last executing test programs:

7m5.312075095s ago: executing program 2 (id=420):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000280)={@val={0xa, 0x6003}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x8, 0x11, 0xff, @empty, @mcast2, {[], {0x4f19, 0x4e20, 0x8}}}}}}}, 0x42)

7m3.884392156s ago: executing program 2 (id=425):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

7m3.006200759s ago: executing program 2 (id=428):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000200)={0x44, &(0x7f0000000400)=ANY=[@ANYRES16=r0, @ANYRES8=r0, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

6m59.259960073s ago: executing program 2 (id=437):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x18}}, 0x0)
io_setup(0x30, &(0x7f0000000600)=<r0=>0x0)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002)
io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}])

6m58.487428638s ago: executing program 2 (id=439):
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000000c0)={0x5c}, 0x8)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4040005)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0xfffffffe, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002b00)=@newlink={0x2c, 0x10, 0x1, 0x4, 0x0, {}, [@IFLA_AF_SPEC={0x4}, @IFLA_MTU={0x8}]}, 0x2c}}, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x6}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4008000)
socket$inet(0x2, 0x3, 0x8d)

6m53.932040041s ago: executing program 2 (id=446):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

6m37.725117641s ago: executing program 32 (id=446):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)

2m59.633220275s ago: executing program 5 (id=888):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@host})
ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7cb, &(0x7f0000000140)={&(0x7f0000000540)={{@host, 0x4}, {@host}, 0x400, "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"}, 0x418, 0x6})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040))
close_range(r1, 0xffffffffffffffff, 0x0)

2m56.822315486s ago: executing program 5 (id=891):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(0x0, r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffe6, 0xb}, {0xb, 0xc}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

2m55.54274307s ago: executing program 5 (id=893):
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = syz_io_uring_setup(0x239, &(0x7f00000003c0)={0x0, 0x4000, 0x10100}, &(0x7f00000002c0)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0)
connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
r4 = syz_io_uring_setup(0xd6, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x3}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0)

2m54.783242187s ago: executing program 5 (id=898):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffdd2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYRESDEC=0x0, @ANYRES64, @ANYRESDEC=r0, @ANYRESOCT], 0x0, 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x1000000002)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0)

2m52.834465932s ago: executing program 5 (id=901):
gettid()
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0xc0843, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
keyctl$join(0x1, &(0x7f00000001c0)={'syz', 0x3})
request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x11ffffffffff, 0x2, 0x500, 0x0, 0x1800000000000000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x53bf, 0x0, 0x200000004, 0x4000000000000086, 0x804, 0x3, 0x1}, 0x0, 0x0)

2m51.362398644s ago: executing program 5 (id=905):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x26, 0xc, &(0x7f00000008c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="4f6b3780907c340a944dc93f004f", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
r1 = dup2(0xffffffffffffffff, r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x2, 0x4, 0x2000, 0x2000, &(0x7f00007ca000/0x2000)=nil})
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r7, 0x40045542, &(0x7f00000001c0))
syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

2m39.261301771s ago: executing program 1 (id=931):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = eventfd2(0x0, 0x0)
io_setup(0x6, &(0x7f0000000040)=<r1=>0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000002a00)='./file0\x00', 0x40, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_i', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0])
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x100)
io_submit(r1, 0x1, &(0x7f0000002900)=[&(0x7f00000000c0)={0x300000000000000, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}])

2m38.519964649s ago: executing program 1 (id=936):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x34, r0, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c0}, 0x4054)

2m38.253708377s ago: executing program 3 (id=938):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x18, 0x1000000000000, &(0x7f00000005c0)="cbe60100f646f195447c88eb2626c0e4fdd22fb27f8f034d"})

2m37.916083312s ago: executing program 1 (id=939):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r3}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x18, 0x1000000000000, &(0x7f00000005c0)="cbe60100f646f195447c88eb2626c0e4fdd22fb27f8f034d"})

2m36.897339051s ago: executing program 3 (id=941):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010006000000280007800c00018008000140ffffffff0500070084000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0xc4)

2m36.642799756s ago: executing program 1 (id=943):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1})

2m36.018008328s ago: executing program 33 (id=905):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x26, 0xc, &(0x7f00000008c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="4f6b3780907c340a944dc93f004f", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
r1 = dup2(0xffffffffffffffff, r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x2, 0x4, 0x2000, 0x2000, &(0x7f00007ca000/0x2000)=nil})
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r7, 0x40045542, &(0x7f00000001c0))
syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

2m35.954915207s ago: executing program 3 (id=945):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x1000005}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)=""/100, 0x64}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f00000003c0)=""/133, 0x85}, {&(0x7f0000000540)=""/229, 0xe5}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f0000000740)=""/176, 0xb0}, {&(0x7f0000000a00)=""/206, 0xce}, {&(0x7f00000001c0)=""/34, 0x22}], 0x8}, 0x101}], 0x4, 0x40010022, 0x0)

2m35.074514677s ago: executing program 3 (id=947):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66)
syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
r5 = add_key$keyring(&(0x7f0000000a40), &(0x7f0000000a80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_MOVE(0x3, r5, 0x0, 0x0, 0x0)
add_key(&(0x7f0000000040)='user\x00', 0x0, 0x0, 0x0, r5)

2m33.748564752s ago: executing program 1 (id=949):
syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0)

2m32.477060018s ago: executing program 1 (id=952):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb9e}, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0x2, 0x1422)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
socket$igmp(0x2, 0x3, 0x2)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r6 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r6, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$KDFONTOP_SET(r8, 0x4b72, 0x0)
read$msr(r7, &(0x7f0000002700)=""/102392, 0x18ff8)
fchmodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x81)
r9 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200008d4}, 0x0)
bind$bt_sco(r5, 0x0, 0x0)

2m31.159008832s ago: executing program 3 (id=955):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x17)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan1\x00', <r5=>0x0})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r5, @ANYBLOB="05005b"], 0x24}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

2m27.362093848s ago: executing program 3 (id=958):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d907000000", 0x7)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="58000000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1843010000000000140003007866726d30000000000000000000000024001a8020000a8014000700fe80000000000000000000000000002c0500080002"], 0x58}, 0x1, 0x0, 0x0, 0x4000884}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params]}, 0x3c}}, 0x0)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0)

2m15.931501293s ago: executing program 34 (id=952):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb9e}, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0x2, 0x1422)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
socket$igmp(0x2, 0x3, 0x2)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r6 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r6, 0x29, 0xd1, &(0x7f0000000000)=0x9, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r8 = syz_open_dev$tty1(0xc, 0x4, 0x2)
ioctl$KDFONTOP_SET(r8, 0x4b72, 0x0)
read$msr(r7, &(0x7f0000002700)=""/102392, 0x18ff8)
fchmodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x81)
r9 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200008d4}, 0x0)
bind$bt_sco(r5, 0x0, 0x0)

2m11.59663809s ago: executing program 35 (id=958):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d907000000", 0x7)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="58000000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1843010000000000140003007866726d30000000000000000000000024001a8020000a8014000700fe80000000000000000000000000002c0500080002"], 0x58}, 0x1, 0x0, 0x0, 0x4000884}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params]}, 0x3c}}, 0x0)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0)

13.830590802s ago: executing program 7 (id=1140):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)

12.56648606s ago: executing program 8 (id=1143):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3000c085)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

11.952181606s ago: executing program 7 (id=1145):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x5, 0x8, 0xf}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3000c085)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100)=r0, 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

11.574609516s ago: executing program 4 (id=1146):
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x41, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x168, 0x1f0, 0x1f0, 0x168, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0xff, 'wlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'veth1_to_team\x00', 'batadv_slave_0\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x8, 0xd, [0x2b, 0x10, 0x26, 0x19, 0x2c, 0x13, 0xe, 0x44, 0x8, 0xb, 0x17, 0x25, 0xc81b, 0xd, 0x39, 0x1b], 0x0, 0x8, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg0\x00'})
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x1c, r1, 0x3141e0b2751b0f9b, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6051}, 0x4000)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfff}, 0x20)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r5=>0x0})
getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)=""/52, &(0x7f0000000140)=0x34)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)

11.383058496s ago: executing program 8 (id=1147):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
r1 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvfrom$unix(r1, &(0x7f0000001680)=""/256, 0x100, 0x1120, 0x0, 0x0)

10.868685223s ago: executing program 7 (id=1149):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43)
mknodat$loop(r0, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2)

10.681805184s ago: executing program 0 (id=1150):
shutdown(0xffffffffffffffff, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10)
syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12143, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
read$msr(0xffffffffffffffff, 0x0, 0x0)
socket(0x1e, 0x4, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
gettid()
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0)
writev(r1, &(0x7f0000000100)=[{0x0}, {&(0x7f0000001080)="f67b7f1913e6967a98ecaf5be467c8b030ca9595aaa09c5a568727a0fbdf7ac1d00c78f66451a1ef58ff30f9ba22ca4806ea3a3a8de1c31d1fe6e11358b1246d0a0a9ab3ca18afc7dfc2f2e94cfec33045940020ed9e9aba429ab858ae4fca51c44d", 0x62}], 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)

9.794515608s ago: executing program 7 (id=1152):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\f\x00\x00\x00\a'], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000fc0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

9.713403245s ago: executing program 4 (id=1153):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '+'}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x114}}, 0x0)

9.660267443s ago: executing program 8 (id=1154):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0)

9.112176227s ago: executing program 8 (id=1155):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x1000005}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)=""/100, 0x64}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f0000000540)=""/229, 0xe5}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f0000000740)=""/176, 0xb0}, {&(0x7f0000000a00)=""/206, 0xce}, {&(0x7f00000001c0)=""/34, 0x22}, {&(0x7f00000002c0)=""/47, 0x2f}], 0x8}, 0x101}], 0x4, 0x40010022, 0x0)

8.827716479s ago: executing program 6 (id=1156):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket(0x11, 0x5, 0x2772)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
r3 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'})
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket(0x10, 0x803, 0x0)
bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x8, 0x1, [0x2d]}, &(0x7f0000000180)=0xa)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)

8.7763201s ago: executing program 4 (id=1157):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket(0x11, 0x5, 0x2772)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
r3 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = socket(0x10, 0x803, 0x0)
bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
r9 = socket(0x1, 0x803, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x8, 0x1, [0x2d]}, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}}, 0x0)

8.083516484s ago: executing program 8 (id=1158):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d907000000", 0x7)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="58000000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1843010000000000140003007866726d30000000000000000000000024001a8020000a8014000700fe80000000000000000000000000002c0500080002"], 0x58}, 0x1, 0x0, 0x0, 0x4000884}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params]}, 0x3c}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="500000000802110000010802110000000802110000000000000000000000000064000100010882848b960c1618"], 0x2e)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0)

7.62671674s ago: executing program 0 (id=1159):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x5, 0x8, 0xf}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3000c085)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100)=r0, 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

7.40458271s ago: executing program 4 (id=1160):
chdir(&(0x7f0000000000)='./cgroup\x00')
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000100)='./control\x00', 0x0)
unlinkat(r0, 0x0, 0x200)
rmdir(0x0)

6.726491054s ago: executing program 7 (id=1161):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d907000000", 0x7)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="58000000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1843010000000000140003007866726d30000000000000000000000024001a8020000a8014000700fe80000000000000000000000000002c0500080002"], 0x58}, 0x1, 0x0, 0x0, 0x4000884}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params]}, 0x3c}}, 0x0)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0)

6.442838329s ago: executing program 0 (id=1162):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}})

6.391636128s ago: executing program 6 (id=1163):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x9)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
accept$inet6(r2, 0x0, &(0x7f0000000240))
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600"], 0x84}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000)

6.216230256s ago: executing program 4 (id=1164):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000340)={0x40, 0x31, 0x1, '-'}, 0x0, 0x0, 0x0, 0x0})
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f00000007c0)={0x20, 0x8}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x4}, 0x0, 0x0, &(0x7f0000000900)={0x20, 0x83, 0x2}, &(0x7f0000000940)={0x20, 0x87, 0x2, 0x81}, 0x0})

4.41103712s ago: executing program 6 (id=1165):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a800800", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0)

4.186159441s ago: executing program 0 (id=1166):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000000600)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x3, 0x4200000, 0xf800, 0xfff9, 0xe, 0x800, 0x0, 0x0, 0x8, 0x9}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}})
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0xff0f)

3.140018092s ago: executing program 0 (id=1167):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10)
listen(r0, 0x0)
r1 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvfrom$unix(r1, &(0x7f0000001680)=""/256, 0x100, 0x1120, 0x0, 0x0)

3.104534233s ago: executing program 6 (id=1168):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x1feffe}, {{0x0, 0x0, 0x0}, 0x1000005}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)=""/100, 0x64}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f0000000540)=""/229, 0xe5}, {&(0x7f0000000800)=""/187, 0xbb}, {&(0x7f0000000740)=""/176, 0xb0}, {&(0x7f0000000a00)=""/206, 0xce}, {&(0x7f00000001c0)=""/34, 0x22}, {&(0x7f00000002c0)=""/47, 0x2f}], 0x8}, 0x101}], 0x4, 0x40010022, 0x0)

2.215532045s ago: executing program 4 (id=1169):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x9, 0x11, &(0x7f00000007c0)=""/17, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000d80)=[r4, r4, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x3, 0x2, 0x7, 0x2}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r6, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d907000000", 0x7)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="58000000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1843010000000000140003007866726d30000000000000000000000024001a8020000a8014000700fe80000000000000000000000000002c0500080002"], 0x58}, 0x1, 0x0, 0x0, 0x4000884}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, 0x0)

1.549914687s ago: executing program 6 (id=1170):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket(0x11, 0x5, 0x2772)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
r3 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'})
r4 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = socket(0x10, 0x803, 0x0)
bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
r8 = socket(0x1, 0x803, 0x0)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x8, 0x1, [0x2d]}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0)

832.549397ms ago: executing program 0 (id=1171):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\f\x00\x00\x00\a'], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000fc0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

263.46232ms ago: executing program 7 (id=1172):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x2470, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x5}]}}, @filter_kind_options=@f_fw={{0x7}, {0x1f2c, 0x2, [@TCA_FW_ACT={0x50c, 0x4, [@m_ife={0x13c, 0x10, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x7fff}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x3, 0x8, 0x2, 0x4}, 0x1}}]}, {0xee, 0x6, "a846bffd9b262f1f1b7b1d6d7b7a879532ab048eb5d72cc5230b9252e1484901bde6dcad62d8162078d3e2394b631c0235a614782515dc4c1f0275d74835d5a2c731653cb58eaa9ac8750802be202b8e2465df4c73346f4c580183ed9fbb37fad8b1d56f7e3e857032845ddfccbf5e8244b34277f1b6fa29f38bdecff5b2c4b46850e94cddcadf8359d72eb6e3e14fa89486844300bf1ff2e37ffa72f405f32b488ae1163bc43c6faebec2d0f0874271bace500a3f849c10f49958a6c24aa6e819db3eac89ff9b948ef1549ff2d43af47f39672100a3fcea74d01001c4030bc1fef9b40b741871c8a1a6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_xt={0x1a8, 0x19, 0x0, 0x0, {{0x7}, {0x140, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0xf}, @TCA_IPT_INDEX={0x8, 0x3, 0x96a}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x11a, 0x6, {0x3ff, 'security\x00', 0x9, 0xf53e, "1d7ad79869f8e63ad9f5edc3e7c53918c192fb0f479e8fd417dde79cb631b1e14027a34b4ba1559d0b9e4fe2bd16ea9911451d0aa84c0002db20e221e1b812fd0503d4a76bd6bf9ef1043c8e9aa36b4eb4fdda1784ddd415a1ef3516caa11c76306e5b39a53cc8529d1e8856b743c4b7b88a1eff044441c011fcba64d9e688987a5f8e1ba610505c43b327cf374251f2004cc81beec3df814ebdd07ffc4873e32df521c713b4bc6cda0611a6629f448ab988b5f0f7b60a621d0a0a75786c8af2409dc652dd95a7f37fd2b1924c61dcddff1753b97e14d8466540c49fa9626663b17116a5d39b2c11b8312efd6f0c8373"}}]}, {0x43, 0x6, "2b5cafc37e749ea5eb7849d95292087cf4599dbcb19aa03eeeb9a106b7857403a85470755919713ea6766a28d56baa2227f926309e74178e8fa3ffba6bc374"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0xfc, 0x11, 0x0, 0x0, {{0x8}, {0x44, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x20, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x60}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x3}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x274}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_DMAC={0xa}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}]}, {0x91, 0x6, "54181c6d9594f90c5101eb506209e054b05d9247c89fca9c61e76c86fb9372a6ec86cb9a43ff00bb50a3f2e5e8472a43cf60a85c1b6e2589876d7442d283c839b2162ebd1e243686a840b81c4d46545f1ed7e01e4f10aeb1cc679bb85df649986210771c95b739979a09e443277f6903ed2b5d38a486708229d283788aed60f3ea7cd024d99b4542f68fef6596"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_simple={0x70, 0x13, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x1, 0xfdf, 0x2, 0xccc, 0xff}}, @TCA_DEF_PARMS={0x18, 0x2, {0x1000, 0x10000, 0xffffffffffffffff, 0x9, 0xbf7}}]}, {0x14, 0x6, "1790c4e2e7e4c929598d65c8bb03c355"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_gact={0xb8, 0x8, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0xb58, 0x10000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0x800, 0x3, 0x8, 0xa, 0xd}}]}, {0x65, 0x6, "2e90f370f5f1145fd28a8fd0243c0a866bd5487dae9de2b38187c094170b80ec2c177a2d03ce259d957d4047c00de59215daef5b1a7bd6b5511336194366bcf6374c22c7ed318dbac1a73fa7470cb0b59ed5cf962aeb3a21a37af8073842c99126"}, {0xc}, {0xc}}}]}, @TCA_FW_ACT={0x19fc, 0x4, [@m_ife={0x148, 0x16, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_SMAC={0xa, 0x4, @random="6fce580f1952"}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}]}, {0xf9, 0x6, "9a9cb02a7c565d68766adb5585ec2886f4caee255fafa81de765e887b8c0f04d6fb42b2869afac2419ab01276ad22a73288938e8fbe70a22aad69462b05e31551c685b960893cb72d4ac136955acac2e0f9f2483ca07d118faf6cf7491b51e681b96b7d093caaf74e4528fccd232afe339419d8cd7c2e4611fe0e0bf14ff4839c1582e21efc414ac817d1a2e2b5d421ceec27093905e1d033ae346964cfa8fed597810d355228df77e9667af5e2cd148f12920c5fb91a47ec7bade3c2ed329958b4c02b06b38b7e3cefeb2e329c5ed0b4dde7e436d209970d403d5342cb44ad429ad69b84cae28eac7c515a9bbd59732518649334a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_nat={0x178, 0x16, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xffffffff, 0x1, 0x0, 0x7c91, 0x3}, @multicast1, @local}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1e7b, 0x9, 0xffffffffffffffff, 0x4, 0x3}, @private=0xa010101, @empty, 0xffffffff, 0x1}}]}, {0xff, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x190, 0x1f, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x6, 0x6, 0x40000000, 0xff2}, 0x41}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8001, 0x0, 0x5, 0x7550, 0x1000}, 0x31}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0xfffffffb, 0x10000000, 0x8, 0x97}, 0x21}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xfffffffd, 0x0, 0x80000001, 0x4}, 0x26}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x100, 0x14000, 0x10000000, 0x5, 0x5}, 0x22}}]}, {0xd8, 0x6, "a7f1b2085142c3b237470fcf9aac13b91657d8c8d19904402fd492d6d3bb7c8c5ee32b81a9bbc7f29e4291986066929e6198e4fa9fdc71720e66f4374116c0152f31604e2ad852353d358e600eeaf36311dd231f7b3a3c4bc9d4958cebbe46fe116dff4059ce2a71b53ea4e843d281937fe1d6dd2e2ed2b134c961b42d345bd996c1e37b1c953507f734a051cda7ceb3511c5c8619660a4cbc75eefbbce2ee689573868695de846624abf5f2796217f3d9065909aeec58a9594f5f3b5bfcc28c6947616b8b2bd7e568791eb63a8412e21b46e3a5"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_mpls={0x10c, 0x6, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0xd}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x34e, 0x4, 0x6, 0x4, 0xda}, 0x1}}, @TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0x37919}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TC={0x5, 0x6, 0x3}]}, {0x93, 0x6, "9b69aa9e841c94fec519f97fc14d3e9be42d8e2d71de0981bf95168dce1d29a599eef756374f58ad2ffcd11572beea3398dedb9e97db8c45d155815018c3334559e7948fd92ec244319a76369527a412dbbd77473e4c5f9b3f4326f1441ef1a000a30d0927c3849d0b3d9d7bee79612a6ca6eca79698aec2c04ec6bb9ab7d034b52f8739009b4b47d1ffab7e50db60"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_gact={0xc8, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x948, 0x7, 0xffffffff, 0x9}}]}, {0x81, 0x6, "5083f124863951e9093e65bcbbe11c25047fd7983c86bc7056c036d77b5b666f24262be300bf7f6fd4c1715f90cf34449421ccd276ee7c5e718800dc831eddda04b76b6780b8fc59d5234aaff37893a6c9cf01a8b8b0654c8fbd9ce197c8d245a5da8eeb9bc1848b68a1a84a6548fb1f90f9dbbe2e35786e72f9a278e8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_sample={0x84, 0x4, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x2, 0x7, 0x8, 0x4}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1a19, 0x7, 0x7, 0x1, 0xffffffff}}]}, {0x28, 0x6, "93aeb5bada3cccefeeb387ae1c1bab4e0fdb11ad45aaa492c195d97d47ad46fd3832b7ee"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_sample={0x74, 0x1a, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0xadd, 0x2, 0x3, 0x80000001, 0x4}}]}, {0x2e, 0x6, "f722e960db7e0b29eee6e64a76894d01d7e43fedca8efb4017cb1e81414c830fb73b6bb464ea3e44916d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_csum={0x134, 0x16, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0xd, 0xffffffffffffffff, 0x9, 0x6}, 0x6c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x7, 0x0, 0xffff, 0x1000}, 0x56}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x84, 0x6, 0xd, 0x88}, 0x22}}]}, {0xb1, 0x6, "b365e18bfc3dfcb227b52bc12b200d0597dbcce4c8cda79ae7ec6de3cd00f378dfdaeb38e1eadfe307a2f981df48d6eaa6d22b01028ab5711754fc19a5d57e9be2f13658c6c3e0780ee0c0d7a256a30f0ef8e268d0af407c887eb61a8f0aab19d44ed3bc4c3c17fc1c9ae9fb5c4603ee7738f4670d390e88f485e6acedaa26db8e4e9792d2ef87c7af2c026ecc4c9e8fd63f255fcdd3e744bebed08380a4a41385e33faca13c6b47de35b92f9f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_vlan={0xa0, 0x5, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x461}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xad6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x7e5}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}]}, {0x3c, 0x6, "22836cacceba6827914e9f32b49636a2d96923f7fe9ae89becf0a2a73f24141117a1cf27967a8130bf3dfcfe8dff62020fb84272188e7e5c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_xt={0x1108, 0x0, 0x0, 0x0, {{0x7}, {0xe0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xdc, 0x6, {0x8, 'nat\x00', 0x0, 0xc, "c0a000ded8fdd52ba408470dcda67bf8c5d10a3b9d7d8212fcb7fa7c22d59340b8c697882f176c2403ae6e5a6905d32fa049bd9b0560ab9fa1819787bfbbd7c1206e8602e45dd735c28b5ad4f29b001941d0573a29a941587cb34220a0b06fa8faa66c1dbf992590b02854aa86ec24eeb027e78ea78d4e8fff610b964277957542a67cd39e36ab7e5d4424a2d55584eebe34ef7f15b84cccfdfaf594556dcfe0cc55ead6a987547c1fa00dd0a9f71e1aa20e"}}]}, {0x1004, 0x6, "ba9c6cd2c877f82ccc65922da8e6eaff271f9a04f9dedc9c0b40c02865495f70f4b97dabf5e0cefa26f4a68c5e16f94ddc2a253e6e220c2853fe948babfaa00ba98c294cd7cdc2836bc8938d35cdebf7028b8fbf858e952970b01e548554e2bf9751b8e77acacb811e465299991dfcf7134080114ccc341fd4d197b70cf20aaf9b1981449422c7331bac23cc0fd7a2104de4264f9117e6803b5ae9291c9506450cfe780621e359ed7294a570877712ac5308fca5fc82db989840f977848d1eb3b875e9cf5fe74c81017aa40c924980c21fdac99fbec290ffed66524b70d5c587fef8eee562217b87b93373075a8e20a979167533e2ae4ce1e17f41aeb028fe46396ee5441f4523ea56cce254127aaa677a811498268de87d023d6c1f9523c0a86e08fb81465da997335cbc84def885dd2fd267b6ce794c7ac9e05dcd1dacb62c017361c717d7460426eee730779c9d484acea03b63789dea19e649c44d73caea8402ee91cf3dd10841fe2e7b47127b9b49ca67beca3c10d548c69dc699651ade456708d0f2731da9ffee663d5cfef6c15b4d0d5dd0bec7cce630d20ff82f37d7fbfe5abc0151b7e75e1357bf54c19d4d52daa5f4fee6b563290f112783842f0c2975dd8fe5b4487321c758669b873c8d0e217bbdfeff30091d07db4fac34ca1849df95a160df301602d2c42a8033611f5bf093eeffa4f2d2c1e3ddb560d74263ca1ac6e5dbdd54b9ffa119673f615153f0c05a0933cf6d0b78fd5931e311dcb5febcf9a90d68336450a173179df367e54b445e7f6f0491981748140951dbf27a71853f36969ace37517368b14a3d4dc4fdab6b80e1b9e634661f954d8b079057e4b7a069b25ca56950ab13f2ab3772f2091f07e76fabdadd48012794c5a6826f54c7765c9e983737caef53fcdd93b2f6096ba677f2ff9c70a8937a1238fd09a04d849ae52a934232947abe08dde42739638abee04b977a28977d68dd143780359f0ac11fbfca68d3aa7ba9ab44807b424ca987295b19d41d45b87f6458a637d8a690660fdfc6334cb540d3ea274f4418fc6f2e27b8475f6c71ecfbe0c087786d1ed4f6b4d2589164666753652d7384956bc6bfc367b775ecf9f9189df45e1509c8da8fb9f17f516f851d0aeb7a63d4fb8fc75cb76c9d6721caa2ece4ed627a66dd3929c1a1ea8c4bcc8b506f9772856c90e7b822e4e37cb0b7922118da48838732e2ef8ac605a43c004973a7c8366f0bd9f94fc7f69bd9a8a7bccaa8156be0e0fa04a04d4519430d390586068c4a83b241bb7d45d5eb13001828bc71a994bfb4696b32bd4f3803c25f90c3f2afd645536eeec0fd5dc87e5b19de3f0b7ba7ceab3c521c8d1d1d9fbc27c6f9afef8fd2c9ff06c88b5bcfa0b19a484243105e5ec1aa55797a9c79c2d30cacf5db624f689225b4ed37cda692197d8850cc195e274016572c3079702ebe80c8ab4fa15dd4ca48c3c8f59b87bcba74778fd7e95c7fad0b4856a477b02b96b4515fb42530ec232a43978eb921896e76606db720447c1edb2569bc969db469f38ecc6d184f81d6577127286593bd4e2eaa41b147dad5508757cc94ff399c7c51d0f9617a2b9c74488dec225a33101d3a597a57b9a4eb6dc7d2a25c2f2aff29491bd4689c7d512b2459841052d6b25a564e0ed7e27fc4f53781f214e0a422647380da06aef758bc5fd4eb1477356c6ae2f4dd4ff9402e2a0a0f58735a0332ce072cd0ea42ed99d8ca43398c39f7fae8be4f5abe5672ff26917662662492066ba0ed4420d6c355682c50cc6c7938e96b6786bf2ed86cefb617bf9918ca0fd927933c902db040988bcad53778c7f499c53ce9a6bf86219373d509e387bf035b66361d22d357649fcc579271b2be4cce714e33b5b85a5c0993b390527654ec6e3eae494b9407645d788e094c2204f5092655ee6f8cf490bda0aa4e25fa80f7f724b5820f6e24cb704116461a344b74269576696eeebf8f34644ed746dda2aba2963a4545f4bb8da07b3524890efa964bcacc3500c1ca16e32f644e1b25fbde227ee6a7bda64a68ec55dcefa3d7f75c54d9f69599b44f317e8b9f4e5fb2191b726db4559ba585684b07235ad64f0e33abd98ad2d5e55623ce94dd6b907fa57c0534ed4455e609da2440e20ebb375137931e935c5eeeb49677bfd35e0d1ba47cfb48fb2a796e041ec05ea5d8bdf7e0486bf205d2470bd47fecd4dde762559567b0c18c3599954f58eb92799d953e5760b5f5ae78603332b5264922d00d0e2b8120da1d440f1807c3ef2e47a0c7201ce705ecc6fe1565f32ea474cfba3ac69232b38aee013e10eac85b05647343c1823db16b9b4459f9cba4797b896deb92e4770bdae6d61d931facb25fa8e56600ff2b1a18f7a8fc653937ab7ba19ee01fabaf003e5999a218114cec3aa08c7680b8b82c5129275804801fb873aca983a31193d9a5aaf0f613e0eba5c7188b71b9e52938acc62eac544a70d613d9c6b706790e5df4f45e3a7162a74ef3ed627ce25657d75b83fc1c3766cdd05bc2d4239bdc749b079f6d630de50d53d694bf73845111e7dd3dd87a72ae3248cb6efd4b18fa1217721fd5bc8af86d58b71817739b4d904f6e10e6f4f0074e7f7c09dc04bad15dcb55e3f39937f6871e5299ee3c864615ec8761dc73e885f67906eee1b99230f60f9928562bc6a58cba6f49073201ba2cf8f07395c1c4327d3c310f47fb03c5dda3e789be18b05e6a70d00efb1fa9deb2e85a0e9c8e78ef283f66f0fb5cbbec6e6ac862423d04ca97af3985edc0e515b5d5562cc82696a9ceed9789c686f777b0dce2d339957dd0f160cebac7ddcf1837294f0e18dfb6a21450f49f5f69146588bf73f10c2367e2ebec0b3763d5b19cc4d82929f420048846d6b241088777c178d6bd0241a2669f5223ad4b66ab1af8304e929c3821b33e6499f325f3718ca0c37e9b33d87effdbf9396c25444d5a4ba5eca145f5bb12adc6013523a896181852c53db365cdfdcb2c8f628bc51456f2657c5eb241e14ece6e47f1b1a70ae103425ee7b2da4b770645551edeabd999db9ce8146c6f61004592609756ab5cc8696aed84250d2a101d1e10b5cea48652637ad25260eaf24a6684b392a11b094a2bff8d069f1db5963bdf578707b81c79a3f25a30c778a730326f0b7ff4bfb45317c93fc4576ad8105f04d3510acc870834291c78272d3260214a6cea3ba659c247231210252cabfe625474f8d9055f68407fa1b61bee725d9f8d668daa188381609d0231c3cc0c31517581763fb7894030edc9ffe45b46238657c6d056cf09bcaed2d5f883934b019ee42bb17f97ad57b6d86f45c9df2dc970b10c1332dc4bc668a99ae0007f671ebafcb9ef989f8bec70efae483acf9c33cb9b875236af61f0ca8e6c1ccb164fc75b2144dbb1242c5bf3ea1f9bc02c4df9aa4e11c31c2ac3d3acf20f08ea29fa5a6e9d4a78aeca47a958b8d9fd6b19fd325f9d9b1a92d35f57b02ed0b645f922e8d284d74d81dea150601786eee312053b8db4e54568c04b4c6fb28b8287f33f4dbcedde558626c16e7f10b9b359182f0a8e9b35e29905d04ce6d811a63740dd90cb921b7be55b5038752f7e21adb4a49b27a1ba64f436c04cd7aa4804f958f23cf44ec6ec7b6afd993635f32ff9e963b5ff3e0c0a3dc5ae00f10dd09d397ad91614e7268197349e21f4d722e4106249ed16efd9ca10e8ac13e0754b6152ed470fb45cbd4477078ee78b41d3c3d52184ef6490affaf81f164c6446acb189dd353c86ee48d2b8e2c9592019200954ecc98e2bf4146acf23b1cc1f728553743f2b28f3e3bb360869840f79989454fda53ca8206fd36d2144e25ffc1df68c623817c85eeeff26dfa62a51bc2d8c83f72748f056197689f58cc0a592beff39c92e8a0c80e2d2c4f1415926e858c7f8f2e9f484e01d843501e2ee2ad86c94dfc184294d299f5104871f5833c7b92a7290298a44157e25bc96efa67b3702361d3f624adf7a7e28c11c10af633e31da107da08925ab00cebaac2fbd156276fa4b9ad2fac2bad38f16d7c4cee32a0d85f8ca6bdafb6181d16227f0f7e64507e74810bb61ac428ae8b3d07051ec92822c6750c44be69d1bea675cfb88ef858e739690e253d564e607eeb2816047392e46900dcf01bb944dbe9fa2c29f782cf611a49ca0ee687357a693027c7b67a48fb74f32a2089cda00f7ed135330edb9147995d365c4f6a4da5f6b0dac31534faa65305bff6ce263e64136d54096f4df2949589947efa3119bf527ae21e8b48fb25abf651628345b91a5efeeb5150619f760b121ed4362222a9632ff488c47e3b26a00f8beb789ebc4bae3d8e6770862976f706cb2125dc8eccca79b383f0692bef11930449dd79360c39182675c1e16cab36203bced46128a5554e16d9d3d251c2a5363c9dd895df0b6281ca711b4bb3bb3bd38a8fca68d7cfcb7be77296c15c32894fcb557884efdefdce990bc2896db8625c043013f35630865d25994bf2578bd6d7ff398531371f144b3618251540acb7f0be6e616a2bbce56d341e3944f4edb2107e68e04574c21b77cae8f5bddf0f0093d7ab1bdf998446ff5a13bbb2e8cd84eb65754298753d5578b23f89699fb5bef0e913cf3d0acb9f9199f9ab70e00329e4563d51b982606c44b5fed07261505cefe913f1b1816c8ae5873c48f9ead4b5e575d9564d2f598b877e2a88865da3ecd3910871577eaea998902383436ef1a6798b4a269773f75c1335cddd1c591f7ba48ba511eba6624b4d3dc8e4576ddc2a64cf841cd6497c05737d09876aabafbebd78d170628aff53d4874dbd86de6ad44e7c3ec1124b33993a664f2606f4ce167f74794d20676bf0cec98f4fb5971eb03c64969ad40031eb495906ff7351fc3573f7ab55226a387c8098244ac5eda0296ebe6e14797741df546cb27299b3796ebdd6892d08f3ffff127cd9a22dd095841ce88614ed8e3ffa06a7e91c049a2236830092db90f8e4287d9eb6a32c4e08c69be0f4dd0408f4b5bbbb917c6ad1fa4cf3e33cb48723eba0841c6c69296de653870072d1a1c0f03dc0189607ea317421fc31b533a3e3161a564a935f732cb0b9acca5f2ebfcb921c0da20f7175d8047b3ae8757b4056d6723e21c106d841f515dd071eeacb05f561369e9e2a73dd78fe3938f5a63f8facac09fc3187c2814baf4aa8e1602cae292cd24bf7d3e6fdd5619f6fa20b4fef15ad4cbe56b851f606611ac951e2832c908417349b60ac50dd3efbfb38f7c389658002232cd9414607227211d031343dccca4701a36ffe812973a3ee78c6fc3942bdb6d70383cecc4cc92a035f0e1ce7e1be882e4f630fe632e1884cfc897b2e048d1faff3db639070fa35bc85d402b00d3f6e85b3cbf3c9060974fa425f08b0fe51f9c9f4d67148941abb5cc38229494f636b6d121a38387e8a2b322c427b2607ff97e3d448f0b7b65f9771845da8e1489ecc95d3fcff38eba192c0999c297b5b23a6075d70518901e8d1683a2f0db0b31b283d024368289ee50ee108d06c2790eae862e7980558936e74128f42c5990b341a2484c7d5667e2f30431a48eecb57c1cd05cf4b42d8a44efcd996398f373b28e31a9b73016161baeccfdb4d88f577edc1d028e2de888b31fe70181f413f8ed8fd1bba9784e104b4ab538232bc2381a14194bf2a4e696567ffd2af8b122fc27d1405fd1a789ce2bc3d93507f7588d8b088177df50a1e967f461ee7d099ad195de6169f773d5fd5e4f1d111b83e3b3c9dc782d089b993f264b7d31ebbc64a9042c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_FW_INDEV={0x14, 0x3, 'syzkaller1\x00'}, @TCA_FW_POLICE={0xc, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0xfffffc01}]}]}}, @filter_kind_options=@f_basic={{0xa}, {0x4e4, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x10, 0xf}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x10, 0x47ade9c2504226e1}}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_ACT={0xe8, 0x3, [@m_tunnel_key={0xe4, 0x9, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, {0x84, 0x6, "e8324125f0380ca57ffc42295f7a8430d4678161606f74425512cb813e2d9b48340516e3b8e02b144839f8edc800dc624f115fbdbe2afef4751071f4e32face0aceb2e4afd61f67bfa183fc9567db039cdb8163b3a6c85a0dea52cd428895ec53f0f8e01a14cd2d585d5754de3a25f2e4866fc0465adacae77c4e01a693792c3"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x8, 0xfff2}}, @TCA_BASIC_EMATCHES={0x3dc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x100, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x5, 0x1, 0xf6c1}, {0x8, 0x200, 0x2, 0x4, 0x4, 0x1, 0x2}}}, @TCF_EM_CONTAINER={0x80, 0x2, 0x0, 0x0, {{0xf3d2, 0x0, 0x6}, "2a059098b10ead60f8ee392b8f115c2f45fe604979ac8ef6a97bb184e02eb4083b3d9cbe86675d7d245211ce80c75a0494357f10313fb272f76ef118dba16ad7c15eda206853914a403bb56a37ef0e3a21b6c4ff201036738d0bb05af211849bafafdc3efa3b91d67fc457adee3cb7128b"}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0x3, 0x4, 0x101}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x9, 0x2}, {0x401, 0x8c, 0x1}}}]}}, @TCF_EM_NBYTE={0x18, 0x2, 0x0, 0x0, {{0x40, 0x2, 0x400}, {0x4, 0x8, 0x1, "d37ca0b58e24b736"}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x57, 0x8, 0x7}, {0x0, 0x3, 0x1}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x4b0, 0x2, 0x8}, {0x6, 0x1, 0x0, ')'}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x5, 0x8, 0xff}, {0x3, 0x4, 0xf}}}]}, @TCA_EMATCH_TREE_LIST={0x2d8, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x9, 0x3, 0x2}, {0x101, 0x4, 0xfffffff8, 0x2}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xd, 0x3, 0x2}, {0xc, 0x5, 0x300000}}}, @TCF_EM_IPT={0x50, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x8}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_DATA={0x27, 0x5, "3da284f82bbf5c9187dedae6d21436b3550b66f7644daf7d57d76652f7c09e7b078cfe"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_IPT={0x1a8, 0x1, 0x0, 0x0, {{0xd7, 0x9, 0x7}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_DATA={0xa7, 0x5, "56432ab6b9a941af1b39b01f8410acd57be25df9108fe3d0d6efeef5c5a05f8bb831b8c675ab177255cd67b6aef1b7ff73db8c97ad5ad0099ceb868c934d3f7e708f174b39b782c914a818ed6428d7e81ee534cb949e65c80da1feb8a9c120e81ab5c53bd7cdd020a619e6e80d0fbf265559bde567f669045334c8f57f68bb5002c38b3ebad50edf27423d521c833cd2505651263f4bc623b17eec6cf6eec7ebb01f35"}, @TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_MATCH_DATA={0xb2, 0x5, "9916dcdb8cf24462c18cb5723899d61ad54ce937dc8097a1c98ac6c784e5a2d586f65f3e81b874117d19d65571d4e350b9d86450bf67710c57a9d946c39a24130980eb50be7fa3f860638bc45f2e6bd6a4799070e39d58b23d33ef3473fd1f0ddc322f926d3467cfef0a8043528526df37dd4d65714e190fc7deca6005417bd1a0a5e1ca29bf45576a1f12be12d481ed0ad9515810ab7fe0ba144ff176171f60c1fdff87bb085a8a00465af4ee8b"}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x8, 0x3, 0x3}, {0x6, 0x6, 0x400, 0x3}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x7195, 0x1, 0xe}, {0x0, 0x9, 0xf19, 0x2, 0x2}}}, @TCF_EM_META={0x60, 0x3, 0x0, 0x0, {{0x6, 0x4, 0x9}, [@TCA_EM_META_RVALUE={0x27, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="449c", @TCF_META_TYPE_VAR="9b488eb05455b48cbd"]}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_VAR="0549d00f2a", @TCF_META_TYPE_VAR="266c92a603", @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7ff, 0x2, 0x1}, {0x2, 0x32, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1000, 0xb1}, {0x9, 0x4, 0x2}}}]}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x6, 0x8, 0x1}, {0x4, 0x3, 0x3}}}]}]}]}}]}, 0x2470}, 0x1, 0x0, 0x0, 0x80}, 0x800)

242.620338ms ago: executing program 6 (id=1173):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x5, 0x5, 0x8, 0xf}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3000c085)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc)

0s ago: executing program 8 (id=1174):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f00000000c0)=0x401, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
prlimit64(0x0, 0xc, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
signalfd(0xffffffffffffffff, 0x0, 0x0)
setpgid(0x0, r2)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0)
r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001)

kernel console output (not intermixed with test programs):

 555.713095][ T1877] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  555.745775][ T8210] apple-mfi-fastcharge 2-1: USB disconnect, device number 36
[  556.836064][   T30] audit: type=1400 audit(1756850472.108:338): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=8530 comm="syz.0.720"
[  557.177887][ T8542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.724'.
[  557.526113][ T8210] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  557.748169][ T8210] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  557.759093][ T8210] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3
[  557.769015][ T8210] usb 2-1: config 220 interface 0 has no altsetting 0
[  557.836945][ T8545] netlink: 'syz.0.725': attribute type 17 has an invalid length.
[  557.845017][ T8545] netlink: 5 bytes leftover after parsing attributes in process `syz.0.725'.
[  557.855280][ T8545] geneve1: entered allmulticast mode
[  557.870005][ T8545] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[  557.916574][ T3824] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  557.937268][ T8210] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  557.947265][ T8210] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  557.955411][ T8210] usb 2-1: Product: syz
[  557.960083][ T8210] usb 2-1: Manufacturer: syz
[  557.964792][ T8210] usb 2-1: SerialNumber: syz
[  558.017243][ T3824] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  558.058055][ T3824] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  558.110507][ T3824] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  561.950054][ T8555] input: syz1 as /devices/virtual/input/input14
[  562.095096][ T8210] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  562.103761][ T8210] usb 2-1: No valid video chain found.
[  562.173081][ T8210] usb 2-1: USB disconnect, device number 37
[  562.397227][ T8558] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  562.966129][   T42] usb 1-1: new full-speed USB device number 28 using dummy_hcd
[  563.190456][   T42] usb 1-1: config 0 has an invalid interface number: 128 but max is 0
[  563.199452][   T42] usb 1-1: config 0 has no interface number 0
[  563.386527][   T42] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  563.396538][   T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  563.404881][   T42] usb 1-1: Product: syz
[  563.409482][   T42] usb 1-1: Manufacturer: syz
[  563.414294][   T42] usb 1-1: SerialNumber: syz
[  563.533228][   T42] usb 1-1: config 0 descriptor??
[  564.163091][   T42] usb 1-1: Firmware: major: 2, minor: 17, hardware type: UNKNOWN (47)
[  564.376237][ T8586] netlink: 'syz.4.734': attribute type 13 has an invalid length.
[  564.384209][ T8586] netlink: 'syz.4.734': attribute type 17 has an invalid length.
[  564.388668][   T42] usb 1-1: failed to fetch extended address, random address set
[  564.400418][   T42] usb 1-1: atusb_probe: initialization failed, error = -524
[  564.409420][   T42] atusb 1-1:0.128: probe with driver atusb failed with error -524
[  564.629549][   T42] usb 1-1: USB disconnect, device number 28
[  564.725185][ T8592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.737'.
[  564.829508][ T8586] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  565.203059][   T30] audit: type=1400 audit(1756850480.528:339): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=8582 comm="syz.5.735"
[  565.986344][   T42] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  566.156887][   T42] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  566.165349][   T42] usb 4-1: config 0 has no interface number 0
[  566.172323][   T42] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  566.182081][   T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  566.417382][   T42] usb 4-1: config 0 descriptor??
[  566.494707][   T42] cp210x 4-1:0.1: cp210x converter detected
[  566.907800][   T42] cp210x 4-1:0.1: failed to get vendor val 0x000e size 3: -121
[  567.346309][   T42] cp210x 4-1:0.1: failed to get vendor val 0x370c size 15: -71
[  567.354837][   T42] cp210x 4-1:0.1: GPIO initialisation failed: -71
[  567.561439][   T42] usb 4-1: cp210x converter now attached to ttyUSB0
[  567.716809][   T42] usb 4-1: USB disconnect, device number 39
[  567.815265][   T42] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  567.827493][   T42] cp210x 4-1:0.1: device disconnected
[  568.277122][ T5876] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  568.307159][ T5910] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  568.431687][ T8636] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  569.247940][ T5876] usb 2-1: Using ep0 maxpacket: 32
[  569.264309][ T5910] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  569.277783][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  569.293149][ T5910] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  569.304582][ T5910] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  569.318036][ T5910] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  569.327467][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  569.436225][ T5876] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  569.444998][ T5876] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  569.455615][ T5876] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  569.467905][ T5876] usb 2-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144
[  569.481686][ T5876] usb 2-1: config 0 interface 0 has no altsetting 0
[  570.202558][ T5910] usb 6-1: config 0 descriptor??
[  570.222503][ T5876] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  570.232366][ T5876] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  570.241502][ T5876] usb 2-1: Product: syz
[  570.246039][ T5876] usb 2-1: Manufacturer: syz
[  570.250846][ T5876] usb 2-1: SerialNumber: syz
[  570.529909][ T5876] usb 2-1: config 0 descriptor??
[  570.619023][ T5876] ldusb 2-1:0.0: Interrupt in endpoint not found
[  570.736744][ T5910] plantronics 0003:047F:FFFF.000C: ignoring exceeding usage max
[  570.885069][ T5910] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  570.964478][ T8658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.750'.
[  571.147613][   T42] usb 4-1: new full-speed USB device number 40 using dummy_hcd
[  571.384711][   T42] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[  571.393865][   T42] usb 4-1: config 0 has no interface number 0
[  571.449691][   T42] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  571.459386][   T42] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  571.470374][   T42] usb 4-1: Product: syz
[  571.474764][   T42] usb 4-1: Manufacturer: syz
[  571.479801][   T42] usb 4-1: SerialNumber: syz
[  571.542511][   T42] usb 4-1: config 0 descriptor??
[  571.647054][ T5881] usb 6-1: USB disconnect, device number 10
[  571.709346][   T30] audit: type=1400 audit(1756850487.028:340): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=8660 comm="syz.4.751"
[  571.978792][ T8664] fido_id[8664]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  572.027199][   T42] usb 4-1: Firmware: major: 2, minor: 17, hardware type: UNKNOWN (47)
[  572.781225][ T5910] usb 2-1: USB disconnect, device number 38
[  575.552666][   T42] usb 4-1: failed to fetch extended address, random address set
[  575.559346][ T8698] netlink: 'syz.3.756': attribute type 13 has an invalid length.
[  575.561026][   T42] usb 4-1: atusb_probe: initialization failed, error = -524
[  575.570199][ T8698] netlink: 'syz.3.756': attribute type 17 has an invalid length.
[  575.577315][   T42] atusb 4-1:0.128: probe with driver atusb failed with error -524
[  575.657620][   T42] usb 4-1: USB disconnect, device number 40
[  576.245433][ T8698] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  576.608890][ T8709] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  578.908780][ T5910] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  579.135969][ T5910] usb 6-1: Using ep0 maxpacket: 16
[  579.180321][ T5910] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11
[  579.193307][ T5910] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  579.204517][ T5910] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  579.253901][ T5910] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  579.264053][ T5910] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  579.272690][ T5910] usb 6-1: SerialNumber: syz
[  579.296036][ T5876] usb 2-1: new full-speed USB device number 39 using dummy_hcd
[  579.379060][ T8731] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  579.495030][ T5876] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[  579.504301][ T5876] usb 2-1: config 0 has no interface number 0
[  579.520601][ T8747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.769'.
[  579.580636][ T5876] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  579.591393][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  579.600816][ T5876] usb 2-1: Product: syz
[  579.605312][ T5876] usb 2-1: Manufacturer: syz
[  579.610382][ T5876] usb 2-1: SerialNumber: syz
[  579.653683][ T5876] usb 2-1: config 0 descriptor??
[  579.703851][ T5910] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22
[  579.758151][ T5910] usb 6-1: USB disconnect, device number 11
[  580.294108][ T5876] usb 2-1: Firmware: major: 2, minor: 17, hardware type: UNKNOWN (47)
[  580.525615][ T5876] usb 2-1: failed to fetch extended address, random address set
[  580.533966][ T5876] usb 2-1: atusb_probe: initialization failed, error = -524
[  580.542827][ T5876] atusb 2-1:0.128: probe with driver atusb failed with error -524
[  580.823751][ T5876] usb 2-1: USB disconnect, device number 39
[  580.916408][ T8755] IPVS: sed: SCTP 172.20.20.187:0 - no destination available
[  581.009523][ T8758] fuse: Unknown parameter 'group_id00000000000000000000'
[  581.077218][ T8761] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  581.772713][ T8770] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  582.125770][ T8784] netlink: 'syz.3.777': attribute type 13 has an invalid length.
[  582.133928][ T8784] netlink: 'syz.3.777': attribute type 17 has an invalid length.
[  582.789603][ T8784] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  585.428114][ T8820] loop4: detected capacity change from 0 to 7
[  585.470593][ T8820] Dev loop4: unable to read RDB block 7
[  585.477071][ T8820]  loop4: AHDI p2 p3 p4
[  585.481490][ T8820] loop4: partition table partially beyond EOD, truncated
[  585.490067][ T8820] loop4: p3 size 4227858431 extends beyond EOD, truncated
[  585.619920][ T8825] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  585.815924][ T5876] usb 2-1: new full-speed USB device number 40 using dummy_hcd
[  586.085031][ T5876] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[  586.093910][ T5876] usb 2-1: config 0 has no interface number 0
[  586.147915][ T8833] loop4: detected capacity change from 0 to 7
[  586.161719][ T8833] Dev loop4: unable to read RDB block 7
[  586.167774][ T8833]  loop4: AHDI p3 p4
[  586.171911][ T8833] loop4: partition table partially beyond EOD, truncated
[  586.180583][ T8833] loop4: p3 size 4227858431 extends beyond EOD, truncated
[  586.250232][ T5876] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  586.259930][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  586.268452][ T5876] usb 2-1: Product: syz
[  586.272844][ T5876] usb 2-1: Manufacturer: syz
[  586.277771][ T5876] usb 2-1: SerialNumber: syz
[  586.475974][ T5876] usb 2-1: config 0 descriptor??
[  586.856853][   T42] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  586.868799][ T6069] udevd[6069]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  587.112759][ T5876] usb 2-1: Firmware: major: 2, minor: 17, hardware type: UNKNOWN (47)
[  587.178858][   T42] usb 6-1: config 0 has an invalid interface number: 20 but max is 0
[  587.188085][   T42] usb 6-1: config 0 has no interface number 0
[  587.194433][   T42] usb 6-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  587.296410][ T8842] lo: entered allmulticast mode
[  587.324446][ T5876] usb 2-1: failed to fetch extended address, random address set
[  587.332533][ T5876] usb 2-1: atusb_probe: initialization failed, error = -524
[  587.341536][ T5876] atusb 2-1:0.128: probe with driver atusb failed with error -524
[  587.409310][   T42] usb 6-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00
[  587.421690][   T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  587.430537][   T42] usb 6-1: Product: syz
[  587.434931][   T42] usb 6-1: Manufacturer: syz
[  587.437415][ T8844] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  587.439898][   T42] usb 6-1: SerialNumber: syz
[  587.509291][ T5876] usb 2-1: USB disconnect, device number 40
[  587.654376][   T42] usb 6-1: config 0 descriptor??
[  587.674445][ T8840] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  587.798094][   T42] usb-storage 6-1:0.20: USB Mass Storage device detected
[  587.895910][   T42] usb-storage 6-1:0.20: Quirks match for vid 04e6 pid 000b: 4
[  588.006518][   T42] scsi host1: usb-storage 6-1:0.20
[  588.147386][ T5876] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  588.471857][ T5876] usb 5-1: Using ep0 maxpacket: 16
[  588.562942][ T5876] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  588.573514][ T5876] usb 5-1: config 0 has no interface number 0
[  588.580172][ T5876] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  588.591768][ T5876] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  588.602087][ T5876] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  588.611546][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  588.677806][ T8840] loop6: detected capacity change from 0 to 524288000
[  588.951560][ T5910] usb 6-1: USB disconnect, device number 12
[  589.038918][ T6035] udevd[6035]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  589.098327][ T5876] usb 5-1: config 0 descriptor??
[  589.792715][ T5876] uclogic 0003:28BD:0071.000D: pen parameters not found
[  589.800363][ T5876] uclogic 0003:28BD:0071.000D: interface is invalid, ignoring
[  589.897931][ T5876] usb 5-1: USB disconnect, device number 52
[  590.228181][ T8878] netlink: 60 bytes leftover after parsing attributes in process `syz.0.798'.
[  590.237577][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.798'.
[  590.287366][ T8880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.798'.
[  590.608482][ T8888] netlink: 'syz.1.799': attribute type 13 has an invalid length.
[  590.616985][ T8888] netlink: 'syz.1.799': attribute type 17 has an invalid length.
[  590.713238][   T42] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  591.029222][   T42] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  591.038621][   T42] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  591.048236][   T42] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  591.059036][   T42] usb 6-1: config 220 has no interface number 2
[  591.066048][   T42] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  591.079716][   T42] usb 6-1: config 220 interface 0 has no altsetting 0
[  591.087019][   T42] usb 6-1: config 220 interface 76 has no altsetting 0
[  591.094729][   T42] usb 6-1: config 220 interface 1 has no altsetting 0
[  591.172789][ T5881] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[  591.213454][ T8888] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  591.397727][ T5881] usb 4-1: Using ep0 maxpacket: 16
[  591.457606][ T5881] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  591.466146][ T5881] usb 4-1: config 0 has no interface number 0
[  591.472484][ T5881] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  591.484655][ T5881] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  591.494950][ T5881] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  591.505232][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  591.704058][ T8899] loop4: detected capacity change from 0 to 7
[  591.709290][   T42] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  591.721906][   T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  591.730946][   T42] usb 6-1: Product: syz
[  591.735372][   T42] usb 6-1: Manufacturer: syz
[  591.740548][   T42] usb 6-1: SerialNumber: syz
[  591.766825][ T8899] Dev loop4: unable to read RDB block 7
[  591.772721][ T8899]  loop4: AHDI p3 p4
[  591.777233][ T8899] loop4: partition table partially beyond EOD, truncated
[  591.785903][ T8899] loop4: p3 size 4227858431 extends beyond EOD, truncated
[  591.953768][ T5881] usb 4-1: config 0 descriptor??
[  592.269574][   T42] usb 6-1: selecting invalid altsetting 0
[  592.277050][   T42] usb 6-1: Found UVC 7.01 device syz (8086:0b07)
[  592.283830][   T42] usb 6-1: No valid video chain found.
[  592.579637][   T42] usb 6-1: selecting invalid altsetting 0
[  592.587782][   T42] usbtest 6-1:220.1: probe with driver usbtest failed with error -22
[  592.681348][   T42] usb 6-1: USB disconnect, device number 13
[  592.736964][ T5881] uclogic 0003:28BD:0071.000E: failed retrieving string descriptor #100: -71
[  592.746449][ T5881] uclogic 0003:28BD:0071.000E: failed retrieving pen parameters: -71
[  592.754800][ T5881] uclogic 0003:28BD:0071.000E: pen probing failed: -71
[  592.761210][ T8904] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  592.762007][ T5881] uclogic 0003:28BD:0071.000E: failed probing parameters: -71
[  592.779188][ T5881] uclogic 0003:28BD:0071.000E: probe with driver uclogic failed with error -71
[  593.074419][ T5881] usb 4-1: USB disconnect, device number 41
[  593.085093][ T6035] udevd[6035]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  594.810791][ T2051] usb 4-1: new full-speed USB device number 42 using dummy_hcd
[  595.045059][ T2051] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[  595.054110][ T2051] usb 4-1: config 0 has no interface number 0
[  595.118012][ T2051] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  595.127790][ T2051] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  595.136924][ T2051] usb 4-1: Product: syz
[  595.141362][ T2051] usb 4-1: Manufacturer: syz
[  595.146441][ T2051] usb 4-1: SerialNumber: syz
[  595.255437][ T2051] usb 4-1: config 0 descriptor??
[  596.032005][ T2051] usb 4-1: Firmware: major: 2, minor: 17, hardware type: UNKNOWN (47)
[  596.180941][ T8945] netlink: 60 bytes leftover after parsing attributes in process `syz.4.813'.
[  596.190530][ T8945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.813'.
[  596.251539][ T8946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.813'.
[  596.256216][ T2051] usb 4-1: failed to fetch extended address, random address set
[  596.268582][ T2051] usb 4-1: atusb_probe: initialization failed, error = -524
[  596.277216][ T2051] atusb 4-1:0.128: probe with driver atusb failed with error -524
[  596.329712][ T8944] loop4: detected capacity change from 0 to 7
[  596.388144][ T8944] Dev loop4: unable to read RDB block 7
[  596.394275][ T8944]  loop4: AHDI p3 p4
[  596.398918][ T8944] loop4: partition table partially beyond EOD, truncated
[  596.407462][ T8944] loop4: p3 size 4227858431 extends beyond EOD, truncated
[  596.470034][ T2051] usb 4-1: USB disconnect, device number 42
[  596.636023][ T5876] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  596.948075][ T5876] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  596.957140][ T5876] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  596.967377][ T5876] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  596.978075][ T5876] usb 6-1: config 220 has no interface number 2
[  596.984599][ T5876] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  596.998515][ T5876] usb 6-1: config 220 interface 0 has no altsetting 0
[  597.005646][ T5876] usb 6-1: config 220 interface 76 has no altsetting 0
[  597.012745][ T5876] usb 6-1: config 220 interface 1 has no altsetting 0
[  597.207872][ T8955] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  597.323153][ T6035] udevd[6035]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  597.399912][ T5876] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  597.409447][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.417969][ T5876] usb 6-1: Product: syz
[  597.422356][ T5876] usb 6-1: Manufacturer: syz
[  597.427292][ T5876] usb 6-1: SerialNumber: syz
[  597.913951][ T5876] usb 6-1: selecting invalid altsetting 0
[  597.922054][ T5876] usb 6-1: Found UVC 7.01 device syz (8086:0b07)
[  597.928967][ T5876] usb 6-1: No valid video chain found.
[  597.936416][ T5881] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  598.283306][ T5876] usb 6-1: selecting invalid altsetting 0
[  598.289626][ T5876] usbtest 6-1:220.1: probe with driver usbtest failed with error -22
[  598.338874][ T5881] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  598.350470][ T5876] usb 6-1: USB disconnect, device number 14
[  598.358558][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  598.370968][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  598.381470][ T5881] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  599.020494][ T5881] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  599.030222][ T5881] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  599.040479][ T5881] usb 5-1: Manufacturer: syz
[  599.358672][ T5881] usb 5-1: config 0 descriptor??
[  599.974441][ T8210] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  600.126943][ T5881] usbhid 5-1:0.0: can't add hid device: -71
[  600.134343][ T5881] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  600.347810][ T8210] usb 2-1: Using ep0 maxpacket: 16
[  600.502575][ T5881] usb 5-1: USB disconnect, device number 53
[  600.852544][ T8210] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  600.861038][ T8210] usb 2-1: config 0 has no interface number 0
[  600.867811][ T8210] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  600.879725][ T8210] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  600.890386][ T8210] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  600.899918][ T8210] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  601.213361][ T8210] usb 2-1: config 0 descriptor??
[  602.169370][ T8210] uclogic 0003:28BD:0071.000F: pen parameters not found
[  602.177061][ T8210] uclogic 0003:28BD:0071.000F: interface is invalid, ignoring
[  603.241483][ T5876] usb 2-1: USB disconnect, device number 41
[  603.522723][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  603.886401][ T2051] usb 1-1: new low-speed USB device number 29 using dummy_hcd
[  604.127792][ T9001] netlink: 60 bytes leftover after parsing attributes in process `syz.3.829'.
[  604.183679][ T2051] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[  604.195319][ T2051] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  604.209234][ T2051] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  604.285719][ T9002] netlink: 4 bytes leftover after parsing attributes in process `syz.3.829'.
[  604.725828][ T2051] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[  604.737145][ T2051] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  604.748554][ T2051] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  605.301154][ T9007] loop4: detected capacity change from 0 to 7
[  605.318905][ T2051] usb 1-1: config 168 has an invalid descriptor of length 255, skipping remainder of the config
[  605.332579][ T2051] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8
[  605.345083][ T2051] usb 1-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  605.495794][ T9007] Dev loop4: unable to read RDB block 7
[  605.501694][ T9007]  loop4: AHDI p3 p4
[  605.506661][ T9007] loop4: partition table partially beyond EOD, truncated
[  605.515126][ T9007] loop4: p3 size 4227858431 extends beyond EOD, truncated
[  605.755923][ T5876] usb 2-1: new full-speed USB device number 42 using dummy_hcd
[  605.829877][ T2051] usb 1-1: string descriptor 0 read error: -22
[  605.837819][ T2051] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  605.849886][ T2051] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  605.894847][ T9012] fuse: Bad value for 'fd'
[  605.960029][ T2051] adutux 1-1:168.0: interrupt endpoints not found
[  605.996383][ T5876] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[  606.004846][ T5876] usb 2-1: config 0 has no interface number 0
[  606.064716][ T5876] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  606.075005][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  606.083480][ T5876] usb 2-1: Product: syz
[  606.087977][ T5876] usb 2-1: Manufacturer: syz
[  606.092781][ T5876] usb 2-1: SerialNumber: syz
[  606.104592][ T5876] usb 2-1: config 0 descriptor??
[  606.131295][ T8210] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  606.349495][ T8210] usb 5-1: Using ep0 maxpacket: 8
[  606.370922][ T5881] usb 1-1: USB disconnect, device number 29
[  606.430736][ T8210] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  606.440545][ T8210] usb 5-1: config 0 has no interface number 0
[  606.448159][ T8210] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  606.461692][ T8210] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  606.474930][ T8210] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  606.487571][ T8210] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  606.498821][ T8210] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  606.512553][ T8210] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  606.522025][ T8210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  607.031462][ T5876] usb 2-1: Firmware: major: 2, minor: 17, hardware type: UNKNOWN (47)
[  607.050371][ T8210] usb 5-1: config 0 descriptor??
[  607.140688][ T8210] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  607.252335][ T5876] usb 2-1: failed to fetch extended address, random address set
[  607.260496][ T5876] usb 2-1: atusb_probe: initialization failed, error = -524
[  607.269467][ T5876] atusb 2-1:0.128: probe with driver atusb failed with error -524
[  607.535401][ T5876] usb 2-1: USB disconnect, device number 42
[  607.541283][ T6035] udevd[6035]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  607.953565][ T8210] usb 5-1: USB disconnect, device number 54
[  608.154681][ T8210] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  608.246165][ T2051] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  608.472281][ T2051] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  608.483809][ T2051] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  608.496184][ T2051] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  608.507668][ T2051] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  609.252748][ T2051] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  609.263119][ T2051] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  609.271570][ T2051] usb 1-1: Manufacturer: syz
[  609.699143][ T2051] usb 1-1: config 0 descriptor??
[  610.060498][ T9032] input: syz1 as /devices/virtual/input/input15
[  610.150569][ T2051] usbhid 1-1:0.0: can't add hid device: -71
[  610.157656][ T2051] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  610.249948][ T2051] usb 1-1: USB disconnect, device number 30
[  610.392118][ T9041] netlink: 60 bytes leftover after parsing attributes in process `syz.4.842'.
[  610.452193][ T9041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.842'.
[  610.554350][ T5876] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  610.757263][ T5876] usb 2-1: Using ep0 maxpacket: 16
[  610.810117][ T5876] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  610.819063][ T5876] usb 2-1: config 0 has no interface number 0
[  610.825765][ T5876] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  610.837298][ T5876] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  610.848489][ T5876] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  610.858025][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  611.127797][ T9051] netlink: 'syz.3.843': attribute type 13 has an invalid length.
[  611.136319][ T9051] netlink: 'syz.3.843': attribute type 17 has an invalid length.
[  611.514555][ T5876] usb 2-1: config 0 descriptor??
[  611.862155][ T9055] mmap: syz.5.844 (9055) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  612.683064][ T9051] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  613.807127][ T8210] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[  613.935741][ T5876] uclogic 0003:28BD:0071.0010: failed retrieving string descriptor #100: -71
[  613.944976][ T5876] uclogic 0003:28BD:0071.0010: failed retrieving pen parameters: -71
[  613.953573][ T5876] uclogic 0003:28BD:0071.0010: pen probing failed: -71
[  613.961353][ T5876] uclogic 0003:28BD:0071.0010: failed probing parameters: -71
[  613.969664][ T5876] uclogic 0003:28BD:0071.0010: probe with driver uclogic failed with error -71
[  614.147324][ T8210] usb 5-1: Using ep0 maxpacket: 32
[  614.361197][ T8210] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  614.371411][ T8210] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  614.380930][ T8210] usb 5-1: Product: syz
[  614.385307][ T8210] usb 5-1: Manufacturer: syz
[  614.390423][ T8210] usb 5-1: SerialNumber: syz
[  614.719213][ T8210] usb 5-1: config 0 descriptor??
[  614.801912][ T8210] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  614.913275][ T5876] usb 2-1: USB disconnect, device number 43
[  615.421033][ T5876] usb 2-1: new full-speed USB device number 44 using dummy_hcd
[  615.814808][ T5876] usb 2-1: config 0 has an invalid interface number: 128 but max is 0
[  615.823751][ T5876] usb 2-1: config 0 has no interface number 0
[  615.941017][ T5876] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  615.952979][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  615.961570][ T5876] usb 2-1: Product: syz
[  615.966046][ T5876] usb 2-1: Manufacturer: syz
[  615.970876][ T5876] usb 2-1: SerialNumber: syz
[  616.122797][ T5876] usb 2-1: config 0 descriptor??
[  616.848840][ T5876] usb 2-1: Firmware: major: 2, minor: 17, hardware type: UNKNOWN (47)
[  616.906017][ T8210] gspca_topro: reg_r err -32
[  616.910948][ T8210] gspca_topro: Sensor soi763a
[  617.036847][ T8210] usb 5-1: USB disconnect, device number 55
[  617.202775][ T5876] usb 2-1: failed to fetch extended address, random address set
[  617.213222][ T5876] usb 2-1: atusb_probe: initialization failed, error = -524
[  617.222190][ T5876] atusb 2-1:0.128: probe with driver atusb failed with error -524
[  617.615428][ T5876] usb 2-1: USB disconnect, device number 44
[  618.251171][ T9098] input: syz1 as /devices/virtual/input/input16
[  618.593170][ T8210] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  618.816942][ T8210] usb 4-1: Using ep0 maxpacket: 16
[  618.866595][ T5881] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  618.891352][ T8210] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  618.901932][ T8210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  618.913402][ T8210] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  618.923272][ T8210] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  618.933216][ T8210] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  619.102331][ T5881] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  619.114584][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  619.126101][ T5881] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  619.137011][ T5881] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  619.260941][ T8210] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  619.271258][ T8210] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  619.279841][ T8210] usb 4-1: Manufacturer: syz
[  619.437914][ T8210] usb 4-1: config 0 descriptor??
[  619.487186][ T5881] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  619.498332][ T5881] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  619.507753][ T5881] usb 5-1: Manufacturer: syz
[  619.699415][ T1877] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  619.898781][ T5881] usb 5-1: config 0 descriptor??
[  619.982923][ T1877] usb 6-1: Using ep0 maxpacket: 16
[  620.059759][ T8210] rc_core: IR keymap rc-hauppauge not found
[  620.066736][ T8210] Registered IR keymap rc-empty
[  620.073066][ T8210] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  620.083331][ T1877] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  620.091696][ T1877] usb 6-1: config 0 has no interface number 0
[  620.098830][ T1877] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  620.110357][ T1877] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  620.120894][ T1877] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  620.130656][ T1877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  620.265623][ T8210] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  620.416629][ T8210] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  620.436538][ T8210] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input17
[  620.560012][ T5881] usbhid 5-1:0.0: can't add hid device: -71
[  620.567380][ T5881] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  620.856909][ T5881] usb 5-1: USB disconnect, device number 56
[  620.878110][ T1877] usb 6-1: config 0 descriptor??
[  620.963709][ T8210] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  621.103629][ T8210] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  621.166530][ T8210] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  621.227778][ T8210] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  621.277319][ T8210] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  621.361864][ T8210] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  621.397372][ T8210] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  621.464547][ T8210] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  621.538041][ T1877] uclogic 0003:28BD:0071.0011: failed retrieving string descriptor #100: -71
[  621.547937][ T1877] uclogic 0003:28BD:0071.0011: failed retrieving pen parameters: -71
[  621.556602][ T1877] uclogic 0003:28BD:0071.0011: pen probing failed: -71
[  621.563870][ T1877] uclogic 0003:28BD:0071.0011: failed probing parameters: -71
[  621.572642][ T1877] uclogic 0003:28BD:0071.0011: probe with driver uclogic failed with error -71
[  621.606106][ T8210] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  621.659585][ T8210] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  621.748204][ T8210] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  621.758763][ T8210] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  621.807517][ T9123] netlink: 'syz.1.860': attribute type 13 has an invalid length.
[  621.816147][ T9123] netlink: 'syz.1.860': attribute type 17 has an invalid length.
[  622.015895][ T1877] usb 6-1: USB disconnect, device number 15
[  622.035436][ T8210] usb 4-1: USB disconnect, device number 43
[  622.297285][ T9123] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  625.792698][ T8210] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  626.649665][ T2051] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  626.790000][ T8210] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  626.799297][ T8210] usb 1-1: config 0 has no interface number 0
[  626.806072][ T8210] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  626.817560][ T8210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  626.922775][ T8210] usb 1-1: config 0 descriptor??
[  626.941759][ T8210] cp210x 1-1:0.1: cp210x converter detected
[  627.950893][ T2051] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  627.963719][ T2051] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  627.975385][ T2051] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  627.985727][ T2051] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  628.096339][ T8210] cp210x 1-1:0.1: failed to get vendor val 0x370b size 1: -121
[  628.104522][ T8210] cp210x 1-1:0.1: querying part number failed
[  628.668214][ T8210] usb 1-1: cp210x converter now attached to ttyUSB0
[  629.716395][ T2051] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  629.725823][ T2051] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  629.734141][ T2051] usb 4-1: Manufacturer: syz
[  630.000038][ T2051] usb 4-1: config 0 descriptor??
[  630.537099][ T2051] usb 4-1: can't set config #0, error -71
[  630.575984][ T2051] usb 4-1: USB disconnect, device number 44
[  631.250722][ T8210] usb 1-1: USB disconnect, device number 31
[  631.812025][ T8210] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  631.823558][ T8210] cp210x 1-1:0.1: device disconnected
[  639.658793][ T2051] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  639.889568][ T2051] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  639.900947][ T2051] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  639.912590][ T2051] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  639.922812][ T2051] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  640.015338][ T2051] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  640.025086][ T2051] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  640.033824][ T2051] usb 1-1: Manufacturer: syz
[  640.150483][ T2051] usb 1-1: config 0 descriptor??
[  640.259576][ T9235] syzkaller0: entered promiscuous mode
[  640.266089][ T9235] syzkaller0: entered allmulticast mode
[  640.779036][ T2051] usbhid 1-1:0.0: can't add hid device: -71
[  640.786967][ T2051] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  640.853519][ T2051] usb 1-1: USB disconnect, device number 32
[  641.836156][ T2051] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  642.086106][ T2051] usb 5-1: Using ep0 maxpacket: 32
[  642.122689][ T2051] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  642.131683][ T2051] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  642.143247][ T2051] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  642.154903][ T2051] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0
[  642.165235][ T2051] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  642.178986][ T2051] usb 5-1: config 0 interface 0 has no altsetting 0
[  642.254589][ T2051] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  642.264474][ T2051] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  642.273441][ T2051] usb 5-1: Product: syz
[  642.277945][ T2051] usb 5-1: Manufacturer: syz
[  642.282844][ T2051] usb 5-1: SerialNumber: syz
[  642.400579][ T2051] usb 5-1: config 0 descriptor??
[  642.472658][ T2051] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  642.618011][ T2051] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  642.733001][ T9258] binder: BINDER_SET_CONTEXT_MGR already set
[  642.739500][ T9258] binder: 9257:9258 ioctl 4018620d 2000000002c0 returned -16
[  644.767105][ T9275] syzkaller0: entered promiscuous mode
[  644.773042][ T9275] syzkaller0: entered allmulticast mode
[  644.833739][ T9278] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  644.843733][ T9278] block device autoloading is deprecated and will be removed.
[  645.417657][ T2051] usb 5-1: USB disconnect, device number 57
[  645.452981][ T2051] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  646.042889][ T9287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.907'.
[  646.755908][ T2051] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  647.014498][ T2051] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  647.026596][ T2051] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  647.038252][ T2051] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  647.048382][ T2051] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  647.478513][ T2051] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  647.488491][ T2051] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  647.497176][ T2051] usb 5-1: Manufacturer: syz
[  647.657330][ T2051] usb 5-1: config 0 descriptor??
[  648.103741][ T9298] binder: BINDER_SET_CONTEXT_MGR already set
[  648.110838][ T9298] binder: 9297:9298 ioctl 4018620d 2000000002c0 returned -16
[  648.234192][ T2051] usbhid 5-1:0.0: can't add hid device: -71
[  648.242672][ T2051] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  648.399473][ T2051] usb 5-1: USB disconnect, device number 58
[  652.157392][ T2051] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  652.230336][ T9326] tipc: Started in network mode
[  652.235931][ T9326] tipc: Node identity d2c8836c31a8, cluster identity 4711
[  652.244120][ T9326] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  652.327712][ T9329] syzkaller0: entered promiscuous mode
[  652.334885][ T9329] syzkaller0: entered allmulticast mode
[  652.399401][ T2051] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  652.408358][ T2051] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  652.419377][ T2051] usb 5-1: config 220 has no interface number 2
[  652.426002][ T2051] usb 5-1: config 220 interface 1 altsetting 5 has an invalid endpoint descriptor of length 6, skipping
[  652.439052][ T2051] usb 5-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  652.452570][ T2051] usb 5-1: config 220 interface 0 has no altsetting 0
[  652.459847][ T2051] usb 5-1: config 220 interface 76 has no altsetting 0
[  652.467225][ T2051] usb 5-1: config 220 interface 1 has no altsetting 0
[  652.489718][ T9329] tipc: Resetting bearer <eth:syzkaller0>
[  652.570356][ T9325] tipc: Resetting bearer <eth:syzkaller0>
[  652.603024][ T9325] tipc: Disabling bearer <eth:syzkaller0>
[  652.724489][ T2051] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  652.734146][ T2051] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  652.743760][ T2051] usb 5-1: Product: syz
[  652.748243][ T2051] usb 5-1: Manufacturer: syz
[  652.753063][ T2051] usb 5-1: SerialNumber: syz
[  653.317829][ T2051] usb 5-1: selecting invalid altsetting 0
[  653.324296][ T2051] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[  653.331570][ T2051] usb 5-1: No valid video chain found.
[  653.376478][ T8210] usb 4-1: new full-speed USB device number 45 using dummy_hcd
[  653.415323][ T2051] usb 5-1: selecting invalid altsetting 0
[  653.421622][ T2051] usbtest 5-1:220.1: probe with driver usbtest failed with error -22
[  653.556746][ T8210] usb 4-1: device descriptor read/64, error -71
[  653.588110][ T2051] usb 5-1: USB disconnect, device number 59
[  654.240804][ T9339] binder: BINDER_SET_CONTEXT_MGR already set
[  654.247363][ T9339] binder: 9338:9339 ioctl 4018620d 2000000002c0 returned -16
[  654.450362][ T9341] overlayfs: failed to resolve './file0': -2
[  654.516185][ T8210] usb 4-1: new full-speed USB device number 46 using dummy_hcd
[  654.697271][ T8210] usb 4-1: device descriptor read/64, error -71
[  654.812728][ T8210] usb usb4-port1: attempt power cycle
[  655.236214][ T8210] usb 4-1: new full-speed USB device number 47 using dummy_hcd
[  655.282055][ T8210] usb 4-1: device descriptor read/8, error -71
[  655.546473][   T42] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  655.555659][ T8210] usb 4-1: new full-speed USB device number 48 using dummy_hcd
[  655.644739][ T8210] usb 4-1: device descriptor read/8, error -71
[  655.766645][ T8210] usb usb4-port1: unable to enumerate USB device
[  655.809016][   T42] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  655.821464][   T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  655.833098][   T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  655.843314][   T42] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  655.984423][   T42] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  655.994636][   T42] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  656.003270][   T42] usb 5-1: Manufacturer: syz
[  656.143375][   T42] usb 5-1: config 0 descriptor??
[  656.727102][   T42] usbhid 5-1:0.0: can't add hid device: -71
[  656.733856][   T42] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  656.870639][   T42] usb 5-1: USB disconnect, device number 60
[  657.582032][ T9360] 9pnet_fd: Insufficient options for proto=fd
[  658.595838][   T42] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  658.821724][   T42] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  658.830889][   T42] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  658.841735][   T42] usb 1-1: config 220 has no interface number 2
[  658.851501][   T42] usb 1-1: config 220 interface 1 altsetting 5 has an invalid endpoint descriptor of length 6, skipping
[  658.866407][   T42] usb 1-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[  658.879860][   T42] usb 1-1: config 220 interface 0 has no altsetting 0
[  658.888187][   T42] usb 1-1: config 220 interface 76 has no altsetting 0
[  658.895295][   T42] usb 1-1: config 220 interface 1 has no altsetting 0
[  658.914499][   T42] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  658.924184][   T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  658.932669][   T42] usb 1-1: Product: syz
[  658.937545][   T42] usb 1-1: Manufacturer: syz
[  658.942498][   T42] usb 1-1: SerialNumber: syz
[  659.279975][   T42] usb 1-1: selecting invalid altsetting 0
[  659.287400][   T42] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[  659.294115][   T42] usb 1-1: No valid video chain found.
[  659.387082][   T42] usb 1-1: selecting invalid altsetting 0
[  659.393100][   T42] usbtest 1-1:220.1: probe with driver usbtest failed with error -22
[  659.578305][   T42] usb 1-1: USB disconnect, device number 33
[  659.996127][ T2051] usb 5-1: new full-speed USB device number 61 using dummy_hcd
[  660.196186][ T2051] usb 5-1: device descriptor read/64, error -71
[  660.476342][ T2051] usb 5-1: new full-speed USB device number 62 using dummy_hcd
[  660.597269][ T5876] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  660.666546][ T2051] usb 5-1: device descriptor read/64, error -71
[  660.787877][ T2051] usb usb5-port1: attempt power cycle
[  660.845872][ T5876] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  660.857172][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  660.868908][ T5876] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  660.879030][ T5876] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  661.043653][ T5876] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  661.053517][ T5876] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  661.062316][ T5876] usb 2-1: Manufacturer: syz
[  661.142565][ T5876] usb 2-1: config 0 descriptor??
[  661.248143][ T2051] usb 5-1: new full-speed USB device number 63 using dummy_hcd
[  661.291112][ T2051] usb 5-1: device descriptor read/8, error -71
[  661.566294][ T2051] usb 5-1: new full-speed USB device number 64 using dummy_hcd
[  661.675798][ T2051] usb 5-1: device descriptor read/8, error -71
[  661.787989][ T2051] usb usb5-port1: unable to enumerate USB device
[  661.900440][ T5876] usbhid 2-1:0.0: can't add hid device: -71
[  661.907866][ T5876] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  661.980304][ T5876] usb 2-1: USB disconnect, device number 45
[  662.833204][ T9405] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  662.844618][ T9405] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  662.869658][ T9405] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  662.957973][ T9405] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  662.974512][ T9405] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  664.538122][ T4258] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  664.963277][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  665.016063][ T4258] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  665.266823][ T9405] Bluetooth: hci4: command tx timeout
[  665.775212][ T4258] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  666.018555][ T9420] lo speed is unknown, defaulting to 1000
[  666.032357][ T9420] lo speed is unknown, defaulting to 1000
[  666.042065][ T9420] lo speed is unknown, defaulting to 1000
[  666.646654][ T9424] loop2: detected capacity change from 0 to 7
[  666.704012][ T9424] Dev loop2: unable to read RDB block 7
[  666.710229][ T9424]  loop2: unable to read partition table
[  667.015078][ T9424] loop2: partition table beyond EOD, truncated
[  667.021903][ T9424] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  667.321586][ T4258] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  667.402854][ T9420] infiniband syz2: set active
[  667.408531][ T9420] infiniband syz2: added lo
[  667.430270][ T9420] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  667.444780][ T9420] infiniband syz2: Couldn't open port 1
[  667.506312][ T9405] Bluetooth: hci4: command tx timeout
[  667.620519][ T9420] RDS/IB: syz2: added
[  667.624955][ T9420] smc: adding ib device syz2 with port count 1
[  667.631855][ T9420] smc:    ib device syz2 port 1 has pnetid 
[  667.647216][ T5876] lo speed is unknown, defaulting to 1000
[  667.685958][ T9420] lo speed is unknown, defaulting to 1000
[  667.785234][ T5876] lo speed is unknown, defaulting to 1000
[  669.604536][ T4258] bridge_slave_1: left allmulticast mode
[  669.611764][ T4258] bridge_slave_1: left promiscuous mode
[  669.618929][ T4258] bridge0: port 2(bridge_slave_1) entered disabled state
[  669.633945][ T5816] Bluetooth: hci4: command tx timeout
[  670.723556][ T4258] bridge_slave_0: left allmulticast mode
[  670.729691][ T4258] bridge_slave_0: left promiscuous mode
[  670.736966][ T4258] bridge0: port 1(bridge_slave_0) entered disabled state
[  671.656837][ T5816] Bluetooth: hci4: command tx timeout
[  672.538574][ T4258] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  672.578980][ T4258] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  672.632797][ T4258] bond0 (unregistering): Released all slaves
[  672.727905][ T9437] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  672.806493][ T9420] lo speed is unknown, defaulting to 1000
[  672.960214][ T9404] chnl_net:caif_netlink_parms(): no params data found
[  673.266410][ T4258] tipc: Left network mode
[  674.537749][ T9420] lo speed is unknown, defaulting to 1000
[  675.827764][ T9404] bridge0: port 1(bridge_slave_0) entered blocking state
[  675.836150][ T9404] bridge0: port 1(bridge_slave_0) entered disabled state
[  675.844068][ T9404] bridge_slave_0: entered allmulticast mode
[  675.910839][ T9404] bridge_slave_0: entered promiscuous mode
[  675.933860][ T9404] bridge0: port 2(bridge_slave_1) entered blocking state
[  675.941786][ T9404] bridge0: port 2(bridge_slave_1) entered disabled state
[  675.949807][ T9404] bridge_slave_1: entered allmulticast mode
[  675.963514][ T9404] bridge_slave_1: entered promiscuous mode
[  675.979046][   T42] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  676.146848][   T42] usb 5-1: device descriptor read/64, error -71
[  676.297510][ T9404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  676.310801][ T9453] lo speed is unknown, defaulting to 1000
[  676.342921][ T9504] fuse: Unknown parameter '00000000000000000000'
[  676.453376][ T9404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  676.463774][   T42] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[  676.655865][   T42] usb 5-1: device descriptor read/64, error -71
[  676.770310][   T42] usb usb5-port1: attempt power cycle
[  676.941939][ T9404] team0: Port device team_slave_0 added
[  676.985230][ T9404] team0: Port device team_slave_1 added
[  677.160478][   T42] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  677.189015][   T42] usb 5-1: device descriptor read/8, error -71
[  677.201803][ T9404] batman_adv: batadv0: Adding interface: batadv_slave_0
[  677.209342][ T9404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  677.237257][ T9404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  677.347607][ T9404] batman_adv: batadv0: Adding interface: batadv_slave_1
[  677.354983][ T9404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  677.381805][ T9404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  677.484285][   T42] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  677.519896][   T42] usb 5-1: device descriptor read/8, error -71
[  677.654679][ T9420] lo speed is unknown, defaulting to 1000
[  677.708006][   T42] usb usb5-port1: unable to enumerate USB device
[  678.653604][ T9404] hsr_slave_0: entered promiscuous mode
[  678.666979][ T9404] hsr_slave_1: entered promiscuous mode
[  678.676925][ T9404] debugfs: 'hsr0' already exists in 'hsr'
[  678.682869][ T9404] Cannot create hsr debugfs directory
[  678.839761][ T9420] lo speed is unknown, defaulting to 1000
[  679.470343][ T9522] tipc: Started in network mode
[  679.476307][ T9522] tipc: Node identity 7647cd86219c, cluster identity 4711
[  679.484193][ T9522] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  679.751578][ T9522] tipc: Resetting bearer <eth:syzkaller0>
[  680.061673][ T9520] tipc: Disabling bearer <eth:syzkaller0>
[  680.318503][ T9420] lo speed is unknown, defaulting to 1000
[  682.078076][ T9404] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  682.197825][ T9404] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  682.304522][ T9404] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  682.444683][ T9404] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  682.697464][ T9405] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  682.728957][ T9405] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  682.803123][ T9405] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  682.951325][ T9405] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  683.030990][ T9405] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  683.176347][ T2051] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  683.875624][ T2051] usb 5-1: Using ep0 maxpacket: 16
[  684.192532][ T9551] lo speed is unknown, defaulting to 1000
[  684.219406][ T2051] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  684.229551][ T2051] usb 5-1: config 0 has no interface number 0
[  684.237374][ T2051] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  684.250561][ T2051] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  684.261747][ T2051] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  684.272078][ T2051] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  684.416972][ T2051] usb 5-1: config 0 descriptor??
[  684.439133][ T4258] hsr_slave_0: left promiscuous mode
[  684.507687][ T4258] hsr_slave_1: left promiscuous mode
[  684.519225][ T4258] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  684.527650][ T4258] batman_adv: batadv0: Removing interface: batadv_slave_0
[  684.611282][ T4258] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  684.619479][ T4258] batman_adv: batadv0: Removing interface: batadv_slave_1
[  684.896293][ T2051] usbhid 5-1:0.1: can't add hid device: -71
[  684.902715][ T2051] usbhid 5-1:0.1: probe with driver usbhid failed with error -71
[  684.962707][ T2051] usb 5-1: USB disconnect, device number 69
[  685.061877][ T4258] veth1_macvtap: left promiscuous mode
[  685.067973][ T4258] veth0_macvtap: left promiscuous mode
[  685.073944][ T4258] veth1_vlan: left promiscuous mode
[  685.080322][ T4258] veth0_vlan: left promiscuous mode
[  685.096667][ T9405] Bluetooth: hci5: command tx timeout
[  687.182266][ T9405] Bluetooth: hci5: command tx timeout
[  687.340812][ T5816] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  687.351303][ T5816] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  687.368784][ T5816] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  687.389760][ T5816] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  687.417406][ T5816] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  687.550153][ T4258] team0 (unregistering): Port device team_slave_1 removed
[  687.599255][ T4258] team0 (unregistering): Port device team_slave_0 removed
[  688.183989][ T9584] lo speed is unknown, defaulting to 1000
[  689.121291][ T9404] 8021q: adding VLAN 0 to HW filter on device bond0
[  689.327961][ T5816] Bluetooth: hci5: command tx timeout
[  689.496842][ T5816] Bluetooth: hci6: command tx timeout
[  690.558375][ T9404] 8021q: adding VLAN 0 to HW filter on device team0
[  690.811039][ T8179] bridge0: port 1(bridge_slave_0) entered blocking state
[  690.818794][ T8179] bridge0: port 1(bridge_slave_0) entered forwarding state
[  691.053831][ T8179] bridge0: port 2(bridge_slave_1) entered blocking state
[  691.061553][ T8179] bridge0: port 2(bridge_slave_1) entered forwarding state
[  691.336210][ T5816] Bluetooth: hci5: command tx timeout
[  691.599221][ T5816] Bluetooth: hci6: command tx timeout
[  691.800461][ T9602] binder: 9600:9602 ioctl 4018620d 0 returned -22
[  692.479284][ T1879] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  692.650448][ T9551] chnl_net:caif_netlink_parms(): no params data found
[  692.713450][ T9559] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  692.802546][ T1879] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  692.877089][ T9559] usb 1-1: Using ep0 maxpacket: 16
[  692.938072][ T9559] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  692.946523][ T9559] usb 1-1: config 0 has no interface number 0
[  692.952853][ T9559] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  692.964324][ T9559] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  692.974635][ T9559] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  692.984718][ T9559] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  693.057516][ T1879] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  693.244300][ T9559] usb 1-1: config 0 descriptor??
[  693.353305][ T1879] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  693.700017][ T5816] Bluetooth: hci6: command tx timeout
[  693.709314][ T9559] usbhid 1-1:0.1: can't add hid device: -71
[  693.716471][ T9559] usbhid 1-1:0.1: probe with driver usbhid failed with error -71
[  693.774231][ T9559] usb 1-1: USB disconnect, device number 34
[  693.880880][ T9584] chnl_net:caif_netlink_parms(): no params data found
[  694.327601][ T8210] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  694.537527][ T8210] usb 5-1: Using ep0 maxpacket: 8
[  694.579000][ T1879] bridge_slave_1: left allmulticast mode
[  694.584918][ T1879] bridge_slave_1: left promiscuous mode
[  694.592348][ T1879] bridge0: port 2(bridge_slave_1) entered disabled state
[  694.606077][ T8210] usb 5-1: config 0 has an invalid interface number: 55 but max is 0
[  694.614663][ T8210] usb 5-1: config 0 has no interface number 0
[  694.621257][ T8210] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  694.635061][ T8210] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  694.647704][ T8210] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  694.659111][ T8210] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  694.672603][ T8210] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  694.682029][ T8210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  694.705071][ T1879] bridge_slave_0: left allmulticast mode
[  694.713623][ T1879] bridge_slave_0: left promiscuous mode
[  694.720927][ T1879] bridge0: port 1(bridge_slave_0) entered disabled state
[  694.919046][ T8210] usb 5-1: config 0 descriptor??
[  695.078898][ T8210] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  695.483239][ T8210] usb 5-1: USB disconnect, device number 70
[  695.516595][ T8210] ldusb 5-1:0.55: LD USB Device #0 now disconnected
[  695.568802][ T1879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  695.654312][ T1879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  695.733615][ T1879] bond0 (unregistering): Released all slaves
[  695.740142][ T5816] Bluetooth: hci6: command tx timeout
[  695.888104][ T9404] 8021q: adding VLAN 0 to HW filter on device batadv0
[  696.283523][ T1879] tipc: Left network mode
[  697.449275][ T9647] netlink: 'syz.0.994': attribute type 10 has an invalid length.
[  697.507048][ T9652] netlink: 'syz.0.994': attribute type 10 has an invalid length.
[  697.602290][ T9652] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  697.647475][ T9647] 8021q: adding VLAN 0 to HW filter on device team0
[  697.664592][ T9647] bond0: (slave team0): Enslaving as an active interface with an up link
[  698.015284][ T9551] bridge0: port 1(bridge_slave_0) entered blocking state
[  698.023557][ T9551] bridge0: port 1(bridge_slave_0) entered disabled state
[  698.031744][ T9551] bridge_slave_0: entered allmulticast mode
[  698.043425][ T9551] bridge_slave_0: entered promiscuous mode
[  698.223500][ T9654] 8021q: adding VLAN 0 to HW filter on device bond1
[  698.307731][ T9652] syz_tun: entered promiscuous mode
[  698.317043][ T9652] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  698.339322][ T9652] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[  698.460001][ T1879] hsr_slave_0: left promiscuous mode
[  698.485903][ T1879] hsr_slave_1: left promiscuous mode
[  698.494245][ T1879] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  698.502076][ T1879] batman_adv: batadv0: Removing interface: batadv_slave_0
[  698.569117][ T1879] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  698.578694][ T1879] batman_adv: batadv0: Removing interface: batadv_slave_1
[  698.766419][ T1879] veth1_vlan: left promiscuous mode
[  698.772077][ T1879] veth0_vlan: left promiscuous mode
[  699.338206][ T9668] binder: 9666:9668 ioctl 4018620d 0 returned -22
[  699.743767][ T1879] team0 (unregistering): Port device team_slave_1 removed
[  699.813689][ T1879] team0 (unregistering): Port device team_slave_0 removed
[  700.367937][ T3824] smc: removing ib device syz2
[  700.406800][ T5881] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  700.432574][ T9551] bridge0: port 2(bridge_slave_1) entered blocking state
[  700.440601][ T9551] bridge0: port 2(bridge_slave_1) entered disabled state
[  700.448594][ T9551] bridge_slave_1: entered allmulticast mode
[  700.460402][ T9551] bridge_slave_1: entered promiscuous mode
[  700.516611][ T9584] bridge0: port 1(bridge_slave_0) entered blocking state
[  700.524211][ T9584] bridge0: port 1(bridge_slave_0) entered disabled state
[  700.532812][ T9584] bridge_slave_0: entered allmulticast mode
[  700.542960][ T9584] bridge_slave_0: entered promiscuous mode
[  700.559369][ T9559] lo speed is unknown, defaulting to 1000
[  700.566077][ T9559] syz2: Port: 1 Link DOWN
[  700.793826][ T5881] usb 5-1: Using ep0 maxpacket: 16
[  700.899160][ T5881] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  700.907639][ T5881] usb 5-1: config 0 has no interface number 0
[  700.913966][ T5881] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  700.926195][ T5881] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  700.936428][ T5881] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  700.945842][ T5881] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  701.212450][ T9584] bridge0: port 2(bridge_slave_1) entered blocking state
[  701.220538][ T9584] bridge0: port 2(bridge_slave_1) entered disabled state
[  701.228718][ T9584] bridge_slave_1: entered allmulticast mode
[  701.277878][ T8210] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  701.280182][ T9584] bridge_slave_1: entered promiscuous mode
[  701.320126][ T5881] usb 5-1: config 0 descriptor??
[  701.349880][ T9551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  701.498301][ T8210] usb 1-1: device descriptor read/64, error -71
[  701.937947][ T8210] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  701.989922][    C1] raw-gadget.0 gadget.4: ignoring, device is not running
[  702.001418][    C1] raw-gadget.0 gadget.4: ignoring, device is not running
[  702.014127][    C1] raw-gadget.0 gadget.4: ignoring, device is not running
[  702.022161][ T5881] usbhid 5-1:0.1: can't add hid device: -32
[  702.029365][ T5881] usbhid 5-1:0.1: probe with driver usbhid failed with error -32
[  702.476868][ T8210] usb 1-1: device descriptor read/64, error -71
[  703.354578][ T8210] usb usb1-port1: attempt power cycle
[  704.499497][ T9551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  704.499701][ T5881] usb 5-1: USB disconnect, device number 71
[  704.599021][ T9584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  705.098122][ T9584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  705.158725][ T9551] team0: Port device team_slave_0 added
[  705.176853][ T1879] IPVS: stop unused estimator thread 0...
[  705.226577][ T9551] team0: Port device team_slave_1 added
[  705.492942][ T9698] netlink: 'syz.4.1004': attribute type 10 has an invalid length.
[  705.580214][ T9699] netlink: 'syz.4.1004': attribute type 10 has an invalid length.
[  705.641764][ T9551] batman_adv: batadv0: Adding interface: batadv_slave_0
[  705.649308][ T9551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  705.676042][ T9551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  705.764884][ T9702] binder: 9701:9702 ioctl 4018620d 0 returned -22
[  705.874264][ T9698] 8021q: adding VLAN 0 to HW filter on device team0
[  705.891625][ T9698] bond0: (slave team0): Enslaving as an active interface with an up link
[  705.938408][ T9699] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  706.015366][ T9700] 8021q: adding VLAN 0 to HW filter on device bond1
[  706.031286][ T9551] batman_adv: batadv0: Adding interface: batadv_slave_1
[  706.038681][ T9551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  706.065345][ T9551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  706.139093][ T9703] bond_slave_0: entered promiscuous mode
[  706.145196][ T9703] bond_slave_1: entered promiscuous mode
[  706.151466][ T9703] team_slave_0: entered promiscuous mode
[  706.157559][ T9703] team_slave_1: entered promiscuous mode
[  706.163605][ T9703] syz_tun: entered promiscuous mode
[  706.172161][ T9703] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  706.191638][ T9703] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[  706.214594][ T9584] team0: Port device team_slave_0 added
[  706.304895][ T1879] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  706.344184][ T9584] team0: Port device team_slave_1 added
[  706.630701][ T9584] batman_adv: batadv0: Adding interface: batadv_slave_0
[  706.638088][ T9584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  706.664736][ T9584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  706.800134][ T1879] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  706.919778][ T9584] batman_adv: batadv0: Adding interface: batadv_slave_1
[  706.927328][ T9584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  706.954532][ T9584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  707.025059][ T9551] hsr_slave_0: entered promiscuous mode
[  707.038159][ T9551] hsr_slave_1: entered promiscuous mode
[  707.047501][ T9551] debugfs: 'hsr0' already exists in 'hsr'
[  707.053437][ T9551] Cannot create hsr debugfs directory
[  707.109550][ T1879] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  707.401016][ T1879] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  707.696096][ T9404] veth0_vlan: entered promiscuous mode
[  707.777428][ T8210] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[  707.945874][ T8210] usb 5-1: Using ep0 maxpacket: 16
[  707.990341][ T8210] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  707.998869][ T8210] usb 5-1: config 0 has no interface number 0
[  707.999001][ T9584] hsr_slave_0: entered promiscuous mode
[  708.005355][ T8210] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  708.015935][ T9584] hsr_slave_1: entered promiscuous mode
[  708.022192][ T8210] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  708.030820][ T9584] debugfs: 'hsr0' already exists in 'hsr'
[  708.038163][ T8210] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  708.044005][ T9584] Cannot create hsr debugfs directory
[  708.058859][ T8210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  708.113978][ T9404] veth1_vlan: entered promiscuous mode
[  708.305317][ T1879] bridge_slave_1: left allmulticast mode
[  708.313277][ T1879] bridge_slave_1: left promiscuous mode
[  708.321062][ T1879] bridge0: port 2(bridge_slave_1) entered disabled state
[  708.402189][ T8210] usb 5-1: config 0 descriptor??
[  708.420878][ T1879] bridge_slave_0: left allmulticast mode
[  708.427050][ T1879] bridge_slave_0: left promiscuous mode
[  708.434022][ T1879] bridge0: port 1(bridge_slave_0) entered disabled state
[  708.896340][ T8210] usbhid 5-1:0.1: can't add hid device: -71
[  708.903285][ T8210] usbhid 5-1:0.1: probe with driver usbhid failed with error -71
[  708.916376][ T1879] ip6gretap0 (unregistering): left allmulticast mode
[  708.961862][ T8210] usb 5-1: USB disconnect, device number 72
[  709.476325][ T8210] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  709.508495][ T1879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  709.557612][ T1879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  709.584642][ T1879] bond0 (unregistering): Released all slaves
[  709.665803][ T8210] usb 1-1: device descriptor read/64, error -71
[  709.927505][ T8210] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  710.110027][ T8210] usb 1-1: device descriptor read/64, error -71
[  710.234846][ T8210] usb usb1-port1: attempt power cycle
[  710.632461][ T8210] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  710.736947][ T8210] usb 1-1: device descriptor read/8, error -71
[  710.758670][ T1879] hsr_slave_0: left promiscuous mode
[  710.817047][ T1879] hsr_slave_1: left promiscuous mode
[  710.826634][ T1879] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  710.834827][ T1879] batman_adv: batadv0: Removing interface: batadv_slave_0
[  710.896452][ T1879] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  710.904842][ T1879] batman_adv: batadv0: Removing interface: batadv_slave_1
[  710.987175][ T1879] veth1_vlan: left promiscuous mode
[  710.992823][ T1879] veth0_vlan: left promiscuous mode
[  711.011906][ T8210] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  711.185859][ T8210] usb 1-1: device descriptor read/8, error -71
[  711.297523][ T8210] usb usb1-port1: unable to enumerate USB device
[  711.700500][ T1879] team0 (unregistering): Port device team_slave_1 removed
[  711.730114][ T1879] team0 (unregistering): Port device team_slave_0 removed
[  712.347513][ T9404] veth0_macvtap: entered promiscuous mode
[  712.394087][ T9404] veth1_macvtap: entered promiscuous mode
[  712.687257][ T9551] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  712.812571][ T9551] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  712.824766][ T9745] netlink: 'syz.0.1013': attribute type 10 has an invalid length.
[  712.907497][ T9746] netlink: 'syz.0.1013': attribute type 10 has an invalid length.
[  712.991764][ T9404] batman_adv: batadv0: Interface activated: batadv_slave_0
[  713.029636][ T9551] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  713.076385][ T9745] bond1: option mode: unable to set because the bond device has slaves
[  713.088665][ T1879] IPVS: stop unused estimator thread 0...
[  713.290186][ T9404] batman_adv: batadv0: Interface activated: batadv_slave_1
[  713.300430][ T9551] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  713.338293][ T9748] binder: 9747:9748 ioctl c0306201 0 returned -14
[  713.603812][ T8696] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  713.613936][ T9584] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  713.695744][ T8696] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  713.729268][ T9584] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  713.853312][ T8696] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  713.898826][ T9584] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  713.967376][   T57] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  714.027988][ T9584] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  714.165082][ T9754] loop2: detected capacity change from 0 to 7
[  714.238174][ T9754] Dev loop2: unable to read RDB block 7
[  714.244277][ T9754]  loop2: unable to read partition table
[  714.323635][ T9754] loop2: partition table beyond EOD, truncated
[  714.330639][ T9754] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  715.286519][ T9551] 8021q: adding VLAN 0 to HW filter on device bond0
[  715.580584][ T9551] 8021q: adding VLAN 0 to HW filter on device team0
[  715.742659][ T4258] bridge0: port 1(bridge_slave_0) entered blocking state
[  715.750374][ T4258] bridge0: port 1(bridge_slave_0) entered forwarding state
[  715.879206][ T4258] bridge0: port 2(bridge_slave_1) entered blocking state
[  715.886889][ T4258] bridge0: port 2(bridge_slave_1) entered forwarding state
[  716.019009][ T9584] 8021q: adding VLAN 0 to HW filter on device bond0
[  716.351471][ T9584] 8021q: adding VLAN 0 to HW filter on device team0
[  716.503262][ T8696] bridge0: port 1(bridge_slave_0) entered blocking state
[  716.511040][ T8696] bridge0: port 1(bridge_slave_0) entered forwarding state
[  716.641074][ T8696] bridge0: port 2(bridge_slave_1) entered blocking state
[  716.648807][ T8696] bridge0: port 2(bridge_slave_1) entered forwarding state
[  718.846630][ T9802] binder: 9800:9802 ioctl c0306201 0 returned -14
[  719.478619][ T9551] 8021q: adding VLAN 0 to HW filter on device batadv0
[  719.591100][ T9584] 8021q: adding VLAN 0 to HW filter on device batadv0
[  720.432758][ T5910] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  720.656987][ T5910] usb 1-1: Using ep0 maxpacket: 32
[  720.701417][ T5910] usb 1-1: config 0 has an invalid interface number: 133 but max is 0
[  720.710105][ T5910] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  720.720774][ T5910] usb 1-1: config 0 has no interface number 0
[  720.727364][ T5910] usb 1-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024
[  720.737882][ T5910] usb 1-1: config 0 interface 133 altsetting 0 has an endpoint descriptor with address 0xB8, changing to 0x88
[  720.750193][ T5910] usb 1-1: config 0 interface 133 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  720.760530][ T5910] usb 1-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  720.985947][ T5910] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e
[  720.995298][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  721.004789][ T5910] usb 1-1: Product: syz
[  721.010413][ T5910] usb 1-1: Manufacturer: syz
[  721.015219][ T5910] usb 1-1: SerialNumber: syz
[  721.191546][ T5910] usb 1-1: config 0 descriptor??
[  721.201368][ T9816] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  721.518885][ T5910] usb 1-1: probing VID:PID(0424:012C)   
[  721.529849][ T5910] usb 1-1: vub300 testing BULK OUT EndPoint(0) 0B
[  721.536766][ T5910] usb 1-1: vub300 testing UNKNOWN EndPoint(1) 88
[  721.543531][ T5910] usb 1-1: vub300 ignoring EndPoint(1) 88
[  721.549660][ T5910] usb 1-1: Could not find two sets of bulk-in/out endpoint pairs
[  721.558077][ T5910] vub300 1-1:0.133: probe with driver vub300 failed with error -22
[  721.705799][ T5910] usb 1-1: USB disconnect, device number 42
[  724.248931][ T9551] veth0_vlan: entered promiscuous mode
[  724.408200][ T9551] veth1_vlan: entered promiscuous mode
[  724.653346][ T9405] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  724.690154][ T9405] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  724.733936][ T9405] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  724.789111][ T9405] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  724.802480][ T9405] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  725.369913][ T9849] netlink: 'syz.4.1029': attribute type 10 has an invalid length.
[  725.457532][ T9851] netlink: 'syz.4.1029': attribute type 10 has an invalid length.
[  725.591496][ T9849] team_slave_0: left promiscuous mode
[  725.597433][ T9849] team_slave_1: left promiscuous mode
[  725.643481][ T9852] bond1: option mode: unable to set because the bond device has slaves
[  725.784282][ T9551] veth0_macvtap: entered promiscuous mode
[  725.912798][ T9584] veth0_vlan: entered promiscuous mode
[  725.994153][ T9551] veth1_macvtap: entered promiscuous mode
[  726.095023][ T9584] veth1_vlan: entered promiscuous mode
[  726.291596][ T9551] batman_adv: batadv0: Interface activated: batadv_slave_0
[  726.431466][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  726.529740][ T9551] batman_adv: batadv0: Interface activated: batadv_slave_1
[  726.603964][ T9584] veth0_macvtap: entered promiscuous mode
[  726.835230][ T9584] veth1_macvtap: entered promiscuous mode
[  727.009151][   T58] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  727.051770][ T8179] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  727.068073][ T9405] Bluetooth: hci0: command tx timeout
[  727.107367][ T8179] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  727.154738][ T8179] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  727.322850][ T9584] batman_adv: batadv0: Interface activated: batadv_slave_0
[  727.472091][ T9584] batman_adv: batadv0: Interface activated: batadv_slave_1
[  727.508799][ T9868] binder: 9867:9868 ioctl c0306201 0 returned -14
[  727.706052][   T57] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  727.717000][ T3824] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  727.786254][ T8653] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  727.867245][ T8653] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  728.380488][ T8653] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  728.472607][ T9843] chnl_net:caif_netlink_parms(): no params data found
[  728.633753][ T8653] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  728.928066][ T8653] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  729.098380][ T9405] Bluetooth: hci0: command tx timeout
[  729.240721][ T8653] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  730.567011][ T8653] bridge_slave_1: left allmulticast mode
[  730.573040][ T8653] bridge_slave_1: left promiscuous mode
[  730.582753][ T8653] bridge0: port 2(bridge_slave_1) entered disabled state
[  730.728155][ T8653] bridge_slave_0: left allmulticast mode
[  730.734054][ T8653] bridge_slave_0: left promiscuous mode
[  730.743839][ T8653] bridge0: port 1(bridge_slave_0) entered disabled state
[  731.277655][ T9405] Bluetooth: hci0: command tx timeout
[  732.407923][ T8653] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  732.517637][ T8653] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  732.574200][ T8653] bond0 (unregistering): Released all slaves
[  733.083956][ T8653] hsr_slave_0: left promiscuous mode
[  733.155896][ T8653] hsr_slave_1: left promiscuous mode
[  733.164256][ T8653] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  733.172789][ T8653] batman_adv: batadv0: Removing interface: batadv_slave_0
[  733.299170][ T8653] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  733.306971][ T8653] batman_adv: batadv0: Removing interface: batadv_slave_1
[  733.338065][ T9405] Bluetooth: hci0: command tx timeout
[  733.396395][ T8653] veth1_macvtap: left promiscuous mode
[  733.402174][ T8653] veth0_macvtap: left promiscuous mode
[  733.410833][ T8653] veth1_vlan: left promiscuous mode
[  733.416668][ T8653] veth0_vlan: left promiscuous mode
[  734.708353][ T8653] team0 (unregistering): Port device team_slave_1 removed
[  734.749996][ T8653] team0 (unregistering): Port device team_slave_0 removed
[  735.183278][ T9938] warning: `syz.0.1039' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  735.395113][ T9951] netlink: 'syz.4.1041': attribute type 12 has an invalid length.
[  735.646498][ T9843] bridge0: port 1(bridge_slave_0) entered blocking state
[  735.654117][ T9843] bridge0: port 1(bridge_slave_0) entered disabled state
[  735.664052][ T9843] bridge_slave_0: entered allmulticast mode
[  735.677015][ T9843] bridge_slave_0: entered promiscuous mode
[  735.859024][ T9843] bridge0: port 2(bridge_slave_1) entered blocking state
[  735.866787][ T9843] bridge0: port 2(bridge_slave_1) entered disabled state
[  735.874587][ T9843] bridge_slave_1: entered allmulticast mode
[  735.884862][ T9843] bridge_slave_1: entered promiscuous mode
[  736.697153][ T9843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  736.906483][ T9843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  737.728462][ T9843] team0: Port device team_slave_0 added
[  737.827278][ T9843] team0: Port device team_slave_1 added
[  738.856190][ T9843] batman_adv: batadv0: Adding interface: batadv_slave_0
[  738.863545][ T9843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  738.890210][ T9843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  739.430808][ T9843] batman_adv: batadv0: Adding interface: batadv_slave_1
[  739.438223][ T9843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  739.465377][ T9843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  740.227393][ T9843] hsr_slave_0: entered promiscuous mode
[  740.238577][ T9843] hsr_slave_1: entered promiscuous mode
[  740.248138][ T9843] debugfs: 'hsr0' already exists in 'hsr'
[  740.254088][ T9843] Cannot create hsr debugfs directory
[  743.910245][ T5816] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  744.144504][ T5816] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  744.159478][ T5816] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  744.212840][ T5816] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  744.232644][ T5816] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  744.937286][ T9843] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  745.165982][ T9843] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  745.432402][ T9843] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  745.554183][ T4536] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  745.562675][ T4536] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  745.581792][ T9843] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  746.375761][ T9405] Bluetooth: hci3: command tx timeout
[  747.338206][ T4536] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  747.642204][ T4536] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  747.787055][T10029] chnl_net:caif_netlink_parms(): no params data found
[  747.851428][ T4536] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  748.002435][ T4536] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  748.477274][ T9405] Bluetooth: hci3: command tx timeout
[  748.682093][ T4536] bridge_slave_1: left allmulticast mode
[  748.688738][ T4536] bridge_slave_1: left promiscuous mode
[  748.695701][ T4536] bridge0: port 2(bridge_slave_1) entered disabled state
[  748.732653][ T4536] bridge_slave_0: left allmulticast mode
[  748.739173][ T4536] bridge_slave_0: left promiscuous mode
[  748.746223][ T4536] bridge0: port 1(bridge_slave_0) entered disabled state
[  749.448438][ T4536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  749.481952][ T4536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  749.504136][ T4536] bond0 (unregistering): Released all slaves
[  749.733652][ T9843] 8021q: adding VLAN 0 to HW filter on device bond0
[  749.962835][ T9843] 8021q: adding VLAN 0 to HW filter on device team0
[  750.003458][ T3671] bridge0: port 1(bridge_slave_0) entered blocking state
[  750.011182][ T3671] bridge0: port 1(bridge_slave_0) entered forwarding state
[  750.137933][ T4536] hsr_slave_0: left promiscuous mode
[  750.150377][ T4536] hsr_slave_1: left promiscuous mode
[  750.161022][ T4536] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  750.168930][ T4536] batman_adv: batadv0: Removing interface: batadv_slave_0
[  750.187213][ T4536] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  750.194815][ T4536] batman_adv: batadv0: Removing interface: batadv_slave_1
[  750.298751][ T4536] veth1_macvtap: left promiscuous mode
[  750.304525][ T4536] veth0_macvtap: left promiscuous mode
[  750.310743][ T4536] veth1_vlan: left promiscuous mode
[  750.316649][ T4536] veth0_vlan: left promiscuous mode
[  750.575770][ T9405] Bluetooth: hci3: command tx timeout
[  751.575691][ T4536] team0 (unregistering): Port device team_slave_1 removed
[  751.624843][ T4536] team0 (unregistering): Port device team_slave_0 removed
[  751.880000][ T5816] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  751.896940][ T5816] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  751.908478][ T5816] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  751.940743][ T5816] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  751.963821][ T5816] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  752.587484][ T3671] bridge0: port 2(bridge_slave_1) entered blocking state
[  752.595089][ T3671] bridge0: port 2(bridge_slave_1) entered forwarding state
[  752.618893][ T9405] Bluetooth: hci3: command tx timeout
[  752.639083][T10029] bridge0: port 1(bridge_slave_0) entered blocking state
[  752.647593][T10029] bridge0: port 1(bridge_slave_0) entered disabled state
[  752.655346][T10029] bridge_slave_0: entered allmulticast mode
[  752.665768][T10029] bridge_slave_0: entered promiscuous mode
[  752.869174][T10029] bridge0: port 2(bridge_slave_1) entered blocking state
[  752.877727][T10029] bridge0: port 2(bridge_slave_1) entered disabled state
[  752.885901][T10029] bridge_slave_1: entered allmulticast mode
[  752.895959][T10029] bridge_slave_1: entered promiscuous mode
[  753.182945][ T4536] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  753.532949][ T4536] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  753.695594][T10029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  753.814566][ T4536] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  753.959346][T10029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  754.095008][ T5816] Bluetooth: hci4: command tx timeout
[  754.372853][ T4536] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  754.489551][T10029] team0: Port device team_slave_0 added
[  754.576867][T10029] team0: Port device team_slave_1 added
[  754.949591][T10029] batman_adv: batadv0: Adding interface: batadv_slave_0
[  754.957216][T10029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  754.984222][T10029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  755.188896][T10029] batman_adv: batadv0: Adding interface: batadv_slave_1
[  755.196373][T10029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  755.222983][T10029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  755.638053][ T4536] bridge_slave_1: left allmulticast mode
[  755.644046][ T4536] bridge_slave_1: left promiscuous mode
[  755.651382][ T4536] bridge0: port 2(bridge_slave_1) entered disabled state
[  755.731904][ T4536] bridge_slave_0: left allmulticast mode
[  755.738427][ T4536] bridge_slave_0: left promiscuous mode
[  755.745179][ T4536] bridge0: port 1(bridge_slave_0) entered disabled state
[  756.138052][ T5816] Bluetooth: hci4: command tx timeout
[  756.666681][ T4536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  756.738228][ T4536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  756.763554][ T4536] bond0 (unregistering): Released all slaves
[  757.178239][ T4536] hsr_slave_0: left promiscuous mode
[  757.189564][ T4536] hsr_slave_1: left promiscuous mode
[  757.198194][ T4536] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  757.206484][ T4536] batman_adv: batadv0: Removing interface: batadv_slave_0
[  757.235623][ T4536] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  757.243224][ T4536] batman_adv: batadv0: Removing interface: batadv_slave_1
[  757.314686][ T4536] veth1_macvtap: left promiscuous mode
[  757.320894][ T4536] veth0_macvtap: left promiscuous mode
[  757.327604][ T4536] veth1_vlan: left promiscuous mode
[  757.333206][ T4536] veth0_vlan: left promiscuous mode
[  758.265314][   T42] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  758.268591][ T5816] Bluetooth: hci4: command tx timeout
[  758.408067][ T4536] team0 (unregistering): Port device team_slave_1 removed
[  758.478732][ T4536] team0 (unregistering): Port device team_slave_0 removed
[  758.795580][   T42] usb 5-1: Using ep0 maxpacket: 16
[  758.832188][   T42] usb 5-1: config 0 has an invalid interface number: 251 but max is 0
[  758.840973][   T42] usb 5-1: config 0 has no interface number 0
[  758.847672][   T42] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  758.857997][   T42] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  758.961401][   T42] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  758.971094][   T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  758.979989][   T42] usb 5-1: Product: syz
[  758.984383][   T42] usb 5-1: Manufacturer: syz
[  758.989290][   T42] usb 5-1: SerialNumber: syz
[  759.114526][T10029] hsr_slave_0: entered promiscuous mode
[  759.125665][T10029] hsr_slave_1: entered promiscuous mode
[  759.134826][T10029] debugfs: 'hsr0' already exists in 'hsr'
[  759.141577][T10029] Cannot create hsr debugfs directory
[  759.159947][   T42] usb 5-1: config 0 descriptor??
[  759.188463][T10127] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  759.274365][T10127] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  759.434759][ T9843] 8021q: adding VLAN 0 to HW filter on device batadv0
[  759.467820][T10132] syzkaller0: entered promiscuous mode
[  759.473571][T10132] syzkaller0: entered allmulticast mode
[  759.624451][T10127] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  759.634812][T10127] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  759.824457][T10080] chnl_net:caif_netlink_parms(): no params data found
[  759.918387][   T42] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  759.929171][   T42] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -61
[  759.940243][   T42] asix 5-1:0.251: probe with driver asix failed with error -5
[  760.098859][ T9906] usb 5-1: USB disconnect, device number 73
[  760.304548][ T5816] Bluetooth: hci4: command tx timeout
[  762.313239][T10154] netlink: 'syz.0.1072': attribute type 10 has an invalid length.
[  762.385058][T10157] netlink: 'syz.0.1072': attribute type 10 has an invalid length.
[  762.428266][T10154] bond1: option mode: unable to set because the bond device has slaves
[  762.497446][T10029] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  762.783711][T10029] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  763.118139][T10029] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  763.197430][T10080] bridge0: port 1(bridge_slave_0) entered blocking state
[  763.205251][T10080] bridge0: port 1(bridge_slave_0) entered disabled state
[  763.213675][T10080] bridge_slave_0: entered allmulticast mode
[  763.223924][T10080] bridge_slave_0: entered promiscuous mode
[  763.309073][T10029] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  763.442972][T10080] bridge0: port 2(bridge_slave_1) entered blocking state
[  763.453330][T10080] bridge0: port 2(bridge_slave_1) entered disabled state
[  763.461525][T10080] bridge_slave_1: entered allmulticast mode
[  763.471541][T10080] bridge_slave_1: entered promiscuous mode
[  763.912819][T10080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  764.029626][T10080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  764.113544][ T9843] veth0_vlan: entered promiscuous mode
[  764.503190][ T9843] veth1_vlan: entered promiscuous mode
[  764.530337][T10080] team0: Port device team_slave_0 added
[  764.639255][T10080] team0: Port device team_slave_1 added
[  765.068437][T10080] batman_adv: batadv0: Adding interface: batadv_slave_0
[  765.079644][T10080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  765.106205][T10080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  765.291116][T10080] batman_adv: batadv0: Adding interface: batadv_slave_1
[  765.298648][T10080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  765.325291][T10080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  765.400964][ T9843] veth0_macvtap: entered promiscuous mode
[  765.438865][T10188] syzkaller0: entered promiscuous mode
[  765.444878][T10188] syzkaller0: entered allmulticast mode
[  765.733085][ T9843] veth1_macvtap: entered promiscuous mode
[  765.937539][T10080] hsr_slave_0: entered promiscuous mode
[  765.956949][T10080] hsr_slave_1: entered promiscuous mode
[  765.966508][T10080] debugfs: 'hsr0' already exists in 'hsr'
[  765.972437][T10080] Cannot create hsr debugfs directory
[  766.047576][ T8210] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  766.086975][T10029] 8021q: adding VLAN 0 to HW filter on device bond0
[  766.298109][ T8210] usb 1-1: Using ep0 maxpacket: 16
[  766.332063][ T8210] usb 1-1: config 0 has an invalid interface number: 251 but max is 0
[  766.340746][ T8210] usb 1-1: config 0 has no interface number 0
[  766.347353][ T8210] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  766.360085][ T8210] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  766.471282][ T8210] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  766.480899][ T8210] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  766.490171][ T8210] usb 1-1: Product: syz
[  766.494563][ T8210] usb 1-1: Manufacturer: syz
[  766.499515][ T8210] usb 1-1: SerialNumber: syz
[  766.568031][ T8210] usb 1-1: config 0 descriptor??
[  766.576675][T10192] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  766.584784][T10192] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  766.628017][ T9843] batman_adv: batadv0: Interface activated: batadv_slave_0
[  766.728194][T10029] 8021q: adding VLAN 0 to HW filter on device team0
[  766.769112][ T9843] batman_adv: batadv0: Interface activated: batadv_slave_1
[  766.914811][ T8421] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  766.934196][ T1879] bridge0: port 1(bridge_slave_0) entered blocking state
[  766.942064][ T1879] bridge0: port 1(bridge_slave_0) entered forwarding state
[  767.013411][T10192] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  767.040247][ T8421] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  767.052572][T10192] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  767.116345][ T8421] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  767.171362][ T8179] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  767.198362][ T1879] bridge0: port 2(bridge_slave_1) entered blocking state
[  767.206084][ T1879] bridge0: port 2(bridge_slave_1) entered forwarding state
[  767.429188][ T8210] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  767.439893][ T8210] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -61
[  767.451065][ T8210] asix 1-1:0.251: probe with driver asix failed with error -5
[  767.704936][ T8210] usb 1-1: USB disconnect, device number 43
[  768.704834][T10208] binder: 10207:10208 ioctl 4018620d 0 returned -22
[  769.549041][T10080] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  769.653786][T10080] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  769.724741][T10080] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  769.865157][T10080] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  770.358807][ T5910] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  770.638507][ T5910] usb 1-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  770.712542][T10029] 8021q: adding VLAN 0 to HW filter on device batadv0
[  770.801190][ T5910] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  770.810709][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  770.819351][ T5910] usb 1-1: Product: syz
[  770.823733][ T5910] usb 1-1: Manufacturer: syz
[  770.828722][ T5910] usb 1-1: SerialNumber: syz
[  771.875344][T10080] 8021q: adding VLAN 0 to HW filter on device bond0
[  772.028355][ T5910] cdc_ncm 1-1:1.0: bind() failure
[  772.049661][ T5910] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  772.059658][ T5910] cdc_ncm 1-1:1.1: bind() failure
[  772.159644][T10080] 8021q: adding VLAN 0 to HW filter on device team0
[  772.278480][ T4258] bridge0: port 1(bridge_slave_0) entered blocking state
[  772.286164][ T4258] bridge0: port 1(bridge_slave_0) entered forwarding state
[  772.327640][    T9] usb 1-1: USB disconnect, device number 44
[  772.459400][ T4258] bridge0: port 2(bridge_slave_1) entered blocking state
[  772.467128][ T4258] bridge0: port 2(bridge_slave_1) entered forwarding state
[  773.833954][T10252] syzkaller0: entered promiscuous mode
[  773.841909][T10252] syzkaller0: entered allmulticast mode
[  774.175136][T10257] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1087'.
[  774.184742][T10257] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1087'.
[  774.964294][T10029] veth0_vlan: entered promiscuous mode
[  775.055874][ T5910] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  775.126295][T10029] veth1_vlan: entered promiscuous mode
[  775.237492][ T5910] usb 1-1: Using ep0 maxpacket: 16
[  775.271577][ T5910] usb 1-1: config 0 has an invalid interface number: 251 but max is 0
[  775.280318][ T5910] usb 1-1: config 0 has no interface number 0
[  775.287068][ T5910] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  775.297565][ T5910] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  775.340853][ T5910] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  775.350739][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  775.359413][ T5910] usb 1-1: Product: syz
[  775.363806][ T5910] usb 1-1: Manufacturer: syz
[  775.369001][ T5910] usb 1-1: SerialNumber: syz
[  775.516537][ T5910] usb 1-1: config 0 descriptor??
[  775.524796][T10264] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  775.548969][T10264] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  775.631677][T10080] 8021q: adding VLAN 0 to HW filter on device batadv0
[  775.705073][T10029] veth0_macvtap: entered promiscuous mode
[  775.882699][T10029] veth1_macvtap: entered promiscuous mode
[  775.951861][T10264] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  775.997565][T10264] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  776.307039][T10029] batman_adv: batadv0: Interface activated: batadv_slave_0
[  776.316458][ T5910] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  776.327183][ T5910] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -61
[  776.338290][ T5910] asix 1-1:0.251: probe with driver asix failed with error -5
[  776.367081][T10273] netlink: 'syz.4.1090': attribute type 10 has an invalid length.
[  776.417526][T10273] netlink: 'syz.4.1090': attribute type 10 has an invalid length.
[  776.457729][T10029] batman_adv: batadv0: Interface activated: batadv_slave_1
[  776.484148][T10273] bond1: option mode: unable to set because the bond device has slaves
[  776.533857][ T5910] usb 1-1: USB disconnect, device number 45
[  776.647980][   T58] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  776.722994][   T58] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  776.814706][   T58] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  776.896664][ T4408] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  778.043500][ T4258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  778.052353][ T4258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  778.466900][ T3824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  778.474979][ T3824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  778.961745][ T5881] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  779.192773][ T5881] usb 1-1: config 1 interface 1 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  779.295932][ T5881] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  779.306651][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  779.317033][ T5881] usb 1-1: Product: syz
[  779.318088][T10303] 9pnet_fd: Insufficient options for proto=fd
[  779.321391][ T5881] usb 1-1: Manufacturer: syz
[  779.333157][ T5881] usb 1-1: SerialNumber: syz
[  779.917947][T10080] veth0_vlan: entered promiscuous mode
[  780.119733][T10080] veth1_vlan: entered promiscuous mode
[  780.583446][ T5881] cdc_ncm 1-1:1.0: bind() failure
[  780.605082][ T5881] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  780.612476][ T5881] cdc_ncm 1-1:1.1: bind() failure
[  780.746425][T10307] IPVS: persistence engine module ip_vs_pe_ not found
[  780.759853][T10317] Bluetooth: hci4: Opcode 0x0401 failed: -4
[  780.779712][T10080] veth0_macvtap: entered promiscuous mode
[  780.790673][T10314] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  780.939045][ T5881] usb 1-1: USB disconnect, device number 46
[  781.107990][T10080] veth1_macvtap: entered promiscuous mode
[  781.438799][T10080] batman_adv: batadv0: Interface activated: batadv_slave_0
[  781.575705][T10080] batman_adv: batadv0: Interface activated: batadv_slave_1
[  781.706467][ T4408] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  781.804299][ T4408] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  781.896237][ T8421] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  781.905312][ T8421] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  782.457616][ T5816] Bluetooth: hci4: command 0x0401 tx timeout
[  784.349095][T10359] 9pnet_fd: Insufficient options for proto=fd
[  784.716004][ T8210] usb 1-1: new full-speed USB device number 47 using dummy_hcd
[  784.935982][ T8210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  784.948969][ T8210] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  784.959437][ T8210] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  784.968885][ T8210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  785.182514][ T8210] usb 1-1: config 0 descriptor??
[  785.241728][ T8210] hub 1-1:0.0: USB hub found
[  785.426252][ T8210] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  785.841542][ T8210] usbhid 1-1:0.0: can't add hid device: -32
[  785.848427][ T8210] usbhid 1-1:0.0: probe with driver usbhid failed with error -32
[  786.015054][ T8210] usb 1-1: USB disconnect, device number 47
[  787.946648][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  789.959172][ T4408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  789.967663][ T4408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  790.408533][ T8653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  790.419176][ T8653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  791.039511][T10418] bond1: option mode: unable to set because the bond device has slaves
[  792.075947][ T5910] usb 1-1: new full-speed USB device number 48 using dummy_hcd
[  792.365981][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  792.382161][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  792.392569][ T5910] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  792.402142][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  792.639097][ T5910] usb 1-1: config 0 descriptor??
[  792.684396][ T5910] hub 1-1:0.0: USB hub found
[  792.956276][ T5910] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  793.427466][ T5910] usbhid 1-1:0.0: can't add hid device: -32
[  793.434386][ T5910] usbhid 1-1:0.0: probe with driver usbhid failed with error -32
[  793.572574][ T5910] usb 1-1: USB disconnect, device number 48
[  795.652354][ T4258] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  795.661032][ T4258] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  796.154751][ T1879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  796.163023][ T1879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  796.246983][T10455] netlink: 'syz.6.1126': attribute type 13 has an invalid length.
[  796.255157][T10455] netlink: 'syz.6.1126': attribute type 17 has an invalid length.
[  796.654253][T10459] netlink: 'syz.7.1127': attribute type 10 has an invalid length.
[  796.663923][T10459] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1127'.
[  797.057812][T10455] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  797.103223][T10453] xfrm0: entered promiscuous mode
[  797.108890][T10453] xfrm0: entered allmulticast mode
[  797.128428][T10460] bond1: option mode: unable to set because the bond device has slaves
[  797.159156][T10468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  797.224495][T10459] team0: Failed to send port change of device netdevsim1 via netlink (err -105)
[  797.237685][T10459] team0: Failed to send options change via netlink (err -105)
[  797.246363][T10459] team0: Port device netdevsim1 added
[  797.355700][T10453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  798.102829][T10477] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1130'.
[  798.125103][T10476] tipc: Started in network mode
[  798.130722][T10476] tipc: Node identity 3ec3a5d4c945, cluster identity 4711
[  798.139992][T10476] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  798.173108][T10473] syzkaller0: entered promiscuous mode
[  798.179161][T10473] syzkaller0: entered allmulticast mode
[  798.272924][T10481] loop2: detected capacity change from 0 to 7
[  798.323429][T10481] Dev loop2: unable to read RDB block 7
[  798.330884][T10481]  loop2: AHDI p1 p2 p3
[  798.335301][T10481] loop2: partition table partially beyond EOD, truncated
[  798.344370][T10481] loop2: p1 start 1601398130 is beyond EOD, truncated
[  798.351710][T10481] loop2: p2 start 1702059890 is beyond EOD, truncated
[  798.827447][T10476] tipc: Resetting bearer <eth:syzkaller0>
[  799.255798][ T5881] tipc: Node number set to 4152796628
[  799.269587][T10472] tipc: Resetting bearer <eth:syzkaller0>
[  799.345756][T10472] tipc: Disabling bearer <eth:syzkaller0>
[  800.458121][ T5910] usb 5-1: new full-speed USB device number 74 using dummy_hcd
[  800.724624][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  800.736927][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  800.747266][ T5910] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  800.756821][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  800.949355][ T5910] usb 5-1: config 0 descriptor??
[  801.026360][ T5910] hub 5-1:0.0: USB hub found
[  801.341101][ T5910] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  801.826025][ T5910] usbhid 5-1:0.0: can't add hid device: -32
[  801.832876][ T5910] usbhid 5-1:0.0: probe with driver usbhid failed with error -32
[  802.049860][T10510] netlink: 'syz.8.1139': attribute type 10 has an invalid length.
[  802.058841][T10510] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1139'.
[  802.495597][T10510] team0: Port device netdevsim1 added
[  802.887997][ T5910] usb 5-1: USB disconnect, device number 74
[  804.146082][T10520] 8021q: adding VLAN 0 to HW filter on device bond1
[  804.902604][   T30] audit: type=1400 audit(1756850720.218:341): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=10521 comm="syz.6.1141"
[  805.089806][T10535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1144'.
[  805.397948][T10535] bond0: (slave syz_tun): Releasing backup interface
[  805.957499][T10545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1146'.
[  806.187621][T10545] bond0: (slave syz_tun): Releasing backup interface
[  806.835835][T10519] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  807.086586][T10519] usb 1-1: Using ep0 maxpacket: 8
[  807.130031][T10519] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  807.138744][T10519] usb 1-1: config 0 has no interface number 0
[  807.145060][T10519] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  807.157928][T10519] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  807.171078][T10519] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  807.182938][T10519] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  807.196747][T10519] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  807.206319][T10519] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  807.387861][T10519] usb 1-1: config 0 descriptor??
[  807.463156][T10519] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  807.585749][ T1877] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[  807.797909][ T1877] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  807.809919][ T1877] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  807.820211][ T1877] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  807.829730][ T1877] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  807.882633][T10566] usb 1-1: USB disconnect, device number 49
[  807.953766][T10566] ldusb 1-1:0.55: LD USB Device #0 now disconnected
[  808.124104][ T1877] usb 8-1: config 0 descriptor??
[  808.212555][ T1877] hub 8-1:0.0: USB hub found
[  808.340181][T10574] netlink: 'syz.4.1157': attribute type 10 has an invalid length.
[  808.410539][ T1877] hub 8-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  808.419722][T10574] netlink: 'syz.4.1157': attribute type 10 has an invalid length.
[  808.452587][T10576] netlink: 'syz.6.1156': attribute type 10 has an invalid length.
[  808.480866][T10576] 8021q: adding VLAN 0 to HW filter on device team0
[  808.500340][T10576] bond0: (slave team0): Enslaving as an active interface with an up link
[  808.587312][T10579] netlink: 'syz.6.1156': attribute type 10 has an invalid length.
[  808.587452][T10574] bond1: option mode: unable to set because the bond device has slaves
[  808.741210][T10579] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  808.872872][ T1877] usbhid 8-1:0.0: can't add hid device: -32
[  808.879477][ T1877] usbhid 8-1:0.0: probe with driver usbhid failed with error -32
[  809.110795][ T1877] usb 8-1: USB disconnect, device number 2
[  809.240393][T10580] 8021q: adding VLAN 0 to HW filter on device bond1
[  809.667432][T10591] netlink: 'syz.8.1158': attribute type 13 has an invalid length.
[  809.676208][T10591] netlink: 'syz.8.1158': attribute type 17 has an invalid length.
[  810.978950][T10608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  811.007731][T10609] netlink: 'syz.7.1161': attribute type 13 has an invalid length.
[  811.016656][T10609] netlink: 'syz.7.1161': attribute type 17 has an invalid length.
[  811.187251][T10611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  811.228911][T10605] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1163'.
[  811.242095][T10605] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1163'.
[  811.252073][T10605] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1163'.
[  811.336727][ T1877] usb 5-1: new full-speed USB device number 75 using dummy_hcd
[  811.453493][T10591] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  811.521562][T10594] xfrm0: entered promiscuous mode
[  811.527493][T10594] xfrm0: entered allmulticast mode
[  811.577656][T10603] loop6: detected capacity change from 0 to 524288000
[  811.603757][ T1877] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  811.614714][ T1877] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  811.624476][ T1877] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  811.634122][ T1877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  811.818589][T10603] Dev loop6: unable to read RDB block 8
[  811.825035][T10603]  loop6: unable to read partition table
[  811.924327][T10603] loop_reread_partitions: partition scan of loop6 (��������6�tPΪŔ���A���8�*V^��3c) failed (rc=-5)
[  811.998693][ T1877] usb 5-1: config 0 descriptor??
[  812.135305][T10596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  812.874452][T10609] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  812.894973][T10606] xfrm0: entered promiscuous mode
[  812.900564][T10606] xfrm0: entered allmulticast mode
[  814.477853][ T5910] usb 5-1: USB disconnect, device number 75
[  815.233369][T10655] netlink: 'syz.4.1169': attribute type 13 has an invalid length.
[  815.241709][T10655] netlink: 'syz.4.1169': attribute type 17 has an invalid length.
[  815.290362][T10655] team_slave_0: entered promiscuous mode
[  815.296873][T10655] team_slave_1: entered promiscuous mode
[  815.307369][T10655] 8021q: adding VLAN 0 to HW filter on device team0
[  815.523517][T10655] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  815.578073][T10659] netlink: 'syz.6.1170': attribute type 10 has an invalid length.
[  815.600749][T10659] netlink: 'syz.6.1170': attribute type 10 has an invalid length.
[  815.816281][T10659] bond1: option mode: unable to set because the bond device is up
[  816.617915][T10519] usb 1-1: new full-speed USB device number 50 using dummy_hcd
[  816.814827][T10519] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  816.826582][T10519] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  816.837522][T10519] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  816.847064][T10519] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  817.147144][    C1] =====================================================
[  817.154450][    C1] BUG: KMSAN: uninit-value in eth_type_trans+0x7af/0x9a0
[  817.161869][    C1]  eth_type_trans+0x7af/0x9a0
[  817.166990][    C1]  ip_tunnel_rcv+0x2d7d/0x34f0
[  817.172010][    C1]  gre_rcv+0x1aad/0x2050
[  817.176605][    C1]  gre_rcv+0x285/0x380
[  817.180874][    C1]  ip_protocol_deliver_rcu+0xb2c/0x13d0
[  817.186781][    C1]  ip_local_deliver_finish+0x409/0x730
[  817.192446][    C1]  ip_local_deliver+0x228/0x4b0
[  817.197639][    C1]  ip_rcv_finish+0x4f7/0x5c0
[  817.202447][    C1]  ip_rcv+0xcb/0x380
[  817.206697][    C1]  __netif_receive_skb+0x312/0xac0
[  817.212133][    C1]  process_backlog+0x485/0xa00
[  817.217298][    C1]  __napi_poll+0xdd/0x8a0
[  817.221859][    C1]  net_rx_action+0xa59/0x1ac0
[  817.226914][    C1]  handle_softirqs+0x166/0x6e0
[  817.231857][    C1]  __irq_exit_rcu+0x66/0x180
[  817.236695][    C1]  irq_exit_rcu+0x12/0x20
[  817.241196][    C1]  sysvec_apic_timer_interrupt+0x84/0x90
[  817.247124][    C1]  asm_sysvec_apic_timer_interrupt+0x1f/0x30
[  817.253317][    C1]  kmsan_get_metadata+0x81/0x160
[  817.258860][    C1]  kmsan_get_shadow_origin_ptr+0x35/0xb0
[  817.264710][    C1]  __msan_metadata_ptr_for_load_8+0x24/0x40
[  817.270877][    C1]  batadv_purge_orig_ref+0x137/0x2390
[  817.276602][    C1]  batadv_purge_orig+0x29/0x80
[  817.281652][    C1]  process_scheduled_works+0xb8e/0x1d80
[  817.287524][    C1]  worker_thread+0xedf/0x1590
[  817.292423][    C1]  kthread+0xd59/0xf00
[  817.296745][    C1]  ret_from_fork+0x1e3/0x310
[  817.301505][    C1]  ret_from_fork_asm+0x1a/0x30
[  817.306642][    C1] 
[  817.309055][    C1] Uninit was created at:
[  817.313538][    C1]  kmem_cache_alloc_node_noprof+0x818/0xf00
[  817.319732][    C1]  kmalloc_reserve+0x13c/0x4b0
[  817.324696][    C1]  __alloc_skb+0x347/0x7d0
[  817.329357][    C1]  tcp_stream_alloc_skb+0x4c/0x5f0
[  817.334711][    C1]  tcp_sendmsg_locked+0x1db5/0x7680
[  817.340326][    C1]  tcp_sendmsg+0x4b/0x90
[  817.344812][    C1]  inet_sendmsg+0x134/0x2a0
[  817.349585][    C1]  __sock_sendmsg+0x278/0x3d0
[  817.354497][    C1]  ____sys_sendmsg+0x7e0/0xd80
[  817.359617][    C1]  ___sys_sendmsg+0x271/0x3b0
[  817.364507][    C1]  __x64_sys_sendmsg+0x211/0x3e0
[  817.369904][    C1]  x64_sys_call+0x1dfd/0x3e20
[  817.374807][    C1]  do_syscall_64+0xd9/0x210
[  817.379675][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  817.385813][    C1] 
[  817.388243][    C1] CPU: 1 UID: 0 PID: 3824 Comm: kworker/u8:22 Not tainted syzkaller #0 PREEMPT(none) 
[  817.398023][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  817.408298][    C1] Workqueue: bat_events batadv_purge_orig
[  817.414232][    C1] =====================================================
[  817.421343][    C1] Disabling lock debugging due to kernel taint
[  817.427726][    C0] =====================================================
[  817.427733][    C1] Kernel panic - not syncing: kmsan.panic set ...
[  817.441238][    C1] CPU: 1 UID: 0 PID: 3824 Comm: kworker/u8:22 Tainted: G    B               syzkaller #0 PREEMPT(none) 
[  817.452509][    C1] Tainted: [B]=BAD_PAGE
[  817.456823][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  817.466997][    C1] Workqueue: bat_events batadv_purge_orig
[  817.472971][    C1] Call Trace:
[  817.476324][    C1]  <IRQ>
[  817.479247][    C1]  __dump_stack+0x26/0x30
[  817.483738][    C1]  dump_stack_lvl+0x53/0x270
[  817.488519][    C1]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  817.494544][    C1]  dump_stack+0x1e/0x25
[  817.498980][    C1]  vpanic+0x361/0xc50
[  817.503160][    C1]  panic+0x15d/0x160
[  817.507272][    C1]  kmsan_report+0x31c/0x320
[  817.511953][    C1]  ? __msan_warning+0x1b/0x30
[  817.516781][    C1]  ? eth_type_trans+0x7af/0x9a0
[  817.521817][    C1]  ? ip_tunnel_rcv+0x2d7d/0x34f0
[  817.526948][    C1]  ? gre_rcv+0x1aad/0x2050
[  817.531543][    C1]  ? gre_rcv+0x285/0x380
[  817.535941][    C1]  ? ip_protocol_deliver_rcu+0xb2c/0x13d0
[  817.541838][    C1]  ? ip_local_deliver_finish+0x409/0x730
[  817.547632][    C1]  ? ip_local_deliver+0x228/0x4b0
[  817.552814][    C1]  ? ip_rcv_finish+0x4f7/0x5c0
[  817.557728][    C1]  ? ip_rcv+0xcb/0x380
[  817.561930][    C1]  ? __netif_receive_skb+0x312/0xac0
[  817.567389][    C1]  ? process_backlog+0x485/0xa00
[  817.572536][    C1]  ? __napi_poll+0xdd/0x8a0
[  817.577206][    C1]  ? net_rx_action+0xa59/0x1ac0
[  817.582238][    C1]  ? handle_softirqs+0x166/0x6e0
[  817.587316][    C1]  ? __irq_exit_rcu+0x66/0x180
[  817.592224][    C1]  ? irq_exit_rcu+0x12/0x20
[  817.596874][    C1]  ? sysvec_apic_timer_interrupt+0x84/0x90
[  817.602855][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1f/0x30
[  817.609172][    C1]  ? kmsan_get_metadata+0x81/0x160
[  817.614459][    C1]  ? kmsan_get_shadow_origin_ptr+0x35/0xb0
[  817.620424][    C1]  ? __msan_metadata_ptr_for_load_8+0x24/0x40
[  817.626815][    C1]  ? batadv_purge_orig_ref+0x137/0x2390
[  817.632534][    C1]  ? batadv_purge_orig+0x29/0x80
[  817.637643][    C1]  ? process_scheduled_works+0xb8e/0x1d80
[  817.643552][    C1]  ? worker_thread+0xedf/0x1590
[  817.648584][    C1]  ? kthread+0xd59/0xf00
[  817.652962][    C1]  ? ret_from_fork+0x1e3/0x310
[  817.657874][    C1]  ? ret_from_fork_asm+0x1a/0x30
[  817.663032][    C1]  ? eth_get_headlen+0x1c1/0x1e0
[  817.668150][    C1]  ? filter_irq_stacks+0x49/0x190
[  817.673397][    C1]  ? stack_depot_save_flags+0x35/0x7b0
[  817.679053][    C1]  ? kmsan_get_metadata+0xfb/0x160
[  817.684428][    C1]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  817.690917][    C1]  ? kmsan_get_metadata+0xfb/0x160
[  817.696203][    C1]  __msan_warning+0x1b/0x30
[  817.700857][    C1]  eth_type_trans+0x7af/0x9a0
[  817.705741][    C1]  ip_tunnel_rcv+0x2d7d/0x34f0
[  817.710739][    C1]  gre_rcv+0x1aad/0x2050
[  817.715174][    C1]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  817.721280][    C1]  ? __pfx_gre_rcv+0x10/0x10
[  817.726044][    C1]  gre_rcv+0x285/0x380
[  817.730273][    C1]  ? __pfx_gre_rcv+0x10/0x10
[  817.735024][    C1]  ip_protocol_deliver_rcu+0xb2c/0x13d0
[  817.740768][    C1]  ip_local_deliver_finish+0x409/0x730
[  817.746412][    C1]  ip_local_deliver+0x228/0x4b0
[  817.751426][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  817.757582][    C1]  ? __pfx_ip_local_deliver+0x10/0x10
[  817.763104][    C1]  ip_rcv_finish+0x4f7/0x5c0
[  817.767867][    C1]  ip_rcv+0xcb/0x380
[  817.771918][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  817.777208][    C1]  ? __pfx_ip_rcv+0x10/0x10
[  817.781987][    C1]  __netif_receive_skb+0x312/0xac0
[  817.787313][    C1]  ? kmsan_get_metadata+0xfb/0x160
[  817.792626][    C1]  process_backlog+0x485/0xa00
[  817.797611][    C1]  ? __pfx_process_backlog+0x10/0x10
[  817.803078][    C1]  __napi_poll+0xdd/0x8a0
[  817.807588][    C1]  ? kmsan_get_metadata+0xfb/0x160
[  817.812863][    C1]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  817.818840][    C1]  net_rx_action+0xa59/0x1ac0
[  817.823694][    C1]  ? kmsan_get_metadata+0xfb/0x160
[  817.828962][    C1]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  817.834957][    C1]  ? kmsan_get_metadata+0xfb/0x160
[  817.840235][    C1]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  817.846243][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  817.851540][    C1]  handle_softirqs+0x166/0x6e0
[  817.856473][    C1]  __irq_exit_rcu+0x66/0x180
[  817.861202][    C1]  irq_exit_rcu+0x12/0x20
[  817.865672][    C1]  sysvec_apic_timer_interrupt+0x84/0x90
[  817.871482][    C1]  </IRQ>
[  817.874487][    C1]  <TASK>
[  817.877493][    C1]  asm_sysvec_apic_timer_interrupt+0x1f/0x30
[  817.883908][    C1] RIP: 0010:kmsan_get_metadata+0x81/0x160
[  817.889797][    C1] Code: 80 0c 00 f3 0f 1e fa 48 8d 93 00 00 00 60 48 81 fa 00 00 00 5f 0f 82 d2 00 00 00 48 01 c8 48 ff c8 48 39 d8 0f 87 c3 00 00 00 <48> b8 00 00 00 00 80 01 00 00 48 01 d8 48 c1 e8 27 3d ff ff ff 01
[  817.909641][    C1] RSP: 0018:ffff8881179cfa48 EFLAGS: 00000292
[  817.915849][    C1] RAX: ffff8880adc66a60 RBX: ffff88804dc66a60 RCX: ffff8881179d20c0
[  817.923944][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88804dc66a60
[  817.932024][    C1] RBP: ffff8881179cfa60 R08: ffffea000000000f R09: 0000000000000000
[  817.940292][    C1] R10: ffff888237b77028 R11: ffffffff9091fb20 R12: 0000000000000000
[  817.948376][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  817.956460][    C1]  ? __pfx_batadv_purge_orig+0x10/0x10
[  817.962105][    C1]  kmsan_get_shadow_origin_ptr+0x35/0xb0
[  817.967911][    C1]  __msan_metadata_ptr_for_load_8+0x24/0x40
[  817.974135][    C1]  batadv_purge_orig_ref+0x137/0x2390
[  817.979954][    C1]  ? kmsan_get_metadata+0xfb/0x160
[  817.985241][    C1]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  817.991723][    C1]  ? kmsan_get_metadata+0xfb/0x160
[  817.997005][    C1]  batadv_purge_orig+0x29/0x80
[  818.001929][    C1]  ? __pfx_batadv_purge_orig+0x10/0x10
[  818.007542][    C1]  process_scheduled_works+0xb8e/0x1d80
[  818.013348][    C1]  worker_thread+0xedf/0x1590
[  818.018265][    C1]  kthread+0xd59/0xf00
[  818.022471][    C1]  ? __pfx_worker_thread+0x10/0x10
[  818.027789][    C1]  ? __pfx_kthread+0x10/0x10
[  818.032522][    C1]  ret_from_fork+0x1e3/0x310
[  818.037254][    C1]  ? __pfx_kthread+0x10/0x10
[  818.042075][    C1]  ret_from_fork_asm+0x1a/0x30
[  818.047049][    C1]  </TASK>
[  819.728144][    C1] Shutting down cpus with NMI
[  819.733252][    C1] Kernel Offset: disabled
[  819.737644][    C1] Rebooting in 86400 seconds..