disconnect, device number 2
[   99.732884][ T5995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.744248][   T52] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   99.753139][   T30] audit: type=1800 audit(1743812081.728:3): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.22" name="file0" dev="tmpfs" ino=49 res=0 errno=0
[   99.775678][ T5995] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   99.934792][   T52] usb 3-1: Using ep0 maxpacket: 16
[   99.942831][   T52] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   99.962310][   T52] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   99.973999][   T52] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   99.985864][   T52] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.996126][   T52] usb 3-1: Product: syz
[  100.008168][   T52] usb 3-1: Manufacturer: syz
[  100.018672][   T52] usb 3-1: SerialNumber: syz
[  100.060163][ T6004] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  100.221309][ T6008] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27'.
[  100.240687][   T52] usb 3-1: 0:2 : does not exist
[  100.282010][   T52] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  100.343380][   T52] usb 3-1: USB disconnect, device number 3
[  100.534840][ T5898] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  100.563065][ T5897] udevd[5897]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  100.724827][ T5898] usb 1-1: Using ep0 maxpacket: 16
[  100.751091][ T5898] usb 1-1: config index 0 descriptor too short (expected 16456, got 72)
[  100.787830][ T5898] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  100.821809][ T5898] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  100.848881][ T5898] usb 1-1: config 0 has an invalid interface number: 125 but max is 1
[  100.860812][ T5898] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  100.874336][ T5898] usb 1-1: config 0 has no interface number 0
[  100.874430][ T6020] tipc: Started in network mode
[  100.884639][ T5898] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  100.921844][ T5898] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  100.932951][ T6020] tipc: Node identity @, cluster identity 4711
[  100.949443][ T5898] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  100.964814][ T6020] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  100.984412][ T6023] netlink: 'syz.2.32': attribute type 33 has an invalid length.
[  100.994300][ T5898] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  101.014317][ T6023] netlink: 152 bytes leftover after parsing attributes in process `syz.2.32'.
[  101.035158][ T5898] usb 1-1: config 0 interface 125 has no altsetting 0
[  101.045677][ T5898] usb 1-1: config 0 interface 125 has no altsetting 2
[  101.069597][ T5898] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  101.089704][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.098388][ T5898] usb 1-1: Product: syz
[  101.102682][ T5898] usb 1-1: Manufacturer: syz
[  101.111448][ T5898] usb 1-1: SerialNumber: syz
[  101.120378][ T5898] usb 1-1: config 0 descriptor??
[  101.151815][ T5898] usb 1-1: selecting invalid altsetting 2
[  101.284888][   T54] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  101.351633][ T6010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  101.381495][ T6010] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  101.465592][   T54] usb 3-1: too many configurations: 18, using maximum allowed: 8
[  101.495314][   T54] usb 3-1: unable to read config index 0 descriptor/start: -61
[  101.507357][   T54] usb 3-1: can't read configurations, error -61
[  101.574342][ T5900] usb 4-1: USB disconnect, device number 3
[  101.664974][   T54] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  101.750748][ T6032] process 'syz.3.35' launched '/dev/fd/4' with NULL argv: empty string added
[  101.858614][ T6010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  101.879785][   T54] usb 3-1: too many configurations: 18, using maximum allowed: 8
[  101.889004][ T6010] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  101.935011][   T54] usb 3-1: unable to read config index 0 descriptor/start: -61
[  101.950046][   T54] usb 3-1: can't read configurations, error -61
[  101.987150][   T54] usb usb3-port1: attempt power cycle
[  102.109938][ T6038] FAULT_INJECTION: forcing a failure.
[  102.109938][ T6038] name failslab, interval 1, probability 0, space 0, times 1
[  102.123872][ T6038] CPU: 1 UID: 0 PID: 6038 Comm: syz.3.36 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) 
[  102.123910][ T6038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  102.123928][ T6038] Call Trace:
[  102.123936][ T6038]  <TASK>
[  102.123945][ T6038]  dump_stack_lvl+0x241/0x360
[  102.124019][ T6038]  ? __pfx_dump_stack_lvl+0x10/0x10
[  102.124049][ T6038]  ? __pfx__printk+0x10/0x10
[  102.124088][ T6038]  should_fail_ex+0x424/0x570
[  102.124115][ T6038]  should_failslab+0xac/0x100
[  102.124146][ T6038]  kmem_cache_alloc_noprof+0x78/0x390
[  102.124174][ T6038]  ? xfrm_state_alloc+0x26/0x300
[  102.124210][ T6038]  xfrm_state_alloc+0x26/0x300
[  102.124242][ T6038]  xfrm_state_find+0x3ddc/0x5ff0
[  102.124289][ T6038]  ? xfrm_state_find+0x2cf/0x5ff0
[  102.124310][ T6038]  ? __pfx_xfrm_state_find+0x10/0x10
[  102.124332][ T6038]  ? __rt6_find_exception_rcu+0x12a/0x4c0
[  102.124374][ T6038]  ? rcu_is_watching+0x15/0xb0
[  102.124405][ T6038]  ? fib6_table_lookup+0xb98/0xbf0
[  102.124440][ T6038]  xfrm_resolve_and_create_bundle+0x7b9/0x3250
[  102.124490][ T6038]  ? ip6_pol_route+0x192/0x15f0
[  102.124514][ T6038]  ? __pfx_ip6_pol_route+0x10/0x10
[  102.124536][ T6038]  ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10
[  102.124565][ T6038]  ? __lock_acquire+0xad5/0xd80
[  102.124620][ T6038]  ? xfrm_sk_policy_lookup+0x7f4/0x840
[  102.124645][ T6038]  ? xfrm_sk_policy_lookup+0x95/0x840
[  102.124673][ T6038]  ? xfrm_expand_policies+0x3fb/0x690
[  102.124703][ T6038]  xfrm_lookup_with_ifid+0x36a/0x1f90
[  102.124725][ T6038]  ? ip6_dst_lookup_tail+0xbee/0x1510
[  102.124755][ T6038]  ? __pfx_xfrm_lookup_with_ifid+0x10/0x10
[  102.124775][ T6038]  ? __lock_acquire+0xad5/0xd80
[  102.124796][ T6038]  ? __pfx_ip6_dst_lookup_tail+0x10/0x10
[  102.124833][ T6038]  xfrm_lookup_route+0x3c/0x1c0
[  102.124858][ T6038]  ip6_dst_lookup_flow+0x140/0x180
[  102.124884][ T6038]  ? __pfx_ip6_dst_lookup_flow+0x10/0x10
[  102.124916][ T6038]  ? aa_label_sk_perm+0x4f4/0x6d0
[  102.124938][ T6038]  ? rawv6_sendmsg+0x114d/0x23c0
[  102.124969][ T6038]  rawv6_sendmsg+0x133c/0x23c0
[  102.125011][ T6038]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  102.125086][ T6038]  ? sock_rps_record_flow+0x1a/0x410
[  102.125110][ T6038]  ? inet_sendmsg+0x330/0x390
[  102.125134][ T6038]  __sock_sendmsg+0x1a6/0x270
[  102.125163][ T6038]  ____sys_sendmsg+0x523/0x860
[  102.125192][ T6038]  ? __pfx_____sys_sendmsg+0x10/0x10
[  102.125210][ T6038]  ? __fget_files+0x2a/0x420
[  102.125230][ T6038]  ? __fget_files+0x2a/0x420
[  102.125257][ T6038]  __sys_sendmmsg+0x3a0/0x7b0
[  102.125289][ T6038]  ? __pfx___sys_sendmmsg+0x10/0x10
[  102.125344][ T6038]  ? rcu_read_lock_any_held+0xbb/0x160
[  102.125370][ T6038]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  102.125399][ T6038]  ? vfs_write+0xb29/0xd10
[  102.125440][ T6038]  ? ksys_write+0x24e/0x2d0
[  102.125464][ T6038]  ? __mutex_unlock_slowpath+0x229/0x800
[  102.125513][ T6038]  ? ksys_write+0x275/0x2d0
[  102.125544][ T6038]  __x64_sys_sendmmsg+0xa0/0xb0
[  102.125564][ T6038]  do_syscall_64+0xf3/0x230
[  102.125584][ T6038]  ? clear_bhb_loop+0x45/0xa0
[  102.125605][ T6038]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.125622][ T6038] RIP: 0033:0x7ff6d0d8d169
[  102.125641][ T6038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  102.125653][ T6038] RSP: 002b:00007ff6d1b02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  102.125668][ T6038] RAX: ffffffffffffffda RBX: 00007ff6d0fa6160 RCX: 00007ff6d0d8d169
[  102.125678][ T6038] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000007
[  102.125687][ T6038] RBP: 00007ff6d1b02090 R08: 0000000000000000 R09: 0000000000000000
[  102.125695][ T6038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  102.125703][ T6038] R13: 0000000000000000 R14: 00007ff6d0fa6160 R15: 00007ff6d10cfa28
[  102.125724][ T6038]  </TASK>
[  102.498199][    C1] vkms_vblank_simulate: vblank timer overrun
[  102.505486][ T5898] get_1284_register timeout
[  102.510143][ T5898] uss720 1-1:0.125: probe with driver uss720 failed with error -5
[  102.510216][    C0] usb 1-1: async_complete: urb error -104
[  102.542699][   T52] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  102.761344][   T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  102.772291][   T52] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  102.782284][   T52] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  102.795316][   T52] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  102.804364][   T52] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.804774][   T54] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  102.816456][   T52] usb 5-1: config 0 descriptor??
[  103.098438][   T54] usb 3-1: too many configurations: 18, using maximum allowed: 8
[  103.110721][   T54] usb 3-1: unable to read config index 0 descriptor/start: -61
[  103.121300][   T54] usb 3-1: can't read configurations, error -61
[  103.300463][   T54] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  103.376186][   T54] usb 3-1: too many configurations: 18, using maximum allowed: 8
[  103.388730][   T54] usb 3-1: unable to read config index 0 descriptor/start: -61
[  103.402227][   T54] usb 3-1: can't read configurations, error -61
[  103.455009][   T54] usb usb3-port1: unable to enumerate USB device
[  103.485989][   T52] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0
[  103.504334][   T52] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[  103.544762][   T52] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  103.673038][ T6046] netlink: 28 bytes leftover after parsing attributes in process `syz.1.38'.
[  103.719342][ T6049] syz.3.39 uses obsolete (PF_INET,SOCK_PACKET)
[  104.086615][ T5845] usb 1-1: USB disconnect, device number 3
[  104.174501][   T52] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  104.281470][ T6069] lo: entered promiscuous mode
[  104.289376][ T6069] tunl0: entered promiscuous mode
[  104.295144][ T6069] gre0: entered promiscuous mode
[  104.303722][ T6069] gretap0: entered promiscuous mode
[  104.309968][ T6069] erspan0: entered promiscuous mode
[  104.314789][   T52] usb 4-1: device descriptor read/64, error -71
[  104.318810][ T6069] ip_vti0: entered promiscuous mode
[  104.327236][ T6070] capability: warning: `syz.1.45' uses deprecated v2 capabilities in a way that may be insecure
[  104.340005][ T6069] ip6_vti0: entered promiscuous mode
[  104.349435][ T6069] sit0: entered promiscuous mode
[  104.355436][ T6069] ip6tnl0: entered promiscuous mode
[  104.365374][ T6069] ip6gre0: entered promiscuous mode
[  104.375773][ T6069] syz_tun: entered promiscuous mode
[  104.381569][ T6069] ip6gretap0: entered promiscuous mode
[  104.398544][ T6069] vcan0: entered promiscuous mode
[  104.405279][   T54] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  104.408994][ T6069] bond0: entered promiscuous mode
[  104.437259][ T6069] bond_slave_0: entered promiscuous mode
[  104.450995][ T6069] bond_slave_1: entered promiscuous mode
[  104.464263][ T6069] team0: entered promiscuous mode
[  104.470661][ T6069] team_slave_0: entered promiscuous mode
[  104.476895][ T6069] team_slave_1: entered promiscuous mode
[  104.483627][ T6069] dummy0: entered promiscuous mode
[  104.492868][ T6069] nlmon0: entered promiscuous mode
[  104.500801][ T6069] caif0: entered promiscuous mode
[  104.508316][ T6069] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  104.564880][   T52] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  104.569386][   T54] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.583845][   T54] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00
[  104.593580][   T54] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.607552][   T54] usb 3-1: config 0 descriptor??
[  104.704848][   T52] usb 4-1: device descriptor read/64, error -71
[  104.817054][   T52] usb usb4-port1: attempt power cycle
[  105.034578][   T54] logitech 0003:046D:C50C.0002: hidraw1: USB HID v0.00 Device [HID 046d:c50c] on usb-dummy_hcd.2-1/input0
[  105.156593][   T52] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  105.227808][   T52] usb 4-1: device descriptor read/8, error -71
[  105.254389][   T54] usb 3-1: USB disconnect, device number 8
[  105.356554][ T5902] usb 5-1: reset high-speed USB device number 7 using dummy_hcd
[  105.505411][   T52] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  105.563767][   T52] usb 4-1: device descriptor read/8, error -71
[  105.715152][   T52] usb usb4-port1: unable to enumerate USB device
[  106.474768][ T5902] usb 5-1: device descriptor read/64, error -71
[  106.559903][   T52] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  106.715032][ T5902] usb 5-1: reset high-speed USB device number 7 using dummy_hcd
[  106.738030][   T52] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  106.776591][   T52] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  106.789611][   T52] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  106.800419][   T52] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.820405][ T6094] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  106.838193][   T52] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  106.998466][ T5902] usb 5-1: device firmware changed
[  107.085562][ T5920] usb 5-1: USB disconnect, device number 7
[  107.098557][ T6095] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10)
[  107.105308][ T6095] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  107.162486][ T6095] vhci_hcd vhci_hcd.0: Device attached
[  107.178232][ T6103] vhci_hcd: connection closed
[  107.180577][  T148] vhci_hcd: stop threads
[  107.200720][  T148] vhci_hcd: release socket
[  107.220722][  T148] vhci_hcd: disconnect device
[  107.229623][   T52] usb 3-1: USB disconnect, device number 9
[  107.502895][ T5920] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  107.688178][ T6096] netlink: 92 bytes leftover after parsing attributes in process `syz.0.49'.
[  107.875932][ T5920] usb 5-1: config 0 has no interfaces?
[  108.027180][ T6119] netlink: 16 bytes leftover after parsing attributes in process `syz.2.58'.
[  108.118418][ T5920] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  108.127931][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.136449][ T5920] usb 5-1: Product: syz
[  108.140754][ T5920] usb 5-1: Manufacturer: syz
[  108.145925][ T5920] usb 5-1: SerialNumber: syz
[  108.162163][ T5920] usb 5-1: config 0 descriptor??
[  108.246008][ T6123] netlink: 'syz.3.60': attribute type 1 has an invalid length.
[  108.271322][ T6123] batadv1: entered promiscuous mode
[  108.304824][ T6123] batadv1: entered allmulticast mode
[  108.681551][ T6131] netlink: 'syz.1.62': attribute type 7 has an invalid length.
[  108.724911][   T52] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  108.739153][ T6131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.62'.
[  108.895071][   T52] usb 1-1: device descriptor read/64, error -71
[  109.144883][   T52] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  109.176182][ T5845] usb 5-1: USB disconnect, device number 8
[  109.304831][   T52] usb 1-1: device descriptor read/64, error -71
[  109.323822][ T6139] overlayfs: missing 'lowerdir'
[  109.331200][ T6139] netlink: 40 bytes leftover after parsing attributes in process `syz.4.65'.
[  109.416749][   T52] usb usb1-port1: attempt power cycle
[  109.645168][ T5902] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  109.756543][   T52] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  109.799878][   T52] usb 1-1: device descriptor read/8, error -71
[  109.815008][ T5902] usb 2-1: Using ep0 maxpacket: 16
[  109.831411][ T5902] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11
[  109.843021][ T5902] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  109.856570][ T5902] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  109.868172][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.894124][ T5902] usb 2-1: config 0 descriptor??
[  109.939755][ T6151] loop2: detected capacity change from 0 to 7
[  109.951445][ T6151] Dev loop2: unable to read RDB block 7
[  109.958464][ T6151]  loop2: unable to read partition table
[  109.971234][ T6151] loop2: partition table beyond EOD, truncated
[  109.981653][ T6151] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  110.046180][   T52] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  110.086965][   T52] usb 1-1: device descriptor read/8, error -71
[  110.215423][   T52] usb usb1-port1: unable to enumerate USB device
[  110.231168][ T6160] Zero length message leads to an empty skb
[  110.324995][   T54] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  110.336042][ T5902] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0
[  110.424901][ T5902] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0
[  110.454874][   T54] usb 3-1: device descriptor read/64, error -71
[  110.465559][ T5902] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0
[  110.484522][ T5902] kovaplus 0003:1E7D:2D50.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0
[  110.714800][   T54] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  110.779189][ T5902] kovaplus 0003:1E7D:2D50.0003: couldn't init struct kovaplus_device
[  110.792200][ T5902] kovaplus 0003:1E7D:2D50.0003: couldn't install mouse
[  110.806500][ T5902] kovaplus 0003:1E7D:2D50.0003: probe with driver kovaplus failed with error -32
[  110.828623][ T5902] usb 2-1: USB disconnect, device number 4
[  110.844750][   T54] usb 3-1: device descriptor read/64, error -71
[  110.968778][   T54] usb usb3-port1: attempt power cycle
[  111.333219][   T54] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  111.366125][   T54] usb 3-1: device descriptor read/8, error -71
[  111.479124][ T6181] 
[  111.481508][ T6181] ======================================================
[  111.488575][ T6181] WARNING: possible circular locking dependency detected
[  111.495621][ T6181] 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 Not tainted
[  111.502401][ T6181] ------------------------------------------------------
[  111.509435][ T6181] syz.3.79/6181 is trying to acquire lock:
[  111.515259][ T6181] ffffffff900fc808 (rtnl_mutex){+.+.}-{4:4}, at: ipv6_sock_ac_close+0xc9/0x130
[  111.524285][ T6181] 
[  111.524285][ T6181] but task is already holding lock:
[  111.531758][ T6181] ffff888059588aa0 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_clcsock_release+0x82/0xf0
[  111.542133][ T6181] 
[  111.542133][ T6181] which lock already depends on the new lock.
[  111.542133][ T6181] 
[  111.552622][ T6181] 
[  111.552622][ T6181] the existing dependency chain (in reverse order) is:
[  111.561632][ T6181] 
[  111.561632][ T6181] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}:
[  111.570242][ T6181]        lock_acquire+0x116/0x2f0
[  111.575268][ T6181]        __mutex_lock+0x1a5/0x10c0
[  111.580472][ T6181]        smc_switch_to_fallback+0x35/0xda0
[  111.586277][ T6181]        smc_setsockopt+0x765/0xd50
[  111.591487][ T6181]        do_sock_setsockopt+0x3b1/0x710
[  111.597032][ T6181]        __x64_sys_setsockopt+0x1ee/0x280
[  111.602748][ T6181]        do_syscall_64+0xf3/0x230
[  111.607774][ T6181]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.614185][ T6181] 
[  111.614185][ T6181] -> #1 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  111.621914][ T6181]        lock_acquire+0x116/0x2f0
[  111.626929][ T6181]        lock_sock_nested+0x48/0x100
[  111.632216][ T6181]        do_ipv6_setsockopt+0xccd/0x3680
[  111.637858][ T6181]        ipv6_setsockopt+0x5d/0x170
[  111.643061][ T6181]        do_sock_setsockopt+0x3b1/0x710
[  111.648605][ T6181]        __x64_sys_setsockopt+0x1ee/0x280
[  111.654318][ T6181]        do_syscall_64+0xf3/0x230
[  111.659349][ T6181]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.665759][ T6181] 
[  111.665759][ T6181] -> #0 (rtnl_mutex){+.+.}-{4:4}:
[  111.672977][ T6181]        validate_chain+0xa69/0x24e0
[  111.678263][ T6181]        __lock_acquire+0xad5/0xd80
[  111.683459][ T6181]        lock_acquire+0x116/0x2f0
[  111.688507][ T6181]        __mutex_lock+0x1a5/0x10c0
[  111.693623][ T6181]        ipv6_sock_ac_close+0xc9/0x130
[  111.699089][ T6181]        inet6_release+0x4f/0x70
[  111.704023][ T6181]        sock_release+0x82/0x150
[  111.708962][ T6181]        smc_clcsock_release+0xcc/0xf0
[  111.714416][ T6181]        __smc_release+0x683/0x800
[  111.719525][ T6181]        smc_release+0x2dc/0x540
[  111.724462][ T6181]        sock_close+0xbc/0x240
[  111.729227][ T6181]        __fput+0x3e9/0x9f0
[  111.733728][ T6181]        task_work_run+0x251/0x310
[  111.738850][ T6181]        syscall_exit_to_user_mode+0x13f/0x340
[  111.745009][ T6181]        do_syscall_64+0x100/0x230
[  111.750118][ T6181]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.756526][ T6181] 
[  111.756526][ T6181] other info that might help us debug this:
[  111.756526][ T6181] 
[  111.766750][ T6181] Chain exists of:
[  111.766750][ T6181]   rtnl_mutex --> sk_lock-AF_INET6 --> &smc->clcsock_release_lock
[  111.766750][ T6181] 
[  111.780407][ T6181]  Possible unsafe locking scenario:
[  111.780407][ T6181] 
[  111.787870][ T6181]        CPU0                    CPU1
[  111.793229][ T6181]        ----                    ----
[  111.798606][ T6181]   lock(&smc->clcsock_release_lock);
[  111.804002][ T6181]                                lock(sk_lock-AF_INET6);
[  111.811027][ T6181]                                lock(&smc->clcsock_release_lock);
[  111.818920][ T6181]   lock(rtnl_mutex);
[  111.822904][ T6181] 
[  111.822904][ T6181]  *** DEADLOCK ***
[  111.822904][ T6181] 
[  111.831041][ T6181] 2 locks held by syz.3.79/6181:
[  111.835993][ T6181]  #0: ffff888034135c08 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x90/0x240
[  111.846189][ T6181]  #1: ffff888059588aa0 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_clcsock_release+0x82/0xf0
[  111.856984][ T6181] 
[  111.856984][ T6181] stack backtrace:
[  111.862876][ T6181] CPU: 0 UID: 0 PID: 6181 Comm: syz.3.79 Not tainted 6.14.0-syzkaller-13189-ge48e99b6edf4 #0 PREEMPT(full) 
[  111.862896][ T6181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  111.862906][ T6181] Call Trace:
[  111.862913][ T6181]  <TASK>
[  111.862919][ T6181]  dump_stack_lvl+0x241/0x360
[  111.862945][ T6181]  ? __pfx_dump_stack_lvl+0x10/0x10
[  111.862968][ T6181]  ? __pfx__printk+0x10/0x10
[  111.862990][ T6181]  ? print_lock+0x171/0x1a0
[  111.863010][ T6181]  print_circular_bug+0x2e1/0x300
[  111.863033][ T6181]  check_noncircular+0x142/0x160
[  111.863056][ T6181]  validate_chain+0xa69/0x24e0
[  111.863086][ T6181]  __lock_acquire+0xad5/0xd80
[  111.863106][ T6181]  lock_acquire+0x116/0x2f0
[  111.863121][ T6181]  ? ipv6_sock_ac_close+0xc9/0x130
[  111.863140][ T6181]  ? __mutex_trylock_common+0x184/0x2e0
[  111.863164][ T6181]  __mutex_lock+0x1a5/0x10c0
[  111.863182][ T6181]  ? ipv6_sock_ac_close+0xc9/0x130
[  111.863200][ T6181]  ? rcu_is_watching+0x15/0xb0
[  111.863220][ T6181]  ? trace_contention_end+0x3c/0x120
[  111.863241][ T6181]  ? ipv6_sock_ac_close+0xc9/0x130
[  111.863259][ T6181]  ? __pfx___mutex_lock+0x10/0x10
[  111.863281][ T6181]  ? __lock_acquire+0xad5/0xd80
[  111.863299][ T6181]  ? smc_clcsock_release+0x82/0xf0
[  111.863319][ T6181]  ? __pfx___mutex_lock+0x10/0x10
[  111.863340][ T6181]  ipv6_sock_ac_close+0xc9/0x130
[  111.863358][ T6181]  inet6_release+0x4f/0x70
[  111.863374][ T6181]  sock_release+0x82/0x150
[  111.863394][ T6181]  smc_clcsock_release+0xcc/0xf0
[  111.863414][ T6181]  __smc_release+0x683/0x800
[  111.863431][ T6181]  smc_release+0x2dc/0x540
[  111.863447][ T6181]  sock_close+0xbc/0x240
[  111.863465][ T6181]  ? __pfx_sock_close+0x10/0x10
[  111.863484][ T6181]  __fput+0x3e9/0x9f0
[  111.863503][ T6181]  task_work_run+0x251/0x310
[  111.863529][ T6181]  ? _raw_spin_unlock+0x28/0x50
[  111.863544][ T6181]  ? __pfx_task_work_run+0x10/0x10
[  111.863570][ T6181]  ? syscall_exit_to_user_mode+0xa3/0x340
[  111.863589][ T6181]  syscall_exit_to_user_mode+0x13f/0x340
[  111.863608][ T6181]  do_syscall_64+0x100/0x230
[  111.863627][ T6181]  ? clear_bhb_loop+0x45/0xa0
[  111.863644][ T6181]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.863659][ T6181] RIP: 0033:0x7ff6d0d8d169
[  111.863674][ T6181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  111.863688][ T6181] RSP: 002b:00007ff6d10cfb88 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  111.863704][ T6181] RAX: 0000000000000000 RBX: 000000000001b349 RCX: 00007ff6d0d8d169
[  111.863715][ T6181] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  111.863724][ T6181] RBP: 00007ff6d0fa7ba0 R08: 0000000000000001 R09: 00000005d10cfe7f
[  111.863735][ T6181] R10: 00007ff6d0c00000 R11: 0000000000000246 R12: 00007ff6d0fa5fac
[  111.863746][ T6181] R13: 00007ff6d0fa5fa0 R14: ffffffffffffffff R15: 00007ff6d10cfca0
[  111.863764][ T6181]  </TASK>
[  112.214724][   T54] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  112.235421][   T54] usb 3-1: device descriptor read/8, error -71
[  112.344901][   T54] usb usb3-port1: unable to enumerate USB device
[  112.504734][ T5930] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  112.667094][ T5930] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.679623][ T5930] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023
[  112.689707][ T5930] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023
[  112.702268][ T5930] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  112.711622][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.721893][ T5930] usb 1-1: Product: syz
[  112.726118][ T5930] usb 1-1: Manufacturer: 䬛죂됕ҟ栊㎊併⯼鄪옿⥭럜쇠ⵜ
[  112.734870][ T5930] usb 1-1: SerialNumber: syz
[  115.172635][ T5930] cdc_ncm 1-1:1.0: bind() failure
[  115.180150][ T5930] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  115.187176][ T5930] cdc_ncm 1-1:1.1: bind() failure
[  115.194636][ T5930] usb 1-1: USB disconnect, device number 8