last executing test programs:

32.99758548s ago: executing program 3 (id=3109):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x0, 0xffffff6a, 0x0, 0x0, 0x340, 0x258, 0x258, 0x340, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x87}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x9}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x180, 0x1c0, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast2, @empty, @private2}}, @common=@dst={{0x48}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470)
close(r2)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000400))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
execveat$binfmt(0xffffffffffffff9c, r1, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000)

31.488374275s ago: executing program 3 (id=3114):
r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
r1 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x148401)
ioctl$LOOP_CLR_FD(r1, 0x4c01)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000080)='syzkaller\x00'}, 0x94)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1000000000000003, &(0x7f0000000800)={<r4=>0xffffffffffffffff}, 0x106, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x107fe, @empty, 0x2}, {0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, '\x00', 0x22}, 0x7}, r4, 0xb}}, 0x48)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
write$RDMA_USER_CM_CMD_GET_EVENT(r3, &(0x7f0000000180)={0xc, 0x8, 0xfa00, {&(0x7f0000000f80)}}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f00000000c0)=0x1)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r6, 0x323, 0x70bd26, 0x25dfdbfd}, 0x14}}, 0x40010)
mkdir(&(0x7f0000000000)='./file0\x00', 0x100)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000b80), 0x100)

29.204787238s ago: executing program 3 (id=3117):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000090000000900000000a0000000b0000000600000402006027864c32b66c5cbc8425a3b79c00000a00000004000000d6ffffff0b00000004000000ff0700000000000003000000010400000400000000000000010000000500000005000000cdc700000f00000001000000d70000000f0000000000000b020000000400000003000004030000000600000003000000000200000200000002000000000000660f00000002000000"], &(0x7f00000000c0)=""/114, 0xb2, 0x72, 0x0, 0x3, 0x10000}, 0x28)
openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x2010, 0xffffffffffffffff, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRES32], 0x34}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
mount(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x8, &(0x7f0000000300)='usrquota')
ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="17000000", @ANYRES16=r4, @ANYBLOB="0100000000000000000010000000280001801400030000000000000000000000ffff"], 0x3c}}, 0x0)
ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, r0}, 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xb, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000090a010400000000000000000300000008000a40000000000900020073797a31000000000900010073797a3000e500000800054000000023200011800e000100636f6e6e6c696d69740000000c0002800800014000000000f8000000100001"], 0xa4}}, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB="9c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c00028006000100000000004c0003800c15010000000000010000000c00010065000000000000000c00010003000000000000000c00010005000000000000000c00010000000000000000000c000100000000000000000004000480080005"], 0x9c}, 0x1, 0xba01}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r8, 0xc08c5335, &(0x7f0000000240)={0x100, 0x81, 0x1, 'queue0\x00', 0x1478})
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00', 0x7c2})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x3}, 0x94)

28.524784617s ago: executing program 3 (id=3120):
unshare(0x6a040000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r0, &(0x7f0000000640)="cc530c71", 0x0}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x4)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x3)
getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000780)={'filter\x00', 0x0, [0x7, 0x5, 0xffff, 0x3a2a157c, 0x1]}, &(0x7f00000000c0)=0x54)

26.332171068s ago: executing program 3 (id=3128):
r0 = syz_open_dev$video4linux(&(0x7f00000007c0), 0x2, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x8000}, 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a42, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
writev(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900162f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000580)="051a00000e80006558f2878f02000000000000203d83d3a12388a8", 0x1b}], 0x2)
ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000000800)={0x3, &(0x7f0000000780)=[{}, {}, {}]})
ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0445624, &(0x7f0000000340)={0x140980001, 0x0, "ff5dff0f251ed700f60065c214525ae572ce1c205a923fc24b6b06fa080033ae", 0xfffffffffffffffa, 0x10, 0x8000000001, 0xfffffffffffffffc, 0x31, 0x4, 0x7, 0x2000000, [0x6, 0x6, 0x2a3, 0x1000]})
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="000001000000000007cfbc1f5fc4901b0001a2818f000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r6, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r7, 0x4)
r8 = syz_open_dev$vcsu(&(0x7f0000000240), 0x8, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x100, 0x8001, 0x6, 0x4, 0xffffffffffffffff, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x9}, 0x50)
r10 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042)
write$binfmt_script(r10, &(0x7f00000003c0)={'#! ', './file0'}, 0xb)
r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x10}, 0x18)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0x1, <r12=>0xffffffffffffffff}, 0x4)
r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50)
r14 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00')
read$qrtrtun(r14, &(0x7f00000004c0)=""/57, 0x39)
read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, <r15=>0x0}, 0x2020)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x78, 0x0, 0x3, {0x0, 0x0, 0x0, {0x4, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x3, 0x0, 0x0, 0x4000, 0x25daa903, 0xffffffffffffffff, r15, 0xffffffff, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mount$fuse(0x0, &(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000340), 0x888000, &(0x7f0000000400)={{'fd', 0x3d, r14}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r15}})
r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1}, 0x50)
r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x11, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0xb}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x794, 0x6c, &(0x7f0000000180)=""/108, 0x41100, 0x3, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, r7, r8, 0x0, &(0x7f0000000640)=[r9, r10, r11, r12, r13, r14, r16, r17], 0x0, 0x10, 0xfffffffe}, 0x94)

24.17948247s ago: executing program 3 (id=3134):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000000)={'bond0\x00', @ifru_names='ip6tnl0\x00'})
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000001640), 0xffffffffffffffff)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="7f000000", @ANYRES16=r1, @ANYBLOB="20002abd7000fddbdf2502000000050003006700000008000600e0000001"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000000)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x10600, 0x0)
r3 = syz_io_uring_setup(0x12de, &(0x7f0000000300)={0x0, 0x2000, 0x10100}, &(0x7f0000000100)=<r4=>0x0, &(0x7f0000000180)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x7, @mcast2, 0x10bf6b}, 0x0, 0x0, 0x1})
r6 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r6, 0x200000000114, 0x8, &(0x7f0000019780)=""/102387, &(0x7f00000003c0)=0xfffffffffffffdc8)
io_uring_enter(r3, 0x5b43, 0xaced, 0x20, 0x0, 0x0)
sendmsg(r2, &(0x7f00000015c0)={&(0x7f0000000080)=@vsock={0x28, 0x0, 0x2710}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000100)="08a50115ab98975871", 0x9}, {&(0x7f0000000140)="6ee1d22d7f5c018714cbb1067ccc69f60a74582e1f60a2afb552a047b40afcd4cd6804f56f19748e2eeb7b22fe72c76acc6bc84e3aeea08fd81473b808b7862315cd23d46e2c95d95fad1b155b8813eb63203d24a5160efd92ad3e184e2cf2b1e8316d369f919f17005fda293fa8194c925ab363422abad223e44f865f07a5823a16291572e2582b18b6f74e2608c68a6bb97badc5e732112ee0c9275a0088e7197dfc6e841844b942aef60a90c71d0908534c74e1d8e1e7c21c2d9b24327fdd64646dbf12e34b9952d1be9db6e081b8e14254f23ee047957b6d28f10d8277c9e340d7dcf08c2cbf520a0157f49db2cad57a22447ef21ceca3", 0xf9}], 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1318}, 0x20000000)

21.15498649s ago: executing program 4 (id=3143):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) (async, rerun: 32)
r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x191041, 0x0) (async, rerun: 32)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={<r3=>0x0, <r4=>0x0}, &(0x7f00000000c0)=0xc)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, <r5=>r0, {r4, 0xee01}}, './file0\x00'})
sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x118, 0xb, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x3}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_ADT={0x6c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x800}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x89}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x86}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x3}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9623}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IFACE={0x14, 0x17, 'pimreg1\x00'}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x2}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async, rerun: 32)
socket$inet_sctp(0x2, 0x5, 0x84) (rerun: 32)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000340)=0xfffffff7, 0x4) (async)
socket$alg(0x26, 0x5, 0x0) (async)
write$P9_RGETLOCK(r2, &(0x7f0000000380)={0x1f, 0x37, 0x1, {0x2, 0x3a1, 0xe, r3, 0x1, ':'}}, 0x1f)
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000400)=[{&(0x7f00000003c0)=""/61, 0x3d}], 0x1)
getsockopt$kcm_KCM_RECV_DISABLE(r5, 0x119, 0x1, &(0x7f0000000440), 0x4)
syz_usb_connect(0x3, 0x346, &(0x7f0000000480)={{0x12, 0x1, 0x250, 0xa0, 0x22, 0x17, 0x40, 0x846, 0x9042, 0xec2e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x334, 0x2, 0x1, 0x32, 0xe0, 0x43, [{{0x9, 0x4, 0x11, 0x7, 0x1, 0xcb, 0xe3, 0x35, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0xb, 0xa7}, [@mixer_unit={0xa, 0x24, 0x4, 0x5, 0x80, "ca616e1002"}, @feature_unit={0x9, 0x24, 0x6, 0x2, 0x1, 0x1, [0x2], 0x5}, @selector_unit={0x5, 0x24, 0x5, 0x3, 0x3}, @extension_unit={0xb, 0x24, 0x8, 0x1, 0xf51, 0x9, "2002c0bd"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x201, 0x2, 0x8, 0x8, 0x1, 0x7}]}], [{{0x9, 0x5, 0x3, 0x3, 0x200, 0xa, 0x3, 0x3}}]}}, {{0x9, 0x4, 0x35, 0x5, 0xd, 0x1, 0xd4, 0xaf, 0xe6, [@generic={0x2b, 0xb, "e4ee1110921c9b136ef67e1423341b4f7e2aeabc4fae5e8a1bd7bfaaf15e300687048109fb557e565c"}, @uac_as={[@as_header={0x7, 0x24, 0x1, 0x4, 0x4, 0x2}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x2, 0x2, 0x0, 0x6, "b3ad222cf5bddf"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x1, 0x1, 0x40, 0x3, "15c1"}, @as_header={0x7, 0x24, 0x1, 0x40, 0x6, 0x1}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x8, 0x3, 0x9c, 0x9, "c623", "f823cb"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x1, 0x1002}]}], [{{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x40, 0x4, 0x3}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0xfa, 0x7, 0x5}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x0, 0x3, 0x9}}, {{0x9, 0x5, 0x6, 0x8, 0x8, 0xe, 0x71, 0x8}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x4, 0x2, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x101, 0xa0, 0x800}]}}, {{0x9, 0x5, 0x5, 0x10, 0x5df, 0x0, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf, 0x1fc5}]}}, {{0x9, 0x5, 0x4, 0x2, 0x10, 0x18, 0x5, 0x2, [@generic={0xe9, 0xe, "f041e4ce213b494d5c579bc117f5ed26a93d2bd23a445dc82b9e4f2278feb90244e8c84fe9e064b0dfd3ddc5acf2d376ea51c0b4dd5e64f23628dfecc83f5fb869a7f6205e3f3b1d14a497fb5cf3db55ed4fec0aa9a166b2fa1b8dd2a72e8bb3498a5ea5eef3d4565e9af1857e1fb9a71567e47cbda7e15a4a2dc2a29cad44263b72160e481db7dcb177f2b0470a57e4d50611293d501ece1a2857b1d31a351f037ae1825b79203732f71e1e6ff79118b6942238f54f357d76c92b2b5c6abf287708d94ae3e432d782f9bb8f054fb99d5c2a5e65ca7175a7000c1d229ddc584a32b74cfd049418"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x200, 0x3, 0x8, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x4}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x10, 0x2, 0xe9}}, {{0x9, 0x5, 0x3, 0x0, 0x8, 0x1, 0x8, 0xcb}}, {{0x9, 0x5, 0x7, 0xc, 0x200, 0xc6, 0x7f, 0xd, [@generic={0xf8, 0x23, "010661a680f60121dfaac48eb2f6c8377db5cf8e26d22a389927734f40d2f6ca70ce3464f95db375b55c6346ad5de392459d9d8eb24951c6f1b7962c735f752e35f1ebf2a97f72a3e41dd284993717a4b279f2a6aa8b514c5f056ea1e1af0381ad3ce420283a56e2c096374405649b1334b2e75b13ec8a0fdb5815c5399b1109defe6bbbd960ba30c87b09f62af1d71ab831c355c8f04256078dfa7ec76681762234dce0c944d0d87678b928ff180f6706393275eaeb55fa8fbca7b9e5788a204bd2bfe4fef146d5865b25fe96388cde455e6182e07a9dd388e31983d106f3791abe4707047639d1edde2ec7cb496c3e8df686e1a62d"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0xe, 0x7, 0xec, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x41, 0x7}]}}, {{0x9, 0x5, 0x2, 0x3, 0x400, 0xe, 0xf1, 0x2}}]}}]}}]}}, &(0x7f0000000e80)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x200, 0x8, 0x9, 0x20, 0x8, 0x6}, 0x255, &(0x7f0000000840)={0x5, 0xf, 0x255, 0x6, [@generic={0xc7, 0x10, 0x2, "ff11a70ec3042a8d933b03c63c6548be9432e1390414acade17923ad671f07eb61b1f34ea8217802a27ed484a313fe8d26138091cedd0a90fafa21ab8cd819958b7d2f981ffbc73038046b37bd952a7161eb8cd165142ad6e77a08c0ac2589f7f61f15d5aaadb94b850f9f0aae7e9610844b2e207df3098e0464a59a82841712f3dd0ee123761f844724d2b204322e99be8506aa01bff9a75e18d426f89dac309ed2158f94f3b59295395b5a561e74cbca347b2a5805e0db3a436670589551009f012dc2"}, @generic={0x66, 0x10, 0xb, "75629065540653582ee8d1ae22a45353231e2c8ab507303d752bb09087a5fe48a77dbc4bf8a9a6e937a2feff6410b3d577828a2c6b61d718d136a18064cc5b8fc85621baf549636e007b9b5700f2b032fc2d503b6714a5851e22e630471990c85fe011"}, @ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x8, 0xf00f, 0x40, [0xc0]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x4, 0x8, 0x4}, @generic={0xf0, 0x10, 0xa, "152ce25b76d9c91c0797f6ac318e1c730ca0bbb68cfddf330970e01dd869bfaff2fed6f21298afcbdb305de5f73e96a5b36c56fe2e111870e917770c38649c2cd57515657bd0406d4c183633a7a783afa5fe4f1c33a6cce3fceafb8bf33329bdaf028f2e864fa388b8758d6611f9d4381bce6483479addf453bd93119233dd32c2dc170ee1c76e67dacb72302449c0707c4716dd72daef1c307c79675a26ac1bc5a02ead665d0f7731f399148ccfa115c8fde063626a83aa267220f79666584357b41bb1e92a468b7dca5ed1cdd6ee5836abf951fb43587d43a18b1b83c793e24eb80b82c0865086cc429e06a4"}, @ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x2, 0xf00, 0x8, [0x3f00, 0xc0, 0xc0, 0x3f0f]}]}, 0x9, [{0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x41f}}, {0xc3, &(0x7f0000000b80)=@string={0xc3, 0x3, "258030ef5b34cd71465752d8f54ef54e26ee1a96d1c2924804a6db530b25e9c7ff60eb3f22c5380b4c1e312915611010b5ad0772097fd31805dcc1e23029ec0b554d8a786f35c52acefb30b97a95221ab06c88467326a6cc8f3889e050e3d8154299c0e0ac4e6a67af31c81198167c7408b207f0cf782b27ed7a91273193016cb167a61ac447363122f538e62a6a186a9ac11f5222b07e3c64a1ebd57066aa92d12fc21fc85e36dd89c3cfb93525bd5d1b714e79420c7f502323aba5d9c57809ea"}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x419}}, {0x8, &(0x7f0000000cc0)=@string={0x8, 0x3, "2a99e2aabdb2"}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x409}}, {0x5, &(0x7f0000000d40)=@string={0x5, 0x3, '/_6'}}, {0xd6, &(0x7f0000000d80)=@string={0xd6, 0x3, "6f1e9c393da114214925e3f4bdac4ff9f11d05c1e4a73fa52ffaba126aebcb15c57a2af3490d29890e9316a3e21a110d7b35a6c368d130c0d30edcb191ca513f0ad57dd91ad2bdaf81ffb2e307f8e1eb5353547f59beede0a25eef44be1ee890e1e893c7f8db98d442c19cd6307ee85d66735ccf816786b8a9a63a8a9984ff53ac8a43f864ad9e46ccb418838fb1f71353f5ee175430172ecbbd4958049c027cc3ac55e49d7c2055b7e2a4f469dd3381d6410b693ec39c697104f55eed7fb364b5e45c6e267e02e3522e19faacfb3550eda7f74d"}}]}) (async)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000f40), 0x2, 0x0) (async)
ioctl$I2C_PEC(r2, 0x708, 0x1) (async)
ioctl$BLKFINISHZONE(r5, 0x40101288, &(0x7f0000000f80)={0x2, 0x9})
ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000fc0)) (async)
ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000001000)={'ni_labpc\x00', [0x8, 0xfffffc01, 0x22, 0x5, 0x7, 0x703a, 0x2, 0x867, 0x1d8, 0x7, 0x5, 0x5885, 0x8, 0xd, 0x4, 0xffffffbb, 0x4, 0x0, 0x2, 0x83, 0x1ff, 0x200, 0x58, 0x80000000, 0x9, 0x9, 0x2, 0x0, 0x1, 0x2, 0x5]}) (async, rerun: 32)
r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) (rerun: 32)
ioctl$VT_GETMODE(r6, 0x5601, &(0x7f00000010c0)) (async, rerun: 32)
mkdir(&(0x7f0000001100)='./file0\x00', 0x60) (rerun: 32)
syz_open_dev$MSR(&(0x7f0000001140), 0x4, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000001180)={{0x1, 0x1, 0x18, <r7=>r1, {0x1}}, './file0\x00'})
ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f00000011c0)={0x3, 0x0, 0x3, 0xfff, 0xc9}) (async)
setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000001200)={0x6, {{0x2, 0x4e23, @remote}}, 0x1, 0x4, [{{0x2, 0x4e24, @local}}, {{0x2, 0x4e22, @empty}}, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e23, @broadcast}}]}, 0x290) (async)
recvmmsg(r7, &(0x7f0000002140)=[{{&(0x7f00000014c0)=@isdn, 0x80, &(0x7f0000001980)=[{&(0x7f0000001540)=""/93, 0x5d}, {&(0x7f00000015c0)=""/116, 0x74}, {&(0x7f0000001640)=""/202, 0xca}, {&(0x7f0000001740)=""/46, 0x2e}, {&(0x7f0000001780)=""/208, 0xd0}, {&(0x7f0000001880)=""/133, 0x85}, {&(0x7f0000001940)=""/48, 0x30}], 0x7, &(0x7f0000001a00)=""/94, 0x5e}, 0x1000}, {{&(0x7f0000001a80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000002080)=[{&(0x7f0000001b00)=""/187, 0xbb}, {&(0x7f0000001bc0)=""/186, 0xba}, {&(0x7f0000001c80)=""/160, 0xa0}, {&(0x7f0000001d40)=""/203, 0xcb}, {&(0x7f0000001e40)=""/232, 0xe8}, {&(0x7f0000001f40)=""/32, 0x20}, {&(0x7f0000001f80)=""/72, 0x48}, {&(0x7f0000002000)=""/106, 0x6a}], 0x8, &(0x7f0000002100)=""/13, 0xd}, 0xfffffff5}], 0x2, 0x10040, &(0x7f00000021c0)) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000002200), r8) (async, rerun: 32)
getsockname$l2tp6(r5, &(0x7f0000002240)={0xa, 0x0, 0x0, @dev}, &(0x7f0000002280)=0x20) (async, rerun: 32)
sendmsg$nl_route_sched(r0, &(0x7f0000002ac0)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002300)=@newtaction={0x778, 0x30, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [{0x764, 0x1, [@m_ct={0xac, 0xc, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast1}, @TCA_CT_ACTION={0x6, 0x3, 0x16}, @TCA_CT_LABELS={0x14, 0x7, "9665ddbcb4a181c0e9166139dcfe0306"}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @empty}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}]}, {0x3d, 0x6, "3350317e98b63b6aabfe18ccd74b2494a69c657c1483f8225551dbecb8be9a451df144a70bb84da814bc5edb457582946395b7f36b40ee4728"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_skbmod={0x118, 0xb, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xa36}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x8, 0x40, 0x4}, 0x8}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="ed80a7d1e3c8"}, @TCA_SKBMOD_DMAC={0xa}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7ff}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}, @TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, {0x75, 0x6, "c817fc7f560808d38735f8dbbfeba689df9303eaacfd7abf25e716387432210d1309fdedbabbff8ce6c12d5e0de2b3e332be790989f31da57c4beb6f2a60a8f3122eca59a4658b5b93dab7a42e1e1d50e0fd52fe10b04434ab618d973ee5eafc7f1dc0eeaf5f5258e91acb88b4fff82f06"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_gact={0x94, 0x8, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1075, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x11, 0x5d3e, 0x2, 0x6}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1a0, 0x80000001, 0x10000000, 0x8, 0x7}}]}, {0x2c, 0x6, "32bdb99bda1fbd415dbf1251621664d1e0a441b56c2476017b668a52caaa7df26d9b9d7954b18b6c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0x118, 0x9, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x8}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x9, 0x2, 0x9, 0x7}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xa, 0x4, 0x10000000, 0x8, 0x2}}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0xd, 0x7f, 0x1, 0xe16}, {0x9, 0x8, 0x8, 0x80}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xc, 0x101, 0x10000000, 0xfff, 0x7}}, @TCA_ACT_BPF_NAME={0x15, 0x6, './file0/../file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x78, 0x6, "221620ec39ed65f257b9425762f032ccdc4147301f2556441c7fef33c5572c69e63124ae73ad689e345518584a49a3ba375a6f19f62ec5af761d57b3d3afc16ef5bc1029b88da4e61a3347ee193daa81d9a7e60c3e76f0c7c7a898c72070181b38f533d34ca04d63bfd85e23fe82794680e358c7"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0x144, 0x7, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x1}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x80000001}, @TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x67, 0x4, 0x0, 0x81}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x7, 0x7, 0x6, 0x240000}}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x80}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x2f75, 0x10000000, 0x6, 0x6}}]}, {0x95, 0x6, "520747da63874dfa1905a12bf9f37584c51ea2ad385af2160948283125711c5aa952eb4a5d82f453053076fcbcd23cbe4add1f1a317c33cc0fc89cd6a26e02a0b1c5ba3beadc1489ea90e52afa59366ad5730a0633f34bc9ed1fe3fb0e182a26386364aa6cb8ce5e66361b5273fe5344d5f7aeaae5a213154a3e651b0dc0b07c916c3a1a9d362f3e16223014be52010344"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0x198, 0xe6, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x7, 0x20000000, 0xa, 0x6}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x3, 0x1, 0x3, 0xfd9}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0xe5, 0xffffffffffffffff, 0x8, 0xfff}, 0x400}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7ff, 0x1, 0x5, 0x2, 0x6}, 0x40}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x3, 0x2, 0x0, 0xb}, 0xfffb}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x695e, 0x6f7, 0x1, 0x1000, 0x9}, 0x100}}]}, {0xbf, 0x6, "57815303f483c831b99dda7595533d999c7795a1abc95103500c5f1decb77515570af8800359b77c62db87ba6c79ffd98431c59713f38de9b0a7ed4ae340b487a6a15a767581dcaeefc10d02c1f6b94b8e53f69d477bec9de70c5117bcd7d6d49b53abc785036bbe99c34c879ef043fd16466e2c3683010990a8e0b85f71886d84bbd577a063084100be636658b663768e258ecc06c2bb06ba8184a2d55a36cde6935e53ea37dbd6a3f496ae474ca1c5ce70e0fdde98cfb6bf3f17"}, {0xc}, {0xc, 0x8, {0x6, 0x2}}}}, @m_sample={0x114, 0x1a, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x80e}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1ff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x3ff}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x5, 0x0, 0x8}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x6}]}, {0x8f, 0x6, "6648d4e09bc9a7df2631f80795b30193dcb61e199671d5032905729f26d29d441ce0bf3f281c8f0016f0ec50801195de547f11a1df9d2c127b0177755b9d4a6978883d762be20ee1947ecfd3d296b8841d3cf1e6b0866f558d96f81d184f0fb3712e406192058fad6230622ebc91ea2b56580964f3e62292b01f2f6203faa783b7eefce2f55b8179bd77ab"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x778}, 0x1, 0x0, 0x0, 0x8810}, 0x20000040)

20.740993366s ago: executing program 4 (id=3144):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0)
mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil)
mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f0000000100)={0x0, 0xf00, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x1401, 0x7fc32be5eb343aa7}, 0x5c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

19.660361807s ago: executing program 4 (id=3146):
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101040)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async)
bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="9e", 0x1, 0x40, &(0x7f0000000240)={0xa, 0x4e21, 0x20000, @loopback, 0xe}, 0x1c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x1}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x1}, 0x8)
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="4400000010000305000006000000000000000000", @ANYRES32, @ANYBLOB="0000000000002000240012800b0001006d616373656300001400028005000a00010000000500090001"], 0x44}}, 0x0)
syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) (async)
syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0)
syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x10100, 0x3, 0x38a}, &(0x7f0000002000), &(0x7f0000000440)) (async)
r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x10100, 0x3, 0x38a}, &(0x7f0000002000)=<r2=>0x0, &(0x7f0000000440)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x22}) (async)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x22})
io_uring_enter(r1, 0x48e9, 0xf2bb, 0x2, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
creat(0x0, 0x0) (async)
r5 = creat(0x0, 0x0)
r6 = semget$private(0x0, 0x0, 0x587)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x8008007)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x1800000, &(0x7f0000000500)=ANY=[@ANYRES64=r4, @ANYRESHEX=r8, @ANYBLOB, @ANYRESOCT=r4, @ANYBLOB, @ANYRES32=r6]) (async)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x1800000, &(0x7f0000000500)=ANY=[@ANYRES64=r4, @ANYRESHEX=r8, @ANYBLOB, @ANYRESOCT=r4, @ANYBLOB, @ANYRES32=r6])
syz_fuse_handle_req(r8, &(0x7f000000c280)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c71329afd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d209694659470398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d325c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda451852e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0xfffffffffffffff5, 0x0, {0x3, 0x0, 0x0, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x9, 0x0, 0xc000, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r8, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50)
chown(&(0x7f0000000100)='./file0\x00', 0xee00, 0x0)
mount(0x0, 0x0, &(0x7f00000000c0)='nfsd\x00', 0x10, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000080)=0x10)

18.512852351s ago: executing program 4 (id=3148):
setresgid(0xee00, 0xee01, 0x0) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f000076c000/0x3000)=nil, 0x3000, 0xb, 0x10, 0xffffffffffffffff, 0x0) (async)
r0 = syz_pidfd_open(0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2, 0x31, r0, 0x0) (async)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async)
r2 = fsmount(r1, 0x0, 0x0)
fchdir(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0)
r4 = fanotify_init(0xf00, 0x1000)
fanotify_mark(r4, 0x105, 0x5000003a, r3, 0x0)
futex(&(0x7f00000002c0), 0x8c, 0x1, 0x0, &(0x7f00000000c0), 0x0)

18.431794472s ago: executing program 4 (id=3150):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0xfffffffffffffff5]}, 0x8, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
pselect6(0x40, &(0x7f0000000040)={0x39ecef3f, 0x9, 0x60, 0x8, 0x5, 0xf5c, 0x8, 0xd}, &(0x7f0000000080)={0x1, 0x9, 0xfffffffffffff416, 0x9, 0x2, 0x9, 0x8145}, &(0x7f00000000c0)={0x18000000000000, 0x8, 0x3, 0x0, 0x4, 0x4, 0x2, 0x1ff}, &(0x7f0000000100), &(0x7f0000000200)={&(0x7f0000000140)={[0x3]}, 0x8})
ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f0000006380)={0x2020}, 0x2020)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=<r4=>0x0)
timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
io_uring_setup(0xdac, &(0x7f0000000180))
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r5, &(0x7f0000000140)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xa)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
pipe(0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000800)='/proc/diskstats\x00', 0x0, 0x0)
r8 = syz_io_uring_setup(0x49c, &(0x7f00000003c0)={0x0, 0x79ac, 0x400, 0x7ffc, 0x70, 0x0, r7}, &(0x7f0000000340)=<r9=>0x0, &(0x7f0000000900)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0x7bffffff, 0x0, 0x4)
syz_io_uring_submit(r9, r10, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r7, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
io_uring_enter(r8, 0xfd0, 0x4c1, 0x43, 0x0, 0x0)

18.005076918s ago: executing program 4 (id=3151):
unshare(0x6a040000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r0, &(0x7f0000000640)="cc530c71", 0x0}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x4)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000780)={'filter\x00', 0x0, [0x7, 0x5, 0xffff, 0x3a2a157c, 0x1]}, &(0x7f00000000c0)=0x54)

7.886641519s ago: executing program 1 (id=3165):
openat$comedi(0xffffffffffffff9c, 0x0, 0x8080, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
timer_create(0x4, &(0x7f0000000280)={0x0, 0x2b, 0x4, @thr={&(0x7f0000000180)="69e265e6169138919b88e7e96e8f4af5cf691ef1bb140c9af1bccd965e68", &(0x7f0000000240)="9e546756"}}, 0x0)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x1f45)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3)
sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000040000e41300050003030000000a0000005dc00000000001080002000500000014"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)

6.866345715s ago: executing program 1 (id=3167):
keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x1})
r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1, <r2=>0xffffffffffffffff}, 0x4)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl1\x00', <r3=>0x0, 0x2f, 0x80, 0x0, 0x1, 0x1, @mcast1, @private2, 0x1, 0x20, 0x8, 0x6}})
r4 = bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0), 0x8)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x7, 0x3ff, 0xe11c, 0x200, 0x70022, r2, 0x9, '\x00', r3, 0xffffffffffffffff, 0x5, 0x0, 0x2, 0x0, @void, @value, @value=r4}, 0x50)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000300)={<r5=>0x0}, &(0x7f0000000340)=0xc)
sched_setaffinity(r5, 0x8, &(0x7f0000000380)=0x7)
r6 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000440)='./binderfs/binder0\x00')
keyctl$search(0xa, r0, &(0x7f0000000480)='cifs.idmap\x00', &(0x7f00000004c0)={'syz', 0x2}, r6)
r7 = syz_open_procfs(r5, &(0x7f0000000500)='ns\x00')
bind$inet6(r7, &(0x7f00000005c0)={0xa, 0x4e22, 0xc9b0, @private1, 0x6}, 0x1c)
r8 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$KEYCTL_MOVE(0x1e, r0, r1, r8, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000680)={0x73622a85, 0x1000})
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0x40a85323, &(0x7f00000006c0)={{0x8}, 'port0\x00', 0x40, 0x1820, 0xffff, 0xc, 0x7, 0x0, 0xd, 0x0, 0x2, 0x56})
request_key(&(0x7f0000000780)='cifs.idmap\x00', &(0x7f00000007c0)={'syz', 0x3}, &(0x7f0000000800)='))\x00', r8)
keyctl$instantiate_iov(0x14, r1, &(0x7f0000000c00)=[{&(0x7f0000000840)="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", 0xfd}, {&(0x7f0000000940)="88b78b251a5a27ca751d94183000ef77114182ebc1056024a8a2c3838b0db4140874757a51f411cdbb306d91999ad43d18f67cb087ea93e13a861a94faaadace917f6d6efa0a028750f32afa83ab6f841d194afc53da7d9ea0c2584fa1a8ba6f625426756c83ceeced2e20617c8e125004889395b22539795c50338c911731e55c8e40125543135aaf41cc97d305e47dc7aa331c30f0447645fe7733353c9c7d88480619cb5ce5089b6cfa5ead155762fb6fdd5af2be86fa5a60fae007cb0c93452355762c85e3e4ee", 0xc9}, {&(0x7f0000000a40)="b67d97", 0x3}, {&(0x7f0000000a80)}, {&(0x7f0000000ac0)="4ed208b0ceb11c9e6eccb1dadfe31b2c5ea403ded97315eda9892f5297f3abc0b6e452a91aa8496cea5eb02c6cf882ca9602b5dd9daa95314da63a1ad582583aebcdf9c220e20eb1453b4cbe4e5d09f6e33f1108ee0175", 0x57}, {&(0x7f0000000b40)="68afcc08dedcd9219b436a5cc07bd0ef7f88657ff2860084b7cd240e1c5df6c9c08a26ab4450c2f36aa8ac0b0c87e1253a9ad7e8505dab9d25630fa15d358a06d02c1430fb10b63dc94783811be13b34dd699ee88dc6638abd213a476e1b500a793fe464b58c236d2c6eb7b756862fca03aeec111df209ec37b27da51f266672dbc4ae0219d705f2a7e98a7d2c0a06748c22fe9d4987125ee67485c0842c0ded49a5a75988f06f2d681db06c710de37946de2ab80b5dfa038a7be9", 0xbb}], 0x6, r8)
ioctl$USBDEVFS_CLAIMINTERFACE(r7, 0x8004550f, &(0x7f0000000c80)=0x6)
timer_create(0x4, 0x0, &(0x7f0000000d80)=<r9=>0x0)
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x17)
keyctl$join(0x1, &(0x7f0000000dc0)={'syz', 0x2})
recvfrom$packet(r7, &(0x7f0000000e00)=""/96, 0x60, 0x1, 0x0, 0x0)
timer_gettime(r9, &(0x7f0000000e80))
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000fc0)={@cgroup=r7, 0xe, 0x1, 0x9, &(0x7f0000000ec0), 0x0, 0x0, &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0], <r10=>0x0}, 0x40)
r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001000)={@cgroup=r11, r7, 0x24, 0x30, 0x0, @void, @void, @void, @value, r10}, 0x20)

6.575096014s ago: executing program 1 (id=3168):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xf)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{}, 0x0, @in6=@empty}}, &(0x7f0000000040)=0xe8)
quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, r2, &(0x7f00000000c0)={0x8, 0x4, 0x707, 0x7, 0x4, 0x0, 0x8, 0x3, 0x800})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000)

4.53690447s ago: executing program 1 (id=3170):
openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0)
pipe2(&(0x7f0000000300), 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = gettid()
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8)
r4 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0)
sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
readv(r4, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/214, 0xd6}], 0x1)
sched_setscheduler(r2, 0x3, &(0x7f0000000040)=0xfffffffd)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000fc0), r5)
sendmsg$IEEE802154_SET_MACPARAMS(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040)
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x3000002, 0x6031, 0xffffffffffffffff, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38)
syz_open_dev$cec(0x0, 0x0, 0x0)
socket(0x1d, 0x2, 0x6)

4.493398519s ago: executing program 2 (id=3171):
unshare(0x62040200) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async)
r0 = socket(0x2, 0x4, 0x7f)
sendmmsg$inet(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000280)="9a", 0x1}], 0x1}}], 0x1, 0x4000000)
syz_init_net_socket$ax25(0x3, 0x5, 0xcb) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
socket$inet(0x2, 0x3, 0x9) (async)
pipe(&(0x7f0000000440))
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00') (async)
r1 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r1], 0x0, 0x8, 0x28, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94)
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) (async)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={r3, 0x1f4}, 0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x50, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x2f, 0x6, "674751cd7582a435ac58b15876dd2a0d88ef129ee6a6e5d710a34b0fbb829a91f4ecaf2e5d4f2d63f424a0"}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_DELRULE={0xff57, 0x8, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

4.441248279s ago: executing program 0 (id=3172):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x5, r0}, 0x38) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x10)
r2 = syz_io_uring_setup(0x254c, &(0x7f0000000000)={0x0, 0x7c87, 0x800, 0x0, 0x1cb}, &(0x7f00000003c0), &(0x7f00000001c0))
io_uring_register$IORING_UNREGISTER_PBUF_RING(r2, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1)
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB="64000011", @ANYRES16=0x0, @ANYBLOB="000000000000000000003f0000000c009900000000000000000044005e8008000500000000000800030000000000080009000000000010000100000000000000000000000000080007000000000008000100010000000800070000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4004010}, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
socket$rds(0x15, 0x5, 0x0) (async)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) (async)
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) (async)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r6=>0x0], 0x1}) (async)
r7 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x100, 0x0, 0x335}, &(0x7f0000000080)=<r8=>0x0, &(0x7f00000001c0)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async)
syz_io_uring_submit(r8, r9, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r7, 0x47ba, 0x0, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f0000000300)={r6, <r10=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r10, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, "b4bc323ef77d1f000071849800000000dfff00"}})
bind$xdp(r3, 0x0, 0x0)
r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0)

4.228844329s ago: executing program 2 (id=3173):
fsopen(0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
timerfd_create(0x9, 0x0)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000540)='sys_enter\x00', r1}, 0x18)
r2 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
write$binfmt_script(r2, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'llr\xf0'}, {0x20, 'xx\xe8\x9b^\xfb^$\r\'uij\r\xd9\xef\xd2Et^Q\v\x9fOFL\x95`Z\xae\xc3a\xfe%\x94\x1a\xebt\xc6\x06\x8fD,\xf7\xae#\x80\x80\xdf\xa3\xcaO\xc6\x8a\x91\x90\xadR\aW\xe1\xf3n\xca\xa3\x8f\xd6F\x03\x0e\x9b\xe5yb\xfc\xa19wUs\x83\xf1{&\n\x1d\x8e\x82y\x1a.B\x0e\xea\x17\xc7\xe7H\xa9\xd4\x8e\xe7 gD\x89*\xb5c<d\x1f\\\x10$o\x93\x02\x9c@\x9ddt\x8c\x875\xf7@\x9aM\xa3j\xfa\x1f\xe5\x81\xc9u<\xf0?w8P>\xc5\x8a\xe6R\xe5YGq\xf5\xb6\x95\xbc\x112\x9bno\xc8\x06\xb6\b\xcc\x03{Sn\x94G\x01\xb4\xffJQ8t\x99vY\xaaf\xc7,\x9f\xbb\x15G\x1cr\x19\xef\xab\n\xa8\xbc\xbd\xa2E\x16\x1cm\xbd=\x98\x7fU\xcbg\x15%\x95\xb11\x017\x83*\x14\xcbt\xc2\xcb\x04\x1e~?\xb9j\x18\x96\x84EA\xeaB\a\x83\xba\xdco<\x00'/256}]}, 0x111)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x92)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f0000000280)='./file1/file0\x00')
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00')
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000540)=@ethtool_ts_info})
rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00')
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, 0xffffffffffffffff, &(0x7f0000000240)={0x40000002})
r5 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
syz_io_uring_setup(0x6344, &(0x7f0000000440)={0x0, 0x2802, 0x8, 0x0, 0xe1, 0x0, r3}, &(0x7f00000002c0), &(0x7f00000003c0))
sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="67d8901bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec", 0x21}], 0x1}, 0x0)

4.207120321s ago: executing program 0 (id=3174):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x56a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x57}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='rxrpc_retransmit\x00', r0, 0x0, 0x7}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000480)=0x1)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
r4 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8)
r5 = gettid()
futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000)=0xfffffffe, 0xa101fffc)
timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r5}, &(0x7f0000000080))
read$FUSE(r4, &(0x7f0000000a00)={0x2020}, 0x2020)
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}}, 0x0)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={<r7=>0xffffffffffffffff}, 0x2, 0x5}}, 0x20)
read$FUSE(0xffffffffffffffff, &(0x7f0000004040)={0x2020}, 0x2020)
write$RDMA_USER_CM_CMD_NOTIFY(r6, &(0x7f0000000100)={0xf, 0x8, 0xfa00, {r7, 0x6}}, 0x10)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00')
preadv(r9, &(0x7f0000000000)=[{&(0x7f0000000440)=""/192, 0xc0}], 0x1, 0xda, 0x3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r8}, 0x18)

3.065624505s ago: executing program 2 (id=3175):
r0 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x20a000, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000440)={r1, 0x0, {0x0, 0x0, 0x0, 0x9, 0x800000000000, 0x0, 0x0, 0x10, 0x1d, "2401010000000000000d0ec0c1b4e9b1c4369d03740250ceaac500b1b3d741dd17c1c50d38ef2a565ef1e85c58d36500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d20000000100", "24431a1e58a68e174f0000000000ef8a07580000000000002000", [0x5]}})
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x20000000000003, 0x8000000000000002, 0x0, 0x0, 0x10, 0xa, "c25f7e0d775e40aee623452107249fe0bdbfce2fe240da8dce81a69b0edc7a60ad337212006a3e508b8040c7bc6e583cc41170a13349e2cfcc4b64bd4fbf41ee", "a5526c3b6a46c15c42022ee6cc29fd6294ee5056c4e8602a8a28609c370633cd58cda9ddec304859946ea27fb0b97bb826884c3d749834ad1e6c00", "412d226bd7dc8ce5783126ae76e309616391f73ea9c19b4a27828e2d00195a1f", [0x2, 0x1ff]})
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYRESOCT], 0x6c}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)

2.724868535s ago: executing program 0 (id=3176):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000001a80), 0xffffffffffffffff)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0xffffffb3, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_io_uring_setup(0x10d, &(0x7f0000000440)={0x0, 0x25b9, 0x100, 0x0, 0x215}, &(0x7f0000000040)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x80, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x1, @private=0xa010100}}})
io_uring_enter(r5, 0x3516, 0x483, 0x0, 0x0, 0x0)
r8 = creat(&(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c00)={0x0, &(0x7f00000005c0)=""/185, 0x0, 0xb9, 0x8000000}, 0x28)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000140)={0x2, @sdr={0x59455247, 0x8}})

2.719467754s ago: executing program 32 (id=3151):
unshare(0x6a040000)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r0, &(0x7f0000000640)="cc530c71", 0x0}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x4)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000780)={'filter\x00', 0x0, [0x7, 0x5, 0xffff, 0x3a2a157c, 0x1]}, &(0x7f00000000c0)=0x54)

2.693977324s ago: executing program 2 (id=3178):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00')
write$cgroup_pid(r0, &(0x7f00000000c0)=0xffffffffffffffff, 0x3)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x15}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}})
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='rtc_irq_set_freq\x00', r5, 0x0, 0x2cad}, 0x18) (async)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$RTC_IRQP_SET(r6, 0x4008700c, 0x80000000000725)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01fe1acbc4a746000000000000000000ea396ddebcfe35bfa41fd8663163e31bc9812769b9fb211400020073797a5f74756e00000000"], 0x3c}}, 0x0) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
getsockopt$sock_buf(r2, 0x1, 0x3e, 0x0, &(0x7f0000000240)=0x2000) (async)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r1)
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000300)=ANY=[@ANYBLOB="388000007146f553e04fad6c4bd47153ad82d87b503f18b7dd7a9d0bc018ee8f9b07555fb9d8e3f123d005e5d5cccec95124bbfc1eca90b0a8c89429f12be1feee69cb4b7ee6ecda552c1c19c875a0135736cfcf671502cf68ee06d56daa2a46f51f1a6a8b8030fabc7f7e0c2b944154666c4601765bd431a09f1dae595a68b7d6770099d01cfaa05c3a5a1f7037d864f689fb421c8626326b4a9b84f0a3f3e6b5479e783070e2cd5ec91eef85a3e5c35d2428f87056a04ae70c3bd75955155b234db933880f49a5c5bb0aea3e9b05ed", @ANYRES16=r8, @ANYBLOB="01002dbd7000ffdbdf25150000000c000600010000000100000018002b8008000100000000000c0003800600010000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)

2.358871057s ago: executing program 0 (id=3179):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f1"], 0x0}, 0x94)
dup(0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
r1 = io_uring_setup(0x1abf, &(0x7f0000000000)={0x0, 0xa4ec, 0x400, 0x1, 0x102a8})
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x13, &(0x7f0000000080)=[0xfff, 0x6], 0x2)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0})
timerfd_create(0x7, 0x81000)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001ec0)={'ip6gretap0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2d, 0xfffffffc, {0x60, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x8, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x3000c88c)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0f0000000400000004000000ff07000000000000c63bc11eeba14a4e6e93df6907a174e50eee5511f1e98c20f579197afb6171ba55997f6e54e3f4dd5c13800b0700000000000000ddc1fdddf98419192304dec6844130ae87280cf9161678a41acdaaa8d5f33881f62b35b1e824d740b9af78f5eb16", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000d80)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000080)={0x2, 0x2, 0x3, "258c0100ef0709000000000000df8d8f564700dc9250f700", 0x32315559})
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}})
r6 = socket(0x10, 0x803, 0x40000004)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}})
socket$nl_netfilter(0x10, 0x3, 0xc)

1.572666449s ago: executing program 2 (id=3180):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r0 = getpid()
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)={0x48, r2, 0x7ff525414d65d617, 0x70bd2f, 0xfffffffc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x2c, 0x11d, 0x0, 0x1, [{0xfffffd7c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4b}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x89}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4044000}, 0x200408dc)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
rt_sigsuspend(&(0x7f0000000400)={[0x7]}, 0x8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$kcm(0x29, 0x7, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x200, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4ac2d78a}}, 0x0, 0x0, 0x3f, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0xfffffffd}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
ioctl$int_in(r6, 0x5421, 0x0)
writev(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0x4000}], 0x1)

1.571999657s ago: executing program 1 (id=3181):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000100001040300"/20, @ANYRES32=0x0, @ANYBLOB="23037b0000800000280012800b000100676585e544a000001800028014000700fe8000000000000000000000000000271400350067656e65766531"], 0x5c}}, 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xae, 0x3c, 0x50, 0x8, 0x61d, 0xc140, 0x311e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x1, 0x130, 0x8, [{{0x9, 0x4, 0x15, 0x6, 0x0, 0x7d, 0x18, 0xed, 0x64}}]}}]}}, 0x0)

1.359561542s ago: executing program 0 (id=3182):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_usb_connect(0x4, 0x24, &(0x7f0000000080)=ANY=[], 0x0)

556.923506ms ago: executing program 0 (id=3183):
r0 = socket(0x10, 0x3, 0xc)
write(r0, &(0x7f0000000040)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES64], 0x50)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
poll(&(0x7f0000000280)=[{r2, 0x301}], 0x1, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[], 0x10b8}, 0x200008c0)
r5 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff00)
close(r4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r3, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000700)="b9ff03076003008cb89e08f086ddd599887f97855c74cb51504184c6ce4d4f4389ed0d32fe1dc0ee47f2ee84c01e1b6effbf3ab77d9e", 0x0, 0xfe7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x264, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x9, 0x20, 0x1, {0x22, 0xbb7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x72, 0x0, 0x2d}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x6, 0xc, 0x3}}]}}}]}}]}}, 0x0)

35.583405ms ago: executing program 1 (id=3184):
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0x200000b, 0xff}, @loopback, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x11, 0x8}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4040890)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000019008111e0020f060d8107040a60000000000000001455a12a00090008000699e3ffffff14000500fe80817806000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b61602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0)

0s ago: executing program 2 (id=3185):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001200a70000000000000000001c0000000c00350000000000000000000c0029"], 0x2c}], 0x1}, 0x0) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r3=>0x0})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f00000000c0), &(0x7f0000000080)=@tcp, 0x2}, 0x1d) (async)
r5 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff})
ioctl$NBD_SET_SIZE_BLOCKS(r5, 0xab07, 0x2)
ioctl$NBD_SET_SOCK(r5, 0xab00, r6) (async)
ioctl$NBD_DO_IT(r5, 0xab03)
ioctl$NBD_CLEAR_SOCK(r5, 0xab04) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'netdevsim0\x00', <r7=>0x0}) (async)
r8 = socket$netlink(0x10, 0x3, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) (async, rerun: 64)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64)
r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x14) (async)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x100, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048840}, 0x0)

kernel console output (not intermixed with test programs):

ter parsing attributes in process `syz.0.2581'.
[  877.718063][T15960] orangefs_devreq_open: device cannot be opened in blocking mode
[  877.761369][T15952] ubi8: attached mtd0 (name "mtdram test device", size 0 MiB)
[  877.792107][T15952] ubi8: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  877.809452][T15952] ubi8: min./max. I/O unit sizes: 1/64, sub-page size 1
[  877.817004][T15952] ubi8: VID header offset: 64 (aligned 64), data offset: 128
[  877.828336][T15952] ubi8: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  877.835843][T15952] ubi8: user volume: 0, internal volumes: 1, max. volumes count: 23
[  877.851846][T15952] ubi8: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4189636239
[  877.878765][T15952] ubi8: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  877.899541][T15966] ubi8: background thread "ubi_bgt8d" started, PID 15966
[  879.179511][T15984] netlink: 'syz.0.2587': attribute type 2 has an invalid length.
[  879.243642][   T43] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  879.433656][   T43] usb 4-1: Using ep0 maxpacket: 8
[  879.439759][T15986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2588'.
[  879.475884][   T43] usb 4-1: config 0 has an invalid interface number: 31 but max is 0
[  879.487005][   T43] usb 4-1: config 0 has no interface number 0
[  879.497457][   T43] usb 4-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68
[  879.515002][   T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  879.523280][   T43] usb 4-1: Product: syz
[  879.529808][   T43] usb 4-1: Manufacturer: syz
[  879.536778][   T43] usb 4-1: SerialNumber: syz
[  879.568912][   T43] usb 4-1: config 0 descriptor??
[  879.588086][   T43] redrat3 4-1:0.31: Couldn't find all endpoints
[  880.252359][T10638] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  881.040581][T10638] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  881.074874][T10638] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  881.135615][T10638] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  881.159221][T16000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2593'.
[  881.179014][T10638] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  881.215207][T15990] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  881.237101][    T9] usb 3-1: new full-speed USB device number 112 using dummy_hcd
[  881.294038][T10638] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  881.665449][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  881.702580][    T9] usb 3-1: not running at top speed; connect to a high speed hub
[  881.756443][    T9] usb 3-1: config 3 has an invalid interface number: 29 but max is 0
[  881.786958][    T9] usb 3-1: config 3 has no interface number 0
[  881.818325][    T9] usb 3-1: config 3 interface 29 has no altsetting 0
[  881.825721][T10638] usb 5-1: USB disconnect, device number 25
[  881.839234][T14532] udevd[14532]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: Read-only file system
[  882.110943][    T9] usb 3-1: New USB device found, idVendor=2639, idProduct=0017, bcdDevice=fe.6f
[  882.129973][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  882.165525][    T9] usb 3-1: Product: syz
[  882.182308][    T9] usb 3-1: Manufacturer: syz
[  882.207690][    T9] usb 3-1: SerialNumber: syz
[  882.702494][    T9] usb 3-1: USB disconnect, device number 112
[  882.808906][   T43] usb 4-1: USB disconnect, device number 74
[  883.064672][T16023] usb usb8: usbfs: process 16023 (syz.3.2598) did not claim interface 63 before use
[  884.145884][T16036] dvmrp0: entered allmulticast mode
[  886.597814][T16056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2609'.
[  886.616224][T16056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2609'.
[  886.670619][T16056] netlink: 'syz.0.2609': attribute type 12 has an invalid length.
[  886.695772][T16057] lo speed is unknown, defaulting to 1000
[  886.701642][T16056] netlink: 'syz.0.2609': attribute type 11 has an invalid length.
[  886.725847][T16057] lo speed is unknown, defaulting to 1000
[  886.749983][T16057] lo speed is unknown, defaulting to 1000
[  887.052646][T16061] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2611'.
[  887.674211][ T5956] usb 4-1: new low-speed USB device number 75 using dummy_hcd
[  887.968657][ T5956] usb 4-1: unable to get BOS descriptor or descriptor too short
[  888.039322][ T5956] usb 4-1: config 7 has an invalid interface number: 83 but max is 0
[  888.061335][ T5956] usb 4-1: config 7 has no interface number 0
[  888.103779][ T5956] usb 4-1: config 7 interface 83 altsetting 254 endpoint 0x7 has invalid maxpacket 16, setting to 0
[  888.133360][ T5956] usb 4-1: No eUSB2 isoc ep 7 companion for config 7 interface 83 altsetting 254
[  888.158591][ T5956] usb 4-1: config 7 interface 83 has no altsetting 0
[  888.176670][ T5956] usb 4-1: string descriptor 0 read error: -22
[  888.311807][ T5956] usb 4-1: New USB device found, idVendor=19d2, idProduct=0149, bcdDevice=44.f5
[  888.321036][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  888.334626][T10638] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[  888.996041][T16096] evm: overlay not supported
[  889.089088][   T30] audit: type=1326 audit(1755907418.908:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16073 comm="syz.3.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbe98ebe9 code=0x7ffc0000
[  889.131019][T10638] usb 2-1: Using ep0 maxpacket: 16
[  889.152258][T10638] usb 2-1: config 0 has an invalid interface number: 104 but max is 1
[  889.163655][   T30] audit: type=1326 audit(1755907418.938:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16073 comm="syz.3.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7f5cbe98ebe9 code=0x7ffc0000
[  889.185212][    C1] vkms_vblank_simulate: vblank timer overrun
[  889.196472][T10638] usb 2-1: config 0 has an invalid interface number: 104 but max is 1
[  889.231820][   T30] audit: type=1326 audit(1755907418.938:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16073 comm="syz.3.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbe98ebe9 code=0x7ffc0000
[  889.233148][T10638] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  889.253412][    C1] vkms_vblank_simulate: vblank timer overrun
[  889.253850][   T30] audit: type=1326 audit(1755907418.938:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16073 comm="syz.3.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cbe98ebe9 code=0x7ffc0000
[  889.282941][T10638] usb 2-1: config 0 has no interface number 0
[  889.309767][T10638] usb 2-1: config 0 interface 104 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  889.316123][   T30] audit: type=1326 audit(1755907418.938:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16073 comm="syz.3.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbe98ebe9 code=0x7ffc0000
[  889.340800][T10638] usb 2-1: config 0 interface 104 has no altsetting 1
[  889.341861][   T30] audit: type=1326 audit(1755907418.938:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16073 comm="syz.3.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5cbe98ebe9 code=0x7ffc0000
[  889.369374][    C1] vkms_vblank_simulate: vblank timer overrun
[  889.432946][   T30] audit: type=1326 audit(1755907419.248:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16073 comm="syz.3.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbe98ebe9 code=0x7ffc0000
[  889.454594][    C1] vkms_vblank_simulate: vblank timer overrun
[  889.455210][    T9] usb 4-1: USB disconnect, device number 75
[  889.487137][T10638] usb 2-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00
[  889.496750][T10638] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  889.517047][T10638] usb 2-1: Product: syz
[  889.521255][T10638] usb 2-1: Manufacturer: syz
[  889.548325][   T30] audit: type=1326 audit(1755907419.248:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16073 comm="syz.3.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cbe98ebe9 code=0x7ffc0000
[  889.550512][T10638] usb 2-1: SerialNumber: syz
[  889.569940][    C1] vkms_vblank_simulate: vblank timer overrun
[  889.571050][ T7111] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  889.590986][T16109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  889.608736][T16109] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  889.631666][T10638] usb 2-1: config 0 descriptor??
[  889.883646][ T7111] usb 5-1: Using ep0 maxpacket: 8
[  889.904161][ T7111] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2
[  889.913308][ T7111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  889.930219][T16119] overlayfs: failed to clone upperpath
[  889.937083][ T7111] usb 5-1: Product: syz
[  889.941313][ T7111] usb 5-1: Manufacturer: syz
[  889.995890][ T7111] usb 5-1: SerialNumber: syz
[  890.173382][ T7111] usb 5-1: config 0 descriptor??
[  890.249010][T10638] asix 2-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  890.261170][T10638] asix 2-1:0.104: probe with driver asix failed with error -71
[  890.749705][T16123] bridge0: port 3(gretap0) entered blocking state
[  890.756810][T16123] bridge0: port 3(gretap0) entered disabled state
[  890.764510][T16123] gretap0: entered allmulticast mode
[  890.782048][T16123] gretap0: entered promiscuous mode
[  890.790531][T16123] bridge0: port 3(gretap0) entered blocking state
[  890.797114][T16123] bridge0: port 3(gretap0) entered forwarding state
[  891.100092][ T7111] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  891.243218][T10638] usb 2-1: USB disconnect, device number 93
[  891.608607][T16130] lo speed is unknown, defaulting to 1000
[  891.700639][T16130] lo speed is unknown, defaulting to 1000
[  891.722601][T16130] lo speed is unknown, defaulting to 1000
[  892.175195][T16142] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2634'.
[  892.244803][   T43] usb 3-1: new high-speed USB device number 114 using dummy_hcd
[  892.419887][T16149] binder: Unknown parameter 'uid>18446744073709551615'
[  892.448445][   T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  892.473064][   T43] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  892.514773][   T43] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00
[  892.526086][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  892.534788][   T43] usb 3-1: Product: syz
[  892.546329][ T7111] gspca_sunplus: reg_w_riv err -110
[  892.555997][   T43] usb 3-1: Manufacturer: syz
[  892.560760][   T43] usb 3-1: SerialNumber: syz
[  892.583381][ T7111] sunplus 5-1:0.0: probe with driver sunplus failed with error -110
[  892.601461][   T43] usb 3-1: config 0 descriptor??
[  892.952680][T16155] Invalid ELF header magic: != ELF
[  893.246462][ T7111] usb 3-1: USB disconnect, device number 114
[  893.614598][T10634] usb 5-1: USB disconnect, device number 26
[  893.783771][ T7111] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[  893.943894][ T7111] usb 2-1: device descriptor read/64, error -71
[  894.026924][T16173] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2643'.
[  894.167682][T16177] x_tables: duplicate underflow at hook 2
[  894.193325][T16179] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2646'.
[  894.204152][ T7111] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[  894.221184][T16179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2646'.
[  894.237060][T16180] xt_bpf: check failed: parse error
[  894.273721][T10634] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  894.349905][ T7111] usb 2-1: device descriptor read/64, error -71
[  894.458779][T10634] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  894.464123][ T7111] usb usb2-port1: attempt power cycle
[  894.473142][T10634] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  894.490021][T10634] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00
[  894.499448][T10634] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  894.550925][T10634] usb 5-1: config 0 descriptor??
[  894.650085][T16190] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2649'.
[  894.843886][ T7111] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[  894.882890][ T7111] usb 2-1: device descriptor read/8, error -71
[  895.031094][T16175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  895.079781][T16175] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  895.281772][T10634] kye 0003:0458:0138.001E: hidraw0: USB HID v0.00 Device [HID 0458:0138] on usb-dummy_hcd.4-1/input0
[  895.343669][ T7111] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[  895.347078][T16175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  895.404496][ T7111] usb 2-1: device descriptor read/8, error -71
[  895.406864][T16175] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  895.451813][ T5956] usb 5-1: USB disconnect, device number 27
[  895.508046][T16205] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  895.537197][ T7111] usb usb2-port1: unable to enumerate USB device
[  895.567631][T16205] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  895.593694][T16202] fido_id[16202]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  895.622693][T16205] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  895.633907][T16205] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock
[  895.768761][T16214] lo speed is unknown, defaulting to 1000
[  895.782690][T16214] lo speed is unknown, defaulting to 1000
[  895.817812][T16214] lo speed is unknown, defaulting to 1000
[  896.216199][T16217] tipc: Started in network mode
[  896.225896][T16217] tipc: Node identity dea58705f037, cluster identity 4711
[  896.243420][T16217] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  896.277105][T16219] syzkaller0: entered promiscuous mode
[  896.319301][T16219] syzkaller0: entered allmulticast mode
[  897.126550][T16217] netlink: 'syz.4.2656': attribute type 1 has an invalid length.
[  897.134426][T16217] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2656'.
[  897.247877][T16224] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2658'.
[  897.353677][ T5956] tipc: Node number set to 781354757
[  897.454870][   T30] audit: type=1326 audit(1755907427.258:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16225 comm="syz.1.2657" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb564b8ebe9 code=0x0
[  897.529023][   T43] usb 3-1: new high-speed USB device number 115 using dummy_hcd
[  897.722946][ T7111] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  898.036466][T10634] usb 4-1: new full-speed USB device number 76 using dummy_hcd
[  898.246102][T10634] usb 4-1: device descriptor read/64, error -71
[  898.303972][ T7111] usb 5-1: Using ep0 maxpacket: 8
[  898.311384][ T7111] usb 5-1: config index 0 descriptor too short (expected 30, got 18)
[  898.312088][T16238] netlink: 'syz.0.2661': attribute type 11 has an invalid length.
[  898.320107][   T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  898.320132][   T43] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  898.324862][ T7111] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  898.357909][   T43] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00
[  898.368755][   T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  898.377153][   T43] usb 3-1: Product: syz
[  898.381427][   T43] usb 3-1: Manufacturer: syz
[  898.386274][ T7111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  898.394391][   T43] usb 3-1: SerialNumber: syz
[  898.400746][ T7111] usb 5-1: Product: syz
[  898.405875][   T43] usb 3-1: config 0 descriptor??
[  898.410978][ T7111] usb 5-1: Manufacturer: syz
[  898.418093][ T7111] usb 5-1: SerialNumber: syz
[  898.428245][ T7111] usb 5-1: config 0 descriptor??
[  898.446043][ T7111] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  898.454226][ T7111] usb 5-1: setting power ON
[  898.459136][ T7111] dvb-usb: bulk message failed: -22 (2/0)
[  898.472607][ T7111] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  898.483226][ T7111] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  898.493086][ T7111] usb 5-1: media controller created
[  898.494100][T10634] usb 4-1: new full-speed USB device number 77 using dummy_hcd
[  898.549331][ T7111] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  898.587123][ T7111] usb 5-1: selecting invalid altsetting 6
[  898.593085][ T7111] usb 5-1: digital interface selection failed (-22)
[  898.600075][ T7111] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  898.614044][ T7111] usb 5-1: setting power OFF
[  898.645008][T10634] usb 4-1: device descriptor read/64, error -71
[  898.685880][ T7111] dvb-usb: bulk message failed: -22 (2/0)
[  898.704221][ T7111] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  898.885609][T10634] usb usb4-port1: attempt power cycle
[  898.898697][    T9] usb 3-1: USB disconnect, device number 115
[  898.908069][ T7111] (NULL device *): no alternate interface
[  898.912458][T16216] tipc: Resetting bearer <eth:syzkaller0>
[  899.156070][T16216] tipc: Disabling bearer <eth:syzkaller0>
[  899.165608][ T7111] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  899.179501][ T7111] usb 5-1: USB disconnect, device number 28
[  899.256000][T10634] usb 4-1: new full-speed USB device number 78 using dummy_hcd
[  899.284466][T10634] usb 4-1: device descriptor read/8, error -71
[  899.353754][T10638] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[  899.510304][T10638] usb 2-1: Using ep0 maxpacket: 8
[  899.528394][T10634] usb 4-1: new full-speed USB device number 79 using dummy_hcd
[  899.538154][T10638] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  899.558785][T10634] usb 4-1: device descriptor read/8, error -71
[  899.570735][T10638] usb 2-1: config 0 has no interface number 0
[  899.583655][T10638] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  899.596746][T10638] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  899.606908][T10638] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  899.616380][T10638] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  899.627686][T10638] usb 2-1: config 0 descriptor??
[  899.648697][T10638] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  899.674829][T10634] usb usb4-port1: unable to enumerate USB device
[  899.754791][T16259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2668'.
[  899.766905][T16259] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2668'.
[  899.800897][T16259] fuse: Bad value for 'fd'
[  899.927625][T10638] usb 2-1: USB disconnect, device number 98
[  900.043826][T10634] usb 3-1: new high-speed USB device number 116 using dummy_hcd
[  900.283783][T10634] usb 3-1: Using ep0 maxpacket: 16
[  900.293293][T10634] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  900.315176][T10634] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  900.336207][T10634] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  900.353542][T10634] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  900.371880][T10634] usb 3-1: Product: syz
[  900.376244][T10634] usb 3-1: Manufacturer: syz
[  900.380854][T10634] usb 3-1: SerialNumber: syz
[  900.635001][T10634] usb 3-1: 0:2 : does not exist
[  900.660395][T10634] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  900.917066][T10634] usb 3-1: USB disconnect, device number 116
[  901.503377][T16278] x_tables: ip_tables: DSCP target: only valid in mangle table, not syz0
[  901.531424][T14532] udevd[14532]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  902.335806][T16295] ubi: mtd0 is already attached to ubi8
[  902.338034][T16293] lo speed is unknown, defaulting to 1000
[  902.505138][T16293] lo speed is unknown, defaulting to 1000
[  902.546834][T16293] lo speed is unknown, defaulting to 1000
[  902.600973][T16302] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2679'.
[  902.640726][T16302] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2679'.
[  902.698946][T16302] loop2: detected capacity change from 0 to 7
[  902.720312][T16302] Dev loop2: unable to read RDB block 7
[  902.739855][T16302]  loop2: AHDI p1 p2
[  902.753195][T16302] loop2: partition table partially beyond EOD, truncated
[  902.794662][T16302] loop2: p1 start 1702258030 is beyond EOD, truncated
[  904.083094][T16316] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2683'.
[  904.104508][T16321] IPVS: set_ctl: invalid protocol: 60 10.1.1.0:20003
[  904.224806][ T7111] usb 3-1: new high-speed USB device number 117 using dummy_hcd
[  904.385539][ T7111] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  904.404704][ T7111] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  904.444225][ T7111] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00
[  904.478429][ T7111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  904.542235][ T7111] usb 3-1: Product: syz
[  904.572065][ T7111] usb 3-1: Manufacturer: syz
[  904.619453][ T7111] usb 3-1: SerialNumber: syz
[  904.798958][ T7111] usb 3-1: config 0 descriptor??
[  905.231846][ T5956] usb 3-1: USB disconnect, device number 117
[  905.246737][T16353] ubi: mtd0 is already attached to ubi8
[  907.804287][T16377] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2699'.
[  908.332610][T16384] netlink: 'syz.1.2703': attribute type 6 has an invalid length.
[  908.593850][   T30] audit: type=1326 audit(1755907438.408:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16382 comm="syz.1.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb564b8ebe9 code=0x7ffc0000
[  908.675440][   T30] audit: type=1326 audit(1755907438.408:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16382 comm="syz.1.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb564b8ebe9 code=0x7ffc0000
[  908.697002][    C1] vkms_vblank_simulate: vblank timer overrun
[  908.705613][   T30] audit: type=1326 audit(1755907438.408:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16382 comm="syz.1.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fb564b8ebe9 code=0x7ffc0000
[  908.727134][    C1] vkms_vblank_simulate: vblank timer overrun
[  908.741564][T10638] usb 3-1: new high-speed USB device number 118 using dummy_hcd
[  909.046031][T16389] siw: device registration error -23
[  909.763975][   T30] audit: type=1326 audit(1755907439.588:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16382 comm="syz.1.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb564b8ebe9 code=0x7ffc0000
[  909.786215][   T30] audit: type=1326 audit(1755907439.608:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16382 comm="syz.1.2703" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb564b8ebe9 code=0x7ffc0000
[  909.945446][T10638] usb 3-1: device not accepting address 118, error -71
[  910.183920][   T43] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[  910.293879][T10638] usb 3-1: new high-speed USB device number 119 using dummy_hcd
[  910.313848][   T43] usb 4-1: device descriptor read/64, error -71
[  910.455002][T10638] usb 3-1: Using ep0 maxpacket: 32
[  910.462091][T10638] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  910.471083][T10638] usb 3-1: config 0 has no interface number 0
[  910.490378][T10638] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  910.506417][T10638] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  910.522908][T16404] lo speed is unknown, defaulting to 1000
[  910.531105][T10638] usb 3-1: Product: syz
[  910.536603][T10638] usb 3-1: Manufacturer: syz
[  910.541425][T10638] usb 3-1: SerialNumber: syz
[  910.550653][T16404] lo speed is unknown, defaulting to 1000
[  910.560364][T10638] usb 3-1: config 0 descriptor??
[  910.573697][   T43] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[  910.581188][T16404] lo speed is unknown, defaulting to 1000
[  910.590401][T10638] smsc95xx v2.0.0
[  910.745371][   T43] usb 4-1: device descriptor read/64, error -71
[  910.853939][   T43] usb usb4-port1: attempt power cycle
[  910.994367][T10638] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61
[  911.021610][T10638] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  911.163655][ T5924] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[  911.194117][   T43] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[  911.227370][   T43] usb 4-1: device descriptor read/8, error -71
[  911.376454][ T5924] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  911.394873][ T5924] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  911.428192][ T5924] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00
[  911.447945][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  911.464444][ T5924] usb 2-1: Product: syz
[  911.471409][ T5924] usb 2-1: Manufacturer: syz
[  911.484213][ T5924] usb 2-1: SerialNumber: syz
[  911.504217][   T43] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[  911.557492][   T43] usb 4-1: device descriptor read/8, error -71
[  911.625498][T10638] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71
[  911.683435][   T43] usb usb4-port1: unable to enumerate USB device
[  911.775726][ T5924] usb 2-1: config 0 descriptor??
[  911.787361][T10638] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[  911.824620][T10638] usb 3-1: USB disconnect, device number 119
[  912.033480][   T43] usb 2-1: USB disconnect, device number 99
[  912.080980][T16425] team0 (unregistering): Port device team_slave_0 removed
[  912.104024][T16425] team0 (unregistering): Port device team_slave_1 removed
[  912.242942][T16428] gtp0: entered promiscuous mode
[  912.264704][T16428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2717'.
[  912.398562][T16434] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2719'.
[  912.617073][T16441] ubi: mtd0 is already attached to ubi8
[  913.549490][T15355] Bluetooth: hci5: Frame reassembly failed (-84)
[  915.617866][   T51] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  916.018076][T16486] netlink: 'syz.0.2733': attribute type 6 has an invalid length.
[  916.100791][   T30] audit: type=1326 audit(1755907445.918:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16485 comm="syz.0.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c318ebe9 code=0x7ffc0000
[  916.176804][   T30] audit: type=1326 audit(1755907445.948:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16485 comm="syz.0.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c318ebe9 code=0x7ffc0000
[  916.254442][   T30] audit: type=1326 audit(1755907445.948:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16485 comm="syz.0.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f90c318ebe9 code=0x7ffc0000
[  916.257149][T16495] usb usb8: usbfs: process 16495 (syz.3.2735) did not claim interface 0 before use
[  916.276007][    C0] vkms_vblank_simulate: vblank timer overrun
[  916.316658][   T30] audit: type=1326 audit(1755907446.068:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16485 comm="syz.0.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c318ebe9 code=0x7ffc0000
[  916.355390][   T30] audit: type=1326 audit(1755907446.068:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16485 comm="syz.0.2733" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90c318ebe9 code=0x7ffc0000
[  916.426776][T16500] lo speed is unknown, defaulting to 1000
[  916.437387][T16500] lo speed is unknown, defaulting to 1000
[  916.453171][T16500] lo speed is unknown, defaulting to 1000
[  916.603670][ T5956] usb 3-1: new high-speed USB device number 120 using dummy_hcd
[  916.783738][ T5956] usb 3-1: Using ep0 maxpacket: 16
[  916.795177][ T5956] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  916.805831][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  916.814857][ T5956] usb 3-1: Product: syz
[  916.819048][ T5956] usb 3-1: Manufacturer: syz
[  916.823828][ T5956] usb 3-1: SerialNumber: syz
[  916.830703][ T5956] usb 3-1: config 0 descriptor??
[  916.843800][   T43] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[  916.866361][ T5956] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  916.954381][ T7111] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  917.046100][   T43] usb 4-1: Using ep0 maxpacket: 16
[  917.055271][ T5956] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71
[  917.065912][   T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  917.083817][   T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  917.097627][ T5956] usb 3-1: USB disconnect, device number 120
[  917.114175][   T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  917.138834][   T43] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  917.150371][   T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  917.159010][ T7111] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  917.169268][ T7111] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  917.181555][   T43] usb 4-1: config 0 descriptor??
[  917.195748][ T7111] usb 5-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00
[  917.215001][ T7111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  917.223081][ T7111] usb 5-1: Product: syz
[  917.227814][ T7111] usb 5-1: Manufacturer: syz
[  917.232480][ T7111] usb 5-1: SerialNumber: syz
[  917.242401][ T7111] usb 5-1: config 0 descriptor??
[  917.476967][T10634] usb 5-1: USB disconnect, device number 29
[  917.646127][   T43] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0
[  917.658346][   T43] microsoft 0003:045E:07DA.001F: unknown main item tag 0x0
[  917.665673][   T43] microsoft 0003:045E:07DA.001F: report_id 0 is invalid
[  917.673192][   T43] microsoft 0003:045E:07DA.001F: item 0 0 1 8 parsing failed
[  917.681595][   T43] microsoft 0003:045E:07DA.001F: parse failed
[  917.687841][   T43] microsoft 0003:045E:07DA.001F: probe with driver microsoft failed with error -22
[  918.337301][T16520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  918.444186][T16520] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  918.830373][T16525] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2745'.
[  922.148437][   T43] usb 4-1: USB disconnect, device number 84
[  922.378895][T16547] netlink: 'syz.3.2752': attribute type 2 has an invalid length.
[  922.419387][T16544] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2751'.
[  922.428548][T16544] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2751'.
[  922.768630][T16554] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2753'.
[  922.915970][T16554] netlink: zone id is out of range
[  922.968440][T16547] : entered promiscuous mode
[  923.023817][T16554] netlink: get zone limit has 8 unknown bytes
[  923.233783][   T43] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  923.473850][   T43] usb 5-1: Using ep0 maxpacket: 8
[  923.539170][   T43] usb 5-1: config 7 has an invalid interface number: 252 but max is 0
[  923.552993][   T43] usb 5-1: config 7 has no interface number 0
[  923.569693][   T43] usb 5-1: config 7 interface 252 altsetting 6 endpoint 0xB has invalid maxpacket 1023, setting to 64
[  923.601924][   T43] usb 5-1: config 7 interface 252 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[  923.622696][   T43] usb 5-1: config 7 interface 252 altsetting 6 endpoint 0x4 has an invalid bInterval 25, changing to 8
[  923.659238][   T43] usb 5-1: config 7 interface 252 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[  923.705883][   T43] usb 5-1: config 7 interface 252 altsetting 6 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[  923.740743][   T43] usb 5-1: config 7 interface 252 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[  923.779628][   T43] usb 5-1: config 7 interface 252 altsetting 6 has a duplicate endpoint with address 0x8, skipping
[  923.803593][   T43] usb 5-1: config 7 interface 252 altsetting 6 has a duplicate endpoint with address 0xC, skipping
[  923.834000][   T43] usb 5-1: config 7 interface 252 has no altsetting 0
[  923.843422][   T43] usb 5-1: New USB device found, idVendor=0846, idProduct=4251, bcdDevice=bc.df
[  923.863036][   T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  923.873149][   T43] usb 5-1: Product: syz
[  923.881562][   T43] usb 5-1: Manufacturer: syz
[  923.891670][   T43] usb 5-1: SerialNumber: syz
[  923.953842][ T5956] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[  924.114839][ T5956] usb 4-1: Using ep0 maxpacket: 8
[  924.131996][   T43] usb 5-1: Could not find all expected endpoints
[  924.147780][ T5956] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55
[  924.172721][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  924.193326][   T43] usb 5-1: USB disconnect, device number 30
[  924.213071][ T5956] usb 4-1: Product: syz
[  924.226487][ T5956] usb 4-1: Manufacturer: syz
[  924.240654][ T5956] usb 4-1: SerialNumber: syz
[  924.263206][ T5956] usb 4-1: config 0 descriptor??
[  924.352876][T16566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2757'.
[  924.451100][T16568] lo speed is unknown, defaulting to 1000
[  924.459547][T16568] lo speed is unknown, defaulting to 1000
[  924.467672][T16568] lo speed is unknown, defaulting to 1000
[  924.504968][ T5956] usb 4-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  924.512959][ T5956] dvb_usb_af9015 4-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[  924.548621][ T5956] usb 4-1: USB disconnect, device number 85
[  924.778109][T10638] usb 3-1: new high-speed USB device number 121 using dummy_hcd
[  925.295593][T10638] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  925.311434][T10638] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  925.326006][T10638] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00
[  925.350731][T10638] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  925.363620][T10638] usb 3-1: Product: syz
[  925.367814][T10638] usb 3-1: Manufacturer: syz
[  925.426783][T10638] usb 3-1: SerialNumber: syz
[  925.496172][T10638] usb 3-1: config 0 descriptor??
[  925.549801][T16586] openvswitch: netlink: Message has 4 unknown bytes.
[  926.188524][   T43] usb 3-1: USB disconnect, device number 121
[  926.194774][ T5956] usb 2-1: new full-speed USB device number 100 using dummy_hcd
[  926.358082][ T5956] usb 2-1: config 150 has an invalid interface number: 204 but max is 1
[  926.383649][ T5956] usb 2-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config
[  926.403553][ T5956] usb 2-1: config 150 has 1 interface, different from the descriptor's value: 2
[  926.404703][T10638] usb 4-1: new full-speed USB device number 86 using dummy_hcd
[  926.422936][ T5956] usb 2-1: config 150 has no interface number 0
[  926.433066][ T5956] usb 2-1: config 150 interface 204 has no altsetting 0
[  926.455963][ T5956] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  926.473553][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  926.492008][ T5956] usb 2-1: Product: syz
[  926.502113][ T5956] usb 2-1: Manufacturer: syz
[  926.512213][ T5956] usb 2-1: SerialNumber: syz
[  926.575593][T10638] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  926.597417][T10638] usb 4-1: config 0 has an invalid interface number: 2 but max is -1
[  926.608785][T10638] usb 4-1: config 0 has an invalid interface number: 2 but max is -1
[  926.616945][T10638] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  926.630456][T10638] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0
[  926.639562][T10638] usb 4-1: config 0 has no interface number 0
[  926.649451][T10638] usb 4-1: too many endpoints for config 0 interface 2 altsetting 48: 48, using maximum allowed: 30
[  926.660542][T10638] usb 4-1: config 0 interface 2 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  926.677402][T10638] usb 4-1: config 0 interface 2 has no altsetting 1
[  926.687447][T10638] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  926.707575][T10638] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  926.727784][T10638] usb 4-1: Product: syz
[  926.743582][T10638] usb 4-1: Manufacturer: syz
[  926.745192][ T5956] xr_serial 2-1:150.204: skipping garbage
[  926.748204][T10638] usb 4-1: SerialNumber: syz
[  926.762026][T10638] usb 4-1: config 0 descriptor??
[  926.797895][ T5956] usb 2-1: USB disconnect, device number 100
[  927.024881][T10638] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  927.050675][T10638] usb 4-1: MIDIStreaming interface descriptor not found
[  927.126665][T10638] usb 4-1: USB disconnect, device number 86
[  927.198279][T16595] afs: Bad value for 'source'
[  927.199429][T14530] udevd[14530]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  927.243637][T10634] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  927.327652][T16598] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2765'.
[  927.380686][T16601] netlink: 'syz.1.2766': attribute type 1 has an invalid length.
[  927.443612][T10634] usb 5-1: device descriptor read/64, error -71
[  927.834360][T16601] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2766'.
[  928.153742][T10634] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  928.533647][T10634] usb 5-1: device descriptor read/64, error -71
[  928.949733][T10634] usb usb5-port1: attempt power cycle
[  929.545816][T16623] netlink: 'syz.3.2771': attribute type 29 has an invalid length.
[  929.554390][T16623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2771'.
[  929.569019][T16626] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  929.606141][T16626] 9pnet_fd: Insufficient options for proto=fd
[  929.633659][T10634] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  929.654388][T10634] usb 5-1: device descriptor read/8, error -71
[  929.882022][T16633] lo speed is unknown, defaulting to 1000
[  929.893849][T10634] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  929.897246][T16633] lo speed is unknown, defaulting to 1000
[  929.929541][T16633] lo speed is unknown, defaulting to 1000
[  929.929731][T10634] usb 5-1: device descriptor read/8, error -71
[  930.054005][T10634] usb usb5-port1: unable to enumerate USB device
[  930.651082][T16639] dvmrp1: left allmulticast mode
[  931.235556][T16651] program syz.4.2778 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  931.731182][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  931.739881][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  932.033705][ T5956] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[  932.223952][ T5956] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  932.634701][ T5956] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  932.829150][ T5956] usb 2-1: string descriptor 0 read error: -71
[  932.860364][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  932.874206][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  932.883727][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  932.899491][ T5956] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00
[  932.908922][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  932.919985][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  932.985185][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  933.145038][ T5956] usb 2-1: config 0 descriptor??
[  933.183939][ T5956] usb 2-1: can't set config #0, error -71
[  933.224418][ T5956] usb 2-1: USB disconnect, device number 101
[  933.253408][T16658] lo speed is unknown, defaulting to 1000
[  933.275074][T16658] lo speed is unknown, defaulting to 1000
[  933.334397][T16666] can: request_module (can-proto-4) failed.
[  933.335244][T16658] lo speed is unknown, defaulting to 1000
[  933.928647][T16670] xt_recent: hitcount (1048576) is larger than allowed maximum (65535)
[  934.238575][T16683] overlayfs: failed to resolve './file2': -2
[  934.963961][   T51] Bluetooth: hci1: command tx timeout
[  935.548013][T16706] 9pnet_fd: Insufficient options for proto=fd
[  935.574375][ T5924] usb 3-1: new high-speed USB device number 122 using dummy_hcd
[  936.001058][T16658] chnl_net:caif_netlink_parms(): no params data found
[  936.013817][ T5924] usb 3-1: Using ep0 maxpacket: 16
[  936.064285][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  936.075635][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  936.112728][ T5924] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  936.198852][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  936.247951][ T5924] usb 3-1: config 0 descriptor??
[  937.047725][ T5924] usbhid 3-1:0.0: can't add hid device: -71
[  937.061431][   T51] Bluetooth: hci1: command tx timeout
[  937.067106][ T5924] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  937.092120][ T5924] usb 3-1: USB disconnect, device number 122
[  937.227596][T16658] bridge0: port 1(bridge_slave_0) entered blocking state
[  937.278221][T16658] bridge0: port 1(bridge_slave_0) entered disabled state
[  937.308156][T16658] bridge_slave_0: entered allmulticast mode
[  937.344484][T16658] bridge_slave_0: entered promiscuous mode
[  937.368222][T16658] bridge0: port 2(bridge_slave_1) entered blocking state
[  937.376403][T16658] bridge0: port 2(bridge_slave_1) entered disabled state
[  937.399815][T16658] bridge_slave_1: entered allmulticast mode
[  937.433115][T16658] bridge_slave_1: entered promiscuous mode
[  938.111308][T16658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  938.257353][T16658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  938.533717][ T5924] usb 2-1: new full-speed USB device number 102 using dummy_hcd
[  938.711864][ T5956] IPVS: starting estimator thread 0...
[  938.813821][T16730] IPVS: using max 23 ests per chain, 55200 per kthread
[  938.948200][T16658] team0: Port device team_slave_0 added
[  938.985341][T16658] team0: Port device team_slave_1 added
[  938.996830][ T5924] usb 2-1: device descriptor read/64, error -71
[  939.058005][T16658] batman_adv: batadv0: Adding interface: batadv_slave_0
[  939.065271][T16658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  939.093055][T16658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  939.106649][T16734] netlink: 'syz.2.2799': attribute type 30 has an invalid length.
[  939.108416][T16658] batman_adv: batadv0: Adding interface: batadv_slave_1
[  939.119677][T16734] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2799'.
[  939.121613][T16658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  939.130913][   T51] Bluetooth: hci1: command tx timeout
[  939.157340][T16658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  939.175153][T16734] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[  939.185108][T16734] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[  939.244246][ T5924] usb 2-1: new full-speed USB device number 103 using dummy_hcd
[  939.259892][T16738] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2800'.
[  939.282905][T16658] hsr_slave_0: entered promiscuous mode
[  939.292380][T16658] hsr_slave_1: entered promiscuous mode
[  939.299300][T16658] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  939.308398][T16658] Cannot create hsr debugfs directory
[  939.357909][   T30] audit: type=1326 audit(1755907469.178:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16742 comm="syz.2.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186158ebe9 code=0x7ffc0000
[  939.384826][ T5924] usb 2-1: device descriptor read/64, error -71
[  939.416252][   T30] audit: type=1326 audit(1755907469.178:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16742 comm="syz.2.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186158ebe9 code=0x7ffc0000
[  939.438664][   T30] audit: type=1326 audit(1755907469.218:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16742 comm="syz.2.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f186158ebe9 code=0x7ffc0000
[  939.460733][   T30] audit: type=1326 audit(1755907469.218:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16742 comm="syz.2.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186158ebe9 code=0x7ffc0000
[  939.482790][   T30] audit: type=1326 audit(1755907469.218:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16742 comm="syz.2.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186158ebe9 code=0x7ffc0000
[  939.504891][   T30] audit: type=1326 audit(1755907469.218:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16742 comm="syz.2.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f186158ebe9 code=0x7ffc0000
[  939.514535][ T5924] usb usb2-port1: attempt power cycle
[  939.540054][   T30] audit: type=1326 audit(1755907469.218:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16742 comm="syz.2.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186158ebe9 code=0x7ffc0000
[  939.565525][   T30] audit: type=1326 audit(1755907469.218:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16742 comm="syz.2.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186158ebe9 code=0x7ffc0000
[  939.599821][   T30] audit: type=1326 audit(1755907469.218:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16742 comm="syz.2.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f186158ebe9 code=0x7ffc0000
[  939.627247][   T30] audit: type=1326 audit(1755907469.218:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16742 comm="syz.2.2801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186158ebe9 code=0x7ffc0000
[  939.689253][T16658] 8021q: adding VLAN 0 to HW filter on device bond0
[  939.715109][T16658] 8021q: adding VLAN 0 to HW filter on device team0
[  939.728595][T14445] bridge0: port 1(bridge_slave_0) entered blocking state
[  939.735777][T14445] bridge0: port 1(bridge_slave_0) entered forwarding state
[  939.752887][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  939.760277][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  939.893805][ T5924] usb 2-1: new full-speed USB device number 104 using dummy_hcd
[  939.928597][ T5924] usb 2-1: device descriptor read/8, error -71
[  939.991356][T16658] 8021q: adding VLAN 0 to HW filter on device batadv0
[  940.173804][ T5924] usb 2-1: new full-speed USB device number 105 using dummy_hcd
[  940.223326][ T5924] usb 2-1: device descriptor read/8, error -71
[  940.282599][T16658] veth0_vlan: entered promiscuous mode
[  940.301753][T16658] veth1_vlan: entered promiscuous mode
[  940.354004][ T5924] usb usb2-port1: unable to enumerate USB device
[  940.354099][T16658] veth0_macvtap: entered promiscuous mode
[  940.371320][T16658] veth1_macvtap: entered promiscuous mode
[  940.396575][T16658] batman_adv: batadv0: Interface activated: batadv_slave_0
[  940.422291][T16658] batman_adv: batadv0: Interface activated: batadv_slave_1
[  940.827271][T16768] overlay: Unknown parameter 'context'
[  941.113601][T10832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  941.135357][T10832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  941.136595][T14445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  941.157503][T14445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  941.203920][   T51] Bluetooth: hci1: command tx timeout
[  942.823997][T10638] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  943.002151][T10638] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[  943.021931][T10638] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  943.030288][T10634] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[  943.048954][T10638] usb 5-1: config 0 descriptor??
[  943.218869][T10634] usb 2-1: config 255 has an invalid interface number: 252 but max is -1
[  943.321902][T16813] syz_tun: entered allmulticast mode
[  943.363774][T16813] dvmrp1: entered allmulticast mode
[  943.390897][T16813] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  943.864995][T10634] usb 2-1: config 255 has 1 interface, different from the descriptor's value: 0
[  943.865895][T16807] syz_tun: left allmulticast mode
[  943.875665][T10634] usb 2-1: config 255 has no interface number 0
[  943.889909][T10634] usb 2-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=75.70
[  944.020285][T10634] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  944.069857][T10634] usb 2-1: Product: syz
[  944.117428][T10638] ath6kl: Failed to read usb control message: -71
[  944.131605][T10634] usb 2-1: Manufacturer: syz
[  944.146141][T10638] ath6kl: Unable to read the bmi data from the device: -71
[  944.157476][T10634] usb 2-1: SerialNumber: syz
[  944.234857][T10638] ath6kl: Unable to recv target info: -71
[  944.269769][T10638] ath6kl: Failed to init ath6kl core: -71
[  944.313416][T10638] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71
[  944.337443][T16824] loop2: detected capacity change from 0 to 7
[  944.382327][T10638] usb 5-1: USB disconnect, device number 35
[  944.419736][T16824] Dev loop2: unable to read RDB block 7
[  944.464759][T16824]  loop2: AHDI p3 p4
[  944.484035][T16824] loop2: partition table partially beyond EOD, truncated
[  944.510824][T16824] loop2: p3 start 1869967406 is beyond EOD, truncated
[  945.566381][T16833] nbd: socks must be embedded in a SOCK_ITEM attr
[  945.573035][T16833] block nbd2: shutting down sockets
[  945.766764][T10634] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a
[  945.787038][T10634] gspca_sn9c20x: Write register 1000 failed -71
[  945.793883][T10634] gspca_sn9c20x: Device initialization failed
[  945.801659][T10634] gspca_sn9c20x 2-1:255.252: probe with driver gspca_sn9c20x failed with error -71
[  945.847620][T10634] usb 2-1: USB disconnect, device number 106
[  946.261796][T16840] lo speed is unknown, defaulting to 1000
[  946.317218][T16840] lo speed is unknown, defaulting to 1000
[  946.332827][T16840] lo speed is unknown, defaulting to 1000
[  946.619688][T16841] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  946.628607][T16842] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  948.000484][T16859] FAULT_INJECTION: forcing a failure.
[  948.000484][T16859] name failslab, interval 1, probability 0, space 0, times 0
[  948.013349][T16859] CPU: 0 UID: 0 PID: 16859 Comm: syz.3.2826 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  948.013376][T16859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  948.013388][T16859] Call Trace:
[  948.013398][T16859]  <TASK>
[  948.013407][T16859]  dump_stack_lvl+0x189/0x250
[  948.013436][T16859]  ? __pfx____ratelimit+0x10/0x10
[  948.013458][T16859]  ? __pfx_dump_stack_lvl+0x10/0x10
[  948.013484][T16859]  ? __pfx__printk+0x10/0x10
[  948.013512][T16859]  ? __pfx___might_resched+0x10/0x10
[  948.013536][T16859]  should_fail_ex+0x414/0x560
[  948.013564][T16859]  should_failslab+0xa8/0x100
[  948.013588][T16859]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  948.013609][T16859]  ? __alloc_skb+0x112/0x2d0
[  948.013642][T16859]  __alloc_skb+0x112/0x2d0
[  948.013672][T16859]  netlink_sendmsg+0x5c6/0xb30
[  948.013710][T16859]  ? __pfx_netlink_sendmsg+0x10/0x10
[  948.013747][T16859]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  948.013766][T16859]  ? __pfx_netlink_sendmsg+0x10/0x10
[  948.013795][T16859]  __sock_sendmsg+0x21c/0x270
[  948.013822][T16859]  ____sys_sendmsg+0x505/0x830
[  948.013857][T16859]  ? __pfx_____sys_sendmsg+0x10/0x10
[  948.013897][T16859]  ? import_iovec+0x74/0xa0
[  948.013928][T16859]  ___sys_sendmsg+0x21f/0x2a0
[  948.013960][T16859]  ? __pfx____sys_sendmsg+0x10/0x10
[  948.014029][T16859]  ? __fget_files+0x2a/0x420
[  948.014050][T16859]  ? __fget_files+0x3a0/0x420
[  948.014084][T16859]  __x64_sys_sendmsg+0x19b/0x260
[  948.014117][T16859]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  948.014165][T16859]  ? __pfx_ksys_write+0x10/0x10
[  948.014191][T16859]  ? do_syscall_64+0xbe/0x3b0
[  948.014217][T16859]  do_syscall_64+0xfa/0x3b0
[  948.014240][T16859]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  948.014259][T16859]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  948.014278][T16859]  ? clear_bhb_loop+0x60/0xb0
[  948.014303][T16859]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  948.014322][T16859] RIP: 0033:0x7f5cbe98ebe9
[  948.014341][T16859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  948.014359][T16859] RSP: 002b:00007f5cbcbd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  948.014381][T16859] RAX: ffffffffffffffda RBX: 00007f5cbebb6180 RCX: 00007f5cbe98ebe9
[  948.014396][T16859] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 000000000000000c
[  948.014409][T16859] RBP: 00007f5cbcbd5090 R08: 0000000000000000 R09: 0000000000000000
[  948.014422][T16859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  948.014435][T16859] R13: 00007f5cbebb6218 R14: 00007f5cbebb6180 R15: 00007ffe10f68c48
[  948.014467][T16859]  </TASK>
[  948.604076][T10634] kernel write not supported for file /1779/attr/sockcreate (pid: 10634 comm: kworker/0:1)
[  950.375487][   T24] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  950.740613][T10638] usb 3-1: new high-speed USB device number 123 using dummy_hcd
[  950.903715][   T24] usb 5-1: Using ep0 maxpacket: 32
[  950.913664][   T24] usb 5-1: config 0 has an invalid interface number: 126 but max is 0
[  950.925966][   T24] usb 5-1: config 0 has an invalid descriptor of length 156, skipping remainder of the config
[  950.937906][   T24] usb 5-1: config 0 has no interface number 0
[  950.943630][T10638] usb 3-1: Using ep0 maxpacket: 8
[  950.946604][   T24] usb 5-1: config 0 interface 126 altsetting 246 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  950.964274][T16915] tmpfs: Unknown parameter 'hug߯�ver'
[  950.966727][   T24] usb 5-1: config 0 interface 126 has no altsetting 0
[  950.971657][T10638] usb 3-1: unable to get BOS descriptor or descriptor too short
[  950.983421][   T24] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c
[  951.001017][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  951.114595][   T24] usb 5-1: Product: syz
[  951.119272][   T24] usb 5-1: Manufacturer: syz
[  951.124074][   T24] usb 5-1: SerialNumber: syz
[  951.138130][   T24] usb 5-1: config 0 descriptor??
[  951.156300][T10638] usb 3-1: config 4 has an invalid interface number: 147 but max is 0
[  951.168343][T10638] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  951.963940][T10638] usb 3-1: config 4 has no interface number 0
[  951.983228][T10638] usb 3-1: string descriptor 0 read error: -22
[  952.002854][T10638] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  952.039952][T10638] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  952.275358][   T24] ir_usb 5-1:0.126: required endpoints missing
[  952.322667][T10638] usb 3-1: Found UVC 0.02 device <unnamed> (04f2:b746)
[  952.384013][T10638] usb 3-1: No streaming interface found for terminal 6.
[  952.404631][T16931] kvm: pic: non byte read
[  952.406685][T15355] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  952.415349][T16931] kvm: pic: level sensitive irq not supported
[  952.419147][T16931] kvm: pic: non byte read
[  952.426600][T15355] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  952.592236][T15355] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  952.603159][T15355] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  952.608393][T10638] usb 3-1: USB disconnect, device number 123
[  952.644056][   T24] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[  952.708359][T15355] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  952.718283][T15355] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  952.782484][T15355] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  952.793609][   T24] usb 1-1: Using ep0 maxpacket: 8
[  952.796782][T15355] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  952.810622][   T24] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2
[  952.830315][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  952.842295][   T24] usb 1-1: Product: syz
[  952.851861][   T24] usb 1-1: Manufacturer: syz
[  952.861122][   T24] usb 1-1: SerialNumber: syz
[  952.872182][   T24] usb 1-1: config 0 descriptor??
[  953.021318][T16945] 9pnet_fd: Insufficient options for proto=fd
[  953.476392][   T24] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  953.943262][T16950] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  953.951971][T16950] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  954.073869][   T24] gspca_sunplus: reg_w_riv err -110
[  954.079207][   T24] sunplus 1-1:0.0: probe with driver sunplus failed with error -110
[  954.080601][    T9] usb 5-1: USB disconnect, device number 36
[  954.118206][T15355] bridge_slave_1: left allmulticast mode
[  954.141850][T15355] bridge_slave_1: left promiscuous mode
[  954.199501][T15355] bridge0: port 2(bridge_slave_1) entered disabled state
[  954.798276][T15355] bridge_slave_0: left allmulticast mode
[  954.931085][T15355] bridge_slave_0: left promiscuous mode
[  954.944349][T15355] bridge0: port 1(bridge_slave_0) entered disabled state
[  955.544098][T16976] sysfs: Unknown parameter 'tS'
[  955.643621][    T9] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[  955.728819][   T24] usb 4-1: new full-speed USB device number 87 using dummy_hcd
[  956.059360][    T9] usb 2-1: device descriptor read/64, error -71
[  956.334856][T10638] usb 1-1: USB disconnect, device number 87
[  956.423770][    T9] usb 2-1: new high-speed USB device number 108 using dummy_hcd
[  956.564726][    T9] usb 2-1: device descriptor read/64, error -71
[  956.752354][    T9] usb usb2-port1: attempt power cycle
[  957.313574][    T9] usb 2-1: new high-speed USB device number 109 using dummy_hcd
[  957.410121][    T9] usb 2-1: device descriptor read/8, error -71
[  957.460043][   T30] kauditd_printk_skb: 42 callbacks suppressed
[  957.460070][   T30] audit: type=1804 audit(1755907487.278:882): pid=16984 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.2855" name="/newroot/500/file0" dev="tmpfs" ino=2748 res=1 errno=0
[  957.598143][T16986] /dev/nullb0: Can't open blockdev
[  957.621131][   T30] audit: type=1804 audit(1755907487.438:883): pid=16984 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.2855" name="/newroot/500/file0" dev="tmpfs" ino=2748 res=1 errno=0
[  957.683969][    T9] usb 2-1: new high-speed USB device number 110 using dummy_hcd
[  957.704352][    T9] usb 2-1: device descriptor read/8, error -71
[  957.827791][    T9] usb usb2-port1: unable to enumerate USB device
[  958.071224][T15355] bond0 (unregistering): (slave ������): Releasing backup interface
[  958.082083][T15355] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  958.093244][T15355] bond0 (unregistering): Released all slaves
[  958.137654][T16980] kthread_run failed with err -4
[  958.305395][T15355] tipc: Left network mode
[  958.453902][T15355] IPVS: stopping backup sync thread 15108 ...
[  958.476089][T15355] IPVS: stopping backup sync thread 15106 ...
[  958.492582][T15355] IPVS: stopping backup sync thread 15105 ...
[  958.571015][T15355] IPVS: stopping backup sync thread 15104 ...
[  958.753856][   T24] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[  959.044196][   T24] usb 4-1: Using ep0 maxpacket: 8
[  959.305925][T17002] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2859'.
[  959.367960][   T24] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  959.396982][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  959.516628][   T24] pvrusb2: Hardware description: Terratec Grabster AV400
[  959.556585][   T24] pvrusb2: **********
[  959.581885][   T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  959.637783][   T24] pvrusb2: Important functionality might not be entirely working.
[  959.652343][   T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  959.670325][   T24] pvrusb2: **********
[  960.166414][ T2343] pvrusb2: Invalid write control endpoint
[  960.273582][    T9] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[  960.313801][T15355] hsr_slave_0: left promiscuous mode
[  960.372006][T16994] pvrusb2: Invalid write control endpoint
[  960.383727][T15355] hsr_slave_1: left promiscuous mode
[  960.415890][ T2343] pvrusb2: Invalid write control endpoint
[  960.423975][ T5927] usb 4-1: USB disconnect, device number 88
[  960.443994][    T9] usb 1-1: Using ep0 maxpacket: 8
[  960.456217][   T30] audit: type=1804 audit(1755907490.268:884): pid=17019 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.2866" name="/newroot/58/file0" dev="tmpfs" ino=334 res=1 errno=0
[  960.468775][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  960.528359][    T9] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2
[  960.540521][   T30] audit: type=1804 audit(1755907490.278:885): pid=17019 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.2866" name="/newroot/58/file0" dev="tmpfs" ino=334 res=1 errno=0
[  960.548050][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  960.569265][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  960.579560][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  960.588031][T15355] veth1_macvtap: left promiscuous mode
[  960.590064][    T9] usb 1-1: Product: syz
[  960.612513][ T2343] pvrusb2: Device being rendered inoperable
[  960.618740][T15355] veth0_macvtap: left promiscuous mode
[  960.628791][    T9] usb 1-1: Manufacturer: syz
[  960.633792][T15355] veth1_vlan: left promiscuous mode
[  960.637145][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  960.653728][    T9] usb 1-1: SerialNumber: syz
[  960.658503][T15355] veth0_vlan: left promiscuous mode
[  960.664122][   T24] usb 2-1: new high-speed USB device number 111 using dummy_hcd
[  960.665617][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  960.687562][    T9] usb 1-1: config 0 descriptor??
[  960.693013][T17023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2868'.
[  960.696750][ T2343] pvrusb2: Attached sub-driver cx25840
[  960.719922][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  960.737714][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  960.836265][   T24] usb 2-1: device descriptor read/64, error -71
[  961.032381][    T9] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  961.690825][   T24] usb 2-1: new high-speed USB device number 112 using dummy_hcd
[  961.758675][    T9] gspca_sunplus: reg_w_riv err -110
[  961.764657][    T9] sunplus 1-1:0.0: probe with driver sunplus failed with error -110
[  961.834390][   T24] usb 2-1: device descriptor read/64, error -71
[  961.949026][T17047] 9pnet_virtio: no channels available for device ./bus
[  961.965514][   T24] usb usb2-port1: attempt power cycle
[  962.423643][   T24] usb 2-1: new high-speed USB device number 113 using dummy_hcd
[  962.455045][   T24] usb 2-1: device descriptor read/8, error -71
[  962.703836][   T24] usb 2-1: new high-speed USB device number 114 using dummy_hcd
[  962.734214][   T24] usb 2-1: device descriptor read/8, error -71
[  962.844329][   T24] usb usb2-port1: unable to enumerate USB device
[  963.445607][   T24] usb 1-1: USB disconnect, device number 88
[  964.227468][T17074] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2877'.
[  965.837196][   T30] audit: type=1804 audit(1755907495.658:886): pid=17094 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.2879" name="/newroot/60/file0" dev="tmpfs" ino=346 res=1 errno=0
[  965.950359][T10638] usb 1-1: new full-speed USB device number 89 using dummy_hcd
[  966.150233][T10638] usb 1-1: unable to get BOS descriptor or descriptor too short
[  966.243393][T10638] usb 1-1: not running at top speed; connect to a high speed hub
[  966.287094][T15355] IPVS: stop unused estimator thread 0...
[  966.365599][T10638] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  966.624626][T10638] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  966.685853][T10638] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  966.963326][T10638] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  967.387429][T10638] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  967.412924][T10638] usb 1-1: Product: syz
[  967.937215][T10638] usb 1-1: Manufacturer: syz
[  967.941886][T10638] usb 1-1: SerialNumber: syz
[  969.455055][ T5924] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[  969.750502][ T5924] usb 4-1: too many configurations: 151, using maximum allowed: 8
[  970.282916][T10638] usb 1-1: 0:2 : does not exist
[  970.344807][ T5924] usb 4-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7
[  970.415036][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130
[  970.488711][ T5924] usb 4-1: Product: syz
[  970.493944][T10638] usb 1-1: USB disconnect, device number 89
[  970.526736][ T5924] usb 4-1: Manufacturer: syz
[  970.531408][ T5924] usb 4-1: SerialNumber: syz
[  970.579857][ T5924] usb 4-1: config 0 descriptor??
[  970.621124][T14532] udevd[14532]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  971.140685][T17143] netlink: 'syz.4.2896': attribute type 1 has an invalid length.
[  971.162349][T17143] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2896'.
[  971.186530][T17146] netlink: 'syz.4.2896': attribute type 1 has an invalid length.
[  971.196141][T17146] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2896'.
[  971.427931][T17150] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  971.671491][ T5927] usb 4-1: USB disconnect, device number 89
[  972.537825][T17174] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2905'.
[  974.104878][   T24] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  974.333726][   T24] usb 5-1: Using ep0 maxpacket: 32
[  974.340750][   T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  974.352724][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  974.364845][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  974.376539][   T43] usb 1-1: new high-speed USB device number 90 using dummy_hcd
[  974.384610][   T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  974.403799][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  974.583897][   T43] usb 1-1: Using ep0 maxpacket: 8
[  974.688950][   T43] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  975.042915][   T43] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  975.053915][   T43] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  975.064697][   T24] usb 5-1: config 0 descriptor??
[  975.093318][   T43] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  975.103726][   T43] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  975.117617][   T43] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  975.126941][   T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  975.137478][T17185] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  975.149484][   T43] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22
[  975.159810][   T24] hub 5-1:0.0: USB hub found
[  975.364352][ T5927] usb 3-1: new high-speed USB device number 124 using dummy_hcd
[  975.366483][   T24] hub 5-1:0.0: 2 ports detected
[  975.825556][ T5924] usb 1-1: USB disconnect, device number 90
[  975.843639][T10638] usb 2-1: new high-speed USB device number 115 using dummy_hcd
[  975.863611][ T5927] usb 3-1: Using ep0 maxpacket: 8
[  975.873414][ T5927] usb 3-1: config 162 has an invalid interface number: 84 but max is 2
[  975.888771][ T5927] usb 3-1: config 162 has an invalid interface number: 3 but max is 2
[  975.899742][ T5927] usb 3-1: config 162 has no interface number 0
[  975.908935][ T5927] usb 3-1: config 162 has no interface number 1
[  975.916167][ T5927] usb 3-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  975.930063][ T5927] usb 3-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  975.942715][ T5927] usb 3-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[  975.955036][ T5927] usb 3-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[  975.972247][ T5927] usb 3-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[  975.992227][ T5927] usb 3-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[  976.019283][T10638] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  976.033558][T10638] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  976.047939][ T5927] usb 3-1: config 162 interface 84 has no altsetting 0
[  976.060314][T10638] usb 2-1: config 1 has no interface number 0
[  976.073586][ T5927] usb 3-1: config 162 interface 2 has no altsetting 0
[  976.080655][T10638] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  976.094049][ T5927] usb 3-1: config 162 interface 3 has no altsetting 0
[  976.106146][ T5927] usb 3-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23
[  976.116257][T10638] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  976.125724][T10638] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  976.143719][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  976.151978][T10638] usb 2-1: Product: syz
[  976.156385][ T5927] usb 3-1: Product: syz
[  976.160579][ T5927] usb 3-1: Manufacturer: syz
[  976.166880][T10638] usb 2-1: Manufacturer: syz
[  976.171534][T10638] usb 2-1: SerialNumber: syz
[  976.176397][ T5927] usb 3-1: SerialNumber: syz
[  976.200756][T10638] usb 2-1: selecting invalid altsetting 1
[  976.256777][T17223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  976.269678][   T24] hub 5-1:0.0: set hub depth failed
[  976.286148][T17223] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  976.294609][   T24] usb 5-1: USB disconnect, device number 37
[  976.390401][T17207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  976.399789][T17207] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  976.503038][T17230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2914'.
[  976.521269][T17231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  976.537504][T17231] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  976.556756][ T7111] usb 4-1: new high-speed USB device number 90 using dummy_hcd
[  976.613672][T10638] usb 2-1: selecting invalid altsetting 1
[  976.619841][T10638] cdc_ncm 2-1:1.1: bind() failure
[  976.642669][   T51] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  976.668901][ T5927] usb 3-1: USB disconnect, device number 124
[  976.715965][ T7111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  976.728384][   T43] usb 1-1: new high-speed USB device number 91 using dummy_hcd
[  976.751366][ T7111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  976.774855][ T7111] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  976.788442][ T7111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  976.827240][ T7111] usb 4-1: config 0 descriptor??
[  976.893659][   T43] usb 1-1: Using ep0 maxpacket: 16
[  976.914220][   T43] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  976.943589][   T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  976.961992][   T43] usb 1-1: Product: syz
[  976.972082][   T43] usb 1-1: Manufacturer: syz
[  976.979331][   T43] usb 1-1: SerialNumber: syz
[  976.997249][   T43] usb 1-1: config 0 descriptor??
[  977.006746][   T43] ums-onetouch 1-1:0.0: USB Mass Storage device detected
[  977.210387][   T43] usb 1-1: USB disconnect, device number 91
[  977.309574][ T7111] cm6533_jd 0003:0D8C:0022.0020: unknown main item tag 0x0
[  977.351377][ T7111] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0020/input/input40
[  977.398534][ T7111] cm6533_jd 0003:0D8C:0022.0020: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0
[  977.611217][ T7111] usb 4-1: USB disconnect, device number 90
[  977.877290][T17252] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2923'.
[  978.564894][T17256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2925'.
[  978.735307][   T24] usb 2-1: USB disconnect, device number 115
[  979.603972][T16455] Bluetooth: hci2: command 0x0406 tx timeout
[  981.183402][   T30] audit: type=1326 audit(1755907510.998:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17269 comm="syz.2.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186158ebe9 code=0x7ffc0000
[  981.205721][   T30] audit: type=1326 audit(1755907510.998:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17269 comm="syz.2.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186158ebe9 code=0x7ffc0000
[  981.227830][   T30] audit: type=1326 audit(1755907510.998:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17269 comm="syz.2.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f186158ebe9 code=0x7ffc0000
[  981.323743][   T30] audit: type=1326 audit(1755907510.998:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17269 comm="syz.2.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186158ebe9 code=0x7ffc0000
[  981.345387][    C1] vkms_vblank_simulate: vblank timer overrun
[  981.352609][   T30] audit: type=1326 audit(1755907510.998:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17269 comm="syz.2.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186158ebe9 code=0x7ffc0000
[  981.581771][   T30] audit: type=1326 audit(1755907510.998:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17269 comm="syz.2.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f186158ebe9 code=0x7ffc0000
[  981.684527][   T30] audit: type=1326 audit(1755907510.998:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17269 comm="syz.2.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186158ebe9 code=0x7ffc0000
[  981.758094][   T30] audit: type=1326 audit(1755907510.998:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17269 comm="syz.2.2930" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186158ebe9 code=0x7ffc0000
[  981.779732][    C1] vkms_vblank_simulate: vblank timer overrun
[  982.030337][T17302] netlink: 'syz.0.2934': attribute type 1 has an invalid length.
[  982.079650][T17302] netlink: 'syz.0.2934': attribute type 3 has an invalid length.
[  982.138204][T17302] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2934'.
[  982.367806][T17312] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2938'.
[  982.416714][T17312] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2938'.
[  982.440992][ T5924] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[  982.445254][T17310] bridge0: entered promiscuous mode
[  982.649681][T17310] bridge0: left promiscuous mode
[  982.704814][    C1] vxcan0: j1939_tp_rxtimer: 0xffff888056b7c800: rx timeout, send abort
[  982.754437][ T5924] usb 4-1: device descriptor read/64, error -71
[  983.213149][    C1] vxcan0: j1939_tp_rxtimer: 0xffff888056b7c800: abort rx timeout. Force session deactivation
[  984.478222][ T5924] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[  987.088767][T17366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  987.105937][T10638] lo speed is unknown, defaulting to 1000
[  987.117957][T10638] 3yz0: Port: 1 Link ACTIVE
[  987.411496][T17370] kvm: user requested TSC rate below hardware speed
[  987.422031][T17370] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3304665512 (6609331024 ns) > initial count (5832947598 ns). Using initial count to start timer.
[  988.359279][ T7111] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[  988.644515][T17395] ubi: mtd0 is already attached to ubi8
[  988.673594][ T7111] usb 4-1: Using ep0 maxpacket: 16
[  988.741761][ T7111] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  988.761629][ T7111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=222
[  988.819609][ T7111] usb 4-1: SerialNumber: syz
[  988.857156][ T7111] usb 4-1: config 0 descriptor??
[  989.383886][ T7111] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  989.436425][ T7111] usb 4-1: Detected FT232A
[  989.442756][ T7111] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  989.469867][ T7111] usb 4-1: USB disconnect, device number 93
[  989.508260][ T7111] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  990.046655][ T7111] ftdi_sio 4-1:0.0: device disconnected
[  990.589587][T17429] netlink: 'syz.1.2963': attribute type 6 has an invalid length.
[  990.641728][T17429] FAULT_INJECTION: forcing a failure.
[  990.641728][T17429] name failslab, interval 1, probability 0, space 0, times 0
[  990.654767][T17429] CPU: 0 UID: 0 PID: 17429 Comm: syz.1.2963 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  990.654794][T17429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  990.654806][T17429] Call Trace:
[  990.654814][T17429]  <TASK>
[  990.654821][T17429]  dump_stack_lvl+0x189/0x250
[  990.654849][T17429]  ? lockdep_hardirqs_on+0x9c/0x150
[  990.654870][T17429]  ? __pfx_dump_stack_lvl+0x10/0x10
[  990.654892][T17429]  ? __pfx__printk+0x10/0x10
[  990.654919][T17429]  ? fs_reclaim_acquire+0x7d/0x100
[  990.654950][T17429]  should_fail_ex+0x414/0x560
[  990.654976][T17429]  should_failslab+0xa8/0x100
[  990.654998][T17429]  __kmalloc_cache_noprof+0x70/0x3d0
[  990.655017][T17429]  ? resv_map_alloc+0x51/0x2c0
[  990.655041][T17429]  ? trace_irq_disable+0x37/0x110
[  990.655070][T17429]  resv_map_alloc+0x51/0x2c0
[  990.655099][T17429]  hugetlbfs_get_inode+0x68/0x660
[  990.655135][T17429]  ? lockdep_hardirqs_on+0x9c/0x150
[  990.655160][T17429]  hugetlb_file_setup+0x21d/0x630
[  990.655189][T17429]  ksys_mmap_pgoff+0x22f/0x760
[  990.655215][T17429]  do_syscall_64+0xfa/0x3b0
[  990.655236][T17429]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  990.655254][T17429]  ? asm_sysvec_call_function_single+0x1a/0x20
[  990.655271][T17429]  ? clear_bhb_loop+0x60/0xb0
[  990.655295][T17429]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  990.655314][T17429] RIP: 0033:0x7fb564b8ebe9
[  990.655331][T17429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  990.655347][T17429] RSP: 002b:00007fb565a66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  990.655366][T17429] RAX: ffffffffffffffda RBX: 00007fb564db6090 RCX: 00007fb564b8ebe9
[  990.655380][T17429] RDX: 0000000003000009 RSI: 0000000000800000 RDI: 0000200000800000
[  990.655394][T17429] RBP: 00007fb565a66090 R08: ffffffffffffffff R09: 0000000000000000
[  990.655407][T17429] R10: 0000000000046031 R11: 0000000000000246 R12: 0000000000000001
[  990.655417][T17429] R13: 00007fb564db6128 R14: 00007fb564db6090 R15: 00007ffe8b490398
[  990.655445][T17429]  </TASK>
[  991.395074][T17434] netlink: 'syz.3.2964': attribute type 6 has an invalid length.
[  992.054441][T17442] netlink: 'syz.2.2965': attribute type 28 has an invalid length.
[  992.255167][T17443] netlink: 'syz.0.2966': attribute type 6 has an invalid length.
[  992.356218][T17442] netlink: 'syz.2.2965': attribute type 1 has an invalid length.
[  993.006315][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  993.012711][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  994.121039][T17473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2976'.
[  994.734626][ T5927] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[  995.193650][ T5927] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a
[  995.202742][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  995.224722][ T5927] usb 2-1: config 0 descriptor??
[  995.302621][T17483] netlink: 'syz.4.2978': attribute type 6 has an invalid length.
[  995.396809][ T5927] gspca_main: sn9c2028-2.14.0 probing 0c45:8001
[  995.468395][T17483] FAULT_INJECTION: forcing a failure.
[  995.468395][T17483] name failslab, interval 1, probability 0, space 0, times 0
[  995.481341][T17483] CPU: 0 UID: 0 PID: 17483 Comm: syz.4.2978 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  995.481381][T17483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  995.481388][T17483] Call Trace:
[  995.481394][T17483]  <TASK>
[  995.481400][T17483]  dump_stack_lvl+0x189/0x250
[  995.481417][T17483]  ? lockdep_hardirqs_on+0x9c/0x150
[  995.481430][T17483]  ? __pfx_dump_stack_lvl+0x10/0x10
[  995.481442][T17483]  ? __pfx__printk+0x10/0x10
[  995.481462][T17483]  should_fail_ex+0x414/0x560
[  995.481476][T17483]  should_failslab+0xa8/0x100
[  995.481490][T17483]  __kmalloc_cache_noprof+0x70/0x3d0
[  995.481501][T17483]  ? resv_map_alloc+0x88/0x2c0
[  995.481518][T17483]  resv_map_alloc+0x88/0x2c0
[  995.481534][T17483]  hugetlbfs_get_inode+0x68/0x660
[  995.481550][T17483]  ? irqentry_exit+0x74/0x90
[  995.481561][T17483]  ? lockdep_hardirqs_on+0x9c/0x150
[  995.481573][T17483]  hugetlb_file_setup+0x21d/0x630
[  995.481589][T17483]  ksys_mmap_pgoff+0x22f/0x760
[  995.481603][T17483]  do_syscall_64+0xfa/0x3b0
[  995.481619][T17483]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  995.481630][T17483]  ? asm_sysvec_call_function_single+0x1a/0x20
[  995.481641][T17483]  ? clear_bhb_loop+0x60/0xb0
[  995.481653][T17483]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  995.481664][T17483] RIP: 0033:0x7fec59f8ebe9
[  995.481675][T17483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  995.481684][T17483] RSP: 002b:00007fec5ae0e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  995.481696][T17483] RAX: ffffffffffffffda RBX: 00007fec5a1b6090 RCX: 00007fec59f8ebe9
[  995.481704][T17483] RDX: 0000000003000009 RSI: 0000000000800000 RDI: 0000200000800000
[  995.481712][T17483] RBP: 00007fec5ae0e090 R08: ffffffffffffffff R09: 0000000000000000
[  995.481719][T17483] R10: 0000000000046031 R11: 0000000000000246 R12: 0000000000000001
[  995.481726][T17483] R13: 00007fec5a1b6128 R14: 00007fec5a1b6090 R15: 00007fff43364718
[  995.481742][T17483]  </TASK>
[  995.821245][ T5927] gspca_sn9c2028: read1 error -32
[  995.966763][ T5927] gspca_sn9c2028: read1 error -32
[  996.135047][T17488] netlink: 'syz.2.2979': attribute type 6 has an invalid length.
[  996.823573][T10638] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[  996.975776][T10638] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  996.992432][T10638] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  997.013706][T10638] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00
[  997.024084][T10638] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  997.049482][T10638] usb 4-1: config 0 descriptor??
[  997.079175][T17485] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2977'.
[  997.263984][ T5846] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  997.403673][ T5846] usb 5-1: device descriptor read/64, error -71
[  997.621353][ T7111] usb 2-1: USB disconnect, device number 116
[  997.644072][ T5846] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  997.783726][ T5846] usb 5-1: device descriptor read/64, error -71
[  998.524018][ T5846] usb usb5-port1: attempt power cycle
[  999.412198][T17526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2990'.
[  999.554478][ T5846] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  999.595200][ T5846] usb 5-1: device descriptor read/8, error -71
[  999.833883][ T5846] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  999.927539][ T5846] usb 5-1: device descriptor read/8, error -71
[ 1000.085540][ T5846] usb usb5-port1: unable to enumerate USB device
[ 1001.290905][T10638] usbhid 4-1:0.0: can't add hid device: -71
[ 1001.412389][T17545] netlink: 'syz.4.2995': attribute type 1 has an invalid length.
[ 1001.473741][T10638] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 1001.497273][T10638] usb 4-1: USB disconnect, device number 94
[ 1002.025482][T17551] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2998'.
[ 1002.080332][T17555] ip_vti0: Master is either lo or non-ether device
[ 1002.573945][T10638] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[ 1002.742604][T10638] usb 4-1: Using ep0 maxpacket: 16
[ 1002.767209][T10638] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[ 1002.803337][T17563] netlink: 'syz.0.3001': attribute type 10 has an invalid length.
[ 1002.815499][T17563] team0: Device hsr_slave_0 failed to register rx_handler
[ 1003.046422][T10638] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1003.521920][T10638] usb 4-1: Product: syz
[ 1003.553645][T10638] usb 4-1: Manufacturer: syz
[ 1003.582891][T10638] usb 4-1: SerialNumber: syz
[ 1003.617774][T10638] usb 4-1: config 0 descriptor??
[ 1003.638003][T10638] ums-onetouch 4-1:0.0: USB Mass Storage device detected
[ 1007.995063][ T5927] usb 4-1: USB disconnect, device number 95
[ 1008.158058][T17586] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3007'.
[ 1008.357038][T17586] mkiss: ax0: crc mode is auto.
[ 1008.372278][T17591] netlink: 264 bytes leftover after parsing attributes in process `syz.3.3008'.
[ 1008.416594][T17591] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1008.499711][T17594] Invalid source name
[ 1008.504183][T17594] UBIFS error (pid: 17594): cannot open "./cgroup", error -22
[ 1008.524201][   T24] usb 2-1: new high-speed USB device number 117 using dummy_hcd
[ 1008.693998][   T24] usb 2-1: Using ep0 maxpacket: 8
[ 1008.808687][   T24] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2
[ 1008.868261][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1008.882628][   T24] usb 2-1: Product: syz
[ 1008.905924][   T24] usb 2-1: Manufacturer: syz
[ 1008.922796][   T24] usb 2-1: SerialNumber: syz
[ 1008.982884][   T24] usb 2-1: config 0 descriptor??
[ 1010.346763][T17607] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3012'.
[ 1012.016503][   T24] gspca_main: sunplus-2.14.0 probing 04a5:3003
[ 1012.037207][   T24] gspca_sunplus: reg_w_riv err -71
[ 1012.042539][   T24] sunplus 2-1:0.0: probe with driver sunplus failed with error -71
[ 1012.337286][   T24] usb 2-1: USB disconnect, device number 117
[ 1013.657579][T17649] usb usb1: check_ctrlrecip: process 17649 (syz.2.3023) requesting ep 01 but needs 81
[ 1013.667220][T17649] usb usb1: usbfs: process 17649 (syz.2.3023) did not claim interface 0 before use
[ 1014.076149][   T30] audit: type=1326 audit(1755907543.898:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17660 comm="syz.3.3028" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5cbe98ebe9 code=0x0
[ 1014.097285][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1014.258964][   T30] audit: type=1326 audit(1755907543.898:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17660 comm="syz.3.3028" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5cbe98ebe9 code=0x0
[ 1014.434387][T17672] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3027'.
[ 1015.883666][ T5846] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[ 1016.050539][T17689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3035'.
[ 1016.092300][ T5846] usb 2-1: config 0 has an invalid interface number: 90 but max is 0
[ 1016.112524][ T5846] usb 2-1: config 0 has no interface number 0
[ 1016.145522][ T5846] usb 2-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=de.7f
[ 1016.166121][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1016.193632][ T5846] usb 2-1: Product: syz
[ 1016.197893][ T5846] usb 2-1: Manufacturer: syz
[ 1016.202507][ T5846] usb 2-1: SerialNumber: syz
[ 1016.252456][ T5846] usb 2-1: config 0 descriptor??
[ 1016.474686][   T30] audit: type=1326 audit(1755907546.298:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17677 comm="syz.1.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb564b8ebe9 code=0x7ffc0000
[ 1016.476673][T17679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1016.514138][T17679] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1016.577233][   T30] audit: type=1326 audit(1755907546.298:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17677 comm="syz.1.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb564b8d550 code=0x7ffc0000
[ 1016.610346][T17708] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[ 1016.633563][ T5924] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[ 1016.751324][   T30] audit: type=1326 audit(1755907546.298:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17677 comm="syz.1.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb564b8e7eb code=0x7ffc0000
[ 1017.053675][ T5924] usb 1-1: Using ep0 maxpacket: 32
[ 1017.076494][ T5924] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 1017.093976][   T30] audit: type=1326 audit(1755907546.298:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17677 comm="syz.1.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb564b8e7eb code=0x7ffc0000
[ 1017.094750][T17679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1017.115494][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1017.142249][T17712] vimc link validate: Scaler:src:16x2160 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[ 1017.160076][   T30] audit: type=1326 audit(1755907546.448:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17677 comm="syz.1.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb564b8ebe9 code=0x7ffc0000
[ 1017.181681][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1017.189211][ T5924] usb 1-1: config 0 has an invalid descriptor of length 9, skipping remainder of the config
[ 1017.215062][ T5924] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[ 1017.237732][T17679] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1017.240799][   T30] audit: type=1326 audit(1755907546.448:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17677 comm="syz.1.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb564b8ebe9 code=0x7ffc0000
[ 1017.267493][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1017.290397][ T5924] usb 1-1: New USB device found, idVendor=413c, idProduct=81a4, bcdDevice=ae.9f
[ 1017.303644][ T5924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1017.319082][ T5924] usb 1-1: Product: syz
[ 1017.323374][ T5924] usb 1-1: Manufacturer: syz
[ 1017.328209][ T5924] usb 1-1: SerialNumber: syz
[ 1017.351495][ T5924] usb 1-1: config 0 descriptor??
[ 1017.383449][ T5846] cdc_subset 2-1:0.90: probe with driver cdc_subset failed with error -22
[ 1017.403197][   T30] audit: type=1326 audit(1755907546.698:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17677 comm="syz.1.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb564b8d84a code=0x7ffc0000
[ 1017.421101][T17715] lo speed is unknown, defaulting to 1000
[ 1017.488697][   T30] audit: type=1326 audit(1755907546.698:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17677 comm="syz.1.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb564bc14a5 code=0x7ffc0000
[ 1017.497273][T17715] lo speed is unknown, defaulting to 1000
[ 1017.585553][T17715] lo speed is unknown, defaulting to 1000
[ 1017.661383][ T5846] usb 2-1: USB disconnect, device number 118
[ 1017.762724][ T5924] usb 1-1: USB disconnect, device number 92
[ 1018.218207][T17733] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3042'.
[ 1018.923937][T17734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3043'.
[ 1019.316379][T17736] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[ 1019.362141][T17738] dlm: no locking on control device
[ 1019.385766][T17747] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3044'.
[ 1020.435912][T17753] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3048'.
[ 1021.967782][T17772] syz_tun: entered allmulticast mode
[ 1021.986637][T17771] syz_tun: left allmulticast mode
[ 1022.505901][T17781] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3054'.
[ 1022.938894][ T5927] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[ 1022.995719][T17784] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3056'.
[ 1023.321276][ T5927] usb 2-1: Using ep0 maxpacket: 32
[ 1023.328878][ T5927] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[ 1023.344990][ T5927] usb 2-1: config 0 has no interface number 0
[ 1023.366892][ T5927] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1023.376762][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1023.385433][ T5927] usb 2-1: Product: syz
[ 1023.389665][ T5927] usb 2-1: Manufacturer: syz
[ 1023.397792][ T5927] usb 2-1: SerialNumber: syz
[ 1023.415552][ T5927] usb 2-1: config 0 descriptor??
[ 1023.432948][ T5927] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1023.817675][ T5927] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1023.832503][ T5927] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1024.370910][T17807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3059'.
[ 1024.485335][T17806] sch_tbf: burst 19869 is lower than device lo mtu (65550) !
[ 1024.548118][T17782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1024.662188][T17782] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1024.781362][T17806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3060'.
[ 1024.815856][T17806] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1024.824871][T17806] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1024.952560][T17782] lo speed is unknown, defaulting to 1000
[ 1024.998873][T17782] lo speed is unknown, defaulting to 1000
[ 1025.036609][T17782] lo speed is unknown, defaulting to 1000
[ 1025.067964][T17812] netlink: 'syz.0.3061': attribute type 1 has an invalid length.
[ 1025.253639][   T24] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[ 1025.418033][   T24] usb 5-1: Using ep0 maxpacket: 32
[ 1025.477027][   T24] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[ 1025.520602][   T24] usb 5-1: config 0 has no interface number 0
[ 1025.540886][   T24] usb 5-1: config 0 interface 132 has no altsetting 0
[ 1025.740532][   T24] usb 5-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=39.75
[ 1025.887129][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1025.895364][   T24] usb 5-1: Product: syz
[ 1025.901960][T17819] lo speed is unknown, defaulting to 1000
[ 1025.928643][   T24] usb 5-1: Manufacturer: syz
[ 1025.933327][   T24] usb 5-1: SerialNumber: syz
[ 1026.011572][   T24] usb 5-1: config 0 descriptor??
[ 1026.108392][T17819] lo speed is unknown, defaulting to 1000
[ 1026.132303][T17819] lo speed is unknown, defaulting to 1000
[ 1026.246622][   T24] cdc_subset 5-1:0.132: probe with driver cdc_subset failed with error -71
[ 1026.333035][   T24] usb 5-1: USB disconnect, device number 42
[ 1026.347192][ T5927] usb 3-1: new high-speed USB device number 125 using dummy_hcd
[ 1026.714554][ T5927] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[ 1026.867601][ T5927] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[ 1026.887159][ T5927] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1026.980862][ T5927] usb 3-1: config 220 has no interface number 2
[ 1027.014942][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1027.015442][   T24] usb 2-1: USB disconnect, device number 119
[ 1027.028541][ T5927] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1027.078347][ T5927] usb 3-1: config 220 interface 0 has no altsetting 0
[ 1027.084488][   T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1027.096486][ T5927] usb 3-1: config 220 interface 76 has no altsetting 0
[ 1027.121132][ T5927] usb 3-1: config 220 interface 1 has no altsetting 0
[ 1027.131200][ T5927] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1027.143909][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1027.149327][   T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1027.159181][ T5927] usb 3-1: Product: syz
[ 1027.177894][ T5927] usb 3-1: Manufacturer: syz
[ 1027.183610][ T5846] usb 4-1: new high-speed USB device number 96 using dummy_hcd
[ 1027.186215][ T5927] usb 3-1: SerialNumber: syz
[ 1027.192928][   T24] quatech2 2-1:0.51: device disconnected
[ 1027.303965][T10638] usb 5-1: new full-speed USB device number 43 using dummy_hcd
[ 1027.402712][ T5846] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1027.483189][T10638] usb 5-1: config 0 has no interfaces?
[ 1027.490670][T10638] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1027.571842][T10638] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1027.580403][ T5846] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1027.585892][ T5846] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00
[ 1027.730919][T10638] usb 5-1: config 0 descriptor??
[ 1027.758361][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1027.786052][ T5846] usb 4-1: Product: syz
[ 1027.802377][ T5846] usb 4-1: Manufacturer: syz
[ 1027.803773][ T5927] usb 3-1: selecting invalid altsetting 0
[ 1027.822176][ T5927] usb 3-1: Found UVC 7.01 device syz (8086:0b07)
[ 1027.830177][ T5927] usb 3-1: No valid video chain found.
[ 1027.872717][ T5846] usb 4-1: SerialNumber: syz
[ 1027.894894][ T5846] usb 4-1: config 0 descriptor??
[ 1027.939056][ T5927] usb 3-1: selecting invalid altsetting 0
[ 1027.952596][ T5927] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[ 1027.971582][T17832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1028.039259][T17832] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1028.058984][ T5927] usb 3-1: USB disconnect, device number 125
[ 1028.451328][T17852] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[ 1028.611691][ T5924] usb 4-1: USB disconnect, device number 96
[ 1028.815417][T17860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3071'.
[ 1030.141766][ T5924] usb 5-1: USB disconnect, device number 43
[ 1030.484004][   T51] Bluetooth: hci0: command tx timeout
[ 1030.535733][T17876] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[ 1030.546285][   T49] Bluetooth: hci5: Frame reassembly failed (-84)
[ 1032.025908][T17892] netlink: 'syz.4.3081': attribute type 6 has an invalid length.
[ 1032.416519][T17897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3082'.
[ 1032.564049][   T51] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1033.419768][T17905] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3084'.
[ 1034.561334][T17912] erofs (device loop0): cannot find valid erofs superblock
[ 1034.769978][T17911] lo speed is unknown, defaulting to 1000
[ 1035.218014][T17910] lo speed is unknown, defaulting to 1000
[ 1035.218014][T17911] lo speed is unknown, defaulting to 1000
[ 1035.219628][T17911] lo speed is unknown, defaulting to 1000
[ 1035.316670][T17910] lo speed is unknown, defaulting to 1000
[ 1035.433665][T17910] lo speed is unknown, defaulting to 1000
[ 1036.267355][T17928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3093'.
[ 1036.368959][T17937] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3094'.
[ 1036.513667][ T5927] usb 3-1: new high-speed USB device number 126 using dummy_hcd
[ 1036.603728][ T5924] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[ 1036.685771][ T5927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1036.703589][ T5927] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1036.741085][ T5927] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00
[ 1036.763686][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1036.793060][ T5927] usb 3-1: Product: syz
[ 1036.798245][ T5924] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1036.831959][ T5927] usb 3-1: Manufacturer: syz
[ 1036.836866][ T5924] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1036.851228][ T5927] usb 3-1: SerialNumber: syz
[ 1036.860754][ T5924] usb 5-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00
[ 1037.428314][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1037.444472][ T5927] usb 3-1: config 0 descriptor??
[ 1037.463585][ T5924] usb 5-1: Product: syz
[ 1037.467877][ T5924] usb 5-1: Manufacturer: syz
[ 1037.472511][ T5924] usb 5-1: SerialNumber: syz
[ 1037.593761][ T5924] usb 5-1: config 0 descriptor??
[ 1037.623729][ T5927] usb 3-1: can't set config #0, error -71
[ 1037.665104][ T5927] usb 3-1: USB disconnect, device number 126
[ 1037.688790][ T5924] usb 5-1: can't set config #0, error -71
[ 1037.729154][ T5924] usb 5-1: USB disconnect, device number 44
[ 1038.635976][ T5924] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[ 1038.758754][T17970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3104'.
[ 1038.790246][ T5924] usb 5-1: device descriptor read/64, error -71
[ 1039.253735][ T5924] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[ 1039.409663][ T5924] usb 5-1: device descriptor read/64, error -71
[ 1039.617902][ T5924] usb usb5-port1: attempt power cycle
[ 1039.951386][T17981] lo speed is unknown, defaulting to 1000
[ 1039.992928][T17981] lo speed is unknown, defaulting to 1000
[ 1040.008198][ T5924] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[ 1040.034380][ T5924] usb 5-1: device descriptor read/8, error -71
[ 1040.035289][T17981] lo speed is unknown, defaulting to 1000
[ 1040.246876][T10638] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[ 1040.293862][ T5924] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[ 1040.328579][ T5924] usb 5-1: device descriptor read/8, error -71
[ 1040.365780][T17989] xt_l2tp: missing protocol rule (udp|l2tpip)
[ 1040.418231][T10638] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[ 1040.447915][ T5924] usb usb5-port1: unable to enumerate USB device
[ 1040.463553][T10638] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[ 1040.482984][T10638] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1040.504596][T10638] usb 3-1: config 0 descriptor??
[ 1040.737377][T17984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1040.757950][T17984] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1040.776425][T10638] usb 3-1: USB disconnect, device number 127
[ 1043.402087][T18012] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3115'.
[ 1044.285947][T18017] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3117'.
[ 1044.296689][T18017] netlink: 'syz.3.3117': attribute type 1 has an invalid length.
[ 1044.304469][T18017] netlink: 'syz.3.3117': attribute type 2 has an invalid length.
[ 1044.312177][T18017] netlink: 'syz.3.3117': attribute type 1 has an invalid length.
[ 1044.319935][T18017] netlink: 1156 bytes leftover after parsing attributes in process `syz.3.3117'.
[ 1044.498840][T18026] netlink: 'syz.2.3119': attribute type 6 has an invalid length.
[ 1044.943444][T18029] lo speed is unknown, defaulting to 1000
[ 1044.952533][T18035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3121'.
[ 1045.345220][T18029] lo speed is unknown, defaulting to 1000
[ 1045.410651][T18029] lo speed is unknown, defaulting to 1000
[ 1045.543568][T10638] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[ 1046.273963][T10638] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1046.398072][T10638] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1046.437170][T10638] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 1046.491596][T10638] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1046.531501][T18048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3125'.
[ 1046.553074][T10638] usb 5-1: config 0 descriptor??
[ 1046.571586][T18048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3125'.
[ 1046.729241][T18053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3125'.
[ 1047.121359][T10638] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0
[ 1047.161881][T10638] cp2112 0003:10C4:EA90.0021: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[ 1047.404180][T10638] cp2112 0003:10C4:EA90.0021: error requesting version
[ 1047.434548][T10638] cp2112 0003:10C4:EA90.0021: probe with driver cp2112 failed with error -71
[ 1047.460265][T10638] usb 5-1: USB disconnect, device number 49
[ 1047.643396][T18062] fido_id[18062]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[ 1047.714857][   T30] kauditd_printk_skb: 44 callbacks suppressed
[ 1047.714876][   T30] audit: type=1804 audit(1755907577.528:949): pid=18069 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.3129" name="/newroot/71/file0" dev="tmpfs" ino=398 res=1 errno=0
[ 1048.025661][T18071] kernel read not supported for file / 
�7���âW)�s���!Q���fs�l{T�r�)r��O���2:"��T+͟v|�ղDvc���֠�6�x�c: (pid: 18071 comm: syz.0.3129)
[ 1048.049477][   T30] audit: type=1800 audit(1755907577.858:950): pid=18071 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.3129" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=64942 res=0 errno=0
[ 1048.483820][   T51] Bluetooth: hci5: command 0x1003 tx timeout
[ 1048.489074][T16455] Bluetooth: hci5: Opcode 0x1003 failed: -110
[ 1049.129662][T18087] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1049.243616][   T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 1049.285427][T18087] bond0: (slave ip6tnl0): The slave device specified does not support setting the MAC address
[ 1049.387503][T18087] bond0: (slave ip6tnl0): Error -95 calling set_mac_address
[ 1050.103620][T18097] lo speed is unknown, defaulting to 1000
[ 1050.163917][T18097] lo speed is unknown, defaulting to 1000
[ 1050.205624][T18097] lo speed is unknown, defaulting to 1000
[ 1050.323750][   T24] usb 3-1: device descriptor read/64, error -71
[ 1050.564509][ T8026] bond0: (slave syz_tun): Releasing backup interface
[ 1050.573977][   T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 1050.744495][   T24] usb 3-1: Using ep0 maxpacket: 16
[ 1050.763794][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1050.803619][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1050.821239][   T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1050.840381][   T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1050.850880][   T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1050.861992][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1050.872792][   T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1050.976753][   T24] usb 3-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00
[ 1051.009482][   T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1051.020649][   T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 1051.030336][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1051.100309][   T24] usb 3-1: config 0 descriptor??
[ 1051.363023][   T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1051.410879][   T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 1051.487750][T18101] lo speed is unknown, defaulting to 1000
[ 1051.626392][   T24] input: HID 0458:5012 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5012.0022/input/input41
[ 1051.692020][   T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1051.725969][   T30] audit: type=1804 audit(1755907581.548:951): pid=18110 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.3141" name="/newroot/118/file0" dev="tmpfs" ino=657 res=1 errno=0
[ 1051.750588][   T24] input: HID 0458:5012 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5012.0022/input/input42
[ 1051.756302][   T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 1051.838137][T18095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1051.856915][   T30] audit: type=1804 audit(1755907581.638:952): pid=18111 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.3141" name="/newroot/118/file0" dev="tmpfs" ino=657 res=1 errno=0
[ 1051.895513][T18095] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1051.910582][T18101] lo speed is unknown, defaulting to 1000
[ 1051.959300][T18101] lo speed is unknown, defaulting to 1000
[ 1052.033340][   T24] kye 0003:0458:5012.0022: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.2-1/input0
[ 1052.128461][   T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1052.162087][   T24] usb 3-1: USB disconnect, device number 3
[ 1052.203648][   T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[ 1052.539937][T18119] fido_id[18119]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[ 1052.963735][T16455] Bluetooth: hci4: command tx timeout
[ 1053.677486][T18101] chnl_net:caif_netlink_parms(): no params data found
[ 1053.763867][   T49] vlan3: left allmulticast mode
[ 1054.291762][   T49] dummy0: left allmulticast mode
[ 1054.309637][   T49] vlan3: left promiscuous mode
[ 1054.310003][T18140] fuse: Unknown parameter '	'
[ 1054.310007][T18139] fuse: Unknown parameter '	'
[ 1054.328475][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.335579][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.360700][   T49] dummy0: left promiscuous mode
[ 1054.387294][   T49] bridge0: port 3(vlan3) entered disabled state
[ 1054.402168][   T49] bridge_slave_1: left allmulticast mode
[ 1054.411115][   T49] bridge_slave_1: left promiscuous mode
[ 1054.419674][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1054.428811][   T49] bridge_slave_0: left allmulticast mode
[ 1054.435012][   T49] bridge_slave_0: left promiscuous mode
[ 1054.440868][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1054.854461][T18146] fuse: Unknown parameter '0x000000000000000800000000000000000000'
[ 1055.091180][   T51] Bluetooth: hci4: command tx timeout
[ 1055.205978][T18149] orangefs_devreq_open: device cannot be opened in blocking mode
[ 1055.584127][   T49] bond2 (unregistering): (slave gretap1): Releasing active interface
[ 1056.016400][   T49] team0: Port device bridge1 removed
[ 1056.428897][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[ 1057.172610][T18166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3154'.
[ 1057.183796][T16455] Bluetooth: hci4: command tx timeout
[ 1057.669719][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1057.830217][   T49] bond_slave_0: left promiscuous mode
[ 1057.874333][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1057.889158][   T49] bond_slave_1: left promiscuous mode
[ 1057.898759][   T49] bond0 (unregistering): Released all slaves
[ 1058.226575][   T49] bond1 (unregistering): Released all slaves
[ 1058.306005][T18172] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3155'.
[ 1058.761384][ T7111] usb 2-1: new full-speed USB device number 120 using dummy_hcd
[ 1059.031074][   T49] bond2 (unregistering): Released all slaves
[ 1059.063137][   T49] bond3 (unregistering): (slave veth3): Releasing active interface
[ 1059.073595][   T49] bond3 (unregistering): Released all slaves
[ 1059.076550][ T7111] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 1059.203576][T16455] Bluetooth: hci4: command tx timeout
[ 1059.261452][ T7111] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[ 1059.396704][ T7111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1059.414733][ T7111] usb 2-1: Product: syz
[ 1059.424020][ T7111] usb 2-1: Manufacturer: syz
[ 1059.434491][ T7111] usb 2-1: SerialNumber: syz
[ 1059.482465][T18152] lo speed is unknown, defaulting to 1000
[ 1059.528679][ T7111] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[ 1059.636513][T18152] lo speed is unknown, defaulting to 1000
[ 1059.692587][T18152] lo speed is unknown, defaulting to 1000
[ 1059.699881][   T49] : left promiscuous mode
[ 1059.802930][T18101] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1059.812347][T18101] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1059.873784][T18101] bridge_slave_0: entered allmulticast mode
[ 1059.886477][T18101] bridge_slave_0: entered promiscuous mode
[ 1059.905701][T18101] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1059.915070][T18101] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1059.924991][T18101] bridge_slave_1: entered allmulticast mode
[ 1059.954645][T18101] bridge_slave_1: entered promiscuous mode
[ 1060.026421][   T49] : left promiscuous mode
[ 1060.154357][ T7111] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[ 1060.207680][ T7111] usb 2-1: USB disconnect, device number 120
[ 1060.334062][   T49] tipc: Left network mode
[ 1060.458138][T18101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1060.705307][T18101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1060.775611][T18190] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3160'.
[ 1065.403419][T18101] team0: Port device team_slave_0 added
[ 1065.485792][T18101] team0: Port device team_slave_1 added
[ 1065.721318][T18209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3165'.
[ 1066.597369][   T49] hsr_slave_0: left promiscuous mode
[ 1066.619240][   T49] hsr_slave_1: left promiscuous mode
[ 1066.639200][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1066.658599][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1066.692849][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1066.718173][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1066.848127][   T49] veth1_vlan: left allmulticast mode
[ 1066.853675][   T49] veth1_vlan: left promiscuous mode
[ 1066.882554][   T49] veth0_vlan: left promiscuous mode
[ 1067.264541][   T49] pim6reg527 (unregistering): left allmulticast mode
[ 1067.854390][   T49] team0 (unregistering): Port device team_slave_1 removed
[ 1067.925304][   T49] team0 (unregistering): Port device team_slave_0 removed
[ 1068.508991][T18101] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1068.523591][T18101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1068.550003][T18101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1068.574958][T18214] veth3: entered promiscuous mode
[ 1068.580478][T18218] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1068.596769][T18218] batadv_slave_0: entered promiscuous mode
[ 1068.649532][   T43] lo speed is unknown, defaulting to 1000
[ 1068.680395][T18101] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1068.693726][   T43] infiniband 3yz0: ib_query_port failed (-19)
[ 1068.701636][T18101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1068.787197][T18101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1068.855204][T18230] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3172'.
[ 1069.444822][T18101] hsr_slave_0: entered promiscuous mode
[ 1069.484981][T18101] hsr_slave_1: entered promiscuous mode
[ 1069.511932][T18101] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1069.633513][T18101] Cannot create hsr debugfs directory
[ 1070.173952][   T49] IPVS: stop unused estimator thread 0...
[ 1070.748714][T18245] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3176'.
[ 1071.921975][   T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1071.939631][   T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1071.962120][   T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1071.977602][   T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1071.988447][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1072.063739][ T7111] usb 2-1: new high-speed USB device number 121 using dummy_hcd
[ 1072.155862][T18268] lo speed is unknown, defaulting to 1000
[ 1072.166768][T18268] lo speed is unknown, defaulting to 1000
[ 1072.223607][ T7111] usb 2-1: Using ep0 maxpacket: 8
[ 1072.230422][ T7111] usb 2-1: config 2 has an invalid interface number: 21 but max is 0
[ 1072.239067][ T7111] usb 2-1: config 2 has no interface number 0
[ 1072.245572][ T7111] usb 2-1: config 2 interface 21 has no altsetting 0
[ 1072.257726][ T7111] usb 2-1: New USB device found, idVendor=061d, idProduct=c140, bcdDevice=31.1e
[ 1072.277940][T18101] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1072.286832][ T7111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1072.314416][ T7111] usb 2-1: Product: syz
[ 1072.318642][ T7111] usb 2-1: Manufacturer: syz
[ 1072.323259][ T7111] usb 2-1: SerialNumber: syz
[ 1072.338846][T18101] 8021q: adding VLAN 0 to HW filter on device team0
[ 1072.452061][T14431] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1072.459366][T14431] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1072.552366][T14435] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1072.559601][T14435] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1072.587478][ T7111] quatech2 2-1:2.21: Quatech 2nd gen USB to Serial Driver converter detected
[ 1072.617370][ T7111] usb 2-1: qt2_attach - failed to power on unit: -71
[ 1072.627202][ T7111] quatech2 2-1:2.21: probe with driver quatech2 failed with error -71
[ 1072.639829][ T7111] usb 2-1: USB disconnect, device number 121
[ 1072.732490][T18282] netlink: 'syz.0.3183': attribute type 1 has an invalid length.
[ 1072.738411][T18101] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1072.785251][T18268] chnl_net:caif_netlink_parms(): no params data found
[ 1073.036179][T18268] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1073.048582][T18268] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1073.058605][T18268] bridge_slave_0: entered allmulticast mode
[ 1073.073238][T18268] bridge_slave_0: entered promiscuous mode
[ 1073.082955][T18268] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1073.095553][T18268] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1073.107578][T18268] bridge_slave_1: entered allmulticast mode
[ 1073.119392][T18268] bridge_slave_1: entered promiscuous mode
[ 1073.236883][T18268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1073.251849][T18294] netlink: 'syz.2.3185': attribute type 41 has an invalid length.
[ 1073.280338][T18268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1073.297871][T18295] 
[ 1073.300241][T18295] ======================================================
[ 1073.307254][T18295] WARNING: possible circular locking dependency detected
[ 1073.314273][T18295] 6.16.0-syzkaller #0 Not tainted
[ 1073.319287][T18295] ------------------------------------------------------
[ 1073.326298][T18295] syz.2.3185/18295 is trying to acquire lock:
[ 1073.332357][T18295] ffff8880259ba188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0
[ 1073.343342][T18295] 
[ 1073.343342][T18295] but task is already holding lock:
[ 1073.350694][T18295] ffff8880259ba230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xeb0
[ 1073.359576][T18295] 
[ 1073.359576][T18295] which lock already depends on the new lock.
[ 1073.359576][T18295] 
[ 1073.369988][T18295] 
[ 1073.369988][T18295] the existing dependency chain (in reverse order) is:
[ 1073.379003][T18295] 
[ 1073.379003][T18295] -> #2 (&nbd->config_lock){+.+.}-{4:4}:
[ 1073.386841][T18295]        lock_acquire+0x120/0x360
[ 1073.391889][T18295]        __mutex_lock+0x182/0xe80
[ 1073.396933][T18295]        refcount_dec_and_mutex_lock+0x30/0xa0
[ 1073.403098][T18295]        nbd_config_put+0x2c/0x790
[ 1073.408212][T18295]        nbd_release+0xfe/0x140
[ 1073.413063][T18295]        bdev_release+0x533/0x650
[ 1073.418087][T18295]        blkdev_release+0x15/0x20
[ 1073.423112][T18295]        __fput+0x449/0xa70
[ 1073.427615][T18295]        fput_close_sync+0x119/0x200
[ 1073.432916][T18295]        __x64_sys_close+0x7f/0x110
[ 1073.438129][T18295]        do_syscall_64+0xfa/0x3b0
[ 1073.443155][T18295]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1073.449567][T18295] 
[ 1073.449567][T18295] -> #1 (&disk->open_mutex){+.+.}-{4:4}:
[ 1073.457390][T18295]        lock_acquire+0x120/0x360
[ 1073.462412][T18295]        __mutex_lock+0x182/0xe80
[ 1073.467431][T18295]        __del_gendisk+0x129/0x9e0
[ 1073.472545][T18295]        del_gendisk+0xe8/0x160
[ 1073.477394][T18295]        nbd_dev_remove_work+0x47/0xe0
[ 1073.482849][T18295]        process_scheduled_works+0xade/0x17b0
[ 1073.488911][T18295]        worker_thread+0x8a0/0xda0
[ 1073.494018][T18295]        kthread+0x70e/0x8a0
[ 1073.498604][T18295]        ret_from_fork+0x3fc/0x770
[ 1073.503709][T18295]        ret_from_fork_asm+0x1a/0x30
[ 1073.508992][T18295] 
[ 1073.508992][T18295] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}:
[ 1073.517422][T18295]        validate_chain+0xb9b/0x2140
[ 1073.522710][T18295]        __lock_acquire+0xab9/0xd20
[ 1073.527904][T18295]        lock_acquire+0x120/0x360
[ 1073.532921][T18295]        down_write+0x96/0x1f0
[ 1073.537686][T18295]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[ 1073.543927][T18295]        nbd_start_device+0x16c/0xac0
[ 1073.549299][T18295]        nbd_ioctl+0x636/0xeb0
[ 1073.554058][T18295]        blkdev_ioctl+0x5a8/0x6d0
[ 1073.559080][T18295]        __se_sys_ioctl+0xfc/0x170
[ 1073.564193][T18295]        do_syscall_64+0xfa/0x3b0
[ 1073.569215][T18295]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1073.575624][T18295] 
[ 1073.575624][T18295] other info that might help us debug this:
[ 1073.575624][T18295] 
[ 1073.585843][T18295] Chain exists of:
[ 1073.585843][T18295]   &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock
[ 1073.585843][T18295] 
[ 1073.600016][T18295]  Possible unsafe locking scenario:
[ 1073.600016][T18295] 
[ 1073.607455][T18295]        CPU0                    CPU1
[ 1073.612816][T18295]        ----                    ----
[ 1073.618176][T18295]   lock(&nbd->config_lock);
[ 1073.622780][T18295]                                lock(&disk->open_mutex);
[ 1073.629899][T18295]                                lock(&nbd->config_lock);
[ 1073.637016][T18295]   lock(&set->update_nr_hwq_lock);
[ 1073.642218][T18295] 
[ 1073.642218][T18295]  *** DEADLOCK ***
[ 1073.642218][T18295] 
[ 1073.650351][T18295] 1 lock held by syz.2.3185/18295:
[ 1073.655451][T18295]  #0: ffff8880259ba230 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xeb0
[ 1073.664774][T18295] 
[ 1073.664774][T18295] stack backtrace:
[ 1073.670656][T18295] CPU: 0 UID: 0 PID: 18295 Comm: syz.2.3185 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[ 1073.670677][T18295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1073.670689][T18295] Call Trace:
[ 1073.670697][T18295]  <TASK>
[ 1073.670707][T18295]  dump_stack_lvl+0x189/0x250
[ 1073.670729][T18295]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1073.670747][T18295]  ? __pfx__printk+0x10/0x10
[ 1073.670769][T18295]  ? print_lock_name+0xde/0x100
[ 1073.670790][T18295]  print_circular_bug+0x2ee/0x310
[ 1073.670811][T18295]  check_noncircular+0x134/0x160
[ 1073.670833][T18295]  validate_chain+0xb9b/0x2140
[ 1073.670851][T18295]  ? trace_sched_exit_tp+0x38/0x120
[ 1073.670875][T18295]  ? __schedule+0x16c8/0x4c90
[ 1073.670898][T18295]  __lock_acquire+0xab9/0xd20
[ 1073.670916][T18295]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[ 1073.670938][T18295]  lock_acquire+0x120/0x360
[ 1073.670952][T18295]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[ 1073.670974][T18295]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 1073.671003][T18295]  down_write+0x96/0x1f0
[ 1073.671022][T18295]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[ 1073.671043][T18295]  ? __pfx_down_write+0x10/0x10
[ 1073.671062][T18295]  ? rcu_is_watching+0x15/0xb0
[ 1073.671080][T18295]  ? __mutex_lock+0xa6d/0xe80
[ 1073.671099][T18295]  blk_mq_update_nr_hw_queues+0x3b/0x14c0
[ 1073.671123][T18295]  ? nbd_ioctl+0x131/0xeb0
[ 1073.671144][T18295]  ? __pfx___mutex_lock+0x10/0x10
[ 1073.671163][T18295]  nbd_start_device+0x16c/0xac0
[ 1073.671184][T18295]  ? security_capable+0x7e/0x2e0
[ 1073.671207][T18295]  nbd_ioctl+0x636/0xeb0
[ 1073.671229][T18295]  ? __pfx_nbd_ioctl+0x10/0x10
[ 1073.671248][T18295]  ? __asan_memset+0x22/0x50
[ 1073.671275][T18295]  ? smack_file_ioctl+0x24a/0x340
[ 1073.671292][T18295]  ? __pfx_smack_file_ioctl+0x10/0x10
[ 1073.671307][T18295]  ? __pfx_nbd_ioctl+0x10/0x10
[ 1073.671328][T18295]  blkdev_ioctl+0x5a8/0x6d0
[ 1073.671348][T18295]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1073.671365][T18295]  ? __fget_files+0x2a/0x420
[ 1073.671384][T18295]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1073.671403][T18295]  ? __pfx_blkdev_ioctl+0x10/0x10
[ 1073.671422][T18295]  __se_sys_ioctl+0xfc/0x170
[ 1073.671446][T18295]  do_syscall_64+0xfa/0x3b0
[ 1073.671464][T18295]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1073.671480][T18295]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1073.671496][T18295]  ? clear_bhb_loop+0x60/0xb0
[ 1073.671515][T18295]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1073.671532][T18295] RIP: 0033:0x7f186158ebe9
[ 1073.671547][T18295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1073.671563][T18295] RSP: 002b:00007f1862411038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1073.671581][T18295] RAX: ffffffffffffffda RBX: 00007f18617b6090 RCX: 00007f186158ebe9
[ 1073.671594][T18295] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000029
[ 1073.671605][T18295] RBP: 00007f1861611e19 R08: 0000000000000000 R09: 0000000000000000
[ 1073.671616][T18295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1073.671626][T18295] R13: 00007f18617b6128 R14: 00007f18617b6090 R15: 00007fffe5b62528
[ 1073.671645][T18295]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1073.991470][T18268] team0: Port device team_slave_0 added
[ 1074.000337][T18268] team0: Port device team_slave_1 added
[ 1074.013652][T18298] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3184'.
[ 1074.083856][   T51] Bluetooth: hci2: command tx timeout
[ 1074.116120][T18295] nbd2: detected capacity change from 0 to 4
[ 1074.122429][T18295] block nbd2: shutting down sockets
[ 1074.130543][T14532] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1074.177856][T14532] buffer_io_error: 23 callbacks suppressed
[ 1074.177876][T14532] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 1074.246728][T15312] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1074.257395][T15312] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 1074.265467][T14532] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1074.274639][T14532] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 1074.282529][T14532] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1074.291614][T14532] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 1074.315170][T14532] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1074.343548][T14532] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 1074.353705][T14532] ldm_validate_partition_table(): Disk read failed.
[ 1074.360414][T14532] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1074.371661][T14532] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 1074.379606][T14532] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1074.388760][T14532] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 1074.413692][T14532] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1074.422773][T14532] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 1074.465636][T14532] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1074.493511][T14532] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 1074.501376][T14532] Dev nbd2: unable to read RDB block 0
[ 1074.542611][T14532] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[ 1074.563559][T14532] Buffer I/O error on dev nbd2, logical block 0, async page read
[ 1074.593939][T14532]  nbd2: unable to read partition table
[ 1074.615234][T14532] nbd2: partition table beyond EOD, truncated
[ 1074.642636][T14532] ldm_validate_partition_table(): Disk read failed.
[ 1074.664511][T14532] Dev nbd2: unable to read RDB block 0
[ 1074.681630][T14532]  nbd2: unable to read partition table
[ 1074.690598][T14532] nbd2: partition table beyond EOD, truncated
[ 1074.800095][   T49] bridge_slave_1: left allmulticast mode
[ 1074.806550][   T49] bridge_slave_1: left promiscuous mode
[ 1074.812303][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1074.866319][   T49] bridge_slave_0: left allmulticast mode
[ 1074.872038][   T49] bridge_slave_0: left promiscuous mode
[ 1074.891061][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1075.008476][   T49] dvmrp1 (unregistering): left allmulticast mode
[ 1075.050999][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1075.065277][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1075.075553][   T49] bond0 (unregistering): Released all slaves
[ 1075.373234][   T49] hsr_slave_0: left promiscuous mode
[ 1075.379394][   T49] hsr_slave_1: left promiscuous mode
[ 1075.385327][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1075.392742][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1075.401522][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1075.408971][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1075.418494][   T49] veth1_macvtap: left promiscuous mode
[ 1075.424093][   T49] veth0_macvtap: left promiscuous mode
[ 1075.429636][   T49] veth1_vlan: left promiscuous mode
[ 1075.434927][   T49] veth0_vlan: left promiscuous mode
[ 1075.572442][   T49] team0 (unregistering): Port device team_slave_1 removed
[ 1075.585340][   T49] team0 (unregistering): Port device team_slave_0 removed
[ 1075.948185][   T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1076.007305][   T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1076.047389][   T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1076.106814][   T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1076.203966][   T49] bridge0: port 3(batadv0) entered disabled state
[ 1076.211353][   T49] bridge_slave_1: left allmulticast mode
[ 1076.218352][   T49] bridge_slave_1: left promiscuous mode
[ 1076.224433][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1076.232343][   T49] bridge_slave_0: left allmulticast mode
[ 1076.238093][   T49] bridge_slave_0: left promiscuous mode
[ 1076.243850][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1076.252658][   T49] bridge_slave_1: left allmulticast mode
[ 1076.258634][   T49] bridge_slave_1: left promiscuous mode
[ 1076.264628][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1076.272921][   T49] bridge_slave_0: left allmulticast mode
[ 1076.278591][   T49] bridge_slave_0: left promiscuous mode
[ 1076.284325][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1076.292940][   T49] bridge_slave_1: left allmulticast mode
[ 1076.298638][   T49] bridge_slave_1: left promiscuous mode
[ 1076.304813][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1076.313071][   T49] bridge_slave_0: left allmulticast mode
[ 1076.319311][   T49] bridge_slave_0: left promiscuous mode
[ 1076.325448][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1076.456395][   T49] dvmrp0 (unregistering): left allmulticast mode
[ 1076.487759][   T49] bond0 (unregistering): (slave geneve0): Releasing backup interface
[ 1076.699863][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1076.709927][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1076.719721][   T49] bond0 (unregistering): (slave team0): Releasing backup interface
[ 1076.729299][   T49] bond0 (unregistering): Released all slaves
[ 1076.848185][   T49] bond1 (unregistering): Released all slaves
[ 1076.965751][   T49] bond2 (unregistering): Released all slaves
[ 1077.036346][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1077.046278][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1077.055636][   T49] bond0 (unregistering): Released all slaves
[ 1077.134158][   T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1077.144644][   T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1077.154577][   T49] bond0 (unregistering): Released all slaves
[ 1077.222408][   T49] tipc: Left network mode
[ 1077.509339][   T49] hsr_slave_0: left promiscuous mode
[ 1077.515857][   T49] hsr_slave_1: left promiscuous mode
[ 1077.521469][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1077.529032][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1077.537135][   T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1077.544924][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1077.555188][   T49] hsr_slave_0: left promiscuous mode
[ 1077.560888][   T49] hsr_slave_1: left promiscuous mode
[ 1077.566606][   T49] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1077.574847][   T49] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1077.586135][   T49] veth1_macvtap: left promiscuous mode
[ 1077.591685][   T49] veth1_vlan: left promiscuous mode
[ 1077.596974][   T49] veth0_vlan: left promiscuous mode
[ 1077.651392][   T49] pim6reg (unregistering): left allmulticast mode
[ 1077.803871][   T49] team_slave_1 (unregistering): left allmulticast mode
[ 1077.812435][   T49] team0 (unregistering): Port device team_slave_1 removed
[ 1077.842951][   T49] team_slave_0 (unregistering): left allmulticast mode
[ 1077.851056][   T49] team0 (unregistering): Port device team_slave_0 removed
[ 1078.081087][   T49] team0 (unregistering): Port device team_slave_1 removed
[ 1078.091984][   T49] team0 (unregistering): Port device team_slave_0 removed
[ 1078.241532][   T49] team0 (unregistering): Port device team_slave_1 removed
[ 1078.281813][   T49] team0 (unregistering): Port device team_slave_0 removed
[ 1078.344206][   T24] lo speed is unknown, defaulting to 1000
[ 1078.349990][   T24] infiniband syz0: ib_query_port failed (-19)
[ 1078.950673][   T49] IPVS: stop unused estimator thread 0...