last executing test programs:

14m33.133720969s ago: executing program 32 (id=3587):
syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10)
rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r2)
ptrace$pokeuser(0x6, r2, 0x118, 0x4)
ptrace$pokeuser(0x6, r2, 0x118, 0x6000003f)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r3 = msgget$private(0x0, 0x3ac)
msgrcv(r3, 0x0, 0x0, 0x3, 0x1000)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
msgsnd(r3, &(0x7f0000000f40)={0x3}, 0x8, 0x800)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"])
keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000001880)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0)
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x0)
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7cb, &(0x7f0000000100)={&(0x7f0000001080)={{@any, 0xfff}, {@local, 0x5}, 0x400, "4145fdc5fec7663a106cef95c8d86f03d655b82e62dc5204ff06732791d90936bf31f7b4eafad3ed43e8da42de6780edce2e2f941399c9b9002a6a538fc1ebd3e994ce6fa4a67c775c476cdbedebbe34904cbe0d5808cf5892aa1e563f949f38cd2ebaa2c46464183ead798b1af0ba7ad5db77736a5329e7297e674242854f87ef03b0fba724523033529e64be44188740b9e9a0ba6944e9724c4aaa8470ab8d35a1746a1da4dfa2112cb5135d97efae0975e7fa5e421fe7ec12a8bbd7714076b63ddaca822d7c0383ccc4e21b11c8a0443850c05f4bb6716b6ba83016b709b44a9959c44daa717edf6b43f7c235fae47730ff2d435ed29d062451ab74bd9f65d9bf96e1afc645ca2249c89146fc815210d465ca0ede0acbfe1165b15d222ed668b79b14f901178d35e7421637588c887b0f2335ea84a442fc95bbcf0ea3b308ee18d913901cb8f40dd2798e781c4b1c620c23565b5bc18e25c206f772c863c8a8864f460c239033717d41f94fbf13b1d0c7271364bd6d144160e1df33fcb33e5d45a5e7ea4264d089397d7e022c6e1f37a2e464c01b4df6a906d3a46d9432ba1966d73aa0627491e3b3c33bee03ff2138896b64862910f24dbacc3c686e0059ff5915c8b69bce3c4022c5c80d574274d1107c9935898ae444a6c38dbd8319e778e1a86a293094bd98d0ae3ae2c32a4bcb20e0517c03e7b46839f4e3601ff98244ca5485cacbfe53c935cf14038bba908af19834a86b56cf68a7170448a434b55d66c080ea095b02ba4c3f8ba492c9e50111bf1b3085cc0f3938a58609a337e89eba9271ee071a8b9f3ab4ad0fc3c92a48cb6bc63ed74877d8425c88eb40d18c6260d2221dc295d1fa1557cfcfe1cb3a1d61b4b1235e28903ae5a4d3d358f6d3e2c87b110e38aab0fd1ca2c047b3ea826d8cd9b980b3fc64fbf38d0d3fed0057b30612880a3d93aa3e16e1c1902cc8c206d7732f426fbb063b020a03d08e3bcd4ff32c30c8ea424ea0c746e72c23e8d53576cc801bdf82f8bba865074e5dde3177820c24be87b9bd36e30a81d1d50b5aa0628262d46d19060ae37a33aa8e515fed3f8bfdf65ba5f8e11e4d517a50ce03f82bc5b3c8e9b3eb6572f1a686430170ce64bc1a61246fd99b2d8a3215104478eead271fcca07bc66e637d5543ad47147f5ad50cc5a203a37b7d2f67bb0387ae189ee7d5cfc0a421b0f0e6286aaf28a3eadfad1b8c83a26ac0a1d4a3846d93e161c82be100278d94e35fc7b5f1feb833f1b975adb33bec5d777cfbdb2c5fe171e205fd6596b37ba646b9ecb163fabcd89a469f6ad539a80937748105298b0a6364d75c6de3cbcbb96c440d5489f3f47149551e7f53d3a22d837cfb59c3e43f0c95760791ed36ff84ae82a679e4e062461bda5db7c27fb00c3238266734bc7c16d45ce7cd3f0b7e63c309977816048f24"}, 0x418, 0x8})

14m17.023925807s ago: executing program 33 (id=3665):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x3, 0x2, 0x0, &(0x7f0000048000), 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94)
ftruncate(0xffffffffffffffff, 0x2007ffb)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000163000/0x2000)=nil, 0x2000, &(0x7f0000000000)='\x00')
r0 = socket$packet(0x11, 0x3, 0x300)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000033c000/0x3000)=nil, 0x3000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r1=>0x0})
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000580)={r1, 0x1, 0x6, @local}, 0x10)
pwrite64(0xffffffffffffffff, &(0x7f0000000080)="625430c10d", 0xff3c, 0x100000001)

14m7.768236865s ago: executing program 34 (id=3747):
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x440c0)
io_uring_setup(0x2255, 0x0)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00>', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/24], 0x48)

14m1.791952856s ago: executing program 35 (id=3768):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
r2 = fcntl$dupfd(r1, 0x406, r1)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000380)=0x10, 0x1c)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x200440d1}, 0x800e885)
syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), r2)
read$FUSE(r2, &(0x7f00000036c0)={0x2020}, 0x2020)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

14m0.108999303s ago: executing program 36 (id=3779):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)

13m55.881085834s ago: executing program 37 (id=3797):
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000100)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil})
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={<r1=>0xffffffffffffffff})
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
mmap(&(0x7f00003f6000/0x3000)=nil, 0x3000, 0x1000009, 0x810, r2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x1100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80002, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'wg1\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4c, 0xd, 0x62, 0x7, 0x8, 0xe, 0xe3, 0x9, 0xa, 0x0, [0x4e, 0x9, 0xd2, 0x7, 0x401, 0x4, 0x9, 0xfffffffb], [0x7f]}})
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
r4 = dup(r2)
ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000240))
ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x107, 0x100, 0x3, 0x1, 0x4000}})

13m52.698249497s ago: executing program 38 (id=3809):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x48, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x4, 0x24}, 0x50)

13m50.136738081s ago: executing program 39 (id=3813):
r0 = fsopen(&(0x7f0000000080)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140))
r1 = syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x80200)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0)
open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x4000800)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r4, 0x4b52, &(0x7f0000000000)={0x2, {0x2, 0xffff, 0x880}})
r5 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", '\x00', "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]})
ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000d40)={0x10000000000000, 0x60b, 0x23, 0xc6c1, 0x5, 0x20000003, "57c1169b6664ea61326ac71ae7213059", 0x0, 0xee, 0x7, 0xbd, 0x6, 0x7, 0xff})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socket$unix(0x1, 0x1, 0x0)
socket$kcm(0x11, 0x3, 0x0)

13m37.844707493s ago: executing program 40 (id=3856):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, 0x0, 0x140)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000580)='./cgroup\x00', &(0x7f00000006c0), &(0x7f0000001300)={0x0, 0xfb, 0x15, 0x4, 0x5, "15be20b5583f2d6ebc9c90b185b33536"}, 0x15, 0x0)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f000000c080)=@newtaction={0x4c6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}, {0x2d6c, 0x1, [@m_vlan={0xa4, 0x9, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x5e, 0x6, "cfeee8b0cb63f19ac05afb863e7804dedb88b7f00c19e13d5e90947aeeae5e5c330fe402937c1de5fef8b5f1bad17969c24d8161754a055174067b9a19fceaef3f04c0b90d5df88f1ef58100c83070e049ac700e0aa24e3ee520"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0x74, 0x6, 0x0, 0x0, {{0x9}, {0x4}, {0x45, 0x6, "7d21f1d078ddf9ba10823359c71214586c45f19414726fd32e0c760aaed4f6de90b7d011b1e586cb744040aad0563fc8b4b002ac9e68408685588ee63839de1622"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0xfdb28082b8cffc20}}}}, @m_vlan={0xb4, 0x1d, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xe39}]}, {0x75, 0x6, "6e8001371900c700907c5a71aaad4f759124db979845d7f42cddaceb7d8237e19b2e7a453103b44bbc883cfd7a6e72e4c08beed6ba4de070b837c0dfce973968af9f4693e7d1c0bc9308e7d296dbf9f63198af4c7e61c867da7e66112f0867b9bdb20b26d7b9e82643c8ef11aa4980eea8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_xt={0x234, 0x5, 0x0, 0x0, {{0x7}, {0x158, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TARG={0x80, 0x6, {0xf8b7, 'raw\x00', 0x1, 0x9, "0a66e101c98211d16e12ef7822cb95dbc39a3c397f13011ca9c4ee954d8cf009e3c0990e92e057fe8543276b43ec50396681528295b436e5c6f9456e1442241611c3128650e29d974cfaa878c5e7677177e55ce788a2"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0xb7, 0x6, "2566536169b0269847da4d857709d26e020e0b8b819d3b6b58f6aa053f67f54855db99a1afe60cd716d8f639474746008f53fca64e30b83b571a863800077ecb7e84383c7502d323dc9539c74eec46dc13c500990cf8098b9386e24f52742f342331d816f80fb99fbc1eb6e53ae6867caff4f10c7fd3b958d33398ba1d1e1302c562b2fadb1506c4412d8e17d90d13f03329efa5e19f4d96589875e8ccf518d983ff8ac078895a64be3e06e1d4ce6e00862fd1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_police={0x2968, 0x3, 0x0, 0x0, {{0xb}, {0x2928, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x400}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0xf4}, @TCA_POLICE_RATE={0x404, 0x2, [0xe, 0x80000000, 0x3, 0x8000, 0x5, 0x0, 0x44, 0x8, 0x8, 0x40, 0x6, 0x5, 0x7, 0x5, 0x3, 0x2, 0x8, 0xce, 0x4, 0xd7a, 0x3, 0x9, 0x101, 0x7, 0xfffffbff, 0x7fffffff, 0x7, 0x8, 0x0, 0x5, 0x6, 0xd, 0x80, 0x0, 0x7, 0xffffffff, 0x0, 0x5, 0x584, 0xe, 0x5, 0xfffffffb, 0x80000000, 0x8, 0x6, 0x6, 0x0, 0x3, 0x6, 0xa, 0x2, 0x1ec9, 0x0, 0xf9c, 0x9, 0x7, 0xd9f, 0x80000000, 0x9, 0x6, 0x3, 0x9, 0xa0000, 0x6, 0x2, 0x1b4, 0xf, 0x1, 0x8000, 0x3, 0x6, 0x4, 0x8, 0xfffffffa, 0x3, 0x2, 0x0, 0x1, 0x3, 0x5, 0x8, 0xf7ec, 0x4, 0x3, 0x5, 0x8, 0xa, 0x8, 0xfffffff8, 0x4, 0x8000, 0xffff977b, 0x0, 0x3, 0x2, 0x9, 0x2, 0x95, 0x8001, 0x9, 0xc, 0x1be5, 0x3d, 0x6, 0x8, 0x3, 0x4, 0xfff, 0xbb, 0xff00, 0x1, 0x0, 0x9, 0x7f2, 0x0, 0x3, 0x5, 0x2, 0x40, 0xfff, 0x17, 0x2, 0x10000, 0x68, 0x7ad, 0x8, 0x72a1225f, 0x2, 0x1, 0x12e9, 0x7ff00, 0xfffffff9, 0xb00, 0x3ff, 0x6, 0x1, 0x7, 0x1ff, 0x8e, 0x3, 0x2, 0x3, 0x7, 0x0, 0x4, 0x7, 0x0, 0x400, 0x400, 0x8, 0x5, 0x7, 0x1, 0xedf, 0x3, 0x7, 0x8, 0x2, 0x5, 0x7, 0x1386ca5c, 0xa, 0x29b, 0xb, 0x1, 0x7, 0x0, 0x0, 0x5, 0x4, 0x3, 0x8000, 0xffffdf25, 0x0, 0x3, 0x3, 0x1, 0x3d8, 0x6, 0x282, 0x200, 0x8, 0x80000, 0x6, 0xa, 0x0, 0xf, 0x4, 0x8, 0x8, 0xfffffffe, 0x9, 0x8, 0x4a, 0x3, 0x8, 0x5, 0xffffffff, 0xc, 0xd, 0xa8b, 0x81, 0x0, 0x62, 0x100, 0x59b, 0x3, 0x6, 0x621ee774, 0x9, 0x6, 0x3ff, 0x4, 0x18, 0xff, 0x2bc7, 0x7, 0x8000, 0xbb4a, 0x7fffffff, 0x3, 0x8, 0x1, 0x8, 0xfff, 0xffffff98, 0x3, 0x3, 0x0, 0x7, 0x5, 0x1, 0x8, 0x5, 0xe7, 0x0, 0x1ff, 0x1, 0xffffffff, 0x848, 0x27, 0xffff024a, 0x4, 0x1, 0xf76, 0x6e3, 0xd, 0x9, 0x9, 0x2, 0x6, 0xb8bd, 0x5f, 0x5, 0x1, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x8a38, 0x5, 0x7, 0x5, 0x1000, 0xff, 0x0, 0xfffffff3, 0x1, 0x81, 0xab, 0x8001, 0x4, 0x101, 0x9, 0x8, 0x0, 0x8, 0x4, 0x1, 0x8, 0x9, 0x1, 0x4, 0x1, 0x40, 0x8001, 0x200, 0x0, 0x1, 0x7, 0x9, 0x5, 0x0, 0x4, 0x2, 0x8001, 0x9, 0x2, 0x5c, 0xffff, 0x3, 0x5, 0x5b, 0x5, 0x9, 0xd0, 0x5, 0x7, 0x0, 0x972, 0x4, 0x3a2a, 0x1a4, 0x3, 0x1, 0x1, 0x1075fde8, 0x0, 0x2, 0xffffffff, 0x4, 0x10000, 0xf7, 0x5, 0x4, 0x6, 0x8, 0x7, 0x4000000, 0x0, 0x7, 0x7a7, 0x7f, 0x9, 0x0, 0x3, 0x7032, 0x7, 0xffffffff, 0x9, 0xff, 0x3, 0xfff, 0x9, 0x26d, 0xd, 0x1, 0x0, 0x10, 0x7f, 0x1, 0xa, 0x7, 0x0, 0x77df, 0x4, 0x9, 0xc, 0xb, 0x9, 0x9, 0xa92e, 0x8, 0x1, 0xc, 0x1000, 0x494, 0x8, 0x0, 0x7, 0x5, 0x3c0e7314, 0x7, 0x3, 0x3, 0x2, 0x9, 0x1ee7, 0x9, 0xd33f, 0x0, 0xb, 0xfffffffc, 0x40, 0x835, 0x8, 0x4, 0x4318ace8, 0xe, 0x9, 0x55, 0x81, 0x2, 0x2cb5, 0x2, 0xd2, 0xc, 0x3, 0x6, 0x5, 0x6, 0xb5b, 0x8, 0x4, 0x280000, 0x80000001, 0x2, 0x1, 0x1, 0x6, 0x3, 0x1, 0x9, 0x7, 0x7, 0xfffffffb, 0x4, 0x9, 0xf69, 0x5, 0x0, 0x1, 0xadc, 0x1876, 0x9, 0x2, 0x6f02, 0x7ff, 0x3, 0x35d74bc, 0xfffffffe, 0x401, 0x1, 0x98a, 0x8, 0x6, 0x10000000, 0x5, 0x7, 0x1, 0x3, 0x85, 0xfffff781, 0xfffffffb, 0x8000, 0xfffffff7, 0x6, 0x10001, 0x9, 0x7fff, 0x0, 0x0, 0x7, 0x11, 0x5, 0x3, 0x340000, 0xf, 0x2633, 0x5, 0x1ff, 0xc0, 0x2, 0x80, 0x80000001, 0x3d8f, 0xb, 0x5, 0x7fffffff, 0x3, 0xf79, 0x9, 0x3, 0xdd, 0xfffffff8, 0x10, 0x1ff, 0x7fffffff, 0x1, 0x9, 0x9, 0x639d, 0x1, 0x0, 0x3, 0x3, 0x3, 0x80000000, 0xc, 0x6, 0x7, 0x1, 0x0, 0x5, 0xb5, 0x7, 0x2, 0x2, 0x3, 0x8000000, 0x1, 0x6, 0x1, 0x40, 0xe, 0x2000, 0x1000, 0x1, 0x7, 0x3, 0x11, 0x7ff0, 0x3]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0xed0, 0x1, 0x1ff, 0x0, 0x1, 0x8001, 0x4, 0x8, 0x5, 0x8, 0xc9, 0x8, 0x8, 0x7ff, 0x81, 0x5, 0x5f1, 0x5, 0x8, 0x2, 0x9, 0x6, 0x39, 0x5, 0x6cb, 0x659, 0x2, 0xdc6d, 0xfffffff2, 0x6, 0x6, 0xfc, 0x1, 0xffff, 0x62c, 0x89, 0x3, 0x876, 0xffffffff, 0x8, 0xb8c9, 0x2, 0x3ff, 0xfb6, 0x5, 0x4, 0x9, 0x2, 0x0, 0x9, 0x8, 0x9, 0x7fff, 0xfa4ac800, 0xf, 0x6, 0xe, 0x2, 0x0, 0xfffff800, 0x5, 0x8001, 0x8, 0x8, 0x80000001, 0x200, 0xfffffff9, 0xe4, 0x4, 0x0, 0x7, 0x5, 0x8, 0x4, 0x8, 0x6, 0x7, 0x7ab, 0x6, 0x9, 0x7, 0x800, 0x8, 0x7fffffff, 0x6, 0xac4, 0x1fa, 0x4, 0x3ff, 0x0, 0xfd1, 0x800, 0x2, 0xa, 0x3, 0x101, 0x0, 0xda, 0x6, 0xf, 0x18f, 0x28a, 0x8, 0x2, 0x745, 0x9, 0x6dd8e42a, 0x7, 0xb, 0x2, 0x0, 0x4, 0x80000000, 0x3, 0x10001, 0x701, 0x80000000, 0x6, 0x45, 0x5, 0x4, 0xce4f, 0x4a5, 0x8, 0x7f7a, 0xd246, 0x7, 0x4, 0xe1c2, 0x2, 0x8, 0xa, 0x3, 0x7, 0x200, 0x3, 0x1c00000, 0x3, 0x0, 0x6, 0x40de, 0x9ff1, 0x0, 0x7, 0x2, 0x1, 0x4, 0x1ff, 0x200, 0x3, 0x9, 0xe4ce, 0x0, 0x4, 0x101, 0xd, 0x6, 0x9, 0x183, 0x5, 0x2, 0x7, 0x1, 0x1, 0x7ff, 0x741, 0x0, 0x10, 0x7, 0x8, 0x5, 0x0, 0x7fff, 0x80000001, 0x7, 0x5, 0x1, 0x7f, 0x82d, 0xc0, 0x6, 0x8, 0x400, 0x7, 0x6, 0x3, 0x8, 0x7fff, 0x5, 0xe9, 0x1, 0x3, 0x1ff, 0xe, 0x1, 0x1, 0x7, 0xec3, 0xff, 0x35, 0x6, 0x8, 0x1, 0x4, 0xf, 0x10000, 0xe0d, 0x7727, 0x7, 0xd, 0x7f, 0x0, 0x9, 0xf2, 0xfffffff1, 0x7fff, 0x1, 0xfffffffe, 0x5, 0x7, 0x3, 0x50, 0x8000, 0x9, 0x8, 0x7, 0x9, 0x7, 0x101, 0x9, 0x4, 0x10000, 0x1, 0x1dd3, 0x5, 0x0, 0x3b48f0a8, 0x401, 0x0, 0x8000, 0x8, 0x6063, 0xefb6, 0x2, 0x0, 0x4, 0x1, 0xa, 0x6, 0xfca1, 0x0, 0x2, 0x39, 0x7, 0x4]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x2, 0x8, 0x2, 0x0, {0xcc, 0x2, 0x5, 0x0, 0x3, 0x7ff}, {0x2, 0x0, 0x4000, 0x4, 0x2, 0x6}, 0x8, 0x2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x3, 0x8001, 0x1, 0x5, 0x7, 0x326c, 0x1, 0x7ff, 0xfffffff9, 0xc, 0x4, 0x83, 0x9, 0x8, 0x4, 0xfffffffe, 0x7fff, 0x3, 0xffff7fff, 0x2, 0x0, 0xfff, 0xfffffffd, 0xfb, 0x2, 0x10000, 0x200, 0x4, 0x0, 0xf8e, 0x7, 0x54, 0x5, 0xffff, 0x57, 0x0, 0x0, 0x800, 0x4, 0x7, 0x8, 0x2, 0x8000, 0x2, 0x7fff, 0x2, 0x9, 0x5, 0x6c0d, 0x101, 0xb, 0x2, 0xb763, 0xcf4, 0xc, 0x0, 0x1, 0x5c0a376c, 0x0, 0x2, 0x4, 0x8, 0x1ff, 0xfc, 0x2, 0x2, 0x0, 0x10, 0xa, 0x8001, 0x800, 0x9, 0x4, 0x200, 0x0, 0x1, 0x401, 0xa24, 0xe, 0x8001, 0x3, 0x5, 0x3, 0x35ea, 0x4, 0x2, 0x8, 0x80000000, 0xfff, 0x5, 0x2, 0x7f, 0x21ad, 0x81, 0x57, 0x4, 0x8, 0x5, 0x30c, 0x0, 0x3, 0x8001, 0x2c1, 0x6, 0x0, 0x9, 0x8001, 0x3, 0xade, 0xf80b, 0x807, 0xf, 0x200, 0x2, 0x5, 0x9, 0xc, 0x800, 0x9, 0x7d, 0x3ff, 0x401, 0x0, 0x2, 0x0, 0x1000, 0x6, 0x3, 0x6, 0x1b11, 0x3, 0x5, 0x2, 0x9, 0x3, 0x6, 0x81, 0xfffffc01, 0xcf, 0x80, 0x7fff, 0x8, 0x7ff, 0x3ff, 0xfff, 0x6, 0x0, 0x6, 0x8, 0x9, 0x0, 0x5, 0x9, 0xfffff74f, 0x20b9a12f, 0x8, 0x4, 0x6, 0x6, 0x1000, 0x7ff, 0x8, 0x6, 0x0, 0x8, 0x3, 0x7, 0x95d, 0xe, 0x10001, 0x80000000, 0x8, 0x9, 0x9, 0xff, 0x9, 0x1ff, 0x2, 0xa3d0, 0x2, 0xffff, 0x6, 0x6, 0xa, 0x40ea7307, 0x9, 0x0, 0x8, 0x2, 0x6, 0x7, 0x9, 0x4, 0x5, 0x5, 0x5, 0x3ff, 0x0, 0xcb, 0x7, 0xfc50, 0x2, 0x2ab, 0xad, 0x7, 0xa1, 0x7, 0x4b5e2446, 0xf0, 0x5, 0x6048, 0x1, 0x8e3, 0x1, 0x10000, 0x8, 0x0, 0x0, 0xd7e, 0x1, 0x47, 0x80, 0x7fff, 0x6, 0x3, 0x7f, 0x3, 0x2, 0x4, 0x1000, 0x2, 0xcf9, 0x5, 0x2, 0x1211eca9, 0x5, 0x1, 0x4, 0xdb, 0x4, 0x1, 0xffffffff, 0x1, 0x9, 0x9, 0x226a, 0x7, 0x8, 0x419e1dc0, 0x7, 0x3, 0xfffffff7, 0x7, 0x0, 0x2]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0xb72}], [@TCA_POLICE_RATE={0x404, 0x2, [0xbd4, 0xfb8, 0x1, 0xe, 0x9, 0x5, 0x10000, 0x2, 0x4, 0x7, 0x7fff, 0x10, 0x7, 0x94, 0xf, 0x401, 0x4, 0x8, 0x8, 0x0, 0x7, 0x33800000, 0xffffff57, 0x55, 0x1e, 0x8001, 0xf, 0x0, 0xf, 0x5, 0x9, 0x8, 0x1000, 0x100, 0x9, 0x10001, 0xf, 0x6, 0xb4d0, 0xff, 0x5, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x9, 0xa57, 0xd275, 0xbe7, 0x7f, 0x18c5, 0x9, 0x1, 0x8, 0x7c64370d, 0xf34e, 0x8, 0x9, 0x6, 0x2, 0x3, 0x4, 0x8, 0xb, 0x0, 0x5, 0x6a88cd18, 0x6, 0x6, 0x7fffffff, 0x7, 0x4, 0x4, 0x180000, 0x9, 0x7fff, 0x0, 0x8, 0x7, 0x7, 0xa, 0xffff, 0xffffffff, 0x6, 0x0, 0x2, 0x8, 0x0, 0x5, 0x0, 0x7, 0x80000001, 0x401, 0xffff, 0xfffffff8, 0x7, 0x7, 0x1, 0x7, 0x5, 0x76, 0x101, 0x72, 0x0, 0x4, 0x8, 0x100, 0x8001, 0x8e6, 0x3, 0xffff, 0xad27be7, 0x7971, 0x8, 0x7, 0x1, 0x1, 0xead, 0x7, 0x2b, 0x3, 0xc, 0x2, 0xf, 0x3, 0x4, 0x6, 0x10001, 0x0, 0x53, 0x5, 0x4, 0xd438, 0x3, 0x6, 0x81, 0x1ff, 0x8, 0x4, 0x3ff, 0xffff, 0x0, 0x3, 0xfffffffb, 0x80000000, 0x2, 0x8, 0x401, 0x8, 0x8, 0x8000, 0x2, 0x9, 0x7, 0xfffffff9, 0x4, 0x100, 0xfffffff3, 0x1, 0x6, 0x800, 0x6, 0x7ad0, 0x3, 0x200, 0x363, 0x0, 0x1, 0x0, 0xaf, 0x9b, 0x80000000, 0x5, 0x3, 0x7, 0x1, 0xd86bb57, 0x437894e2, 0xd, 0xfffffffb, 0x4, 0x5, 0x81, 0xa09, 0x7, 0xfffffff8, 0x3, 0xffff, 0xcb, 0x2, 0x7fffffff, 0x7, 0x7ff, 0x8, 0xfffffff8, 0x9, 0x4, 0x7fffffff, 0x4, 0x7, 0x80000001, 0x5, 0xf58, 0x401, 0x49b, 0x3ff, 0x5, 0xd0d, 0x9, 0xfffff2dc, 0x7, 0x9, 0x8, 0x4, 0x8, 0x9, 0x5, 0x2, 0x81, 0x306, 0x0, 0x2, 0x3c, 0x7, 0xc38, 0xfffffffa, 0x7ff, 0xfffffffb, 0x101, 0xffffffff, 0x3, 0x17aef7e, 0x0, 0x8, 0xec2d, 0x8, 0x6, 0x1ff, 0x7e6, 0x7, 0x40, 0xffffffff, 0x8, 0x7, 0x7ee2, 0x7, 0x6, 0x4, 0x0, 0x6, 0x3, 0xde, 0x6, 0x8, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x4, 0x6d, 0x1000, 0x7fff, 0x1, 0xb209, 0x10001, 0xf4f, 0x4, 0x5, 0x3, 0x3f17, 0x8, 0xa497, 0x1ff, 0x5, 0xe3bf, 0x0, 0x0, 0x9, 0x10, 0x1, 0x855, 0x2, 0x5, 0x9, 0x6, 0x6, 0x1000, 0x40, 0x4, 0x9, 0x1, 0x8, 0xff, 0x17, 0xe99, 0xfff, 0xd, 0x3ff, 0x0, 0x1000, 0xb544, 0x2, 0x0, 0x7fff, 0x5, 0xfe8, 0xfffffa36, 0xc32, 0x28, 0x4, 0x5, 0x7, 0xba, 0x1, 0x6, 0x8, 0x7, 0x580f, 0x2, 0x3, 0xdd1, 0x0, 0x297, 0x101, 0x4a, 0x8, 0x1000, 0x7, 0x1, 0x1, 0xe, 0xd00000, 0xbbc, 0xfffffffb, 0xd, 0x7c8, 0x7, 0xcb7b, 0x80000001, 0x400, 0x4, 0x2, 0x3, 0x0, 0x5c, 0x9, 0x5, 0x67, 0x6, 0x10001, 0x7, 0x9, 0x7, 0x5, 0x3, 0x1, 0xca, 0x92, 0xfffffff8, 0x5550, 0xfffffffb, 0x3a5, 0x11f, 0x8, 0x80000000, 0xf13, 0x4, 0x40, 0x8, 0x426, 0xfffffffa, 0x8, 0x7, 0xd, 0x3, 0x0, 0x100, 0x7fffffff, 0x1ff, 0xcd, 0xb4, 0x3, 0x10001, 0x1, 0x0, 0xf, 0x0, 0x2, 0x0, 0x8000, 0x400, 0x1, 0x40, 0x3, 0x10001, 0x9, 0x6, 0x7, 0x6, 0xf, 0x3, 0x10, 0x289, 0xffffffff, 0x9, 0x6, 0x7, 0x200, 0xfffffff7, 0x838, 0x9, 0x5, 0xb, 0xfb8d, 0x1, 0x6, 0xc, 0x3, 0x8, 0x8, 0xff, 0x6, 0x5, 0xa, 0x0, 0x9, 0x200, 0x6, 0x10, 0x0, 0x73a1, 0x7ffffffc, 0x5, 0x6, 0xe, 0x0, 0xfffffffa, 0x2, 0xc, 0x279, 0x1ff, 0x4, 0xaab1, 0xd, 0xfffffff7, 0xe2, 0xffff0001, 0x10000, 0x4000000, 0xffffff71, 0xfffffffd, 0x80, 0x200, 0x4, 0x40, 0x9, 0xc, 0xfff, 0x2, 0x4, 0x0, 0x7bca, 0x7f, 0x3, 0xfffffff7, 0x0, 0x2, 0x3, 0x10, 0x81, 0x5884, 0x9, 0x6, 0x1396, 0x3, 0x6, 0x9a89, 0x8f, 0x2, 0x800, 0xa1, 0xc9e, 0x40a, 0x7, 0x800, 0x7, 0x3b96, 0x5, 0x7f, 0xfffffff8, 0x8, 0x9, 0xf, 0xff, 0x67, 0xc, 0x2, 0x7, 0xd7d3, 0x8, 0x2, 0xffff0001, 0x3, 0x5, 0x4, 0x5, 0x7, 0x2d, 0x24f, 0x3, 0x8, 0xff, 0xff7]}, @TCA_POLICE_RATE={0x404, 0x2, [0x6235, 0x6ed47565, 0x6, 0x5, 0xd2, 0x4, 0x10, 0xd6, 0xae, 0x3, 0x8, 0xffff, 0x4, 0xffffffff, 0x9, 0xd0e, 0x7ff, 0x3, 0x30, 0x8, 0x8, 0x1, 0x304b, 0x8000, 0x0, 0x8, 0x10, 0x8, 0x3, 0x87, 0xffffffff, 0xb9, 0x80000001, 0x3, 0x0, 0x3, 0x4, 0x10000, 0xfffffffe, 0x9, 0x88c, 0x5, 0x7fffffff, 0x7, 0x7, 0x7f, 0x2, 0x7ff, 0xe, 0x2, 0x10000, 0x3, 0x80000001, 0x17bc, 0x1d, 0xffff, 0x800, 0x5, 0x1, 0x4, 0x6, 0x0, 0x8, 0x81, 0x2e, 0x3, 0x6, 0x3ff, 0x200, 0x9, 0x52f0000, 0x100, 0x4609, 0x3, 0x10001, 0x4, 0x3, 0x98, 0x6, 0x2, 0x2, 0x1ccc, 0x0, 0xfffff047, 0x40, 0x1d95, 0x8, 0xffff, 0x6, 0x800, 0x21, 0x8000, 0xcb, 0x735b9c93, 0x2, 0x1baa, 0x3, 0x6, 0x1, 0x1, 0x5, 0x9, 0x3, 0x5, 0x3, 0x4, 0x8, 0x8, 0x7fff, 0x3, 0x14, 0x52, 0x5, 0x2fc, 0x2da9, 0x2, 0x8, 0x4, 0x79, 0x5, 0x4, 0xb, 0x0, 0x7fffffff, 0x8, 0x8, 0x58c5, 0x200, 0x8, 0x5, 0x8, 0x7, 0x4, 0x408000, 0x1, 0x5, 0xff, 0x0, 0xe7, 0x9a, 0x6, 0x9, 0x6c471a70, 0xfffffffb, 0x4, 0x1ff, 0x2, 0x2, 0x4, 0xfffffffb, 0x0, 0x3ff, 0x10000, 0x3, 0x7f, 0x7fffffff, 0xfffffe00, 0xfff, 0x4, 0x0, 0x7ff, 0x0, 0x8, 0x40, 0x6, 0x400, 0x4, 0xa, 0x0, 0x7fff, 0x6, 0xad, 0x9, 0x7, 0x2, 0x6, 0x5, 0x8, 0x9, 0x400, 0x0, 0x17c0, 0x1, 0xf, 0xba, 0xfff, 0x2, 0x8, 0x7, 0xa, 0x1, 0x5, 0x400, 0x6, 0x5, 0x0, 0x8001, 0x5, 0xfffffff9, 0x6, 0x6, 0xb2, 0x10001, 0x5c, 0x9, 0x4, 0x2, 0x0, 0x10000, 0xfffffffa, 0x6, 0xffffffff, 0x4, 0x1, 0x7f, 0x80000000, 0x0, 0x1000, 0x93, 0x4, 0xd, 0x14, 0x6e, 0x344, 0x1, 0x1, 0x81, 0xb9d, 0x40000000, 0x7a5, 0x4, 0x2, 0x0, 0x0, 0x6, 0x2, 0x4, 0x2, 0x78e, 0xd, 0x800, 0x8, 0x7, 0x1, 0x5, 0x0, 0x7, 0x5251b280, 0x0, 0xc903, 0x9, 0x6, 0x9, 0x3, 0x8, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1000}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x9, 0xffffff34, 0x1, 0xfffff8f0, 0x3, 0x8, 0x1, 0x9, 0x0, 0x6b, 0x5, 0x9, 0x64a, 0x80, 0x6, 0x70000000, 0x2, 0xc6, 0x7, 0xfff, 0x0, 0x2, 0x3, 0x4, 0x7, 0x8, 0x2, 0x0, 0x5, 0x0, 0x81, 0x0, 0x7fff, 0xfff, 0x0, 0xffffffff, 0x7, 0x2b1, 0xce39, 0x2, 0x9, 0x1, 0xbd4, 0x3, 0x80000000, 0x2, 0x5f6, 0xef6, 0x0, 0x9a, 0x7fff, 0x7, 0x40, 0x81b8, 0xffffff81, 0xffff, 0x4, 0xfffffff9, 0x6, 0xa, 0x1, 0x1, 0x0, 0x200, 0x1, 0x8, 0x0, 0x3, 0xaad8, 0x2, 0xd, 0xfffffff7, 0x0, 0x4, 0x8, 0x4, 0x4, 0x5, 0x3, 0x4, 0x3, 0x0, 0x52, 0x0, 0x6, 0xd, 0xe, 0xfffffff6, 0x8, 0x80, 0x77, 0x6, 0x3, 0xffffffff, 0x7, 0x7, 0x6, 0xfff, 0x3, 0x0, 0xff, 0x6925, 0xd, 0x4, 0x46, 0x401, 0x3ff, 0x9, 0x8000, 0x9, 0x77, 0x7b, 0x1, 0x8, 0x5, 0x5, 0xe, 0x0, 0x3ff, 0x2, 0x400, 0x7a, 0xfffffff1, 0xe, 0xb7e, 0x80000000, 0x6848, 0x33, 0x4, 0x101, 0x1, 0x1000, 0x2, 0x1, 0x0, 0x5, 0x3, 0x6, 0x1, 0x1000, 0xffffffff, 0x3ff, 0x4, 0x1, 0x8, 0x8, 0xfffffffa, 0x80000000, 0x1, 0x8, 0x8, 0x8, 0x7ff, 0x800, 0x2420125f, 0x8, 0x101, 0x8, 0x8, 0x7, 0xe, 0x0, 0xc, 0x3, 0x63, 0x43e, 0x2, 0x80000000, 0x3, 0x2, 0x401, 0x1, 0xaade, 0x1, 0x8, 0x8a2, 0x6, 0x3ff, 0xfffffffc, 0x3, 0x9ade, 0xb38, 0xc74a, 0xb2a, 0xfff, 0x8, 0x4a, 0xfffffff7, 0x8, 0x4, 0xaec8, 0xed, 0x6a, 0x2, 0xffff7ae8, 0x5, 0x1, 0xfffffff7, 0x3, 0x9, 0x9, 0x2, 0x9, 0x0, 0xd7, 0x401, 0x40, 0x3ff, 0x0, 0x7, 0x4, 0x2, 0x0, 0xfffffffe, 0xf, 0x8, 0x896, 0x65a0, 0x23ab, 0x4, 0x100, 0xfffffffb, 0x1000, 0x5, 0x1, 0x7, 0x6, 0x5, 0x6, 0x6, 0x8000, 0x101, 0x1, 0x9, 0x6, 0x8, 0x1, 0x5, 0x43, 0x4, 0xffffffff, 0x5, 0xd, 0xfffffffd, 0x101, 0x1, 0x401, 0x401, 0x200, 0x3, 0x3, 0x0, 0x6, 0x8, 0x10001]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x0, 0x5, 0x8, 0x3, 0xb554, 0x21, 0x4, 0xc, 0x2, 0x9, 0x7ff, 0x7, 0xbb0, 0xffffffca, 0xc, 0x400, 0xfcec, 0x3, 0x1, 0x6, 0x8, 0xfa1b, 0x7, 0x6, 0x3, 0x1, 0x1, 0xed0, 0x6, 0x2, 0x9, 0x3, 0x2, 0x4, 0xc, 0x400, 0x22, 0x81, 0x8001, 0x10001, 0x8, 0x9, 0x7f, 0x5, 0x6ce3, 0x6, 0x4, 0xffffff7f, 0x8, 0xf, 0x0, 0x5, 0x101, 0x7, 0xef, 0x1, 0x4, 0x2e, 0x2, 0x8a388f99, 0x2, 0xc, 0x2000000, 0x6, 0x7, 0x2, 0x0, 0x5, 0xfffffffb, 0x3, 0x0, 0x4, 0x7ff, 0x555, 0x0, 0x92, 0x2, 0x8000, 0x7f, 0x40, 0x7, 0xe, 0x7, 0x2a, 0x6, 0xe, 0x9, 0x1, 0x5, 0xfffffff7, 0x0, 0xc, 0x0, 0xb, 0xff, 0xbde, 0x9c0d, 0x48, 0xffff11b2, 0x8, 0x7, 0xd62, 0x2, 0x58de, 0x7, 0x0, 0x63, 0x0, 0x2, 0x9f7b, 0x1ff, 0x6, 0x604, 0x4, 0x9, 0x9, 0x1f, 0x5ac, 0x3ff, 0xf, 0x2, 0xffffffff, 0x5, 0x9, 0x1, 0x7, 0x4, 0x19, 0x100, 0x6, 0x39, 0x9, 0x3ff, 0x4, 0x10000, 0x78a7919e, 0x8000, 0xbaab, 0x3, 0xfff, 0x0, 0x7, 0x6, 0x4f, 0x6290, 0x7, 0x4d9, 0x5, 0x7, 0x6, 0x0, 0x9, 0xc44b, 0x10001, 0x1, 0x4, 0x5, 0xb, 0xfffffffb, 0x1, 0x8, 0x4, 0x80000001, 0x1, 0x3, 0xdad00000, 0x4, 0x7, 0x1, 0x2, 0x7, 0x7, 0x7f, 0x7f, 0xff, 0xb470, 0x2, 0x7fffffff, 0x9, 0x5, 0x1, 0x3c39d898, 0x8, 0x3, 0x6, 0x6, 0xd, 0x9, 0x1, 0xa, 0x80, 0x2, 0x511, 0xfffffffc, 0x6399, 0x4, 0x3, 0xfffffffb, 0x8, 0x2, 0x10, 0x1e, 0x188, 0x1, 0x100, 0x4, 0x6, 0x6, 0x9, 0x10000, 0x1, 0xc65c, 0x1, 0x2, 0x2, 0x20f, 0x101, 0xca61, 0x0, 0x4, 0x79, 0x6, 0xad2, 0xffff, 0xe, 0xfffff7d1, 0x7, 0x3a000000, 0x3, 0x3, 0x6, 0x6, 0x3, 0x8, 0x1, 0xffff, 0x4, 0x2, 0x2, 0x6, 0x80000001, 0xc, 0x0, 0xfffffffb, 0x5, 0x8, 0x9cd, 0xb17, 0x1, 0x5, 0x7, 0xffffffff, 0x3ff, 0xffffb9a3, 0x84]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7fffffff}], [@TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x80, 0x9, 0x16, 0x425, 0x5b7, 0x157, 0x4076, 0x2, 0x3, 0xfffffffe, 0x9, 0x4, 0x9, 0x7ff, 0x800, 0x9, 0x6, 0xe43, 0x4f, 0x7, 0x3, 0x3, 0x0, 0x80000001, 0x1000, 0xe34, 0x8, 0x8, 0x8, 0xfffff688, 0x6, 0x0, 0x6, 0x16, 0xb43d, 0x2, 0x7, 0x9, 0x0, 0x9, 0x1000, 0x9, 0x65, 0x7, 0x5, 0x0, 0x4, 0x0, 0xe3b, 0x3, 0xfffffff5, 0xfffffff9, 0x1, 0x7, 0x2, 0x7, 0x10001, 0x3, 0x5ff3, 0x5, 0x101, 0xe4b, 0x80000000, 0x9, 0x0, 0x4, 0x1, 0x7, 0xfff, 0x28f751af, 0x5, 0x5, 0x6, 0x2, 0x2, 0xfffffffc, 0xfff, 0x9, 0x5, 0xc5e7, 0x1, 0x8001, 0x8, 0x8, 0x0, 0x8001, 0x8f0, 0x4, 0x8c, 0x200, 0x5, 0x7, 0x4, 0x101, 0xfffffeff, 0xfffffffc, 0x7, 0x6, 0x8001, 0xf8f, 0x1, 0x6, 0x3, 0x0, 0x1, 0x8000, 0x0, 0x8, 0x9b90, 0xe, 0x3, 0x2, 0x2, 0xfffffff3, 0x8, 0x86, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0x8001, 0x6, 0x0, 0x401, 0xffff, 0x9, 0x3ff, 0x0, 0x7ff, 0xc, 0x1, 0x7, 0x9, 0x188, 0x2, 0x2, 0x3, 0x40, 0x27e1, 0x5d, 0x6, 0xfffff800, 0x1ff, 0x7, 0xfffffffb, 0x1, 0x9, 0x10000, 0x4, 0x4, 0x8, 0x4, 0x6, 0x40, 0x8001, 0x3, 0x2, 0x7, 0x10, 0xfffffff8, 0x7fff, 0x4a27000, 0x4b, 0x4, 0x5, 0x9, 0x6, 0x5, 0x7, 0x8, 0x7fffffff, 0x3, 0x7f, 0x5, 0x5021, 0x9, 0x8, 0x89, 0x10000, 0x7fff, 0x4, 0xa37, 0x4, 0x9, 0x7, 0x1, 0xa3aa, 0x7, 0x8, 0x1, 0x770, 0x44a, 0x8, 0xfffffff8, 0xfffffff7, 0x40, 0xcb, 0x53b2, 0x7fff, 0x1, 0x200, 0x2, 0x0, 0x5, 0x2, 0x2, 0x40, 0x4, 0x9, 0x5, 0x86, 0x6, 0x1000, 0x800, 0x401, 0x9, 0x200, 0x80000000, 0x4, 0xb3, 0x3c, 0x2, 0x52, 0x74e9, 0x1b, 0x9, 0x1, 0x0, 0x8731, 0x5, 0x2, 0xfffffffe, 0x0, 0xe, 0x800, 0xa, 0x47c, 0x3ff, 0xce, 0xac, 0x5d, 0x6, 0x5, 0x800, 0x0, 0x0, 0x9, 0x2, 0xa, 0x5, 0x0, 0x3, 0x3]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffff8, 0x4, 0x1, 0x5, 0x800, {0x9, 0x1, 0x2, 0x8, 0x81, 0x8}, {0x4, 0x1, 0x6, 0x5, 0x9, 0x6}, 0x9, 0x74a, 0x6}}], []]}, {0x15, 0x6, "7791fc2032c01982fb39c5c2ad3bd04214"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, {0x13b8, 0x1, [@m_skbedit={0x50, 0x5, 0x0, 0x0, {{0xc}, {0x4}, {0x22, 0x6, "70b34dff683e042b51de364a45cd3f064fe3b589d78cc144486b29083095"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ct={0x1034, 0xf, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_ife={0x90, 0x19, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0x2}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0x35, 0x6, "f25db01ee958cd83ee11b1f6a393b080a8f4e459eb527308e60cfb3ce531cae0a5c9a9cea89ad3f4206f473ce2ea647351"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_gact={0x130, 0x1a, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x2101, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1e55, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x5, 0x8, 0x4, 0x46}}]}, {0xd4, 0x6, "55679c80501860fd2d056a2727ead670da0a2f8eba35857ea2ecc6fba848ed35b29af13232917bd4542bdac5163c67892775e3229ce3fd5a930763a9dd92ff4a3f9126bb7cb9c8addd577cdd61dc35de24af62b4ef47354b9e8702b753b1f9bb2ed5687fe063ed768b19bd50a429133673a726c0082e891fa31974e14816d8bf03d5619d7cc72d72e8bd23836791518b31e1369758a4092148c5ba430349b46d8114de21b32a2fa36de80170c340e11ad402793555b0e9bdc9655221218151ef0ec07c5ffd8bd2d960139fb20e58d714"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}, @m_bpf={0xa0, 0x1d, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0xd, 0xc, 0x0, 0x4, 0x5}}]}, {0x5e, 0x6, "625ee2d759e3c0ccaa217383a2e994df0d1efca1ac99f10200730ad2ba3c95186a0b207ea44721ef06d5365f9582af1d702fcf0c8df34003887320648bdbdc97d465fd9901d53baa09edb71306112eb31ac48ddd9558356b5dd0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0xd0, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x3, 0x7, 0x8, 0x6}, 0x66}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2400, 0x2, 0xffffffffffffffff, 0xa, 0x2}, 0x4f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x3d94, 0x1, 0x41c, 0x7}, 0x59}}]}, {0x50, 0x6, "c16238088c5606e36fa226c323468fbf17c87b6cbae85a479886e803aef38dca73ead1d2da71a6b07742dcb32ca98891383811426ce95be75bb41d632deac571b39e5edde25add83d88b8061"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, {0xb30, 0x1, [@m_skbmod={0xdc, 0x18, 0x0, 0x0, {{0xb}, {0x10, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, {0xa2, 0x6, "43262f1c2cf37a5cbfdd3243a21ceca7b8c12e6057b5013c3c51079aac8a6373aa86ecd8c04bfd3c58453f176036d831925fb80a764e7fa29cf7bfa25434eb6d9ff623d66a4fea7cffc6445e59c450d378aa81361fd045ee55469ea1b435bcbab2e0514147d09cbd184bf8ad7eb7886b1fbbd82f4d13c7da1000779212aa6eeeec9b012ffb04ed6a0ebb5cf969730e14f848bef58eada51a14fb1ca5d499"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0x60, 0x10, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x29, 0x6, "1673a861feb60ad9d83ee19544313cbbe3cf3eda16946f8e36a3d37d8495a9299440226ddd"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_ct={0x3c, 0x10, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast2}]}, {0xc, 0x6, "054ca5ec58895975"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x890, 0x7, 0x0, 0x0, {{0xb}, {0x840, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0xa, 0x20c9, 0x0, 0xf, 0xfe00000, 0x101, 0x3, 0x8, 0x3, 0xff, 0x5, 0xffffde31, 0x1, 0x2, 0x5, 0x0, 0x2, 0x8, 0x7, 0xa, 0x40, 0xf, 0x0, 0xffffc6c1, 0x9d34231d, 0x8, 0x5, 0x40, 0x4, 0x1, 0x100, 0xd1, 0x80000001, 0x19, 0xb, 0x6, 0xffffff91, 0x5, 0x4, 0x2, 0x2, 0x1, 0x9, 0x9, 0xfffffff8, 0x1, 0x2, 0x400, 0x6, 0x5, 0x7, 0x8ca, 0x7fff, 0xf5b3, 0x1a, 0x100, 0xfd32, 0xe, 0x9, 0xfffffff7, 0x6, 0xfe000000, 0x9, 0x7, 0xeb8, 0xffff8001, 0x0, 0x1, 0x5, 0xff, 0xd, 0x7ff, 0x3, 0x800, 0x10001, 0x7, 0x8, 0xa9fe, 0x3, 0xd, 0x3, 0x1, 0x9, 0x5, 0x74, 0x3, 0x4530, 0x5, 0x8001, 0x8, 0x3, 0x27f, 0x4, 0x1, 0x3, 0x9, 0x1a000, 0x6, 0x3, 0x8, 0x1, 0x6, 0x2, 0x954, 0xfffffffd, 0x0, 0x100, 0x9, 0x67b2, 0x9, 0x200, 0xffff, 0x7fffffff, 0x2, 0x1, 0x5, 0x9, 0x3, 0x101, 0x9, 0xd33, 0x100, 0x4, 0x9, 0x0, 0x0, 0x0, 0x6, 0x3, 0x3, 0x0, 0x3, 0x2b0000, 0x401, 0x1, 0x2a2, 0x3d7b, 0x6, 0x1, 0xfffffffa, 0x0, 0x8001, 0xfffffffc, 0x40, 0x5, 0x80000000, 0x80000000, 0x8, 0x2, 0x37a4, 0x80000001, 0x2ed, 0x1000000, 0xfff, 0x1d, 0x9, 0x4, 0x5, 0x7ff, 0x3ff, 0x0, 0x7, 0xd, 0x7, 0x2ac, 0x5, 0x5, 0xd66, 0x7, 0x5, 0x4, 0x9, 0xd9, 0x5, 0xd, 0x8, 0xb150, 0x14, 0x6, 0xfffffffa, 0x5, 0xfffffffc, 0x6, 0x2, 0xa4, 0x6, 0xfde, 0x3, 0x0, 0xec, 0x6f30a31f, 0x6, 0x1, 0x0, 0x3, 0xff, 0x0, 0x10001, 0x5, 0xd, 0x8001, 0x4, 0x7, 0x8000, 0x7ff, 0x9, 0x464, 0x3, 0x2, 0xd, 0x2, 0x1, 0x80, 0x7f, 0x3ff, 0xfffffec2, 0x140, 0x6, 0x200, 0x10000, 0x6, 0xc, 0xb32, 0xf, 0x77, 0x0, 0xa6e1, 0x6, 0x5, 0xcb, 0x5, 0x3ff, 0x1ff, 0x5, 0xfff, 0x20913344, 0x1, 0xfffffffc, 0x7ff, 0x3d, 0x3, 0xbb0, 0x9, 0xfffffff9, 0x0, 0x2, 0x7fff8, 0x9, 0x3d0, 0x5, 0xc1, 0xffff, 0x9aa, 0x9, 0x8e]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x100}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x40000000000000}], [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}], [], [@TCA_POLICE_RESULT={0x8, 0x5, 0x100}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xd, 0x2, 0x0, 0x5, 0x8, 0x3, 0x3, 0xfffffffd, 0x5, 0x0, 0x100, 0x6, 0x0, 0xffff, 0x7, 0xc, 0x1, 0x7, 0x7e215fe5, 0x8, 0x3, 0x2b, 0x7, 0x9, 0x7, 0x8, 0x3, 0x9, 0x8, 0x5, 0x262, 0x6, 0x1, 0xe, 0x800, 0x6, 0xffffffff, 0x80, 0x8, 0x80, 0x18000, 0x41, 0x1aad, 0x2, 0x3, 0x80000000, 0x3, 0x9, 0x6, 0x6, 0x9, 0xad, 0x5, 0x8, 0x200, 0x1, 0xb01f, 0x0, 0x6, 0x8, 0x8, 0x1, 0x2, 0x2e8b, 0x2, 0x9, 0x1000, 0xff, 0xfff, 0x8, 0x1, 0x1000000, 0x7fff, 0x48, 0x7e06d716, 0x2, 0x1536, 0xed, 0x6, 0x7, 0xffff, 0xffffff80, 0x46, 0xfffff800, 0xfffffffd, 0x80000000, 0x7f, 0xeb, 0x2, 0x1, 0x4, 0xbe, 0x3, 0x6, 0x3, 0x0, 0x3, 0x5, 0xffff8001, 0x8001, 0xf15, 0x3, 0x7, 0x8, 0x7, 0x3, 0x2, 0x6, 0xe5d, 0x0, 0x6, 0x0, 0x0, 0x3, 0xfffffff5, 0x4, 0x7, 0x9f00, 0x0, 0x10000, 0x80, 0xf, 0x8, 0x7ff, 0x3, 0x3, 0x5, 0x90, 0x358, 0x6, 0x9, 0xd835, 0x1, 0xd, 0x80000001, 0x4, 0x6, 0x3, 0x9, 0x4, 0x3, 0x8, 0x200, 0x6, 0xfff, 0xffffffff, 0x4, 0x100, 0x5, 0x6, 0x4256, 0xfffffffc, 0x7b87, 0x9, 0x3, 0xff, 0x8000, 0x3b, 0x2, 0x0, 0x8, 0x101, 0xbad, 0x4601, 0x2, 0x9, 0x8, 0x10, 0x972, 0x9, 0x1, 0xe78, 0x200, 0x5, 0xffffffff, 0x2, 0xffff, 0x800, 0x8, 0xfffffffc, 0xfffffffb, 0xf0e, 0x91, 0x2, 0x2778, 0x3, 0x4, 0x8, 0xe2aa, 0x1, 0xd9f0, 0x40, 0x6, 0x8ca, 0x2b0f, 0x7f, 0x6, 0x6, 0x9, 0x7, 0x7ff, 0x0, 0x7, 0xc, 0x5, 0x0, 0x5, 0xe, 0xef9, 0x2, 0x5, 0xe, 0x4, 0x0, 0x0, 0xb, 0x0, 0x4, 0x1, 0x2, 0x4aa, 0x76, 0x9f, 0x74f, 0x0, 0x2, 0x5, 0x0, 0xff, 0x1be31b0c, 0x80000000, 0xa, 0x101, 0x5, 0x5, 0xe, 0xfffffff9, 0x5, 0x5, 0x9, 0x8000, 0x2, 0xf0000000, 0x1, 0x4, 0x5, 0xb, 0x10, 0x4, 0xffffffff, 0x2, 0x3d6, 0x2, 0x800, 0x7, 0x7f]}]]}, {0x25, 0x6, "c588f08ea0cea7a3074fc39b53065d49a94d88747b934f5c23e062873dfb085216"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_ctinfo={0x48, 0x16, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x1c}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xd}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x80000000}]}, {0x4}, {0xc, 0x7, {0x1, 0x82f067b16439b62a}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_gact={0xdc, 0x3, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x81, 0x10000000, 0x1, 0x7}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9d5d, 0x7, 0x3, 0x6, 0xd5}}]}, {0x80, 0x6, "0b30fc362e45ce3ef3e84883ef1e7bc08c7fad3213c100fe8117b97ecce5304baf4f8ff428dcc26af5620a5514c7618aa1af767ddd7a3bea1b16767682d62f031d793c420dff2547d05f35678595c814ba514e60cbb6f23f2185eda8c1af2e9e709e5ceaece67349c11dffc2b8d3f00f4ee36a207da8a299f529f05c"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x4}}}}]}]}, 0x4c6c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34)
r2 = getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c8b00000706010400000000010000004f18000000000c0000440500"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x8800)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0x8}, 0x50)
openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000003a00030724bd8c4fed64df2504000000"], 0x14}}, 0x4008800)

13m35.210665271s ago: executing program 41 (id=3870):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x1)
socket(0x18, 0x0, 0x1)
mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0)
socket(0x2b, 0xa, 0x1)
lseek(0xffffffffffffffff, 0x101, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (fail_nth: 1)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = fsopen(0x0, 0x1)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
open(0x0, 0x108843, 0x190)
setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000100)={0xff, 0x8, 0x8, 0x5, 0xfd, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x2, 0x0, 0x93}, 0xe)
sendto$inet6(r5, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
shutdown(r5, 0x1)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000600)={{{@in=@remote, @in6=@mcast2}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000280)=0xe4)
close_range(r4, 0xffffffffffffffff, 0x0)

13m34.295559911s ago: executing program 42 (id=3873):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x3f}]}}}]}, 0x40}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000004300)=""/102400, 0x19000)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0})
write(r4, &(0x7f0000000000)="fa", 0xfffffdef)
accept4(r2, 0x0, 0x0, 0x800)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'})

13m32.113926871s ago: executing program 43 (id=3877):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000044b00000000edff674370f2ae368c6c003ddf27e64540ce16aa3c938751"], 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff0300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002a00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$CEC_DQEVENT(r2, 0xc0506107, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, &(0x7f0000000540)={0x1f, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

13m24.386080947s ago: executing program 44 (id=3886):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x85, 0x0, &(0x7f0000005e80))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x15, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0x14}, @jmp={0x5, 0x0, 0x9}], &(0x7f0000000000)='GPL\x00'}, 0x90)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={<r1=>0x0, 0x0, 0x8, 0x800}, &(0x7f0000000080)=0x10)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xee5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x1}, 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001480)={&(0x7f0000000180)="b222637823913805c22c2b27ec7d3785e4704cfc77113d69e57a760424eacb85ca2b58b9c78b38474187c70539bf1925c8d2c76250012c5d2b197f5993476ee8a74f8e53a06e3c6b083418344b2bee84e84606151c12e2d37807ca5189a6f03946425a67f34d097e7d98660f5d0785a4699fffbe0edffcfdd8a1b5aa0137b9fdeb9f8bd78ef02820236f6f8b2ae78d95247a81916dd4d3d9b78b5c95e004dc6616ea4ce7253467e12c71a8d5", &(0x7f0000000240)=""/157, &(0x7f00000003c0)="938245efdc37f3727873e2231d59c301c63d95420e4559dabb49", &(0x7f0000000400)="b8403ca39bcb469f062fcd405aab09a18311e6684b21e699699ed4cb283cafe97ba6c7599d0e9ac8ec54ec9ceb2c1fc8f1fcf619159191dd7eb347192e395f60617b348ed33f7d37672580b852e77574dddd31f1daf53b88ab261403568f4048bfa9008625fab5513405fb292f6050b34e93f56c525eb512e1024e258dce5a60dbdf6382bfa4a8378305036aa82ee446c357900fba7e5944fcd06a560478c82f4b74d50b34fb455e4de25495ebe3d48eb55493794d2580d294c4e3418817c85a12bb07fe4d4a142e304622000f0281fe151c33ffd98fb9a7c212b42e0999f67405a0ec88ff2d4f751a1d15d009d073da56bc40259ce1b2ceed23bbbc1fd8cc0dddc1a6cab682bd9ba9811da00f2cb899486d98b71327b5d9faf4a73cb59931b0de76e928e7e9db68411b48fc8d5c45366095b47d48c7803e44b16a09d21182fe1898b289d569d808b68957b7c47e43f33a15733dc779fbd01d1471900fd92deade086a33e77c021b3baf9cff8040150cfa9e3249907aca9c4d72e3792f58c02a1df2f549b008c2cff0f0fa06f818350712fe42dca551dcaefab0312a5726656a2a34a48d86cbbcc32976476f7aef444ef977cd8fd3bf348da0d5a959ceaafcf957881cf5ca4f51defdad443dd4cf86b101614a5b9ebc877f36645f564b3af106e65b22491beb728d20cadd06b7af8a30bb47fb537b4c37cdf2b283242d11561843f5bcff337cddb0a78fd966bd5691caf87d4d7d58a7abddbe18f1a9caf6ba4dbec3ef2a25e7fa8f9186503d1cba7598c6c8c2d04d1b50bd95b3c41de6bdf9c06c7b2937c238a3b832b62addebf52fdcc21a5ef01e18771d629145a03e13fbfb3377b80e090d1801ffea55cc3b187bb1fbc471b655cd166cba0f7bc43b302990b3c1f8cf582a42b6f1390ecea54f20b127130b0bdb42e540833709283f58789682478d161b238844d37b698312cc9b42485b257e83c25368e93e7a9dfebb3703f7f9fdf289881068939bfed9ba1f5d4b8d4cf56f547f6233e04cd2d20b2f30629064e40a0046f40b853acf08843081b45d766bdcc8752f6e5d8a20e17e80dfd6a591532f4fc1ab84af46486f0702a00b6cd66e0a24b44e71758bd0617e86b1a486007b9ac86dd5dc24e01800ab4cf4cf6af1c3c8b9df8ebda145b45ad6132f7b39b250c1fe9d906bdaaa83cdee5a974f7dada0c518750791dbee734ab6b8030c9d68e41573dbb3219f7f3154cdf6ad4469cc2fcb36bee713f5a7260b656dc95927e4ed58a031365788020b082080668a26683f4196d86987685b43e1df284e3949da9ce174b34a9bcadaeecda7824bb3abf685548f16f3a559450b785d40b6794bb38f0cfb85dd8f18853dfadd14c832a22a438d6c54255edb76152d317a4a7b3e8396a577164f5223db52cbea41364360d340895bdcf5eebbb664262eea9aabe80204f1a8843859e5a5f99ad1c3cfd84d722026ef844f4b5959a0171a04fcf79489cc395976934c1fbac9a5300437b205d15c19564fed0b408336643b9c52db2b8d3adfb32b6caf877f4b6c0a6143eac23406cc0e356b831e5ecfb1de4472da453aacd442f626af20b45530a14883fb8aebe53cbc1eb971399029fb4b87446b0858f654b2304e799946e543c5db058f21eab43b74f0eecb0b4c20f2c61a41d2054f9f01793a919c3d92382fd60e041054a8cabbfaecd1ac2d107b2de1a37e7e2a64048e62a718f390ae114690d8f1b13ebc69e5da11f2979f9349782a07a47bf49af99bb8af0a1698ea44bb7d522c728f4a8e71e85c57d3892c04922362d7b98aede95cade321c869243a77f3ca2de3070e8087b3fced22976043f85508c7c7d24a64aaaf00ede2e758325b37784f894389f921b9bba97498f18cd4d46166c717eadb5c604b5a7245108bbb94bc51b052966a0354e39aca39a761caede937e87c1664568ebaba1bca66ced7b37e50deb1b444d08991689b3bf115d3b752ec0afc0585aea991fadd525291d4484057af5ccb20b03441edefbf4ea1bb56f4563f4272abb3d9055bc9768e190e4c5d6abf80a615b77781cb6d8ab0ddefe7d91ba17838bd3d97ad0d702c5e6449248ee7e74a59303a4c4aba0e9bb7b977b45a3119952c150a1610697a9aab9c6af99192cae433db8f7421367271dccb24e3cb8c764c2c2b032432f822ae78faab156e1683af0f427873a0897a0d749d98b7a9437896971b7c0d918b05a8d45a210c1e3b69f115d8d1fed45fc858fd8664d581f38d0cd92f7037080ecc4febbc76160ba4c79b5873373955391629aa37baa52f683ab2568812878d3c80703342328ebcc2845b9d3c53dbdd0614746a7ee8dbb076e4687ded9e461cdd8755049646d7ee05f2db581fdcfd979d3b6088b6cc719b1b833c97abd4dca1f0756f0abbab1c99df1973493ebae844887a284540f852be38aff92c7b57ae9d30ec21e0e17e376bd5a58c5e75795c501f4601555ab0d068f9ef3f41aee26b9ac3545580fa7e53bae953034a6889fa05dc75c6ba9d62843b63981a833554ca05be7405aa0ba233e7dbe01e17e725eff5df253229a5db4e93ec40e7b49da4208c941a281fbb2e70a85a8235007cf58eff292b98f14c8529b19a2f03eab1908009eaf7b29db803b702f382d79b4b17cd8fdc98f9547ddfd9eec42eb484b5201b5a1ea33b64212a84d3126f4833de3c0f74b0d4e0b32c983b558494cfc047ec54c8c0ed6ca7c5b5602b3aba6e619ea659ef907678e2d96ba73eb61cdcb7b580275809e34cec444b88c24b6e1aa79affb7766b2a1dd0d5a89553825c2fd8a0cc74a25f52e0f61df477a39de9633efd04e816396bde37b398d12375d1ab120c1f0b572e7199922aa3f0281756bb5ff1e324598a82a3f63c5073aaf92cc5affd418f56ce5204e0c8e9bfeefae43f2f3bacd696734924e399f27b4e895419dc557fd3fc660c849772c969367a369a17efeaefdb9a2fd2e1977088a2c2f0ae4a0a9206f87ac3d6355b4616bb7c7e62de7a26b2b77b5cd37ec19bce437840af039e6f4ac6b28a10f3ff924df071743ef7fd28c1a5d42c18d9fcd9d3c84ba80663afebce9b7a58a83bd438b676be75aaa79146c0b39119eaf20c9b3753b847939ed2d6af68bce0613559ef764c05517450efeed6616f328e83a7e97af0fcfec5a3b9228df4f7db5e5f02646557d8ddf96c2b7baa7ab6d4bd5fdef9a4ed87066751dc4321c69d8f6f747e8a86d615512acbef0ab6a8938efa4f5e9c3e0cab54ee6633cd8415cffa8d5ea259ea53c36d750469e58517d0f69844d91ba8f89df410ba86e94a068395290662d05d51f416b28e55b1d0f2436762df4743326326ba7749fa5b85b230efb0cd60ea2a72f6c53a16d40497e26d417d7397e0817a5496029733452c702b8106de20f483aa23965796288d6529ece4b3b6ce4e263a305928dc9b1db455c0fd4cd4076d822e4b81a983593debf7c61349f5c1fdea50a5c2605b37124fabab43b6a3f5c39e2bd690e2dfb6a0668b00b534df1532dd3b7bbad529710a49f404ab97b0ae2bbd8d604531a3dfc9973dc8d78f8af83db9e9eba79e415980436a68227b83153e24dea8f66705f73633b23d167148e026c93cf2f209df4b1663c08be07b3e9be75e8a7ac6fb8966eb44f040ecca630737ad6db0f34515d0de88e56ab1ecb53951be45e101320ebf6fff837261cddc9e33f3d323a029beae6009fe64dcf98c82386c4ab9e119692d1fb41034d3e6ec1ed494249ebb753757635b65357121465d57ce7c5e93c53d440adb9fba4f659fd19c430dfe3c72ac16fc8acb36707b26803884a071cb7117c68bf94f8592dfe3448f0f441ff9cbb3155f3665ba9c48a53bd8b966cf08a1db82eac9cb077ec2783ec406166b8593814e0066181511a8347263234eafb9b1d35232af1e211c84938982f4083667a8e18eae641195711363c3afb3785f964f2f871933d4835315881f4c92dc253b943adca79ef0939e4bca385672ce8e6742f8ce2278d2f31a63222815d85b883f69b5acf4e03bcc9e4ccdc76c8e854aa96071917b593fb92710cbaedd3f464b48520e52e1359d12e2d54b67250909244d6b18c865099c8c5e2c5829c044189fa7484d37b135830ac23188450828589114bfdf1ddd7b2c5ccdb6fb62054f6c706f4e4c278e105e34e356c76f2fed3823b0cbc85ee6eecd32984fc36ab39bab5ae9156c724c3d293e355f3fce6e01050959109fb8ac42a3a6380fdf86bd530dfcd1a0d520ae5bf44d0e5de26dc26e2aadc31cbc0eb42a52fcc9c77782989d53a8d7954df107886f1b6df08c000bb03f8adfea021f79a52a24df66d461adff593abff28741d6c5de183af60b4bbd77696d081b4ada42339ea5c77e61fd1591ed896491b30318177c7e8aca124de5a339a0bae3497e4331a8135b28440a80567a2de8ebb9f1d5e5c26235aa260ad3bce73db34e4a44869372b3832ab6723062fcfb2d2cb72f2b25957c089dc740874abfde9b31af397ba27570d52539c0f275d84cd62a90bda6c2e5dd4983ef4c204b306da37d0ebc271283bf01c0f4fa630210d84d6f7a2967e553a92c24d1fbd6fd548c7452428b275c72fc25217d146292a0c17e91680313127715c87f6c365439b2a1c20fe4dffb4d1544b2ad2f7eb1cf6c66207033b8997f60c378f048b007390f1f19ef5cd8ea560d02fa50351c104fd0395593006155df60c66d85a2ad1a14ce62db9a74710ba2cd5ddbb335cf52d3e3ef00896a4b415b49af4efbf0c4206440a73a37e3e6b2363899031d539442eedaa0499b71f7e355c71a27bfecf3bef9b5107c1872d325aa691577bdc9729cb0e123d2ed2af1e3762611ff4d620ce4fff0633e26fbd9a7fe18afe02ac6dd18e3d2ff4750dda319b76e14bca2eca54f78c082ad48bb0b17e57c0cee1431cd8c679778bfb2cfeff2c42465954d281a046d275d446637df330372b2d6854d9240ee9cfcd5c289f4c1ab67342eae67863cbb24b4815eaf467e3f6f44ccc4e17285c0aa21f00f3673ef5a82f99a791d5e6be9f31d32e8ce19a766b2f8123c5afb4bb294f8348662a815149542613a1fa31e1659294af54bada4f98599d64c0b5f002811a002b1bb22cd00efdbbbbd20f73e7c81a60bbc971e7593581277c67e8962740c183c8828ea6e2252a5898f1e5e458278b98b4bbbeb9d0d7aa780fc209af317337503045a499903c3a40b820986ea061de93e1cc86d24811cee90604a789ed28854f4f22913f0247da379f278ac8051848de290cf20d5c2cbc93d00ac6dfccaa5a96d673a90f1d947b1b7141f048973a44ac709f755826578a88f4bbf597c0069558afb956305c8807a4f9dc5d5dc00cd372d84fb0596361b3c59676e59fc1508fbde121b5508641db8c8bc1001bdb62d4d9ffecb5e86721983b98f7481617cc2418cac1236fffa10df1de43730f9a03f084b77118a048710ba64df4f8136bed8d8bbb2f85fbf1b0f4e1843836098b2cad4afe790b770e244a189ea3bd1c7aae3a1173f75319ed657d002bf7786c271932608996013407c244df6beab2eae15bbce4c8bad10cbfdd4e72c23a93aaec27a0f0f777566eb66619e5741525b5acdf51d72a86809c86e316bea80256bdcdf79c38cd8d8dc4a28bd80c0cd86ba9b5af2ce285487b3769cdcf28929f46a66b2db22c2e03b5f3a5beebf6f8087bcb46b967638f1fbdacca97677f6f258a4586d64a87b86d53d621e7860a4167addb9afff14880a2815bd044bd7de450dbed1bd97b543991e333a84710ccdf9899d69542fed00", 0x9, r2, 0x4}, 0x38)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={r1, 0x8001}, &(0x7f0000000140)=0x8)

13m6.108322437s ago: executing program 45 (id=3961):
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0)
read$msr(r0, &(0x7f0000019540)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = dup(r1)
write$UHID_INPUT(r2, &(0x7f00000029c0)={0x9, {"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", 0x1000}}, 0x1006)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe160, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
writev(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = getegid()
fchown(r0, 0x0, r4)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
syz_open_dev$usbfs(&(0x7f0000000480), 0xd, 0x141341)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r5=>0x0})
r6 = socket(0x10, 0x80002, 0x0)
connect$inet6(r6, 0x0, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0b0000000500000000"], 0x48)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0xd, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x10)
write$binfmt_aout(r7, &(0x7f0000000340)=ANY=[], 0xff2e)

12m47.794073416s ago: executing program 46 (id=4072):
socket$nl_route(0x10, 0x3, 0x0)
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000008f000000000000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0920000000000055090100000000649500000000000000bf91000000000000b702000003000000850000002a000000b70000000000001895"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_khugepaged_scan_pmd\x00', r6}, 0x18)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x3, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0x7000, 0x43100})
r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0xa7c, 0x68ff, 0x5, 0x9, 0x3, 0x0, 0x401], 0xeeee8000, 0x202})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe6, 0x40, 0xff, 0x0, 0x81, 0x80}, {0x5000, 0xf000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x16, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa3, 0x5, 0x5}, {0x1, 0xeeef0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x6, 0x9, 0xf7, 0x97}, {0xeeefa000, 0xdddd0000, 0x0, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x2f, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x0, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x0, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x4, 0x3, 0x8]})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x22, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc9196"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500000000000000000000000000a979b6055b5e50e87400ae359ddd43fdfea65a0000"], 0x50)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)

12m16.579213637s ago: executing program 47 (id=4212):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000040)={0x2b, 0x13, 0x0, 0x2, 0xb, 0xa8, 0x5, 0x2, 0x1}) (fail_nth: 3)

12m13.402888857s ago: executing program 48 (id=4226):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100))
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r5, &(0x7f0000000140)='A', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x100, @remote, 0x1}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000000)={0x9, 0x0, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7, 0x3}, 0xe)
shutdown(r5, 0x1)
recvmmsg(r5, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0)
ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f00000001c0)={0x0, 0x0})
r6 = syz_open_pts(r2, 0x480)
ioctl$TCGETA(r6, 0x5405, &(0x7f0000000200))
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xe3, 0xe, 0x6e, 0x20, 0x1d50, 0x614d, 0xf9bf, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x17, 0x72, 0x1, 0xff, 0x37, 0xa2, 0xd, [], [{{0x9, 0x5, 0x2, 0x4, 0x10, 0x5, 0x53, 0xa4}}]}}]}}]}}, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820000, 0x0)
r9 = getpid()
syz_pidfd_open(r9, 0x0)
sched_getattr(r9, &(0x7f0000000180)={0x38}, 0x38, 0x0)
r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_HYPERV_EVENTFD(r10, 0xc048aec8, &(0x7f00000000c0)={0x2, 0xffffffffffffffff, 0x1})
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7], 0x7c}}, 0x0)

12m11.91602707s ago: executing program 49 (id=4243):
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
pipe(0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x5761, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000340)={0x385d, 0x1, "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"})
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
r2 = memfd_secret(0x0)
r3 = fsopen(&(0x7f0000000140)='f2fs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x55, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x14, 0xeb, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @generic="12444b588d"]}, @nested={0x4, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'veth0_virt_wifi\x00', 0x1000})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000019140000001100"], 0xd8}}, 0x80)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
r5 = gettid()
tkill(r5, 0x12)
r6 = syz_io_uring_setup(0x6148, &(0x7f0000000340)={0x0, 0x13ea, 0x2, 0x2, 0x3c6}, &(0x7f0000000040), &(0x7f0000000140))
socket$vsock_stream(0x28, 0x1, 0x0)
io_uring_enter(r6, 0x2241, 0x1b86, 0x1, &(0x7f00000001c0), 0x8)
r7 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc601000", 0x16}], 0x1}, 0x0)

8m13.538150428s ago: executing program 50 (id=6010):
socket$kcm(0x10, 0x2, 0x0)
syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0xa065, 0x3180, 0x2, 0x240024e}, &(0x7f0000000080), &(0x7f0000000040))
io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r2 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x5)
accept4(r4, 0x0, 0x0, 0x80800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff})
sendto$unix(r5, 0x0, 0x0, 0x200080d1, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
prlimit64(r2, 0xe, &(0x7f0000000140)={0x1000004, 0x4000000000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)

8m8.400108033s ago: executing program 51 (id=6033):
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0)
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc0045543, &(0x7f0000000100)=0x10)
bpf$MAP_CREATE(0xe4ffffff00000000, 0x0, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
syz_clone3(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}})
sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4040094)
read$FUSE(0xffffffffffffffff, &(0x7f0000001ac0)={0x2020}, 0x2020)
listen(r1, 0xda90)
accept4(r1, 0x0, 0x0, 0x0)

7m22.363558906s ago: executing program 0 (id=6129):
openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
r1 = syz_open_dev$vim2m(0x0, 0x6, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, 0x0)
sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f0000000380)=0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$nl_route(0x10, 0x3, 0x0)
flock(r3, 0x1)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x5, &(0x7f0000000040)={<r5=>0x0, <r6=>0x0})
timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {r5, r6+10000000}}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
sendto$inet6(r4, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
recvmmsg(r4, &(0x7f0000007900), 0x847, 0x10162, 0x0)
ptrace(0x11, r0)

7m7.247086549s ago: executing program 52 (id=6129):
openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
r1 = syz_open_dev$vim2m(0x0, 0x6, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, 0x0)
sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f0000000380)=0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$nl_route(0x10, 0x3, 0x0)
flock(r3, 0x1)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x5, &(0x7f0000000040)={<r5=>0x0, <r6=>0x0})
timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {r5, r6+10000000}}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
sendto$inet6(r4, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c)
recvmmsg(r4, &(0x7f0000007900), 0x847, 0x10162, 0x0)
ptrace(0x11, r0)

6m52.368360511s ago: executing program 53 (id=6186):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a1000"/196], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
ioctl$HIDIOCGRDESCSIZE(r1, 0x4004480d, &(0x7f0000000100))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$netlink(0x10, 0x3, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00@\x00'/28], 0x48)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xfffff6bd}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8)
sendto$inet6(r3, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @remote}, 0x1c)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000600000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r6 = socket(0x1d, 0x2, 0x6)
getsockopt$nfc_llcp(r6, 0x6a, 0x2, 0x0, 0xffffffffffffff33)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="0000000000140000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b609000000000000dbaaf0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff570000000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000004d9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00'}, 0x10)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r8 = dup(r7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r8, 0x0)
ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f00000000c0)={0x4000, 0x80600})

6m35.172129462s ago: executing program 54 (id=6218):
mkdir(&(0x7f0000001c00)='./file1\x00', 0x112)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
lsetxattr$trusted_overlay_nlink(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380)={'L-', 0x86}, 0x16, 0x2)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000680)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05042bbd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="440002804000010024000100242266ed000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650000000000000075fadc7240d25721f41d090941d59238d9f09f6f3ad3bc3a1d943c62f5d1c7b9dd6fcb1888f8a84baafa3d7a4503a5ec737f916620e5cecfd06e85007c3b90b9c7ed4a96"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)
r4 = socket$nl_route(0x10, 0x3, 0x0)
futex(0x0, 0x9, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e"], 0x48)
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000002180)={'veth1_to_team\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x3}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0xffffffffffffff4a)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
socket$netlink(0x10, 0x3, 0xb)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r8, 0x0}, 0x20)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x24041044)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', <r9=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
fchown(0xffffffffffffffff, 0x0, 0xee01)

6m15.881179835s ago: executing program 8 (id=6237):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x1d11, 0x5e)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e)
sendto$inet(r0, &(0x7f00000001c0)="d33dd4edc9ee576551234edcd9c29e0ee1279915798e9582c47ff13db3480d1d12e0c6", 0x23, 0x8011, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4)
sendto$inet(r0, &(0x7f00000004c0), 0x0, 0x805, 0x0, 0x0)

6m15.803921198s ago: executing program 8 (id=6238):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe8c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x1, 0x8, 0x0, 'queue0\x00', 0x2})
r1 = syz_io_uring_setup(0xcc8, &(0x7f0000000300)={0x0, 0x24c1, 0x10, 0x1, 0x310}, &(0x7f00000001c0)=<r2=>0x0, &(0x7f0000000200)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}})
io_uring_enter(r1, 0xdb4, 0xd44a, 0x5, 0x0, 0x0)
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)

6m14.781731652s ago: executing program 8 (id=6239):
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$packet(0x11, 0x2, 0x300)
socket$inet(0x2, 0x2, 0x0)
fanotify_mark(0xffffffffffffffff, 0x1, 0x2b, r0, &(0x7f0000000180)='./file0\x00')
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0xe28340, 0x0)
r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23})
r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003)
ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x1, &(0x7f00000003c0)='t'}], 0x1})
syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0})

6m10.134121733s ago: executing program 8 (id=6243):
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x3032}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000000abc0)=""/102392, 0x18ff8)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$netrom(r3, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)
listen(r3, 0x80)
accept4$netrom(r3, 0x0, 0x0, 0x80000)

6m7.482192429s ago: executing program 8 (id=6247):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000080000000280"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, 0x0, 0x0}, 0x20)

6m7.308121123s ago: executing program 8 (id=6248):
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0xa927, 0x2, 0x1}, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0)

5m50.619916153s ago: executing program 55 (id=6248):
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10)
syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0xa927, 0x2, 0x1}, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8)
bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0)

4m54.95161025s ago: executing program 1 (id=6488):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
socket$nl_generic(0x10, 0x3, 0x10)
connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x80002, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000380)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r2})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x100000a, 0x30, r0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8)
openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f00000005c0))
write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='a'], 0x9)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc})
ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8)

4m53.931025047s ago: executing program 1 (id=6499):
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa180014801400"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
read$eventfd(r2, &(0x7f0000000340), 0x8)
setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000000"], 0x24, 0x0)
mkdir(0x0, 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40)=ANY=[@ANYBLOB="0200000000000000000000000400"], 0x24, 0x0)
rmdir(&(0x7f0000000040)='./bus\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000540)={'c6xdigio\x00', [0x109, 0x80008000, 0x86c, 0xa, 0x0, 0x0, 0x1, 0x12, 0x1000, 0x1, 0x8, 0x5, 0x6, 0x1, 0x1138fce9, 0x6, 0xffffffa7, 0x2000001, 0xfffffffd, 0x65c, 0x3ff, 0x10004, 0x800, 0xe2df, 0x9, 0x6, 0x4, 0x3, 0x7, 0x5, 0x5]})
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x12, r0, 0xfae76000)
socket(0x5, 0x1, 0xf9d5)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)

4m53.713095458s ago: executing program 1 (id=6502):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe8c81)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x1, 0x8, 0x0, 'queue0\x00', 0x2})
r1 = syz_io_uring_setup(0xcc8, 0x0, &(0x7f00000001c0)=<r2=>0x0, &(0x7f0000000200)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}})
io_uring_enter(r1, 0xdb4, 0xd44a, 0x5, 0x0, 0x0)
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)

4m53.712911582s ago: executing program 1 (id=6503):
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000140)='./file1\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x0, 0x1, 0x2000200000a95c, 0x9, 0x1, 0x80000001, 0x48cd, 0xfffffffffffffffc, 0xffffff15})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x181ac1, 0x0)
fchown(r1, 0xee01, 0x0)

4m53.597708267s ago: executing program 1 (id=6504):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000004200000040000000c2000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48)
syz_clone3(&(0x7f0000000380)={0x40000000, 0x0, 0x0, &(0x7f0000000140), {0x13}, 0x0, 0x0, &(0x7f00000002c0)=""/174, &(0x7f00000001c0)}, 0x58)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x1003, r4}, 0x38)

4m53.333002449s ago: executing program 1 (id=6509):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_open_dev$video4linux(&(0x7f00000060c0), 0x7, 0x0)
socket$caif_stream(0x25, 0x1, 0x5)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp6, 0x3}, 0x20)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x5}, 0x0, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05022ed1e1b7095a726e1790a0474a066a45830756055a690000ff"], 0x50)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xa9c}}, 0x0)
sync()

4m53.289851655s ago: executing program 56 (id=6509):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_open_dev$video4linux(&(0x7f00000060c0), 0x7, 0x0)
socket$caif_stream(0x25, 0x1, 0x5)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp6, 0x3}, 0x20)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x5}, 0x0, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05022ed1e1b7095a726e1790a0474a066a45830756055a690000ff"], 0x50)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xa9c}}, 0x0)
sync()

4m10.427738912s ago: executing program 4 (id=6754):
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x103c40, 0x0)
getrlimit(0x1, &(0x7f00000003c0))
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000280), 0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x0, 0x0}, &(0x7f0000003ac0)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000100)='sock_rcvqueue_full\x00', r1, 0x0, 0x6}, 0x18)
migrate_pages(0x0, 0x9, &(0x7f0000000340)=0x3, &(0x7f0000000380)=0x102)

4m1.282832201s ago: executing program 4 (id=6782):
r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}})
io_uring_enter(r0, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0)

4m0.788967832s ago: executing program 4 (id=6786):
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x4c802, 0xad)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x45}, 0x800)
read(r1, 0x0, 0x0)
r2 = syz_open_dev$dri(0x0, 0x1, 0x20200)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000180)={0x0, 0xae8c4d9732989679})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x8c}, 0x1, 0x0, 0x0, 0xc010}, 0x0)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x2, @multicast1}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
ioprio_get$uid(0x3, 0xee01)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0)

3m59.508567209s ago: executing program 4 (id=6790):
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000280)={0x1, 0x79, 0x2})

3m56.377237299s ago: executing program 4 (id=6795):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000340), 0x2, 0x200)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000001d80)={0x0, @in6={{0xa, 0x4e23, 0x20006, @empty, 0x6}}, 0x7f, 0x2, 0x0, 0x5, 0x392, 0x94}, 0x9c)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x18)
shutdown(r2, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000380)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0218000e0c000000000000000000000005001700000000000a00000000000000000000000000000000000000000000000000000000000000f8001a00ff0200000001fc02000000000000000000000000000029001010"], 0x60}}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={<r4=>0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000100)=0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = fsopen(0x0, 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b///\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3V\x9c\x8c\xf8\xf7\xe2\xd5\x8bE\xee5\x00\xaa\xd5\xfc\x1b$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\xec\xac\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xec\x9es\xee\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o\x00\x00\x00\x00\x00\x00\x00\x00_\tN\xfd\xa2\xc2SPu\xe7\xc0+SL\xa1', 0x0)
sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0x24}, 0x1, 0x5502000000000000}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbff, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}, @IFLA_MACSEC_REPLAY_PROTECT={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008000}, 0x800)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e24, 0x800, @empty, 0x9}}, 0x7, 0xfe00, 0x2, 0x3, 0x54, 0x6, 0xf5}, &(0x7f0000000480)=0x9c)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
ioctl$BLKTRACESETUP(r8, 0xc0401273, &(0x7f0000000680)={'\x00', 0x8001, 0x101, 0x5308, 0xfffffffffffffffb, 0x40000, 0xffffffffffffffff})
r9 = dup(r8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r9, 0x0)
cachestat(r9, &(0x7f0000001840)={0x1, 0x2}, &(0x7f0000001880), 0x0)

3m53.791644072s ago: executing program 4 (id=6797):
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x101001, 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8)
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0)
ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
syz_open_dev$dri(0x0, 0x4, 0x14000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xf, &(0x7f00000193c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4048894)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000200)={'filter\x00', 0x0, 0x0, 0x0, [0x3, 0x51, 0x9bc6, 0xffff, 0x2, 0x7fffffff], 0x0, 0x0}, 0x78)
r4 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x40040)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in=@multicast1, 0x4e23, 0x0, 0x4e23, 0x1, 0xa, 0x20, 0x0, 0x3a, r5}, {0x4, 0x80000000, 0x2, 0x4, 0x41f, 0x3, 0x3, 0x40c4}, {0x2, 0x3, 0x5}, 0x9, 0x6e6bbd, 0x3, 0x1, 0x2, 0x2}, {{@in=@multicast2, 0x4d5, 0xff}, 0x2, @in=@rand_addr=0x64010100, 0x3504, 0x0, 0xa44bb7f30d746999, 0x5, 0x5, 0x6, 0x8}}, 0xe8)
sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x8000)
ioctl$TIOCPKT(r0, 0x5420, 0x0)

3m38.436041008s ago: executing program 57 (id=6797):
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x101001, 0x0)
ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8)
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0)
ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
syz_open_dev$dri(0x0, 0x4, 0x14000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0xf, &(0x7f00000193c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4048894)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000200)={'filter\x00', 0x0, 0x0, 0x0, [0x3, 0x51, 0x9bc6, 0xffff, 0x2, 0x7fffffff], 0x0, 0x0}, 0x78)
r4 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x40040)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, 0x0, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in=@multicast1, 0x4e23, 0x0, 0x4e23, 0x1, 0xa, 0x20, 0x0, 0x3a, r5}, {0x4, 0x80000000, 0x2, 0x4, 0x41f, 0x3, 0x3, 0x40c4}, {0x2, 0x3, 0x5}, 0x9, 0x6e6bbd, 0x3, 0x1, 0x2, 0x2}, {{@in=@multicast2, 0x4d5, 0xff}, 0x2, @in=@rand_addr=0x64010100, 0x3504, 0x0, 0xa44bb7f30d746999, 0x5, 0x5, 0x6, 0x8}}, 0xe8)
sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x8000)
ioctl$TIOCPKT(r0, 0x5420, 0x0)

3m38.04864233s ago: executing program 7 (id=6817):
r0 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000), 0x4)

3m37.822379506s ago: executing program 7 (id=6818):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x3)
r3 = dup(r2)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}})
r4 = socket(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pread64(r5, 0x0, 0x0, 0x3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
clock_gettime(0x0, &(0x7f0000000100)={<r8=>0x0, <r9=>0x0})
r10 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r11 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0)
r12 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r12, 0xc01864c6, 0x0)
dup3(0xffffffffffffffff, r12, 0x0)
ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e)
ioctl$VIDIOC_S_PARM(r3, 0xc0cc5616, &(0x7f00000004c0)={0x9, @capture={0x1000, 0x0, {0x0, 0x7}, 0x7, 0x80000000}})
readv(r10, &(0x7f0000000340)=[{&(0x7f0000000100)=""/160, 0xa0}], 0x1)
fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000880)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/277, &(0x7f00000002c0)='/\x00\x01\x00H\x98', 0x0)
tkill(r11, 0xb)
sendmsg$can_bcm(r3, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1d, r7}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="02000000547a028cfb578d3864c0aa6516000000ff010000", @ANYRES32=r8, @ANYRES32=r9/1000+60000, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="030000e0010000000000000002030000f26261c401e8687a"], 0x34}, 0x1, 0x0, 0x0, 0x45}, 0x40001)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000240)=0x2)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x50, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa368100000086dd60010100001611fffeffffffff00000000000000000000bbfe8000000000000000000000000000aa00000e2200169078020300000000000030b00afe4e79"], 0x0)

3m36.87128307s ago: executing program 7 (id=6820):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/mdstat\x00', 0x0, 0x0)
r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, 0x0)
io_uring_enter(r0, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0)

3m36.398225427s ago: executing program 7 (id=6822):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x149042)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f00000000c0)={0x5, 0x0, 0x100f, 0x9, 0xf, {0x5, 0x7745}})

3m36.257429583s ago: executing program 7 (id=6823):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$comedi(0xffffffffffffff9c, 0x0, 0x240000, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

3m35.486852346s ago: executing program 7 (id=6826):
gettid()
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4080)
sendmsg$xdp(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="4875c1a47d089ebfe21a15a67d27f1d45abf0682df7383dd33e0f0bddb47556d91c4cf2c796dffcd9828b4b0771af8a2529a6e9ed9c424a578befb13c2514c3e9f870a155f3da7f9fa0a594b78440dcc47d69ba6b5436df5a46f5581a0", 0x5d}], 0x1, 0x0, 0x0, 0x28004080}, 0x8094)
timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x1, @thr={&(0x7f0000000340)="a7b2103a79fc2395f0fd0ac75cdd6e9cccbe9a808f2f0c41545740f391d6989f704007d12e84f6301ba4721eee0ffabb86", &(0x7f0000000840)="c0caf00acf784ad31521022f4fd7d0ce9d851613bd4ea2167ffc168613813085bf25e4ba083d9e07710de03cc1903bee8e70e50044f9717129ba6ba7fcb483ed0bad679d55eda8c0edbcf0b712e5cffd4fb67154c5c05e7bccf8a33af6aefc5bceecb699a641e4a2bfea3c8a884c9e3c01f8427cc11a37185edc9d720f84fd5d5e2e4a56b96f67cc46c8a1b6c00653fdef27f9f95fd554851054eb1cee32f561e2501d905acc07de2f5ff5e70f389e5b21fb1153608bb89c52e2c2ab8a9b660dd419e29c7b68cc"}}, &(0x7f0000000300))
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700000001000010026bd7000000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="34001680300001802c000c80140001"], 0x70}}, 0x24040800)
timer_settime(0x0, 0x0, 0x0, 0x0)
syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2182)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000002ec0)=""/261, 0x105, 0x6)
timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100))
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r4, r3, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})

3m20.272953896s ago: executing program 58 (id=6826):
gettid()
pipe2(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4080)
sendmsg$xdp(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="4875c1a47d089ebfe21a15a67d27f1d45abf0682df7383dd33e0f0bddb47556d91c4cf2c796dffcd9828b4b0771af8a2529a6e9ed9c424a578befb13c2514c3e9f870a155f3da7f9fa0a594b78440dcc47d69ba6b5436df5a46f5581a0", 0x5d}], 0x1, 0x0, 0x0, 0x28004080}, 0x8094)
timer_create(0xb, &(0x7f00000000c0)={0x0, 0x21, 0x1, @thr={&(0x7f0000000340)="a7b2103a79fc2395f0fd0ac75cdd6e9cccbe9a808f2f0c41545740f391d6989f704007d12e84f6301ba4721eee0ffabb86", &(0x7f0000000840)="c0caf00acf784ad31521022f4fd7d0ce9d851613bd4ea2167ffc168613813085bf25e4ba083d9e07710de03cc1903bee8e70e50044f9717129ba6ba7fcb483ed0bad679d55eda8c0edbcf0b712e5cffd4fb67154c5c05e7bccf8a33af6aefc5bceecb699a641e4a2bfea3c8a884c9e3c01f8427cc11a37185edc9d720f84fd5d5e2e4a56b96f67cc46c8a1b6c00653fdef27f9f95fd554851054eb1cee32f561e2501d905acc07de2f5ff5e70f389e5b21fb1153608bb89c52e2c2ab8a9b660dd419e29c7b68cc"}}, &(0x7f0000000300))
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700000001000010026bd7000000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="34001680300001802c000c80140001"], 0x70}}, 0x24040800)
timer_settime(0x0, 0x0, 0x0, 0x0)
syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2182)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
pread64(0xffffffffffffffff, &(0x7f0000002ec0)=""/261, 0x105, 0x6)
timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100))
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r4, r3, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"})

3m6.803601079s ago: executing program 9 (id=6842):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
syz_io_uring_setup(0xa1, &(0x7f0000000640)={0x0, 0xe8ce, 0x0, 0x20, 0x40000333}, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0)

3m6.644885043s ago: executing program 9 (id=6843):
openat$vcs(0xffffffffffffff9c, 0x0, 0x101402, 0x0)
setresgid(0xee00, 0xee01, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}]}], {0x14}}, 0xe0}}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000b000140020003600e41b0000900ac0003001101a80016000b00014002000000035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r3, r3, 0x0, 0x200000)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000003060101000000000000000002000002080006400000009105000100070000000900020073797a31"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094)
mknod$loop(&(0x7f0000000400)='./file0\x00', 0xfef, 0x0)
execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
r6 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x900})
r7 = socket$kcm(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0xafe6)

3m4.849886831s ago: executing program 9 (id=6845):
r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
openat$dir(0xffffffffffffff9c, 0x0, 0x90081, 0x1)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = msgget$private(0x0, 0x1c0)
msgsnd(r7, &(0x7f0000000240)={0x1}, 0x8, 0x0)
sendmsg$SMC_PNETID_DEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r5, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000)
ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000380))

3m3.862751089s ago: executing program 9 (id=6846):
openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x18)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r4}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
r5 = socket$inet6(0xa, 0x3, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, 0x0, 0x0)
connect$inet6(r5, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, 0x0)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r6}, 0x10)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0)
preadv(r7, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215)

3m1.328177271s ago: executing program 9 (id=6847):
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x3032}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000000abc0)=""/102392, 0x18ff8)
socket(0x10, 0x803, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x14, r2, 0x705, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0xf, 0x491, 0x3, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00)

2m58.068833863s ago: executing program 9 (id=6849):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x101a02, 0x0)
sendfile(r0, r0, 0x0, 0x9)
socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x55)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0x4})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000340)=ANY=[@ANYBLOB="02000000", @ANYRES16, @ANYBLOB="0d0726bd7000fbdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8000)

2m43.080909048s ago: executing program 59 (id=6849):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0x101a02, 0x0)
sendfile(r0, r0, 0x0, 0x9)
socket$pppl2tp(0x18, 0x1, 0x1)
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prlimit64(0x0, 0xe, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x55)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
r3 = eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3)
ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0, 0x4})
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000340)=ANY=[@ANYBLOB="02000000", @ANYRES16, @ANYBLOB="0d0726bd7000fbdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8000)

2m31.119060388s ago: executing program 0 (id=6835):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
socket$inet6(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000}, 0x0)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010)
sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20, 0x3f}}], 0x1, 0xc0)

2m30.838615401s ago: executing program 0 (id=6870):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
syz_emit_ethernet(0x2f, &(0x7f0000000640)={@random="c92752ede134", @empty, @val={@val={0x88a8, 0x6, 0x1, 0x2}, {0x8100, 0x7, 0x0, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x29, 0x19, 0x68, 0x0, 0x40, 0x2f, 0x0, @multicast2, @broadcast}, "0f243c60a6"}}}}, 0x0)

2m30.781671923s ago: executing program 0 (id=6871):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001a00)=""/4096, 0x1000}, &(0x7f0000000100)=0x40)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_io_uring_setup(0x2023c, 0x0, &(0x7f0000000180), 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000780)={&(0x7f0000000280)=@abs={0xdc5d84db4e0d8ff2, 0x0, 0x4e21}, 0x6e, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000300)}, {0x0}, {0x0}, {&(0x7f0000000580)}, {&(0x7f0000000640)}], 0x6, &(0x7f0000002a40)=ANY=[@ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r5, @ANYRES32=r3, @ANYRES32, @ANYRES32=r1], 0x28}, 0x0)
io_uring_enter(r3, 0x7f5f, 0x4000000, 0x0, 0x0, 0x0)
r6 = getpid()
syz_pidfd_open(r6, 0x0)
shutdown(r4, 0x1)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x490, 0x0, 0xa, 0x148, 0x0, 0x60, 0x3f8, 0x2a8, 0x2a8, 0x3f8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0xfff}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x4, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r7, 0x84, 0x21, 0x0, &(0x7f0000000480))
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x12020)
r8 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r8)

2m28.264991038s ago: executing program 0 (id=6876):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
r3 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m26.925772903s ago: executing program 0 (id=6877):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0xc}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0xffffffffffffff04, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
pipe(0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000140), 0x10)
r4 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0xd9}, &(0x7f0000000200)=<r5=>0x0, &(0x7f00000003c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000500)=0x9, 0x0, 0x4)
syz_io_uring_submit(r5, r6, 0x0)
io_uring_enter(r4, 0x2dc7, 0x989c, 0x22, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x2, 0x8}}, 0x20)
r7 = creat(0x0, 0x0)
ioctl$IOMMU_VFIO_IOAS$GET(r7, 0x3b88, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f00000002c0)={0x48, 0x7, r7, 0x0, 0x8000, <r8=>0x0, 0x1, 0x36a6e8, 0x3aa42c})
ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r7, 0x3ba0, &(0x7f0000000340)={0x48, 0x6, 0x0, 0x0, r8})
getpid()
io_uring_setup(0x2c93, &(0x7f0000000480)={0x0, 0x3c9e, 0x3480, 0xfffffffc, 0x14})
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f00000000c0)={0x4, <r10=>r1})
r11 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r11, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})

2m11.426400124s ago: executing program 60 (id=6877):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0xa, 0xc}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0xffffffffffffff04, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
pipe(0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000140), 0x10)
r4 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0xd9}, &(0x7f0000000200)=<r5=>0x0, &(0x7f00000003c0)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000500)=0x9, 0x0, 0x4)
syz_io_uring_submit(r5, r6, 0x0)
io_uring_enter(r4, 0x2dc7, 0x989c, 0x22, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x2, 0x8}}, 0x20)
r7 = creat(0x0, 0x0)
ioctl$IOMMU_VFIO_IOAS$GET(r7, 0x3b88, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f00000002c0)={0x48, 0x7, r7, 0x0, 0x8000, <r8=>0x0, 0x1, 0x36a6e8, 0x3aa42c})
ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r7, 0x3ba0, &(0x7f0000000340)={0x48, 0x6, 0x0, 0x0, r8})
getpid()
io_uring_setup(0x2c93, &(0x7f0000000480)={0x0, 0x3c9e, 0x3480, 0xfffffffc, 0x14})
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f00000000c0)={0x4, <r10=>r1})
r11 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r11, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10})

4.058963161s ago: executing program 3 (id=7639):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000021, 0x0, 0x1af}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

3.559885572s ago: executing program 3 (id=7641):
socket$nl_route(0x10, 0x3, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
r0 = socket$inet6(0x10, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0080bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0)
write(r0, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setuid(0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000440), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}]})
preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x18, 0x8, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioprio_get$uid(0x3, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r2 = inotify_init()
r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
bind$ax25(r3, &(0x7f0000000100)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
close_range(r2, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000140)='smaps_rollup\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x3, 0x0)

3.380611558s ago: executing program 5 (id=7642):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000240)="67b2"})

3.268964312s ago: executing program 5 (id=7643):
syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
socket(0x10, 0x2, 0x0)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r2, 0x8001}}, 0x48)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

2.508242213s ago: executing program 6 (id=7646):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000280)={0x33, @multicast2, 0x4e22, 0x3, 'wrr\x00', 0x30, 0x1b53, 0x7f}, 0xffffffffffffff8e)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003300)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf25030000"], 0x113c}}, 0x8004)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0)
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)

2.506040978s ago: executing program 2 (id=7647):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
socket$inet_smc(0x2b, 0x1, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x14004040)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x80, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)

2.350442054s ago: executing program 3 (id=7648):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x8042)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080)

2.350234881s ago: executing program 3 (id=7649):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000021, 0x0, 0x1af}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

2.039921055s ago: executing program 3 (id=7650):
socket$nl_route(0x10, 0x3, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
r0 = socket$inet6(0x10, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0080bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0)
write(r0, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000480)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdirat(0xffffffffffffff9c, 0x0, 0x194)
mount$overlay(0x0, 0x0, &(0x7f0000000440), 0x8, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}]})
preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x18, 0x8, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioprio_get$uid(0x3, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r2 = inotify_init()
r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
bind$ax25(r3, &(0x7f0000000100)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
close_range(r2, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000140)='smaps_rollup\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x3, 0x0)

2.039677239s ago: executing program 5 (id=7651):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000)

2.039005327s ago: executing program 5 (id=7652):
r0 = socket$phonet(0x23, 0x2, 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f00000033c0), r0)
socket$inet6(0xa, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$unix(0x1, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xe, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff0300600d698cff9e14f086dd", 0x0, 0x99, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
syz_emit_ethernet(0x7a, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0)
read$FUSE(r4, &(0x7f00000050c0)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_ATTR(r4, &(0x7f0000007100)={0x78, 0x0, r5, {0xa0, 0x6, 0x0, {0x4, 0x0, 0x9, 0x8, 0x0, 0x23, 0xfffff92f, 0x0, 0x4, 0xc000, 0x3ff, 0xee00, 0x0, 0x7fffffff, 0x4}}}, 0x78)
r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x13f}, &(0x7f0000000340)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0)
syz_io_uring_submit(r7, r8, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80})
io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)

1.545630038s ago: executing program 2 (id=7653):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xffffff81}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c071}, 0x4008080)

1.489299037s ago: executing program 6 (id=7654):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000033c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10)
shutdown(r0, 0x1)

1.440571798s ago: executing program 5 (id=7655):
socket(0x2, 0x2, 0x1)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x2924, 0xffff, 0x9dfe, 0x11})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TCXONC(r0, 0x540a, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17)

1.440342612s ago: executing program 6 (id=7656):
syz_open_dev$vim2m(&(0x7f0000000140), 0x8, 0x2)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x8000203d})

1.339861799s ago: executing program 6 (id=7657):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a01040000000000000000020000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000002c0000001d0a010300000000000000000a0000000900010073797a31"], 0x90}, 0x1, 0x0, 0x0, 0x4000010}, 0x40)

1.339583173s ago: executing program 2 (id=7658):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000021, 0x0, 0x1af}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2)
write$P9_RLERRORu(r3, &(0x7f0000000240)=ANY=[], 0x10)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

1.339403523s ago: executing program 6 (id=7659):
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0)
close(0xffffffffffffffff)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0)
r3 = io_uring_setup(0x2f00, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0)
r4 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x653f, 0x0, 0x0, 0x28e, 0x0, r3})
io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, &(0x7f0000000000)=[r3], 0x1)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]})
write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0)

1.224508587s ago: executing program 2 (id=7660):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x2c, r1, 0x6a98047402e98331, 0x1000000, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x4886)

1.158057202s ago: executing program 2 (id=7661):
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0)
close(0xffffffffffffffff)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0)
r3 = io_uring_setup(0x2f00, &(0x7f0000000700)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6})
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, 0x0, 0x0)
r4 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x653f, 0x0, 0x0, 0x28e, 0x0, r3})
io_uring_register$IORING_REGISTER_FILES(r4, 0x1e, &(0x7f0000000000)=[r3], 0x1)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x18)
r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$UHID_CREATE(r5, 0x0, 0x0)

550.390281ms ago: executing program 5 (id=7662):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000280)={0x33, @multicast2, 0x4e22, 0x3, 'wrr\x00', 0x30, 0x1b53, 0x7f}, 0xffffffffffffff8e)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003300)=ANY=[@ANYBLOB="3c1100003e00010329bd700000dcdf25030000"], 0x113c}}, 0x8004)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0)
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040)

398.598209ms ago: executing program 6 (id=7663):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1)
clock_adjtime(0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
socket$tipc(0x1e, 0x5, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x3, 'wrr\x00', 0xd, 0x81, 0x2e}, {@rand_addr=0xac1414aa, 0x4e1f, 0x3, 0x1cb, 0x12d5c, 0x12d59}}, 0x44)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)

220.257348ms ago: executing program 2 (id=7664):
r0 = socket$phonet(0x23, 0x2, 0x1)
syz_genetlink_get_family_id$tipc(&(0x7f00000033c0), r0)
socket$inet6(0xa, 0x2, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$unix(0x1, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xe, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff0300600d698cff9e14f086dd", 0x0, 0x99, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17)
prctl$PR_SET_THP_DISABLE(0x29, 0x1)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
syz_emit_ethernet(0x7a, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0)
read$FUSE(r4, &(0x7f00000050c0)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_ATTR(r4, &(0x7f0000007100)={0x78, 0x0, r5, {0xa0, 0x6, 0x0, {0x4, 0x0, 0x9, 0x8, 0x0, 0x23, 0xfffff92f, 0x0, 0x4, 0xc000, 0x3ff, 0xee00, 0x0, 0x7fffffff, 0x4}}}, 0x78)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80})
io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)

0s ago: executing program 3 (id=7665):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
epoll_create1(0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
gettid()
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10)
connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10)
syz_open_dev$sndmidi(0x0, 0x2, 0x80080)
r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0)
sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x6, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004000}, 0x10)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

 no interface number 0
[ 1477.632674][    T9] usb 14-1: config 0 interface 249 has no altsetting 0
[ 1477.636727][    T9] usb 14-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice= 5.c1
[ 1477.639711][    T9] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1477.643608][    T9] usb 14-1: Product: syz
[ 1477.645155][    T9] usb 14-1: Manufacturer: syz
[ 1477.646709][    T9] usb 14-1: SerialNumber: syz
[ 1477.654522][    T9] usb 14-1: config 0 descriptor??
[ 1477.728464][T12756] usb 8-1: unable to read config index 0 descriptor/start: -61
[ 1477.730959][T12756] usb 8-1: can't read configurations, error -61
[ 1477.733182][T12756] usb usb8-port1: attempt power cycle
[ 1478.103984][T12756] usb 8-1: new full-speed USB device number 86 using dummy_hcd
[ 1478.127272][T12756] usb 8-1: unable to read config index 0 descriptor/start: -61
[ 1478.130089][T12756] usb 8-1: can't read configurations, error -61
[ 1478.253952][T12756] usb 8-1: new full-speed USB device number 87 using dummy_hcd
[ 1478.276153][T12756] usb 8-1: unable to read config index 0 descriptor/start: -61
[ 1478.278894][T12756] usb 8-1: can't read configurations, error -61
[ 1478.281817][T12756] usb usb8-port1: unable to enumerate USB device
[ 1478.857397][T28828] fuse: Bad value for 'fd'
[ 1480.112054][T28846] fuse: Bad value for 'fd'
[ 1480.250630][    T9] usb 14-1: USB disconnect, device number 14
[ 1480.346565][T28856] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6578'.
[ 1480.743864][T27032] usb 8-1: new high-speed USB device number 88 using dummy_hcd
[ 1480.894250][T27032] usb 8-1: Using ep0 maxpacket: 32
[ 1480.897693][T27032] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1480.900857][T27032] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1480.909575][T27032] usb 8-1: config 0 descriptor??
[ 1481.125979][T27032] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1481.133057][T27032] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1481.137538][T27032] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1481.140169][T27032] usb 8-1: media controller created
[ 1481.159013][T27032] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1481.340008][T27032] az6027: usb out operation failed. (-71)
[ 1481.343486][T27032] az6027: usb out operation failed. (-71)
[ 1481.350093][T27032] stb0899_attach: Driver disabled by Kconfig
[ 1481.352331][T27032] az6027: no front-end attached
[ 1481.352331][T27032] 
[ 1481.356893][T27032] az6027: usb out operation failed. (-71)
[ 1481.358751][T27032] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1481.374108][T27032] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input71
[ 1481.378678][T27032] dvb-usb: schedule remote query interval to 400 msecs.
[ 1481.380911][T27032] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1481.387029][T27032] usb 8-1: USB disconnect, device number 88
[ 1481.418322][T27032] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1483.131248][T28916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6603'.
[ 1484.303195][T28933] fuse: Bad value for 'fd'
[ 1485.816365][T28955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6615'.
[ 1486.265165][T28963] fuse: Invalid rootmode
[ 1487.628694][T28987] fuse: Invalid rootmode
[ 1488.304160][T29001] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6634'.
[ 1488.553941][T18039] usb 8-1: new high-speed USB device number 89 using dummy_hcd
[ 1488.717513][T18039] usb 8-1: config 0 has an invalid interface number: 249 but max is 0
[ 1488.720951][T18039] usb 8-1: config 0 has no interface number 0
[ 1488.727479][T18039] usb 8-1: config 0 interface 249 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[ 1488.731751][T18039] usb 8-1: config 0 interface 249 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0
[ 1488.736573][T18039] usb 8-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=be.87
[ 1488.741973][T18039] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1488.753169][T18039] usb 8-1: config 0 descriptor??
[ 1488.771436][T18039] port100 8-1:0.249: NFC: Could not find bulk-in or bulk-out endpoint
[ 1489.576055][T18038] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[ 1489.580407][T18038] Bluetooth: hci0: Injecting HCI hardware error event
[ 1489.591639][T18038] Bluetooth: hci0: hardware error 0x00
[ 1491.640796][ T6047] usb 8-1: USB disconnect, device number 89
[ 1491.894201][T18038] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1492.035003][T29059] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1492.773993][T18038] Bluetooth: hci1: command 0x0406 tx timeout
[ 1492.898746][T29068] fuse: Bad value for 'rootmode'
[ 1494.261789][T29091] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6664'.
[ 1495.176990][T29101] fuse: Bad value for 'rootmode'
[ 1495.382964][T29108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6669'.
[ 1495.825978][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[ 1495.829363][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[ 1496.193896][T18039] usb 9-1: new full-speed USB device number 16 using dummy_hcd
[ 1496.348609][T18039] usb 9-1: config 0 has an invalid interface number: 8 but max is 0
[ 1496.351430][T18039] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1496.355329][T18039] usb 9-1: config 0 has no interface number 0
[ 1496.358206][T18039] usb 9-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1496.365423][T18039] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1496.368510][T18039] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1496.371230][T18039] usb 9-1: Product: syz
[ 1496.372737][T18039] usb 9-1: SerialNumber: syz
[ 1496.380762][T18039] usb 9-1: config 0 descriptor??
[ 1496.607208][T18039] usbhid 9-1:0.8: couldn't find an input interrupt endpoint
[ 1496.611187][T18039] usb 9-1: USB disconnect, device number 16
[ 1497.656949][T29150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6682'.
[ 1497.823257][T29157] fuse: Unknown parameter 'use00000000000000000000'
[ 1499.343614][T29183] fuse: Unknown parameter 'use00000000000000000000'
[ 1499.581509][T29195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6697'.
[ 1500.123928][T18039] usb 14-1: new high-speed USB device number 15 using dummy_hcd
[ 1500.276467][T18039] usb 14-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1500.281078][T18039] usb 14-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1500.285432][T18039] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1500.294324][T18039] usb 14-1: config 0 descriptor??
[ 1500.301577][T18039] pwc: Askey VC010 type 2 USB webcam detected.
[ 1500.556332][T29210] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1500.716594][T18039] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1500.721680][T18039] pwc: recv_control_msg error -32 req 02 val 2700
[ 1500.726015][T18039] pwc: recv_control_msg error -32 req 02 val 2c00
[ 1500.730076][T18039] pwc: recv_control_msg error -32 req 04 val 1000
[ 1500.735417][T18039] pwc: recv_control_msg error -32 req 04 val 1300
[ 1500.740439][T18039] pwc: recv_control_msg error -32 req 04 val 1400
[ 1500.744558][T18039] pwc: recv_control_msg error -32 req 02 val 2000
[ 1500.750669][T18039] pwc: recv_control_msg error -32 req 02 val 2100
[ 1500.755122][T18039] pwc: recv_control_msg error -32 req 04 val 1500
[ 1500.757928][T18039] pwc: recv_control_msg error -32 req 02 val 2500
[ 1500.760997][T18039] pwc: recv_control_msg error -32 req 02 val 2400
[ 1500.965409][T18039] pwc: recv_control_msg error -71 req 02 val 2900
[ 1500.969423][T18039] pwc: recv_control_msg error -71 req 02 val 2800
[ 1500.975511][T18039] pwc: recv_control_msg error -71 req 04 val 1100
[ 1500.977952][T18039] pwc: recv_control_msg error -71 req 04 val 1200
[ 1500.990170][T18039] pwc: Registered as video103.
[ 1500.992876][T18039] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb14/14-1/input/input72
[ 1501.027384][T18039] usb 14-1: USB disconnect, device number 15
[ 1501.240317][T29224] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6711'.
[ 1501.312151][  T143] usb 9-1: new full-speed USB device number 17 using dummy_hcd
[ 1501.610519][  T143] usb 9-1: config 0 has an invalid interface number: 8 but max is 0
[ 1501.613628][  T143] usb 9-1: config 0 has an invalid descriptor of length 159, skipping remainder of the config
[ 1501.624331][  T143] usb 9-1: config 0 has no interface number 0
[ 1501.626929][  T143] usb 9-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1501.702322][  T143] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1501.711948][  T143] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1501.726749][  T143] usb 9-1: Product: syz
[ 1501.728649][  T143] usb 9-1: SerialNumber: syz
[ 1501.729775][T29232] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1501.732355][  T143] usb 9-1: config 0 descriptor??
[ 1501.818962][  T143] usbhid 9-1:0.8: couldn't find an input interrupt endpoint
[ 1504.073375][T14793] usb 9-1: USB disconnect, device number 17
[ 1504.233931][T29257] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1504.244347][T29257] syzkaller0: entered promiscuous mode
[ 1504.249599][T29257] syzkaller0: entered allmulticast mode
[ 1504.571601][T29259] tipc: Resetting bearer <eth:syzkaller0>
[ 1504.641146][T29261] fuse: Unknown parameter 'user_i00000000000000000000'
[ 1504.879399][T29256] tipc: Resetting bearer <eth:syzkaller0>
[ 1504.940349][T29256] tipc: Disabling bearer <eth:syzkaller0>
[ 1505.213764][T29270] IPVS: Error connecting to the multicast addr
[ 1505.411431][T29270] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6727'.
[ 1505.417003][T29270] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1505.894091][    T9] usb 8-1: new full-speed USB device number 90 using dummy_hcd
[ 1506.099811][    T9] usb 8-1: config 0 has an invalid interface number: 8 but max is 0
[ 1506.107375][    T9] usb 8-1: config 0 has an invalid descriptor of length 159, skipping remainder of the config
[ 1506.116790][    T9] usb 8-1: config 0 has no interface number 0
[ 1506.122813][    T9] usb 8-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1506.151204][    T9] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1506.159144][    T9] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1506.163116][    T9] usb 8-1: Product: syz
[ 1506.165108][    T9] usb 8-1: SerialNumber: syz
[ 1506.170368][    T9] usb 8-1: config 0 descriptor??
[ 1506.175255][    T9] usbhid 8-1:0.8: couldn't find an input interrupt endpoint
[ 1507.454479][T29293] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1507.465106][T29293] syzkaller0: entered promiscuous mode
[ 1507.469764][T29293] syzkaller0: entered allmulticast mode
[ 1507.603204][T29293] tipc: Resetting bearer <eth:syzkaller0>
[ 1507.627661][T29292] tipc: Resetting bearer <eth:syzkaller0>
[ 1507.687730][T29292] tipc: Disabling bearer <eth:syzkaller0>
[ 1507.899057][T29290] overlayfs: failed to clone upperpath
[ 1508.661634][T12872] usb 8-1: USB disconnect, device number 90
[ 1513.366462][T29367] Failed to get privilege flags for destination (handle=0x2:0xfffffffe)
[ 1513.527787][T29369] overlayfs: failed to clone lowerpath
[ 1516.790364][T29403] fuse: Bad value for 'fd'
[ 1521.018140][T29451] netlink: 'syz.4.6786': attribute type 39 has an invalid length.
[ 1523.467908][T18038] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1523.476975][T18038] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1523.483103][T18038] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1523.526434][T18038] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1523.539533][T18038] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1523.674445][T29471] ip6_vti0 speed is unknown, defaulting to 1000
[ 1523.773235][T29471] lo speed is unknown, defaulting to 1000
[ 1524.089084][T29471] chnl_net:caif_netlink_parms(): no params data found
[ 1524.231842][T29481] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6794'.
[ 1525.104404][T29471] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1525.121021][T29471] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1525.127007][T29471] bridge_slave_0: entered allmulticast mode
[ 1525.334001][T29471] bridge_slave_0: entered promiscuous mode
[ 1525.596928][T29471] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1525.624786][T29471] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1525.634656][T29471] bridge_slave_1: entered allmulticast mode
[ 1525.644990][T29471] bridge_slave_1: entered promiscuous mode
[ 1525.736829][T18038] Bluetooth: hci2: command tx timeout
[ 1526.209360][T29471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1526.288937][T29471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1526.586881][T29471] team0: Port device team_slave_0 added
[ 1526.598743][T29471] team0: Port device team_slave_1 added
[ 1526.886352][T29471] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1526.889284][T29471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1526.969085][T29471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1527.009216][T29471] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1527.012069][T29471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1527.073892][T29471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1527.247470][T29471] hsr_slave_0: entered promiscuous mode
[ 1527.307355][T29471] hsr_slave_1: entered promiscuous mode
[ 1527.327472][T29471] debugfs: 'hsr0' already exists in 'hsr'
[ 1527.329436][T29471] Cannot create hsr debugfs directory
[ 1527.722053][T29499] ip6_vti0 speed is unknown, defaulting to 1000
[ 1527.818933][T18038] Bluetooth: hci2: command tx timeout
[ 1527.865050][T29471] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1528.433291][T29471] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1528.740448][T29471] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1528.969747][T29499] lo speed is unknown, defaulting to 1000
[ 1529.434524][T29471] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1529.893972][T18038] Bluetooth: hci2: command tx timeout
[ 1530.399859][T29471] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1530.411499][T29471] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1530.597712][T29471] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1530.897675][T29471] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1531.144961][T29519] usb usb8: usbfs: process 29519 (syz.9.6800) did not claim interface 0 before use
[ 1531.734308][T29471] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1531.807223][T29471] 8021q: adding VLAN 0 to HW filter on device team0
[ 1531.859877][T29530] loop6: detected capacity change from 0 to 524287999
[ 1531.862621][T29530] buffer_io_error: 7 callbacks suppressed
[ 1531.862629][T29530] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1531.867969][T29530] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1531.872462][T29530] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1531.876717][T29530] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1531.879492][   T41] audit: type=1326 audit(1543515785.024:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29527 comm="syz.3.6803" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70fd579 code=0x0
[ 1531.887817][T29530] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1531.890436][T29530] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1531.893136][T29530] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1531.906191][T29530] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1531.909191][T29530] ldm_validate_partition_table(): Disk read failed.
[ 1531.911507][T29530] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1531.920078][T29530] Buffer I/O error on dev loop6, logical block 0, async page read
[ 1531.936417][ T1186] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1531.939489][ T1186] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1531.953222][ T1186] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1531.956385][ T1186] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1531.984184][T20188] Bluetooth: hci2: command tx timeout
[ 1532.006994][T29530] Dev loop6: unable to read RDB block 0
[ 1532.062633][T29530]  loop6: unable to read partition table
[ 1532.070317][T29532] ldm_validate_partition_table(): Disk read failed.
[ 1532.073636][T29530] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[ 1532.080374][T29532] Dev loop6: unable to read RDB block 0
[ 1532.083132][T29532]  loop6: unable to read partition table
[ 1532.089579][T29532] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[ 1533.738239][T20188] Bluetooth: hci4: command 0x0406 tx timeout
[ 1534.320341][T29471] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1536.701857][T29471] veth0_vlan: entered promiscuous mode
[ 1536.975539][T29471] veth1_vlan: entered promiscuous mode
[ 1537.688217][T29471] veth0_macvtap: entered promiscuous mode
[ 1537.693289][T29471] veth1_macvtap: entered promiscuous mode
[ 1537.723099][T29471] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1537.736175][T29471] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1537.745937][T26975] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1537.755850][T26975] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1537.839961][T26975] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1537.857897][T26959] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1537.939844][T26959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1537.947999][T26959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1537.962160][T26975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1537.966671][T26975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1538.657197][T29557] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(10)
[ 1538.660042][T29557] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1538.674249][T29557] vhci_hcd vhci_hcd.0: Device attached
[ 1538.679108][T29557] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(12)
[ 1538.681415][T29557] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1538.687139][T29557] vhci_hcd vhci_hcd.0: Device attached
[ 1538.692966][T29557] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(14)
[ 1538.695935][T29557] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1538.722419][T29557] vhci_hcd vhci_hcd.0: Device attached
[ 1538.730773][T29557] vhci_hcd vhci_hcd.0: pdev(9) rhport(3) sockfd(16)
[ 1538.733758][T29557] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1538.750700][T29557] vhci_hcd vhci_hcd.0: Device attached
[ 1538.763269][T29557] vhci_hcd vhci_hcd.0: pdev(9) rhport(4) sockfd(18)
[ 1538.766197][T29557] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1538.782246][T29557] vhci_hcd vhci_hcd.0: Device attached
[ 1538.795590][T29557] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(20)
[ 1538.798526][T29557] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1538.846388][T29570] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1538.856548][T29557] vhci_hcd vhci_hcd.0: Device attached
[ 1538.891596][T29557] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1538.908024][T29557] vhci_hcd vhci_hcd.0: pdev(9) rhport(7) sockfd(26)
[ 1538.910980][T29557] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1538.914354][T12872] usb 55-1: new low-speed USB device number 2 using vhci_hcd
[ 1538.938443][T29557] vhci_hcd vhci_hcd.0: Device attached
[ 1538.942459][T29557] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1538.956716][T29557] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(32)
[ 1538.959572][T29557] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1538.977559][T29557] vhci_hcd vhci_hcd.0: Device attached
[ 1539.070316][T29573] vhci_hcd: connection closed
[ 1539.070485][T26959] vhci_hcd: stop threads
[ 1539.074560][T26959] vhci_hcd: release socket
[ 1539.076303][T29566] vhci_hcd: connection closed
[ 1539.077198][T29564] vhci_hcd: connection closed
[ 1539.078968][T29562] vhci_hcd: connection closed
[ 1539.082346][T29560] vhci_hcd: connection closed
[ 1539.084852][T29568] vhci_hcd: connection closed
[ 1539.087273][T26959] vhci_hcd: disconnect device
[ 1539.091420][T29558] vhci_hcd: connection reset by peer
[ 1539.094498][T26959] vhci_hcd: stop threads
[ 1539.096464][T26959] vhci_hcd: release socket
[ 1539.098508][T26959] vhci_hcd: disconnect device
[ 1539.103296][T26959] vhci_hcd: stop threads
[ 1539.106607][T26959] vhci_hcd: release socket
[ 1539.108570][T26959] vhci_hcd: disconnect device
[ 1539.110672][T26959] vhci_hcd: stop threads
[ 1539.112529][T26959] vhci_hcd: release socket
[ 1539.114783][T26959] vhci_hcd: disconnect device
[ 1539.116931][T26959] vhci_hcd: stop threads
[ 1539.118898][T26959] vhci_hcd: release socket
[ 1539.120840][T26959] vhci_hcd: disconnect device
[ 1539.123567][T26959] vhci_hcd: stop threads
[ 1539.128895][T26959] vhci_hcd: release socket
[ 1539.130914][T26959] vhci_hcd: disconnect device
[ 1539.133139][T26959] vhci_hcd: stop threads
[ 1539.136070][T26959] vhci_hcd: release socket
[ 1539.138024][T26959] vhci_hcd: disconnect device
[ 1539.618566][T29575] vhci_hcd: connection closed
[ 1539.642104][ T1261] vhci_hcd: stop threads
[ 1539.651136][ T1261] vhci_hcd: release socket
[ 1539.653306][ T1261] vhci_hcd: disconnect device
[ 1540.628635][T29592] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0.
[ 1543.558434][T20188] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1543.576534][T20188] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1543.587903][T20188] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1543.657419][T20188] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1543.665176][T20188] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1544.020969][ T6047] libceph: connect (1)[c::]:6789 error -101
[ 1544.028472][ T6047] libceph: mon0 (1)[c::]:6789 connect error
[ 1544.042584][ T6047] libceph: connect (1)[c::]:6789 error -101
[ 1544.045253][T12872] vhci_hcd: vhci_device speed not set
[ 1544.049108][ T6047] libceph: mon0 (1)[c::]:6789 connect error
[ 1544.178023][T29610] ceph: No mds server is up or the cluster is laggy
[ 1544.198054][T29608] ip6_vti0 speed is unknown, defaulting to 1000
[ 1544.523163][T29608] lo speed is unknown, defaulting to 1000
[ 1545.336208][T12756] usb usb56-port1: attempt power cycle
[ 1545.722178][T26978] bridge_slave_1: left allmulticast mode
[ 1545.734853][T20188] Bluetooth: hci3: command tx timeout
[ 1545.735242][T26978] bridge_slave_1: left promiscuous mode
[ 1545.770108][T26978] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1545.805166][T26978] bridge_slave_0: left allmulticast mode
[ 1545.809845][T26978] bridge_slave_0: left promiscuous mode
[ 1545.812782][T26978] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1545.855210][T29646] netlink: 80 bytes leftover after parsing attributes in process `syz.7.6826'.
[ 1545.948829][T12756] usb usb56-port1: unable to enumerate USB device
[ 1546.024431][T29648] binder_alloc: 29645: binder_alloc_buf, no vma
[ 1547.422875][T26978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1547.572567][T26978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1547.589275][T26978] bond0 (unregistering): Released all slaves
[ 1547.662447][T29608] chnl_net:caif_netlink_parms(): no params data found
[ 1547.817415][T20188] Bluetooth: hci3: command tx timeout
[ 1548.089467][T26978] tipc: Left network mode
[ 1548.668891][T29608] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1548.672455][T29608] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1548.676164][T29608] bridge_slave_0: entered allmulticast mode
[ 1548.680529][T29608] bridge_slave_0: entered promiscuous mode
[ 1548.686217][T29608] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1548.689631][T29608] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1548.693004][T29608] bridge_slave_1: entered allmulticast mode
[ 1548.700700][T29608] bridge_slave_1: entered promiscuous mode
[ 1548.743137][T29608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1548.751572][T29608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1548.787111][T29608] team0: Port device team_slave_0 added
[ 1548.807682][T29608] team0: Port device team_slave_1 added
[ 1548.838815][T29608] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1548.842026][T29608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1548.859730][T29608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1548.866389][T29608] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1548.869801][T29608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1548.881474][T29608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1549.008389][T29608] hsr_slave_0: entered promiscuous mode
[ 1549.011172][T29608] hsr_slave_1: entered promiscuous mode
[ 1549.014499][T29608] debugfs: 'hsr0' already exists in 'hsr'
[ 1549.017001][T29608] Cannot create hsr debugfs directory
[ 1549.738190][T29608] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1549.893999][T20188] Bluetooth: hci3: command tx timeout
[ 1549.967562][T29608] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1550.195910][T26978] hsr_slave_0: left promiscuous mode
[ 1550.235638][T26978] hsr_slave_1: left promiscuous mode
[ 1550.239707][T26978] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1550.250398][T26978] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1551.501182][T29663] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6830'.
[ 1551.974217][T20188] Bluetooth: hci3: command tx timeout
[ 1552.331380][T26978] team0 (unregistering): Port device team_slave_1 removed
[ 1552.854202][T26978] team0 (unregistering): Port device team_slave_0 removed
[ 1553.107607][T29667] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6831'.
[ 1557.365721][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[ 1557.370946][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[ 1559.058160][T29608] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1559.435701][T29608] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1559.639436][T29608] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1559.667092][T29608] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1559.693267][T29608] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1559.725664][T29608] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1560.948920][T26978] bridge_slave_1: left allmulticast mode
[ 1560.954375][T26978] bridge_slave_1: left promiscuous mode
[ 1560.957682][T26978] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1561.017470][T26978] bridge_slave_0: left allmulticast mode
[ 1561.028721][T26978] bridge_slave_0: left promiscuous mode
[ 1561.033641][T26978] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1562.028889][T18038] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1562.047093][T18038] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1562.051440][T18038] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1562.062893][T18038] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1562.069495][T18038] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1564.135952][T18038] Bluetooth: hci4: command tx timeout
[ 1564.792020][T26978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1564.809156][T26978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1564.826625][T26978] bond0 (unregistering): Released all slaves
[ 1565.301999][T29709] netlink: 4436 bytes leftover after parsing attributes in process `syz.9.6838'.
[ 1565.305561][T29709] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[ 1566.215196][T18038] Bluetooth: hci4: command tx timeout
[ 1568.314872][T18038] Bluetooth: hci4: command tx timeout
[ 1570.374872][T18038] Bluetooth: hci4: command tx timeout
[ 1571.216261][T29719] netlink: 'syz.3.6840': attribute type 39 has an invalid length.
[ 1573.619842][T26978] tipc: Left network mode
[ 1574.100169][T29698] ip6_vti0 speed is unknown, defaulting to 1000
[ 1574.136343][T29608] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1574.495344][T29608] 8021q: adding VLAN 0 to HW filter on device team0
[ 1574.497660][T29698] lo speed is unknown, defaulting to 1000
[ 1574.535052][T26967] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1574.537412][T26967] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1574.551775][T26967] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1574.554196][T26967] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1574.699831][T29732] netlink: 'syz.9.6843': attribute type 11 has an invalid length.
[ 1575.006941][T29734] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6843'.
[ 1575.014750][T29734] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6843'.
[ 1575.091432][T26978] hsr_slave_0: left promiscuous mode
[ 1575.157264][T26978] hsr_slave_1: left promiscuous mode
[ 1575.168923][T26978] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1575.176833][T26978] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1576.459887][T26978] team0 (unregistering): Port device team_slave_1 removed
[ 1576.664696][T26978] team0 (unregistering): Port device team_slave_0 removed
[ 1576.869011][T29745] smc: net device ip6_vti0 erased user defined pnetid SYZ1
[ 1576.872163][T29745] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ1
[ 1579.506998][T29698] chnl_net:caif_netlink_parms(): no params data found
[ 1579.861953][T29698] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1579.866049][T29698] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1579.869179][T29698] bridge_slave_0: entered allmulticast mode
[ 1579.873057][T29698] bridge_slave_0: entered promiscuous mode
[ 1579.917521][T29698] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1579.920596][T29698] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1579.923680][T29698] bridge_slave_1: entered allmulticast mode
[ 1579.945899][T29698] bridge_slave_1: entered promiscuous mode
[ 1580.130333][T29608] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1580.684733][T29742] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6844'.
[ 1581.195991][T29763] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1581.199079][T29763] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1581.399552][T29763] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1581.409102][T29763] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1582.090728][T29698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1582.447396][ T1261] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1582.564998][T29698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1582.595859][ T1261] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1582.620849][ T1261] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1582.674154][T26978] IPVS: stop unused estimator thread 0...
[ 1582.700762][ T1261] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1582.713236][T29698] team0: Port device team_slave_0 added
[ 1582.732882][T29698] team0: Port device team_slave_1 added
[ 1582.908247][T29698] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1582.914901][T29698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1582.935879][T29698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1582.980819][T29698] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1582.997206][T29698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1583.025275][T29698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1583.596073][T29698] hsr_slave_0: entered promiscuous mode
[ 1583.599069][T29698] hsr_slave_1: entered promiscuous mode
[ 1583.659838][T29698] debugfs: 'hsr0' already exists in 'hsr'
[ 1583.661785][T29698] Cannot create hsr debugfs directory
[ 1585.373087][T26978] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1585.447070][T29608] veth0_vlan: entered promiscuous mode
[ 1585.479125][T29608] veth1_vlan: entered promiscuous mode
[ 1585.619868][T26978] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1585.828535][T26978] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1585.852865][T29608] veth0_macvtap: entered promiscuous mode
[ 1585.872219][T29608] veth1_macvtap: entered promiscuous mode
[ 1585.988537][T29608] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1586.000073][T29608] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1586.006965][T26957] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1586.014048][T26957] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1586.017761][T26957] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1586.020912][T26957] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1586.225978][T26978] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1586.399314][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1586.402833][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1586.456950][T26956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1586.459624][T26956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1586.470754][T26978] bridge_slave_1: left allmulticast mode
[ 1586.473149][T26978] bridge_slave_1: left promiscuous mode
[ 1586.478478][T26978] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1586.496949][T26978] bridge_slave_0: left allmulticast mode
[ 1586.498974][T26978] bridge_slave_0: left promiscuous mode
[ 1586.500996][T26978] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1586.531357][T26978] bridge_slave_1: left allmulticast mode
[ 1586.540870][T26978] bridge_slave_1: left promiscuous mode
[ 1586.542985][T26978] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1586.548935][T29773] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6814'.
[ 1586.566537][T26978] 
: left allmulticast mode
[ 1586.574621][T26978] 
: left promiscuous mode
[ 1586.576798][T26978] bridge0: port 1(
) entered disabled state
[ 1587.527182][T29775] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[ 1587.798218][T26978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1587.818625][T26978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1587.832141][T26978] bond0 (unregistering): Released all slaves
[ 1587.952835][   T13] smc: removing ib device syz2
[ 1591.087672][T29783] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1592.318388][T26978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1592.329040][T26978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1592.338084][T26978] bond0 (unregistering): Released all slaves
[ 1592.673607][T26978] tipc: Left network mode
[ 1592.947975][T29698] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1592.958425][T29698] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1592.968903][T29698] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1592.993213][T29698] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1593.180574][T29698] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1593.271678][T29698] 8021q: adding VLAN 0 to HW filter on device team0
[ 1593.290524][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1593.293840][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1593.310406][  T564] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1593.313568][  T564] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1593.419091][  T143] usb 7-1: new full-speed USB device number 82 using dummy_hcd
[ 1593.632332][  T143] usb 7-1: config 5 has an invalid interface number: 123 but max is 0
[ 1593.645862][  T143] usb 7-1: config 5 has no interface number 0
[ 1593.648245][  T143] usb 7-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[ 1593.652090][  T143] usb 7-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xE6, changing to 0x86
[ 1593.936666][  T143] usb 7-1: config 5 interface 123 altsetting 7 endpoint 0x86 has invalid wMaxPacketSize 0
[ 1593.939985][  T143] usb 7-1: config 5 interface 123 has no altsetting 0
[ 1594.060300][T26978] hsr_slave_0: left promiscuous mode
[ 1594.075821][T26978] hsr_slave_1: left promiscuous mode
[ 1594.079181][T26978] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1594.082614][T26978] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1594.092633][T26978] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1594.097509][T26978] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1594.127182][T26978] hsr_slave_0: left promiscuous mode
[ 1594.133358][T26978] hsr_slave_1: left promiscuous mode
[ 1594.143724][T26978] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1594.169627][  T143] usb 7-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[ 1594.172348][T26978] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1594.172652][  T143] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1594.182894][T26978] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1594.186087][T26978] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1594.195651][  T143] usb 7-1: Product: syz
[ 1594.197559][  T143] usb 7-1: Manufacturer: syz
[ 1594.199629][  T143] usb 7-1: SerialNumber: syz
[ 1594.240607][T26978] veth1_macvtap: left promiscuous mode
[ 1594.243140][T26978] veth0_macvtap: left promiscuous mode
[ 1594.247025][T26978] veth1_vlan: left promiscuous mode
[ 1594.249345][T26978] veth0_vlan: left promiscuous mode
[ 1594.264556][T26978] veth1_macvtap: left promiscuous mode
[ 1594.266536][T26978] veth0_macvtap: left promiscuous mode
[ 1594.268769][T26978] veth1_vlan: left promiscuous mode
[ 1594.270695][T26978] veth0_vlan: left promiscuous mode
[ 1596.930509][T26978] team0 (unregistering): Port device team_slave_1 removed
[ 1596.995442][T26978] team0 (unregistering): Port device team_slave_0 removed
[ 1598.368866][T20188] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1598.376758][T20188] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1598.379930][T20188] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1598.383274][T20188] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1598.397066][T20188] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1598.830149][T26978] team0 (unregistering): Port device team_slave_1 removed
[ 1598.932672][T26978] team0 (unregistering): Port device team_slave_0 removed
[ 1599.551098][  T143] ni6501 7-1:5.123: driver 'ni6501' failed to auto-configure device.
[ 1599.772018][T29797] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[ 1599.875860][T12756] usb 7-1: USB disconnect, device number 82
[ 1600.454217][T20188] Bluetooth: hci2: command tx timeout
[ 1601.795054][T29698] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1601.802194][T29698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1602.557110][T20188] Bluetooth: hci2: command tx timeout
[ 1604.624432][T20188] Bluetooth: hci2: command tx timeout
[ 1606.053960][T12872] usb 7-1: new high-speed USB device number 83 using dummy_hcd
[ 1606.166536][T29809] lo speed is unknown, defaulting to 1000
[ 1606.184712][T12872] usb 7-1: device descriptor read/64, error -71
[ 1606.343652][T29698] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1606.420744][T29698] veth0_vlan: entered promiscuous mode
[ 1606.433401][T29698] veth1_vlan: entered promiscuous mode
[ 1606.444096][T12872] usb 7-1: new high-speed USB device number 84 using dummy_hcd
[ 1606.476414][T29698] veth0_macvtap: entered promiscuous mode
[ 1606.482262][T29698] veth1_macvtap: entered promiscuous mode
[ 1606.521964][T29698] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1606.573988][T12872] usb 7-1: device descriptor read/64, error -71
[ 1606.643751][T29698] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1606.654136][T29809] chnl_net:caif_netlink_parms(): no params data found
[ 1606.670053][T26954] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1606.690036][T12872] usb usb7-port1: attempt power cycle
[ 1606.696947][T20188] Bluetooth: hci2: command tx timeout
[ 1606.702869][T26954] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1606.715263][T26954] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1606.730313][T26954] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1607.033913][T12872] usb 7-1: new high-speed USB device number 85 using dummy_hcd
[ 1607.096656][T12872] usb 7-1: device descriptor read/8, error -71
[ 1607.334430][T12872] usb 7-1: new high-speed USB device number 86 using dummy_hcd
[ 1607.373746][T12872] usb 7-1: device descriptor read/8, error -71
[ 1607.402020][T29809] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1607.486648][T29809] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1607.489827][T29809] bridge_slave_0: entered allmulticast mode
[ 1608.942820][T12872] usb usb7-port1: unable to enumerate USB device
[ 1609.059146][T29809] bridge_slave_0: entered promiscuous mode
[ 1609.076476][T29809] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1609.081581][T29809] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1609.094804][T29809] bridge_slave_1: entered allmulticast mode
[ 1609.100962][T29809] bridge_slave_1: entered promiscuous mode
[ 1609.902136][T29809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1609.911591][T20382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1609.922504][T20382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1609.925530][T29809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1609.998551][T29809] team0: Port device team_slave_0 added
[ 1610.004465][T29809] team0: Port device team_slave_1 added
[ 1610.052554][T13658] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1610.064966][T13658] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1610.103906][ T6047] usb 7-1: new low-speed USB device number 87 using dummy_hcd
[ 1610.256230][ T6047] usb 7-1: config 0 has an invalid interface number: 55 but max is 0
[ 1610.259038][ T6047] usb 7-1: config 0 has no interface number 0
[ 1610.261139][ T6047] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1610.265618][ T6047] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[ 1610.269191][ T6047] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1610.273185][ T6047] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 1610.278689][ T6047] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[ 1610.282294][ T6047] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1610.287752][ T6047] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1610.291756][ T6047] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1610.299075][ T6047] usb 7-1: config 0 descriptor??
[ 1610.301432][T29862] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1610.304626][T29862] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[ 1610.308690][ T6047] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1610.345238][T29809] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1610.347943][T29809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1610.359290][T29809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1610.372173][T29809] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1610.384404][T29809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1610.403859][T29809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1610.471764][T29809] hsr_slave_0: entered promiscuous mode
[ 1610.476845][T29809] hsr_slave_1: entered promiscuous mode
[ 1610.479192][T29809] debugfs: 'hsr0' already exists in 'hsr'
[ 1610.481677][T29809] Cannot create hsr debugfs directory
[ 1610.531154][ T6047] usb 7-1: USB disconnect, device number 87
[ 1610.545696][ T6047] ldusb 7-1:0.55: LD USB Device #0 now disconnected
[ 1612.641027][    T9] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0
[ 1612.678868][    T9] hid-generic 0000:0000:0000.0020: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1613.135003][T26978] bridge_slave_1: left allmulticast mode
[ 1613.136955][T26978] bridge_slave_1: left promiscuous mode
[ 1613.141397][T26978] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1613.223114][T26978] bridge_slave_0: left allmulticast mode
[ 1613.278519][T26978] bridge_slave_0: left promiscuous mode
[ 1613.280580][T26978] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1613.725494][T29892] vivid-000: disconnect
[ 1613.895024][T29892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6875'.
[ 1614.188858][T29882] vivid-000: reconnect
[ 1614.948030][T26978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1615.025512][T26978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1615.084210][T26978] bond0 (unregistering): Released all slaves
[ 1616.519427][    C1] vcan0: j1939_tp_rxtimer: 0xffff888013705800: rx timeout, send abort
[ 1617.028135][    C1] vcan0: j1939_tp_rxtimer: 0xffff888013705800: abort rx timeout. Force session deactivation
[ 1617.982797][T20188] Bluetooth: Wrong link type (-57)
[ 1618.696288][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[ 1618.698750][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[ 1621.403351][T29809] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1621.536850][T29911] netlink: 'syz.3.6880': attribute type 39 has an invalid length.
[ 1621.541507][T29809] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1621.560463][T29809] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1621.644402][T29809] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1621.776468][T26978] hsr_slave_0: left promiscuous mode
[ 1621.786884][T26978] hsr_slave_1: left promiscuous mode
[ 1621.790226][T26978] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1621.853188][T26978] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1624.616128][T26978] team0 (unregistering): Port device team_slave_1 removed
[ 1624.995915][T26978] team0 (unregistering): Port device team_slave_0 removed
[ 1626.279384][T29809] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1626.311881][T29809] 8021q: adding VLAN 0 to HW filter on device team0
[ 1626.331695][T26960] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1626.334191][T26960] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1626.355930][T26960] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1626.358392][T26960] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1626.380191][T29809] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1626.483030][T29809] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1627.263089][T29932] binder: 29931:29932 ioctl 0 80000040 returned -22
[ 1630.123025][T18038] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1630.130267][T18038] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1630.151428][T18038] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1630.160747][T18038] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1630.170460][T18038] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1630.728584][T29950] lo speed is unknown, defaulting to 1000
[ 1630.736238][T29809] veth0_vlan: entered promiscuous mode
[ 1630.742619][T29809] veth1_vlan: entered promiscuous mode
[ 1630.798389][T29859] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0
[ 1630.803261][T29859] hid-generic 0000:0000:0000.0021: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1630.844802][T29809] veth0_macvtap: entered promiscuous mode
[ 1630.849765][T29809] veth1_macvtap: entered promiscuous mode
[ 1630.973934][T29809] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1630.984914][T29809] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1630.997942][T26979] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1631.001780][T26979] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1631.109850][T26979] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1631.190097][T26979] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1631.197705][T29950] chnl_net:caif_netlink_parms(): no params data found
[ 1631.284255][T26957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1631.287698][T26957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1631.373067][T26957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1631.375990][T26957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1631.379967][T29950] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1631.383112][T29950] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1631.389930][T29950] bridge_slave_0: entered allmulticast mode
[ 1631.394760][T29950] bridge_slave_0: entered promiscuous mode
[ 1631.407499][T29950] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1631.410452][T29950] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1631.413469][T29950] bridge_slave_1: entered allmulticast mode
[ 1631.416814][T29950] bridge_slave_1: entered promiscuous mode
[ 1631.472269][T29950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1631.488725][T29950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1632.214190][T18038] Bluetooth: hci0: command tx timeout
[ 1632.514310][T29950] team0: Port device team_slave_0 added
[ 1632.658129][T29950] team0: Port device team_slave_1 added
[ 1634.294345][T18038] Bluetooth: hci0: command tx timeout
[ 1634.461641][T29950] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1634.479974][T29950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1634.507781][T29950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1634.563290][T29950] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1634.726606][T29950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1634.753854][T29950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1634.942191][T29950] hsr_slave_0: entered promiscuous mode
[ 1634.970267][T29950] hsr_slave_1: entered promiscuous mode
[ 1634.977448][T29950] debugfs: 'hsr0' already exists in 'hsr'
[ 1634.979733][T29950] Cannot create hsr debugfs directory
[ 1635.679752][T29979] netlink: 'syz.3.6891': attribute type 4 has an invalid length.
[ 1635.682789][T29979] netlink: 17 bytes leftover after parsing attributes in process `syz.3.6891'.
[ 1636.384298][T18038] Bluetooth: hci0: command tx timeout
[ 1638.454217][T18038] Bluetooth: hci0: command tx timeout
[ 1642.813955][T27033] usb 7-1: new high-speed USB device number 88 using dummy_hcd
[ 1643.110468][T27033] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1643.114513][T27033] usb 7-1: config 0 has no interfaces?
[ 1643.116448][T27033] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1643.119596][T27033] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1643.125098][T27033] usb 7-1: config 0 descriptor??
[ 1643.709514][T14091] usb 7-1: USB disconnect, device number 88
[ 1646.203624][ T3681] bridge_slave_1: left allmulticast mode
[ 1646.207346][ T3681] bridge_slave_1: left promiscuous mode
[ 1646.210428][ T3681] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1646.230803][ T3681] bridge_slave_0: left allmulticast mode
[ 1646.232765][ T3681] bridge_slave_0: left promiscuous mode
[ 1646.235107][ T3681] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1647.145746][T30009] block device autoloading is deprecated and will be removed.
[ 1647.207097][ T3681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1647.213620][ T3681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1647.220821][ T3681] bond0 (unregistering): (slave team0): Releasing backup interface
[ 1647.226601][ T3681] bond0 (unregistering): Released all slaves
[ 1647.242008][T30000] lo: entered allmulticast mode
[ 1647.244708][T30000] lo: left allmulticast mode
[ 1647.308888][ T3681] tipc: Left network mode
[ 1647.441899][T29950] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1647.452365][T29950] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1647.473068][T29950] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1647.478377][T29950] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1647.628806][T29950] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1647.636947][T30024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6900'.
[ 1647.642191][T29950] 8021q: adding VLAN 0 to HW filter on device team0
[ 1647.648348][ T1261] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1647.651529][ T1261] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1647.678571][ T1261] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1647.681365][ T1261] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1647.792885][ T3681] hsr_slave_0: left promiscuous mode
[ 1647.801908][ T3681] hsr_slave_1: left promiscuous mode
[ 1647.821100][ T3681] veth1_macvtap: left promiscuous mode
[ 1647.823402][ T3681] veth0_macvtap: left promiscuous mode
[ 1647.827884][ T3681] veth1_vlan: left promiscuous mode
[ 1647.829923][ T3681] veth0_vlan: left promiscuous mode
[ 1648.805512][ T3681] team0 (unregistering): Port device team_slave_1 removed
[ 1648.879331][ T3681] team0 (unregistering): Port device team_slave_0 removed
[ 1649.837118][T29950] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1649.876991][T18038] Bluetooth: hci2: connection err: -111
[ 1650.087064][T29950] veth0_vlan: entered promiscuous mode
[ 1650.092410][T29950] veth1_vlan: entered promiscuous mode
[ 1650.130035][T29950] veth0_macvtap: entered promiscuous mode
[ 1650.133449][T30078] input: syz0 as /devices/virtual/input/input73
[ 1650.156007][T29950] veth1_macvtap: entered promiscuous mode
[ 1650.186261][T29950] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1650.199419][T29950] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1650.213050][T26954] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1650.216548][T26954] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1650.220139][T26954] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1650.223280][T26954] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1650.340986][ T3681] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1650.373989][T29685] usb 7-1: new high-speed USB device number 89 using dummy_hcd
[ 1650.450219][ T3681] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1650.532680][T29685] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[ 1650.537073][T29685] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1650.546246][T29685] usb 7-1: Product: syz
[ 1650.547789][T29685] usb 7-1: Manufacturer: syz
[ 1650.549315][T29685] usb 7-1: SerialNumber: syz
[ 1650.552620][ T3681] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1650.617197][ T3681] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1650.785661][ T3681] bridge_slave_1: left allmulticast mode
[ 1650.788173][ T3681] bridge_slave_1: left promiscuous mode
[ 1650.790404][ T3681] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1650.796657][ T3681] bridge_slave_0: left allmulticast mode
[ 1650.799011][ T3681] bridge_slave_0: left promiscuous mode
[ 1650.801619][ T3681] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1651.000976][T29685] rtl8150 7-1:1.0: couldn't reset the device
[ 1651.005034][T29685] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5
[ 1651.011137][T29685] usb 7-1: USB disconnect, device number 89
[ 1651.197034][ T3681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1651.203077][ T3681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1651.208911][ T3681] bond0 (unregistering): Released all slaves
[ 1652.213883][  T143] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[ 1652.213929][T18038] Bluetooth: hci1: command 0x0406 tx timeout
[ 1652.216330][  T143] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[ 1654.293991][T18038] Bluetooth: hci3: command 0x0c1a tx timeout
[ 1654.294175][  T143] Bluetooth: hci3: Opcode 0x0c1a failed: -110
[ 1654.299041][  T143] Bluetooth: hci3: Error when powering off device on rfkill (-110)
[ 1656.373922][  T143] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[ 1656.374056][T18038] Bluetooth: hci2: command 0x0c1a tx timeout
[ 1656.375999][  T143] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[ 1658.454010][  T143] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[ 1658.456043][  T143] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[ 1658.547428][ T1261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1658.550095][ T1261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1658.570838][T29995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1658.574086][T29995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1658.662293][ T3681] hsr_slave_0: left promiscuous mode
[ 1658.667790][ T3681] hsr_slave_1: left promiscuous mode
[ 1658.670198][ T3681] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1658.673312][ T3681] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1658.678522][ T3681] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1658.681377][ T3681] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1658.697861][ T3681] veth1_macvtap: left promiscuous mode
[ 1658.704011][ T3681] veth0_macvtap: left promiscuous mode
[ 1658.713935][ T3681] veth1_vlan: left promiscuous mode
[ 1658.715740][ T3681] veth0_vlan: left promiscuous mode
[ 1659.209012][ T3681] team0 (unregistering): Port device team_slave_1 removed
[ 1659.245768][ T3681] team0 (unregistering): Port device team_slave_0 removed
[ 1659.418527][T30127] nvme_fabrics: missing parameter 'transport=%s'
[ 1659.439114][T30127] nvme_fabrics: missing parameter 'nqn=%s'
[ 1659.732738][T30126] netlink: 'syz.3.6928': attribute type 2 has an invalid length.
[ 1659.740153][T30126] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6928'.
[ 1659.844156][   T41] audit: type=1800 audit(1543515912.984:2158): pid=30132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.6929" name="bus" dev="ramfs" ino=122518 res=0 errno=0
[ 1659.963054][T30136] syzkaller0: entered promiscuous mode
[ 1659.965344][T30136] syzkaller0: entered allmulticast mode
[ 1660.564543][T27033] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[ 1660.725738][T27033] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1660.729200][T27033] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 1660.733761][T27033] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1660.737004][T27033] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1660.741171][T27033] usb 10-1: config 0 descriptor??
[ 1660.745040][T27033] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[ 1660.843893][T27545] usb 11-1: new high-speed USB device number 18 using dummy_hcd
[ 1661.003963][T27545] usb 11-1: Using ep0 maxpacket: 8
[ 1661.015321][T27545] usb 11-1: unable to get BOS descriptor or descriptor too short
[ 1661.020617][T14091] usb 10-1: USB disconnect, device number 7
[ 1661.022911][T27545] usb 11-1: config 0 has no interfaces?
[ 1661.032680][T27545] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1661.036148][T27545] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1661.038988][T27545] usb 11-1: Product: syz
[ 1661.040425][T27545] usb 11-1: Manufacturer: syz
[ 1661.042081][T27545] usb 11-1: SerialNumber: syz
[ 1661.045541][T27545] usb 11-1: config 0 descriptor??
[ 1661.126694][   T41] audit: type=1326 audit(1543515914.274:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30146 comm="syz.2.6935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000
[ 1661.133765][   T41] audit: type=1326 audit(1543515914.274:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30146 comm="syz.2.6935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000
[ 1661.141228][   T41] audit: type=1326 audit(1543515914.274:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30146 comm="syz.2.6935" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7ff5579 code=0x7ffc0000
[ 1661.174840][   T41] audit: type=1326 audit(1543515914.314:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30146 comm="syz.2.6935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000
[ 1661.192285][   T41] audit: type=1326 audit(1543515914.314:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30146 comm="syz.2.6935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000
[ 1661.202014][   T41] audit: type=1326 audit(1543515914.324:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30146 comm="syz.2.6935" exe="/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7ff5579 code=0x7ffc0000
[ 1661.209150][   T41] audit: type=1326 audit(1543515914.324:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30146 comm="syz.2.6935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000
[ 1661.216435][   T41] audit: type=1326 audit(1543515914.324:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30146 comm="syz.2.6935" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000
[ 1661.223371][   T41] audit: type=1326 audit(1543515914.334:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30146 comm="syz.2.6935" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7ff5579 code=0x7ffc0000
[ 1661.225596][T30149] lo speed is unknown, defaulting to 1000
[ 1661.256180][T27763] usb 11-1: USB disconnect, device number 18
[ 1661.648648][T30166] syzkaller0: entered promiscuous mode
[ 1661.650466][T30166] syzkaller0: entered allmulticast mode
[ 1661.663580][T30167] 9pnet_fd: Insufficient options for proto=fd
[ 1661.753058][T30167] overlayfs: overlapping lowerdir path
[ 1661.773480][T30171] Error: Driver 'c6xdigio' is already registered, aborting...
[ 1662.296510][T30195] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6948'.
[ 1662.301596][T30195] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6948'.
[ 1662.933893][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1663.020257][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1663.055635][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1665.456814][T30228] tipc: Started in network mode
[ 1665.458440][T30228] tipc: Node identity 6afea8624498, cluster identity 4711
[ 1665.460848][T30228] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1665.463596][T30228] syzkaller0: entered promiscuous mode
[ 1665.466329][T30228] syzkaller0: entered allmulticast mode
[ 1665.480482][T30227] tipc: Resetting bearer <eth:syzkaller0>
[ 1665.494011][T30227] tipc: Disabling bearer <eth:syzkaller0>
[ 1665.741291][T30235] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6962'.
[ 1665.869721][T30239] blktrace: Concurrent blktraces are not allowed on nullb0
[ 1666.386297][T30254] tipc: Started in network mode
[ 1666.388119][T30254] tipc: Node identity 9a03bbf5fe6d, cluster identity 4711
[ 1666.390613][T30254] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1666.393379][T30254] syzkaller0: entered promiscuous mode
[ 1666.395532][T30254] syzkaller0: entered allmulticast mode
[ 1666.409578][T30253] tipc: Resetting bearer <eth:syzkaller0>
[ 1666.425038][T30253] tipc: Disabling bearer <eth:syzkaller0>
[ 1666.669334][T30261] netlink: 'syz.5.6973': attribute type 4 has an invalid length.
[ 1666.676654][T30261] netlink: 17 bytes leftover after parsing attributes in process `syz.5.6973'.
[ 1667.963982][  T143] usb 11-1: new high-speed USB device number 19 using dummy_hcd
[ 1668.122758][  T143] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1668.127544][  T143] usb 11-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 1668.132117][  T143] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1668.143162][  T143] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1668.154634][  T143] usb 11-1: config 0 descriptor??
[ 1668.164444][  T143] usbhid 11-1:0.0: couldn't find an input interrupt endpoint
[ 1668.474916][T30301] netlink: 2 bytes leftover after parsing attributes in process `syz.5.6984'.
[ 1669.693912][T27763] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[ 1669.856019][T27763] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1669.862274][T27763] usb 10-1: config 0 has no interfaces?
[ 1669.865241][T27763] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1669.869387][T27763] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1669.874835][T27763] usb 10-1: config 0 descriptor??
[ 1670.136775][T27763] usb 10-1: USB disconnect, device number 8
[ 1670.424046][T14091] usb 7-1: new full-speed USB device number 90 using dummy_hcd
[ 1670.575669][T14091] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1670.580098][T14091] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[ 1670.584793][T14091] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 1670.588920][T14091] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1670.594573][T14091] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1670.598593][T14091] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1670.607217][T14091] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[ 1670.610826][T14091] usb 7-1: invalid MIDI out EP 0
[ 1670.639992][T14091] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 1670.702023][  T143] usb 11-1: USB disconnect, device number 19
[ 1670.810127][T14091] usb 7-1: USB disconnect, device number 90
[ 1671.001516][T30336] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1671.006962][T30336] syzkaller0: entered promiscuous mode
[ 1671.009526][T30336] syzkaller0: entered allmulticast mode
[ 1671.019922][T30336] tipc: Resetting bearer <eth:syzkaller0>
[ 1671.025761][T30335] tipc: Resetting bearer <eth:syzkaller0>
[ 1671.036864][T30335] tipc: Disabling bearer <eth:syzkaller0>
[ 1671.577030][T30350] netlink: 'syz.2.7007': attribute type 4 has an invalid length.
[ 1671.579745][T30350] netlink: 17 bytes leftover after parsing attributes in process `syz.2.7007'.
[ 1672.728909][T30378] tipc: Started in network mode
[ 1672.730591][T30378] tipc: Node identity 0271fe3d2f1d, cluster identity 4711
[ 1672.733300][T30378] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1672.742443][T30378] syzkaller0: entered promiscuous mode
[ 1672.744439][T30378] syzkaller0: entered allmulticast mode
[ 1672.750793][T30378] tipc: Resetting bearer <eth:syzkaller0>
[ 1672.764707][T30377] tipc: Resetting bearer <eth:syzkaller0>
[ 1672.781639][T30377] tipc: Disabling bearer <eth:syzkaller0>
[ 1672.944450][T30384] netlink: 'syz.3.7019': attribute type 4 has an invalid length.
[ 1672.947962][T30384] netlink: 17 bytes leftover after parsing attributes in process `syz.3.7019'.
[ 1673.513996][  T143] usb 11-1: new high-speed USB device number 20 using dummy_hcd
[ 1673.685557][  T143] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1673.687593][T30394] netlink: 'syz.2.7022': attribute type 2 has an invalid length.
[ 1673.688860][  T143] usb 11-1: config 0 has no interfaces?
[ 1673.688880][  T143] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1673.688892][  T143] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1673.690260][  T143] usb 11-1: config 0 descriptor??
[ 1673.691653][T30394] netlink: 108 bytes leftover after parsing attributes in process `syz.2.7022'.
[ 1673.967247][T27763] usb 11-1: USB disconnect, device number 20
[ 1675.018018][T30406] tipc: Started in network mode
[ 1675.024202][T30406] tipc: Node identity 76c14093847f, cluster identity 4711
[ 1675.034671][T30406] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1675.047970][T30406] syzkaller0: entered promiscuous mode
[ 1675.049844][T30406] syzkaller0: entered allmulticast mode
[ 1675.069211][T30406] tipc: Resetting bearer <eth:syzkaller0>
[ 1675.077677][T30405] tipc: Resetting bearer <eth:syzkaller0>
[ 1675.091511][T30405] tipc: Disabling bearer <eth:syzkaller0>
[ 1676.129743][T30426] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1676.132560][T30426] syzkaller0: entered promiscuous mode
[ 1676.135154][T30426] syzkaller0: entered allmulticast mode
[ 1676.143239][T30426] tipc: Resetting bearer <eth:syzkaller0>
[ 1676.147469][T30425] tipc: Resetting bearer <eth:syzkaller0>
[ 1676.155479][  T143] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[ 1676.161502][T30425] tipc: Disabling bearer <eth:syzkaller0>
[ 1676.303959][  T143] usb 10-1: Using ep0 maxpacket: 8
[ 1676.307365][  T143] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[ 1676.310205][  T143] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1676.313624][  T143] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1676.317223][  T143] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1676.320803][  T143] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1676.325635][  T143] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1676.328774][  T143] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1676.541942][  T143] usb 10-1: usb_control_msg returned -32
[ 1676.544371][  T143] usbtmc 10-1:16.0: can't read capabilities
[ 1677.362257][T30463] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1677.640828][T30470] netlink: 'syz.2.7052': attribute type 4 has an invalid length.
[ 1677.644241][T30470] netlink: 17 bytes leftover after parsing attributes in process `syz.2.7052'.
[ 1677.969793][    T9] libceph: connect (1)[c::]:6789 error -101
[ 1677.972540][    T9] libceph: mon0 (1)[c::]:6789 connect error
[ 1678.239173][    T9] libceph: connect (1)[c::]:6789 error -101
[ 1678.242370][    T9] libceph: mon0 (1)[c::]:6789 connect error
[ 1678.547472][T30478] ceph: No mds server is up or the cluster is laggy
[ 1678.959476][   T53] usb 10-1: USB disconnect, device number 9
[ 1679.552286][T30507] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1679.590591][T30507] syzkaller0: entered promiscuous mode
[ 1679.592527][T30507] syzkaller0: entered allmulticast mode
[ 1679.638687][T30507] tipc: Resetting bearer <eth:syzkaller0>
[ 1679.672328][T30506] tipc: Resetting bearer <eth:syzkaller0>
[ 1679.762981][T30506] tipc: Disabling bearer <eth:syzkaller0>
[ 1680.137017][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[ 1680.139153][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[ 1680.223297][T30530] blktrace: Concurrent blktraces are not allowed on nullb0
[ 1680.283930][    T9] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[ 1680.454013][    T9] usb 10-1: Using ep0 maxpacket: 8
[ 1680.462593][    T9] usb 10-1: config index 0 descriptor too short (expected 301, got 45)
[ 1680.469965][    T9] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1680.478631][    T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1680.488859][    T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1680.498103][    T9] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1680.507020][    T9] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1680.515495][    T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1680.737907][    T9] usb 10-1: usb_control_msg returned -32
[ 1680.741396][    T9] usbtmc 10-1:16.0: can't read capabilities
[ 1681.030683][  T848] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0
[ 1681.046144][  T848] hid-generic 0000:0000:0000.0022: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1682.303984][  T848] usb 11-1: new high-speed USB device number 21 using dummy_hcd
[ 1682.463781][T30566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7088'.
[ 1682.475389][  T848] usb 11-1: config 0 has no interfaces?
[ 1682.480322][  T848] usb 11-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02
[ 1682.486996][  T848] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1682.490641][  T848] usb 11-1: SerialNumber: syz
[ 1682.494673][  T848] usb 11-1: config 0 descriptor??
[ 1683.060491][   T53] usb 10-1: USB disconnect, device number 10
[ 1684.052827][   T41] kauditd_printk_skb: 17 callbacks suppressed
[ 1684.052843][   T41] audit: type=1326 audit(1543515938.195:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30598 comm="syz.5.7099" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000
[ 1684.078640][   T41] audit: type=1326 audit(1543515938.215:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30598 comm="syz.5.7099" exe="/syz-executor" sig=0 arch=40000003 syscall=315 compat=1 ip=0xf701d579 code=0x7ffc0000
[ 1684.093062][   T41] audit: type=1326 audit(1543515938.215:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30598 comm="syz.5.7099" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000
[ 1684.106277][   T41] audit: type=1326 audit(1543515938.215:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30598 comm="syz.5.7099" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701d579 code=0x7ffc0000
[ 1684.129238][T30602] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[ 1684.133507][T30602] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off.
[ 1684.138920][T30602] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null.
[ 1684.214339][  T143] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0
[ 1684.224758][  T143] hid-generic 0000:0000:0000.0023: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1684.963016][T30630] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1684.966940][T30630] syzkaller0: entered promiscuous mode
[ 1684.969351][T30630] syzkaller0: entered allmulticast mode
[ 1684.989971][T30630] tipc: Resetting bearer <eth:syzkaller0>
[ 1684.995198][T30629] tipc: Resetting bearer <eth:syzkaller0>
[ 1685.003977][T18039] usb 7-1: new high-speed USB device number 91 using dummy_hcd
[ 1685.008977][T30629] tipc: Disabling bearer <eth:syzkaller0>
[ 1685.070931][T12756] usb 11-1: USB disconnect, device number 21
[ 1685.181032][T18039] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1685.185732][T18039] usb 7-1: config 0 has no interfaces?
[ 1685.188276][T18039] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1685.193129][T18039] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1685.199675][T18039] usb 7-1: config 0 descriptor??
[ 1685.335778][T30648] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1685.338857][T30648] block nbd0: shutting down sockets
[ 1685.412474][T30652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7120'.
[ 1685.476200][T18039] usb 7-1: USB disconnect, device number 91
[ 1687.074066][  T143] usb 11-1: new high-speed USB device number 22 using dummy_hcd
[ 1687.237258][  T143] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1687.247830][  T143] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1687.252307][  T143] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1687.259138][  T143] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1687.263248][  T143] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1687.269310][  T143] usb 11-1: config 0 descriptor??
[ 1687.356579][T12756] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0
[ 1687.371075][T12756] hid-generic 0000:0000:0000.0024: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1687.693594][  T143] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[ 1687.883945][ T1031] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[ 1688.046471][ T1031] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1688.051567][ T1031] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 1688.057949][ T1031] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1688.061978][ T1031] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1688.072454][ T1031] usb 10-1: config 0 descriptor??
[ 1688.079278][ T1031] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[ 1688.105973][T30728] binder: 30719:30728 ioctl c0306201 0 returned -14
[ 1688.286288][    C3] plantronics 0003:047F:FFFF.0025: hid_field_extract() called with n (132) > 32! (syz.2.7145)
[ 1688.492061][T27763] usb 11-1: USB disconnect, device number 22
[ 1688.922043][T30734] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7146'.
[ 1689.125395][T30740] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1689.414154][ T1031] usb 11-1: new high-speed USB device number 23 using dummy_hcd
[ 1689.575643][ T1031] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1689.580111][ T1031] usb 11-1: config 0 has no interfaces?
[ 1689.582759][ T1031] usb 11-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1689.587232][ T1031] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1689.593575][ T1031] usb 11-1: config 0 descriptor??
[ 1689.853567][T18039] usb 11-1: USB disconnect, device number 23
[ 1690.640506][  T143] usb 10-1: USB disconnect, device number 11
[ 1690.890153][T30755] binder: 30753:30755 ioctl 0 80000040 returned -22
[ 1691.334000][   T53] usb 7-1: new high-speed USB device number 92 using dummy_hcd
[ 1691.497458][   T53] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[ 1691.500481][   T53] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1691.503135][   T53] usb 7-1: Product: syz
[ 1691.505254][   T53] usb 7-1: Manufacturer: syz
[ 1691.506963][   T53] usb 7-1: SerialNumber: syz
[ 1691.509939][   T53] usb 7-1: config 0 descriptor??
[ 1691.513614][   T53] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[ 1691.519807][   T53] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1691.523338][   T53] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[ 1691.526786][   T53] usb 7-1: media controller created
[ 1691.537481][   T53] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1691.562394][   T53] DVB: Unable to find symbol mt352_attach()
[ 1691.582915][   T53] DVB: Unable to find symbol nxt6000_attach()
[ 1691.585121][   T53] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[ 1691.590620][   T53] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input75
[ 1691.596378][   T53] dvb-usb: schedule remote query interval to 1000 msecs.
[ 1691.598953][   T53] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[ 1691.602338][   T53] dvb-usb: bulk message failed: -22 (7/0)
[ 1691.604460][   T53] dvb-usb: bulk message failed: -22 (7/0)
[ 1691.719711][    T9] usb 7-1: USB disconnect, device number 92
[ 1691.738347][    T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[ 1692.253028][T30774] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7160'.
[ 1694.226232][T30815] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1694.232118][T30815] syzkaller0: entered promiscuous mode
[ 1694.234605][T30815] syzkaller0: entered allmulticast mode
[ 1694.250879][T30815] tipc: Resetting bearer <eth:syzkaller0>
[ 1694.256577][T30814] tipc: Resetting bearer <eth:syzkaller0>
[ 1694.276204][T30814] tipc: Disabling bearer <eth:syzkaller0>
[ 1694.783983][  T848] usb 7-1: new high-speed USB device number 93 using dummy_hcd
[ 1694.934788][  T848] usb 7-1: Using ep0 maxpacket: 8
[ 1694.945572][  T848] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[ 1694.949023][  T848] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1694.952922][  T848] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1694.956703][  T848] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1694.960903][  T848] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1694.966329][  T848] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1694.970144][  T848] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1695.180788][  T848] usb 7-1: GET_CAPABILITIES returned 0
[ 1695.184025][  T848] usbtmc 7-1:16.0: can't read capabilities
[ 1696.951268][T30859] blktrace: Concurrent blktraces are not allowed on nullb0
[ 1697.574050][  T848] usb 7-1: USB disconnect, device number 93
[ 1697.836511][T30891] netlink: 'syz.3.7201': attribute type 4 has an invalid length.
[ 1697.839172][T30891] netlink: 17 bytes leftover after parsing attributes in process `syz.3.7201'.
[ 1698.403928][  T848] usb 7-1: new high-speed USB device number 94 using dummy_hcd
[ 1698.554505][  T848] usb 7-1: Using ep0 maxpacket: 8
[ 1698.559804][  T848] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1698.564148][  T848] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1698.568394][  T848] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 1698.572542][  T848] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[ 1698.576827][  T848] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1698.582303][  T848] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1698.586327][  T848] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1698.594182][  T848] usbtmc 7-1:16.0: probe with driver usbtmc failed with error -22
[ 1698.613999][T27763] usb 11-1: new high-speed USB device number 24 using dummy_hcd
[ 1698.763961][T27763] usb 11-1: Using ep0 maxpacket: 8
[ 1698.768500][T27763] usb 11-1: config index 0 descriptor too short (expected 301, got 45)
[ 1698.772200][T27763] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1698.779458][T27763] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1698.784102][T27763] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1698.788541][T27763] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1698.794512][T27763] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1698.798681][T27763] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1698.994610][T30913] blktrace: Concurrent blktraces are not allowed on nullb0
[ 1699.013370][T27763] usb 11-1: GET_CAPABILITIES returned 0
[ 1699.021478][T27763] usbtmc 11-1:16.0: can't read capabilities
[ 1699.988493][T30924] netlink: 'syz.5.7212': attribute type 2 has an invalid length.
[ 1699.991228][T30924] netlink: 108 bytes leftover after parsing attributes in process `syz.5.7212'.
[ 1700.727096][T30928] netlink: 'syz.3.7213': attribute type 4 has an invalid length.
[ 1700.730001][T30928] netlink: 17 bytes leftover after parsing attributes in process `syz.3.7213'.
[ 1700.932468][T30931] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1700.936989][T30931] syzkaller0: entered promiscuous mode
[ 1700.938874][T30931] syzkaller0: entered allmulticast mode
[ 1700.960487][T30931] tipc: Resetting bearer <eth:syzkaller0>
[ 1700.966560][T30930] tipc: Resetting bearer <eth:syzkaller0>
[ 1700.981315][T30930] tipc: Disabling bearer <eth:syzkaller0>
[ 1701.118630][T30933] netlink: 'syz.5.7215': attribute type 4 has an invalid length.
[ 1701.122260][T30933] netlink: 17 bytes leftover after parsing attributes in process `syz.5.7215'.
[ 1701.179500][T12756] usb 7-1: USB disconnect, device number 94
[ 1701.402584][T29859] usb 11-1: USB disconnect, device number 24
[ 1701.963948][ T1031] usb 11-1: new full-speed USB device number 25 using dummy_hcd
[ 1702.127130][ T1031] usb 11-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[ 1702.130327][ T1031] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1702.133069][ T1031] usb 11-1: Product: syz
[ 1702.134748][ T1031] usb 11-1: Manufacturer: syz
[ 1702.136396][ T1031] usb 11-1: SerialNumber: syz
[ 1702.139246][ T1031] usb 11-1: config 0 descriptor??
[ 1702.250605][T30957] netlink: 'syz.3.7222': attribute type 2 has an invalid length.
[ 1702.253347][T30957] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7222'.
[ 1702.344831][ T1031] usb 11-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[ 1704.519250][ T1031] dvb_usb_rtl28xxu 11-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[ 1704.523644][ T1031] usb 11-1: USB disconnect, device number 25
[ 1704.667022][T30986] netlink: 'syz.2.7232': attribute type 2 has an invalid length.
[ 1704.669705][T30986] netlink: 108 bytes leftover after parsing attributes in process `syz.2.7232'.
[ 1704.729769][T30990] netlink: 'syz.5.7234': attribute type 4 has an invalid length.
[ 1704.733269][T30990] netlink: 17 bytes leftover after parsing attributes in process `syz.5.7234'.
[ 1705.439418][T31005] vlan2: entered promiscuous mode
[ 1705.441105][T31005] bridge0: entered promiscuous mode
[ 1706.671664][T31038] netlink: 'syz.5.7253': attribute type 2 has an invalid length.
[ 1706.674604][T31038] netlink: 108 bytes leftover after parsing attributes in process `syz.5.7253'.
[ 1707.227288][T31052] netlink: 'syz.2.7260': attribute type 4 has an invalid length.
[ 1707.229970][T31052] netlink: 17 bytes leftover after parsing attributes in process `syz.2.7260'.
[ 1707.389945][T11625] usb 11-1: new high-speed USB device number 26 using dummy_hcd
[ 1707.543873][T11625] usb 11-1: Using ep0 maxpacket: 16
[ 1707.547923][T11625] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1707.552203][T11625] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1707.556171][T11625] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1707.584113][T11625] usb 11-1: config 0 descriptor??
[ 1707.998766][T11625] mcp2221 0003:04D8:00DD.0026: unknown main item tag 0x0
[ 1708.009556][T11625] mcp2221 0003:04D8:00DD.0026: unknown main item tag 0x0
[ 1708.020513][T11625] mcp2221 0003:04D8:00DD.0026: unknown main item tag 0x0
[ 1708.029245][T11625] mcp2221 0003:04D8:00DD.0026: unknown main item tag 0x0
[ 1708.033518][T11625] mcp2221 0003:04D8:00DD.0026: unknown main item tag 0x0
[ 1708.046368][T11625] mcp2221 0003:04D8:00DD.0026: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0
[ 1708.304474][ T1031] IPVS: starting estimator thread 0...
[ 1708.392257][ T1031] usb 11-1: USB disconnect, device number 26
[ 1708.413987][T31072] IPVS: using max 43 ests per chain, 103200 per kthread
[ 1709.355267][T31109] netlink: 'syz.5.7281': attribute type 4 has an invalid length.
[ 1709.358026][T31109] netlink: 17 bytes leftover after parsing attributes in process `syz.5.7281'.
[ 1710.022899][T31119] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore
[ 1710.028044][T31119] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1710.550132][T31143] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1710.558425][T31143] syzkaller0: entered promiscuous mode
[ 1710.561280][T31143] syzkaller0: entered allmulticast mode
[ 1710.587794][T31143] sch_tbf: peakrate 1025 is lower than or equals to rate 14583 !
[ 1710.601682][T31143] tipc: Resetting bearer <eth:syzkaller0>
[ 1710.610891][T31142] tipc: Resetting bearer <eth:syzkaller0>
[ 1710.640367][T31142] tipc: Disabling bearer <eth:syzkaller0>
[ 1711.057682][T31156] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1711.082885][T31156] kvm: pic: non byte read
[ 1711.088366][T31156] kvm: pic: level sensitive irq not supported
[ 1711.089870][T31156] kvm: pic: non byte read
[ 1711.097177][T31156] kvm: pic: single mode not supported
[ 1711.097800][T31156] kvm: pic: non byte read
[ 1711.103539][T31156] kvm: pic: non byte read
[ 1711.399644][T31168] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1711.402486][T31168] syzkaller0: entered promiscuous mode
[ 1711.405449][T31168] syzkaller0: entered allmulticast mode
[ 1711.419196][T31168] tipc: Resetting bearer <eth:syzkaller0>
[ 1711.422740][T31167] tipc: Resetting bearer <eth:syzkaller0>
[ 1711.435235][T31167] tipc: Disabling bearer <eth:syzkaller0>
[ 1711.551815][T31170] netlink: 'syz.5.7300': attribute type 4 has an invalid length.
[ 1711.554533][T31170] netlink: 17 bytes leftover after parsing attributes in process `syz.5.7300'.
[ 1712.763921][T14091] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[ 1712.920239][   T41] audit: type=1326 audit(1543515967.065:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31183 comm="syz.2.7305" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000
[ 1712.929913][   T41] audit: type=1326 audit(1543515967.065:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31183 comm="syz.2.7305" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7ff5579 code=0x7ffc0000
[ 1712.936021][T14091] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1712.941064][   T41] audit: type=1326 audit(1543515967.065:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31183 comm="syz.2.7305" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000
[ 1712.945011][T14091] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 1712.953180][   T41] audit: type=1326 audit(1543515967.065:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31183 comm="syz.2.7305" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7ff5579 code=0x7ffc0000
[ 1712.958384][T14091] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1712.967754][   T41] audit: type=1326 audit(1543515967.065:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31183 comm="syz.2.7305" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000
[ 1712.970982][T14091] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1712.980087][   T41] audit: type=1326 audit(1543515967.065:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31183 comm="syz.2.7305" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7ff5579 code=0x7ffc0000
[ 1712.984976][T14091] usb 10-1: config 0 descriptor??
[ 1712.991354][   T41] audit: type=1326 audit(1543515967.065:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31183 comm="syz.2.7305" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000
[ 1712.994907][T14091] usbhid 10-1:0.0: couldn't find an input interrupt endpoint
[ 1713.000063][   T41] audit: type=1326 audit(1543515967.065:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31183 comm="syz.2.7305" exe="/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf7ff5579 code=0x7ffc0000
[ 1713.009492][   T41] audit: type=1326 audit(1543515967.065:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31183 comm="syz.2.7305" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff5579 code=0x7ffc0000
[ 1713.016710][   T41] audit: type=1326 audit(1543515967.065:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31183 comm="syz.2.7305" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7ff5579 code=0x7ffc0000
[ 1713.143881][T31190] binder: 31188:31190 ioctl 0 80000040 returned -22
[ 1713.987971][T31194] usb usb8: usbfs: process 31194 (syz.6.7307) did not claim interface 0 before use
[ 1714.237784][T31208] netlink: 'syz.6.7312': attribute type 21 has an invalid length.
[ 1714.241892][T31208] netlink: 'syz.6.7312': attribute type 1 has an invalid length.
[ 1714.245930][T31208] netlink: 144 bytes leftover after parsing attributes in process `syz.6.7312'.
[ 1715.322577][T31222] binder: 31218:31222 ioctl 0 80000040 returned -22
[ 1715.512315][T27545] usb 10-1: USB disconnect, device number 12
[ 1715.933872][T27545] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[ 1716.304263][T27545] usb 10-1: Using ep0 maxpacket: 8
[ 1716.314569][T27545] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1716.317934][T27545] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1716.321311][T27545] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1716.324849][T27545] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1716.329450][T27545] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1716.332633][T27545] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1716.542104][T27545] usb 10-1: usb_control_msg returned -32
[ 1716.544218][T27545] usbtmc 10-1:16.0: can't read capabilities
[ 1716.548499][T27545] usb 10-1: USB disconnect, device number 13
[ 1717.017766][T31240] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1718.203912][T14091] usb 11-1: new high-speed USB device number 27 using dummy_hcd
[ 1718.216959][   T49] usb 7-1: new high-speed USB device number 95 using dummy_hcd
[ 1718.227159][T31275] netlink: 'syz.3.7335': attribute type 4 has an invalid length.
[ 1718.229717][T31275] netlink: 17 bytes leftover after parsing attributes in process `syz.3.7335'.
[ 1718.237819][T31272] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1718.354319][T14091] usb 11-1: too many configurations: 9, using maximum allowed: 8
[ 1718.358356][T14091] usb 11-1: config 0 has no interfaces?
[ 1718.361051][T14091] usb 11-1: config 0 has no interfaces?
[ 1718.363917][T14091] usb 11-1: config 0 has no interfaces?
[ 1718.366541][T14091] usb 11-1: config 0 has no interfaces?
[ 1718.369569][T14091] usb 11-1: config 0 has no interfaces?
[ 1718.372296][T14091] usb 11-1: config 0 has no interfaces?
[ 1718.374336][   T49] usb 7-1: Using ep0 maxpacket: 8
[ 1718.377449][T14091] usb 11-1: config 0 has no interfaces?
[ 1718.379789][   T49] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1718.383085][   T49] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1718.386251][   T49] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1718.389566][T14091] usb 11-1: config 0 has no interfaces?
[ 1718.391446][   T49] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1718.397349][   T49] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1718.400432][   T49] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1718.404144][T14091] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[ 1718.407141][T14091] usb 11-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[ 1718.413345][T14091] usb 11-1: Product: syz
[ 1718.415057][T14091] usb 11-1: Manufacturer: syz
[ 1718.418920][T14091] usb 11-1: SerialNumber: syz
[ 1718.422397][T14091] usb 11-1: config 0 descriptor??
[ 1718.617255][   T49] usb 7-1: usb_control_msg returned -32
[ 1718.619784][   T49] usbtmc 7-1:16.0: can't read capabilities
[ 1718.625560][   T49] usb 7-1: USB disconnect, device number 95
[ 1718.635834][T27545] usb 11-1: USB disconnect, device number 27
[ 1719.533174][T31301] 9p: Unknown access argument 18446744073709551615: -34
[ 1719.681739][T31305] lo: entered allmulticast mode
[ 1719.699172][T31304] lo: left allmulticast mode
[ 1719.953948][T27545] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[ 1720.109137][T31311] netlink: 'syz.2.7349': attribute type 4 has an invalid length.
[ 1720.111791][T31311] netlink: 17 bytes leftover after parsing attributes in process `syz.2.7349'.
[ 1720.125567][T27545] usb 10-1: Using ep0 maxpacket: 8
[ 1720.138169][T27545] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1720.142623][T27545] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1720.147237][T27545] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1720.151613][T27545] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1720.157866][T27545] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1720.161890][T27545] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1720.379542][T27545] usb 10-1: usb_control_msg returned -32
[ 1720.381293][T27545] usbtmc 10-1:16.0: can't read capabilities
[ 1720.385060][T27545] usb 10-1: USB disconnect, device number 14
[ 1720.926299][T31320] netlink: 'syz.2.7353': attribute type 4 has an invalid length.
[ 1720.929053][T31320] netlink: 17 bytes leftover after parsing attributes in process `syz.2.7353'.
[ 1721.659083][T27545] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[ 1721.661585][T27545] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[ 1721.666611][T27545] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[ 1721.669094][T27545] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[ 1721.671550][T27545] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[ 1721.674614][T27545] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[ 1721.677255][T27545] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[ 1721.679616][T27545] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[ 1721.682004][T27545] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[ 1721.685111][T27545] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0
[ 1721.688573][T27545] hid-generic 0000:0000:0000.0027: hidraw0: <UNKNOWN> HID v8.00 Device [syz0] on syz0
[ 1722.033913][T27545] usb 11-1: new high-speed USB device number 28 using dummy_hcd
[ 1722.193879][T27545] usb 11-1: Using ep0 maxpacket: 8
[ 1722.197617][T27545] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1722.201608][T27545] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1722.204916][T27545] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1722.209003][T27545] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1722.215433][T27545] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1722.219347][T27545] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1722.322469][T31345] netlink: 'syz.2.7362': attribute type 4 has an invalid length.
[ 1722.326035][T31345] netlink: 17 bytes leftover after parsing attributes in process `syz.2.7362'.
[ 1722.444848][T27545] usb 11-1: usb_control_msg returned -32
[ 1722.447081][T27545] usbtmc 11-1:16.0: can't read capabilities
[ 1722.452180][T27545] usb 11-1: USB disconnect, device number 28
[ 1723.150529][T31360] serio: Serial port ptm0
[ 1723.282638][T31360] serio: Serial port ptm0
[ 1723.338705][T18039] IPVS: starting estimator thread 0...
[ 1723.424107][T31369] IPVS: using max 28 ests per chain, 67200 per kthread
[ 1723.655289][T12756] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[ 1723.813960][T12756] usb 10-1: Using ep0 maxpacket: 8
[ 1723.817279][T12756] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1723.820635][T12756] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1723.824501][T12756] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1723.828005][T12756] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1723.832331][T12756] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1723.835558][T12756] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1724.066580][T12756] usb 10-1: usb_control_msg returned -32
[ 1724.068901][T12756] usbtmc 10-1:16.0: can't read capabilities
[ 1724.075892][T12756] usb 10-1: USB disconnect, device number 15
[ 1724.334098][T29859] usb 11-1: new high-speed USB device number 29 using dummy_hcd
[ 1724.483938][T29859] usb 11-1: Using ep0 maxpacket: 32
[ 1724.487348][T29859] usb 11-1: config 0 has an invalid interface number: 200 but max is 0
[ 1724.490138][T29859] usb 11-1: config 0 has no interface number 0
[ 1724.494482][T29859] usb 11-1: New USB device found, idVendor=1039, idProduct=2120, bcdDevice= 2.a7
[ 1724.497743][T29859] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1724.501054][T29859] usb 11-1: Product: syz
[ 1724.502485][T29859] usb 11-1: Manufacturer: syz
[ 1724.504428][T29859] usb 11-1: SerialNumber: syz
[ 1724.507172][T29859] usb 11-1: config 0 descriptor??
[ 1724.630386][ T1261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1724.637262][ T1261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1724.653166][T31389] netlink: 'syz.5.7379': attribute type 4 has an invalid length.
[ 1724.656725][T31389] netlink: 17 bytes leftover after parsing attributes in process `syz.5.7379'.
[ 1724.714711][T29859] usb 11-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2120) Rev (0X2A7): Eagle II
[ 1724.953039][T31401] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7382'.
[ 1725.514002][T29859] ueagle-atm 11-1:0.200: usbatm_usb_probe: bind failed: -19!
[ 1725.516669][T31405] usb usb8: usbfs: process 31405 (syz.6.7384) did not claim interface 0 before use
[ 1725.518127][T29859] usb 11-1: USB disconnect, device number 29
[ 1725.746453][T31412] netlink: 'syz.2.7386': attribute type 1 has an invalid length.
[ 1725.771846][T31412] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1725.794455][T31412] bond1: (slave dummy0): making interface the new active one
[ 1725.798357][T31412] bond1: (slave dummy0): Enslaving as an active interface with an up link
[ 1726.804663][T31428] usb usb8: usbfs: process 31428 (syz.3.7393) did not claim interface 0 before use
[ 1728.155191][T31464] usb usb8: usbfs: process 31464 (syz.6.7404) did not claim interface 0 before use
[ 1728.689404][T31479] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7411'.
[ 1729.879459][T31516] usb usb8: usbfs: process 31516 (syz.3.7426) did not claim interface 0 before use
[ 1729.919608][   T41] kauditd_printk_skb: 12 callbacks suppressed
[ 1729.919625][   T41] audit: type=1326 audit(1543515984.065:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31518 comm="syz.3.7427" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000
[ 1729.949862][   T41] audit: type=1326 audit(1543515984.065:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31518 comm="syz.3.7427" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fd598 code=0x7ffc0000
[ 1729.970135][   T41] audit: type=1326 audit(1543515984.065:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31518 comm="syz.3.7427" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000
[ 1729.990794][   T41] audit: type=1326 audit(1543515984.065:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31518 comm="syz.3.7427" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fd598 code=0x7ffc0000
[ 1730.010814][   T41] audit: type=1326 audit(1543515984.065:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31518 comm="syz.3.7427" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fd598 code=0x7ffc0000
[ 1730.031207][   T41] audit: type=1326 audit(1543515984.065:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31518 comm="syz.3.7427" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fd598 code=0x7ffc0000
[ 1730.051498][   T41] audit: type=1326 audit(1543515984.065:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31518 comm="syz.3.7427" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fd598 code=0x7ffc0000
[ 1730.059851][   T41] audit: type=1326 audit(1543515984.065:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31518 comm="syz.3.7427" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fd598 code=0x7ffc0000
[ 1730.067232][   T41] audit: type=1326 audit(1543515984.065:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31518 comm="syz.3.7427" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70fd598 code=0x7ffc0000
[ 1730.074467][   T41] audit: type=1326 audit(1543515984.065:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31518 comm="syz.3.7427" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000
[ 1730.163513][T31529] blktrace: Concurrent blktraces are not allowed on nullb0
[ 1731.038915][T31542] usb usb8: usbfs: process 31542 (syz.5.7435) did not claim interface 0 before use
[ 1731.100370][T31548] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7438'.
[ 1731.180510][T31551] ptrace attach of "/syz-executor exec"[29950] was attempted by "/syz-executor exec"[31551]
[ 1731.224070][T31548] nbd6: detected capacity change from 0 to 63
[ 1731.228877][T18038] block nbd6: Receive control failed (result -32)
[ 1732.624858][T31575] usb usb8: usbfs: process 31575 (syz.6.7446) did not claim interface 0 before use
[ 1732.733397][T31577] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(13)
[ 1732.736233][T31577] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[ 1732.741827][T31577] vhci_hcd vhci_hcd.0: Device attached
[ 1732.747261][T31577] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(15)
[ 1732.749671][T31577] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[ 1732.752579][T31577] vhci_hcd vhci_hcd.0: Device attached
[ 1732.756126][T31577] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1732.760252][T31577] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(19)
[ 1732.762673][T31577] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1732.767325][T31577] vhci_hcd vhci_hcd.0: Device attached
[ 1732.770919][T31577] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(21)
[ 1732.773341][T31577] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[ 1732.777845][T31577] vhci_hcd vhci_hcd.0: Device attached
[ 1732.780455][T31577] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1732.784841][T31577] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(25)
[ 1732.787265][T31577] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1732.790044][T31577] vhci_hcd vhci_hcd.0: Device attached
[ 1732.792636][T31577] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[ 1732.801031][T31584] vhci_hcd: connection closed
[ 1732.801072][T31586] vhci_hcd: connection closed
[ 1732.801314][T13658] vhci_hcd: stop threads
[ 1732.803570][T31580] vhci_hcd: connection closed
[ 1732.805212][T13658] vhci_hcd: release socket
[ 1732.807795][T31582] vhci_hcd: connection closed
[ 1732.808791][T13658] vhci_hcd: disconnect device
[ 1732.814688][T31578] vhci_hcd: connection closed
[ 1732.816342][T13658] vhci_hcd: stop threads
[ 1732.819737][T13658] vhci_hcd: release socket
[ 1732.821387][T13658] vhci_hcd: disconnect device
[ 1732.823147][T13658] vhci_hcd: stop threads
[ 1732.825151][T13658] vhci_hcd: release socket
[ 1732.826990][T13658] vhci_hcd: disconnect device
[ 1732.828762][T13658] vhci_hcd: stop threads
[ 1732.830352][T13658] vhci_hcd: release socket
[ 1732.831930][T13658] vhci_hcd: disconnect device
[ 1732.833726][T13658] vhci_hcd: stop threads
[ 1732.835650][T13658] vhci_hcd: release socket
[ 1732.837228][T13658] vhci_hcd: disconnect device
[ 1733.659495][T31598] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1734.648315][T31606] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7455'.
[ 1734.836099][   T49] IPVS: starting estimator thread 0...
[ 1734.944239][T31617] IPVS: using max 44 ests per chain, 105600 per kthread
[ 1735.039574][T31619] usb usb8: usbfs: process 31619 (syz.3.7458) did not claim interface 0 before use
[ 1735.383996][T27545] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[ 1735.543993][T27545] usb 10-1: Using ep0 maxpacket: 16
[ 1735.555817][T27545] usb 10-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[ 1735.559783][T27545] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1735.563313][T27545] usb 10-1: Product: syz
[ 1735.565692][T27545] usb 10-1: Manufacturer: syz
[ 1735.567809][T27545] usb 10-1: SerialNumber: syz
[ 1735.571862][T27545] usb 10-1: config 0 descriptor??
[ 1735.883878][T18039] usb 11-1: new high-speed USB device number 30 using dummy_hcd
[ 1735.987363][T27545] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[ 1735.998865][T27545] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1736.005920][T27545] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[ 1736.008505][T27545] usb 10-1: media controller created
[ 1736.025411][T27545] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1736.034443][T18039] usb 11-1: Using ep0 maxpacket: 8
[ 1736.039665][T18039] usb 11-1: unable to get BOS descriptor or descriptor too short
[ 1736.047758][T18039] usb 11-1: unable to read config index 0 descriptor/start: -61
[ 1736.052253][T18039] usb 11-1: can't read configurations, error -61
[ 1736.089092][T31640] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1736.188255][T27545] zl10353_read_register: readreg error (reg=127, ret==0)
[ 1736.190620][T27545] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[ 1736.193554][T27545] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[ 1736.198603][T27545] usb 10-1: USB disconnect, device number 16
[ 1736.204868][T18039] usb 11-1: new high-speed USB device number 31 using dummy_hcd
[ 1736.209914][T27545] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[ 1736.266898][   T41] audit: type=1326 audit(1543515990.415:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31643 comm="syz.3.7467" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000
[ 1736.278085][   T41] audit: type=1326 audit(1543515990.415:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31643 comm="syz.3.7467" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000
[ 1736.287938][   T41] audit: type=1326 audit(1543515990.415:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31643 comm="syz.3.7467" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70fd579 code=0x7ffc0000
[ 1736.299478][   T41] audit: type=1326 audit(1543515990.415:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31643 comm="syz.3.7467" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000
[ 1736.313944][   T41] audit: type=1326 audit(1543515990.415:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31643 comm="syz.3.7467" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000
[ 1736.321029][   T41] audit: type=1326 audit(1543515990.415:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31643 comm="syz.3.7467" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf70fd579 code=0x7ffc0000
[ 1736.328306][   T41] audit: type=1326 audit(1543515990.415:2227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31643 comm="syz.3.7467" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000
[ 1736.335553][   T41] audit: type=1326 audit(1543515990.415:2228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31643 comm="syz.3.7467" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fd579 code=0x7ffc0000
[ 1736.363868][T18039] usb 11-1: Using ep0 maxpacket: 8
[ 1736.367371][T18039] usb 11-1: unable to get BOS descriptor or descriptor too short
[ 1736.371320][T18039] usb 11-1: unable to read config index 0 descriptor/start: -61
[ 1736.383865][T18039] usb 11-1: can't read configurations, error -61
[ 1736.386126][T18039] usb usb11-port1: attempt power cycle
[ 1736.744637][T18039] usb 11-1: new high-speed USB device number 32 using dummy_hcd
[ 1736.764574][T18039] usb 11-1: Using ep0 maxpacket: 8
[ 1736.768286][T18039] usb 11-1: unable to get BOS descriptor or descriptor too short
[ 1736.772105][T18039] usb 11-1: unable to read config index 0 descriptor/start: -61
[ 1736.774912][T18039] usb 11-1: can't read configurations, error -61
[ 1736.913896][T18039] usb 11-1: new high-speed USB device number 33 using dummy_hcd
[ 1736.934461][T18039] usb 11-1: Using ep0 maxpacket: 8
[ 1736.938063][T18039] usb 11-1: unable to get BOS descriptor or descriptor too short
[ 1736.941961][T18039] usb 11-1: unable to read config index 0 descriptor/start: -61
[ 1736.945125][T18039] usb 11-1: can't read configurations, error -61
[ 1736.947616][T18039] usb usb11-port1: unable to enumerate USB device
[ 1738.703405][T31684] binder: 31682:31684 ioctl 0 80000040 returned -22
[ 1739.110660][T31690] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7481'.
[ 1739.392045][T31705] blktrace: Concurrent blktraces are not allowed on nullb0
[ 1739.392335][T31707] binder: 31706:31707 ioctl 0 80000040 returned -22
[ 1739.535434][T31711] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7490'.
[ 1739.627615][T31718] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[ 1740.786032][T31743] netlink: 'syz.6.7502': attribute type 4 has an invalid length.
[ 1740.793862][T31743] netlink: 17 bytes leftover after parsing attributes in process `syz.6.7502'.
[ 1740.825385][T31744] binder: 31736:31744 ioctl 0 80000040 returned -22
[ 1741.076068][T31751] Trying to write to read-only block-device nullb0
[ 1741.420864][T27545] libceph: connect (1)[c::]:6789 error -101
[ 1741.423572][T27545] libceph: mon0 (1)[c::]:6789 connect error
[ 1741.519954][T31753] ceph: No mds server is up or the cluster is laggy
[ 1741.577245][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[ 1741.580132][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[ 1741.747506][T31768] blktrace: Concurrent blktraces are not allowed on nullb0
[ 1741.909422][T31775] binder: 31774:31775 ioctl 0 80000040 returned -22
[ 1742.689282][T31792] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7518'.
[ 1742.888916][T31802] netlink: 'syz.5.7522': attribute type 4 has an invalid length.
[ 1742.892155][T31802] netlink: 17 bytes leftover after parsing attributes in process `syz.5.7522'.
[ 1743.594279][    T9] usb 11-1: new high-speed USB device number 34 using dummy_hcd
[ 1743.764076][    T9] usb 11-1: Using ep0 maxpacket: 8
[ 1743.769992][    T9] usb 11-1: config index 0 descriptor too short (expected 301, got 45)
[ 1743.773782][    T9] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1743.778247][    T9] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1743.782494][    T9] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1743.787021][    T9] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1743.792669][    T9] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1743.797674][    T9] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1744.168223][T31825] binder: 31824:31825 ioctl 0 80000040 returned -22
[ 1744.234003][T31828] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7532'.
[ 1744.799066][T31848] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7537'.
[ 1745.252751][T27545] libceph: connect (1)[c::]:6789 error -101
[ 1745.257745][T27545] libceph: mon0 (1)[c::]:6789 connect error
[ 1745.516196][T27545] libceph: connect (1)[c::]:6789 error -101
[ 1745.518651][T27545] libceph: mon0 (1)[c::]:6789 connect error
[ 1745.711664][T27545] IPVS: starting estimator thread 0...
[ 1745.725482][T31859] ceph: No mds server is up or the cluster is laggy
[ 1745.804464][T31868] IPVS: using max 25 ests per chain, 60000 per kthread
[ 1746.255719][T31878] blktrace: Concurrent blktraces are not allowed on nullb0
[ 1746.367238][    T9] usb 11-1: USB disconnect, device number 34
[ 1746.923326][T31904] netlink: 'syz.2.7557': attribute type 4 has an invalid length.
[ 1746.934292][T31904] netlink: 17 bytes leftover after parsing attributes in process `syz.2.7557'.
[ 1749.101344][T31943] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7572'.
[ 1749.252394][T31947] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7573'.
[ 1749.478929][T31953] netlink: 'syz.6.7576': attribute type 4 has an invalid length.
[ 1749.482366][T31953] netlink: 17 bytes leftover after parsing attributes in process `syz.6.7576'.
[ 1749.814198][T29859] usb 7-1: new high-speed USB device number 96 using dummy_hcd
[ 1749.872104][T31965] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7581'.
[ 1749.976384][T29859] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1749.984324][T29859] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[ 1749.996341][T29859] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1750.003974][T29859] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1750.013484][T29859] usb 7-1: config 0 descriptor??
[ 1750.020947][T29859] usbhid 7-1:0.0: couldn't find an input interrupt endpoint
[ 1751.169908][T32009] netlink: 72 bytes leftover after parsing attributes in process `syz.6.7595'.
[ 1751.180516][T32007] lo speed is unknown, defaulting to 1000
[ 1751.575002][T32017] blktrace: Concurrent blktraces are not allowed on nullb0
[ 1752.533277][T32041] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7608'.
[ 1752.573019][T29859] usb 7-1: USB disconnect, device number 96
[ 1752.848629][ T3681] Bluetooth: hci4: Frame reassembly failed (-84)
[ 1752.852511][T26954] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 0
[ 1753.627276][T32068] blktrace: Concurrent blktraces are not allowed on nullb0
[ 1753.837479][T32072] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7617'.
[ 1754.154907][T32081] autofs: Unknown parameter 'l%"àã ¯õ®FnœE²þ'
[ 1754.663962][  T143] usb 10-1: new high-speed USB device number 17 using dummy_hcd
[ 1754.813934][  T143] usb 10-1: Using ep0 maxpacket: 8
[ 1754.817059][  T143] usb 10-1: config 0 interface 0 has no altsetting 0
[ 1754.819376][  T143] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1754.822443][  T143] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1754.826442][  T143] usb 10-1: config 0 descriptor??
[ 1754.853903][T18038] Bluetooth: hci4: Opcode 0x1003 failed: -110
[ 1754.853917][T20188] Bluetooth: hci4: command 0x1003 tx timeout
[ 1755.037210][T32084] Bluetooth: MGMT ver 1.23
[ 1755.042032][  T143] usbhid 10-1:0.0: can't add hid device: -71
[ 1755.044220][  T143] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[ 1755.051897][  T143] usb 10-1: USB disconnect, device number 17
[ 1755.193310][T32104] netlink: 'syz.2.7631': attribute type 4 has an invalid length.
[ 1755.196024][T32104] netlink: 17 bytes leftover after parsing attributes in process `syz.2.7631'.
[ 1756.508648][T32121] netlink: 'syz.5.7637': attribute type 4 has an invalid length.
[ 1756.512013][T32121] netlink: 17 bytes leftover after parsing attributes in process `syz.5.7637'.
[ 1757.729574][T32135] netlink: 'syz.3.7641': attribute type 4 has an invalid length.
[ 1757.732318][T32135] netlink: 17 bytes leftover after parsing attributes in process `syz.3.7641'.
[ 1758.273923][T29859] usb 10-1: new high-speed USB device number 18 using dummy_hcd
[ 1758.434044][T29859] usb 10-1: Using ep0 maxpacket: 8
[ 1758.440417][T29859] usb 10-1: config 0 has no interfaces?
[ 1758.442513][T29859] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1758.446043][T29859] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1758.450788][T29859] usb 10-1: config 0 descriptor??
[ 1758.664259][T29859] usb 10-1: USB disconnect, device number 18
[ 1759.203726][T32162] netlink: 'syz.3.7650': attribute type 4 has an invalid length.
[ 1759.206453][T32162] netlink: 17 bytes leftover after parsing attributes in process `syz.3.7650'.
[ 1759.893117][T32181] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7657'.
[ 1761.414923][T32208] ==================================================================
[ 1761.418500][T32208] BUG: KASAN: slab-use-after-free in sysfs_remove_file_ns+0x63/0x70
[ 1761.422042][T32208] Read of size 8 at addr ffff88806b893230 by task syz.3.7665/32208
[ 1761.427075][T32208] 
[ 1761.428549][T32208] CPU: 0 UID: 0 PID: 32208 Comm: syz.3.7665 Not tainted syzkaller #0 PREEMPT(full) 
[ 1761.428573][T32208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 1761.428586][T32208] Call Trace:
[ 1761.428594][T32208]  <TASK>
[ 1761.428602][T32208]  dump_stack_lvl+0x116/0x1f0
[ 1761.428628][T32208]  print_report+0xcd/0x630
[ 1761.428656][T32208]  ? __virt_addr_valid+0x81/0x610
[ 1761.428682][T32208]  ? __phys_addr+0xe8/0x180
[ 1761.428713][T32208]  ? sysfs_remove_file_ns+0x63/0x70
[ 1761.428743][T32208]  kasan_report+0xe0/0x110
[ 1761.428768][T32208]  ? sysfs_remove_file_ns+0x63/0x70
[ 1761.428829][T32208]  sysfs_remove_file_ns+0x63/0x70
[ 1761.428858][T32208]  driver_remove_file+0x4a/0x60
[ 1761.428878][T32208]  bus_remove_driver+0x224/0x2c0
[ 1761.428906][T32208]  driver_unregister+0x76/0xb0
[ 1761.428924][T32208]  comedi_device_detach_locked+0x12f/0xa50
[ 1761.428949][T32208]  do_devconfig_ioctl+0x555/0x710
[ 1761.428974][T32208]  ? __pfx_do_devconfig_ioctl+0x10/0x10
[ 1761.429005][T32208]  ? kasan_save_track+0x14/0x30
[ 1761.429027][T32208]  ? __kasan_save_free_info+0x3b/0x60
[ 1761.429047][T32208]  ? __kasan_slab_free+0x5f/0x80
[ 1761.429069][T32208]  ? kfree+0x29e/0x710
[ 1761.429085][T32208]  ? tomoyo_path_number_perm+0x470/0x580
[ 1761.429110][T32208]  ? security_file_ioctl_compat+0x9b/0x240
[ 1761.429133][T32208]  ? __ia32_compat_sys_ioctl+0xc3/0x370
[ 1761.429156][T32208]  ? __do_fast_syscall_32+0xe8/0x680
[ 1761.429182][T32208]  comedi_unlocked_ioctl+0x165d/0x2ee0
[ 1761.429214][T32208]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 1761.429250][T32208]  ? kasan_quarantine_put+0x10a/0x240
[ 1761.429273][T32208]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1761.429298][T32208]  ? find_held_lock+0x2b/0x80
[ 1761.429324][T32208]  ? tomoyo_path_number_perm+0x295/0x580
[ 1761.429351][T32208]  ? tomoyo_path_number_perm+0x18d/0x580
[ 1761.429375][T32208]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1761.429401][T32208]  comedi_compat_ioctl+0x1d0/0x960
[ 1761.429430][T32208]  ? __pfx_comedi_compat_ioctl+0x10/0x10
[ 1761.429456][T32208]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1761.429483][T32208]  ? do_vfs_ioctl+0x128/0x14f0
[ 1761.429504][T32208]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1761.429528][T32208]  ? find_held_lock+0x2b/0x80
[ 1761.429553][T32208]  ? hook_file_ioctl_common+0x145/0x410
[ 1761.429580][T32208]  ? __fget_files+0x20e/0x3c0
[ 1761.429602][T32208]  ? __ia32_compat_sys_openat+0xb0/0x210
[ 1761.429623][T32208]  ? __pfx_comedi_compat_ioctl+0x10/0x10
[ 1761.429650][T32208]  __ia32_compat_sys_ioctl+0x242/0x370
[ 1761.429673][T32208]  __do_fast_syscall_32+0xe8/0x680
[ 1761.429698][T32208]  do_fast_syscall_32+0x32/0x80
[ 1761.429720][T32208]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1761.429743][T32208] RIP: 0023:0xf70fd579
[ 1761.429758][T32208] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[ 1761.429777][T32208] RSP: 002b:00000000f54cc55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[ 1761.429797][T32208] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000040946400
[ 1761.429817][T32208] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1761.429830][T32208] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1761.429842][T32208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1761.429855][T32208] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1761.429874][T32208]  </TASK>
[ 1761.429882][T32208] 
[ 1761.572307][T32208] Allocated by task 32029:
[ 1761.573856][T32208]  kasan_save_stack+0x33/0x60
[ 1761.575444][T32208]  kasan_save_track+0x14/0x30
[ 1761.577281][T32208]  __kasan_kmalloc+0xaa/0xb0
[ 1761.578869][T32208]  __kvmalloc_node_noprof+0x3a3/0x9b0
[ 1761.580713][T32208]  v4l2_ctrl_new+0x982/0x2190
[ 1761.582402][T32208]  v4l2_ctrl_new_std+0x1be/0x290
[ 1761.584111][T32208]  vicodec_open+0x2a6/0xf70
[ 1761.585868][T32208]  v4l2_open+0x1d2/0x5e0
[ 1761.587330][T32208]  chrdev_open+0x234/0x6a0
[ 1761.588836][T32208]  do_dentry_open+0x748/0x1590
[ 1761.590461][T32208]  vfs_open+0x82/0x3f0
[ 1761.591821][T32208]  path_openat+0x2078/0x3140
[ 1761.593438][T32208]  do_filp_open+0x20b/0x470
[ 1761.595347][T32208]  io_openat2+0x206/0x850
[ 1761.597061][T32208]  __io_issue_sqe+0xe8/0x7c0
[ 1761.598722][T32208]  io_issue_sqe+0x85/0x1000
[ 1761.600234][T32208]  io_submit_sqes+0x94d/0x2690
[ 1761.601834][T32208]  __do_sys_io_uring_enter+0xd69/0x1630
[ 1761.603730][T32208]  __do_fast_syscall_32+0xe8/0x680
[ 1761.605788][T32208]  do_fast_syscall_32+0x32/0x80
[ 1761.607915][T32208]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1761.610694][T32208] 
[ 1761.611763][T32208] Freed by task 32029:
[ 1761.613589][T32208]  kasan_save_stack+0x33/0x60
[ 1761.615680][T32208]  kasan_save_track+0x14/0x30
[ 1761.617903][T32208]  __kasan_save_free_info+0x3b/0x60
[ 1761.620252][T32208]  __kasan_slab_free+0x5f/0x80
[ 1761.622445][T32208]  kfree+0x29e/0x710
[ 1761.624226][T32208]  v4l2_ctrl_handler_free+0x552/0x970
[ 1761.626678][T32208]  vicodec_release+0xe3/0x160
[ 1761.628796][T32208]  v4l2_release+0x1cf/0x430
[ 1761.630827][T32208]  __fput+0x402/0xb70
[ 1761.632629][T32208]  task_work_run+0x150/0x240
[ 1761.634707][T32208]  exit_to_user_mode_loop+0xfb/0x540
[ 1761.637229][T32208]  __do_fast_syscall_32+0x4a4/0x680
[ 1761.639568][T32208]  do_fast_syscall_32+0x32/0x80
[ 1761.641771][T32208]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1761.644750][T32208] 
[ 1761.645879][T32208] The buggy address belongs to the object at ffff88806b893200
[ 1761.645879][T32208]  which belongs to the cache kmalloc-256 of size 256
[ 1761.651996][T32208] The buggy address is located 48 bytes inside of
[ 1761.651996][T32208]  freed 256-byte region [ffff88806b893200, ffff88806b893300)
[ 1761.658094][T32208] 
[ 1761.659221][T32208] The buggy address belongs to the physical page:
[ 1761.662198][T32208] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88806b893200 pfn:0x6b892
[ 1761.666637][T32208] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1761.670324][T32208] flags: 0x4fff00000000240(workingset|head|node=1|zone=1|lastcpupid=0x7ff)
[ 1761.674072][T32208] page_type: f5(slab)
[ 1761.675862][T32208] raw: 04fff00000000240 ffff88801b442b40 ffffea00012c2e10 ffffea00012ab390
[ 1761.679605][T32208] raw: ffff88806b893200 000000000010000c 00000000f5000000 0000000000000000
[ 1761.683346][T32208] head: 04fff00000000240 ffff88801b442b40 ffffea00012c2e10 ffffea00012ab390
[ 1761.686267][T32208] head: ffff88806b893200 000000000010000c 00000000f5000000 0000000000000000
[ 1761.689142][T32208] head: 04fff00000000001 ffffea0001ae2481 00000000ffffffff 00000000ffffffff
[ 1761.692144][T32208] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002
[ 1761.695034][T32208] page dumped because: kasan: bad access detected
[ 1761.697176][T32208] page_owner tracks the page as allocated
[ 1761.699074][T32208] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7079, tgid 7078 (syz.0.347), ts 194382480448, free_ts 181794583223
[ 1761.706766][T32208]  post_alloc_hook+0x1af/0x220
[ 1761.708443][T32208]  get_page_from_freelist+0xd0b/0x31a0
[ 1761.710292][T32208]  __alloc_frozen_pages_noprof+0x25f/0x2440
[ 1761.712668][T32208]  alloc_pages_mpol+0x1fb/0x550
[ 1761.714843][T32208]  new_slab+0x24a/0x360
[ 1761.716681][T32208]  ___slab_alloc+0xee7/0x1cd0
[ 1761.718489][T32208]  __slab_alloc.constprop.0+0x63/0x110
[ 1761.720305][T32208]  __kmalloc_noprof+0x501/0x870
[ 1761.721970][T32208]  io_cache_alloc_new+0x45/0xf0
[ 1761.723702][T32208]  __io_prep_rw+0x21d/0x1060
[ 1761.725296][T32208]  io_prep_rw+0x76/0x2c0
[ 1761.726738][T32208]  io_prep_readv+0x20/0xa0
[ 1761.728610][T32208]  io_submit_sqes+0x855/0x2690
[ 1761.730651][T32208]  __do_sys_io_uring_enter+0xd69/0x1630
[ 1761.733031][T32208]  __do_fast_syscall_32+0xe8/0x680
[ 1761.735157][T32208]  do_fast_syscall_32+0x32/0x80
[ 1761.737352][T32208] page last free pid 6044 tgid 6044 stack trace:
[ 1761.740127][T32208]  __free_frozen_pages+0x7df/0x1160
[ 1761.742401][T32208]  vfree+0x1fd/0xb50
[ 1761.744105][T32208]  hid_open_report+0x6cd/0x830
[ 1761.746265][T32208]  hid_generic_probe+0x4d/0x90
[ 1761.748397][T32208]  hid_device_probe+0x5ba/0x8d0
[ 1761.750591][T32208]  really_probe+0x241/0xa90
[ 1761.752646][T32208]  __driver_probe_device+0x1de/0x440
[ 1761.755006][T32208]  driver_probe_device+0x4c/0x1b0
[ 1761.757267][T32208]  __device_attach_driver+0x1df/0x310
[ 1761.759637][T32208]  bus_for_each_drv+0x159/0x1e0
[ 1761.761824][T32208]  __device_attach+0x1e4/0x4b0
[ 1761.763956][T32208]  bus_probe_device+0x17f/0x1c0
[ 1761.766144][T32208]  device_add+0x1148/0x1950
[ 1761.768187][T32208]  hid_add_device+0x31b/0x5c0
[ 1761.770235][T32208]  uhid_device_add_worker+0x3e/0x110
[ 1761.772571][T32208]  process_one_work+0x9ba/0x1b20
[ 1761.774828][T32208] 
[ 1761.775922][T32208] Memory state around the buggy address:
[ 1761.778432][T32208]  ffff88806b893100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1761.781813][T32208]  ffff88806b893180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1761.784909][T32208] >ffff88806b893200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1761.787985][T32208]                                      ^
[ 1761.790182][T32208]  ffff88806b893280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1761.793115][T32208]  ffff88806b893300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 1761.795808][T32208] ==================================================================
[ 1761.836043][T32208] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1761.838496][T32208] CPU: 0 UID: 0 PID: 32208 Comm: syz.3.7665 Not tainted syzkaller #0 PREEMPT(full) 
[ 1761.841583][T32208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 1761.845198][T32208] Call Trace:
[ 1761.846345][T32208]  <TASK>
[ 1761.847351][T32208]  dump_stack_lvl+0x3d/0x1f0
[ 1761.848940][T32208]  vpanic+0x640/0x6f0
[ 1761.850304][T32208]  panic+0xca/0xd0
[ 1761.851584][T32208]  ? __pfx_panic+0x10/0x10
[ 1761.853122][T32208]  ? sysfs_remove_file_ns+0x63/0x70
[ 1761.854888][T32208]  ? preempt_schedule_common+0x44/0xc0
[ 1761.856737][T32208]  ? preempt_schedule_thunk+0x16/0x30
[ 1761.858555][T32208]  check_panic_on_warn+0xab/0xb0
[ 1761.860230][T32208]  end_report+0x107/0x160
[ 1761.861709][T32208]  kasan_report+0xee/0x110
[ 1761.863232][T32208]  ? sysfs_remove_file_ns+0x63/0x70
[ 1761.865020][T32208]  sysfs_remove_file_ns+0x63/0x70
[ 1761.866770][T32208]  driver_remove_file+0x4a/0x60
[ 1761.868446][T32208]  bus_remove_driver+0x224/0x2c0
[ 1761.870155][T32208]  driver_unregister+0x76/0xb0
[ 1761.871787][T32208]  comedi_device_detach_locked+0x12f/0xa50
[ 1761.873801][T32208]  do_devconfig_ioctl+0x555/0x710
[ 1761.875546][T32208]  ? __pfx_do_devconfig_ioctl+0x10/0x10
[ 1761.877474][T32208]  ? kasan_save_track+0x14/0x30
[ 1761.879086][T32208]  ? __kasan_save_free_info+0x3b/0x60
[ 1761.880867][T32208]  ? __kasan_slab_free+0x5f/0x80
[ 1761.882506][T32208]  ? kfree+0x29e/0x710
[ 1761.883857][T32208]  ? tomoyo_path_number_perm+0x470/0x580
[ 1761.885684][T32208]  ? security_file_ioctl_compat+0x9b/0x240
[ 1761.887610][T32208]  ? __ia32_compat_sys_ioctl+0xc3/0x370
[ 1761.889453][T32208]  ? __do_fast_syscall_32+0xe8/0x680
[ 1761.891182][T32208]  comedi_unlocked_ioctl+0x165d/0x2ee0
[ 1761.892996][T32208]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[ 1761.894964][T32208]  ? kasan_quarantine_put+0x10a/0x240
[ 1761.896744][T32208]  ? lockdep_hardirqs_on+0x7c/0x110
[ 1761.898538][T32208]  ? find_held_lock+0x2b/0x80
[ 1761.900055][T32208]  ? tomoyo_path_number_perm+0x295/0x580
[ 1761.901863][T32208]  ? tomoyo_path_number_perm+0x18d/0x580
[ 1761.903689][T32208]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1761.905635][T32208]  comedi_compat_ioctl+0x1d0/0x960
[ 1761.907287][T32208]  ? __pfx_comedi_compat_ioctl+0x10/0x10
[ 1761.909086][T32208]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 1761.910958][T32208]  ? do_vfs_ioctl+0x128/0x14f0
[ 1761.912471][T32208]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 1761.914119][T32208]  ? find_held_lock+0x2b/0x80
[ 1761.915674][T32208]  ? hook_file_ioctl_common+0x145/0x410
[ 1761.917495][T32208]  ? __fget_files+0x20e/0x3c0
[ 1761.919056][T32208]  ? __ia32_compat_sys_openat+0xb0/0x210
[ 1761.920899][T32208]  ? __pfx_comedi_compat_ioctl+0x10/0x10
[ 1761.922752][T32208]  __ia32_compat_sys_ioctl+0x242/0x370
[ 1761.924552][T32208]  __do_fast_syscall_32+0xe8/0x680
[ 1761.926283][T32208]  do_fast_syscall_32+0x32/0x80
[ 1761.927899][T32208]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1761.929983][T32208] RIP: 0023:0xf70fd579
[ 1761.931336][T32208] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[ 1761.937621][T32208] RSP: 002b:00000000f54cc55c EFLAGS: 00000296 ORIG_RAX: 0000000000000036
[ 1761.940330][T32208] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000040946400
[ 1761.942925][T32208] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1761.945529][T32208] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1761.948249][T32208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1761.950893][T32208] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1761.953506][T32208]  </TASK>
[ 1761.955221][T32208] Kernel Offset: disabled
[ 1761.956678][T32208] Rebooting in 86400 seconds..

VM DIAGNOSIS:
07:08:33  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8
RSI=ffffffff852745f5 RDI=ffffffff9ac2f060 RBP=ffffffff9ac2f020 RSP=ffffc9000630f1f0
R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3630383838666666
R12=0000000000000000 R13=0000000000000033 R14=ffffffff9ac2f020 R15=ffffffff85274590
RIP=ffffffff8527461f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff8880979a5000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f73c0bb4 CR3=000000005a433000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000063ae9000 RBX=0000000000000000 RCX=ffffffff816dbade RDX=ffff888047904980
RSI=ffffffff816dbae8 RDI=0000000000000007 RBP=ffffc9000d330000 RSP=ffffc9000d3374e8
R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001
R12=ffff888075d70000 R13=ffff888027e38000 R14=0000000000000000 R15=000000000d330000
RIP=ffffffff816dce3d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
FS =0000 0000000000000000 ffffffff 00c00000
GS =0063 ffff888097aa5000 ffffffff 00d0f300 DPL=3 DS   [-WA]
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000801d6018 CR3=0000000063ae9000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 2

CPU#2
RAX=0000000000000046 RBX=ffff88802b424508 RCX=0000000000000001 RDX=0000000000000000
RSI=ffffffff8d8797ef RDI=ffffffff8bd1d1a0 RBP=0000000000000000 RSP=ffffc9000101f810
R8 =000000001c9f36f5 R9 =000000001fa7b629 R10=ffff8880208fd4b0 R11=0000000091fa7b62
R12=0000000000000001 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff8198ccd1 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888097ba5000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy
GDT=     fffffe000008f000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f73a7e44 CR3=0000000072bef000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
info registers vcpu 3

CPU#3
RAX=00000000020f11d1 RBX=0000000000000003 RCX=ffffffff8b5bb6f9 RDX=0000000000000000
RSI=ffffffff8d89f477 RDI=ffffffff8bd1d1a0 RBP=ffffed100376a000 RSP=ffffc9000048fde8
R8 =0000000000000001 R9 =ffffed10056a672d R10=ffff88802b53396b R11=00000000ffffffff
R12=0000000000000003 R13=ffff88801bb50000 R14=ffffffff9065eed0 R15=0000000000000000
RIP=ffffffff8b5b9def RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff888097ca5000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe00000d6000 0000007f
IDT=     fffffe0000000000 0000ffff
CR0=80050033 CR2=00000000f54a3cc0 CR3=0000000072bef000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000