last executing test programs:

3m15.389494059s ago: executing program 0 (id=68):
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000003300)=@delchain={0x1124, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xfff3, 0x4}, {0x0, 0x2}}, [@f_tcindex={{0xc}, {0x10f4, 0x2, [@TCA_TCINDEX_ACT={0x10f0, 0x7, [@m_xt={0x19c, 0x17, 0x0, 0x0, {{0x7}, {0xec, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffc}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x46, 0x6, {0x5, 'filter\x00', 0x2, 0x4, "bdd2056c391cfbada4a91b3dcfa6986d29fa0001bfff69737b09a039"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x10}, @TCA_IPT_TARG={0x51, 0x6, {0x7ff, 'mangle\x00', 0xe, 0x3, "4e5a7cba01e1f38f237aaa59376d75d9625e58ed910ba6e05100142b2f2e7b6f302b868c040169"}}]}, {0x89, 0x6, "e5cf5a56b2b6ffd321a538434fde23ba5e156346319d6c617d5ca116780314b759bfd70989f842ea1b3838abbac8d9aece0a044e565206a6b351b3f0b8d447c6d0b47e3dceee2dc8c1f5665a37d2af7a08a6f49cbf3c1f84d534e4acd15bbb41cd76a102e8e687a13a7a85c1297e1b71c3af16b49c35116e7b151e97194f7efbf158196b1a"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0xd0, 0x16, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x555}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x494}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x209}]}, {0x71, 0x6, "f88972b11ae1f54c32072d8852f83dce1200fae48cdd47580491b3464df81ea2356c5ae449614c2ad0a6f102d47622665f55d582e54e94750cf3caca5797cd0855886dc913412478de26bc51898186fb153a252d65c849849b48ec8ebec71bd96cd0cfebdb3dc6899b8669ddd0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe80, 0x1e, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x7, 0x6, 0x0, 0x5, 0xd04}, 0x7, 0x2a, [{0x5, 0x8, 0x37, 0x2, 0x7, 0x2}, {0xb, 0x4, 0x2, 0x7, 0xfffffeff, 0x8}]}, [{0x5, 0x10, 0xb, 0xbea, 0x6, 0x4}, {0x4, 0xffff, 0x1, 0x3, 0x6, 0x5}, {0x10001, 0xd, 0x1, 0x43, 0x6, 0x7}, {0x4, 0x0, 0xe2f7, 0x6, 0x3}, {0xa, 0x7ff, 0x5, 0x3, 0x1, 0x5}, {0x9, 0x1, 0x1000, 0x5, 0x401, 0x9}, {0x2, 0x1000, 0x2, 0xe2a, 0x7f, 0x601}, {0x451, 0x3, 0x0, 0x4, 0x8, 0x8}, {0x2751, 0xfffffae9, 0x5, 0x3, 0x10, 0x1}, {0x8, 0x10000, 0x9f3f, 0x7, 0x7, 0x4}, {0x7, 0x3, 0x0, 0x7, 0x3, 0x7}, {0x7, 0x8, 0x9, 0x1, 0x0, 0x1}, {0x7, 0xb, 0xffff, 0x200, 0x1, 0xa}, {0xfff, 0x88d4, 0xfffffff9, 0x2, 0x8}, {0xc753, 0xc6f3f86, 0x3, 0x8, 0x10, 0xb6}, {0x7, 0x2, 0x9, 0x5}, {0x6, 0x4c0, 0xf, 0x6, 0xffff, 0x1}, {0x8, 0xd, 0x100, 0x6, 0x9, 0x7fff}, {0x1, 0x5b0, 0x4, 0x100006, 0x5, 0x10}, {0x6, 0x8, 0x687, 0x0, 0x5, 0x4}, {0x4, 0x2, 0x40, 0x80000001, 0x9, 0x6}, {0xff, 0x3, 0x503e40b2, 0x4, 0x80000000, 0x9}, {0x7fffffff, 0x5, 0xffffffff, 0xfffffffa, 0x94, 0x5}, {0xa, 0x778, 0xdb1, 0x3, 0x2, 0xcf}, {0x4, 0x1, 0x9, 0xa9, 0x5, 0x4}, {0x7, 0x6, 0x9, 0x8, 0x0, 0x4}, {0x1, 0x5, 0x3f, 0x8, 0x4e39, 0x2}, {0x4, 0x100, 0x4, 0x1, 0x1ff, 0x4}, {0xe, 0x3, 0x7, 0x6, 0x9, 0x26953236}, {0x62, 0x8, 0x2, 0x6, 0x7, 0xd}, {0x8001, 0x0, 0xfffffff5, 0x10001, 0x7, 0x9}, {0x5, 0x1, 0x7, 0xbd66, 0x1, 0x7fff}, {0xffffffff, 0x6, 0x0, 0x8000, 0xfffffd00, 0x7f}, {0x7, 0x5c1e, 0x800, 0x5, 0x1000, 0xffff}, {0x5, 0x7, 0x73b, 0x5, 0x681, 0x9}, {0x9, 0x0, 0xe18e, 0x69, 0x6, 0x5}, {0x200, 0x6, 0xfffffffc, 0x7, 0x5, 0x5}, {0x0, 0xfff, 0x6, 0x7, 0x800, 0x1}, {0x80000000, 0x2, 0x7, 0x8, 0x200, 0x7fffffff}, {0x1, 0x4, 0x7, 0x10000, 0x6, 0x3}, {0x4, 0x0, 0x3ff, 0x0, 0xc3e, 0x2}, {0x8, 0x9, 0xffffff01, 0x4, 0xe, 0x8}, {0x4, 0x7fffffff, 0x5, 0x4, 0xb2d2, 0xb58a}, {0x5, 0x5d86, 0x5, 0xf, 0x2, 0x2}, {0x80000000, 0x1, 0x8000, 0x0, 0x8, 0x4cc11a62}, {0x2d10, 0x9, 0x7f, 0x8, 0x3, 0x4}, {0x1, 0xbb, 0x1, 0x80000001, 0x3, 0xffffbf4f}, {0x2bb, 0x8, 0xf, 0x2, 0x6, 0x9}, {0x8000, 0x9, 0x7, 0x2, 0xac, 0x3ff}, {0x80000000, 0x600000, 0x80, 0x0, 0x6, 0xfffffff9}, {0x0, 0x0, 0x3, 0x6, 0x400, 0x4}, {0x9, 0x5, 0x1ff, 0x3, 0x10000, 0x4}, {0x8, 0x3, 0x10, 0x6, 0x8, 0x1}, {0xfffffffc, 0x7, 0x100, 0x1, 0x8, 0x5}, {0x7, 0xfffffffb, 0xa, 0x6, 0x6}, {0x6, 0x2, 0x80, 0x9a4, 0x1, 0x4}, {0x80000000, 0x9, 0x7, 0x1, 0x1, 0x9738}, {0x1, 0x0, 0x9, 0x8000, 0x6, 0x6}, {0xec, 0x8, 0x0, 0x9, 0x7, 0x8}, {0x0, 0x2, 0x1, 0x2, 0x1, 0x1}, {0xff3, 0x7, 0x4, 0x6, 0x4, 0x5}, {0x0, 0xf, 0x90, 0x800, 0x1, 0x100}, {0x9d0, 0x5, 0x7ff, 0x8f, 0x9, 0xb}, {0x0, 0x4, 0x9, 0x9, 0x75a2, 0x3}, {0x10, 0x6, 0x5, 0x3, 0x7fffffff, 0x1}, {0x4, 0x6, 0x0, 0x1, 0x0, 0x7}, {0x5, 0x8001, 0x0, 0x8, 0x6, 0xffff}, {0x4, 0x169f, 0x5, 0x6, 0x1, 0x7}, {0x10000, 0x2, 0x8, 0x7239, 0x3, 0x7}, {0x7, 0x3, 0x3, 0x3, 0x7, 0x7}, {0x9, 0x1, 0x0, 0x63, 0x2, 0x603}, {0x55, 0x2964, 0x0, 0x7, 0x7, 0x3}, {0x4, 0xffff, 0xa, 0xe, 0x1, 0x9}, {0x3, 0x8, 0x7, 0x844, 0x1, 0x3}, {0xf, 0x5, 0x7e, 0x9, 0x7, 0x7}, {0x2, 0x7, 0x6, 0x3, 0x5, 0x5}, {0x5, 0x10000, 0x9, 0x4, 0x92, 0xa}, {0x3ff, 0x60, 0x0, 0x8, 0x1ff, 0xf}, {0xfffffffd, 0x7, 0x653f, 0x1, 0x0, 0x4}, {0x3, 0x112, 0x4, 0x7fff, 0x4, 0x7}, {0x14, 0x400, 0xfffffffd, 0x5, 0x5, 0x2}, {0x4, 0x200, 0xbcc, 0xfffffffe, 0x7, 0x6}, {0x5, 0xa55d, 0x7, 0x40, 0x1, 0x6}, {0x7, 0x4cf, 0x766, 0x0, 0xfffffffc, 0x4}, {0x5, 0xb0cc, 0x200, 0x80000001, 0x6794, 0xb}, {0xffff, 0x7, 0x7, 0x81, 0xc3d, 0x2}, {0x1, 0x5, 0x695b, 0xb, 0x7f, 0x1}, {0x1, 0x80000000, 0x2, 0x3, 0x9, 0x1000}, {0x1, 0xe5, 0x0, 0x2, 0xfa, 0x60}, {0x34, 0x1, 0x157, 0x8, 0x4}, {0x4bc, 0xb3, 0x7, 0x0, 0x80000001, 0xa44}, {0x2, 0x100, 0x2, 0x7, 0x6, 0x6}, {0x7, 0x13c6, 0x9, 0x9, 0xfffffffd, 0x3ff}, {0x2, 0x5d, 0x3, 0xba, 0x9, 0x80}, {0x800, 0x8, 0x4, 0xffff, 0x0, 0x7}, {0x9, 0x5, 0x8, 0xd2, 0xcf, 0x5}, {0x7ff, 0x6, 0x4, 0x5, 0x7, 0x2}, {0xfffffff9, 0x8, 0x1, 0xc0, 0x7, 0xb}, {0x4, 0x9, 0x7, 0x6, 0x0, 0x41c}, {0x6, 0x80000001, 0x0, 0x83, 0x8}, {0xf, 0x1, 0x101, 0xeb, 0x2, 0x6}, {0x8001, 0x8, 0x0, 0x6, 0x0, 0x17077c82}, {0xc, 0x7, 0xfff, 0xab, 0x7, 0x3}, {0x4, 0xef23, 0x4, 0x3, 0xed, 0x100}, {0xcf, 0x8, 0x0, 0x3, 0x8000, 0x8}, {0x7, 0x5, 0x8, 0x3, 0x1, 0x5}, {0x3, 0xc, 0xc0, 0x1000, 0x3, 0x80000001}, {0xfffffffb, 0x1000, 0x9, 0x2, 0x22, 0x43a00}, {0x6, 0x40, 0x2, 0xd9, 0xf, 0x40}, {0xffffffff, 0x4, 0xb6, 0x10000, 0x4, 0x562}, {0x3, 0x3ff, 0x8000, 0x1, 0xffffffff}, {0x0, 0x1c, 0x1, 0xfe, 0x9, 0x1}, {0xe1a4, 0x1000, 0x9, 0x1, 0x10, 0x5}, {0xf7e, 0x6, 0xfffffffe, 0x4, 0x5, 0x7fff}, {0x294, 0x3, 0x2, 0x8000, 0x8}, {0xeb07, 0x8, 0x401, 0x3, 0x0, 0x6}, {0x8010001, 0x9, 0x1, 0x6ab, 0xd24, 0x1}, {0x9, 0x3, 0x7, 0x6, 0x8001}, {0x9, 0x2, 0xfffffffe, 0x8, 0x3, 0xff}, {0x9, 0x3, 0x10, 0xc9, 0xd, 0x200}, {0x13, 0x4, 0x7, 0x6, 0x6, 0x7}, {0x10001, 0x0, 0x4, 0x5, 0x2f, 0xffffffff}, {0x2, 0x8, 0x1, 0x6, 0x7, 0x5}, {0x4, 0x7, 0x7ff, 0x2, 0x8000, 0x1}, {0x3, 0x11, 0x3, 0x4, 0x5, 0x4}, {0x23, 0x80000000, 0x26, 0x400, 0x1, 0x5}, {0x3, 0x8, 0x3a9, 0x7, 0x2e, 0x244}, {0x7, 0x2, 0x58000000, 0x6, 0x5, 0x9}], [{0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x2}, {0x2}, {0x4}, {0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x1}, {0x2}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x2}, {0x5}, {}, {0x5}, {0x7}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2}, {0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x4}, {}, {0x1, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x3}, {0x33ad92f3629fb66b, 0x380c1bfccf1a4d05}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x7}, {}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1124}, 0x1, 0x0, 0x0, 0x810}, 0x41)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

3m3.756945745s ago: executing program 0 (id=84):
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket(0x15, 0x1, 0x1)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0)
mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f0000000240))
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='attr/sockcreate\x00')
writev(r1, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1)
ioctl$XFS_IOC_INUMBERS(0xffffffffffffffff, 0x80405880, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x10150)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000080)={0x4, 0x1, 0xd, 0x4, 0x100, &(0x7f0000000440)="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"})

3m1.788271838s ago: executing program 0 (id=86):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(0x0, r0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r4, 0x0, 0x97, 0x8000000})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r4, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x1})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x4, r4, 0x0, &(0x7f0000ff8000/0x1000)=nil, 0x1000})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r4})
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x300)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0xf8, 0x3, 0x38415262, 0x1, 0x21, 0x1, 0x8, 0x7, 0x0, 0x0, 0x0, 0x2}})
sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)={0x18, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000800}, 0x10)

3m0.504844623s ago: executing program 0 (id=88):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
lstat(0x0, 0x0)
write$FUSE_ENTRY(r0, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x1, 0x8000000000002, 0x1000, 0x0, 0x9, 0x5ebc, {0x3, 0x2f8, 0x57e, 0x2, 0x6, 0x7, 0x7ff, 0xdd, 0x400, 0x1d000, 0x2, 0x0, 0x0, 0x10000002, 0x5}}}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r4 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3})
setsockopt$sock_attach_bpf(r4, 0x1, 0x7, &(0x7f0000000000), 0x4)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
chdir(&(0x7f0000000000)='./file0\x00')
r5 = getpid()
r6 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x0)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee0, 0x13, 0xffffffffffffffff, 0xe6a98000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)

3m0.268154268s ago: executing program 3 (id=89):
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000480)='hpfs\x00', 0x10008, 0x0)

3m0.189758147s ago: executing program 0 (id=90):
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @empty}, 0x290, 0x0, 0x0, 0x0, 0x8000})
bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x13, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040), 0x2, 0x6}}, 0x20)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={<r3=>0xffffffffffffffff}, 0x2, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x8, @loopback, 0x2}, r3}}, 0x30)
r4 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil)
r5 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
shmctl$SHM_LOCK(r4, 0xb)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
shmctl$SHM_UNLOCK(r4, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000)

2m58.377340039s ago: executing program 3 (id=91):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x43, 0x3, 0x1}, 0x10)
close(r0)

2m57.870666186s ago: executing program 3 (id=93):
userfaultfd(0x801)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80801)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r1 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x19, 0x4, 0x4, 0x2, 0x18ca0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x0, 0x0, @value=r1, @void, @value=r1}, 0x50)
syz_usbip_server_init(0x1)
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f00000002c0)={0x1, 0x5}, 0x2)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r4 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0x80003125, 0x3cd0, 0x4004, 0x181})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
io_uring_register$IORING_REGISTER_FILES(r4, 0x20, &(0x7f0000000000)=[r4], 0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})

2m57.843374912s ago: executing program 0 (id=94):
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000003300)=@delchain={0x1124, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xfff3, 0x4}, {0x0, 0x2}}, [@f_tcindex={{0xc}, {0x10f4, 0x2, [@TCA_TCINDEX_ACT={0x10f0, 0x7, [@m_xt={0x19c, 0x17, 0x0, 0x0, {{0x7}, {0xec, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffc}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x46, 0x6, {0x5, 'filter\x00', 0x2, 0x4, "bdd2056c391cfbada4a91b3dcfa6986d29fa0001bfff69737b09a039"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x10}, @TCA_IPT_TARG={0x51, 0x6, {0x7ff, 'mangle\x00', 0xe, 0x3, "4e5a7cba01e1f38f237aaa59376d75d9625e58ed910ba6e05100142b2f2e7b6f302b868c040169"}}]}, {0x89, 0x6, "e5cf5a56b2b6ffd321a538434fde23ba5e156346319d6c617d5ca116780314b759bfd70989f842ea1b3838abbac8d9aece0a044e565206a6b351b3f0b8d447c6d0b47e3dceee2dc8c1f5665a37d2af7a08a6f49cbf3c1f84d534e4acd15bbb41cd76a102e8e687a13a7a85c1297e1b71c3af16b49c35116e7b151e97194f7efbf158196b1a"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0xd0, 0x16, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x555}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x494}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x209}]}, {0x71, 0x6, "f88972b11ae1f54c32072d8852f83dce1200fae48cdd47580491b3464df81ea2356c5ae449614c2ad0a6f102d47622665f55d582e54e94750cf3caca5797cd0855886dc913412478de26bc51898186fb153a252d65c849849b48ec8ebec71bd96cd0cfebdb3dc6899b8669ddd0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe80, 0x1e, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x7, 0x6, 0x0, 0x5, 0xd04}, 0x7, 0x2a, [{0x5, 0x8, 0x37, 0x2, 0x7, 0x2}, {0xb, 0x4, 0x2, 0x7, 0xfffffeff, 0x8}]}, [{0x5, 0x10, 0xb, 0xbea, 0x6, 0x4}, {0x4, 0xffff, 0x1, 0x3, 0x6, 0x5}, {0x10001, 0xd, 0x1, 0x43, 0x6, 0x7}, {0x4, 0x0, 0xe2f7, 0x6, 0x3}, {0xa, 0x7ff, 0x5, 0x3, 0x1, 0x5}, {0x9, 0x1, 0x1000, 0x5, 0x401, 0x9}, {0x2, 0x1000, 0x2, 0xe2a, 0x7f, 0x601}, {0x451, 0x3, 0x0, 0x4, 0x8, 0x8}, {0x2751, 0xfffffae9, 0x5, 0x3, 0x10, 0x1}, {0x8, 0x10000, 0x9f3f, 0x7, 0x7, 0x4}, {0x7, 0x3, 0x0, 0x7, 0x3, 0x7}, {0x7, 0x8, 0x9, 0x1, 0x0, 0x1}, {0x7, 0xb, 0xffff, 0x200, 0x1, 0xa}, {0xfff, 0x88d4, 0xfffffff9, 0x2, 0x8}, {0xc753, 0xc6f3f86, 0x3, 0x8, 0x10, 0xb6}, {0x7, 0x2, 0x9, 0x5}, {0x6, 0x4c0, 0xf, 0x6, 0xffff, 0x1}, {0x8, 0xd, 0x100, 0x6, 0x9, 0x7fff}, {0x1, 0x5b0, 0x4, 0x100006, 0x5, 0x10}, {0x6, 0x8, 0x687, 0x0, 0x5, 0x4}, {0x4, 0x2, 0x40, 0x80000001, 0x9, 0x6}, {0xff, 0x3, 0x503e40b2, 0x4, 0x80000000, 0x9}, {0x7fffffff, 0x5, 0xffffffff, 0xfffffffa, 0x94, 0x5}, {0xa, 0x778, 0xdb1, 0x3, 0x2, 0xcf}, {0x4, 0x1, 0x9, 0xa9, 0x5, 0x4}, {0x7, 0x6, 0x9, 0x8, 0x0, 0x4}, {0x1, 0x5, 0x3f, 0x8, 0x4e39, 0x2}, {0x4, 0x100, 0x4, 0x1, 0x1ff, 0x4}, {0xe, 0x3, 0x7, 0x6, 0x9, 0x26953236}, {0x62, 0x8, 0x2, 0x6, 0x7, 0xd}, {0x8001, 0x0, 0xfffffff5, 0x10001, 0x7, 0x9}, {0x5, 0x1, 0x7, 0xbd66, 0x1, 0x7fff}, {0xffffffff, 0x6, 0x0, 0x8000, 0xfffffd00, 0x7f}, {0x7, 0x5c1e, 0x800, 0x5, 0x1000, 0xffff}, {0x5, 0x7, 0x73b, 0x5, 0x681, 0x9}, {0x9, 0x0, 0xe18e, 0x69, 0x6, 0x5}, {0x200, 0x6, 0xfffffffc, 0x7, 0x5, 0x5}, {0x0, 0xfff, 0x6, 0x7, 0x800, 0x1}, {0x80000000, 0x2, 0x7, 0x8, 0x200, 0x7fffffff}, {0x1, 0x4, 0x7, 0x10000, 0x6, 0x3}, {0x4, 0x0, 0x3ff, 0x0, 0xc3e, 0x2}, {0x8, 0x9, 0xffffff01, 0x4, 0xe, 0x8}, {0x4, 0x7fffffff, 0x5, 0x4, 0xb2d2, 0xb58a}, {0x5, 0x5d86, 0x5, 0xf, 0x2, 0x2}, {0x80000000, 0x1, 0x8000, 0x0, 0x8, 0x4cc11a62}, {0x2d10, 0x9, 0x7f, 0x8, 0x3, 0x4}, {0x1, 0xbb, 0x1, 0x80000001, 0x3, 0xffffbf4f}, {0x2bb, 0x8, 0xf, 0x2, 0x6, 0x9}, {0x8000, 0x9, 0x7, 0x2, 0xac, 0x3ff}, {0x80000000, 0x600000, 0x80, 0x0, 0x6, 0xfffffff9}, {0x0, 0x0, 0x3, 0x6, 0x400, 0x4}, {0x9, 0x5, 0x1ff, 0x3, 0x10000, 0x4}, {0x8, 0x3, 0x10, 0x6, 0x8, 0x1}, {0xfffffffc, 0x7, 0x100, 0x1, 0x8, 0x5}, {0x7, 0xfffffffb, 0xa, 0x6, 0x6}, {0x6, 0x2, 0x80, 0x9a4, 0x1, 0x4}, {0x80000000, 0x9, 0x7, 0x1, 0x1, 0x9738}, {0x1, 0x0, 0x9, 0x8000, 0x6, 0x6}, {0xec, 0x8, 0x0, 0x9, 0x7, 0x8}, {0x0, 0x2, 0x1, 0x2, 0x1, 0x1}, {0xff3, 0x7, 0x4, 0x6, 0x4, 0x5}, {0x0, 0xf, 0x90, 0x800, 0x1, 0x100}, {0x9d0, 0x5, 0x7ff, 0x8f, 0x9, 0xb}, {0x0, 0x4, 0x9, 0x9, 0x75a2, 0x3}, {0x10, 0x6, 0x5, 0x3, 0x7fffffff, 0x1}, {0x4, 0x6, 0x0, 0x1, 0x0, 0x7}, {0x5, 0x8001, 0x0, 0x8, 0x6, 0xffff}, {0x4, 0x169f, 0x5, 0x6, 0x1, 0x7}, {0x10000, 0x2, 0x8, 0x7239, 0x3, 0x7}, {0x7, 0x3, 0x3, 0x3, 0x7, 0x7}, {0x9, 0x1, 0x0, 0x63, 0x2, 0x603}, {0x55, 0x2964, 0x0, 0x7, 0x7, 0x3}, {0x4, 0xffff, 0xa, 0xe, 0x1, 0x9}, {0x3, 0x8, 0x7, 0x844, 0x1, 0x3}, {0xf, 0x5, 0x7e, 0x9, 0x7, 0x7}, {0x2, 0x7, 0x6, 0x3, 0x5, 0x5}, {0x5, 0x10000, 0x9, 0x4, 0x92, 0xa}, {0x3ff, 0x60, 0x0, 0x8, 0x1ff, 0xf}, {0xfffffffd, 0x7, 0x653f, 0x1, 0x0, 0x4}, {0x3, 0x112, 0x4, 0x7fff, 0x4, 0x7}, {0x14, 0x400, 0xfffffffd, 0x5, 0x5, 0x2}, {0x4, 0x200, 0xbcc, 0xfffffffe, 0x7, 0x6}, {0x5, 0xa55d, 0x7, 0x40, 0x1, 0x6}, {0x7, 0x4cf, 0x766, 0x0, 0xfffffffc, 0x4}, {0x5, 0xb0cc, 0x200, 0x80000001, 0x6794, 0xb}, {0xffff, 0x7, 0x7, 0x81, 0xc3d, 0x2}, {0x1, 0x5, 0x695b, 0xb, 0x7f, 0x1}, {0x1, 0x80000000, 0x2, 0x3, 0x9, 0x1000}, {0x1, 0xe5, 0x0, 0x2, 0xfa, 0x60}, {0x34, 0x1, 0x157, 0x8, 0x4}, {0x4bc, 0xb3, 0x7, 0x0, 0x80000001, 0xa44}, {0x2, 0x100, 0x2, 0x7, 0x6, 0x6}, {0x7, 0x13c6, 0x9, 0x9, 0xfffffffd, 0x3ff}, {0x2, 0x5d, 0x3, 0xba, 0x9, 0x80}, {0x800, 0x8, 0x4, 0xffff, 0x0, 0x7}, {0x9, 0x5, 0x8, 0xd2, 0xcf, 0x5}, {0x7ff, 0x6, 0x4, 0x5, 0x7, 0x2}, {0xfffffff9, 0x8, 0x1, 0xc0, 0x7, 0xb}, {0x4, 0x9, 0x7, 0x6, 0x0, 0x41c}, {0x6, 0x80000001, 0x0, 0x83, 0x8}, {0xf, 0x1, 0x101, 0xeb, 0x2, 0x6}, {0x8001, 0x8, 0x0, 0x6, 0x0, 0x17077c82}, {0xc, 0x7, 0xfff, 0xab, 0x7, 0x3}, {0x4, 0xef23, 0x4, 0x3, 0xed, 0x100}, {0xcf, 0x8, 0x0, 0x3, 0x8000, 0x8}, {0x7, 0x5, 0x8, 0x3, 0x1, 0x5}, {0x3, 0xc, 0xc0, 0x1000, 0x3, 0x80000001}, {0xfffffffb, 0x1000, 0x9, 0x2, 0x22, 0x43a00}, {0x6, 0x40, 0x2, 0xd9, 0xf, 0x40}, {0xffffffff, 0x4, 0xb6, 0x10000, 0x4, 0x562}, {0x3, 0x3ff, 0x8000, 0x1, 0xffffffff}, {0x0, 0x1c, 0x1, 0xfe, 0x9, 0x1}, {0xe1a4, 0x1000, 0x9, 0x1, 0x10, 0x5}, {0xf7e, 0x6, 0xfffffffe, 0x4, 0x5, 0x7fff}, {0x294, 0x3, 0x2, 0x8000, 0x8}, {0xeb07, 0x8, 0x401, 0x3, 0x0, 0x6}, {0x8010001, 0x9, 0x1, 0x6ab, 0xd24, 0x1}, {0x9, 0x3, 0x7, 0x6, 0x8001}, {0x9, 0x2, 0xfffffffe, 0x8, 0x3, 0xff}, {0x9, 0x3, 0x10, 0xc9, 0xd, 0x200}, {0x13, 0x4, 0x7, 0x6, 0x6, 0x7}, {0x10001, 0x0, 0x4, 0x5, 0x2f, 0xffffffff}, {0x2, 0x8, 0x1, 0x6, 0x7, 0x5}, {0x4, 0x7, 0x7ff, 0x2, 0x8000, 0x1}, {0x3, 0x11, 0x3, 0x4, 0x5, 0x4}, {0x23, 0x80000000, 0x26, 0x400, 0x1, 0x5}, {0x3, 0x8, 0x3a9, 0x7, 0x2e, 0x244}, {0x7, 0x2, 0x58000000, 0x6, 0x5, 0x9}], [{0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x2}, {0x2}, {0x4}, {0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x1}, {0x2}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x2}, {0x5}, {}, {0x5}, {0x7}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2}, {0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x4}, {}, {0x1, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x3}, {0x33ad92f3629fb66b, 0x380c1bfccf1a4d05}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x7}, {}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1124}, 0x1, 0x0, 0x0, 0x810}, 0x41)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2m55.386532631s ago: executing program 3 (id=97):
r0 = socket$alg(0x26, 0x5, 0x0)
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r4 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f", 0xc}], 0x1}, 0x200a4800)
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10)
syz_usb_connect(0x0, 0x2d, &(0x7f0000001500)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b0001000310030904"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0})
r5 = accept4$alg(r0, 0x0, 0x0, 0x80000)
sendmmsg(r5, &(0x7f0000006c00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="8306df917ee3caee2de5ffffff7f39fa", 0x10}], 0x1}}], 0x1, 0x8084)
io_setup(0xff, &(0x7f0000000380)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r5, &(0x7f0000000280)="abc05b7e324640cda9cc4ddaaf2bcc22", 0x10}])

2m50.236655878s ago: executing program 3 (id=102):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r3, 0x0, 0x6, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[<r5=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2m41.279198639s ago: executing program 32 (id=94):
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000024d00)={0x0, 0x0, &(0x7f0000024cc0)={&(0x7f0000003300)=@delchain={0x1124, 0x65, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x5, 0xc}, {0xfff3, 0x4}, {0x0, 0x2}}, [@f_tcindex={{0xc}, {0x10f4, 0x2, [@TCA_TCINDEX_ACT={0x10f0, 0x7, [@m_xt={0x19c, 0x17, 0x0, 0x0, {{0x7}, {0xec, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0xfffffffc}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}, @TCA_IPT_TARG={0x46, 0x6, {0x5, 'filter\x00', 0x2, 0x4, "bdd2056c391cfbada4a91b3dcfa6986d29fa0001bfff69737b09a039"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x10}, @TCA_IPT_TARG={0x51, 0x6, {0x7ff, 'mangle\x00', 0xe, 0x3, "4e5a7cba01e1f38f237aaa59376d75d9625e58ed910ba6e05100142b2f2e7b6f302b868c040169"}}]}, {0x89, 0x6, "e5cf5a56b2b6ffd321a538434fde23ba5e156346319d6c617d5ca116780314b759bfd70989f842ea1b3838abbac8d9aece0a044e565206a6b351b3f0b8d447c6d0b47e3dceee2dc8c1f5665a37d2af7a08a6f49cbf3c1f84d534e4acd15bbb41cd76a102e8e687a13a7a85c1297e1b71c3af16b49c35116e7b151e97194f7efbf158196b1a"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0xd0, 0x16, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x555}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x494}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x209}]}, {0x71, 0x6, "f88972b11ae1f54c32072d8852f83dce1200fae48cdd47580491b3464df81ea2356c5ae449614c2ad0a6f102d47622665f55d582e54e94750cf3caca5797cd0855886dc913412478de26bc51898186fb153a252d65c849849b48ec8ebec71bd96cd0cfebdb3dc6899b8669ddd0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe80, 0x1e, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{0x7, 0x6, 0x0, 0x5, 0xd04}, 0x7, 0x2a, [{0x5, 0x8, 0x37, 0x2, 0x7, 0x2}, {0xb, 0x4, 0x2, 0x7, 0xfffffeff, 0x8}]}, [{0x5, 0x10, 0xb, 0xbea, 0x6, 0x4}, {0x4, 0xffff, 0x1, 0x3, 0x6, 0x5}, {0x10001, 0xd, 0x1, 0x43, 0x6, 0x7}, {0x4, 0x0, 0xe2f7, 0x6, 0x3}, {0xa, 0x7ff, 0x5, 0x3, 0x1, 0x5}, {0x9, 0x1, 0x1000, 0x5, 0x401, 0x9}, {0x2, 0x1000, 0x2, 0xe2a, 0x7f, 0x601}, {0x451, 0x3, 0x0, 0x4, 0x8, 0x8}, {0x2751, 0xfffffae9, 0x5, 0x3, 0x10, 0x1}, {0x8, 0x10000, 0x9f3f, 0x7, 0x7, 0x4}, {0x7, 0x3, 0x0, 0x7, 0x3, 0x7}, {0x7, 0x8, 0x9, 0x1, 0x0, 0x1}, {0x7, 0xb, 0xffff, 0x200, 0x1, 0xa}, {0xfff, 0x88d4, 0xfffffff9, 0x2, 0x8}, {0xc753, 0xc6f3f86, 0x3, 0x8, 0x10, 0xb6}, {0x7, 0x2, 0x9, 0x5}, {0x6, 0x4c0, 0xf, 0x6, 0xffff, 0x1}, {0x8, 0xd, 0x100, 0x6, 0x9, 0x7fff}, {0x1, 0x5b0, 0x4, 0x100006, 0x5, 0x10}, {0x6, 0x8, 0x687, 0x0, 0x5, 0x4}, {0x4, 0x2, 0x40, 0x80000001, 0x9, 0x6}, {0xff, 0x3, 0x503e40b2, 0x4, 0x80000000, 0x9}, {0x7fffffff, 0x5, 0xffffffff, 0xfffffffa, 0x94, 0x5}, {0xa, 0x778, 0xdb1, 0x3, 0x2, 0xcf}, {0x4, 0x1, 0x9, 0xa9, 0x5, 0x4}, {0x7, 0x6, 0x9, 0x8, 0x0, 0x4}, {0x1, 0x5, 0x3f, 0x8, 0x4e39, 0x2}, {0x4, 0x100, 0x4, 0x1, 0x1ff, 0x4}, {0xe, 0x3, 0x7, 0x6, 0x9, 0x26953236}, {0x62, 0x8, 0x2, 0x6, 0x7, 0xd}, {0x8001, 0x0, 0xfffffff5, 0x10001, 0x7, 0x9}, {0x5, 0x1, 0x7, 0xbd66, 0x1, 0x7fff}, {0xffffffff, 0x6, 0x0, 0x8000, 0xfffffd00, 0x7f}, {0x7, 0x5c1e, 0x800, 0x5, 0x1000, 0xffff}, {0x5, 0x7, 0x73b, 0x5, 0x681, 0x9}, {0x9, 0x0, 0xe18e, 0x69, 0x6, 0x5}, {0x200, 0x6, 0xfffffffc, 0x7, 0x5, 0x5}, {0x0, 0xfff, 0x6, 0x7, 0x800, 0x1}, {0x80000000, 0x2, 0x7, 0x8, 0x200, 0x7fffffff}, {0x1, 0x4, 0x7, 0x10000, 0x6, 0x3}, {0x4, 0x0, 0x3ff, 0x0, 0xc3e, 0x2}, {0x8, 0x9, 0xffffff01, 0x4, 0xe, 0x8}, {0x4, 0x7fffffff, 0x5, 0x4, 0xb2d2, 0xb58a}, {0x5, 0x5d86, 0x5, 0xf, 0x2, 0x2}, {0x80000000, 0x1, 0x8000, 0x0, 0x8, 0x4cc11a62}, {0x2d10, 0x9, 0x7f, 0x8, 0x3, 0x4}, {0x1, 0xbb, 0x1, 0x80000001, 0x3, 0xffffbf4f}, {0x2bb, 0x8, 0xf, 0x2, 0x6, 0x9}, {0x8000, 0x9, 0x7, 0x2, 0xac, 0x3ff}, {0x80000000, 0x600000, 0x80, 0x0, 0x6, 0xfffffff9}, {0x0, 0x0, 0x3, 0x6, 0x400, 0x4}, {0x9, 0x5, 0x1ff, 0x3, 0x10000, 0x4}, {0x8, 0x3, 0x10, 0x6, 0x8, 0x1}, {0xfffffffc, 0x7, 0x100, 0x1, 0x8, 0x5}, {0x7, 0xfffffffb, 0xa, 0x6, 0x6}, {0x6, 0x2, 0x80, 0x9a4, 0x1, 0x4}, {0x80000000, 0x9, 0x7, 0x1, 0x1, 0x9738}, {0x1, 0x0, 0x9, 0x8000, 0x6, 0x6}, {0xec, 0x8, 0x0, 0x9, 0x7, 0x8}, {0x0, 0x2, 0x1, 0x2, 0x1, 0x1}, {0xff3, 0x7, 0x4, 0x6, 0x4, 0x5}, {0x0, 0xf, 0x90, 0x800, 0x1, 0x100}, {0x9d0, 0x5, 0x7ff, 0x8f, 0x9, 0xb}, {0x0, 0x4, 0x9, 0x9, 0x75a2, 0x3}, {0x10, 0x6, 0x5, 0x3, 0x7fffffff, 0x1}, {0x4, 0x6, 0x0, 0x1, 0x0, 0x7}, {0x5, 0x8001, 0x0, 0x8, 0x6, 0xffff}, {0x4, 0x169f, 0x5, 0x6, 0x1, 0x7}, {0x10000, 0x2, 0x8, 0x7239, 0x3, 0x7}, {0x7, 0x3, 0x3, 0x3, 0x7, 0x7}, {0x9, 0x1, 0x0, 0x63, 0x2, 0x603}, {0x55, 0x2964, 0x0, 0x7, 0x7, 0x3}, {0x4, 0xffff, 0xa, 0xe, 0x1, 0x9}, {0x3, 0x8, 0x7, 0x844, 0x1, 0x3}, {0xf, 0x5, 0x7e, 0x9, 0x7, 0x7}, {0x2, 0x7, 0x6, 0x3, 0x5, 0x5}, {0x5, 0x10000, 0x9, 0x4, 0x92, 0xa}, {0x3ff, 0x60, 0x0, 0x8, 0x1ff, 0xf}, {0xfffffffd, 0x7, 0x653f, 0x1, 0x0, 0x4}, {0x3, 0x112, 0x4, 0x7fff, 0x4, 0x7}, {0x14, 0x400, 0xfffffffd, 0x5, 0x5, 0x2}, {0x4, 0x200, 0xbcc, 0xfffffffe, 0x7, 0x6}, {0x5, 0xa55d, 0x7, 0x40, 0x1, 0x6}, {0x7, 0x4cf, 0x766, 0x0, 0xfffffffc, 0x4}, {0x5, 0xb0cc, 0x200, 0x80000001, 0x6794, 0xb}, {0xffff, 0x7, 0x7, 0x81, 0xc3d, 0x2}, {0x1, 0x5, 0x695b, 0xb, 0x7f, 0x1}, {0x1, 0x80000000, 0x2, 0x3, 0x9, 0x1000}, {0x1, 0xe5, 0x0, 0x2, 0xfa, 0x60}, {0x34, 0x1, 0x157, 0x8, 0x4}, {0x4bc, 0xb3, 0x7, 0x0, 0x80000001, 0xa44}, {0x2, 0x100, 0x2, 0x7, 0x6, 0x6}, {0x7, 0x13c6, 0x9, 0x9, 0xfffffffd, 0x3ff}, {0x2, 0x5d, 0x3, 0xba, 0x9, 0x80}, {0x800, 0x8, 0x4, 0xffff, 0x0, 0x7}, {0x9, 0x5, 0x8, 0xd2, 0xcf, 0x5}, {0x7ff, 0x6, 0x4, 0x5, 0x7, 0x2}, {0xfffffff9, 0x8, 0x1, 0xc0, 0x7, 0xb}, {0x4, 0x9, 0x7, 0x6, 0x0, 0x41c}, {0x6, 0x80000001, 0x0, 0x83, 0x8}, {0xf, 0x1, 0x101, 0xeb, 0x2, 0x6}, {0x8001, 0x8, 0x0, 0x6, 0x0, 0x17077c82}, {0xc, 0x7, 0xfff, 0xab, 0x7, 0x3}, {0x4, 0xef23, 0x4, 0x3, 0xed, 0x100}, {0xcf, 0x8, 0x0, 0x3, 0x8000, 0x8}, {0x7, 0x5, 0x8, 0x3, 0x1, 0x5}, {0x3, 0xc, 0xc0, 0x1000, 0x3, 0x80000001}, {0xfffffffb, 0x1000, 0x9, 0x2, 0x22, 0x43a00}, {0x6, 0x40, 0x2, 0xd9, 0xf, 0x40}, {0xffffffff, 0x4, 0xb6, 0x10000, 0x4, 0x562}, {0x3, 0x3ff, 0x8000, 0x1, 0xffffffff}, {0x0, 0x1c, 0x1, 0xfe, 0x9, 0x1}, {0xe1a4, 0x1000, 0x9, 0x1, 0x10, 0x5}, {0xf7e, 0x6, 0xfffffffe, 0x4, 0x5, 0x7fff}, {0x294, 0x3, 0x2, 0x8000, 0x8}, {0xeb07, 0x8, 0x401, 0x3, 0x0, 0x6}, {0x8010001, 0x9, 0x1, 0x6ab, 0xd24, 0x1}, {0x9, 0x3, 0x7, 0x6, 0x8001}, {0x9, 0x2, 0xfffffffe, 0x8, 0x3, 0xff}, {0x9, 0x3, 0x10, 0xc9, 0xd, 0x200}, {0x13, 0x4, 0x7, 0x6, 0x6, 0x7}, {0x10001, 0x0, 0x4, 0x5, 0x2f, 0xffffffff}, {0x2, 0x8, 0x1, 0x6, 0x7, 0x5}, {0x4, 0x7, 0x7ff, 0x2, 0x8000, 0x1}, {0x3, 0x11, 0x3, 0x4, 0x5, 0x4}, {0x23, 0x80000000, 0x26, 0x400, 0x1, 0x5}, {0x3, 0x8, 0x3a9, 0x7, 0x2e, 0x244}, {0x7, 0x2, 0x58000000, 0x6, 0x5, 0x9}], [{0x5, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x2}, {0x2}, {0x4}, {0x1}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x1}, {0x2}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0x4, 0x2}, {0x5}, {}, {0x5}, {0x7}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {0x5}, {0x2}, {0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5}, {0x1}, {0x2}, {0x3, 0x1}, {0x3}, {0x4}, {}, {0x1, 0x1}, {0x3}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {}, {0x4}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x3}, {0x33ad92f3629fb66b, 0x380c1bfccf1a4d05}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x7}, {}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x1124}, 0x1, 0x0, 0x0, 0x810}, 0x41)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

2m39.137992511s ago: executing program 3 (id=115):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xce, 0x0, 0x6}]})
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x770d3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0)

2m23.220095087s ago: executing program 33 (id=115):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0xce, 0x0, 0x6}]})
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x770d3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0)

21.588488598s ago: executing program 1 (id=286):
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
lstat(0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r3 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2})
setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000000), 0x4)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
r4 = getpid()
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x0)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee0, 0x13, 0xffffffffffffffff, 0xe6a98000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)

18.402514358s ago: executing program 2 (id=288):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000b40)=ANY=[@ANYBLOB="1201000000000010580413500000000000010902240001000050000904000081030000000921faff000122a00009058103"], 0x0)
socket$inet6(0xa, 0x3, 0x2)
syz_usb_control_io(r0, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f00000003c0)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
io_uring_enter(0xffffffffffffffff, 0x847ba, 0x0, 0xe, 0x0, 0x0)
futex_waitv(&(0x7f0000001e40)=[{0x1edf, &(0x7f0000000440)=0x7, 0x2}], 0x1, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000080), &(0x7f0000000040)=@tcp6}, 0x20)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}], 0x1, 0x10)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x844, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="4023a0"], 0x0, 0x0, 0x0, 0x0}, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)

16.792900638s ago: executing program 1 (id=292):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cd", 0x69}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017b", 0xc1}], 0x4}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f", 0x4}], 0x1}}], 0x2, 0x20000044)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b4050000000000006110180000000000760000000000000095000000000000005cb6bf6ef64107127b04c78e7ef363b6bc33ecc11b13e83ecbd1f61e39904a778741f77f5c50716f883347bfe9aa70f5b090554da8a3cd69fdba7290e29636e083dc70e863408d34da4443b7e18e4b21cc2e5046d4254b2aef141728315b2e313c35079350146dc5de546ef2fe7e9a7a4df5430a"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x94)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

16.481796911s ago: executing program 1 (id=293):
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0x5}, 0x8)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008011}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x10)
syz_usb_connect(0x5, 0x34, 0x0, 0x0)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$nfs(0x0, &(0x7f0000001c40)='./file0\x00', &(0x7f0000000100), 0x106014, &(0x7f0000000480)={[], [{@fowner_gt}]})
open(&(0x7f0000000280)='.\x00', 0x141080, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x12, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000bc0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100}, 0x94)

12.887028243s ago: executing program 2 (id=295):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
syz_emit_ethernet(0x11, &(0x7f00000005c0)=ANY=[], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0xfffffffe}, 0x1c)
r4 = dup(r3)
sendto$packet(r4, &(0x7f0000000400), 0xfffffd23, 0x24005010, 0x0, 0x0)
connect$unix(r4, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e)

11.593063941s ago: executing program 2 (id=296):
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
r6 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xc, 0x4}, {0x0, 0x9}, {0x2, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)
sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000001a40)=""/102392, 0x18ff8)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x2, 0x5, 0x0, 0x3, 0x2, 0x2, 0xfffffffffffffffd], 0x10000, 0x202})
ioctl$KVM_RUN(r9, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r9, 0x4138ae84, 0x0)

11.536571044s ago: executing program 1 (id=297):
r0 = socket$nl_route(0x10, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3, 0x2, 0x3, 0x7}]})
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x60800)
socket$unix(0x1, 0x5, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x24, &(0x7f0000000300)=@raw=[@alu={0x7, 0x0, 0x3, 0x7, 0x4, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @snprintf], &(0x7f0000000440)='syzkaller\x00', 0x3, 0x6a, &(0x7f0000000480)=""/106, 0x20980, 0x70, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0xe, 0x84, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x10, 0x1}, 0x94)
bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @local}}}}}}, 0x0)
close(r2)
inotify_init1(0x800)
fcntl$setstatus(r2, 0x4, 0x2c00)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)

9.879803107s ago: executing program 1 (id=298):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r5, 0x0, 0x33, 0x0, 0x0)
listen(r5, 0x3)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000008c0)={{0x3, 0x2, 0x1, 0x1}})

8.385549405s ago: executing program 4 (id=301):
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
lstat(0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r3 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2})
setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000000), 0x4)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
r4 = getpid()
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x0)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee0, 0x13, 0xffffffffffffffff, 0xe6a98000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)

8.278200304s ago: executing program 2 (id=302):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
lstat(0x0, 0x0)
write$FUSE_ENTRY(r0, &(0x7f0000000240)={0x90, 0x0, 0x0, {0x1, 0x8000000000002, 0x1000, 0x0, 0x9, 0x5ebc, {0x3, 0x2f8, 0x57e, 0x2, 0x6, 0x7, 0x7ff, 0xdd, 0x400, 0x1d000, 0x2, 0x0, 0x0, 0x10000002, 0x5}}}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r4 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3})
setsockopt$sock_attach_bpf(r4, 0x1, 0x7, &(0x7f0000000000), 0x4)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
r5 = getpid()
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x0)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee0, 0x13, 0xffffffffffffffff, 0xe6a98000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)

4.398948009s ago: executing program 4 (id=303):
unshare(0x44050400)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000080), 0x12)
quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x109c02, 0x0)
epoll_create1(0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000680)=""/190, 0xbe}], 0x1}, 0x2001)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x1000, 0x0)

3.893731159s ago: executing program 2 (id=304):
r0 = syz_open_dev$dri(0x0, 0x0, 0x143042)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8b}, 0x0)
get_mempolicy(0x0, 0x0, 0x705c, &(0x7f00000b0000/0x2000)=nil, 0x3)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000080)='./file1\x00', 0x8)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f00000000c0)='./file1\x00')
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0x0, 0x0)
gettid()
timer_create(0x0, 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1)

3.74375469s ago: executing program 4 (id=305):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x5, 0xc0103)
ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0)
io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x1e}], 0x1)
r1 = socket(0x10, 0x80003, 0x0)
write(r1, &(0x7f0000000000), 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010000304fcffffff3f00000000000000", @ANYRES32=0x0, @ANYBLOB="a7fdad88900a0000140012800b0001006272696467650000040002800a000100aaaaaaaaaabbddff"], 0x40}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00')
r4 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
r5 = accept4(r4, 0x0, 0x0, 0x800)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x653988b496406357, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
recvfrom(r5, &(0x7f00000023c0)=""/231, 0xe7, 0x20, 0x0, 0x0)
sendmsg$nl_route_sched(r3, 0x0, 0x801)
close_range(r1, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)

2.57156977s ago: executing program 2 (id=306):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0)
get_mempolicy(0x0, 0x0, 0x3, &(0x7f0000003000/0x2000)=nil, 0x3)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8, 0x0, 0x6, 0x1, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0)
connect$unix(r0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0)
keyctl$session_to_parent(0x12)
socket$phonet_pipe(0x23, 0x5, 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e079c0814"], 0xa)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d000000"], 0x0, 0x34}, 0x28)
accept4(r0, &(0x7f0000000200)=@in6={0xa, 0x0, 0x0, @local}, &(0x7f0000000340)=0x80, 0xc0000)

2.568615458s ago: executing program 4 (id=307):
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
lstat(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r3 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2})
setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000000), 0x4)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
chdir(&(0x7f0000000000)='./file0\x00')
r4 = getpid()
r5 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000240)="6848b2796acd812dce3d01d190a3cab1e8ce", 0x12}], 0x2}, 0x0)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee0, 0x13, 0xffffffffffffffff, 0xe6a98000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)

720.588747ms ago: executing program 1 (id=308):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000008e704090000000000000109022400010200a008090400fe01030004000921fffffd0122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000000)={0x0, 0x5, 0x12, {0x12, 0x23, "aab509b9780f141fecfcd8ae06e19d3c"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

387.979962ms ago: executing program 4 (id=309):
r0 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000180), 0xfea7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB, @ANYRES8=r0], 0x4}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
sendfile(r4, r3, 0x0, 0x100000002)

0s ago: executing program 4 (id=310):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12014101175129205705092006c70102030109022400010200100009045807028ab53800090506020001000006090582020002"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.7' (ED25519) to the list of known hosts.
[   71.888190][ T5580] cgroup: Unknown subsys name 'net'
[   72.128869][ T5580] cgroup: Unknown subsys name 'cpuset'
[   72.183800][ T5580] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   73.834033][ T5580] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   76.091157][ T5596] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   76.102327][ T5596] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   76.114494][ T5596] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   76.116021][ T5596] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   76.117183][ T5596] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   76.219654][ T5603] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   76.246730][ T5603] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   76.258061][ T5603] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   76.264082][ T5608] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   76.267687][ T5603] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   76.278368][ T5608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   76.279010][ T5608] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   76.279823][ T5608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   76.282769][ T5608] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   76.286456][ T5608] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   76.287153][ T5608] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   76.288275][ T5608] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   76.291611][ T5603] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   76.292751][ T4914] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   76.295528][ T4914] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   76.317903][ T4914] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   76.331654][ T4914] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   76.332570][ T4914] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   76.362802][ T5596] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   76.367545][ T5596] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   78.194803][ T5596] Bluetooth: hci0: command tx timeout
[   78.353271][ T5596] Bluetooth: hci1: command tx timeout
[   78.353431][ T5596] Bluetooth: hci2: command tx timeout
[   78.433286][ T5604] Bluetooth: hci4: command tx timeout
[   78.443719][ T5604] Bluetooth: hci3: command tx timeout
[   78.481098][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.481858][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.481976][ T5592] bridge_slave_0: entered allmulticast mode
[   78.486274][ T5592] bridge_slave_0: entered promiscuous mode
[   78.541393][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.541465][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.541570][ T5592] bridge_slave_1: entered allmulticast mode
[   78.544615][ T5592] bridge_slave_1: entered promiscuous mode
[   78.688879][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.706896][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.707031][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.707303][ T5598] bridge_slave_0: entered allmulticast mode
[   78.708762][ T5598] bridge_slave_0: entered promiscuous mode
[   78.736384][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.765640][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.765722][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.765822][ T5598] bridge_slave_1: entered allmulticast mode
[   78.767216][ T5598] bridge_slave_1: entered promiscuous mode
[   78.840349][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.840438][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.840530][ T5593] bridge_slave_0: entered allmulticast mode
[   78.841937][ T5593] bridge_slave_0: entered promiscuous mode
[   78.866253][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.866368][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.866515][ T5600] bridge_slave_0: entered allmulticast mode
[   78.868842][ T5600] bridge_slave_0: entered promiscuous mode
[   78.873241][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.873406][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.873561][ T5594] bridge_slave_0: entered allmulticast mode
[   78.877250][ T5594] bridge_slave_0: entered promiscuous mode
[   78.907846][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.907958][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.908096][ T5593] bridge_slave_1: entered allmulticast mode
[   78.912530][ T5593] bridge_slave_1: entered promiscuous mode
[   78.921714][ T5592] team0: Port device team_slave_0 added
[   78.943730][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.943840][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.944033][ T5600] bridge_slave_1: entered allmulticast mode
[   78.948277][ T5600] bridge_slave_1: entered promiscuous mode
[   78.950024][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.950132][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.950277][ T5594] bridge_slave_1: entered allmulticast mode
[   78.952871][ T5594] bridge_slave_1: entered promiscuous mode
[   78.960758][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.066386][ T5592] team0: Port device team_slave_1 added
[   79.092477][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.162624][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.181366][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.185240][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.207673][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.208479][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.208488][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.208501][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.211886][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.216027][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.218532][ T5598] team0: Port device team_slave_0 added
[   79.238370][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.238384][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.238408][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.283162][ T5598] team0: Port device team_slave_1 added
[   79.387683][ T5593] team0: Port device team_slave_0 added
[   79.391285][ T5600] team0: Port device team_slave_0 added
[   79.397683][ T5594] team0: Port device team_slave_0 added
[   79.418913][ T5593] team0: Port device team_slave_1 added
[   79.421154][ T5600] team0: Port device team_slave_1 added
[   79.422608][ T5594] team0: Port device team_slave_1 added
[   79.434240][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.434255][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.434278][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.500839][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.500855][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.500868][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.579899][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.579914][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.579934][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.591615][ T5592] hsr_slave_0: entered promiscuous mode
[   79.593702][ T5592] hsr_slave_1: entered promiscuous mode
[   79.596632][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.596643][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.596666][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.598727][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.598739][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.598762][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.606106][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.606119][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.606142][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.608740][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.608752][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.608775][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.611742][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.611753][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.611777][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.753478][ T5598] hsr_slave_0: entered promiscuous mode
[   79.755305][ T5598] hsr_slave_1: entered promiscuous mode
[   79.756283][ T5598] debugfs: 'hsr0' already exists in 'hsr'
[   79.756388][ T5598] Cannot create hsr debugfs directory
[   79.902485][ T5593] hsr_slave_0: entered promiscuous mode
[   79.903983][ T5593] hsr_slave_1: entered promiscuous mode
[   79.905054][ T5593] debugfs: 'hsr0' already exists in 'hsr'
[   79.905077][ T5593] Cannot create hsr debugfs directory
[   79.915963][ T5600] hsr_slave_0: entered promiscuous mode
[   79.918449][ T5600] hsr_slave_1: entered promiscuous mode
[   79.919518][ T5600] debugfs: 'hsr0' already exists in 'hsr'
[   79.919539][ T5600] Cannot create hsr debugfs directory
[   79.929696][ T5594] hsr_slave_0: entered promiscuous mode
[   79.930942][ T5594] hsr_slave_1: entered promiscuous mode
[   79.931788][ T5594] debugfs: 'hsr0' already exists in 'hsr'
[   79.931808][ T5594] Cannot create hsr debugfs directory
[   80.275679][ T5604] Bluetooth: hci0: command tx timeout
[   80.433391][ T5604] Bluetooth: hci2: command tx timeout
[   80.433426][ T5604] Bluetooth: hci1: command tx timeout
[   80.513350][ T5596] Bluetooth: hci3: command tx timeout
[   80.513383][ T5596] Bluetooth: hci4: command tx timeout
[   81.093966][ T5592] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   81.134654][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   81.145192][ T5592] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   81.168564][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   81.169990][ T5592] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   81.221897][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   81.240104][ T5592] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   81.277182][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   81.403660][ T5593] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   81.426359][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   81.442416][ T5593] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   81.466681][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   81.470186][ T5593] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   81.517810][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   81.542056][ T5593] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   81.577925][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   81.830386][ T5598] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   81.875284][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   81.888726][ T5598] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   81.918226][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   81.924368][ T5598] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   81.967276][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   81.992052][ T5598] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   82.029672][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   82.155047][ T5600] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   82.187833][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   82.202492][ T5600] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   82.227108][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   82.231181][ T5600] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   82.258436][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   82.289776][ T5600] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   82.318177][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   82.349724][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.353379][ T5604] Bluetooth: hci0: command tx timeout
[   82.440787][ T5594] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   82.466900][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   82.485722][ T5594] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   82.514191][ T5604] Bluetooth: hci1: command tx timeout
[   82.514224][ T5604] Bluetooth: hci2: command tx timeout
[   82.539256][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   82.542481][ T5594] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   82.560914][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   82.572902][ T5592] 8021q: adding VLAN 0 to HW filter on device team0
[   82.575281][ T5594] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   82.593508][ T5596] Bluetooth: hci4: command tx timeout
[   82.593539][ T5596] Bluetooth: hci3: command tx timeout
[   82.627516][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   82.675112][   T66] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.675315][   T66] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.727883][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.732179][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.732543][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.828824][ T5593] 8021q: adding VLAN 0 to HW filter on device team0
[   82.869439][ T1220] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.871266][ T1220] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.881746][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.930281][ T1220] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.930369][ T1220] bridge0: port 2(bridge_slave_1) entered forwarding state
[   82.997753][ T5598] 8021q: adding VLAN 0 to HW filter on device team0
[   83.072830][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.116694][ T3452] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.116904][ T3452] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.169560][  T143] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.169757][  T143] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.276405][ T5600] 8021q: adding VLAN 0 to HW filter on device team0
[   83.311244][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.311331][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.335698][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.391829][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.391965][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.628485][ T5594] 8021q: adding VLAN 0 to HW filter on device team0
[   83.690880][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.693751][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.818762][ T1220] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.819336][ T1220] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.077402][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.433534][ T5604] Bluetooth: hci0: command tx timeout
[   84.529232][ T5592] veth0_vlan: entered promiscuous mode
[   84.538191][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.593278][ T5604] Bluetooth: hci2: command tx timeout
[   84.593307][ T5604] Bluetooth: hci1: command tx timeout
[   84.615410][ T5592] veth1_vlan: entered promiscuous mode
[   84.683268][ T5596] Bluetooth: hci3: command tx timeout
[   84.683299][ T5596] Bluetooth: hci4: command tx timeout
[   84.906245][ T5592] veth0_macvtap: entered promiscuous mode
[   84.956713][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.979421][ T5592] veth1_macvtap: entered promiscuous mode
[   85.059394][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.095690][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.166088][ T3311] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.192840][ T3311] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.200622][ T3311] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.202440][ T3311] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.502888][ T5598] veth0_vlan: entered promiscuous mode
[   85.542561][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.616205][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.689448][ T5598] veth1_vlan: entered promiscuous mode
[   85.788063][ T3311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.788093][ T3311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.860800][ T5593] veth0_vlan: entered promiscuous mode
[   85.931688][ T5593] veth1_vlan: entered promiscuous mode
[   85.956766][ T3311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.956786][ T3311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.012784][ T5598] veth0_macvtap: entered promiscuous mode
[   86.024534][ T5600] veth0_vlan: entered promiscuous mode
[   86.024931][ T5594] veth0_vlan: entered promiscuous mode
[   86.046798][ T5598] veth1_macvtap: entered promiscuous mode
[   86.081374][ T5594] veth1_vlan: entered promiscuous mode
[   86.089908][ T5600] veth1_vlan: entered promiscuous mode
[   86.148605][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.150496][ T5593] veth0_macvtap: entered promiscuous mode
[   86.191496][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.202624][ T5593] veth1_macvtap: entered promiscuous mode
[   86.236532][ T3311] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.239946][ T3311] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.264441][ T3311] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.310481][ T3311] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.331680][ T5594] veth0_macvtap: entered promiscuous mode
[   86.340851][ T5600] veth0_macvtap: entered promiscuous mode
[   86.352941][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.447527][ T5600] veth1_macvtap: entered promiscuous mode
[   86.450240][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.450723][ T5594] veth1_macvtap: entered promiscuous mode
[   86.748991][  T822] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.752614][  T822] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.786893][  T822] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.488754][ T5793] Zero length message leads to an empty skb
[   87.790230][  T822] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.998596][   T42] cfg80211: failed to load regulatory.db
[   88.615637][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.649280][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.696188][ T2853] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.696209][ T2853] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.741189][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.815215][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.926258][   T66] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.955718][   T66] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.960895][   T66] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.994452][   T66] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.997371][   T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.997388][   T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.000482][  T822] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.022659][  T822] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.041824][  T822] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.058766][  T822] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.347948][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.347968][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.650838][ T5805] loop5: detected capacity change from 0 to 7
[   90.922820][ T5805] Dev loop5: unable to read RDB block 7
[   90.923043][ T5805]  loop5: unable to read partition table
[   90.924693][ T5805] loop5: partition table beyond EOD, truncated
[   90.924757][ T5805] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[   91.023284][ T5806] binder: 5800:5806 ioctl c0285840 200000000000 returned -22
[   92.031004][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.031018][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.126206][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.126219][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.227504][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.227522][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.549171][   T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.549191][   T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.138026][ T5810] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10)
[   93.140790][ T5810] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   93.315594][ T5810] vhci_hcd vhci_hcd.0: Device attached
[   94.666905][ T5811] vhci_hcd: connection closed
[   94.681301][   T45] vhci_hcd vhci_hcd.2: stop threads
[   94.681732][   T45] vhci_hcd vhci_hcd.2: release socket
[   94.681776][   T45] vhci_hcd vhci_hcd.2: disconnect device
[   95.552181][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.552202][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.599701][ T5819] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   96.957767][ T5822] random: crng reseeded on system resumption
[   98.015045][ T5821] fuse: Unknown parameter 'use00000000000000000000'
[   98.366230][ T5838] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4'.
[  101.154086][ T5850] binder: 5845:5850 ioctl c0285840 200000000000 returned -22
[  101.433577][ T5841] syz.1.9 (5841) used greatest stack depth: 18168 bytes left
[  102.991402][ T5856] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  102.991466][ T5856] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  102.999537][ T5856] vhci_hcd vhci_hcd.0: Device attached
[  103.810723][ T5857] vhci_hcd: connection closed
[  103.952167][  T150] vhci_hcd vhci_hcd.4: stop threads
[  103.952184][  T150] vhci_hcd vhci_hcd.4: release socket
[  104.120540][  T150] vhci_hcd vhci_hcd.4: disconnect device
[  104.266450][    T9] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  106.109413][ T5871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14'.
[  108.211122][   T36] audit: type=1326 audit(1777107178.530:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5888 comm="syz.0.20" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f79d427cdd9 code=0x0
[  110.246066][ T5910] netlink: 220 bytes leftover after parsing attributes in process `syz.3.23'.
[  110.246261][ T5910] netlink: 'syz.3.23': attribute type 2 has an invalid length.
[  110.246277][ T5910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23'.
[  111.375418][ T5911] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9)
[  111.375545][ T5911] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  111.376431][ T5911] vhci_hcd vhci_hcd.0: Device attached
[  112.200255][ T5912] vhci_hcd: connection closed
[  112.360575][   T13] vhci_hcd vhci_hcd.1: stop threads
[  112.360686][   T13] vhci_hcd vhci_hcd.1: release socket
[  112.367757][   T13] vhci_hcd vhci_hcd.1: disconnect device
[  114.201117][ T5932] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[  114.201158][ T5932] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  114.244286][ T5932] vhci_hcd vhci_hcd.0: Device attached
[  114.904552][ T5937] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  114.904568][ T5937] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  114.904629][ T5937] vhci_hcd vhci_hcd.0: Device attached
[  115.025509][ T5933] vhci_hcd: connection closed
[  115.226245][  T143] vhci_hcd vhci_hcd.2: stop threads
[  115.226303][  T143] vhci_hcd vhci_hcd.2: release socket
[  115.461300][  T143] vhci_hcd vhci_hcd.2: disconnect device
[  115.705337][ T5938] vhci_hcd: connection closed
[  115.794558][ T1029] vhci_hcd vhci_hcd.1: stop threads
[  115.794585][ T1029] vhci_hcd vhci_hcd.1: release socket
[  115.794616][ T1029] vhci_hcd vhci_hcd.1: disconnect device
[  116.940351][ T5960] binder: 5959:5960 ioctl 4018620d 0 returned -22
[  116.943925][ T5960] binder: 5959:5960 unknown command 0
[  116.943943][ T5960] binder: 5959:5960 ioctl c0306201 200000000080 returned -22
[  119.117774][ T5957] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  119.964683][ T5949] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  120.954672][ T5984] random: crng reseeded on system resumption
[  120.956903][ T5949] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  120.956931][ T5949] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  120.956955][ T5949] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  120.956966][ T5949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.074966][ T5984] fuse: Unknown parameter 'use00000000000000000000'
[  121.303170][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  121.323211][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  121.333173][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  121.467542][ T5972] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  121.634106][   T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  123.906494][   T31] usb 2-1: Using ep0 maxpacket: 8
[  123.964042][   T31] usb 2-1: device descriptor read/all, error -71
[  126.292897][ T5949] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  127.101417][ T6023] trusted_key: syz.4.51 sent an empty control message without MSG_MORE.
[  128.505861][ T6017] binder: 6013:6017 ioctl c0285840 200000000000 returned -22
[  128.675172][ T6026] binder: 6019:6026 ioctl c0285840 200000000000 returned -22
[  129.088051][ T5949] usb 5-1: USB disconnect, device number 2
[  131.583171][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  131.593171][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  131.603174][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  133.317370][ T6048] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  133.403705][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  133.403824][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  133.463981][ T6053] loop5: detected capacity change from 0 to 7
[  133.499244][ T6052] binder: 6043:6052 ioctl c0285840 200000000000 returned -22
[  133.624771][ T6053] Dev loop5: unable to read RDB block 7
[  133.624982][ T6053]  loop5: unable to read partition table
[  133.628676][ T6053] loop5: partition table beyond EOD, truncated
[  133.628767][ T6053] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  133.853951][ T5711] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  134.323258][ T5711] usb 3-1: Using ep0 maxpacket: 8
[  134.354023][ T5711] usb 3-1: unable to get BOS descriptor or descriptor too short
[  134.359886][ T5711] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  134.366920][ T5711] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  134.366937][ T5711] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  134.366948][ T5711] usb 3-1: Product: syz
[  134.366955][ T5711] usb 3-1: Manufacturer: syz
[  134.366962][ T5711] usb 3-1: SerialNumber: syz
[  135.070380][ T5711] usb 3-1: config 0 descriptor??
[  136.574215][ T5711] usb 3-1: can't set config #0, error -71
[  136.591672][ T5711] usb 3-1: USB disconnect, device number 2
[  136.715312][ T6068] udevd[6068]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  136.860812][   T36] audit: type=1326 audit(1777107207.360:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6071 comm="syz.4.64" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4dc3eecdd9 code=0x0
[  137.583161][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  137.653165][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  138.335595][ T6101] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10)
[  138.335662][ T6101] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  138.341088][ T6101] vhci_hcd vhci_hcd.0: Device attached
[  138.994773][ T5711] usb 35-1: new low-speed USB device number 2 using vhci_hcd
[  139.457282][ T6102] vhci_hcd: connection reset by peer
[  139.610508][ T2853] vhci_hcd vhci_hcd.1: stop threads
[  139.610596][ T2853] vhci_hcd vhci_hcd.1: release socket
[  139.710726][ T2853] vhci_hcd vhci_hcd.1: disconnect device
[  140.301921][ T6109] netlink: 28 bytes leftover after parsing attributes in process `syz.4.70'.
[  141.214432][  T819] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  141.865573][  T819] usb 4-1: Using ep0 maxpacket: 8
[  141.878097][  T819] usb 4-1: unable to get BOS descriptor or descriptor too short
[  141.882809][  T819] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40
[  141.882835][  T819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.882853][  T819] usb 4-1: Product: syz
[  141.882866][  T819] usb 4-1: Manufacturer: syz
[  141.882879][  T819] usb 4-1: SerialNumber: syz
[  144.088527][ T6128] loop5: detected capacity change from 0 to 7
[  144.095073][ T6128] Dev loop5: unable to read RDB block 7
[  144.095101][ T6128]  loop5: unable to read partition table
[  144.095238][ T6128] loop5: partition table beyond EOD, truncated
[  144.095249][ T6128] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  144.099754][ T6128] binder: 6127:6128 ioctl c0285840 200000000000 returned -22
[  144.193356][ T5711] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  144.197927][  T819] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  144.310838][  T819] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  146.793985][  T819] usb 4-1: USB disconnect, device number 2
[  148.089515][   T36] audit: type=1326 audit(1777107218.600:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6141 comm="syz.2.79" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf7eb2cdd9 code=0x0
[  152.511469][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  152.684741][ T6171] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  153.013245][ T5755] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  153.178661][ T5755] usb 3-1: Using ep0 maxpacket: 8
[  153.188714][ T5755] usb 3-1: unable to get BOS descriptor or descriptor too short
[  153.200415][ T5755] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40
[  153.200432][ T5755] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.200442][ T5755] usb 3-1: Product: syz
[  153.200450][ T5755] usb 3-1: Manufacturer: syz
[  153.200457][ T5755] usb 3-1: SerialNumber: syz
[  154.835414][ T6182] hpfs: Bad magic ... probably not HPFS
[  154.845058][ T5755] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  154.895876][ T5755] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  155.263295][ T6188] tipc: Failed to remove unknown binding: 66,0,0/0:3809528905/3809528906
[  155.412898][ T5755] usb 3-1: USB disconnect, device number 3
[  155.866341][ T6199] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10)
[  155.866445][ T6199] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  155.867194][ T6199] vhci_hcd vhci_hcd.0: Device attached
[  157.175188][ T6201] vhci_hcd: connection closed
[  157.228114][   T12] vhci_hcd vhci_hcd.3: stop threads
[  157.228174][   T12] vhci_hcd vhci_hcd.3: release socket
[  157.228390][   T12] vhci_hcd vhci_hcd.3: disconnect device
[  157.253951][ T5711] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  157.671452][ T6193] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  157.720683][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  157.873704][ T6209] Scaler: =================  START STATUS  =================
[  157.873714][ T6209] Scaler: ==================  END STATUS  ==================
[  159.146550][ T6209] syz.4.96 (6209): drop_caches: 2
[  160.303742][ T6216] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  160.789800][ T5755] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  160.945754][ T5755] usb 4-1: Using ep0 maxpacket: 8
[  160.955850][ T5755] usb 4-1: unable to get BOS descriptor or descriptor too short
[  160.957150][ T5755] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  160.961164][ T5755] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  160.961189][ T5755] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  160.961207][ T5755] usb 4-1: Product: syz
[  160.961220][ T5755] usb 4-1: Manufacturer: syz
[  160.961233][ T5755] usb 4-1: SerialNumber: syz
[  161.026250][ T5755] usb 4-1: config 0 descriptor??
[  161.410370][ T6220] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9)
[  161.410631][ T6220] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  161.451743][ T6220] vhci_hcd vhci_hcd.0: Device attached
[  162.583558][ T6221] vhci_hcd: connection closed
[  162.761409][  T143] vhci_hcd vhci_hcd.4: stop threads
[  162.761437][  T143] vhci_hcd vhci_hcd.4: release socket
[  162.761702][  T143] vhci_hcd vhci_hcd.4: disconnect device
[  163.110217][ T5755] usb 4-1: USB disconnect, device number 3
[  163.329780][ T6231] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[  163.329833][ T6231] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  163.330410][ T6231] vhci_hcd vhci_hcd.0: Device attached
[  163.874985][ T5711] usb 37-1: new low-speed USB device number 3 using vhci_hcd
[  163.903193][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  163.923183][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  164.358443][ T6232] vhci_hcd: connection reset by peer
[  164.359672][   T66] vhci_hcd vhci_hcd.2: stop threads
[  164.359734][   T66] vhci_hcd vhci_hcd.2: release socket
[  164.359919][   T66] vhci_hcd vhci_hcd.2: disconnect device
[  165.354237][ T6242] Scaler: =================  START STATUS  =================
[  165.354253][ T6242] Scaler: ==================  END STATUS  ==================
[  165.453106][ T6242] syz.2.103 (6242): drop_caches: 2
[  167.843287][ T5755] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  168.034024][ T5755] usb 3-1: Using ep0 maxpacket: 8
[  168.038767][ T5755] usb 3-1: unable to get BOS descriptor or descriptor too short
[  168.047227][ T5755] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40
[  168.047254][ T5755] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.047273][ T5755] usb 3-1: Product: syz
[  168.047286][ T5755] usb 3-1: Manufacturer: syz
[  168.047300][ T5755] usb 3-1: SerialNumber: syz
[  169.042241][ T5755] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  169.056179][ T5755] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  169.156850][ T5755] usb 3-1: USB disconnect, device number 4
[  169.163284][ T5711] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  171.035599][ T6266] netlink: 220 bytes leftover after parsing attributes in process `syz.4.108'.
[  171.035622][ T6266] netlink: 'syz.4.108': attribute type 2 has an invalid length.
[  172.055574][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  173.045860][ T6273] mmap: syz.2.111 (6273) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  173.162269][ T6271] 9p: Bad value for 'rfdno'
[  173.295775][ T6272] syz.2.111 (6272) used greatest stack depth: 17208 bytes left
[  173.689491][ T5596] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  173.714483][ T5596] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  173.726835][ T5596] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  173.736075][ T5596] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  173.769715][ T5596] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  175.957471][ T5755] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  175.962101][ T6297] loop5: detected capacity change from 0 to 7
[  176.007077][ T6298] binder: 6293:6298 ioctl c0285840 200000000000 returned -22
[  176.038377][ T6297] Dev loop5: unable to read RDB block 7
[  176.038543][ T6297]  loop5: unable to read partition table
[  176.045211][ T6297] loop5: partition table beyond EOD, truncated
[  176.045400][ T6297] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  176.154585][ T5755] usb 3-1: Using ep0 maxpacket: 16
[  176.274469][ T5596] Bluetooth: hci5: command tx timeout
[  176.433418][ T5755] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[  176.433478][ T5755] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  176.433547][ T5755] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  176.433600][ T5755] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  176.433680][ T5755] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[  176.433702][ T5755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.916906][ T5755] usb 3-1: config 0 descriptor??
[  177.682147][ T6306] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  178.364892][ T5596] Bluetooth: hci5: command tx timeout
[  180.452428][ T5596] Bluetooth: hci5: command tx timeout
[  181.010058][ T6325] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  181.425113][ T5863] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  181.575018][ T5863] usb 5-1: Using ep0 maxpacket: 8
[  181.631372][ T5863] usb 5-1: device descriptor read/all, error -71
[  181.780697][ T5755] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.0001/input/input5
[  182.388722][ T6340] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[  182.388740][ T6340] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  182.388804][ T6340] vhci_hcd vhci_hcd.0: Device attached
[  182.651207][ T5596] Bluetooth: hci5: command tx timeout
[  183.308839][ T6341] vhci_hcd: connection closed
[  183.357584][ T6051] vhci_hcd vhci_hcd.1: stop threads
[  183.357612][ T6051] vhci_hcd vhci_hcd.1: release socket
[  183.357688][ T6051] vhci_hcd vhci_hcd.1: disconnect device
[  183.562620][    T9] usb 35-1: new low-speed USB device number 3 using vhci_hcd
[  183.563958][    T9] usb 35-1: enqueue for inactive port 0
[  184.060213][    T9] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  184.189029][ T5755] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.0001/input/input6
[  188.900084][ T5755] kye 0003:0458:5013.0001: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0
[  189.882900][ T5755] usb 3-1: USB disconnect, device number 5
[  191.644076][ T6358] fido_id[6358]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  191.899784][ T5604] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  191.947343][ T5604] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  191.970273][ T5604] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  191.998478][ T5604] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  192.003794][ T5604] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  194.149724][ T3311] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  194.282788][ T5604] Bluetooth: hci4: command tx timeout
[  194.412587][ T6370] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  194.458913][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  194.459053][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  196.115995][ T6389] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  196.483505][ T6396] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  196.768134][ T5604] Bluetooth: hci4: command tx timeout
[  196.863298][ T5645] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  197.303801][ T5645] usb 2-1: Using ep0 maxpacket: 8
[  197.587912][ T5645] usb 2-1: unable to get BOS descriptor or descriptor too short
[  197.592373][ T5645] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40
[  197.592400][ T5645] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.592419][ T5645] usb 2-1: Product: syz
[  197.592433][ T5645] usb 2-1: Manufacturer: syz
[  197.592446][ T5645] usb 2-1: SerialNumber: syz
[  198.806651][ T3311] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  198.843655][ T5604] Bluetooth: hci4: command tx timeout
[  198.968675][ T5645] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  198.973530][ T5645] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  199.132691][ T5645] usb 2-1: USB disconnect, device number 4
[  199.684812][ T6409] netlink: 20 bytes leftover after parsing attributes in process `syz.4.139'.
[  199.849927][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  200.349256][ T3311] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.385655][ T5755] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  200.441261][ T6418] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  200.973380][   T59] Bluetooth: hci4: command tx timeout
[  201.323279][ T5755] usb 3-1: Using ep0 maxpacket: 8
[  201.417425][ T5755] usb 3-1: unable to get BOS descriptor or descriptor too short
[  201.633297][   T59] Bluetooth: hci3: command 0x0406 tx timeout
[  201.633331][   T59] Bluetooth: hci0: command 0x0406 tx timeout
[  201.674823][   T59] Bluetooth: hci1: command 0x0406 tx timeout
[  201.717747][ T5755] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40
[  201.717824][ T5755] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.717887][ T5755] usb 3-1: Product: syz
[  201.717951][ T5755] usb 3-1: Manufacturer: syz
[  201.718003][ T5755] usb 3-1: SerialNumber: syz
[  202.678733][ T5755] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  202.682189][ T5755] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  202.724951][ T3311] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.634486][ T5755] usb 3-1: USB disconnect, device number 6
[  203.796022][ T6438] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  204.739981][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  206.239621][   T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  207.536435][   T10] usb 3-1: Using ep0 maxpacket: 8
[  207.539691][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[  207.548200][   T10] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40
[  207.548228][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.548246][   T10] usb 3-1: Product: syz
[  207.548257][   T10] usb 3-1: Manufacturer: syz
[  207.548268][   T10] usb 3-1: SerialNumber: syz
[  207.927166][   T10] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  207.928418][   T10] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  208.294385][ T6274] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.294481][ T6274] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.294677][ T6274] bridge_slave_0: entered allmulticast mode
[  208.306527][ T6274] bridge_slave_0: entered promiscuous mode
[  208.508878][   T10] usb 3-1: USB disconnect, device number 7
[  208.536476][ T6274] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.536604][ T6274] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.536908][ T6274] bridge_slave_1: entered allmulticast mode
[  209.147707][ T6274] bridge_slave_1: entered promiscuous mode
[  210.205599][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  210.393274][ T5725] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  210.443868][   T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  210.527080][ T6274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  210.563246][ T5725] usb 5-1: Using ep0 maxpacket: 8
[  210.590478][ T6274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  210.595003][   T10] usb 3-1: Using ep0 maxpacket: 8
[  210.598030][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[  210.607284][   T10] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40
[  210.607312][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.607331][   T10] usb 3-1: Product: syz
[  210.607345][   T10] usb 3-1: Manufacturer: syz
[  210.607357][   T10] usb 3-1: SerialNumber: syz
[  210.639110][ T5725] usb 5-1: unable to get BOS descriptor or descriptor too short
[  210.642518][ T5725] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  210.675271][ T5725] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  210.675305][ T5725] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  210.675325][ T5725] usb 5-1: Product: syz
[  210.675339][ T5725] usb 5-1: Manufacturer: syz
[  210.675353][ T5725] usb 5-1: SerialNumber: syz
[  210.717407][ T5725] usb 5-1: config 0 descriptor??
[  211.428506][ T5725] usb 5-1: USB disconnect, device number 5
[  211.441370][   T10] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  211.441840][   T10] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  211.515896][ T6090] udevd[6090]: setting mode of /dev/bus/usb/005/005 to 020664 failed: No such file or directory
[  211.516098][ T6090] udevd[6090]: setting owner of /dev/bus/usb/005/005 to uid=0, gid=0 failed: No such file or directory
[  211.540018][ T3311] bridge_slave_1: left allmulticast mode
[  211.556264][ T3311] bridge_slave_1: left promiscuous mode
[  211.576500][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.691128][   T10] usb 3-1: USB disconnect, device number 8
[  211.714780][ T3311] bridge_slave_0: left allmulticast mode
[  211.714811][ T3311] bridge_slave_0: left promiscuous mode
[  211.715042][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.815501][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  212.832049][ T6500] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  214.140461][ T5604] Bluetooth: hci3: unexpected event for opcode 0x1408
[  214.181321][ T6516] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  214.560112][ T6519] loop5: detected capacity change from 0 to 7
[  214.628266][ T6520] binder: 6517:6520 ioctl c0285840 200000000000 returned -22
[  214.674989][ T6519] Dev loop5: unable to read RDB block 7
[  214.675315][ T6519]  loop5: unable to read partition table
[  214.681038][ T6519] loop5: partition table beyond EOD, truncated
[  214.681266][ T6519] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  216.554257][ T3311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  216.671171][ T3311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  217.032387][ T6529] evm: overlay not supported
[  217.772362][ T3311] bond0 (unregistering): Released all slaves
[  218.620951][ T5259] 8021q: adding VLAN 0 to HW filter on device eth1
[  218.865094][ T6274] team0: Port device team_slave_0 added
[  218.869741][ T6274] team0: Port device team_slave_1 added
[  218.898846][ T5645] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  219.025494][ T6274] batman_adv: batadv0: Adding interface: batadv_slave_0
[  219.025511][ T6274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  219.025536][ T6274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  219.035848][ T6274] batman_adv: batadv0: Adding interface: batadv_slave_1
[  219.053283][ T5645] usb 2-1: Using ep0 maxpacket: 8
[  219.059696][ T5645] usb 2-1: unable to get BOS descriptor or descriptor too short
[  219.090207][ T5645] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  219.115908][ T6274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  219.115937][ T6274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  219.121059][ T5645] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  219.121088][ T5645] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  219.121107][ T5645] usb 2-1: Product: syz
[  219.121121][ T5645] usb 2-1: Manufacturer: syz
[  219.121135][ T5645] usb 2-1: SerialNumber: syz
[  219.245528][ T5645] usb 2-1: config 0 descriptor??
[  219.284862][ T5949] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  219.453485][ T5949] usb 5-1: Using ep0 maxpacket: 8
[  219.457547][ T5949] usb 5-1: unable to get BOS descriptor or descriptor too short
[  219.482344][ T5949] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40
[  219.482362][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.482373][ T5949] usb 5-1: Product: syz
[  219.482380][ T5949] usb 5-1: Manufacturer: syz
[  219.482387][ T5949] usb 5-1: SerialNumber: syz
[  220.454369][ T5645] usb 2-1: USB disconnect, device number 5
[  222.137426][ T5949] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  222.137806][ T5949] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  222.528349][ T5949] usb 5-1: USB disconnect, device number 6
[  222.712360][ T6559] overlayfs: missing 'lowerdir'
[  223.582165][   T31] IPVS: starting estimator thread 0...
[  223.673467][ T6562] IPVS: using max 11 ests per chain, 26400 per kthread
[  224.325102][ T6566] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  226.220129][ T6578] Scaler: =================  START STATUS  =================
[  226.220145][ T6578] Scaler: ==================  END STATUS  ==================
[  226.268055][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  226.367111][ T6578] syz.1.174 (6578): drop_caches: 2
[  226.530794][ T6274] hsr_slave_0: entered promiscuous mode
[  226.535906][ T6274] hsr_slave_1: entered promiscuous mode
[  226.538325][ T6274] debugfs: 'hsr0' already exists in 'hsr'
[  226.538350][ T6274] Cannot create hsr debugfs directory
[  226.738540][ T5259] 8021q: adding VLAN 0 to HW filter on device eth2
[  227.652482][  T143] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 0
[  227.683635][  T143] Bluetooth: hci2: Frame reassembly failed (-84)
[  227.685266][ T6590] 9p: Bad value for 'rfdno'
[  228.685461][ T6596] affs: No valid root block on device nullb0
[  229.713282][ T4914] Bluetooth: hci2: command 0x1003 tx timeout
[  229.756531][ T5604] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  231.267618][ T6608] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  231.351692][ T6360] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.351788][ T6360] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.351968][ T6360] bridge_slave_0: entered allmulticast mode
[  231.383358][ T6360] bridge_slave_0: entered promiscuous mode
[  231.613655][ T3311] hsr_slave_0: left promiscuous mode
[  231.665926][ T3311] hsr_slave_1: left promiscuous mode
[  231.867689][ T3311] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  231.867779][ T3311] batman_adv: batadv0: Removing interface: batadv_slave_0
[  232.856273][ T3311] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  232.856332][ T3311] batman_adv: batadv0: Removing interface: batadv_slave_1
[  233.003410][ T6616] loop5: detected capacity change from 0 to 7
[  233.046634][ T6617] binder: 6613:6617 ioctl c0285840 200000000000 returned -22
[  233.147020][ T6616] Dev loop5: unable to read RDB block 7
[  233.147216][ T6616]  loop5: unable to read partition table
[  233.149377][ T6616] loop5: partition table beyond EOD, truncated
[  233.149527][ T6616] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  233.581874][ T6622] Scaler: =================  START STATUS  =================
[  233.581889][ T6622] Scaler: ==================  END STATUS  ==================
[  233.637490][ T3311] veth1_macvtap: left promiscuous mode
[  233.637776][ T3311] veth0_macvtap: left promiscuous mode
[  233.638054][ T3311] veth1_vlan: left promiscuous mode
[  233.638388][ T3311] veth0_vlan: left promiscuous mode
[  233.808621][ T4914] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  233.888715][ T6623] syz.1.185 (6623): drop_caches: 2
[  233.889074][ T4914] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  233.892916][ T4914] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  233.913926][ T4914] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  233.920841][ T4914] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  235.353823][ T3311] team0 (unregistering): Port device team_slave_1 removed
[  235.406051][ T3311] team0 (unregistering): Port device team_slave_0 removed
[  235.698281][ T6360] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.701089][ T6360] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.701285][ T6360] bridge_slave_1: entered allmulticast mode
[  235.719924][ T6360] bridge_slave_1: entered promiscuous mode
[  236.471258][ T6360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  236.533275][ T6360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  236.931691][ T5604] Bluetooth: hci2: command tx timeout
[  237.298294][ T6360] team0: Port device team_slave_0 added
[  237.982353][ T6360] team0: Port device team_slave_1 added
[  238.352958][ T6360] batman_adv: batadv0: Adding interface: batadv_slave_0
[  238.352975][ T6360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  238.352998][ T6360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  238.505942][ T6360] batman_adv: batadv0: Adding interface: batadv_slave_1
[  238.505953][ T6360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  238.505966][ T6360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  238.746330][ T6360] hsr_slave_0: entered promiscuous mode
[  238.762089][ T6360] hsr_slave_1: entered promiscuous mode
[  238.763003][ T6360] debugfs: 'hsr0' already exists in 'hsr'
[  238.763027][ T6360] Cannot create hsr debugfs directory
[  239.005498][ T5604] Bluetooth: hci2: command tx timeout
[  239.529897][ T6695] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[  239.529923][ T6695] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  239.530022][ T6695] vhci_hcd vhci_hcd.0: Device attached
[  239.783366][ T5645] usb 37-1: new low-speed USB device number 4 using vhci_hcd
[  240.778641][ T6696] vhci_hcd: connection reset by peer
[  240.780637][ T1146] vhci_hcd vhci_hcd.2: stop threads
[  240.780660][ T1146] vhci_hcd vhci_hcd.2: release socket
[  240.781872][ T1146] vhci_hcd vhci_hcd.2: disconnect device
[  241.083785][ T5604] Bluetooth: hci2: command tx timeout
[  241.548996][ T5718] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  242.123086][ T5718] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  242.123223][ T5718] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  242.123332][ T5718] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  242.123354][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.246170][ T6703] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  242.276494][ T5718] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  243.164568][ T5604] Bluetooth: hci2: command tx timeout
[  244.627321][ T6719] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  245.905980][ T5645] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  246.080588][ T5755] usb 2-1: USB disconnect, device number 6
[  246.596592][ T5259] 8021q: adding VLAN 0 to HW filter on device eth3
[  249.633279][ T5704] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  249.787113][ T5704] usb 5-1: Using ep0 maxpacket: 32
[  249.802681][ T5704] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  249.802706][ T5704] usb 5-1: config 0 has no interface number 0
[  249.802748][ T5704] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  249.802769][ T5704] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  249.802802][ T5704] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  249.802819][ T5704] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.804683][ T5755] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  249.814925][ T5704] usb 5-1: config 0 descriptor??
[  249.882516][ T3311] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  249.953730][ T5755] usb 2-1: Using ep0 maxpacket: 8
[  249.971695][ T5755] usb 2-1: unable to get BOS descriptor or descriptor too short
[  249.980002][ T5755] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40
[  249.980026][ T5755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.980040][ T5755] usb 2-1: Product: syz
[  249.980052][ T5755] usb 2-1: Manufacturer: syz
[  249.980063][ T5755] usb 2-1: SerialNumber: syz
[  251.170358][ T5755] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  251.170772][ T5755] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  251.214133][ T5704] uclogic 0003:28BD:0094.0002: failed retrieving string descriptor #100: -71
[  251.214194][ T5704] uclogic 0003:28BD:0094.0002: failed retrieving pen parameters: -71
[  251.214222][ T5704] uclogic 0003:28BD:0094.0002: pen probing failed: -71
[  251.214238][ T5704] uclogic 0003:28BD:0094.0002: failed probing parameters: -71
[  251.214344][ T5704] uclogic 0003:28BD:0094.0002: probe with driver uclogic failed with error -71
[  251.438184][ T5704] usb 5-1: USB disconnect, device number 7
[  251.587770][ T6762] netlink: 28 bytes leftover after parsing attributes in process `syz.2.216'.
[  252.388599][ T6774] syz.2.218 uses obsolete (PF_INET,SOCK_PACKET)
[  252.426118][ T5755] usb 2-1: USB disconnect, device number 7
[  252.430697][ T4914] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  252.454780][ T4914] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  252.468412][ T4914] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  252.477919][ T4914] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  252.479366][ T4914] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  253.194933][ T6770] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  255.492692][ T6776] block nbd0: shutting down sockets
[  255.756514][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  255.756583][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  255.874309][ T6792] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10)
[  255.877930][ T6792] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  255.878857][ T6792] vhci_hcd vhci_hcd.0: Device attached
[  256.673662][ T5645] usb 41-1: new low-speed USB device number 3 using vhci_hcd
[  256.878761][ T6793] vhci_hcd: connection reset by peer
[  256.903541][ T1029] vhci_hcd vhci_hcd.4: stop threads
[  256.903633][ T1029] vhci_hcd vhci_hcd.4: release socket
[  256.904171][ T1029] vhci_hcd vhci_hcd.4: disconnect device
[  257.050212][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  257.417246][   T43] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 0
[  257.485483][ T4914] Bluetooth: hci5: command tx timeout
[  257.566019][ T6799] 9p: Bad value for 'rfdno'
[  257.604527][  T150] Bluetooth: hci6: Frame reassembly failed (-84)
[  257.646315][ T3311] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  257.702994][ T6802] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  257.804537][ T5259] 8021q: adding VLAN 0 to HW filter on device eth4
[  257.913252][ T5755] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  258.056975][ T3311] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  258.063637][ T5755] usb 2-1: Using ep0 maxpacket: 16
[  258.079434][ T5755] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[  258.079483][ T5755] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  258.079509][ T5755] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  258.079528][ T5755] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  258.079566][ T5755] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[  258.079586][ T5755] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.088779][ T5755] usb 2-1: config 0 descriptor??
[  259.636353][ T5596] Bluetooth: hci5: command tx timeout
[  259.641474][ T5596] Bluetooth: hci6: command 0x1003 tx timeout
[  259.715668][ T5604] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  260.005021][ T5755] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0003/input/input7
[  260.120872][ T5755] input: HID 0458:5013 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:5013.0003/input/input8
[  260.326308][ T5755] kye 0003:0458:5013.0003: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.1-1/input0
[  260.483074][ T6819] affs: No valid root block on device nullb0
[  261.375313][ T5755] usb 2-1: USB disconnect, device number 8
[  261.952448][ T5604] Bluetooth: hci5: command tx timeout
[  262.023702][ T3311] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.033413][ T5645] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  262.373627][ T6822] Scaler: =================  START STATUS  =================
[  262.373710][ T6822] Scaler: ==================  END STATUS  ==================
[  263.322381][ T6822] syz.1.224 (6822): drop_caches: 2
[  263.636377][ T6823] fido_id[6823]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  263.953254][ T5604] Bluetooth: hci5: command tx timeout
[  263.964963][ T6840] netlink: 28 bytes leftover after parsing attributes in process `syz.1.226'.
[  264.123330][ T5645] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  264.351264][ T5645] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  264.351311][ T5645] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  264.351363][ T5645] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  264.351429][ T5645] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.092559][ T6839] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  265.444301][ T5645] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  267.295160][ T6849] block nbd0: shutting down sockets
[  268.859983][ T5645] usb 3-1: USB disconnect, device number 9
[  268.977594][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  269.103275][ T5704] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  269.275031][ T5704] usb 2-1: Using ep0 maxpacket: 8
[  269.280009][ T5704] usb 2-1: unable to get BOS descriptor or descriptor too short
[  269.307770][ T5704] usb 2-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40
[  269.307788][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.307798][ T5704] usb 2-1: Product: syz
[  269.307806][ T5704] usb 2-1: Manufacturer: syz
[  269.307813][ T5704] usb 2-1: SerialNumber: syz
[  270.562916][ T6625] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.576073][ T6625] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.576307][ T6625] bridge_slave_0: entered allmulticast mode
[  270.606869][ T6625] bridge_slave_0: entered promiscuous mode
[  270.636580][ T5645] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  270.778123][ T6625] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.781087][ T6625] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.781362][ T6625] bridge_slave_1: entered allmulticast mode
[  270.796540][ T6625] bridge_slave_1: entered promiscuous mode
[  270.803332][ T5645] usb 3-1: Using ep0 maxpacket: 8
[  270.806617][ T5645] usb 3-1: unable to get BOS descriptor or descriptor too short
[  270.811491][ T5645] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40
[  270.811520][ T5645] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.811539][ T5645] usb 3-1: Product: syz
[  270.811552][ T5645] usb 3-1: Manufacturer: syz
[  270.811566][ T5645] usb 3-1: SerialNumber: syz
[  271.793070][ T5704] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  271.832359][ T5704] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  271.980398][ T5645] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  271.985472][ T5645] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  272.003568][ T5704] usb 2-1: USB disconnect, device number 9
[  272.134492][ T6869] loop5: detected capacity change from 0 to 7
[  272.196128][ T6870] binder: 6867:6870 ioctl c0285840 200000000000 returned -22
[  272.238441][ T6869] Dev loop5: unable to read RDB block 7
[  272.238653][ T6869]  loop5: unable to read partition table
[  272.240501][ T6869] loop5: partition table beyond EOD, truncated
[  272.240635][ T6869] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  273.430770][ T6625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  273.534485][ T5645] usb 3-1: USB disconnect, device number 10
[  273.712303][ T6625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  273.770312][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  273.839740][ T6876] warning: `syz.1.235' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  274.524720][ T5645] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  274.565896][ T6625] team0: Port device team_slave_0 added
[  274.572885][ T6625] team0: Port device team_slave_1 added
[  274.593540][ T6881] netlink: 28 bytes leftover after parsing attributes in process `syz.1.236'.
[  274.842549][ T5645] usb 3-1: Using ep0 maxpacket: 32
[  275.472840][ T5645] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  275.472869][ T5645] usb 3-1: config 0 has no interface number 0
[  275.472914][ T5645] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  275.472939][ T5645] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  275.472976][ T5645] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  275.472998][ T5645] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.564230][ T5645] usb 3-1: config 0 descriptor??
[  275.703818][ T3311] bridge_slave_1: left allmulticast mode
[  275.703848][ T3311] bridge_slave_1: left promiscuous mode
[  275.704408][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.862292][ T3311] bridge_slave_0: left allmulticast mode
[  275.862452][ T3311] bridge_slave_0: left promiscuous mode
[  275.889038][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state
[  277.088565][ T5645] usbhid 3-1:0.1: can't add hid device: -71
[  277.088689][ T5645] usbhid 3-1:0.1: probe with driver usbhid failed with error -71
[  277.094566][ T5645] usb 3-1: USB disconnect, device number 11
[  280.180241][ T6898] block nbd0: shutting down sockets
[  280.582716][ T3311] bridge_slave_1: left allmulticast mode
[  280.619191][ T3311] bridge_slave_1: left promiscuous mode
[  280.768768][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.794536][ T5645] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  281.055075][ T3311] bridge_slave_0: left allmulticast mode
[  281.055107][ T3311] bridge_slave_0: left promiscuous mode
[  281.061446][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state
[  281.103487][ T5645] usb 3-1: Using ep0 maxpacket: 8
[  281.109446][ T5645] usb 3-1: unable to get BOS descriptor or descriptor too short
[  281.128331][ T5645] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40
[  281.128348][ T5645] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.128358][ T5645] usb 3-1: Product: syz
[  281.128365][ T5645] usb 3-1: Manufacturer: syz
[  281.128372][ T5645] usb 3-1: SerialNumber: syz
[  281.176703][ T6910] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  281.176766][ T6910] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  281.183276][ T6910] vhci_hcd vhci_hcd.0: Device attached
[  281.482492][ T5704] usb 41-1: new low-speed USB device number 4 using vhci_hcd
[  282.073692][ T6911] vhci_hcd: connection reset by peer
[  282.075283][ T3452] vhci_hcd vhci_hcd.4: stop threads
[  282.075326][ T3452] vhci_hcd vhci_hcd.4: release socket
[  282.075882][ T3452] vhci_hcd vhci_hcd.4: disconnect device
[  283.371855][ T5645] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  283.381579][ T5645] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  283.662693][ T5645] usb 3-1: USB disconnect, device number 12
[  283.922428][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  284.180182][ T3311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  284.390560][ T3311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  284.467701][ T3311] bond0 (unregistering): Released all slaves
[  284.714404][ T5645] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  284.864872][ T5645] usb 3-1: Using ep0 maxpacket: 8
[  284.869958][ T5645] usb 3-1: unable to get BOS descriptor or descriptor too short
[  284.871679][ T5645] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  284.898948][ T5645] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  284.898966][ T5645] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  284.898976][ T5645] usb 3-1: Product: syz
[  284.898983][ T5645] usb 3-1: Manufacturer: syz
[  284.898990][ T5645] usb 3-1: SerialNumber: syz
[  285.889595][ T5645] usb 3-1: config 0 descriptor??
[  286.654949][ T5704] vhci_hcd vhci_hcd.4: vhci_device speed not set
[  287.026221][ T5645] usb 3-1: USB disconnect, device number 13
[  287.153826][ T3311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  287.215269][ T3311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  287.465630][ T3311] bond0 (unregistering): Released all slaves
[  288.172912][ T6625] batman_adv: batadv0: Adding interface: batadv_slave_0
[  288.172927][ T6625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  288.172952][ T6625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  288.254534][ T6625] batman_adv: batadv0: Adding interface: batadv_slave_1
[  288.254545][ T6625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  288.254559][ T6625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  290.433901][ T6946] block nbd0: shutting down sockets
[  292.307167][ T6955] 9p: Bad value for 'rfdno'
[  292.663254][ T6625] hsr_slave_0: entered promiscuous mode
[  292.667688][ T6625] hsr_slave_1: entered promiscuous mode
[  292.668720][ T6625] debugfs: 'hsr0' already exists in 'hsr'
[  292.668742][ T6625] Cannot create hsr debugfs directory
[  293.231976][ T6970] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[  293.232004][ T6970] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  293.232078][ T6970] vhci_hcd vhci_hcd.0: Device attached
[  293.575565][ T5596] Bluetooth: hci0: unexpected event for opcode 0x1408
[  293.606112][ T6976] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  293.613404][ T5711] usb 37-1: new low-speed USB device number 5 using vhci_hcd
[  294.307749][ T6971] vhci_hcd: connection reset by peer
[  294.350908][ T3452] vhci_hcd vhci_hcd.2: stop threads
[  294.350951][ T3452] vhci_hcd vhci_hcd.2: release socket
[  294.351173][ T3452] vhci_hcd vhci_hcd.2: disconnect device
[  294.673306][ T5596] Bluetooth: hci4: command 0x1003 tx timeout
[  294.673463][ T5604] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  295.007801][ T6980] netlink: 52 bytes leftover after parsing attributes in process `syz.4.258'.
[  295.350789][ T5596] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  295.418631][ T5596] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  295.435543][ T5596] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  295.504409][ T5596] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  295.584010][ T5596] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  295.633739][ T6988] loop5: detected capacity change from 0 to 7
[  295.672516][ T6989] binder: 6984:6989 ioctl c0285840 200000000000 returned -22
[  295.758676][ T6988] Dev loop5: unable to read RDB block 7
[  295.759129][ T6988]  loop5: unable to read partition table
[  295.829922][ T6988] loop5: partition table beyond EOD, truncated
[  295.830026][ T6988] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  296.570227][ T6980] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.570800][ T6980] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.220516][ T5259] 8021q: adding VLAN 0 to HW filter on device eth5
[  298.002264][ T7015] netlink: 220 bytes leftover after parsing attributes in process `syz.2.261'.
[  298.002279][ T7015] netlink: 'syz.2.261': attribute type 2 has an invalid length.
[  298.354728][ T7014] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  298.686537][ T7019] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9)
[  298.686563][ T7019] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  298.686654][ T7019] vhci_hcd vhci_hcd.0: Device attached
[  298.743389][ T5711] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  298.754071][ T5596] Bluetooth: hci4: command tx timeout
[  298.984389][ T5704] usb 35-1: new low-speed USB device number 4 using vhci_hcd
[  299.686987][ T7020] vhci_hcd: connection reset by peer
[  299.693393][  T150] vhci_hcd vhci_hcd.1: stop threads
[  299.693411][  T150] vhci_hcd vhci_hcd.1: release socket
[  299.693453][  T150] vhci_hcd vhci_hcd.1: disconnect device
[  300.939604][ T6766] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.939723][ T6766] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.939974][ T6766] bridge_slave_0: entered allmulticast mode
[  300.983313][ T5596] Bluetooth: hci4: command tx timeout
[  300.995537][ T6766] bridge_slave_0: entered promiscuous mode
[  301.075207][ T6766] bridge0: port 2(bridge_slave_1) entered blocking state
[  301.075330][ T6766] bridge0: port 2(bridge_slave_1) entered disabled state
[  301.075557][ T6766] bridge_slave_1: entered allmulticast mode
[  301.096103][ T6766] bridge_slave_1: entered promiscuous mode
[  302.077197][  T143] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 1
[  302.136244][ T3311] hsr_slave_0: left promiscuous mode
[  302.175765][ T3311] hsr_slave_1: left promiscuous mode
[  302.176739][ T3311] batman_adv: batadv0: Removing interface: batadv_slave_0
[  302.214217][ T3311] batman_adv: batadv0: Removing interface: batadv_slave_1
[  302.423376][ T3311] hsr_slave_0: left promiscuous mode
[  302.519236][ T3311] hsr_slave_1: left promiscuous mode
[  302.673564][ T3311] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  302.673589][ T3311] batman_adv: batadv0: Removing interface: batadv_slave_0
[  303.000363][ T3311] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  303.000403][ T3311] batman_adv: batadv0: Removing interface: batadv_slave_1
[  303.025884][ T5604] Bluetooth: hci4: command tx timeout
[  303.274037][ T7050] loop5: detected capacity change from 0 to 7
[  303.279828][ T7050] Dev loop5: unable to read RDB block 7
[  303.279868][ T7050]  loop5: unable to read partition table
[  303.280651][ T7050] loop5: partition table beyond EOD, truncated
[  303.280790][ T7050] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  303.381338][ T3311] veth1_macvtap: left promiscuous mode
[  303.382436][ T3311] veth0_macvtap: left promiscuous mode
[  303.382892][ T3311] veth1_vlan: left promiscuous mode
[  303.383052][ T3311] veth0_vlan: left promiscuous mode
[  303.591419][ T7054] loop5: detected capacity change from 0 to 7
[  303.611176][ T7054] Dev loop5: unable to read RDB block 7
[  303.611411][ T7054]  loop5: unable to read partition table
[  303.613341][ T7054] loop5: partition table beyond EOD, truncated
[  303.613405][ T7054] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  303.626228][ T7054] binder: 7052:7054 ioctl c0285840 200000000000 returned -22
[  304.113506][ T5604] Bluetooth: hci2: command 0x1003 tx timeout
[  304.113561][ T5596] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  304.895989][ T7056] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  305.049584][ T5704] vhci_hcd vhci_hcd.1: vhci_device speed not set
[  305.156361][ T5596] Bluetooth: hci4: command tx timeout
[  309.121330][ T7086] loop5: detected capacity change from 0 to 7
[  309.140141][ T7086] Dev loop5: unable to read RDB block 7
[  309.140184][ T7086]  loop5: unable to read partition table
[  309.140411][ T7086] loop5: partition table beyond EOD, truncated
[  309.140446][ T7086] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  309.822043][ T7097] netlink: 220 bytes leftover after parsing attributes in process `syz.4.283'.
[  309.822111][ T7097] netlink: 'syz.4.283': attribute type 2 has an invalid length.
[  310.569432][ T7094] loop5: detected capacity change from 0 to 7
[  310.572539][ T7094] Dev loop5: unable to read RDB block 7
[  310.572587][ T7094]  loop5: unable to read partition table
[  310.572804][ T7094] loop5: partition table beyond EOD, truncated
[  310.597571][ T7094] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  310.598239][ T3311] team0 (unregistering): Port device team_slave_1 removed
[  310.673384][ T5645] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  310.674683][ T3311] team0 (unregistering): Port device team_slave_0 removed
[  311.773228][ T5645] usb 3-1: Using ep0 maxpacket: 8
[  311.776223][ T5645] usb 3-1: unable to get BOS descriptor or descriptor too short
[  311.781222][ T5645] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40
[  311.781250][ T5645] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.781269][ T5645] usb 3-1: Product: syz
[  311.781282][ T5645] usb 3-1: Manufacturer: syz
[  311.781295][ T5645] usb 3-1: SerialNumber: syz
[  315.154792][ T5645] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  315.161472][ T5645] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  315.563090][ T5604] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  315.895660][ T5604] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  315.948468][ T5604] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  315.959394][ T5604] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  315.960228][ T5604] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  316.258729][ T7123] loop5: detected capacity change from 0 to 7
[  316.275026][ T7123] Dev loop5: unable to read RDB block 7
[  316.275068][ T7123]  loop5: unable to read partition table
[  316.275282][ T7123] loop5: partition table beyond EOD, truncated
[  316.275312][ T7123] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5)
[  316.362980][ T5645] usb 3-1: USB disconnect, device number 14
[  316.545314][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  316.793279][ T5645] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  317.521178][ T1337] ieee802154 phy0 wpan0: encryption failed: -22
[  317.521244][ T1337] ieee802154 phy1 wpan1: encryption failed: -22
[  317.553280][ T5645] usb 3-1: Using ep0 maxpacket: 16
[  317.555243][ T5645] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[  317.555287][ T5645] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  317.555312][ T5645] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  317.555332][ T5645] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  317.555381][ T5645] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[  317.555403][ T5645] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.645327][ T5645] usb 3-1: config 0 descriptor??
[  317.770126][   T31] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  317.793747][ T3311] team0 (unregistering): Port device team_slave_1 removed
[  317.884524][ T3311] team0 (unregistering): Port device team_slave_0 removed
[  317.926829][   T31] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  317.926856][   T31] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  317.926886][   T31] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  317.927103][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.226293][ T5596] Bluetooth: hci2: command tx timeout
[  320.273554][ T5596] Bluetooth: hci2: command tx timeout
[  320.699104][ T5645] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.0004/input/input9
[  321.674692][   T31] usb 2-1: USB disconnect, device number 10
[  321.764385][ T5645] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.0004/input/input10
[  322.026682][ T5645] kye 0003:0458:5013.0004: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0
[  322.051522][ T5645] usb 3-1: USB disconnect, device number 15
[  322.356988][ T5596] Bluetooth: hci2: command tx timeout
[  322.774005][ T6766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  323.473074][ T7154] fido_id[7154]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  324.461011][ T5596] Bluetooth: hci2: command tx timeout
[  329.549340][ T5259] 8021q: adding VLAN 0 to HW filter on device eth6
[  329.831043][ T7220] Scaler: =================  START STATUS  =================
[  329.831059][ T7220] Scaler: ==================  END STATUS  ==================
[  330.531701][ T7220] syz.4.305 (7220): drop_caches: 2
[  332.895165][ T5596] Bluetooth: hci3: unexpected event for opcode 0x1408
[  332.903295][ T5711] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  333.055608][ T5711] usb 2-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  333.055641][ T5711] usb 2-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0
[  333.055663][ T5711] usb 2-1: config 2 interface 0 has no altsetting 0
[  333.055695][ T5711] usb 2-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00
[  333.055718][ T5711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.485540][ T5711] elo 0003:04E7:0009.0005: unknown main item tag 0x1
[  333.485579][ T5711] elo 0003:04E7:0009.0005: global environment stack underflow
[  333.485593][ T5711] elo 0003:04E7:0009.0005: item 0 1 1 11 parsing failed
[  333.491119][ T5711] elo 0003:04E7:0009.0005: parse failed
[  333.491182][ T5711] elo 0003:04E7:0009.0005: probe with driver elo failed with error -22
[  333.520053][ T6985] bridge0: port 1(bridge_slave_0) entered blocking state
[  333.520172][ T6985] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.520397][ T6985] bridge_slave_0: entered allmulticast mode
[  333.574641][ T6985] bridge_slave_0: entered promiscuous mode
[  333.714396][ T6985] bridge0: port 2(bridge_slave_1) entered blocking state
[  333.714463][ T6985] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.714619][ T6985] bridge_slave_1: entered allmulticast mode
[  333.725938][ T5711] usb 2-1: USB disconnect, device number 11
[  333.735634][ T6985] bridge_slave_1: entered promiscuous mode
[  333.903265][ T5704] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  334.055711][ T5704] usb 5-1: Using ep0 maxpacket: 32
[  334.071119][ T6985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  334.091961][ T5704] usb 5-1: config 2 has an invalid interface number: 88 but max is 0
[  334.091989][ T5704] usb 5-1: config 2 has no interface number 0
[  334.092033][ T5704] usb 5-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256
[  334.092057][ T5704] usb 5-1: config 2 interface 88 has no altsetting 0
[  334.123103][ T6985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  334.142763][ T5704] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.06
[  334.142793][ T5704] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.142813][ T5704] usb 5-1: Product: syz
[  334.142827][ T5704] usb 5-1: Manufacturer: syz
[  334.142840][ T5704] usb 5-1: SerialNumber: syz
[  334.181415][ T7258] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  334.248239][ T7241] ------------[ cut here ]------------
[  334.248253][ T7241] kcov->t != t
[  334.248266][ T7241] WARNING: kernel/kcov.c:483 at kcov_task_exit+0xf5/0x160, CPU#1: syz.1.308/7241
[  334.248313][ T7241] Modules linked in:
[  334.248341][ T7241] CPU: 1 UID: 0 PID: 7241 Comm: syz.1.308 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  334.248364][ T7241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  334.248379][ T7241] RIP: 0010:kcov_task_exit+0xf5/0x160
[  334.248400][ T7241] Code: 10 00 00 48 8b bb 90 00 00 00 e8 c6 b0 55 00 48 89 df 5b 41 5e 41 5f e9 e9 6d 5b 00 7c 1c 5b 41 5e 41 5f c3 cc cc cc cc cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 0b d0 59 09 48 89 df be 03 00
[  334.248417][ T7241] RSP: 0018:ffffc900051f7d20 EFLAGS: 00010206
[  334.248433][ T7241] RAX: 656d0fcf9bef0500 RBX: ffff88803315f800 RCX: 0000000000000000
[  334.248448][ T7241] RDX: 000000003371b556 RSI: ffffffff8ba74b40 RDI: 00000000ffffffff
[  334.248463][ T7241] RBP: ffffc900051f7e78 R08: ffffffff8b1e3760 R09: ffffffff8dfc8140
[  334.248478][ T7241] R10: dffffc0000000000 R11: fffffbfff1f11a1f R12: dffffc0000000000
[  334.248493][ T7241] R13: 0000000000000000 R14: ffff88803315f808 R15: ffff88802cf88000
[  334.248507][ T7241] FS:  000055557d917500(0000) GS:ffff88812627d000(0000) knlGS:0000000000000000
[  334.248525][ T7241] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  334.248538][ T7241] CR2: 00007f4dc3f3a4c0 CR3: 000000005ea4c000 CR4: 00000000003526f0
[  334.248556][ T7241] Call Trace:
[  334.248563][ T7241]  <TASK>
[  334.248575][ T7241]  do_exit+0x150/0x22c0
[  334.248603][ T7241]  ? lockdep_hardirqs_on+0x7a/0x110
[  334.248634][ T7241]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  334.248667][ T7241]  ? reacquire_held_locks+0x104/0x190
[  334.248696][ T7241]  ? rt_spin_lock+0x1e0/0x400
[  334.248720][ T7241]  ? __pfx_do_exit+0x10/0x10
[  334.248746][ T7241]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  334.248781][ T7241]  ? rt_spin_unlock+0x160/0x200
[  334.248806][ T7241]  do_group_exit+0x21b/0x2d0
[  334.248835][ T7241]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.248857][ T7241]  __x64_sys_exit_group+0x3f/0x40
[  334.248884][ T7241]  x64_sys_call+0x221a/0x2240
[  334.248908][ T7241]  do_syscall_64+0x15f/0xf80
[  334.248928][ T7241]  ? trace_irq_disable+0x3b/0x140
[  334.248951][ T7241]  ? clear_bhb_loop+0x40/0x90
[  334.248975][ T7241]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.248996][ T7241] RIP: 0033:0x7f5bc662cdd9
[  334.249022][ T7241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  334.249039][ T7241] RSP: 002b:00007ffd1163e328 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  334.249162][ T7241] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5bc662cdd9
[  334.249176][ T7241] RDX: 00007f5bc5889000 RSI: 0000000000000000 RDI: 0000000000000000
[  334.249188][ T7241] RBP: 00007ffd1163e38c R08: 0000000000000000 R09: 000055557d92a9f0
[  334.249201][ T7241] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000005b
[  334.249213][ T7241] R13: 000055557d92a9f0 R14: 000000000004f8bf R15: 00007ffd1163e3e0
[  334.249245][ T7241]  </TASK>
[  334.249255][ T7241] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  334.249279][ T7241] CPU: 1 UID: 0 PID: 7241 Comm: syz.1.308 Not tainted syzkaller #0 PREEMPT_{RT,(full)} 
[  334.249302][ T7241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  334.249313][ T7241] Call Trace:
[  334.249322][ T7241]  <TASK>
[  334.249330][ T7241]  vpanic+0x56c/0xa60
[  334.249359][ T7241]  ? __pfx__printk+0x10/0x10
[  334.249388][ T7241]  ? __pfx_vpanic+0x10/0x10
[  334.249408][ T7241]  ? is_bpf_text_address+0x292/0x2b0
[  334.249445][ T7241]  ? is_bpf_text_address+0x26/0x2b0
[  334.249478][ T7241]  panic+0xc5/0xd0
[  334.249500][ T7241]  ? __pfx_panic+0x10/0x10
[  334.249544][ T7241]  __warn+0x315/0x4c0
[  334.249565][ T7241]  ? kcov_task_exit+0xf5/0x160
[  334.249586][ T7241]  ? kcov_task_exit+0xf5/0x160
[  334.249605][ T7241]  __report_bug+0x29a/0x540
[  334.249640][ T7241]  ? kcov_task_exit+0xf5/0x160
[  334.249660][ T7241]  ? __pfx___report_bug+0x10/0x10
[  334.249694][ T7241]  ? __pfx_rtlock_slowlock_locked+0x10/0x10
[  334.249723][ T7241]  ? rt_spin_lock+0x1e0/0x400
[  334.249748][ T7241]  ? rt_spin_lock+0x1e0/0x400
[  334.249774][ T7241]  ? kcov_task_exit+0xf5/0x160
[  334.249794][ T7241]  report_bug+0x16a/0x220
[  334.249824][ T7241]  ? kcov_task_exit+0xf5/0x160
[  334.249839][ T7241]  ? kcov_task_exit+0xf7/0x160
[  334.249857][ T7241]  handle_bug+0x9c/0x200
[  334.249879][ T7241]  exc_invalid_op+0x1a/0x50
[  334.249901][ T7241]  asm_exc_invalid_op+0x1a/0x20
[  334.249920][ T7241] RIP: 0010:kcov_task_exit+0xf5/0x160
[  334.249942][ T7241] Code: 10 00 00 48 8b bb 90 00 00 00 e8 c6 b0 55 00 48 89 df 5b 41 5e 41 5f e9 e9 6d 5b 00 7c 1c 5b 41 5e 41 5f c3 cc cc cc cc cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 0b d0 59 09 48 89 df be 03 00
[  334.249959][ T7241] RSP: 0018:ffffc900051f7d20 EFLAGS: 00010206
[  334.249978][ T7241] RAX: 656d0fcf9bef0500 RBX: ffff88803315f800 RCX: 0000000000000000
[  334.249992][ T7241] RDX: 000000003371b556 RSI: ffffffff8ba74b40 RDI: 00000000ffffffff
[  334.250007][ T7241] RBP: ffffc900051f7e78 R08: ffffffff8b1e3760 R09: ffffffff8dfc8140
[  334.250021][ T7241] R10: dffffc0000000000 R11: fffffbfff1f11a1f R12: dffffc0000000000
[  334.250036][ T7241] R13: 0000000000000000 R14: ffff88803315f808 R15: ffff88802cf88000
[  334.250058][ T7241]  ? rt_spin_lock+0x1e0/0x400
[  334.250109][ T7241]  do_exit+0x150/0x22c0
[  334.250136][ T7241]  ? lockdep_hardirqs_on+0x7a/0x110
[  334.250164][ T7241]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  334.250196][ T7241]  ? reacquire_held_locks+0x104/0x190
[  334.250225][ T7241]  ? rt_spin_lock+0x1e0/0x400
[  334.250249][ T7241]  ? __pfx_do_exit+0x10/0x10
[  334.250276][ T7241]  ? __pfx_rt_mutex_slowunlock+0x10/0x10
[  334.250312][ T7241]  ? rt_spin_unlock+0x160/0x200
[  334.250340][ T7241]  do_group_exit+0x21b/0x2d0
[  334.250370][ T7241]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.250392][ T7241]  __x64_sys_exit_group+0x3f/0x40
[  334.250418][ T7241]  x64_sys_call+0x221a/0x2240
[  334.250443][ T7241]  do_syscall_64+0x15f/0xf80
[  334.250461][ T7241]  ? trace_irq_disable+0x3b/0x140
[  334.250484][ T7241]  ? clear_bhb_loop+0x40/0x90
[  334.250509][ T7241]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.250529][ T7241] RIP: 0033:0x7f5bc662cdd9
[  334.250549][ T7241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  334.250566][ T7241] RSP: 002b:00007ffd1163e328 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  334.250586][ T7241] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5bc662cdd9
[  334.250601][ T7241] RDX: 00007f5bc5889000 RSI: 0000000000000000 RDI: 0000000000000000
[  334.250614][ T7241] RBP: 00007ffd1163e38c R08: 0000000000000000 R09: 000055557d92a9f0
[  334.250628][ T7241] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000005b
[  334.250641][ T7241] R13: 000055557d92a9f0 R14: 000000000004f8bf R15: 00007ffd1163e3e0
[  334.250672][ T7241]  </TASK>
[  334.251126][ T7241] Kernel Offset: disabled