last executing test programs:

4m36.907402281s ago: executing program 4 (id=196):
r0 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r2 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
readv(r2, &(0x7f0000000500)=[{&(0x7f0000000200)=""/107, 0x6b}], 0x1)

4m36.005701451s ago: executing program 4 (id=198):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r5, {}, {0x2, 0xb}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xcbf, 0x41b5, 0x2, 0x9, 0x9, 0x44a0, 0x8, 0x5}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000)
ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

4m35.406163652s ago: executing program 4 (id=202):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_clone3(&(0x7f00000005c0)={0x3c947200, 0x0, 0x0, &(0x7f00000003c0), {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x6}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usbip_server_init(0x6)
socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r3, r3, 0x0, 0x200000)

4m30.33600859s ago: executing program 4 (id=206):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x8, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)

4m29.639963637s ago: executing program 4 (id=210):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_XSAVE2(r2, 0x9000aecf, &(0x7f00005c8000/0x3000)=nil)
r3 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$apparmor_exec(r3, &(0x7f0000000080)={'exec ', ':\x00'}, 0x7)
mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000200)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}})
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', 0x0, 0x0)
write$apparmor_exec(r3, 0x0, 0x0)
r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0)
syz_usb_control_io$printer(r5, 0x0, 0x0)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r7 = socket$qrtr(0x2a, 0x2, 0x0)
bind$qrtr(r7, &(0x7f00000000c0)={0x2a, 0x1, 0xf0}, 0xc)
socket$netlink(0x10, 0x3, 0x0)
poll(&(0x7f0000000540), 0x0, 0xc3cb)
close_range(r3, r6, 0x0)

4m25.831543914s ago: executing program 4 (id=216):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff8500000004000000954759ed1fe2d1d95eb67b64bd614bf89df82316ea5cd4db3193a45b61961c7685e022d70760041e62896c735e971e35eaf1e5a331ae04ce6a1407c4acf7d493d0a39b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r0}, 0x18)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b32125}, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\a\x00'/12, @ANYRES32, @ANYBLOB="f9c2a482189ab95e50ad7b8052c41a1c2c138c5f2b814cb6c5b7395380f09a8d907277923ec48bc1ab0900214efbe59de66b1eb651a3317043c2a35f", @ANYRES64=0x0], 0x20)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x8000)
clock_gettime(0x3, &(0x7f0000000180))
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETSGCNT_IN6(r3, 0x89e1, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x32}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}})
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0)={r1})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, 0x0, 0x0)
recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_JOIN_FILTERS(r7, 0x65, 0x2, 0x0, &(0x7f0000000000)=0x45)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r8, 0x400448ca, 0x0)

4m10.723139913s ago: executing program 32 (id=216):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001640)=ANY=[@ANYBLOB="18000000000000000000000000000000180500002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff8500000004000000954759ed1fe2d1d95eb67b64bd614bf89df82316ea5cd4db3193a45b61961c7685e022d70760041e62896c735e971e35eaf1e5a331ae04ce6a1407c4acf7d493d0a39b"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r0}, 0x18)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810)
sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b32125}, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\a\x00'/12, @ANYRES32, @ANYBLOB="f9c2a482189ab95e50ad7b8052c41a1c2c138c5f2b814cb6c5b7395380f09a8d907277923ec48bc1ab0900214efbe59de66b1eb651a3317043c2a35f", @ANYRES64=0x0], 0x20)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x8000)
clock_gettime(0x3, &(0x7f0000000180))
r3 = socket$igmp(0x2, 0x3, 0x2)
ioctl$SIOCGETSGCNT_IN6(r3, 0x89e1, &(0x7f00000001c0)={@dev={0xfe, 0x80, '\x00', 0x32}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}})
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000000c0)={r1})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, 0x0, 0x0)
recvmmsg(r5, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_JOIN_FILTERS(r7, 0x65, 0x2, 0x0, &(0x7f0000000000)=0x45)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r8, 0x400448ca, 0x0)

4m5.663734329s ago: executing program 2 (id=261):
r0 = socket$kcm(0x11, 0x3, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee", 0x1d}], 0x1}, 0x0)

4m4.785252976s ago: executing program 2 (id=262):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = fsopen(&(0x7f0000000200)='affs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
open(&(0x7f0000000100)='./file0\x00', 0x12840, 0x116)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil)

4m4.450584632s ago: executing program 2 (id=264):
syz_emit_vhci(&(0x7f0000000900)=ANY=[@ANYBLOB], 0x1d)
r0 = socket(0x10, 0x3, 0x0)
recvmmsg$unix(r0, 0x0, 0x0, 0x2000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0)
setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0)
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0)
mkdir(&(0x7f0000000040)='./bus\x00', 0xa0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r2 = open(&(0x7f0000000240)='./file1\x00', 0x84242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x1ff, 0x2, 0x1, {0x6, 0xfd, 0x20ff, 0x8, 0xe, 0xf33a, 0x9, 0x4, 0xfffffffc, 0x6000, 0x6, 0x0, 0x0, 0x5, 0x8}}, {0x0, 0x13}}}, 0xa0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendfile(r2, r2, &(0x7f0000000080), 0x7f03)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)})
ioctl$KVM_SET_CLOCK(r3, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004})
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)

4m3.524363657s ago: executing program 2 (id=266):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000000c0)='%(:2', 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, 0x0)
r1 = openat$ocfs2_control(0xffffff9c, &(0x7f0000000280), 0x881, 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000340)='^!{.,\x00', 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, 0x0)
mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x20, 0x1, 0x0, 0x0, 0x0, 0xff, 0x1, 0x88, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe)
r5 = openat(0xffffffffffffff9c, 0x0, 0x60c43, 0xaa)
close(r5)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
sendto$inet6(r4, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
shutdown(r4, 0x1)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1008002, &(0x7f0000000040)={[], [], 0x2f})

4m0.074889364s ago: executing program 2 (id=274):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = fsopen(&(0x7f0000000200)='affs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
open(&(0x7f0000000100)='./file0\x00', 0x12840, 0x116)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil)

3m59.813174688s ago: executing program 2 (id=275):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newchain={0x23a4, 0x64, 0x4, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0xfff2}, {0xf}, {0x7, 0xe}}, [@filter_kind_options=@f_route={{0xa}, {0x22f8, 0x2, [@TCA_ROUTE4_ACT={0x22e4, 0x6, [@m_police={0x22e0, 0x14, 0x0, 0x0, {{0xb}, {0x227c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x4, 0x7, 0xff, 0x3, {0x4, 0x1, 0x0, 0x8, 0xf, 0x3}, {0x4, 0x1, 0x5, 0x1, 0x8001, 0x10}, 0x6, 0x6, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x8, 0x3, 0xff, 0x5, 0x6, 0xfffffffe, 0x8, 0x4, 0x560, 0x4, 0x7, 0x7, 0x29, 0x800, 0xe, 0x2, 0x401, 0x11, 0x7f, 0x9, 0xfffffffb, 0x3, 0x4, 0x8, 0x6, 0xb, 0x6, 0x5, 0x8, 0x0, 0x0, 0x0, 0xc, 0x4, 0xc62b, 0x4, 0x7fffffff, 0x2, 0x3, 0xf, 0x1, 0x2df, 0x400, 0x6, 0x3, 0xff, 0x7, 0x1, 0x10001, 0x4, 0xff, 0x5, 0xfffffff9, 0x9, 0x2, 0x40, 0x8, 0x3, 0x6, 0x3f, 0xfffffeff, 0x0, 0xa96a, 0xaee1, 0x88c, 0xff, 0xa17f, 0x2, 0xc4, 0x6, 0x0, 0x4, 0x9, 0x3, 0xfffffffd, 0x9, 0x3, 0x1, 0x800, 0x2, 0x6, 0x8db4, 0x3, 0xe, 0x2, 0x0, 0x3, 0xea42, 0x2, 0x6, 0x101, 0x5283, 0x7, 0x6, 0x4, 0x2, 0x25, 0x5, 0x70755695, 0x8, 0x5, 0xa2, 0x9, 0x8, 0x2, 0xc0fb, 0x5, 0x1, 0x3, 0x5, 0x64050f1f, 0xfffffff9, 0x1, 0x3, 0x2, 0xd5, 0x2, 0x1, 0x80000000, 0x7fffffff, 0x2, 0xa, 0x1ff, 0x1, 0x7fffffff, 0x9b5, 0x2, 0x5, 0x10000, 0x7fffffff, 0x3, 0x5, 0x9, 0x7f, 0xee1d243, 0x2, 0x5, 0xfffffff8, 0x3, 0xa, 0xc, 0x5, 0x6e, 0x800, 0x6, 0x3483, 0x2, 0x8000, 0x1a, 0x6, 0x4, 0xb4, 0xfff, 0xfcc, 0x6, 0x5, 0x7ff, 0x9, 0xfffffff9, 0x8, 0x101, 0x83a, 0x8, 0x2, 0x5, 0x1, 0x998, 0x7, 0xb, 0x7fffffff, 0x3, 0xfffffff8, 0x8, 0xfffffffd, 0x7f, 0x6, 0x9, 0x0, 0x80, 0x400, 0x0, 0xb, 0x8, 0x4d, 0x9, 0x7ff, 0x5, 0xc8dc, 0xfffffffb, 0xffff, 0xf06d, 0x4, 0x9, 0xc4, 0x9, 0x2, 0xe, 0x86f, 0x3, 0x6, 0x3, 0x5, 0x8, 0xeaa, 0x8, 0x6, 0x0, 0x6, 0x2, 0x8, 0x100, 0x2, 0x9, 0x3, 0x3, 0xc, 0x78, 0xa, 0x8a7458f6, 0x1, 0x9, 0x7ff, 0x9, 0x2, 0x80, 0x5, 0x4, 0x8, 0x8, 0x4, 0x2, 0x9, 0x97, 0x8, 0x2, 0x6, 0x3, 0x6a, 0x200, 0x10, 0x9, 0x0, 0x3, 0x9, 0xb, 0x3, 0x80, 0x1, 0x5cb, 0x6, 0x0, 0x1000, 0x6, 0x800]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x9, 0x6, 0x5, 0x6, 0x10001, 0x4, 0xe824c33, 0x2c3f, 0xfffff82d, 0xc767, 0x80, 0x1, 0x1, 0x6, 0x1000, 0x9, 0x0, 0x6, 0x3, 0x7a, 0x2, 0xd440, 0x5, 0x436, 0x200, 0x200, 0x4, 0x7f, 0x7ff, 0x4, 0x200, 0x3, 0x7fffffff, 0x4, 0xfffffff7, 0x5, 0x1, 0x2, 0xf, 0x1, 0x3, 0xfffffffc, 0x9, 0x6, 0x6, 0x6, 0x1, 0xb84, 0x55, 0x7, 0x5, 0x80000001, 0x9, 0x9, 0x3, 0x10000, 0x8, 0x40, 0x1, 0x3, 0x17, 0x7, 0x4, 0x0, 0xad2, 0x80, 0x5, 0xa, 0x79, 0x10001, 0xfff, 0x8, 0x2, 0x9, 0x200, 0x0, 0x1ff, 0x2, 0x9, 0x52, 0x3e2, 0x6f, 0x7, 0x9c, 0x7fffffff, 0x5, 0x4fd40, 0x6, 0x3233, 0xf51, 0x2, 0x31e0, 0x4, 0x5, 0xa, 0x8, 0x6, 0x3a780815, 0x5, 0x4, 0x2, 0x48144839, 0x4, 0x7, 0xffff9851, 0x10, 0xdd95, 0x2, 0x9, 0xff, 0x8000, 0x5, 0x4da, 0x1, 0x10001, 0x8000, 0xd, 0xd51, 0x9, 0x8, 0x0, 0x1, 0x3, 0x6, 0x3, 0x9, 0x1000, 0xf1, 0x7, 0x200, 0x9, 0x7af7, 0x9, 0xffffffff, 0x80, 0x8, 0x4, 0x100, 0x10001, 0x0, 0x8, 0x1a6, 0x8, 0x6866, 0x3ff, 0x3, 0x1, 0x2, 0x9, 0xae4, 0x40, 0x1ff, 0x9, 0xbe6b, 0x0, 0x7f, 0x6, 0x8, 0x1, 0x5, 0x5b0, 0x6, 0xdb20, 0x400, 0x9b, 0x655e, 0x97, 0xc3, 0x7ff, 0x9, 0x7, 0x9, 0x8, 0x7, 0x5, 0x200, 0x200, 0x0, 0x8, 0x9, 0x0, 0x2, 0x6, 0xd, 0x101, 0x5, 0x200, 0x5, 0xff, 0xfffffeff, 0x8ed, 0x2, 0x7, 0x8, 0x9, 0x4, 0xffff, 0x401, 0x7ff, 0x5, 0xe87, 0x8, 0x401, 0x3, 0x9, 0x7, 0x4f21, 0x3, 0x3ff, 0x2, 0x9, 0xff, 0x0, 0x40, 0x7fff, 0x9, 0x7, 0x4, 0x10001, 0x1, 0xc, 0x7008, 0x3, 0xa, 0x8, 0x2, 0xfffffff8, 0x8, 0xfffff1ac, 0x5, 0x80000001, 0xfd, 0x7, 0x7, 0xffff, 0xdf5, 0x9, 0xbb, 0x0, 0x606, 0x10, 0x2, 0x3caeda68, 0x1, 0x8, 0x22, 0x100, 0x8, 0x7fffffff, 0x7f8000, 0x2, 0xa6, 0x475, 0x7, 0x2]}], [], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xff, 0xfff, 0x1, 0x861, 0x4, 0x7, 0x2, 0x0, 0x6, 0x5, 0x3, 0x5, 0x3, 0x2, 0x0, 0x1ea, 0x3, 0x9, 0x3c, 0x7, 0x0, 0x6, 0x48000000, 0x7, 0x2, 0x5, 0x4, 0xda, 0x9, 0x88, 0x8baf, 0x81, 0x101, 0x3, 0x4, 0xe, 0x221d, 0x0, 0x10000, 0x3, 0x9, 0x9, 0x3ff, 0x1, 0xeec, 0x7, 0x7ff, 0x400, 0xffffffff, 0x7, 0x9, 0x81, 0x3ff, 0xff, 0x1, 0xb, 0x83, 0x4dd9, 0x10000000, 0x0, 0x3, 0x1, 0x7, 0xffffffff, 0x3, 0x7, 0x9, 0x2, 0x84f7, 0x10000, 0x1018c553, 0x59, 0x1, 0x6, 0xe97d, 0x0, 0x6, 0x1, 0xf4c, 0xffff, 0x0, 0x7, 0xfffffffb, 0x8, 0x7, 0x6e9, 0x6, 0x7, 0x80000000, 0x8, 0xac000, 0x1, 0x91a2, 0x80000000, 0xfffffffb, 0x9, 0x1, 0x3ff, 0x5, 0xf30, 0x4, 0x6, 0x200, 0x4, 0x5, 0xce, 0x9, 0x5, 0x8, 0xe, 0x6, 0x8, 0xe, 0xe6, 0x1, 0x8, 0x5, 0x6, 0x4, 0x6, 0x3, 0x10000, 0x7, 0x5, 0x9, 0x6, 0x0, 0xfc8, 0x8, 0xfffffffc, 0x800, 0x4, 0x2, 0x3, 0x604, 0xff, 0xc, 0x10001, 0x40, 0x3, 0x0, 0xfffffff9, 0x1, 0x6, 0xb, 0x7, 0xc164, 0x8001, 0x1, 0x800, 0x6, 0x4cc, 0xa, 0x6, 0x8, 0x2, 0x5, 0x40, 0x7, 0x8, 0x1000, 0x2, 0xb119, 0x7ff, 0xffff, 0x1, 0x4, 0x1, 0x3, 0x400, 0x2, 0xb82, 0x8, 0x6, 0xc5, 0x85c, 0x5, 0x0, 0x7, 0x852, 0x962e, 0x1, 0xffffd637, 0x1a, 0x4, 0x8, 0x1, 0x81, 0x7fffffff, 0xe, 0xd, 0x3, 0x9, 0x4, 0x4800, 0x3, 0x0, 0x71, 0x12, 0xf, 0x3, 0x9, 0x7, 0x5, 0x0, 0xffffff39, 0x6, 0x3c2, 0x2, 0x1c0000, 0x8, 0x8, 0x8, 0x3, 0x5, 0x7d, 0x0, 0x8, 0x5, 0x3, 0x4, 0x3, 0x3, 0x6, 0x9, 0x0, 0x2, 0x200, 0x3, 0xfff, 0x2, 0x6, 0x8, 0x6b, 0x2, 0xffffffff, 0x6, 0x10001, 0x10, 0x7fffffff, 0x7, 0x7, 0x4, 0x2, 0x7, 0x5, 0x0, 0xedd, 0x6, 0x1, 0x180000, 0x6, 0xffffd82b, 0x15f2, 0x2, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x5, 0x3, 0x1ff, 0xf, 0x2, 0x0, 0x31c9168e, 0x7, 0xd3f, 0x2, 0xfffffff7, 0x8, 0x81, 0x9, 0x1, 0x6, 0x8, 0x2, 0x1, 0x1, 0x600, 0x81, 0x0, 0x4e9, 0x0, 0x6, 0x8, 0x1, 0x0, 0x200, 0xfffffffa, 0x200, 0x70e3ea2b, 0x9, 0x8, 0x79c, 0x5, 0x7, 0x8, 0x8, 0x6, 0x7, 0x2, 0x5, 0x1ff, 0x8, 0x7f, 0x6, 0x7fffffff, 0x8, 0x3, 0x100000, 0xf919, 0x5, 0x8000, 0x4, 0x9, 0x401, 0x5f144c0a, 0x40, 0x0, 0x6, 0x46ce90ca, 0x6, 0x3, 0x1, 0x7, 0xb, 0xc18f, 0x2, 0x4, 0x81, 0x0, 0x8, 0x9, 0xc6ff, 0x1000, 0x7, 0x6, 0x3ff, 0x1ff, 0x8b, 0x2dc, 0x80000001, 0x1000, 0x1, 0x1a5f, 0x40, 0x3, 0x1, 0x63b3, 0x4, 0x9, 0x8, 0x8, 0x3, 0x81, 0x3, 0xb, 0x8959, 0x9, 0x4, 0x0, 0x3, 0x800, 0xa, 0x9, 0x800, 0x8001, 0x3, 0xaec3453, 0x80000001, 0x0, 0xffffffff, 0x2, 0xfffffff7, 0x4, 0xc6, 0x6, 0x1, 0xffffffff, 0x80, 0x8000, 0x789, 0x3, 0x7, 0x100, 0x7, 0xc4, 0x4, 0x0, 0x0, 0x5, 0xf8, 0x5, 0x1, 0x123, 0x8, 0x0, 0x1ff, 0x16df6fb2, 0x0, 0x3, 0xfffffffd, 0x1, 0x8, 0x6, 0x9, 0x8001, 0xffffffcd, 0x66, 0x7f, 0x1, 0x101, 0x1, 0xffffffff, 0xa19, 0xffffea46, 0x0, 0x5e, 0xecf9, 0x2f33, 0x3, 0xff, 0x0, 0x4, 0x5, 0x8001, 0xfffffffa, 0x0, 0x23, 0x752, 0x1, 0x0, 0xcd, 0x8, 0x9, 0x1000, 0xffffffe2, 0x400, 0x3, 0x8, 0x8001, 0x8, 0x6c, 0x1ff, 0x4c, 0x7fff, 0x4, 0x3f05, 0x7f, 0x3, 0x6, 0x2f, 0x0, 0x809, 0x80000000, 0x4c9, 0x8, 0x172a44f3, 0x9, 0x4, 0x4, 0x3, 0x8d6, 0x4, 0x2, 0x8, 0xcf, 0x8, 0x7, 0xff, 0x7, 0xc, 0x10, 0x8, 0x1, 0x3, 0x1, 0x80, 0x6aca, 0xff, 0x9, 0x8000, 0x2, 0x9, 0x4, 0x6, 0xfffffff7, 0x8, 0x6, 0x8, 0x86b, 0x4, 0x80, 0x6, 0x3, 0xb1, 0x4, 0x7, 0xf, 0xaf, 0x90b, 0x9, 0x7, 0xf9, 0x7, 0x9, 0x6, 0x8, 0x7820, 0x81, 0x200, 0xce98, 0x8001]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3ff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0xdf, 0x200, 0xffff, 0x80, 0x57d, 0x1000, 0x3, 0xad, 0x5, 0x1, 0x4, 0xfff, 0xfffffff2, 0x7f, 0xff, 0x6, 0x8, 0x6, 0x401, 0x1, 0x84a, 0x2, 0x0, 0xb, 0x4, 0x0, 0x8, 0x8, 0xfff, 0x39, 0xfffffffd, 0x7, 0x9, 0x9, 0x1a3, 0x5, 0x401, 0x2, 0x5, 0x1b, 0x7f, 0x7f, 0x6, 0x8, 0x8001, 0x7, 0x1, 0xe, 0x8, 0x10000, 0x2, 0x11d, 0x7ff, 0x80000001, 0x7, 0x1, 0x7f, 0x0, 0x0, 0x2000000, 0x3, 0x7, 0x7d, 0xff, 0x3, 0xb, 0xffffffff, 0xffffff00, 0x7, 0x2, 0x7fff, 0x6c, 0x80, 0xde, 0x3, 0x1, 0x4, 0x3, 0x3, 0x795, 0xfffffffd, 0x1, 0x9, 0x9, 0x2, 0xfb7, 0x7fffffff, 0x80000000, 0xfffffffa, 0x9, 0x1, 0x7, 0x3, 0x200, 0x5, 0x6, 0x0, 0x0, 0x7, 0x7ff, 0x4, 0x5, 0x8001, 0x1, 0x2, 0x4, 0xeef6, 0xceb, 0xffff36df, 0x101, 0xfffffffb, 0xffffff81, 0x9, 0x8001, 0xffff, 0xffff, 0xf62, 0x4f, 0x10, 0x9, 0x5, 0x7, 0x4, 0xb, 0x9, 0x1, 0xffffffff, 0x0, 0x10, 0xfffffff9, 0xff, 0x7, 0x8, 0x7, 0xfffffc00, 0xfffffffd, 0x8, 0x2, 0x7, 0x5, 0x2, 0x5, 0x2, 0x60, 0x9, 0x3, 0x100, 0x3, 0x2, 0xc1, 0xd, 0x6, 0xf41c, 0x1, 0x3, 0x6, 0x8001, 0x4, 0x80, 0x3ff, 0x6, 0x9, 0x1f, 0xfffff6d3, 0x1, 0x2, 0x1, 0x0, 0x800, 0xc, 0x4, 0x4, 0x972e, 0x5ecf, 0x0, 0x92df, 0xe, 0x245b, 0xa, 0xa, 0x8733, 0x101, 0x8640, 0x400, 0x7, 0x3, 0xffffffff, 0xffff, 0xfffffff8, 0x1, 0x400, 0x50a, 0x1, 0x9, 0x80000001, 0x9, 0x3, 0x0, 0x7, 0x7, 0x80000001, 0xfffffffb, 0xffff8000, 0x4085, 0x8, 0x4, 0x5, 0x0, 0x5, 0xa, 0x5, 0x8, 0x4, 0x2, 0x2, 0x4, 0xa6d, 0x1, 0x5, 0x9, 0xfffffd2c, 0x917a83b, 0x1, 0x400, 0xffff, 0x0, 0x8, 0x100, 0x8, 0x8, 0x9, 0x7, 0x2, 0x5, 0x2, 0x3, 0x7, 0x101, 0x2, 0x2, 0xd3e, 0x80000001, 0x5, 0x7, 0x6, 0x1, 0x7f, 0xffff33f0, 0x6, 0x0, 0x6, 0x400, 0xc9, 0x7, 0x9]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x10000000, 0x10000, 0x3, 0x10000, {0x0, 0x1, 0x591, 0x3, 0x752, 0x9}, {0x2, 0x0, 0x6, 0x9, 0x1d4c, 0x902f}, 0x2, 0xb9c, 0x7}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x5, 0x1, 0x8, {0x7, 0x0, 0x800, 0x5, 0x80, 0x4}, {0x7f, 0x1, 0x10, 0x6, 0x3, 0x7}, 0xa9ea, 0x8001, 0x70000000}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xb, 0x2, 0x3, 0x10001, 0x7fff, 0x1, 0x7, 0x10, 0xfff, 0x7, 0x4, 0x6, 0x4, 0x4, 0xb7, 0x93e, 0xfffff001, 0x7, 0x3ff, 0x80000001, 0x2715d957, 0x7, 0x5, 0xfffffff7, 0x9, 0x6, 0x3, 0x2, 0x0, 0x5890, 0x2, 0x8, 0x8, 0x2, 0x5, 0x4, 0x10001, 0x534, 0xed17, 0x5, 0x5, 0x1, 0x100, 0x2, 0x756, 0x0, 0x100, 0x81, 0x4, 0x7, 0xffff8000, 0x3c3, 0x101, 0x5, 0x0, 0x0, 0x4, 0x8, 0x5, 0x7, 0x5, 0xd15, 0x8, 0x4, 0xd, 0x7, 0x2, 0x3, 0x19f, 0x1, 0x8, 0x2, 0x4800, 0x5, 0x6, 0x4, 0xffff, 0x7, 0x8001, 0x7, 0x9, 0x8d8, 0xff, 0x80, 0x0, 0x1, 0x8e, 0x2, 0x9, 0x2, 0x1, 0x4, 0x6, 0x2, 0x7ba, 0x2, 0x9267, 0xfffffff7, 0xa, 0x0, 0x8001, 0x9, 0x0, 0x0, 0x3, 0x6, 0x5, 0x7fffffff, 0x6, 0x7, 0x27b, 0x0, 0xd652, 0x3, 0x236a, 0x272e7ce8, 0x4df, 0x0, 0x664, 0x4, 0x2275, 0x8, 0x6, 0x8, 0x8001, 0x1000, 0x4, 0x8, 0x4, 0x5, 0x1, 0x3ff, 0x10, 0x1, 0xfffffff8, 0x3, 0x3, 0x3, 0x200, 0xffff0000, 0x1f, 0x4, 0xc, 0x403, 0x418, 0x1, 0x400, 0xa9b1, 0x2, 0x8, 0x5, 0x9, 0x7, 0x6, 0x1ae, 0x7, 0x100, 0x2, 0x8, 0x5, 0x6, 0x4, 0x8, 0x7, 0xd, 0x9, 0xee, 0x1, 0x6, 0x0, 0x2, 0xb, 0x3, 0x6, 0xb, 0xfff, 0x4, 0xff, 0x4, 0xc, 0x100, 0x0, 0x3, 0xffff3596, 0x10000, 0x2, 0x2, 0x9, 0x2, 0x7, 0x8001, 0x5, 0xfffffff9, 0x2, 0x0, 0x3, 0x4, 0x8, 0x71cd2f07, 0x4, 0x7, 0xd8c2, 0x0, 0x30000000, 0x5f, 0x3, 0x432d, 0x4, 0x401, 0x2, 0xfff, 0x1, 0xbb7, 0x5, 0x2dfb, 0x5, 0x3, 0x8, 0x3ff, 0x4, 0xfff, 0x4, 0x80, 0x9, 0x10001, 0xffffffff, 0x5, 0x10, 0x4, 0x5, 0x7, 0x2, 0x0, 0x4, 0xd3, 0x640c, 0x5, 0x4497, 0x85, 0xf5, 0x2, 0x6, 0x3, 0x2ba, 0xb, 0x5, 0x3, 0x4, 0x9, 0x9, 0xffff4c31, 0xff, 0x3, 0x8830, 0xf8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x20000000, 0x0, 0x4, 0x400, {0x2, 0x0, 0x660, 0x2a, 0x2, 0x2}, {0x6, 0x2, 0x401, 0xc0, 0x101, 0x9}, 0x7, 0x41, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x4, 0x5, 0xd, 0x8, 0x31, 0x4a, 0x0, 0x9, 0xfffffc38, 0x8, 0x1, 0x6, 0x9, 0xd70a, 0x0, 0xffffff01, 0xa, 0x6, 0xb04a, 0x207b, 0x5, 0xffff, 0x1, 0x400, 0x10, 0x2, 0x9c2, 0x7, 0x817f, 0x6, 0x7, 0xffff, 0xffffa31b, 0x80000000, 0x6, 0x7, 0x711, 0x40, 0xf, 0xf44, 0x100, 0x10001, 0xffffffd2, 0x7, 0x81, 0x8, 0x0, 0xff, 0x8, 0x10000, 0x3ff, 0x7, 0x9, 0x10, 0x7, 0x5, 0x6, 0x2d1, 0xaa6, 0x6, 0x5, 0x3b, 0x19bc, 0x3, 0x1, 0x58bb, 0xfffffffb, 0x6, 0x28, 0x44, 0x9, 0x0, 0x800000, 0xe68, 0x7, 0x0, 0x10, 0xe, 0x1, 0x7, 0x8, 0xfffffff1, 0xffff, 0x6a, 0x3, 0x4, 0x1, 0x959, 0x0, 0x8, 0x9, 0x6, 0x9, 0x6, 0x8, 0x0, 0x6, 0x0, 0x4, 0x6, 0x0, 0x7, 0xd, 0x0, 0x5, 0xffff, 0x6, 0x6, 0x101, 0xffffffff, 0x82c8, 0x7, 0x5e, 0x2, 0xb, 0x8001, 0x2, 0x4f, 0x401, 0x0, 0x3, 0x0, 0xd338, 0x40, 0x7, 0x2, 0x5, 0x9, 0x7, 0x6, 0x3, 0x1, 0x54c1, 0x8, 0xa, 0x22f, 0x80, 0x800, 0xffff, 0x101, 0xc5f, 0x6, 0x4, 0x3, 0x3, 0x80, 0x4, 0x7, 0x27cf, 0x4, 0x0, 0x7, 0x1, 0x8000, 0x1, 0x0, 0x5, 0x0, 0x64, 0x3ff, 0x80000001, 0xd1c, 0xa9ae, 0xa8, 0x0, 0x800000, 0x4, 0x5, 0x1000, 0x9, 0x80000000, 0x8, 0x8, 0x6, 0x1, 0x8, 0x8, 0x2, 0x40000, 0x800, 0xa2, 0x5, 0xfffffffc, 0x10, 0x2, 0x80000000, 0x4, 0x34, 0x7, 0x8000, 0x7, 0x6c, 0x626, 0x3, 0x9, 0x81, 0x7, 0x1, 0xa0000000, 0x1, 0x56e6, 0x2, 0x5, 0xe4, 0x6f, 0x6, 0x6, 0x6, 0x1, 0x9, 0x60e7, 0x6, 0x6, 0x7, 0x6, 0x1, 0x8000, 0x3, 0x2, 0xfffffffb, 0x9, 0x2, 0xfffffffe, 0x8000, 0x5, 0xb0, 0x6, 0xe43, 0x7, 0x0, 0x4, 0x9, 0x1, 0x7b0b, 0xd90, 0x2, 0x3842, 0x7ff, 0x26d7833a, 0xb, 0xfffffdd2, 0xebc4, 0x6, 0x8, 0xa, 0x6, 0x7, 0x2, 0x1, 0x1, 0x80, 0x7, 0x7, 0x9, 0x5eec01d3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x8, 0x4, 0x10000, 0x0, {0x8, 0x2, 0x1, 0x3, 0x5, 0x6}, {0x7, 0x2, 0x1000, 0x2, 0x8, 0x4}, 0x5, 0x4, 0x800}}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f8, 0x8, 0x721, 0x2, 0x4, {0x6, 0x1, 0x3, 0x6, 0x7, 0x6}, {0x2, 0x2, 0x7fff, 0x8001, 0x1ff, 0x5}, 0xd, 0xe, 0x4}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x8000, 0xd, 0x6, 0x8, 0x80000000, 0x9fc, 0x7, 0xfffffff8, 0x7, 0x4, 0x80, 0x5, 0x2, 0x2b, 0x3, 0x3, 0x1, 0x7, 0x9242, 0x4, 0x774, 0x8, 0x40, 0x401, 0x7fffffff, 0x5, 0xe, 0x80000000, 0x6, 0xf0000000, 0x0, 0xf, 0x6, 0x1, 0x9, 0x101, 0x4, 0x2, 0xfffff001, 0x10, 0x400, 0x2, 0x403, 0x71f742c8, 0x0, 0x100, 0x3c, 0x1, 0xfffffff8, 0x9, 0x7f, 0x0, 0xa4, 0xa, 0x4, 0xffffffff, 0x3, 0x4, 0xd8b, 0x4, 0x2, 0xfffffff8, 0xffff, 0x5, 0x3, 0x1, 0x7, 0x0, 0x1494, 0x4, 0x3, 0x9, 0x7f, 0x2, 0xe0, 0x8, 0x1, 0xd, 0x8, 0x6, 0x3f5, 0x1, 0x10000, 0x4, 0x7fffffff, 0xfffffd94, 0x6, 0x9931, 0x80000000, 0x6, 0x8, 0x3a, 0x7ff, 0x4, 0x5, 0xffffffff, 0x9, 0x10000, 0xabcb, 0x8, 0x1000, 0x8, 0x80000001, 0xfffffff8, 0xffff0001, 0x40, 0x0, 0x7, 0x80000001, 0xfffffffd, 0x9, 0xd2, 0x10000, 0x6, 0x3, 0xe17, 0x0, 0xffff, 0x3, 0xfffffff2, 0x1, 0x81, 0x80000000, 0x3, 0x5, 0x1, 0x7, 0x9, 0x80000001, 0x0, 0x7, 0xb6c, 0x1ff, 0x10, 0x6, 0x9a, 0x9, 0x3, 0x3, 0x1, 0x1, 0x2, 0x1, 0x4, 0xfff, 0x300, 0x0, 0x81, 0x21, 0x1, 0x0, 0x1, 0x9, 0xfffffff7, 0xcc62, 0x2, 0x168, 0x6, 0x8, 0x9, 0xc, 0x7, 0x1, 0x0, 0x7fffffff, 0x9, 0xaee5, 0x8, 0x2, 0x200, 0x6, 0x7f, 0x2a553f7e, 0x3, 0xd, 0x4, 0x51, 0xb3d, 0x81, 0xc, 0x4, 0x5, 0x8, 0x8, 0x0, 0x8, 0x8, 0x0, 0x6, 0x401, 0x6, 0x5, 0x5, 0x3ff, 0x6, 0xbd4b, 0x200, 0xbe, 0x98c, 0x153, 0x4, 0x8, 0x5, 0x80000, 0x9, 0xb1c0, 0x4, 0x9, 0x97c, 0x4, 0xfffffff8, 0x5, 0x3886, 0x5, 0x3, 0xe1a8, 0x4, 0xfffffffa, 0xf, 0x5, 0xfffffe88, 0xfffffffb, 0x100, 0x9, 0x0, 0x2f280, 0x4e, 0x0, 0x2, 0x8, 0x2, 0x8, 0x7, 0xc, 0x4, 0x8, 0x4, 0x0, 0x6, 0x0, 0xfffffe01, 0x401, 0xffffff38, 0x86b, 0x3, 0xd, 0xc60, 0x8, 0x7, 0xffff, 0x5ccf7885, 0x8a7, 0x4, 0x2, 0x61e]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffff0}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0xffffffffffffffff, 0x6, 0xc0000000, 0x3, {0x85, 0x1, 0xfff7, 0xbe, 0x1, 0x9}, {0x0, 0x0, 0xfff, 0xf2d8, 0x3a8, 0xff}, 0x800000, 0x3, 0x3}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xcc66, 0x3, 0x2, 0x7, 0x80000000, {0xff, 0x1, 0x1, 0x3ff, 0x2, 0xd}, {0x7, 0x1, 0x9, 0xffff, 0x9}, 0x4f, 0x9, 0x101}}]]}, {0x3b, 0x6, "ed5ac7014f915f103656d8683aaea9e71c053400362a1da2f39a81c0bfe9b7fa43c9f501d87646cc29c95df0ab292df88ad10998f1be4c"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xf, 0x10}}, @TCA_ROUTE4_IIF={0x8, 0x4, r2}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @TCA_RATE={0x6, 0x5, {0x79, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x10000}, @filter_kind_options=@f_route={{0xa}, {0x2c, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r2}, @TCA_ROUTE4_TO={0x8, 0x2, 0xd1}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xae}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xd0}, @TCA_ROUTE4_IIF={0x8, 0x4, r2}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x5, 0x6}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x23a4}, 0x1, 0x0, 0x0, 0x51}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_open_dev$dri(&(0x7f0000000280), 0x25, 0x40861)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
socket$xdp(0x2c, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}, {0x0}], 0x2, &(0x7f0000008640)=[{0x0}], 0x1, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0xbf)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r6)
preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/65, 0x41}], 0x1, 0x1ef, 0x0)
sendmsg$NLBL_CALIPSO_C_REMOVE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r7, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000)
fsetxattr$security_ima(r0, &(0x7f0000000240), &(0x7f0000000280)=@md5={0x1, "cab202437294126c47c706f3a7813b63"}, 0x11, 0x1)

3m44.410987936s ago: executing program 33 (id=275):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newchain={0x23a4, 0x64, 0x4, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0xfff2}, {0xf}, {0x7, 0xe}}, [@filter_kind_options=@f_route={{0xa}, {0x22f8, 0x2, [@TCA_ROUTE4_ACT={0x22e4, 0x6, [@m_police={0x22e0, 0x14, 0x0, 0x0, {{0xb}, {0x227c, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x4, 0x7, 0xff, 0x3, {0x4, 0x1, 0x0, 0x8, 0xf, 0x3}, {0x4, 0x1, 0x5, 0x1, 0x8001, 0x10}, 0x6, 0x6, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x8, 0x3, 0xff, 0x5, 0x6, 0xfffffffe, 0x8, 0x4, 0x560, 0x4, 0x7, 0x7, 0x29, 0x800, 0xe, 0x2, 0x401, 0x11, 0x7f, 0x9, 0xfffffffb, 0x3, 0x4, 0x8, 0x6, 0xb, 0x6, 0x5, 0x8, 0x0, 0x0, 0x0, 0xc, 0x4, 0xc62b, 0x4, 0x7fffffff, 0x2, 0x3, 0xf, 0x1, 0x2df, 0x400, 0x6, 0x3, 0xff, 0x7, 0x1, 0x10001, 0x4, 0xff, 0x5, 0xfffffff9, 0x9, 0x2, 0x40, 0x8, 0x3, 0x6, 0x3f, 0xfffffeff, 0x0, 0xa96a, 0xaee1, 0x88c, 0xff, 0xa17f, 0x2, 0xc4, 0x6, 0x0, 0x4, 0x9, 0x3, 0xfffffffd, 0x9, 0x3, 0x1, 0x800, 0x2, 0x6, 0x8db4, 0x3, 0xe, 0x2, 0x0, 0x3, 0xea42, 0x2, 0x6, 0x101, 0x5283, 0x7, 0x6, 0x4, 0x2, 0x25, 0x5, 0x70755695, 0x8, 0x5, 0xa2, 0x9, 0x8, 0x2, 0xc0fb, 0x5, 0x1, 0x3, 0x5, 0x64050f1f, 0xfffffff9, 0x1, 0x3, 0x2, 0xd5, 0x2, 0x1, 0x80000000, 0x7fffffff, 0x2, 0xa, 0x1ff, 0x1, 0x7fffffff, 0x9b5, 0x2, 0x5, 0x10000, 0x7fffffff, 0x3, 0x5, 0x9, 0x7f, 0xee1d243, 0x2, 0x5, 0xfffffff8, 0x3, 0xa, 0xc, 0x5, 0x6e, 0x800, 0x6, 0x3483, 0x2, 0x8000, 0x1a, 0x6, 0x4, 0xb4, 0xfff, 0xfcc, 0x6, 0x5, 0x7ff, 0x9, 0xfffffff9, 0x8, 0x101, 0x83a, 0x8, 0x2, 0x5, 0x1, 0x998, 0x7, 0xb, 0x7fffffff, 0x3, 0xfffffff8, 0x8, 0xfffffffd, 0x7f, 0x6, 0x9, 0x0, 0x80, 0x400, 0x0, 0xb, 0x8, 0x4d, 0x9, 0x7ff, 0x5, 0xc8dc, 0xfffffffb, 0xffff, 0xf06d, 0x4, 0x9, 0xc4, 0x9, 0x2, 0xe, 0x86f, 0x3, 0x6, 0x3, 0x5, 0x8, 0xeaa, 0x8, 0x6, 0x0, 0x6, 0x2, 0x8, 0x100, 0x2, 0x9, 0x3, 0x3, 0xc, 0x78, 0xa, 0x8a7458f6, 0x1, 0x9, 0x7ff, 0x9, 0x2, 0x80, 0x5, 0x4, 0x8, 0x8, 0x4, 0x2, 0x9, 0x97, 0x8, 0x2, 0x6, 0x3, 0x6a, 0x200, 0x10, 0x9, 0x0, 0x3, 0x9, 0xb, 0x3, 0x80, 0x1, 0x5cb, 0x6, 0x0, 0x1000, 0x6, 0x800]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x9, 0x6, 0x5, 0x6, 0x10001, 0x4, 0xe824c33, 0x2c3f, 0xfffff82d, 0xc767, 0x80, 0x1, 0x1, 0x6, 0x1000, 0x9, 0x0, 0x6, 0x3, 0x7a, 0x2, 0xd440, 0x5, 0x436, 0x200, 0x200, 0x4, 0x7f, 0x7ff, 0x4, 0x200, 0x3, 0x7fffffff, 0x4, 0xfffffff7, 0x5, 0x1, 0x2, 0xf, 0x1, 0x3, 0xfffffffc, 0x9, 0x6, 0x6, 0x6, 0x1, 0xb84, 0x55, 0x7, 0x5, 0x80000001, 0x9, 0x9, 0x3, 0x10000, 0x8, 0x40, 0x1, 0x3, 0x17, 0x7, 0x4, 0x0, 0xad2, 0x80, 0x5, 0xa, 0x79, 0x10001, 0xfff, 0x8, 0x2, 0x9, 0x200, 0x0, 0x1ff, 0x2, 0x9, 0x52, 0x3e2, 0x6f, 0x7, 0x9c, 0x7fffffff, 0x5, 0x4fd40, 0x6, 0x3233, 0xf51, 0x2, 0x31e0, 0x4, 0x5, 0xa, 0x8, 0x6, 0x3a780815, 0x5, 0x4, 0x2, 0x48144839, 0x4, 0x7, 0xffff9851, 0x10, 0xdd95, 0x2, 0x9, 0xff, 0x8000, 0x5, 0x4da, 0x1, 0x10001, 0x8000, 0xd, 0xd51, 0x9, 0x8, 0x0, 0x1, 0x3, 0x6, 0x3, 0x9, 0x1000, 0xf1, 0x7, 0x200, 0x9, 0x7af7, 0x9, 0xffffffff, 0x80, 0x8, 0x4, 0x100, 0x10001, 0x0, 0x8, 0x1a6, 0x8, 0x6866, 0x3ff, 0x3, 0x1, 0x2, 0x9, 0xae4, 0x40, 0x1ff, 0x9, 0xbe6b, 0x0, 0x7f, 0x6, 0x8, 0x1, 0x5, 0x5b0, 0x6, 0xdb20, 0x400, 0x9b, 0x655e, 0x97, 0xc3, 0x7ff, 0x9, 0x7, 0x9, 0x8, 0x7, 0x5, 0x200, 0x200, 0x0, 0x8, 0x9, 0x0, 0x2, 0x6, 0xd, 0x101, 0x5, 0x200, 0x5, 0xff, 0xfffffeff, 0x8ed, 0x2, 0x7, 0x8, 0x9, 0x4, 0xffff, 0x401, 0x7ff, 0x5, 0xe87, 0x8, 0x401, 0x3, 0x9, 0x7, 0x4f21, 0x3, 0x3ff, 0x2, 0x9, 0xff, 0x0, 0x40, 0x7fff, 0x9, 0x7, 0x4, 0x10001, 0x1, 0xc, 0x7008, 0x3, 0xa, 0x8, 0x2, 0xfffffff8, 0x8, 0xfffff1ac, 0x5, 0x80000001, 0xfd, 0x7, 0x7, 0xffff, 0xdf5, 0x9, 0xbb, 0x0, 0x606, 0x10, 0x2, 0x3caeda68, 0x1, 0x8, 0x22, 0x100, 0x8, 0x7fffffff, 0x7f8000, 0x2, 0xa6, 0x475, 0x7, 0x2]}], [], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xff, 0xfff, 0x1, 0x861, 0x4, 0x7, 0x2, 0x0, 0x6, 0x5, 0x3, 0x5, 0x3, 0x2, 0x0, 0x1ea, 0x3, 0x9, 0x3c, 0x7, 0x0, 0x6, 0x48000000, 0x7, 0x2, 0x5, 0x4, 0xda, 0x9, 0x88, 0x8baf, 0x81, 0x101, 0x3, 0x4, 0xe, 0x221d, 0x0, 0x10000, 0x3, 0x9, 0x9, 0x3ff, 0x1, 0xeec, 0x7, 0x7ff, 0x400, 0xffffffff, 0x7, 0x9, 0x81, 0x3ff, 0xff, 0x1, 0xb, 0x83, 0x4dd9, 0x10000000, 0x0, 0x3, 0x1, 0x7, 0xffffffff, 0x3, 0x7, 0x9, 0x2, 0x84f7, 0x10000, 0x1018c553, 0x59, 0x1, 0x6, 0xe97d, 0x0, 0x6, 0x1, 0xf4c, 0xffff, 0x0, 0x7, 0xfffffffb, 0x8, 0x7, 0x6e9, 0x6, 0x7, 0x80000000, 0x8, 0xac000, 0x1, 0x91a2, 0x80000000, 0xfffffffb, 0x9, 0x1, 0x3ff, 0x5, 0xf30, 0x4, 0x6, 0x200, 0x4, 0x5, 0xce, 0x9, 0x5, 0x8, 0xe, 0x6, 0x8, 0xe, 0xe6, 0x1, 0x8, 0x5, 0x6, 0x4, 0x6, 0x3, 0x10000, 0x7, 0x5, 0x9, 0x6, 0x0, 0xfc8, 0x8, 0xfffffffc, 0x800, 0x4, 0x2, 0x3, 0x604, 0xff, 0xc, 0x10001, 0x40, 0x3, 0x0, 0xfffffff9, 0x1, 0x6, 0xb, 0x7, 0xc164, 0x8001, 0x1, 0x800, 0x6, 0x4cc, 0xa, 0x6, 0x8, 0x2, 0x5, 0x40, 0x7, 0x8, 0x1000, 0x2, 0xb119, 0x7ff, 0xffff, 0x1, 0x4, 0x1, 0x3, 0x400, 0x2, 0xb82, 0x8, 0x6, 0xc5, 0x85c, 0x5, 0x0, 0x7, 0x852, 0x962e, 0x1, 0xffffd637, 0x1a, 0x4, 0x8, 0x1, 0x81, 0x7fffffff, 0xe, 0xd, 0x3, 0x9, 0x4, 0x4800, 0x3, 0x0, 0x71, 0x12, 0xf, 0x3, 0x9, 0x7, 0x5, 0x0, 0xffffff39, 0x6, 0x3c2, 0x2, 0x1c0000, 0x8, 0x8, 0x8, 0x3, 0x5, 0x7d, 0x0, 0x8, 0x5, 0x3, 0x4, 0x3, 0x3, 0x6, 0x9, 0x0, 0x2, 0x200, 0x3, 0xfff, 0x2, 0x6, 0x8, 0x6b, 0x2, 0xffffffff, 0x6, 0x10001, 0x10, 0x7fffffff, 0x7, 0x7, 0x4, 0x2, 0x7, 0x5, 0x0, 0xedd, 0x6, 0x1, 0x180000, 0x6, 0xffffd82b, 0x15f2, 0x2, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x5, 0x3, 0x1ff, 0xf, 0x2, 0x0, 0x31c9168e, 0x7, 0xd3f, 0x2, 0xfffffff7, 0x8, 0x81, 0x9, 0x1, 0x6, 0x8, 0x2, 0x1, 0x1, 0x600, 0x81, 0x0, 0x4e9, 0x0, 0x6, 0x8, 0x1, 0x0, 0x200, 0xfffffffa, 0x200, 0x70e3ea2b, 0x9, 0x8, 0x79c, 0x5, 0x7, 0x8, 0x8, 0x6, 0x7, 0x2, 0x5, 0x1ff, 0x8, 0x7f, 0x6, 0x7fffffff, 0x8, 0x3, 0x100000, 0xf919, 0x5, 0x8000, 0x4, 0x9, 0x401, 0x5f144c0a, 0x40, 0x0, 0x6, 0x46ce90ca, 0x6, 0x3, 0x1, 0x7, 0xb, 0xc18f, 0x2, 0x4, 0x81, 0x0, 0x8, 0x9, 0xc6ff, 0x1000, 0x7, 0x6, 0x3ff, 0x1ff, 0x8b, 0x2dc, 0x80000001, 0x1000, 0x1, 0x1a5f, 0x40, 0x3, 0x1, 0x63b3, 0x4, 0x9, 0x8, 0x8, 0x3, 0x81, 0x3, 0xb, 0x8959, 0x9, 0x4, 0x0, 0x3, 0x800, 0xa, 0x9, 0x800, 0x8001, 0x3, 0xaec3453, 0x80000001, 0x0, 0xffffffff, 0x2, 0xfffffff7, 0x4, 0xc6, 0x6, 0x1, 0xffffffff, 0x80, 0x8000, 0x789, 0x3, 0x7, 0x100, 0x7, 0xc4, 0x4, 0x0, 0x0, 0x5, 0xf8, 0x5, 0x1, 0x123, 0x8, 0x0, 0x1ff, 0x16df6fb2, 0x0, 0x3, 0xfffffffd, 0x1, 0x8, 0x6, 0x9, 0x8001, 0xffffffcd, 0x66, 0x7f, 0x1, 0x101, 0x1, 0xffffffff, 0xa19, 0xffffea46, 0x0, 0x5e, 0xecf9, 0x2f33, 0x3, 0xff, 0x0, 0x4, 0x5, 0x8001, 0xfffffffa, 0x0, 0x23, 0x752, 0x1, 0x0, 0xcd, 0x8, 0x9, 0x1000, 0xffffffe2, 0x400, 0x3, 0x8, 0x8001, 0x8, 0x6c, 0x1ff, 0x4c, 0x7fff, 0x4, 0x3f05, 0x7f, 0x3, 0x6, 0x2f, 0x0, 0x809, 0x80000000, 0x4c9, 0x8, 0x172a44f3, 0x9, 0x4, 0x4, 0x3, 0x8d6, 0x4, 0x2, 0x8, 0xcf, 0x8, 0x7, 0xff, 0x7, 0xc, 0x10, 0x8, 0x1, 0x3, 0x1, 0x80, 0x6aca, 0xff, 0x9, 0x8000, 0x2, 0x9, 0x4, 0x6, 0xfffffff7, 0x8, 0x6, 0x8, 0x86b, 0x4, 0x80, 0x6, 0x3, 0xb1, 0x4, 0x7, 0xf, 0xaf, 0x90b, 0x9, 0x7, 0xf9, 0x7, 0x9, 0x6, 0x8, 0x7820, 0x81, 0x200, 0xce98, 0x8001]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3ff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0xdf, 0x200, 0xffff, 0x80, 0x57d, 0x1000, 0x3, 0xad, 0x5, 0x1, 0x4, 0xfff, 0xfffffff2, 0x7f, 0xff, 0x6, 0x8, 0x6, 0x401, 0x1, 0x84a, 0x2, 0x0, 0xb, 0x4, 0x0, 0x8, 0x8, 0xfff, 0x39, 0xfffffffd, 0x7, 0x9, 0x9, 0x1a3, 0x5, 0x401, 0x2, 0x5, 0x1b, 0x7f, 0x7f, 0x6, 0x8, 0x8001, 0x7, 0x1, 0xe, 0x8, 0x10000, 0x2, 0x11d, 0x7ff, 0x80000001, 0x7, 0x1, 0x7f, 0x0, 0x0, 0x2000000, 0x3, 0x7, 0x7d, 0xff, 0x3, 0xb, 0xffffffff, 0xffffff00, 0x7, 0x2, 0x7fff, 0x6c, 0x80, 0xde, 0x3, 0x1, 0x4, 0x3, 0x3, 0x795, 0xfffffffd, 0x1, 0x9, 0x9, 0x2, 0xfb7, 0x7fffffff, 0x80000000, 0xfffffffa, 0x9, 0x1, 0x7, 0x3, 0x200, 0x5, 0x6, 0x0, 0x0, 0x7, 0x7ff, 0x4, 0x5, 0x8001, 0x1, 0x2, 0x4, 0xeef6, 0xceb, 0xffff36df, 0x101, 0xfffffffb, 0xffffff81, 0x9, 0x8001, 0xffff, 0xffff, 0xf62, 0x4f, 0x10, 0x9, 0x5, 0x7, 0x4, 0xb, 0x9, 0x1, 0xffffffff, 0x0, 0x10, 0xfffffff9, 0xff, 0x7, 0x8, 0x7, 0xfffffc00, 0xfffffffd, 0x8, 0x2, 0x7, 0x5, 0x2, 0x5, 0x2, 0x60, 0x9, 0x3, 0x100, 0x3, 0x2, 0xc1, 0xd, 0x6, 0xf41c, 0x1, 0x3, 0x6, 0x8001, 0x4, 0x80, 0x3ff, 0x6, 0x9, 0x1f, 0xfffff6d3, 0x1, 0x2, 0x1, 0x0, 0x800, 0xc, 0x4, 0x4, 0x972e, 0x5ecf, 0x0, 0x92df, 0xe, 0x245b, 0xa, 0xa, 0x8733, 0x101, 0x8640, 0x400, 0x7, 0x3, 0xffffffff, 0xffff, 0xfffffff8, 0x1, 0x400, 0x50a, 0x1, 0x9, 0x80000001, 0x9, 0x3, 0x0, 0x7, 0x7, 0x80000001, 0xfffffffb, 0xffff8000, 0x4085, 0x8, 0x4, 0x5, 0x0, 0x5, 0xa, 0x5, 0x8, 0x4, 0x2, 0x2, 0x4, 0xa6d, 0x1, 0x5, 0x9, 0xfffffd2c, 0x917a83b, 0x1, 0x400, 0xffff, 0x0, 0x8, 0x100, 0x8, 0x8, 0x9, 0x7, 0x2, 0x5, 0x2, 0x3, 0x7, 0x101, 0x2, 0x2, 0xd3e, 0x80000001, 0x5, 0x7, 0x6, 0x1, 0x7f, 0xffff33f0, 0x6, 0x0, 0x6, 0x400, 0xc9, 0x7, 0x9]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x10000000, 0x10000, 0x3, 0x10000, {0x0, 0x1, 0x591, 0x3, 0x752, 0x9}, {0x2, 0x0, 0x6, 0x9, 0x1d4c, 0x902f}, 0x2, 0xb9c, 0x7}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x4, 0x5, 0x1, 0x8, {0x7, 0x0, 0x800, 0x5, 0x80, 0x4}, {0x7f, 0x1, 0x10, 0x6, 0x3, 0x7}, 0xa9ea, 0x8001, 0x70000000}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xb, 0x2, 0x3, 0x10001, 0x7fff, 0x1, 0x7, 0x10, 0xfff, 0x7, 0x4, 0x6, 0x4, 0x4, 0xb7, 0x93e, 0xfffff001, 0x7, 0x3ff, 0x80000001, 0x2715d957, 0x7, 0x5, 0xfffffff7, 0x9, 0x6, 0x3, 0x2, 0x0, 0x5890, 0x2, 0x8, 0x8, 0x2, 0x5, 0x4, 0x10001, 0x534, 0xed17, 0x5, 0x5, 0x1, 0x100, 0x2, 0x756, 0x0, 0x100, 0x81, 0x4, 0x7, 0xffff8000, 0x3c3, 0x101, 0x5, 0x0, 0x0, 0x4, 0x8, 0x5, 0x7, 0x5, 0xd15, 0x8, 0x4, 0xd, 0x7, 0x2, 0x3, 0x19f, 0x1, 0x8, 0x2, 0x4800, 0x5, 0x6, 0x4, 0xffff, 0x7, 0x8001, 0x7, 0x9, 0x8d8, 0xff, 0x80, 0x0, 0x1, 0x8e, 0x2, 0x9, 0x2, 0x1, 0x4, 0x6, 0x2, 0x7ba, 0x2, 0x9267, 0xfffffff7, 0xa, 0x0, 0x8001, 0x9, 0x0, 0x0, 0x3, 0x6, 0x5, 0x7fffffff, 0x6, 0x7, 0x27b, 0x0, 0xd652, 0x3, 0x236a, 0x272e7ce8, 0x4df, 0x0, 0x664, 0x4, 0x2275, 0x8, 0x6, 0x8, 0x8001, 0x1000, 0x4, 0x8, 0x4, 0x5, 0x1, 0x3ff, 0x10, 0x1, 0xfffffff8, 0x3, 0x3, 0x3, 0x200, 0xffff0000, 0x1f, 0x4, 0xc, 0x403, 0x418, 0x1, 0x400, 0xa9b1, 0x2, 0x8, 0x5, 0x9, 0x7, 0x6, 0x1ae, 0x7, 0x100, 0x2, 0x8, 0x5, 0x6, 0x4, 0x8, 0x7, 0xd, 0x9, 0xee, 0x1, 0x6, 0x0, 0x2, 0xb, 0x3, 0x6, 0xb, 0xfff, 0x4, 0xff, 0x4, 0xc, 0x100, 0x0, 0x3, 0xffff3596, 0x10000, 0x2, 0x2, 0x9, 0x2, 0x7, 0x8001, 0x5, 0xfffffff9, 0x2, 0x0, 0x3, 0x4, 0x8, 0x71cd2f07, 0x4, 0x7, 0xd8c2, 0x0, 0x30000000, 0x5f, 0x3, 0x432d, 0x4, 0x401, 0x2, 0xfff, 0x1, 0xbb7, 0x5, 0x2dfb, 0x5, 0x3, 0x8, 0x3ff, 0x4, 0xfff, 0x4, 0x80, 0x9, 0x10001, 0xffffffff, 0x5, 0x10, 0x4, 0x5, 0x7, 0x2, 0x0, 0x4, 0xd3, 0x640c, 0x5, 0x4497, 0x85, 0xf5, 0x2, 0x6, 0x3, 0x2ba, 0xb, 0x5, 0x3, 0x4, 0x9, 0x9, 0xffff4c31, 0xff, 0x3, 0x8830, 0xf8]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x20000000, 0x0, 0x4, 0x400, {0x2, 0x0, 0x660, 0x2a, 0x2, 0x2}, {0x6, 0x2, 0x401, 0xc0, 0x101, 0x9}, 0x7, 0x41, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x4, 0x5, 0xd, 0x8, 0x31, 0x4a, 0x0, 0x9, 0xfffffc38, 0x8, 0x1, 0x6, 0x9, 0xd70a, 0x0, 0xffffff01, 0xa, 0x6, 0xb04a, 0x207b, 0x5, 0xffff, 0x1, 0x400, 0x10, 0x2, 0x9c2, 0x7, 0x817f, 0x6, 0x7, 0xffff, 0xffffa31b, 0x80000000, 0x6, 0x7, 0x711, 0x40, 0xf, 0xf44, 0x100, 0x10001, 0xffffffd2, 0x7, 0x81, 0x8, 0x0, 0xff, 0x8, 0x10000, 0x3ff, 0x7, 0x9, 0x10, 0x7, 0x5, 0x6, 0x2d1, 0xaa6, 0x6, 0x5, 0x3b, 0x19bc, 0x3, 0x1, 0x58bb, 0xfffffffb, 0x6, 0x28, 0x44, 0x9, 0x0, 0x800000, 0xe68, 0x7, 0x0, 0x10, 0xe, 0x1, 0x7, 0x8, 0xfffffff1, 0xffff, 0x6a, 0x3, 0x4, 0x1, 0x959, 0x0, 0x8, 0x9, 0x6, 0x9, 0x6, 0x8, 0x0, 0x6, 0x0, 0x4, 0x6, 0x0, 0x7, 0xd, 0x0, 0x5, 0xffff, 0x6, 0x6, 0x101, 0xffffffff, 0x82c8, 0x7, 0x5e, 0x2, 0xb, 0x8001, 0x2, 0x4f, 0x401, 0x0, 0x3, 0x0, 0xd338, 0x40, 0x7, 0x2, 0x5, 0x9, 0x7, 0x6, 0x3, 0x1, 0x54c1, 0x8, 0xa, 0x22f, 0x80, 0x800, 0xffff, 0x101, 0xc5f, 0x6, 0x4, 0x3, 0x3, 0x80, 0x4, 0x7, 0x27cf, 0x4, 0x0, 0x7, 0x1, 0x8000, 0x1, 0x0, 0x5, 0x0, 0x64, 0x3ff, 0x80000001, 0xd1c, 0xa9ae, 0xa8, 0x0, 0x800000, 0x4, 0x5, 0x1000, 0x9, 0x80000000, 0x8, 0x8, 0x6, 0x1, 0x8, 0x8, 0x2, 0x40000, 0x800, 0xa2, 0x5, 0xfffffffc, 0x10, 0x2, 0x80000000, 0x4, 0x34, 0x7, 0x8000, 0x7, 0x6c, 0x626, 0x3, 0x9, 0x81, 0x7, 0x1, 0xa0000000, 0x1, 0x56e6, 0x2, 0x5, 0xe4, 0x6f, 0x6, 0x6, 0x6, 0x1, 0x9, 0x60e7, 0x6, 0x6, 0x7, 0x6, 0x1, 0x8000, 0x3, 0x2, 0xfffffffb, 0x9, 0x2, 0xfffffffe, 0x8000, 0x5, 0xb0, 0x6, 0xe43, 0x7, 0x0, 0x4, 0x9, 0x1, 0x7b0b, 0xd90, 0x2, 0x3842, 0x7ff, 0x26d7833a, 0xb, 0xfffffdd2, 0xebc4, 0x6, 0x8, 0xa, 0x6, 0x7, 0x2, 0x1, 0x1, 0x80, 0x7, 0x7, 0x9, 0x5eec01d3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x8, 0x4, 0x10000, 0x0, {0x8, 0x2, 0x1, 0x3, 0x5, 0x6}, {0x7, 0x2, 0x1000, 0x2, 0x8, 0x4}, 0x5, 0x4, 0x800}}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x5f8, 0x8, 0x721, 0x2, 0x4, {0x6, 0x1, 0x3, 0x6, 0x7, 0x6}, {0x2, 0x2, 0x7fff, 0x8001, 0x1ff, 0x5}, 0xd, 0xe, 0x4}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x8000, 0xd, 0x6, 0x8, 0x80000000, 0x9fc, 0x7, 0xfffffff8, 0x7, 0x4, 0x80, 0x5, 0x2, 0x2b, 0x3, 0x3, 0x1, 0x7, 0x9242, 0x4, 0x774, 0x8, 0x40, 0x401, 0x7fffffff, 0x5, 0xe, 0x80000000, 0x6, 0xf0000000, 0x0, 0xf, 0x6, 0x1, 0x9, 0x101, 0x4, 0x2, 0xfffff001, 0x10, 0x400, 0x2, 0x403, 0x71f742c8, 0x0, 0x100, 0x3c, 0x1, 0xfffffff8, 0x9, 0x7f, 0x0, 0xa4, 0xa, 0x4, 0xffffffff, 0x3, 0x4, 0xd8b, 0x4, 0x2, 0xfffffff8, 0xffff, 0x5, 0x3, 0x1, 0x7, 0x0, 0x1494, 0x4, 0x3, 0x9, 0x7f, 0x2, 0xe0, 0x8, 0x1, 0xd, 0x8, 0x6, 0x3f5, 0x1, 0x10000, 0x4, 0x7fffffff, 0xfffffd94, 0x6, 0x9931, 0x80000000, 0x6, 0x8, 0x3a, 0x7ff, 0x4, 0x5, 0xffffffff, 0x9, 0x10000, 0xabcb, 0x8, 0x1000, 0x8, 0x80000001, 0xfffffff8, 0xffff0001, 0x40, 0x0, 0x7, 0x80000001, 0xfffffffd, 0x9, 0xd2, 0x10000, 0x6, 0x3, 0xe17, 0x0, 0xffff, 0x3, 0xfffffff2, 0x1, 0x81, 0x80000000, 0x3, 0x5, 0x1, 0x7, 0x9, 0x80000001, 0x0, 0x7, 0xb6c, 0x1ff, 0x10, 0x6, 0x9a, 0x9, 0x3, 0x3, 0x1, 0x1, 0x2, 0x1, 0x4, 0xfff, 0x300, 0x0, 0x81, 0x21, 0x1, 0x0, 0x1, 0x9, 0xfffffff7, 0xcc62, 0x2, 0x168, 0x6, 0x8, 0x9, 0xc, 0x7, 0x1, 0x0, 0x7fffffff, 0x9, 0xaee5, 0x8, 0x2, 0x200, 0x6, 0x7f, 0x2a553f7e, 0x3, 0xd, 0x4, 0x51, 0xb3d, 0x81, 0xc, 0x4, 0x5, 0x8, 0x8, 0x0, 0x8, 0x8, 0x0, 0x6, 0x401, 0x6, 0x5, 0x5, 0x3ff, 0x6, 0xbd4b, 0x200, 0xbe, 0x98c, 0x153, 0x4, 0x8, 0x5, 0x80000, 0x9, 0xb1c0, 0x4, 0x9, 0x97c, 0x4, 0xfffffff8, 0x5, 0x3886, 0x5, 0x3, 0xe1a8, 0x4, 0xfffffffa, 0xf, 0x5, 0xfffffe88, 0xfffffffb, 0x100, 0x9, 0x0, 0x2f280, 0x4e, 0x0, 0x2, 0x8, 0x2, 0x8, 0x7, 0xc, 0x4, 0x8, 0x4, 0x0, 0x6, 0x0, 0xfffffe01, 0x401, 0xffffff38, 0x86b, 0x3, 0xd, 0xc60, 0x8, 0x7, 0xffff, 0x5ccf7885, 0x8a7, 0x4, 0x2, 0x61e]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffff0}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0xffffffffffffffff, 0x6, 0xc0000000, 0x3, {0x85, 0x1, 0xfff7, 0xbe, 0x1, 0x9}, {0x0, 0x0, 0xfff, 0xf2d8, 0x3a8, 0xff}, 0x800000, 0x3, 0x3}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xcc66, 0x3, 0x2, 0x7, 0x80000000, {0xff, 0x1, 0x1, 0x3ff, 0x2, 0xd}, {0x7, 0x1, 0x9, 0xffff, 0x9}, 0x4f, 0x9, 0x101}}]]}, {0x3b, 0x6, "ed5ac7014f915f103656d8683aaea9e71c053400362a1da2f39a81c0bfe9b7fa43c9f501d87646cc29c95df0ab292df88ad10998f1be4c"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xf, 0x10}}, @TCA_ROUTE4_IIF={0x8, 0x4, r2}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x1}}, @TCA_RATE={0x6, 0x5, {0x79, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x10000}, @filter_kind_options=@f_route={{0xa}, {0x2c, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r2}, @TCA_ROUTE4_TO={0x8, 0x2, 0xd1}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xae}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xd0}, @TCA_ROUTE4_IIF={0x8, 0x4, r2}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x5, 0x6}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x23a4}, 0x1, 0x0, 0x0, 0x51}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_open_dev$dri(&(0x7f0000000280), 0x25, 0x40861)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
socket$xdp(0x2c, 0x3, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}, {0x0}], 0x2, &(0x7f0000008640)=[{0x0}], 0x1, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0xbf)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r6)
preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/65, 0x41}], 0x1, 0x1ef, 0x0)
sendmsg$NLBL_CALIPSO_C_REMOVE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r7, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000)
fsetxattr$security_ima(r0, &(0x7f0000000240), &(0x7f0000000280)=@md5={0x1, "cab202437294126c47c706f3a7813b63"}, 0x11, 0x1)

1m44.787530064s ago: executing program 1 (id=691):
syz_emit_vhci(&(0x7f0000000900)=ANY=[@ANYBLOB], 0x1d)
r0 = socket(0x10, 0x3, 0x0)
recvmmsg$unix(r0, 0x0, 0x0, 0x2000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x5, 0x1ff, 0x2, 0x1, {0x6, 0xfd, 0x20ff, 0x8, 0xe, 0xf33a, 0x9, 0x4, 0xfffffffc, 0x6000, 0x6, 0x0, 0x0, 0x5, 0x8}}, {0x0, 0x13}}}, 0xa0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)})
ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)

1m43.999302936s ago: executing program 1 (id=692):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c5, 0x1000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2], 0x8080000, 0x1144})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
lseek(0xffffffffffffffff, 0x7fffffffffffffff, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000240)={0x1, 'macsec0\x00', {}, 0xc})
bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10)
bind$tipc(r0, 0x0, 0x0)

1m43.732025611s ago: executing program 1 (id=695):
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x1}], 0x0, 0x1000000000000, 0x0})

1m43.444764209s ago: executing program 1 (id=707):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x2}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0x1, 0x0, 0x1, 0x0, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x1, 0xb7, 0x3, 0xfffffffe}}, 0xe4)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
syz_open_procfs(0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x8}}, 0x20)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)
syz_io_uring_setup(0xf00, 0x0, 0x0, 0x0, &(0x7f0000000180))

1m42.42362522s ago: executing program 1 (id=701):
syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000080)=ANY=[@ANYBLOB="1201010200000e083512158240000102030109026e000301ff8007080b0002012030630904000000010130000b2401100a00090000000904010000010230000904"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0})

1m37.592005018s ago: executing program 1 (id=706):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='rpc_pipefs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffffffb}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0)

1m22.485356026s ago: executing program 34 (id=706):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xb0, &(0x7f0000000140)=""/176, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000340)='rpc_pipefs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffffffb}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0)

5.193354441s ago: executing program 7 (id=1056):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10)
sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1)

4.976110017s ago: executing program 7 (id=1058):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000200)=[{&(0x7f0000000100)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703110000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84d0f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014)

4.567720425s ago: executing program 7 (id=1062):
mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000900)='hfs\x00', 0x10, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000300000000000000f7ffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003", @ANYRES32=0x0, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000080)={0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = openat$audio(0xffffff9c, &(0x7f0000000340), 0x88001, 0x0)
ioctl$SNDCTL_DSP_GETTRIGGER(r5, 0x80045010, &(0x7f0000000380))
getsockopt$bt_hci(r4, 0x0, 0x3, &(0x7f0000001140)=""/4086, &(0x7f0000000180)=0xff6)
r6 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
sendmsg$inet(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40)
sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x78, r3, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5f}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "70d197532886c476ee7508b59c9e82da"}, @NL80211_ATTR_PMK={0x14, 0xfe, "b298e186514f85f1890fab319aba6559"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1}, @NL80211_ATTR_PMK={0x14, 0xfe, "7f53a7607b781bd375270f30e5d441fd"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x78}}, 0x1)
sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x14, 0x1, 0xfffffffc, 0x0, {0x3}}, 0x14}}, 0x0)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04132501"], 0x8)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

4.254784768s ago: executing program 7 (id=1066):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x2)
syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x14, 0x6, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[], {{0xfffe, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
write$P9_RVERSION(r2, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES32], 0x13)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1}}, 0x40)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f00006f0000/0x1000)=nil, 0x1000}, 0x3, 0x2})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r5)
sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001080)={0x34, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004800)
r7 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r7, 0x8)
r8 = accept4(r7, 0x0, 0x0, 0x0)
sendto$inet(r8, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10)
sendto$inet6(r8, &(0x7f0000000200)='x', 0x1, 0x4000000, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000640), 0x8)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2)
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, r9, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2dfa4eb9581fb0e0be7c14379fcb0b67c1cb37083cc46d6f"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x44040)

4.027670406s ago: executing program 3 (id=1068):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x2}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0x1, 0x0, 0x1, 0x0, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x1, 0xb7, 0x3, 0xfffffffe}}, 0xe4)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
r3 = timerfd_create(0x0, 0x800)
timerfd_gettime(r3, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r5=>0xffffffffffffffff}, 0x111, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0x1}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, r5, 0xfffffe4d}}, 0x48)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff}, 0x111, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r7, 0x7}}, 0x48)
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @remote, @multicast, @remote}}}}, 0x0)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c)
socket$nl_generic(0x10, 0x3, 0x10)

3.954329908s ago: executing program 7 (id=1070):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0x178, 0xffffff7a, 0xffffffff, 0x178, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff000000, 'pimreg0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x11, 0x0, 0xf}, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0x1, 0x8, 'netbios-ns\x00', {0x4}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x9}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x9, 0x8, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200a0, 0x18841}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x10000, 0x7}}]}]}]}, 0x3c}}, 0x800)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r3, &(0x7f0000000600)=[{&(0x7f0000000400)="8f880413174079893b3d7d8805616dad839b9828b41879efca5c87f83d06d865976f2805331179aa3b26df53702591b2d0ce68e5e92cb9931606838857e8eacacb1bc6b840705ccbad43737b59c4d93f943ace03c4ca87af27be279593a0bc5bccfe7b665d1dccd381064eccc8467d99555c8811f34f5643e109b0c7a14f8ce274561c6112df993b6ae6655b4cd20d40d03eb81722ff5732633aaf55e6b2342d4172e8fcf74d8b55472ed2f502e546640165caa67db94271a1d7923801186e4ec2dbec8bffa5d9b44d7888277547193b54777abdd17c9f1f37ac", 0xda}, {&(0x7f0000000500)="26805abdd1ed327e94af0933c97425fdc530d4d2153314229665cfd558d4953630647aa9237c1e6684e888ae03991ffa1dfa418f2c9c2ba4e195ba5f4f1c82df6ac56f330837b3dfbf0c8cd34a2e92a8f7d70d549404dfb9e11962cd6ff671e41713294d9421d6b7597ef420b4d7c8885e85ad26c896cc914a932d0d5f843216a43333cd0a342d6ff73a047db27c0d9d4d008cd4c879afb5d50ae8e8f7d64d31161cbe85fb0839131f4fee746246b081aa66fd06a7394e782ad6482fe9d84d79a36d4a6319df1cb59620a66400b277af", 0xd0}], 0x2)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0)
write$cgroup_pid(r6, &(0x7f0000000000), 0xffffff98)
socket(0x2a, 0x2, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fb", @ANYRES32=r9, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r10 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r9, 0xff7f}}, 0x20}}, 0x0)
socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000680)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x3c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0)
splice(r2, 0x0, r6, 0x0, 0x80, 0x8)
write(r4, 0x0, 0x0)
r13 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x437, 0x1, 0x21dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40c89, 0x40}}, 0x20}, 0x1, 0x0, 0x0, 0x44801}, 0x4040)

3.678184175s ago: executing program 0 (id=1071):
openat$ppp(0xffffffffffffff9c, 0x0, 0x101402, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x3, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ce000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000200)="66450fc7746e0a0fb51ef2ab400f79ac680080000066bba100ed0fc77310c4427d988c170500000074495470fb70190c190c75a854ff048fa800b6c3f9", 0x3d}], 0x1, 0x8, 0x0, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

3.117088608s ago: executing program 3 (id=1072):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xcbf, 0x41b5, 0x2, 0x9, 0x9, 0x44a0, 0x8, 0x5}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000)
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

3.007572837s ago: executing program 7 (id=1074):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x4, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xfffffffc, 0x0, 0x0, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00000000010000000000000000000000000000000000000000000000c7b2ab217728fd00"], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x40091}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000000), 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair(0x1d, 0x802, 0x7, &(0x7f0000004740))
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="54000000100001040000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff0100"/49, @ANYRES32=r5], 0x54}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000085000000951a12e2e64b431af6e5ff6ad151fbf5000000000200efff1711a9f6", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000860000008500000024000000bf91000000000000b7020000020000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000600)='syzkaller\x00', 0x1, 0x74, &(0x7f0000000640)=""/116, 0x40f00, 0x1, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0xfff, 0x1}, 0x8, 0x10, &(0x7f0000000740)={0x5, 0x0, 0xffffffa7, 0x4}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000780)=[{0x5, 0x5, 0x2, 0xb}, {0x4, 0x4, 0xd, 0x1}, {0x1, 0x2, 0xa, 0x8}, {0x5, 0x1, 0xc, 0x6}], 0x10, 0x5b1d9271}, 0x94)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x8, 0x3f8, 0xb, 0x32}, 0x9c)
sendto$inet6(r4, 0x0, 0x0, 0x20002000, &(0x7f000005ffe4)={0xa, 0x4e24, 0x0, @empty}, 0x1c)
modify_ldt$read(0x0, &(0x7f0000000400)=""/229, 0xe5)
syz_io_uring_setup(0x582e, &(0x7f0000000540)={0x0, 0xf5a5, 0x0, 0xffffffff, 0x2028a}, 0x0, &(0x7f0000000200), &(0x7f0000000000))
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
add_key$fscrypt_provisioning(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000500)=ANY=[@ANYBLOB="29aabf20d09f4e4d373401000000000000000102030405060708090a0b0c0d0e0f1011121314151617"], 0x48, 0xffffffffffffffff)
close_range(r7, 0xffffffffffffffff, 0x0)

2.904978074s ago: executing program 0 (id=1075):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000039000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000010000d042abd7000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="b2000600410c04001c0012800ce131fea2b9067b3e744679449b00006d6163766c616e000c000280080007000500fcff130035006d6163766c616e3000000000000000001e7c1e41d1e9d072b639de7d8e57104a18e1bf40759a045a547e8371377d13750c3c2c210bb00b604cf415d0b84c6bfd6dc76c7fdc05d522357dc12e6c6fcaab556e98bf78df63"], 0x50}, 0x1, 0x0, 0x0, 0x400c844}, 0x0)

2.816057199s ago: executing program 0 (id=1078):
connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x200}, 0x1c)
writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000080)="580000001400add405000000000000000a117fffffff81004e", 0x19}], 0x1)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x9, 0xffff, 0x9dff, 0x7, "8003e3ffff072000"})
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"})
r1 = syz_open_pts(r0, 0x200)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff)

2.118996005s ago: executing program 5 (id=1079):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2.051952397s ago: executing program 6 (id=1080):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x810)
setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x2}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0x1, 0x0, 0x1, 0x0, 0x3}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x1, 0xb7, 0x3, 0xfffffffe}}, 0xe4)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0))
r3 = timerfd_create(0x0, 0x800)
timerfd_gettime(r3, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r5=>0xffffffffffffffff}, 0x111, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0x1}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, r5, 0xfffffe4d}}, 0x48)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00')
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff}, 0x111, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r6, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r7, 0x7}}, 0x48)
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @remote, @multicast, @remote}}}}, 0x0)

2.025864341s ago: executing program 3 (id=1081):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = fsopen(0x0, 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
open(&(0x7f0000000100)='./file0\x00', 0x12840, 0x116)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0)
prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil)

1.961977902s ago: executing program 5 (id=1082):
r0 = socket$kcm(0x10, 0x3, 0x10)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e00003b000b05d25a80258c6394f90424fc60100005000a000200053582c137153e3704000180fc0b09000300", 0x33fe0}], 0x1}, 0x0)

1.090042098s ago: executing program 6 (id=1083):
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x1, @win={{0x2}, 0x5, 0x0, 0x0, 0x0, 0x0, 0x40}})
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, 0x0)
openat2$dir(0xffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, 0x0, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt(r2, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000200))
sendmmsg$unix(r3, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd9e4197", 0x4}], 0x1, &(0x7f00000003c0)=[@rights={{0x10, 0x1, 0x1, [r3]}}], 0x10, 0x20000041}}], 0x1, 0xc004)
recvmmsg(r4, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0)

983.848335ms ago: executing program 5 (id=1084):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0x178, 0xffffff7a, 0xffffffff, 0x178, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff000000, 'pimreg0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x11, 0x0, 0xf}, 0x6, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0x1, 0x8, 'netbios-ns\x00', {0x4}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x9}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x9, 0x8, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200a0, 0x18841}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x10000, 0x7}}]}]}]}, 0x3c}}, 0x800)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
writev(r3, &(0x7f0000000600)=[{&(0x7f0000000400)="8f880413174079893b3d7d8805616dad839b9828b41879efca5c87f83d06d865976f2805331179aa3b26df53702591b2d0ce68e5e92cb9931606838857e8eacacb1bc6b840705ccbad43737b59c4d93f943ace03c4ca87af27be279593a0bc5bccfe7b665d1dccd381064eccc8467d99555c8811f34f5643e109b0c7a14f8ce274561c6112df993b6ae6655b4cd20d40d03eb81722ff5732633aaf55e6b2342d4172e8fcf74d8b55472ed2f502e546640165caa67db94271a1d7923801186e4ec2dbec8bffa5d9b44d7888277547193b54777abdd17c9f1f37ac", 0xda}, {&(0x7f0000000500)="26805abdd1ed327e94af0933c97425fdc530d4d2153314229665cfd558d4953630647aa9237c1e6684e888ae03991ffa1dfa418f2c9c2ba4e195ba5f4f1c82df6ac56f330837b3dfbf0c8cd34a2e92a8f7d70d549404dfb9e11962cd6ff671e41713294d9421d6b7597ef420b4d7c8885e85ad26c896cc914a932d0d5f843216a43333cd0a342d6ff73a047db27c0d9d4d008cd4c879afb5d50ae8e8f7d64d31161cbe85fb0839131f4fee746246b081aa66fd06a7394e782ad6482fe9d84d79a36d4a6319df1cb59620a66400b277af", 0xd0}], 0x2)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0)
write$cgroup_pid(r6, &(0x7f0000000000), 0xffffff98)
socket(0x2a, 0x2, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fb", @ANYRES32=r9, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r10 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r9, 0xff7f}}, 0x20}}, 0x0)
socket(0x1, 0x803, 0x0)
getsockname$packet(r10, &(0x7f0000000680)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x3c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0)
splice(r2, 0x0, r6, 0x0, 0x80, 0x8)
write(r4, 0x0, 0x0)
r13 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x437, 0x1, 0x21dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40c89, 0x40}}, 0x20}, 0x1, 0x0, 0x0, 0x44801}, 0x4040)

910.667488ms ago: executing program 3 (id=1085):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000600)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

745.987265ms ago: executing program 3 (id=1086):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r1, 0x2)
syz_emit_ethernet(0x4a, &(0x7f0000000680)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00fcff", 0x14, 0x6, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[], {{0xfffe, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0)
r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
write$P9_RVERSION(r2, &(0x7f0000000140)=ANY=[@ANYRESHEX, @ANYRES32], 0x13)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1}}, 0x40)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f00006f0000/0x1000)=nil, 0x1000}, 0x3, 0x2})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r5)
sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001080)={0x34, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x20044000}, 0x20004800)
r7 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r7, 0x8)
r8 = accept4(r7, 0x0, 0x0, 0x0)
sendto$inet(r8, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10)
sendto$inet6(r8, &(0x7f0000000200)='x', 0x1, 0x4000000, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000640), 0x8)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2)
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x90, r9, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2dfa4eb9581fb0e0be7c14379fcb0b67c1cb37083cc46d6f"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x44040)

738.880896ms ago: executing program 0 (id=1087):
openat$ppp(0xffffffffffffff9c, 0x0, 0x101402, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x3, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ce000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000200)="66450fc7746e0a0fb51ef2ab400f79ac680080000066bba100ed0fc77310c4427d988c170500000074495470fb70190c190c75a854ff048fa800b6c3f9", 0x3d}], 0x1, 0x8, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x3, 0x0, 0x2080, {0x0, 0x3000}, {'\x00', "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

644.168292ms ago: executing program 6 (id=1088):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000039000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000010000d042abd7000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="b2000600410c04001c0012800ce131fea2b9067b3e744679449b00006d6163766c616e000c000280080007000500fcff130035006d6163766c616e3000000000000000001e7c1e41d1e9d072b639de7d8e57104a18e1bf40759a045a547e8371377d13750c3c2c210bb00b604cf415d0b84c6bfd6dc76c7fdc05d522357dc12e6c6fcaab556e98bf78df63"], 0x50}, 0x1, 0x0, 0x0, 0x400c844}, 0x0)

499.826136ms ago: executing program 6 (id=1089):
ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, &(0x7f0000000080)={0x1, @win={{0x2}, 0x5, 0x0, 0x0, 0x0, 0x0, 0x40}})
ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, 0x0)
openat2$dir(0xffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, 0x0, 0x0)
r2 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt(r2, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f0000000200))
sendmmsg$unix(r3, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001180)="dd9e4197", 0x4}], 0x1, &(0x7f00000003c0)=[@rights={{0x10, 0x1, 0x1, [r3]}}], 0x10, 0x20000041}}], 0x1, 0xc004)
recvmmsg(r4, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}}], 0x700, 0x2, 0x0)

479.9418ms ago: executing program 0 (id=1090):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x5000, 0x1})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

457.512823ms ago: executing program 3 (id=1091):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0x230})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
listen(r0, 0x5)
accept(r0, 0x0, 0x0)
shutdown(r0, 0x0)

258.561597ms ago: executing program 5 (id=1092):
r0 = add_key$keyring(&(0x7f0000000500), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, r0)
r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r1)
r3 = add_key$user(&(0x7f0000000400), &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000540)="b2", 0x1, r2)
keyctl$KEYCTL_MOVE(0x1e, r3, r0, 0x0, 0x1)

258.336447ms ago: executing program 5 (id=1093):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xffff}, {0x8, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x20000005, 0x8, 0x2, 0xd99d}}]}]}}}]}, 0x70}}, 0x0)
sendto$packet(r0, 0x0, 0x0, 0x171346df250871c7, &(0x7f0000000440)={0x11, 0x3, r3, 0x1, 0x2, 0x6, @broadcast}, 0x14)

251.363378ms ago: executing program 6 (id=1094):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x70}}, 0x4000004)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r3 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0)
io_submit(0x0, 0x0, 0x0)
stat(0x0, 0x0)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
connect$netlink(r5, &(0x7f0000000380)=@proc={0x10, 0x0, 0x25dfdbfd, 0x20}, 0xc)
sendmsg$AUDIT_SIGNAL_INFO(r5, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001240)={&(0x7f0000000000)={0x10, 0x3f2, 0x300, 0x70bd26, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x1157d27a36c007f1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x14, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x1e}, 0x94)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000950203010a000000000000000002000000090002000000000803000000"], 0x20}, 0x1, 0x0, 0x0, 0x24020000}, 0x40000c0)
r6 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)

74.678868ms ago: executing program 0 (id=1095):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65ed}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)

62.127069ms ago: executing program 6 (id=1096):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, r1, 0x2799f5eec7981083, 0x70bd28, 0x259fdbec, {}, [@ETHTOOL_A_PAUSE_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc010}, 0x20000004)

0s ago: executing program 5 (id=1097):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101940, 0x100)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x5)

kernel console output (not intermixed with test programs):

 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  142.799169][ T4173] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  142.810234][ T4173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.822314][ T4173] usb 2-1: config 0 descriptor??
[  142.838045][ T4229] usb 5-1: USB disconnect, device number 2
[  143.928753][ T4918] trusted_key: encrypted_key: insufficient parameters specified
[  144.474411][ T4173] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  144.500963][ T4173] usb 2-1: USB disconnect, device number 2
[  145.467611][ T4173] usblp0: removed
[  149.642713][ T4952] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  150.947959][ T4987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.185'.
[  150.957781][ T4987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.185'.
[  150.984086][ T4987] netlink: 'syz.1.185': attribute type 11 has an invalid length.
[  152.318719][ T4991] trusted_key: encrypted_key: insufficient parameters specified
[  157.599682][ T5031] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  159.728707][ T5062] trusted_key: encrypted_key: insufficient parameters specified
[  164.951508][ T5092] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.961023][ T5092] device syzkaller0 entered promiscuous mode
[  164.985715][ T5092] tipc: Resetting bearer <eth:syzkaller0>
[  165.002945][ T5091] tipc: Resetting bearer <eth:syzkaller0>
[  165.072616][ T5091] tipc: Disabling bearer <eth:syzkaller0>
[  165.248603][ T4229] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  165.468707][ T4192] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  166.888749][ T4192] usb 1-1: Using ep0 maxpacket: 32
[  167.088914][ T4192] usb 1-1: config 1 interface 0 altsetting 128 endpoint 0x82 has invalid wMaxPacketSize 0
[  167.186901][ T4192] usb 1-1: config 1 interface 0 altsetting 128 bulk endpoint 0x82 has invalid maxpacket 0
[  167.558970][ T4229] usb 5-1: device not accepting address 3, error -71
[  172.073684][ T4192] usb 1-1: config 1 interface 0 altsetting 128 bulk endpoint 0x3 has invalid maxpacket 64
[  172.084773][ T4192] usb 1-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  172.099072][ T4192] usb 1-1: config 1 interface 0 has no altsetting 0
[  172.148719][ T4192] usb 1-1: string descriptor 0 read error: -71
[  172.155273][ T4192] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  172.171510][ T5112] netlink: 'syz.4.216': attribute type 10 has an invalid length.
[  172.179577][ T4192] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.298717][ T4192] usb 1-1: can't set config #1, error -71
[  172.323636][ T4192] usb 1-1: USB disconnect, device number 10
[  172.347793][ T5112] team0: Port device dummy0 added
[  172.795732][ T5112] syz.4.216 (5112) used greatest stack depth: 20656 bytes left
[  173.242438][ T5132] 9pnet_virtio: no channels available for device syz
[  174.376770][ T5143] capability: warning: `syz.0.223' uses 32-bit capabilities (legacy support in use)
[  174.694320][ T5148] device syzkaller0 entered promiscuous mode
[  176.782526][ T5175] netlink: 168 bytes leftover after parsing attributes in process `syz.1.229'.
[  178.245258][ T5202] device syzkaller0 entered promiscuous mode
[  181.488614][ T5220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.241'.
[  181.503428][ T5220] netlink: 20 bytes leftover after parsing attributes in process `syz.1.241'.
[  181.516351][ T5220] netlink: 'syz.1.241': attribute type 10 has an invalid length.
[  181.553488][ T5220] bridge0: port 2(bridge_slave_1) entered disabled state
[  181.561876][ T5220] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.591731][ T5220] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.598944][ T5220] bridge0: port 2(bridge_slave_1) entered forwarding state
[  181.606481][ T5220] bridge0: port 1(bridge_slave_0) entered blocking state
[  181.613816][ T5220] bridge0: port 1(bridge_slave_0) entered forwarding state
[  181.633938][ T5220] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  182.872362][ T5236] device syzkaller0 entered promiscuous mode
[  183.018787][ T5238] 9pnet_virtio: no channels available for device syz
[  184.916028][ T5248] 9pnet_virtio: no channels available for device syz
[  185.535943][ T5256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.253'.
[  185.877552][ T5242] chnl_net:caif_netlink_parms(): no params data found
[  185.884973][ T4295] Bluetooth: hci5: command 0x0409 tx timeout
[  186.838842][ T5242] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.938823][ T5242] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.965290][ T5242] device bridge_slave_0 entered promiscuous mode
[  187.080156][ T5242] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.135087][ T5242] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.169934][ T5242] device bridge_slave_1 entered promiscuous mode
[  187.195179][ T5279] Bluetooth: hci0: unsupported parameter 27920
[  187.233656][ T5279] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[  187.286400][ T5242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  187.348197][ T5242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  187.476325][ T5242] team0: Port device team_slave_0 added
[  187.496715][ T5242] team0: Port device team_slave_1 added
[  187.699863][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_0
[  187.734381][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.909174][ T5242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  187.962549][   T23] Bluetooth: hci5: command 0x041b tx timeout
[  187.993499][ T5242] batman_adv: batadv0: Adding interface: batadv_slave_1
[  188.030890][ T5242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  188.143226][ T5242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  188.200096][ T5284] device syzkaller0 entered promiscuous mode
[  188.436099][ T5242] device hsr_slave_0 entered promiscuous mode
[  188.464844][ T5242] device hsr_slave_1 entered promiscuous mode
[  188.506732][ T5242] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  188.578650][ T5242] Cannot create hsr debugfs directory
[  189.005697][ T5292] 9pnet_virtio: no channels available for device syz
[  190.038718][ T4229] Bluetooth: hci5: command 0x040f tx timeout
[  190.144161][ T5242] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  190.187234][ T5242] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  190.286862][ T5242] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  190.368837][ T5242] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  190.584979][ T5242] 8021q: adding VLAN 0 to HW filter on device bond0
[  190.682916][ T5242] 8021q: adding VLAN 0 to HW filter on device team0
[  190.698014][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  190.737310][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  190.837933][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  190.874397][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  190.968205][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.975525][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  191.018663][ T4229] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  191.028173][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  191.075318][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  191.109976][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  191.185168][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.193469][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[  191.203518][ T5314] Bluetooth: hci0: unsupported parameter 27920
[  191.209898][ T5314] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[  191.250678][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  191.288851][ T4229] usb 4-1: Using ep0 maxpacket: 8
[  191.296685][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  191.306343][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  191.325777][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  191.337616][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  191.478700][   T21] Bluetooth: hci4: command 0x0406 tx timeout
[  191.559176][ T4229] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  191.755031][ T5242] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  191.788586][ T4229] usb 4-1: config 0 has no interface number 0
[  191.794990][ T4229] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping
[  191.816515][ T4229] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping
[  191.838147][ T5242] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  191.857948][ T4229] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  191.878818][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  191.894452][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  191.953650][ T4229] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  191.974378][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  191.983897][ T4229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.004959][   T21] Bluetooth: hci2: command 0x0406 tx timeout
[  192.019829][   T21] Bluetooth: hci3: command 0x0406 tx timeout
[  192.027223][ T4229] usb 4-1: config 0 descriptor??
[  192.038798][   T21] Bluetooth: hci1: command 0x0406 tx timeout
[  192.046619][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  192.080481][ T4229] ldusb 4-1:0.55: Interrupt in endpoint not found
[  192.109524][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  192.128719][ T4229] Bluetooth: hci5: command 0x0419 tx timeout
[  192.161224][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  192.217302][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  192.243406][ T5327] device syzkaller0 entered promiscuous mode
[  192.301474][   T21] usb 4-1: USB disconnect, device number 3
[  192.601687][ T5337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.273'.
[  192.616983][ T5337] netlink: 20 bytes leftover after parsing attributes in process `syz.1.273'.
[  192.667678][ T5337] netlink: 'syz.1.273': attribute type 10 has an invalid length.
[  192.679466][ T5337] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.686726][ T5337] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.639058][ T5339] 9pnet_virtio: no channels available for device syz
[  194.030893][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  194.046078][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  194.120058][ T5242] 8021q: adding VLAN 0 to HW filter on device batadv0
[  194.527045][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  194.533651][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  195.660475][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  195.699390][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  195.790332][ T5375] device syzkaller0 entered promiscuous mode
[  195.914718][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  195.948986][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  196.038645][ T4229] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  196.168108][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  196.229032][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  196.260474][ T5242] device veth0_vlan entered promiscuous mode
[  196.294043][ T5242] device veth1_vlan entered promiscuous mode
[  196.378003][ T5242] device veth0_macvtap entered promiscuous mode
[  196.400214][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  196.459693][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  196.479129][ T4229] usb 2-1: config index 0 descriptor too short (expected 45, got 36)
[  196.611390][ T4229] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xB3, skipping
[  196.623088][ T4229] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  196.636707][ T4229] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  196.649097][ T5380] 9pnet_virtio: no channels available for device syz
[  196.715901][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.730380][ T4229] usb 2-1: config 0 descriptor??
[  196.737373][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  196.748007][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  196.756736][ T5377] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  196.775356][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  196.811235][ T4229] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  196.866525][ T5242] device veth1_macvtap entered promiscuous mode
[  196.935250][ T4239] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.008401][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.028936][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.044419][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.055457][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.071158][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.099858][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.110699][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.126246][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.142132][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.183191][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.227278][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_0
[  197.257480][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  197.282712][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  197.315404][ T4239] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.378422][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.396883][ T5389] udc-core: couldn't find an available UDC or it's busy
[  197.422846][ T5389] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  197.468106][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.501390][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.540376][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.587514][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.619673][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.647294][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.679010][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.707403][ T5242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  197.758686][ T5242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.783320][ T5242] batman_adv: batadv0: Interface activated: batadv_slave_1
[  197.795471][ T5393] netlink: 16 bytes leftover after parsing attributes in process `syz.1.284'.
[  197.867438][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  197.886894][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  197.897303][ T4192] usb 2-1: USB disconnect, device number 3
[  198.019179][ T5242] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  198.028049][ T5242] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  198.094506][ T5242] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  198.137957][ T5242] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  198.202301][ T4239] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.339777][ T4239] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.428876][ T4173] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  198.609694][ T4271] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.633720][ T4271] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.734648][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  199.628705][ T4173] usb 4-1: config 0 has no interfaces?
[  199.744843][ T4393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.749305][ T4173] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  199.762561][ T4173] usb 4-1: New USB device strings: Mfr=0, Product=10, SerialNumber=0
[  199.771247][ T4173] usb 4-1: Product: syz
[  199.778733][ T4173] usb 4-1: config 0 descriptor??
[  199.806120][ T4393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.857496][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  200.103261][ T4239] tipc: Left network mode
[  200.892454][ T5419] print_req_error: 10 callbacks suppressed
[  200.892472][ T5419] blk_update_request: I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  201.141390][ T5423] 9pnet_virtio: no channels available for device syz
[  201.363734][ T5419] hfs: can't find a HFS filesystem on dev loop5
[  201.615588][   T23] usb 4-1: USB disconnect, device number 4
[  203.328674][ T5109] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  203.698690][ T5109] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  203.868890][ T5109] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41
[  203.918599][ T5109] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11
[  203.954678][ T5109] usb 2-1: Product: syz
[  203.978535][ T5109] usb 2-1: Manufacturer: syz
[  204.158657][ T5109] usb 2-1: SerialNumber: syz
[  206.107299][ T5465] udc-core: couldn't find an available UDC or it's busy
[  206.671878][ T5109] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  208.440943][   T26] audit: type=1800 audit(1776368504.627:2): pid=5460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.301" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  208.441792][ T5460] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4
[  208.470936][ T5465] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  208.479004][ T5460] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4
[  208.489318][ T5460] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  208.501387][ T5460] syz.5.301 (5460) used greatest stack depth: 18552 bytes left
[  209.125876][ T4173] usb 2-1: USB disconnect, device number 4
[  209.205988][ T4173] usblp0: removed
[  209.293672][ T5469] Bluetooth: hci0: unsupported parameter 255
[  209.333812][ T5469] Bluetooth: hci0: unsupported parameter 255
[  209.597031][ T5478] 9pnet_virtio: no channels available for device syz
[  210.057438][ T5492] gfs2: gfs2 mount does not exist
[  210.363883][ T4239] device hsr_slave_0 left promiscuous mode
[  210.420598][ T4239] device hsr_slave_1 left promiscuous mode
[  210.757144][ T4239] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  210.790363][ T4239] batman_adv: batadv0: Removing interface: batadv_slave_0
[  210.937393][ T4239] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  210.973828][ T4239] batman_adv: batadv0: Removing interface: batadv_slave_1
[  211.063118][ T4239] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.156205][ T4239] device bridge_slave_0 left promiscuous mode
[  211.185153][ T4239] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.492030][ T4239] device veth1_macvtap left promiscuous mode
[  211.525743][ T4239] device veth0_macvtap left promiscuous mode
[  211.576339][ T4239] device veth1_vlan left promiscuous mode
[  211.582831][ T4239] device veth0_vlan left promiscuous mode
[  212.009563][ T4239] team0 (unregistering): Port device team_slave_1 removed
[  212.080153][ T4239] team0 (unregistering): Port device team_slave_0 removed
[  212.120892][   T23] Bluetooth: hci2: command 0x0409 tx timeout
[  212.171347][ T4239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  212.283491][ T4239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  212.625256][ T4239] team0 (unregistering): Port device dummy0 removed
[  212.664830][ T4239] bond0 (unregistering): Released all slaves
[  212.756672][ T5505] device syzkaller0 entered promiscuous mode
[  212.897474][ T5530] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  212.947020][ T5525] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.085365][ T5525] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.125382][ T5532] netlink: 'syz.0.317': attribute type 1 has an invalid length.
[  213.240564][ T5525] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.682646][ T5525] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.758859][ T5493] chnl_net:caif_netlink_parms(): no params data found
[  213.823526][ T5525] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.854661][ T5525] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.865033][ T5493] bridge0: port 1(bridge_slave_0) entered blocking state
[  213.882578][ T5493] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.895233][ T5493] device bridge_slave_0 entered promiscuous mode
[  213.914136][ T5525] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.924277][ T5493] bridge0: port 2(bridge_slave_1) entered blocking state
[  213.935947][ T5493] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.948168][ T5493] device bridge_slave_1 entered promiscuous mode
[  213.984169][ T5525] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  214.049105][ T5493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  214.127595][ T5493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  214.199130][ T1334] Bluetooth: hci2: command 0x041b tx timeout
[  214.262904][ T5554] device syzkaller0 entered promiscuous mode
[  214.301084][ T5493] team0: Port device team_slave_0 added
[  214.376902][ T5493] team0: Port device team_slave_1 added
[  214.444536][ T5493] batman_adv: batadv0: Adding interface: batadv_slave_0
[  214.478719][ T5493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  214.534151][ T5493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  214.556102][ T5493] batman_adv: batadv0: Adding interface: batadv_slave_1
[  214.625649][ T5493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.280280][ T4192] Bluetooth: hci2: command 0x040f tx timeout
[  216.760698][ T5493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  217.155041][ T5585] device syzkaller0 entered promiscuous mode
[  217.209421][ T5493] device hsr_slave_0 entered promiscuous mode
[  217.230942][ T5493] device hsr_slave_1 entered promiscuous mode
[  217.278559][ T5493] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  217.307057][ T5493] Cannot create hsr debugfs directory
[  217.513716][ T5591] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  217.579655][ T5595] overlayfs: failed to resolve './file0': -2
[  218.369159][    T7] Bluetooth: hci2: command 0x0419 tx timeout
[  218.512890][ T5605] 9pnet_virtio: no channels available for device syz
[  218.942767][ T5608] device syzkaller0 entered promiscuous mode
[  218.979797][ T5493] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  219.011341][ T5493] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  219.050577][ T5493] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  219.081268][ T5493] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  219.514395][ T5493] 8021q: adding VLAN 0 to HW filter on device bond0
[  219.571916][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  219.587439][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  219.622839][ T5493] 8021q: adding VLAN 0 to HW filter on device team0
[  219.677457][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  219.707832][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  219.736273][ T4226] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.743952][ T4226] bridge0: port 1(bridge_slave_0) entered forwarding state
[  219.806994][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  219.869360][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  219.921446][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  219.945272][ T4226] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.952587][ T4226] bridge0: port 2(bridge_slave_1) entered forwarding state
[  219.995827][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  220.045976][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  220.097443][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  220.170505][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  220.188863][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  220.230732][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  220.424290][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  221.256747][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  222.151120][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  222.179386][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  222.210685][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  222.310158][ T5643] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  222.588408][ T5650] netlink: 'syz.3.339': attribute type 1 has an invalid length.
[  224.242710][ T5664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.343'.
[  224.322761][ T5664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.343'.
[  224.382416][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  224.402361][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  224.433872][ T5493] 8021q: adding VLAN 0 to HW filter on device batadv0
[  224.581174][ T5663] device syzkaller0 entered promiscuous mode
[  225.182456][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  225.213512][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  225.334843][ T4239] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.353478][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  225.353995][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  225.354969][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  225.355783][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  225.362078][ T5493] device veth0_vlan entered promiscuous mode
[  225.451665][ T4239] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.482703][ T5493] device veth1_vlan entered promiscuous mode
[  225.590486][ T4239] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.607967][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  225.609201][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  225.609878][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  225.610535][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  225.634080][ T5493] device veth0_macvtap entered promiscuous mode
[  225.760506][ T4239] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.773398][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  225.775210][ T5493] device veth1_macvtap entered promiscuous mode
[  225.824942][ T5493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.825021][ T5493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.825033][ T5493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.825047][ T5493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.825058][ T5493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.825071][ T5493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.825081][ T5493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.825094][ T5493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.825109][ T5493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  225.825121][ T5493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.843238][ T5493] batman_adv: batadv0: Interface activated: batadv_slave_0
[  225.843459][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  225.844326][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  225.880784][ T5493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.880811][ T5493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.881934][ T5493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.881950][ T5493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.881961][ T5493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.881974][ T5493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.881985][ T5493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.881998][ T5493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.882022][ T5493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  225.882036][ T5493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.883438][ T5493] batman_adv: batadv0: Interface activated: batadv_slave_1
[  225.883527][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  225.884196][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  225.931261][ T5493] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  225.931291][ T5493] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  225.931312][ T5493] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  225.931333][ T5493] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  226.192043][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  226.192110][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.192375][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  226.206962][ T4239] tipc: Left network mode
[  226.276882][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  226.276909][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.277194][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  226.353472][ T5717] device syzkaller0 entered promiscuous mode
[  226.394765][ T5719] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  226.760262][ T5722] netlink: 'syz.5.352': attribute type 1 has an invalid length.
[  227.255079][ T5729] trusted_key: encrypted_key: insufficient parameters specified
[  229.019043][ T5745] overlayfs: failed to resolve './file0': -2
[  230.207609][ T5767] fuse: Bad value for 'fd'
[  230.275288][ T4239] device hsr_slave_0 left promiscuous mode
[  230.302941][ T4239] device hsr_slave_1 left promiscuous mode
[  230.303484][ T4239] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  230.303537][ T4239] batman_adv: batadv0: Removing interface: batadv_slave_0
[  230.303991][ T4239] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  230.304012][ T4239] batman_adv: batadv0: Removing interface: batadv_slave_1
[  230.304378][ T4239] device bridge_slave_1 left promiscuous mode
[  230.304481][ T4239] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.305837][ T4239] device bridge_slave_0 left promiscuous mode
[  230.305964][ T4239] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.331619][ T4239] device veth1_macvtap left promiscuous mode
[  230.331693][ T4239] device veth0_macvtap left promiscuous mode
[  230.331749][ T4239] device veth1_vlan left promiscuous mode
[  230.331800][ T4239] device veth0_vlan left promiscuous mode
[  230.488604][ T5109] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  230.729614][ T5109] usb 4-1: Using ep0 maxpacket: 16
[  230.878845][ T5109] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  230.878883][ T5109] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  230.878922][ T5109] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  230.878952][ T5109] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.890261][ T5109] usb 4-1: config 0 descriptor??
[  231.046370][ T4239] team0 (unregistering): Port device team_slave_1 removed
[  231.113880][ T4239] team0 (unregistering): Port device team_slave_0 removed
[  231.135546][ T4239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  231.142872][ T5109] usb 4-1: USB disconnect, device number 5
[  231.164490][ T4239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  231.466387][ T4239] bond0 (unregistering): Released all slaves
[  231.820129][ T5776] 9pnet_virtio: no channels available for device syz
[  232.670646][ T5791] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  233.010575][ T5800] netlink: 'syz.1.364': attribute type 1 has an invalid length.
[  235.204359][ T5818] blk_update_request: I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  235.608013][ T5818] hfs: can't find a HFS filesystem on dev loop0
[  236.165916][ T5841] 9pnet_virtio: no channels available for device syz
[  236.328607][ T5099] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  236.569225][ T4192] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  236.569273][ T5099] usb 4-1: Using ep0 maxpacket: 16
[  236.693607][ T4234] Bluetooth: hci3: Frame reassembly failed (-84)
[  236.726503][ T4234] Bluetooth: hci3: Frame reassembly failed (-84)
[  236.799381][ T5099] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  236.857966][ T5099] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  236.953374][ T5099] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  236.978734][ T4192] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  237.030853][ T4192] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  237.074259][ T5099] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.138161][ T4192] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  237.224364][ T5099] usb 4-1: config 0 descriptor??
[  237.272942][ T4192] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.498061][ T4192] usb 1-1: config 0 descriptor??
[  238.599891][ T5099] Bluetooth: hci3: command 0x1003 tx timeout
[  238.660276][ T4193] Bluetooth: hci3: sending frame failed (-49)
[  239.912342][ T4192] usb 4-1: USB disconnect, device number 6
[  239.995249][ T5099] usb 1-1: USB disconnect, device number 11
[  240.137223][ T5873] device syzkaller0 entered promiscuous mode
[  241.638661][ T5878] trusted_key: encrypted_key: insufficient parameters specified
[  242.499911][ T4192] Bluetooth: hci3: command 0x1001 tx timeout
[  243.798742][ T4193] Bluetooth: hci3: sending frame failed (-49)
[  244.629267][ T5884] overlayfs: failed to resolve './file0': -2
[  245.200862][ T5894] blk_update_request: I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  245.278893][ T5894] hfs: can't find a HFS filesystem on dev loop6
[  245.588593][ T5907] 9pnet_virtio: no channels available for device syz
[  245.888721][ T5099] Bluetooth: hci3: command 0x1009 tx timeout
[  248.659322][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.659726][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state
[  249.577410][ T5939] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  249.703016][ T5939] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  250.213216][ T5961] overlayfs: failed to resolve './bus': -2
[  250.747953][ T5939] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  250.759170][ T5939] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  250.769068][ T5939] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  250.778870][ T5939] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  251.128132][ T5970] blk_update_request: I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  251.252719][ T5970] hfs: can't find a HFS filesystem on dev loop6
[  251.461482][ T5979] 9pnet_virtio: no channels available for device syz
[  251.835454][ T4229] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  252.108593][ T4229] usb 6-1: Using ep0 maxpacket: 32
[  252.291404][ T6016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.407'.
[  252.319169][ T4229] usb 6-1: unable to get BOS descriptor or descriptor too short
[  252.468945][ T4229] usb 6-1: config 8 has an invalid interface number: 188 but max is 0
[  252.486256][ T4229] usb 6-1: config 8 has no interface number 0
[  252.528770][ T4229] usb 6-1: config 8 interface 188 has no altsetting 0
[  252.881305][ T4229] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e
[  252.898113][ T4229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.919161][ T4229] usb 6-1: Product: syz
[  252.923572][ T4229] usb 6-1: Manufacturer: syz
[  252.928376][ T4229] usb 6-1: SerialNumber: syz
[  253.310670][ T4229] dw2102: su3000_identify_state
[  253.321032][ T4229] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state.
[  253.360402][ T4229] dw2102: su3000_power_ctrl: 1, initialized 0
[  253.367152][ T4229] dvb-usb: bulk message failed: -22 (2/0)
[  253.447566][ T4229] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  253.529176][ T4229] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3)
[  253.578619][ T4229] usb 6-1: media controller created
[  253.599381][ T4229] dvb-usb: bulk message failed: -22 (6/0)
[  253.637440][ T4229] dw2102: i2c transfer failed.
[  253.653578][ T4229] dvb-usb: bulk message failed: -22 (6/0)
[  253.694619][ T4229] dw2102: i2c transfer failed.
[  253.700958][ T4229] dvb-usb: bulk message failed: -22 (6/0)
[  253.706825][ T4229] dw2102: i2c transfer failed.
[  253.735199][ T4229] dvb-usb: bulk message failed: -22 (6/0)
[  253.764597][ T4229] dw2102: i2c transfer failed.
[  253.794768][ T4229] dvb-usb: bulk message failed: -22 (6/0)
[  253.830818][ T4229] dw2102: i2c transfer failed.
[  253.835762][ T4229] dvb-usb: bulk message failed: -22 (6/0)
[  253.876000][ T4229] dw2102: i2c transfer failed.
[  253.891424][ T4229] dvb-usb: MAC address: 02:02:02:02:02:02
[  253.964493][ T4229] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  254.075561][ T4229] dvb-usb: bulk message failed: -22 (3/0)
[  254.100140][ T4229] dw2102: command 0x0e transfer failed.
[  254.123987][ T4229] dvb-usb: bulk message failed: -22 (3/0)
[  254.146964][ T4229] dw2102: command 0x0e transfer failed.
[  254.572170][ T4229] dvb-usb: bulk message failed: -22 (3/0)
[  254.590271][ T4229] dw2102: command 0x0e transfer failed.
[  254.598339][ T4229] dvb-usb: bulk message failed: -22 (3/0)
[  254.613853][ T4229] dw2102: command 0x0e transfer failed.
[  254.625286][ T4229] dvb-usb: bulk message failed: -22 (1/0)
[  254.634603][ T4229] dw2102: command 0x51 transfer failed.
[  254.763893][ T4229] DVB: Unable to find symbol ds3000_attach()
[  254.781267][ T4229] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3'
[  254.898699][ T4229] rc_core: IR keymap rc-su3000 not found
[  254.904589][ T4229] Registered IR keymap rc-empty
[  254.919528][ T4229] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0
[  254.944500][ T4229] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input5
[  254.964761][ T4229] dvb-usb: schedule remote query interval to 150 msecs.
[  254.972926][ T4229] dw2102: su3000_power_ctrl: 0, initialized 1
[  254.980321][ T4229] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected.
[  255.012945][ T4229] usb 6-1: USB disconnect, device number 2
[  255.309647][ T4229] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected.
[  255.370235][ T6008] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.378155][ T6008] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.960494][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  255.967781][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  256.045828][ T6008] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  256.100797][ T6008] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  256.570505][ T6008] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  256.579877][ T6008] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  256.589126][ T6008] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  256.598019][ T6008] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  256.847455][ T6043] netlink: 20 bytes leftover after parsing attributes in process `syz.5.410'.
[  256.952971][ T6056] blk_update_request: I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  256.999277][ T6056] hfs: can't find a HFS filesystem on dev loop5
[  257.589908][ T6082] 9pnet_virtio: no channels available for device syz
[  259.100274][ T6100] netlink: 20 bytes leftover after parsing attributes in process `syz.6.424'.
[  259.168969][ T6100] netlink: 'syz.6.424': attribute type 10 has an invalid length.
[  259.191835][ T6100] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  260.176870][ T6112] device syzkaller0 entered promiscuous mode
[  260.415107][ T6122] blk_update_request: I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  260.446943][ T6122] hfs: can't find a HFS filesystem on dev loop5
[  261.800818][ T6142] netlink: 'syz.1.435': attribute type 29 has an invalid length.
[  261.889283][ T6142] netlink: 'syz.1.435': attribute type 29 has an invalid length.
[  261.955177][ T6146] netlink: 'syz.1.435': attribute type 29 has an invalid length.
[  262.075560][ T6142] netlink: 'syz.1.435': attribute type 29 has an invalid length.
[  262.096286][ T6150] netlink: 'syz.1.435': attribute type 29 has an invalid length.
[  262.225514][ T6158] netlink: 20 bytes leftover after parsing attributes in process `syz.5.438'.
[  262.264724][ T6158] netlink: 'syz.5.438': attribute type 10 has an invalid length.
[  262.285811][ T6158] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  263.336960][ T6171] blk_update_request: I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  263.408843][ T6171] hfs: can't find a HFS filesystem on dev loop1
[  266.814079][ T6231] netlink: 60 bytes leftover after parsing attributes in process `syz.0.460'.
[  266.848872][ T6231] netlink: 60 bytes leftover after parsing attributes in process `syz.0.460'.
[  266.894506][ T6231] netlink: 60 bytes leftover after parsing attributes in process `syz.0.460'.
[  266.974687][ T6231] netlink: 60 bytes leftover after parsing attributes in process `syz.0.460'.
[  267.125667][ T6224] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  267.836886][ T6248] device syzkaller0 entered promiscuous mode
[  267.981859][ T6260] device macvlan1 entered promiscuous mode
[  268.441367][ T6281] fuse: Unknown parameter '��'
[  268.728875][ T5099] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  268.978861][ T5099] usb 2-1: Using ep0 maxpacket: 8
[  269.048566][    T7] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  269.098902][ T5099] usb 2-1: config index 0 descriptor too short (expected 74, got 45)
[  269.099293][ T5099] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  269.099453][ T5099] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  269.099653][ T5099] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  269.099761][ T5099] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  269.099903][ T5099] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  269.100029][ T5099] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  269.100090][ T5099] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.288564][    T7] usb 4-1: Using ep0 maxpacket: 16
[  269.359270][ T5099] usb 2-1: usb_control_msg returned -71
[  269.508847][    T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  269.508878][    T7] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  269.508937][    T7] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  269.508964][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.510945][    T7] usb 4-1: config 0 descriptor??
[  269.617481][ T5099] usbtmc 2-1:16.0: can't read capabilities
[  269.653291][ T5099] usb 2-1: USB disconnect, device number 5
[  269.806785][ T1107] usb 4-1: USB disconnect, device number 7
[  270.065970][ T6315] device syzkaller0 entered promiscuous mode
[  270.286355][ T6322] netlink: 'syz.5.480': attribute type 25 has an invalid length.
[  270.286387][ T6322] netlink: 'syz.5.480': attribute type 29 has an invalid length.
[  270.629143][ T6337] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.485'.
[  274.391083][ T6351] device syzkaller0 entered promiscuous mode
[  276.019620][ T6375] netlink: 20 bytes leftover after parsing attributes in process `syz.5.495'.
[  278.183350][ T6407] netlink: 'syz.5.503': attribute type 10 has an invalid length.
[  278.269790][ T6407] netlink: 40 bytes leftover after parsing attributes in process `syz.5.503'.
[  279.508888][ T6407] netlink: 'syz.5.503': attribute type 10 has an invalid length.
[  279.517003][ T6407] netlink: 40 bytes leftover after parsing attributes in process `syz.5.503'.
[  279.757421][ T6430] netlink: 20 bytes leftover after parsing attributes in process `syz.0.510'.
[  279.822551][ T6430] netlink: 'syz.0.510': attribute type 10 has an invalid length.
[  280.568258][ T6430] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.575931][ T6430] bridge0: port 1(bridge_slave_0) entered disabled state
[  280.599427][ T6430] bridge0: port 2(bridge_slave_1) entered blocking state
[  280.606834][ T6430] bridge0: port 2(bridge_slave_1) entered forwarding state
[  280.614828][ T6430] bridge0: port 1(bridge_slave_0) entered blocking state
[  280.622222][ T6430] bridge0: port 1(bridge_slave_0) entered forwarding state
[  280.631613][ T6430] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  280.782607][ T6431] fuse: Unknown parameter '��'
[  280.845060][ T6433] device syzkaller0 entered promiscuous mode
[  281.098644][    T7] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  281.358593][    T7] usb 4-1: Using ep0 maxpacket: 8
[  282.176313][ T6470] kvm: pic: non byte write
[  282.308759][    T7] usb 4-1: config index 0 descriptor too short (expected 74, got 45)
[  282.317572][    T7] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024
[  282.347103][    T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  282.369165][    T7] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024
[  283.210408][    T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  283.221338][    T7] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  283.236623][    T7] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  283.246067][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.582017][ T6495] device syzkaller0 entered promiscuous mode
[  283.711762][    T7] usb 4-1: usb_control_msg returned -71
[  283.717522][    T7] usbtmc 4-1:16.0: can't read capabilities
[  284.808270][    T7] usb 4-1: USB disconnect, device number 8
[  287.108989][ T6534] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  288.788765][   T21] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  289.596071][   T21] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  289.643770][   T21] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  289.685604][   T21] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  289.744438][   T21] usb 4-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00
[  289.787790][   T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.844590][   T21] usb 4-1: config 0 descriptor??
[  289.909018][ T6566] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  290.373438][ T6566] netlink: 'syz.3.541': attribute type 4 has an invalid length.
[  290.538649][   T21] usbhid 4-1:0.0: can't add hid device: -71
[  290.584945][   T21] usbhid: probe of 4-1:0.0 failed with error -71
[  290.907236][   T21] usb 4-1: USB disconnect, device number 9
[  292.538632][ T6621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.556'.
[  292.547631][ T6621] netlink: 24 bytes leftover after parsing attributes in process `syz.5.556'.
[  293.958660][ T5099] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  293.978794][ T1107] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  294.202872][ T6640] netlink: 20 bytes leftover after parsing attributes in process `syz.5.561'.
[  294.245398][ T6640] netlink: 'syz.5.561': attribute type 10 has an invalid length.
[  295.148668][ T4192] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  295.231649][ T6647] overlayfs: failed to resolve './file1': -2
[  295.378749][ T5099] usb 2-1: config index 0 descriptor too short (expected 45, got 36)
[  295.387520][ T1107] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  295.408338][ T5099] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  295.427877][ T1107] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  295.449551][ T5099] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  295.460113][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.489584][ T5099] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  295.504678][ T1107] usb 4-1: config 0 descriptor??
[  295.528595][ T4192] usb 1-1: Using ep0 maxpacket: 16
[  295.548293][ T5099] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  295.568368][ T5099] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.646010][ T5099] usb 2-1: config 0 descriptor??
[  295.698609][ T4192] usb 1-1: unable to get BOS descriptor or descriptor too short
[  296.192058][ T4192] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  296.203794][ T4192] usb 1-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  296.217877][ T4192] usb 1-1: config 1 interface 0 has no altsetting 0
[  296.268964][ T5099] usb 2-1: can't set config #0, error -71
[  296.289891][ T5099] usb 2-1: USB disconnect, device number 6
[  296.340623][ T1107] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor
[  296.399343][ T1107] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0002/input/input6
[  296.412434][ T4192] usb 1-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40
[  296.431559][ T4192] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.453895][ T4192] usb 1-1: Product: syz
[  296.862485][ T4192] usb 1-1: Manufacturer: syz
[  296.867353][ T4192] usb 1-1: SerialNumber: syz
[  297.388731][ T4192] usb 1-1: can't set config #1, error -71
[  297.435954][ T4192] usb 1-1: USB disconnect, device number 12
[  297.573298][ T1107] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[  297.681832][ T1107] usb 4-1: USB disconnect, device number 10
[  298.325178][ T6700] kvm: pic: non byte read
[  298.791095][ T6700] kvm: pic: non byte read
[  298.815457][ T6698] fido_id[6698]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  298.900788][ T6700] kvm: pic: non byte read
[  298.906109][ T6700] kvm: pic: level sensitive irq not supported
[  298.906245][ T6700] kvm: pic: non byte read
[  299.066687][ T6700] kvm: pic: level sensitive irq not supported
[  299.066761][ T6700] kvm: pic: non byte read
[  299.588577][ T1107] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  299.677282][ T6729] overlayfs: unrecognized mount option "verity=require" or missing value
[  299.838563][ T1107] usb 6-1: Using ep0 maxpacket: 16
[  300.738712][ T1107] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  300.761287][ T1107] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  300.948767][ T1107] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  300.988782][ T1107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.028707][ T1107] usb 6-1: Product: syz
[  301.048731][ T1107] usb 6-1: Manufacturer: syz
[  301.053493][ T1107] usb 6-1: SerialNumber: syz
[  301.418848][ T1107] usb 6-1: 0:2 : does not exist
[  301.524909][ T1107] usb 6-1: USB disconnect, device number 3
[  301.831053][ T5125] udevd[5125]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  302.515821][ T6779] netlink: 20 bytes leftover after parsing attributes in process `syz.5.592'.
[  302.614747][ T6787] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  302.886661][ T6792] device syzkaller0 entered promiscuous mode
[  303.093685][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz.1.599'.
[  303.498542][   T21] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  303.867359][ T6830] netlink: 20 bytes leftover after parsing attributes in process `syz.1.606'.
[  303.905142][ T6830] netlink: 'syz.1.606': attribute type 10 has an invalid length.
[  304.068980][   T21] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  304.670754][   T21] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  304.798744][   T21] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  304.864723][   T21] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  304.896685][ T6837] device syzkaller0 entered promiscuous mode
[  304.947431][   T21] usb 6-1: Manufacturer: syz
[  305.006369][   T21] usb 6-1: config 0 descriptor??
[  305.068008][ T6805] 9pnet_virtio: no channels available for device syz
[  305.352656][ T6851] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  306.214101][   T21] uclogic 0003:256C:006D.0003: v1 buttonpad probing failed: -71
[  306.842639][   T21] uclogic 0003:256C:006D.0003: failed probing parameters: -71
[  306.891897][   T21] uclogic: probe of 0003:256C:006D.0003 failed with error -71
[  306.964998][   T21] usb 6-1: USB disconnect, device number 4
[  307.587598][ T6890] netlink: 20 bytes leftover after parsing attributes in process `syz.5.619'.
[  307.624350][ T6890] netlink: 'syz.5.619': attribute type 10 has an invalid length.
[  308.366479][ T4192] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  308.633034][ T6895] device syzkaller1 entered promiscuous mode
[  308.808750][ T4192] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  308.848659][ T4192] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  308.879686][ T4192] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  308.914808][ T4192] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.988976][ T4192] usb 7-1: config 0 descriptor??
[  309.081781][ T6906] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  309.238578][ T1107] Bluetooth: hci5: command 0x0406 tx timeout
[  309.472003][ T4192] hid-led 0003:27B8:01ED.0004: unknown main item tag 0x0
[  309.499474][ T4192] hid-led 0003:27B8:01ED.0004: unknown main item tag 0x0
[  309.536667][ T4192] hid-led 0003:27B8:01ED.0004: unknown main item tag 0x0
[  309.575899][ T4192] hid-led 0003:27B8:01ED.0004: unknown main item tag 0x0
[  309.608147][ T4192] hid-led 0003:27B8:01ED.0004: unknown main item tag 0x0
[  309.767560][ T6931] 9pnet_virtio: no channels available for device syz
[  309.932417][ T4192] hid-led 0003:27B8:01ED.0004: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.6-1/input0
[  309.956951][ T4192] hid-led 0003:27B8:01ED.0004: ThingM blink(1) initialized
[  310.116546][ T4192] usb 7-1: USB disconnect, device number 2
[  310.912794][ T6945] fido_id[6945]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  311.005538][ T6950] device syzkaller0 entered promiscuous mode
[  312.168342][ T6981] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  312.467422][ T6996] TCP: TCP_TX_DELAY enabled
[  314.018735][ T1107] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  314.103150][ T7038] device syzkaller0 entered promiscuous mode
[  314.268835][ T4192] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  314.388760][ T1107] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  314.437757][ T1107] usb 2-1: New USB device found, idVendor=056a, idProduct=0035, bcdDevice= 0.00
[  314.475055][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.516787][ T1107] usb 2-1: config 0 descriptor??
[  314.529371][ T4192] usb 1-1: Using ep0 maxpacket: 32
[  314.556420][ T7055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  314.649724][ T4192] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  314.661873][ T4192] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  314.672215][ T4192] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.686459][ T4192] usb 1-1: config 0 descriptor??
[  314.729886][ T4192] hub 1-1:0.0: USB hub found
[  314.938736][ T4192] hub 1-1:0.0: 1 port detected
[  315.023544][ T7066] device syzkaller0 entered promiscuous mode
[  315.033700][ T1107] wacom 0003:056A:0035.0005: unknown main item tag 0x0
[  315.041826][ T1107] wacom 0003:056A:0035.0005: unknown main item tag 0x0
[  315.058681][ T1107] wacom 0003:056A:0035.0005: unknown main item tag 0x0
[  315.084603][ T1107] wacom 0003:056A:0035.0005: unknown main item tag 0x0
[  315.092233][ T1107] wacom 0003:056A:0035.0005: unknown main item tag 0x0
[  315.112738][ T1107] wacom 0003:056A:0035.0005: unknown main item tag 0x0
[  315.143060][ T1107] wacom 0003:056A:0035.0005: unknown main item tag 0x0
[  315.184806][ T1107] wacom 0003:056A:0035.0005: unknown main item tag 0x0
[  315.206864][ T1107] wacom 0003:056A:0035.0005: unknown main item tag 0x0
[  315.236897][ T1107] wacom 0003:056A:0035.0005: unknown main item tag 0x0
[  315.276693][ T1107] wacom 0003:056A:0035.0005: unknown main item tag 0x0
[  315.302950][ T1107] wacom 0003:056A:0035.0005: unknown main item tag 0x0
[  315.332337][ T1107] wacom 0003:056A:0035.0005: unknown main item tag 0x0
[  315.342294][ T1107] wacom 0003:056A:0035.0005: unknown main item tag 0x0
[  315.349618][ T1107] wacom 0003:056A:0035.0005: unknown main item tag 0x0
[  315.356688][ T1107] wacom 0003:056A:0035.0005: unknown main item tag 0x0
[  315.365879][ T1107] wacom 0003:056A:0035.0005: unknown main item tag 0x0
[  315.374442][ T1107] wacom 0003:056A:0035.0005: unknown main item tag 0x0
[  315.393195][ T1107] wacom 0003:056A:0035.0005: unknown main item tag 0x0
[  315.419290][ T1107] wacom 0003:056A:0035.0005: unknown main item tag 0x0
[  315.445181][ T1107] wacom 0003:056A:0035.0005: unknown main item tag 0x0
[  315.453014][ T1107] wacom 0003:056A:0035.0005: unknown main item tag 0x0
[  315.460782][ T1107] wacom 0003:056A:0035.0005: unknown main item tag 0x0
[  315.468272][ T1107] wacom 0003:056A:0035.0005: unknown main item tag 0x0
[  315.475998][ T1107] wacom 0003:056A:0035.0005: unknown main item tag 0x0
[  315.485304][ T1107] wacom 0003:056A:0035.0005: unknown main item tag 0x0
[  315.505125][ T1107] wacom 0003:056A:0035.0005: unknown main item tag 0x0
[  315.513218][ T1107] wacom 0003:056A:0035.0005: unknown main item tag 0x0
[  315.532874][ T1107] wacom 0003:056A:0035.0005: unknown main item tag 0x0
[  315.542819][ T1107] wacom 0003:056A:0035.0005: unknown main item tag 0x0
[  315.551027][ T1107] wacom 0003:056A:0035.0005: unknown main item tag 0x0
[  315.564181][ T1107] wacom 0003:056A:0035.0005: unknown main item tag 0x0
[  315.574425][ T1107] wacom 0003:056A:0035.0005: unknown main item tag 0x0
[  315.584685][ T1107] wacom 0003:056A:0035.0005: unknown main item tag 0x0
[  315.592541][ T1107] wacom 0003:056A:0035.0005: unknown main item tag 0x0
[  315.600707][ T1107] wacom 0003:056A:0035.0005: unknown main item tag 0x0
[  315.608004][ T1107] wacom 0003:056A:0035.0005: unknown main item tag 0x0
[  315.651731][ T1107] wacom 0003:056A:0035.0005: hidraw0: USB HID v0.20 Device [HID 056a:0035] on usb-dummy_hcd.1-1/input0
[  315.671051][ T1107] usb 2-1: USB disconnect, device number 7
[  315.931764][ T4192] usb 1-1: USB disconnect, device number 13
[  315.938806][ T5099] hub 1-1:0.0: hub_ext_port_status failed (err = -71)
[  316.038289][ T7098] netlink: 20 bytes leftover after parsing attributes in process `syz.5.659'.
[  316.518987][ T7090] fido_id[7090]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  317.195923][ T7112] fuse: Unknown parameter '��'
[  317.290337][ T7121] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  317.412216][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  317.418897][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  317.457189][ T7128] netlink: 28 bytes leftover after parsing attributes in process `syz.5.666'.
[  318.151976][ T7135] device syzkaller0 entered promiscuous mode
[  318.494437][ T7150] netlink: 20 bytes leftover after parsing attributes in process `syz.3.671'.
[  319.618608][ T4227] usb 7-1: new full-speed USB device number 3 using dummy_hcd
[  320.018987][ T4227] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  320.058551][ T4227] usb 7-1: config 0 has no interfaces?
[  320.149648][ T4227] usb 7-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  320.165336][ T4227] usb 7-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0
[  320.174568][ T4227] usb 7-1: Manufacturer: syz
[  320.181845][ T4227] usb 7-1: config 0 descriptor??
[  320.359419][ T7174] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  320.443886][ T4173] usb 7-1: USB disconnect, device number 3
[  320.988503][ T5099] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  321.068625][ T4192] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  321.205889][ T7204] netlink: 20 bytes leftover after parsing attributes in process `syz.6.685'.
[  322.038709][ T5099] usb 1-1: Using ep0 maxpacket: 32
[  322.158612][ T5099] usb 1-1: config 5 has an invalid interface number: 216 but max is 1
[  322.237880][ T5099] usb 1-1: config 5 has an invalid interface number: 139 but max is 1
[  322.268754][ T4192] usb 6-1: unable to get BOS descriptor or descriptor too short
[  323.128639][ T7212] trusted_key: encrypted_key: insufficient parameters specified
[  323.888835][ T4192] usb 6-1: not running at top speed; connect to a high speed hub
[  323.961374][ T5099] usb 1-1: config 5 has no interface number 0
[  323.967811][ T5099] usb 1-1: config 5 has no interface number 1
[  324.028685][ T4192] usb 6-1: unable to read config index 0 descriptor/start: -71
[  324.907224][ T4192] usb 6-1: can't read configurations, error -71
[  324.914135][ T5099] usb 1-1: config 5 interface 216 altsetting 15 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  329.274541][ T5099] usb 1-1: config 5 interface 216 altsetting 15 bulk endpoint 0x4 has invalid maxpacket 8
[  329.387418][ T5099] usb 1-1: config 5 interface 216 altsetting 15 has a duplicate endpoint with address 0x4, skipping
[  329.399214][ T5099] usb 1-1: config 5 interface 216 altsetting 15 has an invalid endpoint with address 0x80, skipping
[  329.411077][ T5099] usb 1-1: config 5 interface 216 altsetting 15 endpoint 0xF has invalid maxpacket 512, setting to 64
[  329.422751][ T5099] usb 1-1: config 5 interface 216 has no altsetting 0
[  329.430520][ T5099] usb 1-1: config 5 interface 139 has no altsetting 0
[  329.445084][ T1107] Bluetooth: hci3: command 0x1003 tx timeout
[  329.478584][ T5099] usb 1-1: string descriptor 0 read error: -71
[  329.485283][ T5099] usb 1-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice=31.b8
[  329.504154][ T5099] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.604666][ T5099] usb 1-1: can't set config #5, error -71
[  329.637629][ T5099] usb 1-1: USB disconnect, device number 14
[  329.672830][ T7236] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  329.873056][ T7248] netlink: 28 bytes leftover after parsing attributes in process `syz.3.693'.
[  331.481273][ T4192] Bluetooth: hci3: command 0x1001 tx timeout
[  331.508680][ T5099] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  331.547437][ T4200] Bluetooth: hci3: sending frame failed (-49)
[  332.898543][ T5099] usb 2-1: Using ep0 maxpacket: 8
[  333.858669][ T7298] trusted_key: encrypted_key: insufficient parameters specified
[  333.968612][ T5099] usb 2-1: unable to get BOS descriptor or descriptor too short
[  334.902747][ T4192] Bluetooth: hci3: command 0x1009 tx timeout
[  334.998592][ T5099] usb 2-1: unable to read config index 0 descriptor/start: -71
[  335.910233][ T5099] usb 2-1: can't read configurations, error -71
[  335.932054][ T4192] Bluetooth: hci2: command 0x0406 tx timeout
[  336.991220][ T7318] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  337.079917][ T7325] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  337.159584][ T7333] netlink: 28 bytes leftover after parsing attributes in process `syz.5.709'.
[  337.188595][ T1334] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  337.388574][ T7327] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  337.468632][ T1334] usb 1-1: Using ep0 maxpacket: 16
[  337.608750][ T1334] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  338.175587][ T7349] blk_update_request: I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  338.288641][ T1334] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  338.298538][ T1334] usb 1-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[  338.307900][ T1334] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.318517][ T1334] usb 1-1: config 0 descriptor??
[  338.388854][ T7349] hfs: can't find a HFS filesystem on dev loop3
[  338.473495][ T7356] netlink: 12 bytes leftover after parsing attributes in process `syz.5.715'.
[  338.601572][ T7358] netlink: 20 bytes leftover after parsing attributes in process `syz.6.714'.
[  338.643835][ T7358] netlink: 'syz.6.714': attribute type 10 has an invalid length.
[  339.470558][ T1334] ntrig 0003:1B96:0008.0006: unknown main item tag 0x1
[  339.478087][ T1334] ntrig 0003:1B96:0008.0006: unknown main item tag 0x5
[  339.533675][ T1334] ntrig 0003:1B96:0008.0006: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.0-1/input0
[  339.678623][ T1334] ntrig 0003:1B96:0008.0006: Firmware version: 2.2.30.12.3 (4be5 8bc9)
[  339.972959][ T7383] trusted_key: encrypted_key: insufficient parameters specified
[  340.888675][ T4192] usb 1-1: USB disconnect, device number 15
[  341.133415][ T7375] fido_id[7375]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory
[  341.182885][ T7394] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  341.414142][ T7401] netlink: 28 bytes leftover after parsing attributes in process `syz.5.722'.
[  342.818721][ T5099] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  342.836044][ T7419] tipc: Enabling of bearer <eth:syzk> rejected, failed to enable media
[  342.846205][ T7419] device syzkaller0 entered promiscuous mode
[  343.117472][ T7427] 9pnet_virtio: no channels available for device syz
[  343.198727][ T5099] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  343.226341][ T5099] usb 7-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  343.262901][ T5099] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.296287][ T5099] usb 7-1: config 0 descriptor??
[  343.368312][ T7438] netlink: 20 bytes leftover after parsing attributes in process `syz.5.731'.
[  343.411233][ T7438] netlink: 'syz.5.731': attribute type 10 has an invalid length.
[  344.608575][   T23] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  344.702004][ T5099] logitech 0003:046D:C29C.0007: unknown main item tag 0x0
[  344.812012][ T5099] logitech 0003:046D:C29C.0007: unknown main item tag 0x0
[  344.897931][ T5099] logitech 0003:046D:C29C.0007: unknown main item tag 0x0
[  344.964257][ T5099] logitech 0003:046D:C29C.0007: unknown main item tag 0x0
[  345.025734][ T5099] logitech 0003:046D:C29C.0007: unknown main item tag 0x0
[  345.086771][ T5099] logitech 0003:046D:C29C.0007: unknown main item tag 0x0
[  345.163770][ T5099] logitech 0003:046D:C29C.0007: unknown main item tag 0x0
[  345.214456][ T5099] logitech 0003:046D:C29C.0007: unknown main item tag 0x0
[  345.224596][ T5099] logitech 0003:046D:C29C.0007: unknown main item tag 0x0
[  345.258493][ T5099] logitech 0003:046D:C29C.0007: unknown main item tag 0x0
[  345.298501][ T5099] logitech 0003:046D:C29C.0007: unknown main item tag 0x0
[  345.306327][ T5099] logitech 0003:046D:C29C.0007: unknown main item tag 0x0
[  345.365658][ T5099] logitech 0003:046D:C29C.0007: unknown main item tag 0x0
[  345.420180][ T5099] logitech 0003:046D:C29C.0007: unknown main item tag 0x0
[  345.427719][ T5099] logitech 0003:046D:C29C.0007: unknown main item tag 0x0
[  345.474356][ T5099] logitech 0003:046D:C29C.0007: unknown main item tag 0x0
[  345.484886][ T7460] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  345.506358][ T5099] logitech 0003:046D:C29C.0007: unknown main item tag 0x0
[  345.514307][ T5099] logitech 0003:046D:C29C.0007: unknown main item tag 0x0
[  345.530648][ T5099] logitech 0003:046D:C29C.0007: unknown main item tag 0x0
[  345.538311][ T5099] logitech 0003:046D:C29C.0007: unknown main item tag 0x0
[  345.567774][ T5099] logitech 0003:046D:C29C.0007: unknown main item tag 0x0
[  345.609482][ T5099] logitech 0003:046D:C29C.0007: unknown main item tag 0x0
[  345.634232][ T7465] netlink: 28 bytes leftover after parsing attributes in process `syz.6.737'.
[  345.664229][ T5099] logitech 0003:046D:C29C.0007: unknown main item tag 0x0
[  345.694643][ T5099] logitech 0003:046D:C29C.0007: unknown main item tag 0x0
[  345.732826][ T5099] logitech 0003:046D:C29C.0007: unknown main item tag 0x0
[  345.771071][ T5099] logitech 0003:046D:C29C.0007: unknown main item tag 0x0
[  345.811584][ T5099] logitech 0003:046D:C29C.0007: unknown main item tag 0x0
[  345.848492][ T5099] logitech 0003:046D:C29C.0007: unknown main item tag 0x0
[  345.876517][ T5099] logitech 0003:046D:C29C.0007: unknown main item tag 0x0
[  345.899828][ T5099] logitech 0003:046D:C29C.0007: unknown main item tag 0x0
[  345.938170][ T5099] logitech 0003:046D:C29C.0007: unknown main item tag 0x0
[  345.968538][ T5099] logitech 0003:046D:C29C.0007: unknown main item tag 0x0
[  345.994693][ T5099] logitech 0003:046D:C29C.0007: unknown main item tag 0x0
[  346.039873][ T5099] logitech 0003:046D:C29C.0007: hidraw0: USB HID vff.fd Device [HID 046d:c29c] on usb-dummy_hcd.6-1/input0
[  346.105052][ T5099] logitech 0003:046D:C29C.0007: no inputs found
[  346.188883][ T5099] usb 7-1: USB disconnect, device number 4
[  346.397260][ T7474] fido_id[7474]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  347.391056][   T23] usb 4-1: Using ep0 maxpacket: 32
[  347.770127][   T23] usb 4-1: device descriptor read/all, error -71
[  350.013583][ T7500] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  350.462478][ T7511] 9pnet_virtio: no channels available for device syz
[  350.918514][   T23] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  351.399463][   T23] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  351.558848][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.589774][   T23] usb 4-1: config 0 descriptor??
[  351.941735][ T7532] trusted_key: encrypted_key: insufficient parameters specified
[  353.743944][ T4192] Bluetooth: hci3: command 0x0409 tx timeout
[  354.009218][ T4271] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.028579][ T5099] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  354.123671][ T4271] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.224667][ T4271] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.285852][ T4271] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.322352][ T7526] chnl_net:caif_netlink_parms(): no params data found
[  354.368639][   T23] usb 4-1: Cannot set MAC address
[  354.379051][   T23] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71
[  354.408708][ T5099] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  354.435059][   T23] usb 4-1: USB disconnect, device number 12
[  354.496461][ T5099] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  354.698758][ T5099] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  354.747958][ T5099] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  354.816847][ T5099] usb 7-1: Manufacturer: syz
[  354.831525][ T7526] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.856399][ T5099] usb 7-1: config 0 descriptor??
[  354.864965][ T7526] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.916857][ T7526] device bridge_slave_0 entered promiscuous mode
[  355.071000][ T7526] bridge0: port 2(bridge_slave_1) entered blocking state
[  355.098645][ T7562] 9pnet_virtio: no channels available for device syz
[  355.108237][ T7526] bridge0: port 2(bridge_slave_1) entered disabled state
[  355.156929][ T7526] device bridge_slave_1 entered promiscuous mode
[  355.278391][ T7526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  355.291236][ T7526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  355.335723][ T7526] team0: Port device team_slave_0 added
[  355.356536][ T7526] team0: Port device team_slave_1 added
[  355.461059][ T7580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.762'.
[  355.534753][ T7580] device hsr_slave_0 left promiscuous mode
[  355.556990][ T7526] batman_adv: batadv0: Adding interface: batadv_slave_0
[  355.564502][ T7526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  355.591758][ T7526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  355.623318][ T7526] batman_adv: batadv0: Adding interface: batadv_slave_1
[  355.631962][ T7526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  355.659626][ T7526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  355.921355][   T23] Bluetooth: hci3: command 0x041b tx timeout
[  356.888680][ T7589] trusted_key: encrypted_key: insufficient parameters specified
[  359.522757][ T4173] Bluetooth: hci3: command 0x040f tx timeout
[  359.588674][ T5099] uclogic 0003:256C:006D.0008: v1 buttonpad probing failed: -71
[  359.597181][ T5099] uclogic 0003:256C:006D.0008: failed probing parameters: -71
[  359.605897][ T5099] uclogic: probe of 0003:256C:006D.0008 failed with error -71
[  359.616108][ T5099] usb 7-1: USB disconnect, device number 5
[  359.692873][ T7526] device hsr_slave_0 entered promiscuous mode
[  359.719637][ T7526] device hsr_slave_1 entered promiscuous mode
[  359.726530][ T7526] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  359.735626][ T7526] Cannot create hsr debugfs directory
[  360.419449][ T4173] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  360.482147][ T4271] device hsr_slave_0 left promiscuous mode
[  360.496203][ T4271] device hsr_slave_1 left promiscuous mode
[  360.517947][ T4271] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  360.540539][ T4271] batman_adv: batadv0: Removing interface: batadv_slave_0
[  360.587384][ T4271] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  360.621154][ T4271] batman_adv: batadv0: Removing interface: batadv_slave_1
[  360.669741][ T4271] device bridge_slave_1 left promiscuous mode
[  360.676228][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state
[  360.708544][ T4173] usb 6-1: Using ep0 maxpacket: 32
[  360.754540][ T4271] device bridge_slave_0 left promiscuous mode
[  360.767608][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state
[  360.823509][ T4271] device veth1_macvtap left promiscuous mode
[  360.872940][ T4271] device veth0_macvtap left promiscuous mode
[  360.888966][ T4173] usb 6-1: unable to get BOS descriptor or descriptor too short
[  360.942553][ T4271] device veth1_vlan left promiscuous mode
[  360.998862][ T4173] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  361.016498][ T4271] device veth0_vlan left promiscuous mode
[  361.051782][ T4173] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  361.135277][ T4173] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  361.220013][ T4173] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  361.489134][ T4173] usb 6-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40
[  361.522836][ T4173] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  361.590939][ T4173] usb 6-1: Product: syz
[  361.648051][ T4173] usb 6-1: Manufacturer: syz
[  361.653355][ T4173] usb 6-1: SerialNumber: syz
[  361.681476][ T4227] Bluetooth: hci3: command 0x0419 tx timeout
[  361.826031][ T4271] bond1 (unregistering): Released all slaves
[  361.849562][ T7639] 9pnet_virtio: no channels available for device syz
[  361.932523][ T4271] team0 (unregistering): Port device team_slave_1 removed
[  361.951093][ T4271] team0 (unregistering): Port device team_slave_0 removed
[  361.974744][ T4271] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  361.994432][ T4271] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  362.102986][ T4173] usb 6-1: MIDIStreaming interface descriptor not found
[  362.114839][ T4271] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  362.125340][ T4271] bond0 (unregistering): Released all slaves
[  362.271087][ T4173] usb 6-1: USB disconnect, device number 7
[  362.301695][ T7526] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  362.369308][ T7644] trusted_key: encrypted_key: insufficient parameters specified
[  363.871064][ T7526] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  363.895565][ T7526] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  364.519660][ T7526] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  364.901597][ T5125] udevd[5125]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  365.472753][ T7664] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  365.522793][ T7526] 8021q: adding VLAN 0 to HW filter on device bond0
[  365.581572][ T7664] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  365.601696][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  365.610202][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  366.487889][ T7526] 8021q: adding VLAN 0 to HW filter on device team0
[  366.560820][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  366.579299][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  366.633956][ T4420] bridge0: port 1(bridge_slave_0) entered blocking state
[  366.641445][ T4420] bridge0: port 1(bridge_slave_0) entered forwarding state
[  366.744744][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  366.785884][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  366.851248][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  366.903328][ T4421] Bluetooth: hci4: Frame reassembly failed (-84)
[  366.926617][ T4421] Bluetooth: hci4: Frame reassembly failed (-84)
[  367.017402][ T4420] bridge0: port 2(bridge_slave_1) entered blocking state
[  367.024816][ T4420] bridge0: port 2(bridge_slave_1) entered forwarding state
[  367.225968][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  367.374756][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  367.589896][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  367.765629][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  367.884542][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  368.928892][ T1334] Bluetooth: hci4: command 0x1003 tx timeout
[  368.937784][ T4193] Bluetooth: hci4: sending frame failed (-49)
[  369.025511][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  369.492936][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  369.870948][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  369.881252][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  369.891816][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  369.902767][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  369.921502][ T7526] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  370.323652][ T4192] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  370.497210][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  370.517185][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  370.572197][ T7526] 8021q: adding VLAN 0 to HW filter on device batadv0
[  370.598577][ T4192] usb 6-1: Using ep0 maxpacket: 32
[  370.768681][ T4192] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  371.445216][ T4192] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  371.455937][ T4192] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  371.466206][ T4192] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  371.477737][    T7] Bluetooth: hci4: command 0x1001 tx timeout
[  371.485216][ T4192] usb 6-1: config 0 descriptor??
[  371.490665][ T4193] Bluetooth: hci4: sending frame failed (-49)
[  371.530464][ T4192] hub 6-1:0.0: USB hub found
[  371.623632][ T7747] device syzkaller0 entered promiscuous mode
[  371.748595][ T4192] hub 6-1:0.0: 1 port detected
[  372.058005][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  372.107446][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  372.167004][ T7762] blk_update_request: I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  372.213167][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  372.240302][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  372.255270][ T7762] hfs: can't find a HFS filesystem on dev loop6
[  372.264495][ T7526] device veth0_vlan entered promiscuous mode
[  372.283873][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  372.310298][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  372.354962][ T7526] device veth1_vlan entered promiscuous mode
[  372.408658][ T4192] hub 6-1:0.0: activate --> -90
[  372.524843][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  372.568083][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  372.622154][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  372.686487][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  372.747207][ T7526] device veth0_macvtap entered promiscuous mode
[  372.783503][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  372.801729][ T7526] device veth1_macvtap entered promiscuous mode
[  372.820135][ T5109] usb 6-1: USB disconnect, device number 8
[  372.867691][ T7526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  372.904832][ T7526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.944561][ T7526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  372.986092][ T7526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.039809][ T7526] batman_adv: batadv0: Interface activated: batadv_slave_0
[  373.081061][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  373.091073][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  373.098958][ T4229] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  373.122064][ T7526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  373.155295][ T7526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.178550][ T7526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  373.206339][ T7526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  373.227107][ T7526] batman_adv: batadv0: Interface activated: batadv_slave_1
[  373.238224][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  373.250298][ T4420] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  373.264127][ T7526] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  373.278689][ T7526] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  373.287847][ T7526] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  373.301617][ T7526] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  373.338593][ T4229] usb 7-1: Using ep0 maxpacket: 32
[  373.458625][ T4229] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  373.558611][ T4254] Bluetooth: hci4: command 0x1009 tx timeout
[  375.104344][ T4239] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  375.136528][ T4229] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  375.146073][ T4239] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  375.148107][ T4229] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  375.204222][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  375.222638][ T4420] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  375.245425][ T4229] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.262828][ T4420] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  375.309498][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  375.363755][ T4229] usb 7-1: config 0 descriptor??
[  375.440127][ T4229] hub 7-1:0.0: USB hub found
[  375.545452][ T7790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  375.658574][ T4229] hub 7-1:0.0: 1 port detected
[  376.210227][   T23] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  376.515441][ T4173] usb 7-1: USB disconnect, device number 6
[  376.528631][ T4295] hub 7-1:0.0: activate --> -19
[  376.618767][   T23] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  376.632244][   T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  376.643864][   T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  376.672192][   T23] usb 6-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00
[  376.692765][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.820085][   T23] usb 6-1: config 0 descriptor??
[  376.878514][ T1334] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  377.218506][ T1334] usb 8-1: Using ep0 maxpacket: 32
[  377.369236][ T1334] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  377.436013][   T23] hid-rmi 0003:0461:4E72.0009: item fetching failed at offset 7/11
[  377.444898][   T23] hid-rmi 0003:0461:4E72.0009: parse failed
[  377.451837][   T23] hid-rmi: probe of 0003:0461:4E72.0009 failed with error -22
[  377.478833][ T1334] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  377.498676][ T4229] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  377.848470][ T1334] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  377.998949][ T4229] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  378.018574][ T4229] usb 4-1: config 0 has no interfaces?
[  378.198979][ T1334] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  378.221764][ T1334] usb 8-1: Product: syz
[  378.226564][ T1334] usb 8-1: Manufacturer: syz
[  378.258715][ T4229] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  378.279576][ T1107] usb 6-1: USB disconnect, device number 9
[  378.295155][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.323907][ T4229] usb 4-1: Product: syz
[  378.339492][ T1334] hub 8-1:4.0: USB hub found
[  378.367833][ T4229] usb 4-1: Manufacturer: syz
[  378.390495][ T4229] usb 4-1: SerialNumber: syz
[  378.431502][ T4229] r8152-cfgselector 4-1: config 0 descriptor??
[  378.558657][ T1334] hub 8-1:4.0: 9 ports detected
[  378.588547][ T1334] hub 8-1:4.0: insufficient power available to use all downstream ports
[  378.739463][ T4229] r8152-cfgselector 4-1: Unknown version 0x0000
[  378.757027][ T4229] r8152-cfgselector 4-1: USB disconnect, device number 13
[  378.801916][ T7855] trusted_key: encrypted_key: insufficient parameters specified
[  378.850968][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  378.857437][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  379.028860][ T1334] hub 8-1:4.0: set hub depth failed
[  379.222666][ T1334] usb 8-1: USB disconnect, device number 2
[  379.663836][ T7875] blk_update_request: I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  379.833818][ T4239] Bluetooth: hci4: Frame reassembly failed (-84)
[  379.903411][ T7875] hfs: can't find a HFS filesystem on dev loop6
[  381.276665][ T7906] KVM: debugfs: duplicate directory 7906-4
[  381.888902][ T1107] Bluetooth: hci4: command 0x1003 tx timeout
[  381.899159][ T4200] Bluetooth: hci4: sending frame failed (-49)
[  382.153331][ T7938] netlink: 20 bytes leftover after parsing attributes in process `syz.0.828'.
[  382.167769][ T7938] netlink: 'syz.0.828': attribute type 10 has an invalid length.
[  382.177881][ T7938] bridge0: port 2(bridge_slave_1) entered disabled state
[  382.185305][ T7938] bridge0: port 1(bridge_slave_0) entered disabled state
[  382.474765][ T4229] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  382.538385][ T7950] 9pnet_virtio: no channels available for device syz
[  382.718544][ T4229] usb 6-1: Using ep0 maxpacket: 32
[  382.858694][ T4229] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[  382.867093][ T4229] usb 6-1: config 0 has no interface number 0
[  383.209587][ T4229] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  383.755985][ T4229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  383.815423][ T4229] usb 6-1: Product: syz
[  383.849368][ T4229] usb 6-1: Manufacturer: syz
[  383.858731][ T4229] usb 6-1: SerialNumber: syz
[  383.881968][ T4229] usb 6-1: config 0 descriptor??
[  383.958789][ T1334] Bluetooth: hci4: command 0x1001 tx timeout
[  383.965088][ T4200] Bluetooth: hci4: sending frame failed (-49)
[  384.231056][ T4229] smsc95xx v2.0.0
[  384.488656][ T4229] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  384.544680][ T4229] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  385.238997][ T4229] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -71
[  385.260552][ T4229] smsc95xx: probe of 6-1:0.67 failed with error -71
[  385.270307][ T7997] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  385.295184][ T7997] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  385.304546][ T4229] usb 6-1: USB disconnect, device number 10
[  385.484857][ T8012] blk_update_request: I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  385.498997][ T8012] hfs: can't find a HFS filesystem on dev loop0
[  386.200413][ T1107] Bluetooth: hci4: command 0x1009 tx timeout
[  388.756431][ T8019] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  388.778700][    T7] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  388.799188][ T8019] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  389.048517][    T7] usb 4-1: Using ep0 maxpacket: 16
[  389.188861][    T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  389.200557][    T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  389.213979][    T7] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  389.223286][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  389.250271][    T7] usb 4-1: config 0 descriptor??
[  389.354559][ T8019] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  389.364100][ T8019] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  389.373169][ T8019] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  389.382666][ T8019] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  389.500443][ T8036] device syzkaller0 entered promiscuous mode
[  389.507900][ T8049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  389.954213][ T8080] netlink: 20 bytes leftover after parsing attributes in process `syz.5.859'.
[  390.236858][    T7] usbhid 4-1:0.0: can't add hid device: -71
[  390.243296][    T7] usbhid: probe of 4-1:0.0 failed with error -71
[  390.251646][    T7] usb 4-1: USB disconnect, device number 14
[  390.428762][ T4254] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  390.976621][ T4254] usb 1-1: Using ep0 maxpacket: 8
[  391.372652][ T4254] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  391.399332][ T4254] usb 1-1: config 179 has no interface number 0
[  391.432041][ T4254] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  391.530156][ T4254] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  391.584291][ T4254] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  391.651665][ T4254] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  391.694245][ T4254] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  391.713624][ T4254] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  391.728950][ T8107] loop7: detected capacity change from 0 to 7
[  391.733271][ T4254] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  391.808918][ T8077] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  391.818634][ T8107] Dev loop7: unable to read RDB block 7
[  391.824400][ T8107]  loop7: unable to read partition table
[  391.867467][ T8107] loop7: partition table beyond EOD, truncated
[  391.908972][ T8107] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  392.165143][ T8117] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  392.247736][ T4254] usb 1-1: USB disconnect, device number 16
[  392.254192][    C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  392.254353][    C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  392.930439][ T8128] device syzkaller0 entered promiscuous mode
[  393.327365][ T8164] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  393.585570][ T8170] 9pnet_virtio: no channels available for device syz
[  394.073507][ T8186] trusted_key: encrypted_key: insufficient parameters specified
[  394.217861][ T4254] usb 7-1: new low-speed USB device number 7 using dummy_hcd
[  394.629718][   T23] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  394.658692][ T4254] usb 7-1: config index 0 descriptor too short (expected 1307, got 27)
[  394.677569][ T4254] usb 7-1: config 0 has an invalid interface number: 0 but max is -1
[  394.697839][ T4254] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0
[  394.718167][ T4254] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  394.762138][ T4254] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  394.793470][ T4254] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  395.068722][   T23] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  395.108551][   T23] usb 6-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00
[  395.117795][   T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.129064][ T4254] usb 7-1: string descriptor 0 read error: -22
[  395.135388][ T4254] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  395.160280][   T23] usb 6-1: config 0 descriptor??
[  395.184147][ T4254] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.252425][ T4254] usb 7-1: config 0 descriptor??
[  395.315050][ T4254] hub 7-1:0.0: bad descriptor, ignoring hub
[  395.324358][ T4254] hub: probe of 7-1:0.0 failed with error -5
[  395.643700][   T23] itetech 0003:06CB:73F4.000A: item fetching failed at offset 2/40
[  395.658680][    T7] usb 7-1: USB disconnect, device number 7
[  395.678497][   T23] itetech: probe of 0003:06CB:73F4.000A failed with error -22
[  395.870472][    T7] usb 6-1: USB disconnect, device number 11
[  396.233869][ T8223] bridge0: port 2(bridge_slave_1) entered disabled state
[  396.241611][ T8223] bridge0: port 1(bridge_slave_0) entered disabled state
[  397.104420][ T8223] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  397.189742][ T8223] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  397.839335][ T8223] device macvlan1 left promiscuous mode
[  398.218595][ T8223] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  398.236990][ T8223] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  398.263661][ T8223] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  398.293558][ T8223] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  398.500417][ T8227] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  398.978749][ T4295] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  399.398589][ T5109] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  399.552550][ T8295] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  399.638495][ T5109] usb 6-1: Using ep0 maxpacket: 32
[  399.648628][ T4295] usb 7-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40
[  399.666007][ T4295] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  399.688203][ T4295] usb 7-1: Product: syz
[  399.698661][ T4295] usb 7-1: Manufacturer: syz
[  399.710349][ T4295] usb 7-1: SerialNumber: syz
[  399.758688][ T5109] usb 6-1: config 0 has an invalid descriptor of length 101, skipping remainder of the config
[  399.948783][ T5109] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  399.973751][ T5109] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  400.059820][ T5109] usb 6-1: Product: syz
[  400.118579][ T5109] usb 6-1: Manufacturer: syz
[  400.133559][ T5109] usb 6-1: SerialNumber: syz
[  400.220508][ T5109] usb 6-1: config 0 descriptor??
[  400.309659][ T5109] usb 6-1: bad CDC descriptors
[  400.353926][ T5109] usb 6-1: unsupported MDLM descriptors
[  400.604009][ T5109] usb 6-1: USB disconnect, device number 12
[  400.938743][ T4295] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  400.978998][ T4295] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  401.046788][ T4295] usb 7-1: USB disconnect, device number 8
[  401.183610][ T8341] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  401.209476][ T8341] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  401.330880][ T5125] udevd[5125]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  401.828672][ T4295] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  402.088664][ T4295] usb 1-1: Using ep0 maxpacket: 32
[  402.208986][ T4295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  402.249592][ T8372] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  402.286871][ T4295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  402.383115][ T4295] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  402.393465][ T4295] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  402.434079][ T4295] usb 1-1: config 0 descriptor??
[  402.491897][ T4295] hub 1-1:0.0: USB hub found
[  402.708718][ T4295] hub 1-1:0.0: 1 port detected
[  402.802008][ T8377] device syzkaller0 entered promiscuous mode
[  403.008756][ T4295] hub 1-1:0.0: hub_hub_status failed (err = -71)
[  403.016688][ T4295] hub 1-1:0.0: config failed, can't get hub status (err -71)
[  403.159086][ T4295] usbhid 1-1:0.0: can't add hid device: -71
[  403.165328][ T4295] usbhid: probe of 1-1:0.0 failed with error -71
[  403.259368][ T4295] usb 1-1: USB disconnect, device number 17
[  403.824542][  T144] Bluetooth: hci4: Frame reassembly failed (-84)
[  404.400244][ T8462] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  405.168703][ T4295] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  405.790667][ T4295] usb 7-1: unable to get BOS descriptor or descriptor too short
[  405.888776][ T4295] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  405.976838][ T4295] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  406.099910][ T4295] usb 7-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30
[  406.675946][ T4231] Bluetooth: hci4: command 0x1003 tx timeout
[  406.675942][ T4295] usb 7-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188
[  406.675986][ T4295] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  406.715338][ T4295] usb 7-1: config 1 interface 1 has no altsetting 0
[  406.729676][ T4200] Bluetooth: hci4: sending frame failed (-49)
[  406.979146][ T4295] usb 7-1: string descriptor 0 read error: -22
[  406.990935][ T4295] usb 7-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40
[  407.008680][ T5109] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  407.032115][ T4295] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.258498][ T5109] usb 1-1: Using ep0 maxpacket: 16
[  407.378950][ T5109] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  407.402913][ T5109] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  407.618637][ T5109] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  407.638000][ T5109] usb 1-1: New USB device strings: Mfr=1, Product=21, SerialNumber=3
[  407.660473][ T5109] usb 1-1: Product: syz
[  407.664702][ T5109] usb 1-1: Manufacturer: syz
[  407.669913][ T4295] usb 7-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4
[  407.707258][ T4295] usb 7-1: 2:0: cannot get min/max values for control 2 (id 2)
[  407.715883][ T5109] usb 1-1: SerialNumber: syz
[  407.758834][ T4295] usb 7-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4
[  408.613456][ T4295] usb 7-1: 2:0: cannot get min/max values for control 2 (id 2)
[  408.638635][ T4295] usb 7-1: cannot get ctl value: req = 0x83, wValue = 0x201, wIndex = 0x200, type = 4
[  408.658562][ T4295] usb 7-1: 2:0: cannot get min/max values for control 2 (id 2)
[  408.687048][ T4295] usb 7-1: USB disconnect, device number 9
[  408.750569][ T5109] usb 1-1: USB disconnect, device number 18
[  408.838564][   T23] Bluetooth: hci4: command 0x1001 tx timeout
[  408.848812][ T4200] Bluetooth: hci4: sending frame failed (-49)
[  408.933605][ T5125] udevd[5125]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  409.648127][ T8525] netlink: 'syz.5.954': attribute type 27 has an invalid length.
[  411.769243][ T4295] Bluetooth: hci4: command 0x1009 tx timeout
[  412.169051][ T8548] overlayfs: missing 'lowerdir'
[  412.374035][ T4234] Bluetooth: hci6: Frame reassembly failed (-90)
[  412.394199][ T8552] Bluetooth: hci6: Frame reassembly failed (-84)
[  412.424076][ T4234] Bluetooth: hci6: Frame reassembly failed (-84)
[  413.588539][ T4295] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  413.828627][ T4295] usb 4-1: Using ep0 maxpacket: 8
[  413.948704][ T4295] usb 4-1: too many endpoints for config 0 interface 0 altsetting 255: 137, using maximum allowed: 30
[  413.966859][ T4295] usb 4-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 137
[  413.987386][ T4295] usb 4-1: config 0 interface 0 has no altsetting 0
[  413.995500][ T4295] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00
[  414.010969][ T4295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.024180][ T4295] usb 4-1: config 0 descriptor??
[  414.408612][ T4229] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[  414.448725][ T4231] Bluetooth: hci6: command 0x1003 tx timeout
[  414.455907][ T4199] Bluetooth: hci6: sending frame failed (-49)
[  414.499971][ T4295] dragonrise 0003:0079:0011.000B: unknown main item tag 0x0
[  414.512782][ T4295] dragonrise 0003:0079:0011.000B: unknown main item tag 0x0
[  414.521147][ T4295] dragonrise 0003:0079:0011.000B: unknown main item tag 0x0
[  414.533456][ T4295] dragonrise 0003:0079:0011.000B: unknown main item tag 0x0
[  414.542155][ T4295] dragonrise 0003:0079:0011.000B: unknown main item tag 0x0
[  414.553967][ T4295] dragonrise 0003:0079:0011.000B: unknown main item tag 0x0
[  414.562020][ T4295] dragonrise 0003:0079:0011.000B: unknown main item tag 0xe
[  414.573973][ T4295] dragonrise 0003:0079:0011.000B: unknown main item tag 0x2
[  414.581939][ T4295] dragonrise 0003:0079:0011.000B: unknown main item tag 0x1
[  414.594603][ T4295] dragonrise 0003:0079:0011.000B: unknown main item tag 0x1
[  414.602687][ T4295] dragonrise 0003:0079:0011.000B: invalid report_size 918321780
[  414.615318][ T4295] dragonrise 0003:0079:0011.000B: item 0 4 1 7 parsing failed
[  414.623659][ T4295] dragonrise 0003:0079:0011.000B: parse failed
[  414.634328][ T4295] dragonrise: probe of 0003:0079:0011.000B failed with error -22
[  414.734447][ T4295] usb 4-1: USB disconnect, device number 15
[  414.778780][ T4229] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 991, setting to 64
[  414.804685][ T4229] usb 8-1: config 0 interface 0 has no altsetting 0
[  414.814290][ T4229] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  414.827393][ T4229] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.855795][ T4229] usb 8-1: config 0 descriptor??
[  414.878767][ T8591] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  415.236948][ T8608] tipc: Started in network mode
[  415.242407][ T8608] tipc: Node identity 0e7a29ac5ffc, cluster identity 4711
[  415.262715][ T8608] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  415.270411][ T8608] device syzkaller0 entered promiscuous mode
[  415.289089][ T8608] tipc: Resetting bearer <eth:syzkaller0>
[  415.299687][ T8607] tipc: Resetting bearer <eth:syzkaller0>
[  415.332071][ T8607] tipc: Disabling bearer <eth:syzkaller0>
[  415.352495][ T4229] lua 0003:1E7D:2C2E.000C: unknown main item tag 0x0
[  415.360223][ T4229] lua 0003:1E7D:2C2E.000C: unknown main item tag 0x0
[  415.367010][ T4229] lua 0003:1E7D:2C2E.000C: unknown main item tag 0x0
[  415.374215][ T4229] lua 0003:1E7D:2C2E.000C: unknown main item tag 0x0
[  415.381334][ T4229] lua 0003:1E7D:2C2E.000C: unknown main item tag 0x0
[  415.388208][ T4229] lua 0003:1E7D:2C2E.000C: unknown main item tag 0x0
[  415.395209][ T4229] lua 0003:1E7D:2C2E.000C: unknown main item tag 0x0
[  415.402358][ T4229] lua 0003:1E7D:2C2E.000C: unknown main item tag 0x0
[  415.417563][ T4229] lua 0003:1E7D:2C2E.000C: unknown main item tag 0x0
[  415.432436][ T4229] lua 0003:1E7D:2C2E.000C: unknown main item tag 0x0
[  415.446058][ T4229] lua 0003:1E7D:2C2E.000C: unknown main item tag 0x0
[  415.469360][ T4229] lua 0003:1E7D:2C2E.000C: unknown main item tag 0x0
[  415.476491][ T4229] lua 0003:1E7D:2C2E.000C: unknown main item tag 0x0
[  415.487957][ T4229] lua 0003:1E7D:2C2E.000C: hidraw0: USB HID vff.ff Device [HID 1e7d:2c2e] on usb-dummy_hcd.7-1/input0
[  415.560657][ T4229] usb 8-1: USB disconnect, device number 3
[  415.630794][ T8616] fido_id[8616]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory
[  416.288505][ T4229] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  416.368648][ T5109] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  416.518598][ T4295] Bluetooth: hci6: command 0x1001 tx timeout
[  416.528068][ T4199] Bluetooth: hci6: sending frame failed (-49)
[  416.618495][ T5109] usb 8-1: Using ep0 maxpacket: 32
[  416.728967][ T4229] usb 6-1: unable to get BOS descriptor or descriptor too short
[  416.748771][ T5109] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  416.772865][ T5109] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  416.794418][ T5109] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  416.818555][ T5109] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  416.848236][ T5109] usb 8-1: config 0 descriptor??
[  416.868865][ T4229] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7
[  416.902041][ T5109] hub 8-1:0.0: USB hub found
[  416.993727][ T8640] tipc: Started in network mode
[  417.003721][ T8640] tipc: Node identity 0eeaf73612a7, cluster identity 4711
[  417.011927][ T8640] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  417.022641][ T8640] device syzkaller0 entered promiscuous mode
[  417.049970][ T8640] tipc: Resetting bearer <eth:syzkaller0>
[  417.059928][ T8639] tipc: Resetting bearer <eth:syzkaller0>
[  417.078068][ T8639] tipc: Disabling bearer <eth:syzkaller0>
[  417.090128][ T4229] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40
[  417.102607][ T4229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  417.116140][ T4229] usb 6-1: Product: syz
[  417.125814][ T4229] usb 6-1: Manufacturer: syz
[  417.130990][ T5109] hub 8-1:0.0: 1 port detected
[  417.137032][ T4229] usb 6-1: SerialNumber: syz
[  417.323716][ T8649] overlayfs: missing 'lowerdir'
[  417.563537][ T4229] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  417.598839][ T5109] hub 8-1:0.0: hub_hub_status failed (err = -71)
[  417.624116][ T5109] hub 8-1:0.0: config failed, can't get hub status (err -71)
[  417.759167][ T5109] usbhid 8-1:0.0: can't add hid device: -71
[  417.766031][ T5109] usbhid: probe of 8-1:0.0 failed with error -71
[  417.774479][ T4229] usb 6-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  417.783362][ T4229] usb 6-1: found format II with max.bitrate = 4, frame size=7372
[  417.852176][ T5109] usb 8-1: USB disconnect, device number 4
[  418.209390][ T4229] usb 6-1: 2:1 : unknown format tag 0x4 is detected.  processed as MPEG.
[  418.819589][ T4229] usb 6-1: found format II with max.bitrate = 4, frame size=7372
[  418.828654][ T4295] Bluetooth: hci6: command 0x1009 tx timeout
[  418.838666][ T4229] usb 6-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0)
[  418.890139][ T4229] usb 6-1: USB disconnect, device number 13
[  419.227029][ T8662] trusted_key: encrypted_key: insufficient parameters specified
[  419.269737][ T5125] udevd[5125]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  421.418493][ T4231] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  421.505343][ T8701] device syzkaller0 entered promiscuous mode
[  421.698564][ T4231] usb 8-1: Using ep0 maxpacket: 32
[  421.848574][ T4231] usb 8-1: config 0 has an invalid interface number: 188 but max is 0
[  422.614532][ T4231] usb 8-1: config 0 has no interface number 0
[  422.620871][ T4231] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  422.868942][ T4231] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  423.419595][ T4231] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.477533][ T4231] usb 8-1: Product: syz
[  423.498487][ T4231] usb 8-1: Manufacturer: syz
[  423.519722][ T4231] usb 8-1: SerialNumber: syz
[  423.575779][ T4231] usb 8-1: config 0 descriptor??
[  423.618614][ T4231] usb 8-1: can't set config #0, error -71
[  423.654119][ T4231] usb 8-1: USB disconnect, device number 5
[  423.848650][ T8059] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  424.050193][ T8748] trusted_key: encrypted_key: insufficient parameters specified
[  424.098625][ T8059] usb 6-1: Using ep0 maxpacket: 16
[  424.228717][ T8059] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  424.256491][ T8059] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  424.374201][ T8752] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3979591798 (509387750144 ns) > initial count (364801339648 ns). Using initial count to start timer.
[  424.488560][ T8059] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  424.504367][ T8059] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.548135][ T8059] usb 6-1: Product: syz
[  424.559848][ T8059] usb 6-1: Manufacturer: syz
[  424.574643][ T8059] usb 6-1: SerialNumber: syz
[  424.607933][ T8752] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  424.629220][ T8752] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  424.773298][ T8765] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1033'.
[  424.924556][ T8774] trusted_key: encrypted_key: insufficient parameters specified
[  425.036912][ T8777] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  425.081183][ T8775] device syzkaller0 entered promiscuous mode
[  425.189810][ T8770] tipc: Resetting bearer <eth:syzkaller0>
[  425.233663][ T8769] tipc: Resetting bearer <eth:syzkaller0>
[  425.300998][ T8769] tipc: Disabling bearer <eth:syzkaller0>
[  425.418607][ T8059] usb 6-1: cannot find UAC_HEADER
[  425.440115][ T8059] snd-usb-audio: probe of 6-1:1.0 failed with error -22
[  425.485863][ T8059] usb 6-1: USB disconnect, device number 14
[  425.719819][ T5125] udevd[5125]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  425.864424][ T8801] 9pnet_virtio: no channels available for device syz
[  426.112084][ T8807] overlayfs: missing 'workdir'
[  428.275550][ T8822] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  428.324110][ T8822] device syzkaller0 entered promiscuous mode
[  428.380095][ T8822] tipc: Resetting bearer <eth:syzkaller0>
[  428.447522][ T8825] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  428.495562][ T8820] tipc: Resetting bearer <eth:syzkaller0>
[  428.549857][ T8820] tipc: Disabling bearer <eth:syzkaller0>
[  428.650853][ T8825] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1055'.
[  428.729520][ T8834] netlink: 'syz.7.1058': attribute type 10 has an invalid length.
[  428.748509][ T8834] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1058'.
[  428.768352][ T8834] device dummy0 entered promiscuous mode
[  428.777151][ T8834] bridge0: port 3(dummy0) entered blocking state
[  428.786342][ T8834] bridge0: port 3(dummy0) entered disabled state
[  428.806043][ T8834] bridge0: port 3(dummy0) entered blocking state
[  428.812674][ T8834] bridge0: port 3(dummy0) entered forwarding state
[  429.144434][ T8844] 9pnet_virtio: no channels available for device syz
[  430.445882][ T8871] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  430.475585][ T8880] netlink: 'syz.5.1073': attribute type 10 has an invalid length.
[  430.518089][ T8880] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1073'.
[  430.529972][ T8880] device batadv_slave_1 entered promiscuous mode
[  430.542425][ T8880] batman_adv: batadv0: Interface activated: batadv_slave_1
[  430.550137][ T8880] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  430.557743][ T8880] batman_adv: batadv0: Removing interface: batadv_slave_1
[  430.618864][ T8886] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  430.678782][ T8882] device syzkaller0 entered promiscuous mode
[  431.269092][ T8882] tipc: Resetting bearer <eth:syzkaller0>
[  431.333564][ T8881] tipc: Resetting bearer <eth:syzkaller0>
[  431.356691][ T8881] tipc: Disabling bearer <eth:syzkaller0>
[  431.960339][ T8905] 9pnet_virtio: no channels available for device syz
[  432.044478][ T8907] netlink: 668 bytes leftover after parsing attributes in process `syz.5.1082'.
[  432.111718][ T8907] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16)
[  432.170555][ T8907] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  432.705031][ T8913] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  432.843082][ T8922] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1084'.
[  433.342888][ T8942] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1093'.
[  433.516543][ T8945] 
[  433.531934][ T8945] =============================
[  433.557390][ T8945] WARNING: suspicious RCU usage
[  433.573374][ T8945] syzkaller #0 Not tainted
[  433.583697][ T8945] -----------------------------
[  433.595515][ T8945] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage!
[  433.616949][ T8945] 
[  433.616949][ T8945] other info that might help us debug this:
[  433.616949][ T8945] 
[  433.658816][ T8949] loop5: detected capacity change from 0 to 256
[  433.684686][ T8945] 
[  433.684686][ T8945] rcu_scheduler_active = 2, debug_locks = 1
[  433.694001][ T8945] 1 lock held by syz.0.1095/8945:
[  433.699581][ T8945]  #0: ffffffff8c31ec20 (rcu_read_lock_trace){....}-{0:0}, at: rcu_lock_acquire+0x9/0x30
[  433.731366][ T8949] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  433.735775][ T8945] 
[  433.735775][ T8945] stack backtrace:
[  433.789532][ T8945] CPU: 0 PID: 8945 Comm: syz.0.1095 Not tainted syzkaller #0
[  433.797078][ T8945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  433.808209][ T8945] Call Trace:
[  433.811743][ T8945]  <TASK>
[  433.814966][ T8945]  dump_stack_lvl+0x188/0x250
[  433.819781][ T8945]  ? load_image+0x400/0x400
[  433.824452][ T8945]  ? show_regs_print_info+0x20/0x20
[  433.829783][ T8945]  ? print_tainted+0x148/0x170
[  433.834582][ T8945]  ? lockdep_rcu_suspicious+0x110/0x180
[  433.840173][ T8945]  get_callchain_entry+0x2a5/0x3b0
[  433.845428][ T8945]  get_perf_callchain+0xab/0x460
[  433.850390][ T8945]  ? put_callchain_entry+0xb0/0xb0
[  433.855613][ T8945]  ? mark_lock+0x94/0x320
[  433.860205][ T8945]  ? verify_lock_unused+0x140/0x140
[  433.865668][ T8945]  ? __lock_acquire+0x13bc/0x7d10
[  433.871257][ T8945]  __bpf_get_stack+0x2db/0x530
[  433.876085][ T8945]  ? stack_map_get_build_id_offset+0x860/0x860
[  433.882302][ T8945]  ? __cant_sleep+0x220/0x220
[  433.887386][ T8945]  ? bpf_prog_b8a90dd1efcc4ad9+0x3d/0x37c
[  433.893333][ T8945]  bpf_get_stack_raw_tp+0x189/0x1c0
[  433.898649][ T8945]  bpf_prog_b8a90dd1efcc4ad9+0x3d/0x37c
[  433.904219][ T8945]  bpf_prog_run_pin_on_cpu+0x63/0x140
[  433.909612][ T8945]  bpf_prog_test_run_syscall+0x35a/0x4f0
[  433.915360][ T8945]  ? sock_gen_cookie+0x60/0x60
[  433.920233][ T8945]  ? sock_gen_cookie+0x60/0x60
[  433.925021][ T8945]  bpf_prog_test_run+0x31e/0x390
[  433.930365][ T8945]  __sys_bpf+0x5a5/0x6f0
[  433.935285][ T8945]  ? bpf_link_show_fdinfo+0x380/0x380
[  433.940895][ T8945]  ? vtime_user_exit+0x2c8/0x3e0
[  433.946017][ T8945]  __x64_sys_bpf+0x78/0x90
[  433.950834][ T8945]  do_syscall_64+0x4c/0xa0
[  433.955304][ T8945]  ? clear_bhb_loop+0x30/0x80
[  433.960640][ T8945]  ? clear_bhb_loop+0x30/0x80
[  433.965434][ T8945]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  433.971925][ T8945] RIP: 0033:0x7f40cb707819
[  433.976493][ T8945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  433.996543][ T8945] RSP: 002b:00007f40c9961028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  434.005293][ T8945] RAX: ffffffffffffffda RBX: 00007f40cb980fa0 RCX: 00007f40cb707819
[  434.013427][ T8945] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a
[  434.022347][ T8945] RBP: 00007f40cb79dc91 R08: 0000000000000000 R09: 0000000000000000
[  434.030434][ T8945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  434.038941][ T8945] R13: 00007f40cb981038 R14: 00007f40cb980fa0 R15: 00007fffd1ca4dd8
[  434.046983][ T8945]  </TASK>
[  434.461111][ T8945] 
[  434.463773][ T8945] =============================
[  434.476123][ T8945] WARNING: suspicious RCU usage
[  434.481474][ T8945] syzkaller #0 Not tainted
[  434.486101][ T8945] -----------------------------
[  434.489516][   T26] audit: type=1800 audit(1776368730.667:3): pid=8949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1097" name="file1" dev="loop5" ino=1048773 res=0 errno=0
[  434.507460][ T8945] include/linux/perf_event.h:1274 suspicious rcu_dereference_check() usage!
[  434.530038][ T8945] 
[  434.530038][ T8945] other info that might help us debug this:
[  434.530038][ T8945] 
[  434.544730][ T8945] 
[  434.544730][ T8945] rcu_scheduler_active = 2, debug_locks = 1
[  434.556243][ T8945] 1 lock held by syz.0.1095/8945:
[  434.565197][ T8945]  #0: ffffffff8c31ec20 (rcu_read_lock_trace){....}-{0:0}, at: rcu_lock_acquire+0x9/0x30
[  434.581838][ T8945] 
[  434.581838][ T8945] stack backtrace:
[  434.587951][ T8945] CPU: 0 PID: 8945 Comm: syz.0.1095 Not tainted syzkaller #0
[  434.595793][ T8945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  434.606246][ T8945] Call Trace:
[  434.609740][ T8945]  <TASK>
[  434.612760][ T8945]  dump_stack_lvl+0x188/0x250
[  434.617766][ T8945]  ? load_image+0x400/0x400
[  434.622594][ T8945]  ? show_regs_print_info+0x20/0x20
[  434.627942][ T8945]  ? print_tainted+0x148/0x170
[  434.632870][ T8945]  ? lockdep_rcu_suspicious+0x110/0x180
[  434.638774][ T8945]  perf_callchain_user+0x3d6/0xfd0
[  434.644047][ T8945]  ? get_callchain_entry+0x181/0x3b0
[  434.649399][ T8945]  get_perf_callchain+0x33d/0x460
[  434.654585][ T8945]  ? put_callchain_entry+0xb0/0xb0
[  434.659776][ T8945]  ? mark_lock+0x94/0x320
[  434.664262][ T8945]  ? verify_lock_unused+0x140/0x140
[  434.669742][ T8945]  ? __lock_acquire+0x13bc/0x7d10
[  434.674822][ T8945]  __bpf_get_stack+0x2db/0x530
[  434.679754][ T8945]  ? stack_map_get_build_id_offset+0x860/0x860
[  434.685965][ T8945]  ? __cant_sleep+0x220/0x220
[  434.690789][ T8945]  ? bpf_prog_b8a90dd1efcc4ad9+0x3d/0x37c
[  434.696660][ T8945]  bpf_get_stack_raw_tp+0x189/0x1c0
[  434.702027][ T8945]  bpf_prog_b8a90dd1efcc4ad9+0x3d/0x37c
[  434.707629][ T8945]  bpf_prog_run_pin_on_cpu+0x63/0x140
[  434.713332][ T8945]  bpf_prog_test_run_syscall+0x35a/0x4f0
[  434.719152][ T8945]  ? sock_gen_cookie+0x60/0x60
[  434.724244][ T8945]  ? sock_gen_cookie+0x60/0x60
[  434.729225][ T8945]  bpf_prog_test_run+0x31e/0x390
[  434.734416][ T8945]  __sys_bpf+0x5a5/0x6f0
[  434.738842][ T8945]  ? bpf_link_show_fdinfo+0x380/0x380
[  434.744751][ T8945]  ? vtime_user_exit+0x2c8/0x3e0
[  434.750121][ T8945]  __x64_sys_bpf+0x78/0x90
[  434.754752][ T8945]  do_syscall_64+0x4c/0xa0
[  434.759213][ T8945]  ? clear_bhb_loop+0x30/0x80
[  434.764067][ T8945]  ? clear_bhb_loop+0x30/0x80
[  434.769141][ T8945]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  434.775509][ T8945] RIP: 0033:0x7f40cb707819
[  434.780407][ T8945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  434.800389][ T8945] RSP: 002b:00007f40c9961028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  434.808963][ T8945] RAX: ffffffffffffffda RBX: 00007f40cb980fa0 RCX: 00007f40cb707819
[  434.817201][ T8945] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a
[  434.825585][ T8945] RBP: 00007f40cb79dc91 R08: 0000000000000000 R09: 0000000000000000
[  434.833870][ T8945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  434.841868][ T8945] R13: 00007f40cb981038 R14: 00007f40cb980fa0 R15: 00007fffd1ca4dd8
[  434.849977][ T8945]  </TASK>
[  440.291559][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  440.298094][ T1421] ieee802154 phy1 wpan1: encryption failed: -22