last executing test programs:

22.033477261s ago: executing program 2 (id=745):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000240), &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e23, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, {0xa, 0x4e24, 0x0, @private2, 0x7}, 0xffffffffffffffff, {[0x6, 0x8, 0x44, 0x2e, 0x2, 0xb5e, 0x2, 0x81]}}, 0x5c)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0xf00, 0x0, 0x2, 0x0, 0x0})
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x1)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
socket(0x10, 0x3, 0x0)
syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
socket$packet(0x11, 0x3, 0x300)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x0, &(0x7f0000002200)=0x1)
r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r8, &(0x7f0000002700)=""/102392, 0x18ff8)
r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0)
ioctl$AUTOFS_IOC_FAIL(r9, 0x4c80, 0x7000000)
syz_usb_connect$cdc_ncm(0x0, 0x80, &(0x7f0000000b40)=ANY=[@ANYBLOB="12011001020000202505a1a440000102030109026e00020107800a0904000001020d00000524060001052400050000000000000000000c0004000e06241a000001062407ff08000c241b0b007f000004786b05090581030004e209020904010000020d0000090401010201000000000000000000750780090503024000650f08"], 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)

12.778286122s ago: executing program 0 (id=761):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80000)
getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, <r3=>r0, {0xee00}}, './file0\x00'})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x7, <r4=>0x0}, 0x8)
r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00', 0x0, 0x10}, 0x18)
r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0x0, 0x0, 0x10}, 0xc)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x4)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/locks\x00', 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{0x1, <r9=>0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)='%pB    \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{0xffffffffffffffff, <r10=>0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%pi6   \x00'}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x1f, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x12f0}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @ldst={0x2, 0x3, 0x6, 0x0, 0x3, 0xffffffffffffffc0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0xc, 0x3, 0x9, 0x80, 0xfffffffffffffffc}]}, &(0x7f0000000180)='GPL\x00', 0x8001, 0x0, 0x0, 0x0, 0x1, '\x00', r2, @fallback=0x37, r3, 0x8, &(0x7f0000000280)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0xf, 0x9, 0xbc}, 0x10, r4, r5, 0x3, &(0x7f0000000600)=[r6, r7, r8, r9, r10, 0xffffffffffffffff], &(0x7f0000000640)=[{0x2, 0x5, 0xb, 0xb}, {0x4, 0x1, 0x10, 0x4}, {0x5, 0x1, 0x4, 0x6}], 0x10, 0x800}, 0x94)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000a40)={&(0x7f0000000740)="eba6305d25a80e527252acc3e0962db3eb04e02f97e30d242d42be02251c9505eb732eb04b9226be9b29b04195d511e25fdfc2cd50569b0e6e95b0b695e3c8d8e44e94e59669a826e7197fd4ae7eb7e5ca70fe3949be0848a31c4ba9f795081d37840361b71bafb1f83634735ae98473affed03943aefbab194ce038ba0ec2f72d598257f2179f0a0a0543b31d10ff68414a7c86233b7630acc0bfc46222b7057b7453fc2fb0b2a3b44580539f5458cfd34f2d5d7ef0635381e65bde0115efa0fac6bba84cb0cdc7ec931eb7", &(0x7f0000000840)=""/224, &(0x7f0000000940)="51713b0d3ed951cfebc058b040349a18b95454b98c775664c327bb58bef30d9825738d2cffcffec8c541cbec9849f27225733a8f22d312a4e6ceed7feecb70986cb9f87bbca68e69b0372f1836fdd301fe77", &(0x7f00000009c0)="6a1e4a95aea41c6bc7dcc801c58a3eda7f71813318312e0126372aa5b9a73a51effaf87cdbfccb637be28e51ff779efad1d03145f54f5f0b67eaceaa64427c553df62105577bb99395eca96cef", 0x7ff, r10, 0x24bf69465eb4439}, 0x38)
ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000a80)=""/181)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000b40)=r4, 0x4)
ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000b80)={0xbd, "8774fa96e483139e0da693e54249d52a96ee3e91b1c64f8168da1f34162227b5c4e5612d41e161e09f58be77f7ec166aa171c9d0e7184c75107eea3b500109cefd8615772589a865166d8fd885fe50ad49630f8c4e931cbf786dff7fb2d91aa0ec42d6b191bf94ace06fa51512e7b2abc0f4d5a154eb145d1a806fc155755e864705327940ff9bdef2fbf5b41d0a61a58ca72d113a170baf3d592cd1ca7cdf0db3d5ef57e36e0d984f2113eb77a886f16c237df5268b7c13f76bcafd41"})
r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000cc0), r1)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r8, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x40, r11, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x9}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x6}]}, 0x40}}, 0x4080)
r12 = openat(r8, &(0x7f0000000dc0)='./file0\x00', 0x10400, 0x0)
r13 = syz_genetlink_get_family_id$gtp(&(0x7f0000000e40), r1)
sendmsg$GTP_CMD_NEWPDP(r12, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x40, r13, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_LINK={0x8, 0x1, r2}, @GTPA_PEER_ADDR6={0x14, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040010}, 0x40800)
ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x80044d17, &(0x7f0000000f40))
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000fc0), r3)
sendmsg$NL80211_CMD_LEAVE_IBSS(r9, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x2100000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x14, r14, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0)
ioctl$SOUND_MIXER_WRITE_RECSRC(r8, 0xc0044dff, &(0x7f00000010c0)=0x3)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000001100), &(0x7f0000001140)=0x30)
r15 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)
ioctl$VHOST_VDPA_SET_CONFIG(r15, 0x4008af74, &(0x7f00000011c0)={0x10, 0xfa, "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"})
socket(0x1a, 0x804, 0xf8)

12.313079549s ago: executing program 0 (id=764):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e0000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0)
timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmmsg$unix(r5, 0x0, 0x0, 0x0)
r6 = fsopen(&(0x7f0000000140)='vfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r7, 0x0, 0xd, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000380)=""/75}, 0x20)
r8 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00')
ftruncate(r8, 0x7fffffffffffffff)

11.050842511s ago: executing program 3 (id=766):
ioctl$TCSETS(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={0x4, 0x0, 0x1003, 0x4, 0x12, "bb40af00008000"})
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000000002044104d7a00000001000109022400010000000009040009010300020009210500000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_TARGET={0x4}]}}]}, 0x38}}, 0x0)
r4 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_G_FREQUENCY(r4, 0xc02c5638, &(0x7f0000000040)={0x0, 0x2, 0x8})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r5=>0x0})
sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newaddrlabel={0x58, 0x48, 0x100, 0x70bd27, 0x25dfdbff, {0xa, 0x0, 0x10, 0x0, r5, 0x495d0e2c}, [@IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0x1}]}, 0x58}}, 0xc000)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x10040, 0x0)
close_range(r6, r2, 0x2)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)

10.765406121s ago: executing program 0 (id=768):
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
userfaultfd(0x1)
socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008094)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/consoles\x00', 0x0, 0x0)
r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x9624, 0x3180, 0x7ffe, 0x195}, &(0x7f0000000180)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r1, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r5, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x3, 0x7)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48)
connect$inet6(r6, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0)
io_pgetevents(0x0, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0)

10.636636666s ago: executing program 2 (id=769):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
shmget$private(0x0, 0x3000, 0x100, &(0x7f00009e7000/0x3000)=nil)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000040)={0x0, 0xfdd0})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
io_uring_enter(0xffffffffffffffff, 0xfd0, 0x4c1, 0x43, 0x0, 0x0)

10.501277911s ago: executing program 4 (id=770):
r0 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x8000}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$NFT_BATCH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000180a010200000000000000001400000008000740000000010900010073797a310000000010010000140a01"], 0x160}, 0x1, 0x0, 0x0, 0x48805}, 0x80840)

9.271794856s ago: executing program 2 (id=771):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup(r1)
ioctl$TIOCSETD(r2, 0x5423, 0x0)
r3 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000100), &(0x7f0000000000)=<r4=>0x0)
syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f00000003c0)=<r5=>0x0, &(0x7f0000000180))
syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
io_uring_enter(r3, 0x48e9, 0x0, 0x0, 0x0, 0x0)
r6 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x13)

8.964933571s ago: executing program 0 (id=773):
socket(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x4a086000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000000)='./file1\x00')
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r3, 0x0)
setpgid(0x0, r3)
mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0)
open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x53)

8.314332161s ago: executing program 2 (id=774):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xb7}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000070000000000000000000085000000230000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
futex(0x0, 0x85, 0x2, 0x0, 0x0, 0x7fffff01)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x28)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000280)="e0b9d5a2a00a3c6ffda2e3861121", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x1c, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x48}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}, @TCA_ROUTE4_CLASSID={0xffffffffffffff3f, 0x1, {0x7, 0x2}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]})
setresgid(0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x3d, &(0x7f0000001040)=ANY=[@ANYBLOB="120100004e826d4094225a4241d10102030109022b0001040000000904000002e964c2000905040600000000000705dce6f3"], 0x0)
r10 = getpid()
sched_setscheduler(r10, 0x2, &(0x7f0000000200)=0x7)
prlimit64(r10, 0x3, &(0x7f0000000040)={0x5, 0x400}, 0x0)

7.340966576s ago: executing program 0 (id=775):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', <r1=>0x0})
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_trace', 0x40, 0x111)
mmap$binder(&(0x7f00006e5000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x9e)
sendmmsg$sock(r2, &(0x7f0000002180)=[{{&(0x7f00000004c0)=@xdp={0x2c, 0x0, r1, 0x3a}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000000a80)=[{0x0, 0x4}, {&(0x7f0000000040)="3be7df0100584e94610901777bf202a16c7031e866cb570f0d4a62622a13c19dc857d8979397cad7b45fc1484ae4436af0fea19894889c8930c2a6b803dfb9b68bc0d1e12dc6d790567137187a518d324ac68533cb9902ae0022e12c8aab7730168d10b4c9fe42b7ccc09824df1329a1db9b181d4493f170440efc97fdcc62abbf9255d2c831ea2de573e6de27ba92069680afee137fb8aa08555991d9c7c23108bd94f10e49", 0x27}], 0x2}}], 0x2, 0x604c028)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00')
openat$comedi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/comedi0\x00', 0x200, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r5 = memfd_create(&(0x7f0000000140)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0\x00\x00\x00\x00', 0x0)
mmap(&(0x7f00001d1000/0x3000)=nil, 0x3000, 0x1800006, 0x11, r5, 0xbc4cd000)
read$rfkill(r4, &(0x7f0000000000), 0x8)
r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000012c0)={0x2004})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000240)={0x1})
read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020)
r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
request_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000280)='\x00\xa8\xd8~3[q\x1f\x80\xc8\xcd\xd0\xa6\xd2G\xbb}\x1b\xd40\xb7\x1c^T\xb9\xeb\xda1\a]2F\x02\x8f\x0f\xb9K\x06S\xae\xac\x8d\xa89\xf9A\xe85\x93\xd8\xa0L8\x87\x16\xc8\xd7:\xeb\x19\xb1\xb7\xf4\x8c\xa0\xf6\xee\xdf\xf0\x11Y\x81p\xa3b\x8dvHf\xea\xe9\xe5\xce\xcb\x05\xef\x82\x8cYXo\x0e\xa2\b\x1c\xeb;J\x81c\x91[\x8a\x81O\x93g\xd9\xaf\x97\x99\t\xe6?#\x85', r8)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, r8)
openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x105042, 0x0)
mount(&(0x7f00000000c0)=@filename='./file1\x00', &(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='romfs\x00', 0x1018d41, 0x0)
r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x5})
ioctl$VT_WAITACTIVE(r3, 0x5607)
ioctl$UI_ABS_SETUP(r9, 0x401c5504, &(0x7f0000000300)={0x0, {0x2, 0x3, 0x2, 0x1, 0x1, 0x8}})
mmap(&(0x7f00008c2000/0x4000)=nil, 0x4000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0)
futex_waitv(&(0x7f0000001080)=[{0x3, 0xfffffffffffffffc, 0x82}], 0x1, 0x0, 0x0, 0x1)

6.996929496s ago: executing program 1 (id=777):
socket(0x2c, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r4, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0xff}], 0x1, 0x23, 0x0)
setsockopt$inet_int(r4, 0x0, 0x8, &(0x7f0000000080)=0x6, 0x4)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f0000001140)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x3c, r8, 0x7, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x3c}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sigaltstack(0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000700)={0x30, r10, 0xd66771a5e8224ded, 0x70bd26, 0x1, {{}, {@void, @val={0x8, 0x3, r11}, @val={0x11, 0x99, {0xffffff65, 0x52}}}}, [@NL80211_ATTR_PID={0x8}]}, 0x30}}, 0x48811)

6.671431679s ago: executing program 3 (id=778):
request_key(&(0x7f00000001c0)='ceph\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000100)='\\\\@}\x01\x00\x00@\xf5\xe2\xdbE\xc0P\x02\xe0\xf2\xaa\xe6\x00\x00\x00\x00\x00\x00\x00\xd0\xa1B\x80\xd3\xcc\x06D\a\x00\x00\x00\x00\x00\x00\x04)\'\x03t\xcd\xe8\xd0u\x01\xff\x01\xd1', 0xfffffffffffffffe)
ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0e05403, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f0000000000)=0x2d265528)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x800)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000000005000100070000002d1d1a5cc7a9e36886a8af781992c67d7d43740ddd8e41301cfa7513f1139d9cbce47dd6820da0b128d4be8aa95139eb0ef4f761d04d30aeebbbe932cf8fd3f0979c2331e42dc7202d365d5997169724340271cff0eb5c77b960502885486d578fc27ec6354e96de5db069a97800a5e255b3f2c2b8d2a81107dde0f7ae3f49026d1f2a862b78dce5529a151b9d0b355926ac55abc37c4934c4fc008b85cea7cd6c7d7e33297283f889a170e806773ea61042f200cfdc37df69bfce"], 0x1c}}, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000340)={0xc, 0x0, <r7=>0x0})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000c524e04913272b73f0fbdbdf2505000000200001800d0001007564703a73797a32000000000c0002"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4048941)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r6, 0x3ba0, &(0x7f0000000480)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000380)={0x28, 0x0, r9, r7, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000280)={0x48, 0x2, r7, 0x0, 0x0, 0x0, <r10=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r6, 0x3b89, &(0x7f0000000080)={0x28, 0x3, r10, r7, 0x0, 0x0, 0x0, 0x0, 0x0})
close_range(r5, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0)

6.372204417s ago: executing program 4 (id=779):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x28, r3, 0x1, 0x0, 0x4, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000)
sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x40000)

6.210112348s ago: executing program 4 (id=780):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x8, 0x50, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
mount$bpf(0x0, &(0x7f00000022c0)='./cgroup\x00', &(0x7f0000000580), 0x4000, &(0x7f0000000680)=ANY=[@ANYBLOB='smackfsfloor=u'])
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
read$FUSE(r3, &(0x7f00000063c0)={0x2020}, 0x2020)
syz_fuse_handle_req(r3, 0x0, 0x0, &(0x7f0000002cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
r4 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0)
fallocate(r4, 0x39, 0x0, 0xffffffff)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00090026bd7000000000000400000004", @ANYRESOCT=r5, @ANYRES16=r0], 0x18}, 0x1, 0x0, 0x0, 0x200000f0}, 0x84)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x13, &(0x7f0000000000)=[0xd0, 0x4], 0x2)

6.024015487s ago: executing program 1 (id=781):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
shmget$private(0x0, 0x3000, 0x100, &(0x7f00009e7000/0x3000)=nil)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r4 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ae, 0x400, 0x7ffd, 0x32c, 0x0, r0}, &(0x7f0000000680)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
io_uring_enter(r4, 0xfd0, 0x4c1, 0x43, 0x0, 0x0)

4.915064744s ago: executing program 1 (id=782):
r0 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0)
mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota')
chdir(&(0x7f0000000280)='./file1\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x6}, 0x90)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='task_newtask\x00', r4, 0x0, 0x4}, 0x18)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8)
close(r6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
quotactl_fd$Q_SETQUOTA(r2, 0xffffffff80000800, 0x0, &(0x7f00000003c0)={0x2, 0x5, 0x1000, 0x476, 0x4000000000000000, 0xfffffffffffffffc, 0x3, 0x0, 0xfeff})
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0)
fallocate(r2, 0x55, 0x9, 0x20002)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00#\x00\x00@'])
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r8}, 0x18)
prlimit64(0x0, 0x4, &(0x7f0000000140)={0xa10b, 0x88}, 0x0)

4.86920373s ago: executing program 3 (id=783):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
userfaultfd(0x1)
socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)={0x1c, 0x37, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0x6a, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sync()
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
socket$inet6(0xa, 0x3, 0x7)
capset(&(0x7f0000000340)={0x19980330}, &(0x7f0000000040)={0x0, 0x2})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48)

4.673118842s ago: executing program 4 (id=784):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup(r1)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x3)
r3 = syz_io_uring_setup(0x5169, 0x0, &(0x7f0000000100), &(0x7f0000000000)=<r4=>0x0)
syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f00000003c0)=<r5=>0x0, &(0x7f0000000180))
syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54})
io_uring_enter(r3, 0x48e9, 0x0, 0x0, 0x0, 0x0)
r6 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x13)

3.751567498s ago: executing program 3 (id=785):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000a002000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xf, &(0x7f0000001080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) (async)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000011c0)=[@in={0x2, 0x4e23, @private=0xa010100}]}, &(0x7f0000000180)=0x10) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000011c0)=[@in={0x2, 0x4e23, @private=0xa010100}]}, &(0x7f0000000180)=0x10)
getsockopt$bt_hci(r6, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
socket$inet6(0xa, 0x2, 0x3a) (async)
r7 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @mcast1={0xff, 0x4}}, 0x1c)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a0"], 0xffd8}}, 0x4000000)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000300)=@gcm_256={{0x303}, "fffffffffffffff9", "241ac1eb797f3647a51ed8fb51ee710f00214de279c9b7e07a696756a31d83d7", "f8a2e06d", "00000400000100"}, 0x38)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r8, &(0x7f0000000000)=0x5, 0x12)
sendfile(r2, r8, 0x0, 0xffffffff004) (async)
sendfile(r2, r8, 0x0, 0xffffffff004)
splice(r1, &(0x7f0000001100)=0x3, r5, &(0x7f0000001140)=0x2ce, 0x80, 0xa) (async)
splice(r1, &(0x7f0000001100)=0x3, r5, &(0x7f0000001140)=0x2ce, 0x80, 0xa)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="5f0500e8682d85ff9782762f86dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

3.68276766s ago: executing program 1 (id=786):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
userfaultfd(0x1)
socket$l2tp6(0xa, 0x2, 0x73)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x25, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x1, 0x2, 0x0, 0x5, 0x6, 0xfffffffffffffffc}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x85}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0x18}]}, &(0x7f0000000200)='syzkaller\x00', 0x7fff, 0x0, &(0x7f0000000240), 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x6, 0x10, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[0x1, 0x1, 0x1], &(0x7f0000000500)=[{0x4, 0x4, 0xa, 0x2}, {0x2, 0x1, 0x9, 0x3}], 0x10, 0x792}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000000c0)='qrtr_ns_service_announce_del\x00', r0, 0x0, 0x10}, 0x18)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)={0x1c, 0x37, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0x6a, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sync()
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000001840), 0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket(0x2, 0x80805, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f00000010c0)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000040)={0xf3e, 0x0, 0xffffd597, 0x3, r4}, 0x10)

3.65500732s ago: executing program 4 (id=787):
openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, &(0x7f00000001c0))
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xe9b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r2}}, 0x48)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='contention_begin\x00', r4, 0x0, 0xf}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x1, 0x2000)
msgrcv(0x0, 0x0, 0x0, 0x1, 0x0)
r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r5, 0xc0745645, &(0x7f0000000100)={0x6, [0xff, 0x8, 0x8, 0x7fff, 0x5, 0x800, 0x7, 0xfffa, 0xfc01, 0x1, 0x2, 0x10, 0x400, 0xa, 0x8, 0x2, 0x7, 0x8, 0x7f, 0x0, 0x4, 0x3, 0x97, 0x457f, 0x2, 0x5, 0x81, 0x1, 0x4, 0x8544, 0xb, 0x5, 0x6, 0x7685, 0x98bd, 0x0, 0x8000, 0x8, 0x5, 0x2, 0x0, 0x5, 0xe9da, 0xf, 0x8, 0x6, 0x0, 0x8], 0x6})
rmdir(&(0x7f0000000440)='./file0\x00')
quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
r7 = dup(r6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r7, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)

3.605236797s ago: executing program 0 (id=788):
ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272)
syz_io_uring_submit(0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x1c, 0x0, 0xb7a006d1969b963b, 0x1, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8011}, 0x10)
unshare(0x400)
r4 = socket(0x1e, 0x1, 0x0)
connect$inet6(r4, 0x0, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)

2.967150562s ago: executing program 3 (id=789):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = accept$netrom(0xffffffffffffffff, &(0x7f0000000080)={{}, [@bcast, @default, @bcast, @remote, @rose, @bcast, @null, @default]}, &(0x7f0000000000)=0x48)
ioctl$sock_netrom_SIOCDELRT(r2, 0x890c, &(0x7f0000000240)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x2, 'syz0\x00', @default, 0x7fffffff, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x24, 0x1, 0x4, 0x3, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004000}, 0xc044)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'hsr0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002000128008000100687372001400028008000100", @ANYRES32=r3, @ANYBLOB="08001200", @ANYRES32=r4, @ANYBLOB], 0x40}}, 0x0)

1.725817667s ago: executing program 1 (id=790):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af25, &(0x7f0000000400))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2) (async)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) (async)
sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30000091)
setsockopt$sock_attach_bpf(r5, 0x6, 0xd, &(0x7f0000000000), 0x4) (async)
setsockopt$sock_attach_bpf(r5, 0x6, 0xd, &(0x7f0000000000), 0x4)
setsockopt$sock_attach_bpf(r5, 0x1, 0x24, &(0x7f0000000000), 0x4)
r6 = userfaultfd(0x509df34b049dab42)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000004c0)={0xaa, 0x30}) (async)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000004c0)={0xaa, 0x30})
socketpair(0x25, 0x1, 0x0, &(0x7f0000000080))
syz_emit_ethernet(0x36, &(0x7f0000001800)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x32, 0x0, @broadcast, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0)
ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000})
r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x82881, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0xe)
ioctl$TCSETSW2(r7, 0x5433, 0x0) (async)
ioctl$TCSETSW2(r7, 0x5433, 0x0)

1.569212007s ago: executing program 2 (id=791):
socket(0x2c, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x20, 0x80, 0x7, 0x80, {{0x6, 0x4, 0x2, 0x1, 0x18, 0x68, 0x0, 0x8, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x27}, {[@ssrr={0x89, 0x3, 0x6b}]}}}}})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
io_cancel(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)

1.428728231s ago: executing program 4 (id=792):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
shmget$private(0x0, 0x3000, 0x100, &(0x7f00009e7000/0x3000)=nil)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
r4 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ae, 0x400, 0x7ffd, 0x32c, 0x0, r0}, &(0x7f0000000680)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1})
io_uring_enter(r4, 0xfd0, 0x4c1, 0x43, 0x0, 0x0)

424.71493ms ago: executing program 3 (id=793):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0}, 0x18)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000100)=0x3, 0x4)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000180)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008004500bfff35b0bf0f09000000000052079078000004c0ac1414380000"], 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x6}, 0x18)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000140)=0x83, 0x4)
r5 = fcntl$dupfd(r4, 0x0, r4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
r6 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa001)
ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522)
r7 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb)
mkdirat(r5, &(0x7f0000000200)='./file0\x00', 0x0)
keyctl$setperm(0x5, r7, 0x0)
ioctl$USBDEVFS_CLEAR_HALT(r6, 0x80045515, &(0x7f00000002c0)={0x1, 0x1})
sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000)
sendmmsg$sock(r5, &(0x7f0000005780)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="592db95c0152f97330db758c7dbd2200700b870880a2c3021e1ccbcc1e1a7c0cbb41a88f524da16769759276cf9d38898ee7261702078bded2e9dcdb5e95ee6b4453818684c2c97d0492cc220a4b02dab3c9866a050783a68efa84eed17330ac22636dfdc4a698efd25945839ef10ed9b1bbeeec8a378d91943c0e", 0x7b}, {&(0x7f0000000600)="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", 0xfe}], 0x2}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000010c0)="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", 0x278}], 0x1}}], 0x2, 0x41)
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, '\x00', "35e23ca3a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0)

217.070865ms ago: executing program 2 (id=794):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
fchown(r0, 0x0, 0xee00)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x402})
syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000cf8bed20d90f25640302cecef0ac004039000000010902120500000000000000000000cafb1a000000000000000000"], 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x408200, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r2)
rmdir(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
clock_adjtime(0x0, &(0x7f0000000b00)={0xfd0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x41})
getpid()
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000002010400000000000000000200000004000180040003803c0002800c00028005000100000000002c0001"], 0x58}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x290140, 0x0)
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f00000001c0)={{@my=0x1, 0x9}, @local, 0x4, 0x9628, 0x7, 0x2, 0x907, 0x4, 0x4})
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18)
sendmmsg(r4, 0x0, 0x0, 0x0)

0s ago: executing program 1 (id=795):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
userfaultfd(0x1)
socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001640)={0x1c, 0x37, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x8, 0x6a, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sync()
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
socket$inet6(0xa, 0x3, 0x7)
capset(&(0x7f0000000340)={0x19980330}, &(0x7f0000000040)={0x0, 0x2})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48)

kernel console output (not intermixed with test programs):

677][   T30] audit: type=1326 audit(1755914958.171:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6322 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f8a4938ebe9 code=0x7ffc0000
[  366.135850][   T30] audit: type=1326 audit(1755914958.171:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6322 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4938ebe9 code=0x7ffc0000
[  366.199688][ T6327] input: syz1 as /devices/virtual/input/input6
[  366.283340][   T30] audit: type=1326 audit(1755914958.171:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6322 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4938ebe9 code=0x7ffc0000
[  366.515136][   T30] audit: type=1326 audit(1755914958.171:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6322 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8a4938ebe9 code=0x7ffc0000
[  366.538087][   T30] audit: type=1326 audit(1755914958.171:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6322 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4938ebe9 code=0x7ffc0000
[  367.330010][   T30] audit: type=1326 audit(1755914958.171:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6322 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f8a4938ebe9 code=0x7ffc0000
[  367.456298][ T6335] netlink: 4696 bytes leftover after parsing attributes in process `syz.1.93'.
[  367.532503][ T6335] netlink: 4696 bytes leftover after parsing attributes in process `syz.1.93'.
[  367.548649][   T30] audit: type=1326 audit(1755914958.171:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6322 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4938ebe9 code=0x7ffc0000
[  367.626392][ T6335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.93'.
[  367.638395][   T30] audit: type=1326 audit(1755914958.171:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6322 comm="syz.2.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f8a4938ebe9 code=0x7ffc0000
[  369.259673][   T24] usb 2-1: new low-speed USB device number 5 using dummy_hcd
[  369.696870][   T24] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  369.716234][   T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  370.077352][   T24] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  370.262226][   T24] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  370.313427][   T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  370.331593][   T24] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  370.356406][   T24] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config
[  370.375128][   T24] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  370.403460][   T24] usb 2-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  370.531115][   T24] usb 2-1: string descriptor 0 read error: -22
[  370.564916][   T24] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  370.602323][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  370.691449][   T24] adutux 2-1:168.0: interrupt endpoints not found
[  370.979698][ T6375] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  371.381986][ T6379] input: syz1 as /devices/virtual/input/input7
[  372.403338][ T6029] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  372.428964][ T6357] fuse: Bad value for 'rootmode'
[  372.909490][ T5959] usb 2-1: USB disconnect, device number 5
[  372.939777][ T6029] usb 5-1: config 0 has an invalid interface number: 112 but max is 0
[  372.975592][ T6029] usb 5-1: config 0 has no interface number 0
[  373.007569][ T6029] usb 5-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16
[  373.044194][ T6029] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  373.066653][ T6029] usb 5-1: Product: syz
[  373.094568][ T6029] usb 5-1: Manufacturer: syz
[  373.108866][ T6029] usb 5-1: SerialNumber: syz
[  373.212628][ T6029] usb 5-1: config 0 descriptor??
[  373.827528][ T6029] mvusb_mdio 5-1:0.112: probe with driver mvusb_mdio failed with error -5
[  373.947981][ T6029] usb 5-1: USB disconnect, device number 4
[  373.994322][ T6421] loop7: detected capacity change from 0 to 524255232
[  375.064127][ T5959] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  375.615575][ T6441] binder: 6440:6441 ioctl c018620c 200000000180 returned -22
[  375.725310][ T5959] usb 2-1: Using ep0 maxpacket: 8
[  375.733676][ T5959] usb 2-1: config index 0 descriptor too short (expected 30, got 18)
[  375.759192][ T5959] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  375.796433][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.817815][ T5959] usb 2-1: Product: syz
[  375.822057][ T5959] usb 2-1: Manufacturer: syz
[  375.853563][ T5959] usb 2-1: SerialNumber: syz
[  375.897483][ T5959] usb 2-1: config 0 descriptor??
[  375.918228][ T5959] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  375.943300][ T5959] usb 2-1: setting power ON
[  375.955921][ T5959] dvb-usb: bulk message failed: -22 (2/0)
[  375.970874][ T6447] warning: `syz.3.126' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  376.014453][ T5959] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  376.030071][ T5959] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  376.042709][ T5959] usb 2-1: media controller created
[  376.092948][ T5959] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  376.125107][ T6433] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  376.132504][ T5959] usb 2-1: selecting invalid altsetting 6
[  376.133427][ T5945] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  376.139360][ T5959] usb 2-1: digital interface selection failed (-22)
[  376.154302][   T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  376.173248][ T5959] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  376.190754][ T6433] dvb-usb: bulk message failed: -22 (3/0)
[  376.209370][ T5959] usb 2-1: setting power OFF
[  376.225249][ T6433] cxusb: i2c wr: len=80 is too big!
[  376.225249][ T6433] 
[  376.233440][ T5959] dvb-usb: bulk message failed: -22 (2/0)
[  376.243110][ T5959] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  376.275767][ T5959] (NULL device *): no alternate interface
[  376.329750][   T24] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  376.345271][ T5945] usb 3-1: Using ep0 maxpacket: 32
[  376.364684][ T5959] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  376.382950][ T5945] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  376.386225][ T5959] usb 2-1: USB disconnect, device number 6
[  376.441717][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.456713][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.503615][   T24] usb 1-1: Product: syz
[  376.524407][ T5945] usb 3-1: config 0 descriptor??
[  376.533411][   T24] usb 1-1: Manufacturer: syz
[  376.572901][   T24] usb 1-1: SerialNumber: syz
[  376.581922][ T5945] gspca_main: sq930x-2.14.0 probing 041e:403c
[  376.599540][   T24] usb 1-1: config 0 descriptor??
[  377.169885][ T6464] netlink: 'syz.1.130': attribute type 21 has an invalid length.
[  377.185439][ T6464] IPv6: NLM_F_CREATE should be specified when creating new route
[  377.354818][ T6464] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  377.362457][ T6464] IPv6: NLM_F_CREATE should be set when creating new route
[  377.370037][ T6464] IPv6: NLM_F_CREATE should be set when creating new route
[  377.377428][ T6464] IPv6: NLM_F_CREATE should be set when creating new route
[  377.473260][ T5945] gspca_sq930x: ucbus_write failed -71
[  377.506687][ T5945] sq930x 3-1:0.0: probe with driver sq930x failed with error -71
[  377.638068][ T5945] usb 3-1: USB disconnect, device number 5
[  377.748750][ T6468] loop7: detected capacity change from 0 to 524255232
[  377.882261][   T24] usb 1-1: f81604_read: reg: 100e failed: -EPROTO
[  377.923582][   T24] usb 1-1: f81604_read: reg: 200f failed: -EPROTO
[  377.956237][   T24] usb 1-1: USB disconnect, device number 2
[  378.057922][   T24] usb 1-1: f81604_read: reg: 100f failed: -ENODEV
[  378.740549][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  378.755391][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  379.294420][   T24] usb 1-1: f81604_read: reg: 200f failed: -ENODEV
[  379.656079][ T6488] netlink: 32 bytes leftover after parsing attributes in process `syz.0.136'.
[  380.921667][ T6496] loop2: detected capacity change from 0 to 7
[  380.952568][ T6496]  loop2:
[  380.975207][ T6496] loop2: partition table partially beyond EOD, truncated
[  382.634953][ T5944] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  383.384010][ T5944] usb 2-1: device descriptor read/64, error -71
[  385.099294][ T5944] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  385.804567][ T6557] netlink: 32 bytes leftover after parsing attributes in process `syz.2.147'.
[  386.790241][ T6570] loop2: detected capacity change from 0 to 7
[  386.954157][ T6570]  loop2:
[  387.090522][ T6570] loop2: partition table partially beyond EOD, truncated
[  387.618605][ T6576] syz.3.153: attempt to access beyond end of device
[  387.618605][ T6576] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0
[  387.717640][ T6576] syz.3.153: attempt to access beyond end of device
[  387.717640][ T6576] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0
[  387.756214][ T6581] input: syz1 as /devices/virtual/input/input8
[  387.976051][ T6576] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  388.243416][ T6576] syz.3.153: attempt to access beyond end of device
[  388.243416][ T6576] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0
[  388.674967][ T6576] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  388.685973][ T6576] syz.3.153: attempt to access beyond end of device
[  388.685973][ T6576] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0
[  388.700762][ T6576] syz.3.153: attempt to access beyond end of device
[  388.700762][ T6576] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0
[  388.716908][ T6576] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  388.728984][ T6576] syz.3.153: attempt to access beyond end of device
[  388.728984][ T6576] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0
[  388.744681][ T6576] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  388.762259][ T6576] syz.3.153: attempt to access beyond end of device
[  388.762259][ T6576] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0
[  388.789216][ T6576] syz.3.153: attempt to access beyond end of device
[  388.789216][ T6576] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0
[  388.802727][ T6576] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  388.816768][ T6576] syz.3.153: attempt to access beyond end of device
[  388.816768][ T6576] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0
[  388.830501][ T6576] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  388.849188][ T6576] syz.3.153: attempt to access beyond end of device
[  388.849188][ T6576] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0
[  388.863704][ T6576] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  388.885001][ T6576] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  388.895016][ T6576] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1)
[  391.168111][ T6620] netlink: 32 bytes leftover after parsing attributes in process `syz.1.162'.
[  392.276783][ T6632] block nbd1: shutting down sockets
[  393.037581][ T6638] capability: warning: `syz.1.168' uses deprecated v2 capabilities in a way that may be insecure
[  393.111044][   T30] kauditd_printk_skb: 34 callbacks suppressed
[  393.111064][   T30] audit: type=1400 audit(1755914985.901:82): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=6637 comm="syz.1.168" name="31" dev="tmpfs" ino=176
[  393.288994][ T6646] Bluetooth: MGMT ver 1.23
[  396.284215][ T6668] kvm: user requested TSC rate below hardware speed
[  396.353025][ T6668] bond_slave_0: entered promiscuous mode
[  396.359214][ T6668] bond_slave_1: entered promiscuous mode
[  396.439282][ T6676] dummy0: entered promiscuous mode
[  396.495089][ T6667] bond_slave_0: left promiscuous mode
[  396.501380][ T6667] bond_slave_1: left promiscuous mode
[  399.339487][ T5959] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  399.553343][ T5959] usb 4-1: Using ep0 maxpacket: 32
[  399.584983][ T5959] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  399.619192][ T5959] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[  399.656518][ T5959] usb 4-1: config 0 interface 0 has no altsetting 0
[  399.673303][ T5959] usb 4-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00
[  399.698305][ T5959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.752089][ T5959] usb 4-1: config 0 descriptor??
[  400.173406][ T5884] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  400.192597][ T5959] betop 0003:20BC:5500.0002: item fetching failed at offset 4/7
[  400.705998][ T5884] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  400.746860][ T5959] betop 0003:20BC:5500.0002: parse failed
[  400.752772][ T5959] betop 0003:20BC:5500.0002: probe with driver betop failed with error -22
[  400.792259][ T5884] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  400.819775][ T5959] usb 4-1: USB disconnect, device number 8
[  400.847768][ T5884] usb 1-1: config 0 descriptor??
[  401.263429][ T5884] ath6kl: Failed to submit usb control message: -71
[  401.282905][ T5884] ath6kl: unable to send the bmi data to the device: -71
[  401.313933][ T5884] ath6kl: Unable to send get target info: -71
[  401.333929][ T5884] ath6kl: Failed to init ath6kl core: -71
[  401.355495][ T5884] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[  401.403741][ T5884] usb 1-1: USB disconnect, device number 3
[  401.787448][ T5959] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  402.183256][ T5959] usb 2-1: Using ep0 maxpacket: 32
[  402.193271][ T5959] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  402.203256][ T5959] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  402.213099][ T5959] usb 2-1: config 0 interface 0 has no altsetting 0
[  402.240606][ T5959] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  402.313348][ T5959] usb 2-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3
[  402.332260][ T5959] usb 2-1: Product: syz
[  402.341347][ T5959] usb 2-1: Manufacturer: syz
[  402.344233][ T6752] syz.3.189: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  402.361296][ T6752] CPU: 1 UID: 0 PID: 6752 Comm: syz.3.189 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  402.361314][ T6752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  402.361322][ T6752] Call Trace:
[  402.361327][ T6752]  <TASK>
[  402.361332][ T6752]  dump_stack_lvl+0x189/0x250
[  402.361352][ T6752]  ? __pfx_dump_stack_lvl+0x10/0x10
[  402.361366][ T6752]  ? __pfx__printk+0x10/0x10
[  402.361383][ T6752]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  402.361406][ T6752]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  402.361422][ T6752]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  402.361438][ T6752]  warn_alloc+0x214/0x310
[  402.361453][ T6752]  ? stack_depot_save_flags+0x429/0x900
[  402.361469][ T6752]  ? __pfx_warn_alloc+0x10/0x10
[  402.361484][ T6752]  ? kasan_save_track+0x4f/0x80
[  402.361503][ T6752]  ? xskq_create+0x56/0x170
[  402.361515][ T6752]  ? xsk_init_queue+0xb0/0x110
[  402.361525][ T6752]  ? xsk_setsockopt+0x43f/0x710
[  402.361542][ T6752]  ? do_sock_setsockopt+0x179/0x1b0
[  402.361559][ T6752]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  402.361574][ T6752]  ? do_syscall_64+0xfa/0x3b0
[  402.361586][ T6752]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.361603][ T6752]  __vmalloc_node_range_noprof+0x125/0x12f0
[  402.361636][ T6752]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  402.361657][ T6752]  ? __kasan_kmalloc+0x93/0xb0
[  402.361670][ T6752]  vmalloc_user_noprof+0xad/0xf0
[  402.361684][ T6752]  ? xskq_create+0xbf/0x170
[  402.361696][ T6752]  xskq_create+0xbf/0x170
[  402.361710][ T6752]  xsk_init_queue+0xb0/0x110
[  402.361723][ T6752]  xsk_setsockopt+0x43f/0x710
[  402.361742][ T6752]  ? __pfx_xsk_setsockopt+0x10/0x10
[  402.361762][ T6752]  ? __fget_files+0x2a/0x420
[  402.361778][ T6752]  ? __fget_files+0x2a/0x420
[  402.361790][ T6752]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  402.361801][ T6752]  ? __pfx_xsk_setsockopt+0x10/0x10
[  402.361820][ T6752]  do_sock_setsockopt+0x179/0x1b0
[  402.361840][ T6752]  __x64_sys_setsockopt+0x13f/0x1b0
[  402.361861][ T6752]  do_syscall_64+0xfa/0x3b0
[  402.361873][ T6752]  ? lockdep_hardirqs_on+0x9c/0x150
[  402.361885][ T6752]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.361896][ T6752]  ? clear_bhb_loop+0x60/0xb0
[  402.361910][ T6752]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  402.361922][ T6752] RIP: 0033:0x7fd23958ebe9
[  402.361934][ T6752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  402.361944][ T6752] RSP: 002b:00007fd2377f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  402.361957][ T6752] RAX: ffffffffffffffda RBX: 00007fd2397b5fa0 RCX: 00007fd23958ebe9
[  402.361966][ T6752] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000e
[  402.361973][ T6752] RBP: 00007fd239611e19 R08: 0000000000000004 R09: 0000000000000000
[  402.361980][ T6752] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  402.361987][ T6752] R13: 00007fd2397b6038 R14: 00007fd2397b5fa0 R15: 00007ffc2b398b88
[  402.362006][ T6752]  </TASK>
[  402.362011][ T6752] Mem-Info:
[  402.662760][ T6752] active_anon:2580 inactive_anon:6623 isolated_anon:0
[  402.662760][ T6752]  active_file:5725 inactive_file:45433 isolated_file:0
[  402.662760][ T6752]  unevictable:768 dirty:65 writeback:0
[  402.662760][ T6752]  slab_reclaimable:10142 slab_unreclaimable:96547
[  402.662760][ T6752]  mapped:30218 shmem:4264 pagetables:1182
[  402.662760][ T6752]  sec_pagetables:0 bounce:0
[  402.662760][ T6752]  kernel_misc_reclaimable:0
[  402.662760][ T6752]  free:1315727 free_pcp:14784 free_cma:0
[  402.708357][ T6752] Node 0 active_anon:10320kB inactive_anon:26492kB active_file:22700kB inactive_file:181732kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120872kB dirty:260kB writeback:0kB shmem:15520kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12620kB pagetables:4596kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  402.742430][ T6752] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  402.774330][ T6752] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  402.803629][ T6752] lowmem_reserve[]: 0 2500 2502 2502 2502
[  402.809555][ T6752] Node 0 DMA32 free:1344712kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:10316kB inactive_anon:26452kB active_file:20928kB inactive_file:181664kB unevictable:1536kB writepending:260kB present:3129332kB managed:2560996kB mlocked:0kB bounce:0kB free_pcp:41580kB local_pcp:26300kB free_cma:0kB
[  402.842416][ T6752] lowmem_reserve[]: 0 0 1 1 1
[  402.847169][ T6752] Node 0 Normal free:8kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1772kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB
[  402.876599][ T6752] lowmem_reserve[]: 0 0 0 0 0
[  402.881414][ T6752] Node 1 Normal free:3902828kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17544kB local_pcp:7136kB free_cma:0kB
[  402.913103][ T6752] lowmem_reserve[]: 0 0 0 0 0
[  402.917889][ T6752] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  402.930581][ T6752] Node 0 DMA32: 771*4kB (UM) 302*8kB (UME) 146*16kB (UM) 455*32kB (UM) 288*64kB (UME) 52*128kB (UME) 19*256kB (UM) 12*512kB (ME) 10*1024kB (ME) 11*2048kB (UM) 306*4096kB (UM) = 1344636kB
[  402.949203][ T6752] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB
[  402.961337][ T6752] Node 1 Normal: 185*4kB (UE) 59*8kB (UME) 49*16kB (UME) 55*32kB (UME) 21*64kB (UME) 7*128kB (UME) 6*256kB (UME) 6*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 949*4096kB (M) = 3902828kB
[  402.979560][ T6752] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  402.989246][ T6752] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  402.998576][ T6752] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  403.008337][ T6752] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  403.017704][ T6752] 55418 total pagecache pages
[  403.022428][ T6752] 0 pages in swap cache
[  403.026631][ T6752] Free swap  = 124992kB
[  403.031041][ T6752] Total swap = 124996kB
[  403.035521][ T6752] 2097051 pages RAM
[  403.039366][ T6752] 0 pages HighMem/MovableOnly
[  403.044655][ T6752] 424695 pages reserved
[  403.048842][ T6752] 0 pages cma reserved
[  403.146019][ T5959] usb 2-1: SerialNumber: syz
[  403.222643][ T5959] usb 2-1: config 0 descriptor??
[  403.239232][ T6760] bio_check_eod: 2 callbacks suppressed
[  403.239253][ T6760] syz.0.190: attempt to access beyond end of device
[  403.239253][ T6760] nbd0: rw=0, sector=2, nr_sectors = 1 limit=0
[  403.533364][ T5959] gs_usb 2-1:0.0: Couldn't get device config: (err=-32)
[  403.556257][ T5959] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -32
[  403.640348][ T6769] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  404.594960][   T24] usb 2-1: USB disconnect, device number 9
[  404.660288][ T6775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.193'.
[  405.042549][ T6790] FAULT_INJECTION: forcing a failure.
[  405.042549][ T6790] name failslab, interval 1, probability 0, space 0, times 0
[  405.055775][ T6790] CPU: 1 UID: 0 PID: 6790 Comm: syz.2.194 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  405.055798][ T6790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  405.055809][ T6790] Call Trace:
[  405.055817][ T6790]  <TASK>
[  405.055824][ T6790]  dump_stack_lvl+0x189/0x250
[  405.055851][ T6790]  ? __pfx____ratelimit+0x10/0x10
[  405.055870][ T6790]  ? __pfx_dump_stack_lvl+0x10/0x10
[  405.055890][ T6790]  ? __pfx__printk+0x10/0x10
[  405.055920][ T6790]  ? __pfx___might_resched+0x10/0x10
[  405.055950][ T6790]  should_fail_ex+0x414/0x560
[  405.055978][ T6790]  should_failslab+0xa8/0x100
[  405.056002][ T6790]  __kmalloc_noprof+0xcb/0x4f0
[  405.056020][ T6790]  ? kfree+0x4d/0x440
[  405.056046][ T6790]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  405.056079][ T6790]  tomoyo_realpath_from_path+0xe3/0x5d0
[  405.056107][ T6790]  ? tomoyo_domain+0xda/0x130
[  405.056140][ T6790]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  405.056162][ T6790]  tomoyo_path_number_perm+0x1e8/0x5a0
[  405.056187][ T6790]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  405.056214][ T6790]  ? __pfx___schedule+0x10/0x10
[  405.056279][ T6790]  ? irqentry_exit+0x74/0x90
[  405.056300][ T6790]  ? lockdep_hardirqs_on+0x9c/0x150
[  405.056331][ T6790]  security_file_ioctl+0xcb/0x2d0
[  405.056358][ T6790]  __se_sys_ioctl+0x47/0x170
[  405.056390][ T6790]  do_syscall_64+0xfa/0x3b0
[  405.056414][ T6790]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.056433][ T6790]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  405.056452][ T6790]  ? clear_bhb_loop+0x60/0xb0
[  405.056476][ T6790]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  405.056496][ T6790] RIP: 0033:0x7f8a4938ebe9
[  405.056514][ T6790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  405.056529][ T6790] RSP: 002b:00007f8a475b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  405.056552][ T6790] RAX: ffffffffffffffda RBX: 00007f8a495b6180 RCX: 00007f8a4938ebe9
[  405.056566][ T6790] RDX: 0000200000000c40 RSI: 00000000c06c4124 RDI: 000000000000000b
[  405.056587][ T6790] RBP: 00007f8a475b4090 R08: 0000000000000000 R09: 0000000000000000
[  405.056599][ T6790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  405.056610][ T6790] R13: 00007f8a495b6218 R14: 00007f8a495b6180 R15: 00007ffef09570e8
[  405.056645][ T6790]  </TASK>
[  405.056653][ T6790] ERROR: Out of memory at tomoyo_realpath_from_path.
[  405.676459][   T30] audit: type=1804 audit(1755914998.311:83): pid=6779 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.195" name="/newroot/37/file1" dev="fuse" ino=1 res=1 errno=0
[  406.334617][ T6779] netlink: 56 bytes leftover after parsing attributes in process `syz.4.195'.
[  406.822261][   T30] audit: type=1800 audit(1755914998.701:84): pid=6779 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.195" name="/" dev="fuse" ino=1 res=0 errno=0
[  408.370671][ T6799] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  408.803029][ T6811] netlink: 'syz.4.200': attribute type 10 has an invalid length.
[  408.926487][ T6811] team0: Port device dummy0 added
[  413.195982][ T6871] FAULT_INJECTION: forcing a failure.
[  413.195982][ T6871] name failslab, interval 1, probability 0, space 0, times 0
[  413.344862][ T6872] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  413.431786][ T6871] CPU: 0 UID: 0 PID: 6871 Comm: syz.1.216 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  413.431815][ T6871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  413.431827][ T6871] Call Trace:
[  413.431835][ T6871]  <TASK>
[  413.431844][ T6871]  dump_stack_lvl+0x189/0x250
[  413.431873][ T6871]  ? __pfx____ratelimit+0x10/0x10
[  413.431894][ T6871]  ? __pfx_dump_stack_lvl+0x10/0x10
[  413.431916][ T6871]  ? __pfx__printk+0x10/0x10
[  413.431960][ T6871]  should_fail_ex+0x414/0x560
[  413.431987][ T6871]  should_failslab+0xa8/0x100
[  413.432012][ T6871]  __kmalloc_cache_noprof+0x70/0x3d0
[  413.432031][ T6871]  ? sctp_add_bind_addr+0x8c/0x370
[  413.432060][ T6871]  sctp_add_bind_addr+0x8c/0x370
[  413.432088][ T6871]  sctp_copy_local_addr_list+0x30b/0x4e0
[  413.432115][ T6871]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  413.432137][ T6871]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  413.432163][ T6871]  ? sctp_v4_is_any+0x35/0x60
[  413.432185][ T6871]  ? sctp_copy_one_addr+0x93/0x360
[  413.432264][ T6871]  sctp_bind_addr_copy+0xb3/0x3c0
[  413.432289][ T6871]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  413.432315][ T6871]  sctp_connect_new_asoc+0x2e0/0x690
[  413.432346][ T6871]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  413.432375][ T6871]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  413.432403][ T6871]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  413.432429][ T6871]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  413.432457][ T6871]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  413.432477][ T6871]  ? security_sctp_bind_connect+0x7e/0x2e0
[  413.432502][ T6871]  sctp_sendmsg+0x155c/0x2810
[  413.432543][ T6871]  ? __pfx_sctp_sendmsg+0x10/0x10
[  413.432592][ T6871]  ? sock_rps_record_flow+0x19/0x410
[  413.432619][ T6871]  ? inet_sendmsg+0x2f4/0x370
[  413.432639][ T6871]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  413.432661][ T6871]  __sock_sendmsg+0x19c/0x270
[  413.432690][ T6871]  ____sys_sendmsg+0x505/0x830
[  413.432728][ T6871]  ? __pfx_____sys_sendmsg+0x10/0x10
[  413.432770][ T6871]  ? import_iovec+0x74/0xa0
[  413.432802][ T6871]  ___sys_sendmsg+0x21f/0x2a0
[  413.432834][ T6871]  ? __pfx____sys_sendmsg+0x10/0x10
[  413.432908][ T6871]  ? __fget_files+0x2a/0x420
[  413.432927][ T6871]  ? __fget_files+0x3a0/0x420
[  413.432962][ T6871]  __x64_sys_sendmsg+0x19b/0x260
[  413.432995][ T6871]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  413.433037][ T6871]  ? __pfx_ksys_write+0x10/0x10
[  413.433054][ T6871]  ? rcu_is_watching+0x15/0xb0
[  413.433083][ T6871]  ? do_syscall_64+0xbe/0x3b0
[  413.433110][ T6871]  do_syscall_64+0xfa/0x3b0
[  413.433136][ T6871]  ? lockdep_hardirqs_on+0x9c/0x150
[  413.433156][ T6871]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.433175][ T6871]  ? clear_bhb_loop+0x60/0xb0
[  413.433211][ T6871]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  413.433229][ T6871] RIP: 0033:0x7f0efed8ebe9
[  413.433249][ T6871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  413.433265][ T6871] RSP: 002b:00007f0effb53038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  413.433287][ T6871] RAX: ffffffffffffffda RBX: 00007f0efefb5fa0 RCX: 00007f0efed8ebe9
[  413.433300][ T6871] RDX: 0000000000000001 RSI: 0000200000000700 RDI: 0000000000000004
[  413.433311][ T6871] RBP: 00007f0effb53090 R08: 0000000000000000 R09: 0000000000000000
[  413.433322][ T6871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  413.433333][ T6871] R13: 00007f0efefb6038 R14: 00007f0efefb5fa0 R15: 00007fffa99eac18
[  413.433366][ T6871]  </TASK>
[  413.775889][    C0] vkms_vblank_simulate: vblank timer overrun
[  415.087397][ T6887] FAULT_INJECTION: forcing a failure.
[  415.087397][ T6887] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  415.138531][ T6887] CPU: 0 UID: 0 PID: 6887 Comm: syz.3.221 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  415.138559][ T6887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  415.138571][ T6887] Call Trace:
[  415.138578][ T6887]  <TASK>
[  415.138587][ T6887]  dump_stack_lvl+0x189/0x250
[  415.138617][ T6887]  ? __pfx____ratelimit+0x10/0x10
[  415.138638][ T6887]  ? __pfx_dump_stack_lvl+0x10/0x10
[  415.138660][ T6887]  ? __pfx__printk+0x10/0x10
[  415.138686][ T6887]  ? __might_fault+0xb0/0x130
[  415.138717][ T6887]  should_fail_ex+0x414/0x560
[  415.138744][ T6887]  _copy_from_user+0x2d/0xb0
[  415.138773][ T6887]  ucma_resolve_ip+0x9a/0x280
[  415.138803][ T6887]  ? __pfx_ucma_resolve_ip+0x10/0x10
[  415.138850][ T6887]  ucma_write+0x249/0x2e0
[  415.138879][ T6887]  ? __pfx_ucma_write+0x10/0x10
[  415.138905][ T6887]  ? security_file_permission+0x75/0x290
[  415.138930][ T6887]  ? rw_verify_area+0x258/0x650
[  415.138964][ T6887]  vfs_writev+0x4b3/0x960
[  415.138992][ T6887]  ? __pfx_ucma_write+0x10/0x10
[  415.139022][ T6887]  ? __pfx_vfs_writev+0x10/0x10
[  415.139063][ T6887]  ? __fget_files+0x2a/0x420
[  415.139090][ T6887]  ? __fget_files+0x3a0/0x420
[  415.139119][ T6887]  ? __fget_files+0x2a/0x420
[  415.139152][ T6887]  do_writev+0x14d/0x2d0
[  415.139177][ T6887]  ? __pfx_do_writev+0x10/0x10
[  415.139197][ T6887]  ? rcu_is_watching+0x15/0xb0
[  415.139225][ T6887]  ? do_syscall_64+0xbe/0x3b0
[  415.139252][ T6887]  do_syscall_64+0xfa/0x3b0
[  415.139272][ T6887]  ? lockdep_hardirqs_on+0x9c/0x150
[  415.139293][ T6887]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.139312][ T6887]  ? clear_bhb_loop+0x60/0xb0
[  415.139337][ T6887]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  415.139355][ T6887] RIP: 0033:0x7fd23958ebe9
[  415.139372][ T6887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  415.139387][ T6887] RSP: 002b:00007fd2377f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  415.139409][ T6887] RAX: ffffffffffffffda RBX: 00007fd2397b5fa0 RCX: 00007fd23958ebe9
[  415.139424][ T6887] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000003
[  415.139436][ T6887] RBP: 00007fd2377f6090 R08: 0000000000000000 R09: 0000000000000000
[  415.139448][ T6887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  415.139459][ T6887] R13: 00007fd2397b6038 R14: 00007fd2397b5fa0 R15: 00007ffc2b398b88
[  415.139492][ T6887]  </TASK>
[  415.381710][    C0] vkms_vblank_simulate: vblank timer overrun
[  416.703545][ T5945] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  416.993467][ T5945] usb 3-1: device descriptor read/64, error -71
[  417.657912][  T926] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  417.683447][ T5945] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  417.843363][  T926] usb 4-1: device descriptor read/64, error -71
[  417.865749][ T5945] usb 3-1: device descriptor read/64, error -71
[  418.013950][ T5945] usb usb3-port1: attempt power cycle
[  418.156674][  T926] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  418.313287][  T926] usb 4-1: device descriptor read/64, error -71
[  419.104967][  T926] usb usb4-port1: attempt power cycle
[  419.190766][ T5945] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  419.613600][  T926] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  419.724623][  T926] usb 4-1: device descriptor read/8, error -71
[  419.773293][ T5945] usb 3-1: device descriptor read/8, error -71
[  420.069615][ T6945] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  420.155782][ T6955] netlink: 32 bytes leftover after parsing attributes in process `syz.0.235'.
[  421.823684][ T5945] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  421.976978][ T6979] Invalid source name
[  421.981125][ T6979] UBIFS error (pid: 6979): cannot open "/dev/sg0", error -22
[  421.984434][ T6979] netlink: 'syz.1.246': attribute type 3 has an invalid length.
[  422.231382][ T5945] usb 3-1: config 1 has an invalid descriptor of length 227, skipping remainder of the config
[  422.839269][ T5945] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  422.965272][ T5945] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  423.161721][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.423843][ T5945] usb 3-1: Product: syz
[  423.449479][ T5945] usb 3-1: Manufacturer: syz
[  423.463001][ T5945] usb 3-1: SerialNumber: syz
[  423.623909][   T30] audit: type=1326 audit(1755915016.421:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6994 comm="syz.0.250" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ad438ebe9 code=0x0
[  424.278744][ T7007] netlink: 32 bytes leftover after parsing attributes in process `syz.4.251'.
[  425.087648][ T7009] xt_hashlimit: size too large, truncated to 1048576
[  425.138946][ T7013] netlink: 28 bytes leftover after parsing attributes in process `syz.1.253'.
[  427.091900][ T7031] netlink: 'syz.0.259': attribute type 21 has an invalid length.
[  427.138678][ T7031] IPv6: NLM_F_CREATE should be specified when creating new route
[  427.179353][ T7031] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  427.187636][ T7031] IPv6: NLM_F_CREATE should be set when creating new route
[  427.194985][ T7031] IPv6: NLM_F_CREATE should be set when creating new route
[  427.202339][ T7031] IPv6: NLM_F_CREATE should be set when creating new route
[  427.683259][ T5959] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  427.875240][ T5959] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  427.916940][ T5959] usb 1-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  428.000871][ T5959] usb 1-1: config 2 interface 0 has no altsetting 0
[  428.037871][ T5959] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47
[  428.079218][ T5959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  428.130285][ T5959] usb 1-1: SerialNumber: syz
[  428.473609][ T5945] usb 3-1: USB disconnect, device number 10
[  428.659946][ T5959] ims_pcu 1-1:2.0: Missing CDC union descriptor
[  428.826472][ T5959] ims_pcu 1-1:2.0: probe with driver ims_pcu failed with error -22
[  428.837613][ T5959] usb 1-1: USB disconnect, device number 4
[  431.124086][ T7069] netlink: 'syz.0.269': attribute type 10 has an invalid length.
[  431.132125][ T7069] netlink: 40 bytes leftover after parsing attributes in process `syz.0.269'.
[  432.683564][ T7070] bridge0: port 2(bridge_slave_1) entered disabled state
[  432.691839][ T7070] bridge0: port 1(bridge_slave_0) entered disabled state
[  433.256303][ T7070] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  433.334225][ T7070] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  433.725501][ T7070] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  433.748512][ T7070] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  433.758889][ T7070] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  433.778867][ T7070] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  433.783209][   T30] audit: type=1326 audit(1755915026.571:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.2.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4938ebe9 code=0x7ffc0000
[  433.814658][   T30] audit: type=1326 audit(1755915026.571:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.2.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4938ebe9 code=0x7ffc0000
[  433.839365][   T30] audit: type=1326 audit(1755915026.591:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.2.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f8a4938ebe9 code=0x7ffc0000
[  433.861546][   T30] audit: type=1326 audit(1755915026.591:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.2.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4938ebe9 code=0x7ffc0000
[  433.893862][   T30] audit: type=1326 audit(1755915026.591:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.2.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4938ebe9 code=0x7ffc0000
[  433.924426][   T30] audit: type=1326 audit(1755915026.591:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.2.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8a4938ebe9 code=0x7ffc0000
[  433.968995][   T30] audit: type=1326 audit(1755915026.591:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.2.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4938ebe9 code=0x7ffc0000
[  434.010327][ T7086] syz.4.272: attempt to access beyond end of device
[  434.010327][ T7086] loop4: rw=0, sector=0, nr_sectors = 1 limit=0
[  434.032533][ T7068] tc_dump_action: action bad kind
[  434.048018][   T30] audit: type=1326 audit(1755915026.591:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.2.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4938ebe9 code=0x7ffc0000
[  434.076967][ T7069] dummy0: entered promiscuous mode
[  434.090973][ T7069] bridge0: port 3(dummy0) entered blocking state
[  434.101216][ T7069] bridge0: port 3(dummy0) entered disabled state
[  434.110593][ T7069] dummy0: entered allmulticast mode
[  434.117081][   T30] audit: type=1326 audit(1755915026.591:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.2.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f8a4938ebe9 code=0x7ffc0000
[  434.185565][ T7069] bridge0: port 3(dummy0) entered blocking state
[  434.192080][ T7069] bridge0: port 3(dummy0) entered forwarding state
[  434.348661][   T30] audit: type=1326 audit(1755915026.591:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7081 comm="syz.2.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4938ebe9 code=0x7ffc0000
[  435.441427][ T7101] loop2: detected capacity change from 0 to 7
[  435.472718][ T6240]  loop2:
[  435.480155][ T6240] loop2: partition table partially beyond EOD, truncated
[  435.581859][ T7101]  loop2:
[  435.590892][ T7101] loop2: partition table partially beyond EOD, truncated
[  435.636510][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.278'.
[  437.841813][ T7126] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  438.920045][   T30] kauditd_printk_skb: 10 callbacks suppressed
[  438.920064][   T30] audit: type=1326 audit(1755915031.711:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7146 comm="syz.3.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  438.990491][   T30] audit: type=1326 audit(1755915031.741:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7146 comm="syz.3.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  439.099197][ T7156] FAULT_INJECTION: forcing a failure.
[  439.099197][ T7156] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  439.112720][ T7156] CPU: 0 UID: 0 PID: 7156 Comm: syz.3.290 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  439.112756][ T7156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  439.112766][ T7156] Call Trace:
[  439.112775][ T7156]  <TASK>
[  439.112784][ T7156]  dump_stack_lvl+0x189/0x250
[  439.112812][ T7156]  ? __pfx____ratelimit+0x10/0x10
[  439.112833][ T7156]  ? __pfx_dump_stack_lvl+0x10/0x10
[  439.112854][ T7156]  ? __pfx__printk+0x10/0x10
[  439.112878][ T7156]  ? __might_fault+0xb0/0x130
[  439.112911][ T7156]  should_fail_ex+0x414/0x560
[  439.112937][ T7156]  _copy_from_user+0x2d/0xb0
[  439.112966][ T7156]  __sys_bpf+0x1ed/0x860
[  439.112996][ T7156]  ? __pfx___sys_bpf+0x10/0x10
[  439.113037][ T7156]  ? ksys_write+0x22a/0x250
[  439.113059][ T7156]  ? __pfx_ksys_write+0x10/0x10
[  439.113086][ T7156]  __x64_sys_bpf+0x7c/0x90
[  439.113118][ T7156]  do_syscall_64+0xfa/0x3b0
[  439.113141][ T7156]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.113160][ T7156]  ? asm_sysvec_call_function_single+0x1a/0x20
[  439.113179][ T7156]  ? clear_bhb_loop+0x60/0xb0
[  439.113203][ T7156]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  439.113221][ T7156] RIP: 0033:0x7fd23958ebe9
[  439.113239][ T7156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  439.113256][ T7156] RSP: 002b:00007fd2377b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  439.113279][ T7156] RAX: ffffffffffffffda RBX: 00007fd2397b6180 RCX: 00007fd23958ebe9
[  439.113293][ T7156] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005
[  439.113306][ T7156] RBP: 00007fd2377b4090 R08: 0000000000000000 R09: 0000000000000000
[  439.113317][ T7156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  439.113328][ T7156] R13: 00007fd2397b6218 R14: 00007fd2397b6180 R15: 00007ffc2b398b88
[  439.113361][ T7156]  </TASK>
[  439.121493][   T30] audit: type=1326 audit(1755915031.741:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7146 comm="syz.3.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  439.647985][   T30] audit: type=1326 audit(1755915031.741:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7146 comm="syz.3.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  439.689729][   T30] audit: type=1326 audit(1755915031.741:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7146 comm="syz.3.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  439.726073][   T30] audit: type=1326 audit(1755915031.741:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7146 comm="syz.3.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  439.863807][   T30] audit: type=1326 audit(1755915031.741:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7146 comm="syz.3.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  439.979075][   T30] audit: type=1326 audit(1755915031.751:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7146 comm="syz.3.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  440.081928][   T30] audit: type=1326 audit(1755915031.751:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7146 comm="syz.3.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  440.104606][   T30] audit: type=1326 audit(1755915031.751:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7146 comm="syz.3.290" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  440.168007][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  440.181633][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  441.123994][ T7182] netlink: 'syz.4.300': attribute type 5 has an invalid length.
[  441.153460][ T7182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.300'.
[  443.426230][ T7202] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  444.068788][ T5959] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  444.565196][ T5959] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  444.866431][ T5959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  444.911220][ T5959] usb 1-1: config 0 descriptor??
[  444.938985][ T5959] cp210x 1-1:0.0: cp210x converter detected
[  445.124485][ T5959] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121
[  445.143753][ T5875] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  445.158937][ T5959] cp210x 1-1:0.0: querying part number failed
[  445.349659][ T5959] usb 1-1: cp210x converter now attached to ttyUSB0
[  445.363574][ T5875] usb 5-1: config 0 has an invalid interface number: 29 but max is 0
[  445.371975][ T5875] usb 5-1: config 0 has no interface number 0
[  445.669611][ T5875] usb 5-1: config 0 interface 29 has no altsetting 0
[  445.762629][ T5875] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac
[  445.845368][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  445.893233][ T5875] usb 5-1: Product: syz
[  445.897586][ T5875] usb 5-1: Manufacturer: syz
[  445.902226][ T5875] usb 5-1: SerialNumber: syz
[  445.965878][ T5875] usb 5-1: config 0 descriptor??
[  445.976441][   T30] kauditd_printk_skb: 45 callbacks suppressed
[  445.976459][   T30] audit: type=1326 audit(1755915038.771:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7234 comm="syz.3.312" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd23958ebe9 code=0x0
[  446.183720][ T7220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  446.198163][ T7220] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  446.241373][ T5875] peak_usb 5-1:0.29: PEAK-System PCAN-USB X6 v207 fw v188.0.0 (2 channels)
[  446.493989][ T7251] : entered promiscuous mode
[  446.541290][ T5875] peak_usb 5-1:0.29 can0: unable to request usb[type=2 value=5] err=-71
[  446.554119][ T5875] peak_usb 5-1:0.29: unable to tell PCAN-USB X6 driver is loaded (err -71)
[  446.820809][ T5959] usb 1-1: USB disconnect, device number 5
[  447.230168][ T5959] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  447.296613][ T5959] cp210x 1-1:0.0: device disconnected
[  447.350823][ T5875] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -71
[  447.369538][ T7228] Bluetooth: hci0: command 0x0406 tx timeout
[  447.370760][ T7227] Bluetooth: hci2: command 0x0406 tx timeout
[  447.383877][ T7228] Bluetooth: hci1: command 0x0406 tx timeout
[  447.383925][ T7228] Bluetooth: hci4: command 0x0405 tx timeout
[  447.383974][ T7228] Bluetooth: hci3: command 0x0406 tx timeout
[  447.427186][ T5875] usb 5-1: USB disconnect, device number 5
[  448.278725][ T7270] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  450.023308][ T7287] sctp: failed to load transform for md5: -2
[  450.169604][ T7300] syz.0.328 uses obsolete (PF_INET,SOCK_PACKET)
[  450.313475][ T6029] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  450.563753][ T6029] usb 4-1: Using ep0 maxpacket: 8
[  450.636342][ T6029] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  450.706759][ T6029] usb 4-1: config 179 has no interface number 0
[  450.757480][ T6029] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  450.868947][ T6029] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  450.931396][ T6029] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  450.961766][ T6029] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  451.013324][ T6029] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  451.034756][ T6029] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  451.049223][ T6029] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  451.071218][ T7301] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  451.733454][ T7301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  451.742367][ T7301] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  452.236332][ T7326] loop7: detected capacity change from 0 to 524255232
[  452.502295][ T5959] usb 4-1: USB disconnect, device number 13
[  452.502311][    C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  452.518609][    C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  452.937539][ T7335] netlink: 'syz.2.335': attribute type 1 has an invalid length.
[  453.202539][ T7341] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  454.120014][ T7354] netlink: 'syz.2.340': attribute type 21 has an invalid length.
[  454.155008][ T7354] IPv6: NLM_F_CREATE should be specified when creating new route
[  454.162914][ T7354] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  454.170429][ T7354] IPv6: NLM_F_CREATE should be set when creating new route
[  454.177752][ T7354] IPv6: NLM_F_CREATE should be set when creating new route
[  454.185078][ T7354] IPv6: NLM_F_CREATE should be set when creating new route
[  457.046716][   T30] audit: type=1326 audit(1755915049.841:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7383 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  457.243368][   T30] audit: type=1326 audit(1755915049.871:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7383 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  457.288832][   T30] audit: type=1326 audit(1755915049.871:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7383 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  458.008566][   T30] audit: type=1326 audit(1755915049.871:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7383 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  458.027302][ T7387] veth0_to_team: entered promiscuous mode
[  458.069464][   T30] audit: type=1326 audit(1755915049.871:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7383 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  458.114671][ T7387] veth0_to_team: entered allmulticast mode
[  458.241064][   T30] audit: type=1326 audit(1755915049.871:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7383 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  458.293412][   T30] audit: type=1326 audit(1755915049.871:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7383 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  458.889189][   T30] audit: type=1326 audit(1755915049.871:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7383 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  459.038232][   T30] audit: type=1326 audit(1755915049.871:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7383 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  459.106412][   T30] audit: type=1326 audit(1755915049.871:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7383 comm="syz.3.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  459.474340][ T5990] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  459.963700][ T5990] usb 5-1: Using ep0 maxpacket: 32
[  459.979388][ T5990] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe
[  460.040427][ T5990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  460.090412][ T5990] usb 5-1: Product: syz
[  460.095196][ T5990] usb 5-1: Manufacturer: syz
[  460.099938][ T5990] usb 5-1: SerialNumber: syz
[  460.136711][ T5990] usb 5-1: config 0 descriptor??
[  460.298462][ T7426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.359'.
[  461.249148][ T5990] snd-usb-6fire 5-1:0.0: unknown device firmware state received from device:
[  461.273254][ T5990] eb aa 00 00 00 00 00 00 
[  461.297663][ T5990] snd-usb-6fire 5-1:0.0: probe with driver snd-usb-6fire failed with error -5
[  461.361280][ T7413] delete_channel: no stack
[  461.373343][   T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  461.383880][ T7419] sctp: failed to load transform for md5: -2
[  461.663229][   T24] usb 3-1: Using ep0 maxpacket: 8
[  462.440623][   T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  462.670638][   T24] usb 3-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b
[  462.699307][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  462.733308][   T24] usb 3-1: Product: syz
[  462.737572][   T24] usb 3-1: Manufacturer: syz
[  462.765688][   T24] usb 3-1: SerialNumber: syz
[  462.794454][   T24] usb 3-1: config 0 descriptor??
[  462.820364][   T24] gspca_main: stk014-2.14.0 probing 05e1:0893
[  462.835661][   T24] usb 3-1: selecting invalid altsetting 1
[  462.857831][   T30] kauditd_printk_skb: 43 callbacks suppressed
[  462.857852][   T30] audit: type=1326 audit(1755915055.651:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7450 comm="syz.3.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  463.670058][   T30] audit: type=1326 audit(1755915056.381:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7450 comm="syz.3.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  463.731177][   T24] gspca_stk014: reg_r err -110
[  463.834928][   T24] stk014 3-1:0.0: probe with driver stk014 failed with error -110
[  464.332484][   T24] usb 3-1: USB disconnect, device number 11
[  464.369089][   T30] audit: type=1326 audit(1755915056.421:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7450 comm="syz.3.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  464.436310][   T30] audit: type=1326 audit(1755915056.431:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7450 comm="syz.3.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  464.468645][   T30] audit: type=1326 audit(1755915056.431:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7450 comm="syz.3.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  464.500427][   T30] audit: type=1326 audit(1755915056.431:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7450 comm="syz.3.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  464.537672][   T30] audit: type=1326 audit(1755915056.431:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7450 comm="syz.3.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  464.540212][ T7458] loop2: detected capacity change from 0 to 7
[  464.588171][   T30] audit: type=1326 audit(1755915056.431:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7450 comm="syz.3.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  464.745927][   T30] audit: type=1326 audit(1755915056.441:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7450 comm="syz.3.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  464.786587][ T7458]  loop2:
[  464.789731][ T7458] loop2: partition table partially beyond EOD, truncated
[  464.855122][   T30] audit: type=1326 audit(1755915056.441:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7450 comm="syz.3.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  465.140659][ T5945] usb 5-1: USB disconnect, device number 6
[  465.454175][ T7467] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  467.896219][ T7482] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  470.970031][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805dc1ac00: rx timeout, send abort
[  471.470931][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805dc1ac00: abort rx timeout. Force session deactivation
[  471.782573][ T5884] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  472.259033][ T7514] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  472.655777][ T5884] usb 3-1: Using ep0 maxpacket: 16
[  472.701205][ T5884] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  472.712831][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  472.731203][ T5884] usb 3-1: Product: syz
[  472.754201][ T5884] usb 3-1: Manufacturer: syz
[  472.769193][ T5884] usb 3-1: SerialNumber: syz
[  472.783401][ T5884] usb 3-1: config 0 descriptor??
[  472.792336][ T7516] loop2: detected capacity change from 0 to 7
[  472.811836][ T5884] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[  472.816890][ T7516]  loop2:
[  472.823002][ T5884] usb 3-1: Detected FT232H
[  472.828104][ T7516] loop2: partition table partially beyond EOD, truncated
[  473.019656][ T5884] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  473.052714][ T5884] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  473.091136][ T5884] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71
[  473.125062][ T5884] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  473.182467][ T5884] usb 3-1: USB disconnect, device number 12
[  473.240819][ T5884] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  473.453974][ T5884] ftdi_sio 3-1:0.0: device disconnected
[  474.344270][ T7534] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  475.253306][ T5884] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  475.823245][ T5884] usb 3-1: Using ep0 maxpacket: 32
[  475.886595][ T5884] usb 3-1: unable to get BOS descriptor or descriptor too short
[  475.924794][ T5884] usb 3-1: config 7 has an invalid interface number: 187 but max is 0
[  475.963923][ T5884] usb 3-1: config 7 has no interface number 0
[  475.970323][ T5884] usb 3-1: config 7 interface 187 altsetting 6 bulk endpoint 0x4 has invalid maxpacket 947
[  476.010302][ T5884] usb 3-1: config 7 interface 187 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16
[  476.042998][ T5884] usb 3-1: config 7 interface 187 has no altsetting 0
[  476.070566][ T5884] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  476.105929][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  476.133277][ T5884] usb 3-1: Product: syz
[  476.149810][ T7553] loop2: detected capacity change from 0 to 7
[  476.159511][ T5884] usb 3-1: Manufacturer: syz
[  476.174181][ T6029] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  476.178264][ T7553]  loop2:
[  476.185550][ T5884] usb 3-1: SerialNumber: syz
[  476.208531][ T7553] loop2: partition table partially beyond EOD, truncated
[  476.226618][ T7536] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  476.256625][ T7536] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  476.369356][ T6029] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  476.477965][ T6029] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  476.640112][ T5884] usb 3-1: Limiting number of CPorts to U8_MAX
[  476.734971][ T6029] usb 2-1: config 0 descriptor??
[  476.890367][ T6029] cp210x 2-1:0.0: cp210x converter detected
[  476.920210][ T5884] usb 3-1: Unknown endpoint type found, address 0x07
[  477.000919][ T5884] usb 3-1: Unused bulk OUT endpoint found: 0x03
[  477.697029][ T5884] usb 3-1: Not enough endpoints found in device, aborting!
[  477.704014][ T7551] No control pipe specified
[  478.404819][ T5884] usb 3-1: USB disconnect, device number 13
[  478.463636][ T6029] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71
[  478.471466][ T6029] cp210x 2-1:0.0: querying part number failed
[  478.568802][ T6029] usb 2-1: cp210x converter now attached to ttyUSB0
[  478.630528][ T6029] usb 2-1: USB disconnect, device number 10
[  478.686398][ T6029] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  478.715143][ T6029] cp210x 2-1:0.0: device disconnected
[  480.979457][ T7585] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  481.810991][ T7597] loop2: detected capacity change from 0 to 7
[  481.850961][ T7597]  loop2:
[  481.854502][ T7597] loop2: partition table partially beyond EOD, truncated
[  481.873662][ T5205]  loop2:
[  481.883541][ T5205] loop2: partition table partially beyond EOD, truncated
[  482.049870][ T7605] netlink: 140 bytes leftover after parsing attributes in process `syz.4.409'.
[  483.381325][ T5959] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  484.363610][ T5959] usb 5-1: Using ep0 maxpacket: 16
[  484.381674][ T5959] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  485.286707][ T5959] usb 5-1: config 1 interface 0 has no altsetting 0
[  485.398147][ T5959] usb 5-1: New USB device found, idVendor=0dfc, idProduct=0003, bcdDevice= 0.40
[  485.487272][ T5959] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  485.538541][ T5959] usb 5-1: Product: 렚拾蕅枅뭩ᮀ핹顢끢䆮᳸ꏛꔽ畓鮐遈疗냠捗억щ줸챋ēϳص륷䗤⃔㗚畚꾨ᮎЊ蒳盘㚬ᄓ춘㳐셁腲馫夹훴吨撩ඳ읨้䥝岡껐⚵唕
[  486.077081][ T5959] usb 5-1: Manufacturer: అ
[  486.105164][ T5959] usb 5-1: can't set config #1, error -71
[  486.165367][ T5959] usb 5-1: USB disconnect, device number 7
[  486.949150][  T926] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  487.371218][  T926] usb 4-1: device descriptor read/64, error -71
[  487.834511][  T926] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  488.313258][  T926] usb 4-1: device descriptor read/64, error -71
[  488.429156][  T926] usb usb4-port1: attempt power cycle
[  488.813747][  T926] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  488.912677][  T926] usb 4-1: device descriptor read/8, error -71
[  489.193802][  T926] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  493.143312][  T926] usb 4-1: device descriptor read/8, error -71
[  493.283523][  T926] usb usb4-port1: unable to enumerate USB device
[  493.302164][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.425'.
[  495.741081][ T7690] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  496.356542][ T7696] loop7: detected capacity change from 0 to 524255232
[  500.098198][ T7747] netlink: 36 bytes leftover after parsing attributes in process `syz.2.448'.
[  500.413619][   T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  500.583221][   T24] usb 3-1: Using ep0 maxpacket: 16
[  500.612696][   T24] usb 3-1: unable to get BOS descriptor or descriptor too short
[  500.636414][   T24] usb 3-1: config 1 has an invalid interface number: 206 but max is 0
[  500.664929][   T24] usb 3-1: config 1 has no interface number 0
[  500.715658][   T24] usb 3-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a
[  500.743951][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  500.769470][   T24] usb 3-1: Product: syz
[  500.782929][   T24] usb 3-1: Manufacturer: syz
[  500.804607][   T24] usb 3-1: SerialNumber: syz
[  501.330180][   T24] usb 3-1: USB disconnect, device number 14
[  501.609228][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  501.622112][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  503.891236][ T7775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.454'.
[  503.900177][ T7775] netlink: 'syz.2.454': attribute type 30 has an invalid length.
[  503.915373][ T7775] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  503.924441][ T7775] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  503.933426][ T7775] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  503.942134][ T7775] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  503.954386][ T7775] Zero length message leads to an empty skb
[  507.625322][ T7826] tc_dump_action: action bad kind
[  511.262103][   T30] kauditd_printk_skb: 18 callbacks suppressed
[  511.262126][   T30] audit: type=1326 audit(1755915360.038:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7858 comm="syz.3.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  511.290043][    C1] vkms_vblank_simulate: vblank timer overrun
[  511.425651][ T7861] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  511.428450][   T30] audit: type=1326 audit(1755915360.038:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7858 comm="syz.3.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  511.453250][    C1] vkms_vblank_simulate: vblank timer overrun
[  511.483236][   T30] audit: type=1326 audit(1755915360.038:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7858 comm="syz.3.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  511.504757][    C1] vkms_vblank_simulate: vblank timer overrun
[  511.537077][ T7861] CIFS mount error: No usable UNC path provided in device string!
[  511.537077][ T7861] 
[  511.748727][ T7861] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  511.776726][   T30] audit: type=1326 audit(1755915360.038:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7858 comm="syz.3.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  512.042562][   T30] audit: type=1326 audit(1755915360.038:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7858 comm="syz.3.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  512.528671][   T30] audit: type=1326 audit(1755915360.038:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7858 comm="syz.3.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  512.764458][   T30] audit: type=1326 audit(1755915360.038:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7858 comm="syz.3.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  512.861833][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz.3.480'.
[  512.898760][   T30] audit: type=1326 audit(1755915360.038:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7858 comm="syz.3.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  513.026796][ T7878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.481'.
[  513.029204][   T30] audit: type=1326 audit(1755915360.048:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7858 comm="syz.3.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  513.233900][   T30] audit: type=1326 audit(1755915360.048:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7858 comm="syz.3.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  513.255343][    C1] vkms_vblank_simulate: vblank timer overrun
[  518.856394][ T7919] netlink: 24 bytes leftover after parsing attributes in process `syz.3.491'.
[  518.972669][ T7923] loop2: detected capacity change from 0 to 7
[  519.014666][ T7923]  loop2: p4
[  519.018043][ T7923] loop2: partition table partially beyond EOD, truncated
[  519.093823][ T7923] loop2: p4 size 4294967295 extends beyond EOD, truncated
[  519.799830][   T30] kauditd_printk_skb: 28 callbacks suppressed
[  519.799863][   T30] audit: type=1326 audit(1755915368.598:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7931 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  520.562501][   T30] audit: type=1326 audit(1755915368.628:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7931 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  520.833619][   T30] audit: type=1326 audit(1755915368.628:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7931 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  520.856147][   T30] audit: type=1326 audit(1755915368.628:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7931 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  520.880288][   T30] audit: type=1326 audit(1755915368.628:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7931 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  520.901990][   T30] audit: type=1326 audit(1755915368.628:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7931 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  520.924061][   T30] audit: type=1326 audit(1755915368.638:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7931 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  520.950546][ T6240] udevd[6240]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  521.038674][   T30] audit: type=1326 audit(1755915368.638:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7931 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  521.228265][   T30] audit: type=1326 audit(1755915368.638:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7931 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  522.373267][   T30] audit: type=1326 audit(1755915368.638:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7931 comm="syz.3.495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  522.408790][ T7942] sctp: failed to load transform for md5: -2
[  525.203298][   T24] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  525.586653][ T7965] ip6t_srh: unknown srh match flags  4000
[  525.607288][   T24] usb 5-1: config 6 has an invalid interface number: 108 but max is 0
[  526.490250][   T24] usb 5-1: config 6 has no interface number 0
[  526.538868][ T7965] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/nullb0": -EINTR
[  526.705412][   T24] usb 5-1: config 6 interface 108 has no altsetting 0
[  526.904142][ T5945] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  527.144407][ T5945] usb 1-1: Using ep0 maxpacket: 32
[  527.262839][   T24] usb 5-1: string descriptor 0 read error: -71
[  527.270470][ T5945] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  527.339518][   T24] usb 5-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=d2.1d
[  527.374604][ T5945] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  527.397940][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  527.423239][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  527.478484][ T5945] usb 1-1: Product: syz
[  527.502697][ T5945] usb 1-1: Manufacturer: syz
[  527.511447][   T24] usb 5-1: can't set config #6, error -71
[  527.520832][ T5945] usb 1-1: SerialNumber: syz
[  527.528527][   T24] usb 5-1: USB disconnect, device number 8
[  527.540435][ T5945] usb 1-1: config 0 descriptor??
[  527.576692][ T5945] usb 1-1: bad CDC descriptors
[  527.582404][ T5945] usb 1-1: unsupported MDLM descriptors
[  527.795322][ T7996] netlink: 24 bytes leftover after parsing attributes in process `syz.1.509'.
[  528.574937][ T7996] vxcan3: entered promiscuous mode
[  529.160805][ T5884] usb 1-1: USB disconnect, device number 6
[  529.845028][   T30] kauditd_printk_skb: 32 callbacks suppressed
[  529.845062][   T30] audit: type=1326 audit(1755915378.648:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8033 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  529.872741][    C1] vkms_vblank_simulate: vblank timer overrun
[  530.739293][   T30] audit: type=1326 audit(1755915378.648:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8033 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  530.761406][   T30] audit: type=1326 audit(1755915378.678:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8033 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  530.783042][   T30] audit: type=1326 audit(1755915378.678:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8033 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  530.804456][    C1] vkms_vblank_simulate: vblank timer overrun
[  530.823219][   T30] audit: type=1326 audit(1755915378.678:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8033 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  530.862048][ T8041] netlink: 'syz.1.521': attribute type 28 has an invalid length.
[  530.876496][   T30] audit: type=1326 audit(1755915378.678:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8033 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  530.938125][   T30] audit: type=1326 audit(1755915378.678:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8033 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  531.054734][ T8043] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  531.074729][   T30] audit: type=1326 audit(1755915378.678:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8033 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd23958d550 code=0x7ffc0000
[  531.246791][   T30] audit: type=1326 audit(1755915378.678:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8033 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  531.268366][    C1] vkms_vblank_simulate: vblank timer overrun
[  531.303362][   T30] audit: type=1326 audit(1755915378.678:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8033 comm="syz.3.520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  532.515699][ T8062] netlink: 'syz.0.526': attribute type 2 has an invalid length.
[  532.548765][ T8062] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  533.513661][ T8068] netlink: 40 bytes leftover after parsing attributes in process `syz.1.527'.
[  533.588329][ T8068] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  533.647786][ T8068] gretap1: entered promiscuous mode
[  533.658531][ T8068] gretap1: entered allmulticast mode
[  533.723252][   T24] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  533.856242][   T24] usb 4-1: device descriptor read/64, error -71
[  533.920667][ T8085] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  534.015965][ T8090] loop2: detected capacity change from 0 to 7
[  534.042940][ T6240]  loop2:
[  534.053305][ T6240] loop2: partition table partially beyond EOD, truncated
[  534.089822][ T8090]  loop2:
[  534.092966][ T8090] loop2: partition table partially beyond EOD, truncated
[  534.106428][   T24] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[  534.433259][   T24] usb 4-1: device descriptor read/64, error -71
[  535.489933][   T24] usb usb4-port1: attempt power cycle
[  536.063475][   T24] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[  536.151100][   T24] usb 4-1: device descriptor read/8, error -71
[  536.426275][ T5945] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  536.797471][ T5945] usb 3-1: Using ep0 maxpacket: 32
[  536.844867][ T5945] usb 3-1: unable to get BOS descriptor or descriptor too short
[  536.888644][ T5945] usb 3-1: config 127 has an invalid interface number: 36 but max is 1
[  536.913179][ T5945] usb 3-1: config 127 has an invalid interface number: 51 but max is 1
[  536.951614][ T5945] usb 3-1: config 127 has no interface number 0
[  537.010649][ T5945] usb 3-1: config 127 has no interface number 1
[  537.035467][ T5945] usb 3-1: config 127 interface 36 has no altsetting 0
[  537.042545][ T5945] usb 3-1: config 127 interface 51 has no altsetting 0
[  537.123894][ T5945] usb 3-1: New USB device found, idVendor=1410, idProduct=a005, bcdDevice=53.d4
[  537.155076][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  537.200533][ T5945] usb 3-1: Product: syz
[  537.211720][ T5945] usb 3-1: Manufacturer: syz
[  537.230901][ T5945] usb 3-1: SerialNumber: syz
[  537.300129][ T8138] loop2: detected capacity change from 0 to 7
[  537.310092][ T8138]  loop2:
[  537.313940][ T8138] loop2: partition table partially beyond EOD, truncated
[  537.451132][ T8107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  537.463179][ T5959] usb 2-1: new full-speed USB device number 11 using dummy_hcd
[  537.474188][ T8107] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  537.600766][ T5945] usb 3-1: unknown number of interfaces: 2
[  537.623272][ T5959] usb 2-1: device descriptor read/64, error -71
[  537.627696][ T5945] usb 3-1: USB disconnect, device number 15
[  537.863303][ T5959] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  538.198991][ T5959] usb 2-1: device descriptor read/64, error -71
[  538.314496][ T5959] usb usb2-port1: attempt power cycle
[  539.019620][ T5959] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  539.190890][ T5959] usb 2-1: device descriptor read/8, error -71
[  539.747322][ T5959] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  539.961342][ T5959] usb 2-1: device descriptor read/8, error -71
[  540.093775][ T5959] usb usb2-port1: unable to enumerate USB device
[  541.286289][ T8188] loop2: detected capacity change from 0 to 7
[  541.318289][ T8190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.560'.
[  541.319334][ T8188]  loop2:
[  541.463379][ T8188] loop2: partition table partially beyond EOD, truncated
[  541.628433][ T5205]  loop2:
[  541.631482][ T5205] loop2: partition table partially beyond EOD, truncated
[  541.693206][ T5945] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  541.875277][ T5945] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  542.041876][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  542.325318][ T5945] usb 1-1: config 0 descriptor??
[  542.362946][ T5945] cp210x 1-1:0.0: cp210x converter detected
[  543.344860][ T5945] usb 1-1: cp210x converter now attached to ttyUSB0
[  543.384827][ T5945] usb 1-1: USB disconnect, device number 7
[  543.398682][ T5945] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  543.409122][ T5945] cp210x 1-1:0.0: device disconnected
[  545.279807][ T8238] netlink: 100 bytes leftover after parsing attributes in process `syz.0.571'.
[  545.825827][   T30] kauditd_printk_skb: 2 callbacks suppressed
[  545.825847][   T30] audit: type=1326 audit(1755915394.628:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8247 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f558518ebe9 code=0x7ffc0000
[  545.890266][   T30] audit: type=1326 audit(1755915394.658:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8247 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f558518ebe9 code=0x7ffc0000
[  546.371071][ T8249] CIFS mount error: No usable UNC path provided in device string!
[  546.371071][ T8249] 
[  546.381156][ T8249] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  546.404147][   T30] audit: type=1326 audit(1755915394.658:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8247 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f558518ebe9 code=0x7ffc0000
[  546.426513][   T30] audit: type=1326 audit(1755915394.658:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8247 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f558518ebe9 code=0x7ffc0000
[  546.449260][   T30] audit: type=1326 audit(1755915394.658:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8247 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f558518ebe9 code=0x7ffc0000
[  546.449314][   T30] audit: type=1326 audit(1755915394.658:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8247 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f558518ebe9 code=0x7ffc0000
[  546.449363][   T30] audit: type=1326 audit(1755915394.658:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8247 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f558518ebe9 code=0x7ffc0000
[  546.449410][   T30] audit: type=1326 audit(1755915394.668:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8247 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f558518ebe9 code=0x7ffc0000
[  546.449457][   T30] audit: type=1326 audit(1755915394.668:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8247 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f558518ebe9 code=0x7ffc0000
[  546.449504][   T30] audit: type=1326 audit(1755915394.668:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8247 comm="syz.4.574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f558518ebe9 code=0x7ffc0000
[  547.843258][ T5959] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  548.043222][ T5959] usb 1-1: Using ep0 maxpacket: 8
[  548.050945][ T5959] usb 1-1: config 0 has an invalid interface number: 228 but max is 0
[  548.085962][ T5959] usb 1-1: config 0 has no interface number 0
[  548.145915][ T5959] usb 1-1: config 0 interface 228 has no altsetting 0
[  548.161522][ T5959] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09
[  548.171309][ T5959] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  548.181400][ T5959] usb 1-1: Product: syz
[  548.189508][ T5959] usb 1-1: Manufacturer: syz
[  548.198042][ T5959] usb 1-1: SerialNumber: syz
[  548.216659][ T5959] usb 1-1: config 0 descriptor??
[  548.232296][ T5959] go7007 1-1:0.228: probe with driver go7007 failed with error -12
[  548.500583][ T5945] usb 1-1: USB disconnect, device number 8
[  550.225857][  T926] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  550.253692][ T8310] CIFS mount error: No usable UNC path provided in device string!
[  550.253692][ T8310] 
[  550.287898][ T8310] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  550.408771][  T926] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  550.438071][  T926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  550.463298][  T926] usb 2-1: Product: syz
[  550.505383][  T926] usb 2-1: Manufacturer: syz
[  550.505411][  T926] usb 2-1: SerialNumber: syz
[  552.958200][  T926] cdc_ncm 2-1:1.0: failed to get mac address
[  553.235899][  T926] cdc_ncm 2-1:1.0: bind() failure
[  553.292522][  T926] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71
[  553.328158][  T926] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71
[  553.385260][  T926] usbtest 2-1:1.1: probe with driver usbtest failed with error -71
[  553.471530][  T926] usb 2-1: USB disconnect, device number 15
[  553.676585][ T8356] CIFS mount error: No usable UNC path provided in device string!
[  553.676585][ T8356] 
[  553.702838][ T8356] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  553.743319][ T5945] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  554.067084][ T5945] usb 5-1: Using ep0 maxpacket: 8
[  554.075635][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  554.099140][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  554.110162][ T5945] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  554.123547][ T5945] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  554.138435][ T5945] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  554.164616][ T5945] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  554.210893][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  554.256830][ T5945] usb 5-1: config 0 descriptor??
[  554.263965][ T8354] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  554.473211][  T926] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  554.653231][  T926] usb 3-1: Using ep0 maxpacket: 16
[  554.697008][  T926] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  554.719780][  T926] usb 3-1: config 1 interface 0 has no altsetting 0
[  554.722836][ T8354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  554.737597][  T926] usb 3-1: New USB device found, idVendor=25b5, idProduct=0002, bcdDevice= 0.40
[  554.750781][  T926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  554.759881][  T926] usb 3-1: Product: syz
[  554.771637][  T926] usb 3-1: Manufacturer: syz
[  554.777228][ T8354] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  554.794054][  T926] usb 3-1: SerialNumber: syz
[  554.849304][ T8354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  554.908428][ T8354] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  554.942806][ T5945] usb 5-1: USB disconnect, device number 9
[  554.944272][ T5881] Bluetooth: hci5: Opcode 0x0c03 failed: -19
[  555.610457][  T926] usbhid 3-1:1.0: can't add hid device: -71
[  555.643517][  T926] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  555.695533][  T926] usb 3-1: USB disconnect, device number 17
[  555.737397][ T8374] netlink: 'syz.1.607': attribute type 10 has an invalid length.
[  555.755119][ T8374] netlink: 40 bytes leftover after parsing attributes in process `syz.1.607'.
[  555.780100][ T8374] batman_adv: batadv0: Adding interface: virt_wifi0
[  555.804946][ T8374] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  555.842881][ T8374] batman_adv: batadv0: Interface activated: virt_wifi0
[  556.634328][ T8387] loop2: detected capacity change from 0 to 7
[  556.642546][ T8387]  loop2:
[  556.651148][ T8387] loop2: partition table partially beyond EOD, truncated
[  560.041277][ T8432] netlink: 'syz.1.621': attribute type 25 has an invalid length.
[  560.116523][ T8432] netlink: 184 bytes leftover after parsing attributes in process `syz.1.621'.
[  560.274689][ T8441] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  560.306612][ T8441] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  560.333334][ T8441] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  560.339879][ T8441] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4)
[  560.387486][ T8441] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  560.410882][ T8441] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  560.421063][ T8441] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  560.437857][ T8441] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  560.455690][ T8441] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  560.471876][ T8441] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  560.498822][ T8441] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  560.503704][  T926] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  560.508575][ T8452] netlink: 'syz.3.625': attribute type 10 has an invalid length.
[  560.537934][ T8452] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  560.664202][  T926] usb 2-1: device descriptor read/64, error -71
[  560.913388][  T926] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  561.063258][  T926] usb 2-1: device descriptor read/64, error -71
[  561.184695][  T926] usb usb2-port1: attempt power cycle
[  561.409369][ T8474] netlink: 'syz.4.630': attribute type 22 has an invalid length.
[  561.417365][ T8474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.630'.
[  561.452086][ T8474] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  561.460991][ T8474] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  561.470030][ T8474] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  561.478845][ T8474] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  561.518137][ T8474] netlink: 'syz.4.630': attribute type 22 has an invalid length.
[  561.539191][ T8474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.630'.
[  562.049242][  T926] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  562.073939][  T926] usb 2-1: device descriptor read/8, error -71
[  562.323567][  T926] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  562.370816][  T926] usb 2-1: device descriptor read/8, error -71
[  562.491253][  T926] usb usb2-port1: unable to enumerate USB device
[  563.049171][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  563.520906][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  564.099423][ T8486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  564.209025][ T8503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.638'.
[  564.233336][ T8503] Driver unsupported XDP return value 0 on prog  (id 208) dev N/A, expect packet loss!
[  564.301532][ T8503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  564.320390][ T8503] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  564.373763][ T5945] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  564.513679][ T5959] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  564.533805][  T926] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[  564.579930][ T5945] usb 2-1: Using ep0 maxpacket: 16
[  564.590900][ T5945] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  564.608707][ T5945] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  564.695870][ T5945] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  564.711008][ T5945] usb 2-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30
[  564.732306][ T5945] usb 2-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  564.733195][ T5959] usb 3-1: Using ep0 maxpacket: 16
[  564.754085][ T5945] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  564.767804][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  564.776544][ T5945] usb 2-1: Product: syz
[  564.777527][ T5959] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  564.780846][ T5945] usb 2-1: Manufacturer: syz
[  564.795793][ T5945] usb 2-1: SerialNumber: syz
[  564.822028][  T926] usb 4-1: config 5 has an invalid interface number: 123 but max is 0
[  564.830800][  T926] usb 4-1: config 5 has no interface number 0
[  564.838742][ T5959] usb 3-1: config 0 has no interface number 0
[  564.845192][  T926] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  564.858784][ T5959] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  564.872770][  T926] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0
[  564.882902][ T5959] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 49152, setting to 1024
[  564.894462][  T926] usb 4-1: config 5 interface 123 has no altsetting 0
[  564.920318][ T5959] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  564.938351][  T926] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  564.953379][ T5959] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  564.961566][  T926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  564.972982][ T5959] usb 3-1: Product: syz
[  564.977347][  T926] usb 4-1: Product: syz
[  564.981573][ T5959] usb 3-1: SerialNumber: syz
[  564.991122][  T926] usb 4-1: Manufacturer: syz
[  565.001191][  T926] usb 4-1: SerialNumber: syz
[  565.012456][ T5959] usb 3-1: config 0 descriptor??
[  565.046107][ T5959] cm109 3-1:0.8: invalid payload size 1024, expected 4
[  565.069438][ T5959] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input10
[  565.302800][  T926] ni6501 4-1:5.123: driver 'ni6501' failed to auto-configure device.
[  565.323581][    C0] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71
[  565.341651][  T926] usb 4-1: USB disconnect, device number 22
[  565.471748][ T8524] netlink: 20 bytes leftover after parsing attributes in process `syz.4.642'.
[  565.471838][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  565.488668][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  565.496119][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  565.503508][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  565.511470][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  565.518937][ T5959] usb 3-1: USB disconnect, device number 18
[  565.526508][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[  565.526540][    C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  565.554185][ T5959] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  565.663008][ T8529] mmap: syz.2.643 (8529) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  567.328278][ T8542] netlink: 40 bytes leftover after parsing attributes in process `syz.4.647'.
[  567.615157][ T5945] usb 2-1: USB disconnect, device number 20
[  567.887620][ T6240] udevd[6240]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  569.589871][ T8577] loop2: detected capacity change from 0 to 7
[  569.597105][ T8577]  loop2:
[  569.600222][ T8577] loop2: partition table partially beyond EOD, truncated
[  569.611715][ T5205]  loop2:
[  569.615635][ T5205] loop2: partition table partially beyond EOD, truncated
[  571.607028][ T8597] bridge0: port 3(gretap0) entered blocking state
[  571.642547][ T8597] bridge0: port 3(gretap0) entered disabled state
[  571.683859][ T8597] gretap0: entered allmulticast mode
[  571.731897][ T8597] gretap0: entered promiscuous mode
[  571.747641][ T8606] netlink: 'syz.2.664': attribute type 4 has an invalid length.
[  571.858621][ T8613] gretap0: left allmulticast mode
[  571.925123][ T8613] gretap0: left promiscuous mode
[  571.975409][ T8613] bridge0: port 3(gretap0) entered disabled state
[  573.935851][ T5881] Bluetooth: hci3: Malformed Event: 0x02
[  576.209219][ T8679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.680'.
[  576.423331][  T926] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  576.573206][  T926] usb 1-1: Using ep0 maxpacket: 16
[  576.807798][  T926] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  576.819562][  T926] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  576.831595][  T926] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  576.841283][  T926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  576.849823][  T926] usb 1-1: Product: syz
[  576.854446][  T926] usb 1-1: Manufacturer: syz
[  576.859162][  T926] usb 1-1: SerialNumber: syz
[  577.749469][  T926] usb 1-1: 0:2 : does not exist
[  578.964745][  T926] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  579.113378][   T30] kauditd_printk_skb: 13 callbacks suppressed
[  579.113448][   T30] audit: type=1326 audit(1755915427.878:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8696 comm="syz.3.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  580.121575][  T926] usb 1-1: USB disconnect, device number 9
[  580.902764][   T30] audit: type=1326 audit(1755915427.878:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8696 comm="syz.3.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  580.931447][   T30] audit: type=1326 audit(1755915427.878:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8696 comm="syz.3.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  580.956120][   T30] audit: type=1326 audit(1755915427.878:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8696 comm="syz.3.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  580.984187][   T30] audit: type=1326 audit(1755915427.878:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8696 comm="syz.3.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  581.011574][   T30] audit: type=1326 audit(1755915427.888:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8696 comm="syz.3.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  581.043293][   T30] audit: type=1326 audit(1755915427.888:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8696 comm="syz.3.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  581.257305][ T6240] udevd[6240]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  581.317793][   T30] audit: type=1326 audit(1755915427.888:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8696 comm="syz.3.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  581.339452][   T30] audit: type=1326 audit(1755915427.888:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8696 comm="syz.3.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  581.361399][   T30] audit: type=1326 audit(1755915427.898:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8696 comm="syz.3.685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  581.430651][ T8707] netlink: 'syz.3.690': attribute type 21 has an invalid length.
[  581.443336][ T8707] IPv6: NLM_F_CREATE should be specified when creating new route
[  581.460791][ T8707] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  581.468246][ T8707] IPv6: NLM_F_CREATE should be set when creating new route
[  581.475771][ T8707] IPv6: NLM_F_CREATE should be set when creating new route
[  581.483237][ T8707] IPv6: NLM_F_CREATE should be set when creating new route
[  581.761315][ T5945] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  582.214066][ T5945] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  582.251918][ T5945] usb 2-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.00
[  582.313674][ T8714] netlink: 'syz.2.691': attribute type 21 has an invalid length.
[  582.321573][ T8714] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  582.328933][ T8714] IPv6: NLM_F_CREATE should be set when creating new route
[  582.336423][ T8714] IPv6: NLM_F_CREATE should be set when creating new route
[  582.343758][ T8714] IPv6: NLM_F_CREATE should be set when creating new route
[  582.351417][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  582.404143][ T5945] usb 2-1: config 0 descriptor??
[  582.824375][  T926] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  583.958148][ T8728] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  583.970273][ T5945] usbhid 2-1:0.0: can't add hid device: -71
[  583.976398][ T5945] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  584.003672][ T5945] usb 2-1: USB disconnect, device number 21
[  585.046377][  T926] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[  585.077083][  T926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  585.117111][  T926] usb 1-1: config 0 descriptor??
[  585.398511][ T8735] netlink: 64 bytes leftover after parsing attributes in process `syz.3.699'.
[  585.448221][  T926] kaweth 1-1:0.0: Firmware present in device.
[  585.599287][  T926] kaweth 1-1:0.0: Statistics collection: 73ab93f2
[  585.617509][ T8735] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.699'.
[  585.637804][  T926] kaweth 1-1:0.0: Multicast filter limit: 2ac9
[  585.671983][  T926] kaweth 1-1:0.0: MTU: 22441
[  585.705470][  T926] kaweth 1-1:0.0: Read MAC address 32:3c:bf:11:03:6b
[  586.043833][  T926] kaweth 1-1:0.0: Error setting SOFS wait
[  586.049918][  T926] kaweth 1-1:0.0: probe with driver kaweth failed with error -5
[  586.077412][  T926] usb 1-1: USB disconnect, device number 10
[  586.232640][   T30] kauditd_printk_skb: 17 callbacks suppressed
[  586.232661][   T30] audit: type=1326 audit(1755915435.028:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8749 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4938ebe9 code=0x7ffc0000
[  586.838139][   T30] audit: type=1326 audit(1755915435.088:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8749 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4938ebe9 code=0x7ffc0000
[  586.869214][   T30] audit: type=1326 audit(1755915435.098:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8749 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f8a4938ebe9 code=0x7ffc0000
[  586.901615][   T30] audit: type=1326 audit(1755915435.098:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8749 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4938ebe9 code=0x7ffc0000
[  587.018271][   T30] audit: type=1326 audit(1755915435.098:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8749 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4938ebe9 code=0x7ffc0000
[  587.089515][ T8755] netlink: 80 bytes leftover after parsing attributes in process `syz.3.705'.
[  587.114273][   T30] audit: type=1326 audit(1755915435.118:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8749 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8a4938ebe9 code=0x7ffc0000
[  587.148951][ T8755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.705'.
[  587.175565][ T8755] netlink: 16 bytes leftover after parsing attributes in process `syz.3.705'.
[  587.199953][   T30] audit: type=1326 audit(1755915435.118:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8749 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4938ebe9 code=0x7ffc0000
[  587.353406][   T30] audit: type=1326 audit(1755915435.238:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8749 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f8a4938ebe9 code=0x7ffc0000
[  587.405711][   T30] audit: type=1326 audit(1755915435.248:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8749 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4938ebe9 code=0x7ffc0000
[  587.435493][   T30] audit: type=1326 audit(1755915435.278:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8749 comm="syz.2.704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4938ebe9 code=0x7ffc0000
[  589.230123][ T8782] program syz.1.713 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  590.112852][ T6029] usb 4-1: new low-speed USB device number 23 using dummy_hcd
[  590.844444][ T8802] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  590.855157][ T6029] usb 4-1: Invalid ep0 maxpacket: 16
[  591.433287][ T6029] usb 4-1: new low-speed USB device number 24 using dummy_hcd
[  591.743301][ T6029] usb 4-1: Invalid ep0 maxpacket: 16
[  592.590195][ T6029] usb usb4-port1: attempt power cycle
[  592.740056][ T8813] Smack: duplicate mount options
[  592.833602][ T8815] netlink: 2 bytes leftover after parsing attributes in process `syz.2.723'.
[  593.810928][   T30] kauditd_printk_skb: 16 callbacks suppressed
[  593.810987][   T30] audit: type=1326 audit(1755915441.798:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8816 comm="syz.3.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  594.075068][   T30] audit: type=1326 audit(1755915441.798:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8816 comm="syz.3.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  594.124876][   T30] audit: type=1326 audit(1755915441.798:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8816 comm="syz.3.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  594.172644][ T8822] netlink: 16 bytes leftover after parsing attributes in process `syz.0.726'.
[  594.345911][   T30] audit: type=1326 audit(1755915441.798:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8816 comm="syz.3.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  594.367902][    C1] vkms_vblank_simulate: vblank timer overrun
[  595.205361][   T30] audit: type=1326 audit(1755915441.798:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8816 comm="syz.3.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  595.723882][   T30] audit: type=1326 audit(1755915441.798:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8816 comm="syz.3.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  595.802093][   T30] audit: type=1326 audit(1755915441.798:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8816 comm="syz.3.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  596.322899][   T30] audit: type=1326 audit(1755915441.798:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8816 comm="syz.3.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  596.345061][   T30] audit: type=1326 audit(1755915441.808:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8816 comm="syz.3.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  596.366669][    C1] vkms_vblank_simulate: vblank timer overrun
[  596.373040][   T30] audit: type=1326 audit(1755915441.808:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8816 comm="syz.3.724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd23958ebe9 code=0x7ffc0000
[  596.794258][ T8839] CIFS mount error: No usable UNC path provided in device string!
[  596.794258][ T8839] 
[  596.804715][ T8839] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  598.423190][  T926] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  598.576057][ T8841] snd_dummy snd_dummy.0: control 0:0:0:syz0:16 is already present
[  598.633359][  T926] usb 3-1: Using ep0 maxpacket: 32
[  598.657925][ T8841] snd_dummy snd_dummy.0: control 0:0:0:syz0:2 is already present
[  598.683733][  T926] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  598.713783][  T926] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  598.732164][  T926] usb 3-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1
[  598.782753][  T926] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  598.805668][  T926] usb 3-1: config 0 descriptor??
[  598.838454][  T926] usb 3-1: bad CDC descriptors
[  599.513990][ T8864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.734'.
[  599.625299][ T8865] netlink: 60 bytes leftover after parsing attributes in process `syz.4.735'.
[  600.145330][ T8867] netlink: 'syz.4.735': attribute type 27 has an invalid length.
[  600.477183][ T8872] netlink: 780 bytes leftover after parsing attributes in process `syz.1.737'.
[  601.023000][ T8840] ALSA: mixer_oss: invalid OSS volume 'LI'
[  601.119244][ T8864] team0: Port device team_slave_0 removed
[  601.265904][ T6029] usb 3-1: USB disconnect, device number 19
[  601.497127][ T8875] Bluetooth: hci0: invalid len left 7, exp >= 50
[  602.987036][   T30] kauditd_printk_skb: 60 callbacks suppressed
[  602.987069][   T30] audit: type=1326 audit(1755915451.788:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8884 comm="syz.2.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4938ebe9 code=0x7ffc0000
[  604.497988][   T30] audit: type=1326 audit(1755915451.818:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8884 comm="syz.2.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4938ebe9 code=0x7ffc0000
[  604.520091][   T30] audit: type=1326 audit(1755915451.818:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8884 comm="syz.2.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8a4938ebe9 code=0x7ffc0000
[  604.559096][   T30] audit: type=1326 audit(1755915451.818:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8884 comm="syz.2.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4938ebe9 code=0x7ffc0000
[  604.580970][   T30] audit: type=1326 audit(1755915451.818:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8884 comm="syz.2.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8a4938ebe9 code=0x7ffc0000
[  604.581943][ T8888] netlink: 24 bytes leftover after parsing attributes in process `syz.4.741'.
[  604.602725][   T30] audit: type=1326 audit(1755915451.818:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8884 comm="syz.2.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4938ebe9 code=0x7ffc0000
[  604.602781][   T30] audit: type=1326 audit(1755915451.818:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8884 comm="syz.2.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4938ebe9 code=0x7ffc0000
[  604.602825][   T30] audit: type=1326 audit(1755915451.818:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8884 comm="syz.2.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8a4938ebe9 code=0x7ffc0000
[  604.602872][   T30] audit: type=1326 audit(1755915451.818:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8884 comm="syz.2.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4938ebe9 code=0x7ffc0000
[  604.602919][   T30] audit: type=1326 audit(1755915451.828:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8884 comm="syz.2.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4938ebe9 code=0x7ffc0000
[  606.613433][  T926] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  606.884622][  T926] usb 3-1: Using ep0 maxpacket: 32
[  607.037448][  T926] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  607.069098][ T8903] netlink: 'syz.4.747': attribute type 10 has an invalid length.
[  607.070733][  T926] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  607.146439][  T926] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  607.164891][  T926] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  607.187728][  T926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  607.197447][ T8903] 8021q: adding VLAN 0 to HW filter on device team0
[  607.504750][  T926] usb 3-1: Product: syz
[  607.532198][ T8903] bond0: (slave team0): Enslaving as an active interface with an up link
[  607.540839][  T926] usb 3-1: Manufacturer: syz
[  607.545980][  T926] usb 3-1: SerialNumber: syz
[  608.250264][ T8930] netlink: 20 bytes leftover after parsing attributes in process `syz.3.751'.
[  611.260462][   T30] kauditd_printk_skb: 13 callbacks suppressed
[  611.260483][   T30] audit: type=1326 audit(1755915459.148:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8940 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0efed8ebe9 code=0x7ffc0000
[  611.345993][   T30] audit: type=1326 audit(1755915459.148:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8940 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0efed8ebe9 code=0x7ffc0000
[  611.524120][   T30] audit: type=1326 audit(1755915459.148:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8940 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0efed8ebe9 code=0x7ffc0000
[  611.546626][   T30] audit: type=1326 audit(1755915459.148:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8940 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0efed8ebe9 code=0x7ffc0000
[  611.585589][   T30] audit: type=1326 audit(1755915459.148:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8940 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0efed8ebe9 code=0x7ffc0000
[  612.337901][   T30] audit: type=1326 audit(1755915459.148:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8940 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0efed8ebe9 code=0x7ffc0000
[  612.359601][   T30] audit: type=1326 audit(1755915459.148:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8940 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0efed8ebe9 code=0x7ffc0000
[  612.381897][   T30] audit: type=1326 audit(1755915459.148:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8940 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f0efed8ebe9 code=0x7ffc0000
[  612.443304][   T30] audit: type=1326 audit(1755915459.148:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8940 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0efed8ebe9 code=0x7ffc0000
[  612.526234][   T30] audit: type=1326 audit(1755915459.148:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8940 comm="syz.1.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0efed8ebe9 code=0x7ffc0000
[  613.046682][  T926] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[  613.059473][  T926] cdc_ncm 3-1:1.0: bind() failure
[  613.723841][ T8959] CIFS mount error: No usable UNC path provided in device string!
[  613.723841][ T8959] 
[  613.734168][ T8959] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  615.783256][ T6029] usb 3-1: USB disconnect, device number 20
[  616.281461][ T8980] netlink: 'syz.4.767': attribute type 2 has an invalid length.
[  616.383698][  T926] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  616.714123][  T926] usb 4-1: Using ep0 maxpacket: 32
[  617.651887][  T926] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  617.675243][  T926] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[  617.727242][  T926] usb 4-1: config 0 interface 0 has no altsetting 0
[  617.869786][  T926] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[  617.932722][  T926] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[  617.954324][  T926] usb 4-1: Product: syz
[  617.995447][  T926] usb 4-1: config 0 descriptor??
[  618.601726][ T8977] netlink: 'syz.3.766': attribute type 1 has an invalid length.
[  619.426625][  T926] waterforce 0003:1044:7A4D.0003: unknown main item tag 0x0
[  619.566968][  T926] waterforce 0003:1044:7A4D.0003: unknown main item tag 0x0
[  619.574545][  T926] waterforce 0003:1044:7A4D.0003: item fetching failed at offset 2/5
[  619.601093][  T926] waterforce 0003:1044:7A4D.0003: hid parse failed with -22
[  619.632935][  T926] waterforce 0003:1044:7A4D.0003: probe with driver waterforce failed with error -22
[  619.699385][ T6029] usb 4-1: USB disconnect, device number 26
[  620.494893][ T9019] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  620.509303][ T9019] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  620.687577][ T9012] =======================================================
[  620.687577][ T9012] WARNING: The mand mount option has been deprecated and
[  620.687577][ T9012]          and is ignored by this kernel. Remove the mand
[  620.687577][ T9012]          option from the mount to silence this warning.
[  620.687577][ T9012] =======================================================
[  620.722480][    C1] vkms_vblank_simulate: vblank timer overrun
[  620.732708][ T9012] MTD: Couldn't look up './file1': -15
[  620.812040][ T9008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.774'.
[  621.117889][   T30] kauditd_printk_skb: 53 callbacks suppressed
[  621.117910][   T30] audit: type=1326 audit(1755915469.918:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9007 comm="syz.2.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4938ebe9 code=0x7ffc0000
[  622.109393][   T30] audit: type=1326 audit(1755915470.878:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9007 comm="syz.2.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a4938ebe9 code=0x7ffc0000
[  622.274596][   T30] audit: type=1326 audit(1755915470.878:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9007 comm="syz.2.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8a4932ade9 code=0x7ffc0000
[  622.395065][ T5959] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  622.754668][   T30] audit: type=1326 audit(1755915470.878:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9007 comm="syz.2.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8a4932ade9 code=0x7ffc0000
[  622.776478][    C1] vkms_vblank_simulate: vblank timer overrun
[  622.782890][   T30] audit: type=1326 audit(1755915470.878:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9007 comm="syz.2.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8a4932ade9 code=0x7ffc0000
[  622.805739][   T30] audit: type=1326 audit(1755915470.878:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9007 comm="syz.2.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8a4932ade9 code=0x7ffc0000
[  622.862831][   T30] audit: type=1326 audit(1755915470.878:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9007 comm="syz.2.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8a4932ade9 code=0x7ffc0000
[  623.110453][   T30] audit: type=1326 audit(1755915470.878:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9007 comm="syz.2.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8a4932ade9 code=0x7ffc0000
[  623.296438][   T30] audit: type=1326 audit(1755915470.878:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9007 comm="syz.2.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8a4932ade9 code=0x7ffc0000
[  624.123459][   T30] audit: type=1326 audit(1755915470.878:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9007 comm="syz.2.774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8a4932ade9 code=0x7ffc0000
[  624.377976][ T9059] netlink: 'syz.0.788': attribute type 10 has an invalid length.
[  624.528441][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  624.535405][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  625.353908][ T9059] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  627.953335][ T5959] usb 3-1: device descriptor read/64, error -71
[  630.002459][ T6549] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  630.015003][ T6549] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  630.112076][ T6549] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  630.122876][ T6549] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  630.231632][ T6549] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  630.242341][ T6549] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  630.331173][ T6549] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  630.341717][ T6549] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  630.449975][ T6549] bridge_slave_1: left allmulticast mode
[  630.455911][ T6549] bridge_slave_1: left promiscuous mode
[  630.463785][ T6549] bridge0: port 2(bridge_slave_1) entered disabled state
[  630.477477][ T6549] bridge_slave_0: left allmulticast mode
[  630.484665][ T6549] bridge_slave_0: left promiscuous mode
[  630.490483][ T6549] bridge0: port 1(bridge_slave_0) entered disabled state
[  630.853399][ T6549] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  630.865086][ T6549] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  630.875798][ T6549] bond0 (unregistering): (slave team0): Releasing backup interface
[  630.889078][ T6549] bond0 (unregistering): Released all slaves
[  631.196608][ T6549] hsr_slave_0: left promiscuous mode
[  631.202583][ T6549] hsr_slave_1: left promiscuous mode
[  631.209935][ T6549] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  631.217906][ T6549] batman_adv: batadv0: Removing interface: batadv_slave_0
[  631.227811][ T6549] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  631.235605][ T6549] batman_adv: batadv0: Removing interface: batadv_slave_1
[  631.244757][ T6549] 
[  631.247120][ T6549] ======================================================
[  631.254147][ T6549] WARNING: possible circular locking dependency detected
[  631.261258][ T6549] 6.16.0-syzkaller #0 Not tainted
[  631.266279][ T6549] ------------------------------------------------------
[  631.273289][ T6549] kworker/u8:24/6549 is trying to acquire lock:
[  631.279532][ T6549] ffff88807beece00 (team->team_lock_key#4){+.+.}-{4:4}, at: team_device_event+0x182/0xa20
[  631.289453][ T6549] 
[  631.289453][ T6549] but task is already holding lock:
[  631.296815][ T6549] ffff888023bfad30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2320
[  631.308496][ T6549] 
[  631.308496][ T6549] which lock already depends on the new lock.
[  631.308496][ T6549] 
[  631.318903][ T6549] 
[  631.318903][ T6549] the existing dependency chain (in reverse order) is:
[  631.327941][ T6549] 
[  631.327941][ T6549] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}:
[  631.336385][ T6549]        lock_acquire+0x120/0x360
[  631.341418][ T6549]        __mutex_lock+0x182/0xe80
[  631.346510][ T6549]        dev_set_mtu+0x10e/0x260
[  631.351494][ T6549]        team_add_slave+0x8b8/0x2840
[  631.356786][ T6549]        do_set_master+0x530/0x6d0
[  631.361912][ T6549]        do_setlink+0xcf0/0x41c0
[  631.366862][ T6549]        rtnl_newlink+0x160b/0x1c70
[  631.372067][ T6549]        rtnetlink_rcv_msg+0x7cc/0xb70
[  631.377535][ T6549]        netlink_rcv_skb+0x205/0x470
[  631.382850][ T6549]        netlink_unicast+0x75c/0x8e0
[  631.388145][ T6549]        netlink_sendmsg+0x805/0xb30
[  631.393533][ T6549]        __sock_sendmsg+0x21c/0x270
[  631.398741][ T6549]        ____sys_sendmsg+0x505/0x830
[  631.404043][ T6549]        ___sys_sendmsg+0x21f/0x2a0
[  631.409256][ T6549]        __x64_sys_sendmsg+0x19b/0x260
[  631.414728][ T6549]        do_syscall_64+0xfa/0x3b0
[  631.419852][ T6549]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  631.426384][ T6549] 
[  631.426384][ T6549] -> #0 (team->team_lock_key#4){+.+.}-{4:4}:
[  631.434680][ T6549]        validate_chain+0xb9b/0x2140
[  631.440093][ T6549]        __lock_acquire+0xab9/0xd20
[  631.445329][ T6549]        lock_acquire+0x120/0x360
[  631.450363][ T6549]        __mutex_lock+0x182/0xe80
[  631.455398][ T6549]        team_device_event+0x182/0xa20
[  631.460862][ T6549]        notifier_call_chain+0x1b3/0x3e0
[  631.466536][ T6549]        dev_close_many+0x29c/0x410
[  631.471747][ T6549]        unregister_netdevice_many_notify+0x619/0x2320
[  631.478610][ T6549]        default_device_exit_batch+0x819/0x890
[  631.484860][ T6549]        ops_undo_list+0x522/0x990
[  631.490275][ T6549]        cleanup_net+0x4c5/0x800
[  631.495252][ T6549]        process_scheduled_works+0xade/0x17b0
[  631.501339][ T6549]        worker_thread+0x8a0/0xda0
[  631.506494][ T6549]        kthread+0x70e/0x8a0
[  631.511097][ T6549]        ret_from_fork+0x3fc/0x770
[  631.516387][ T6549]        ret_from_fork_asm+0x1a/0x30
[  631.521694][ T6549] 
[  631.521694][ T6549] other info that might help us debug this:
[  631.521694][ T6549] 
[  631.531945][ T6549]  Possible unsafe locking scenario:
[  631.531945][ T6549] 
[  631.539396][ T6549]        CPU0                    CPU1
[  631.544768][ T6549]        ----                    ----
[  631.550344][ T6549]   lock(&dev_instance_lock_key#3);
[  631.555612][ T6549]                                lock(team->team_lock_key#4);
[  631.563098][ T6549]                                lock(&dev_instance_lock_key#3);
[  631.570986][ T6549]   lock(team->team_lock_key#4);
[  631.576138][ T6549] 
[  631.576138][ T6549]  *** DEADLOCK ***
[  631.576138][ T6549] 
[  631.584329][ T6549] 5 locks held by kworker/u8:24/6549:
[  631.589717][ T6549]  #0: ffff88801b2fb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  631.600811][ T6549]  #1: ffffc9001b427bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  631.611444][ T6549]  #2: ffffffff8f4fd310 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  631.620950][ T6549]  #3: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x890
[  631.631093][ T6549]  #4: ffff888023bfad30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2320
[  631.643212][ T6549] 
[  631.643212][ T6549] stack backtrace:
[  631.649103][ T6549] CPU: 1 UID: 0 PID: 6549 Comm: kworker/u8:24 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  631.649121][ T6549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  631.649133][ T6549] Workqueue: netns cleanup_net
[  631.649154][ T6549] Call Trace:
[  631.649163][ T6549]  <TASK>
[  631.649171][ T6549]  dump_stack_lvl+0x189/0x250
[  631.649196][ T6549]  ? __pfx_dump_stack_lvl+0x10/0x10
[  631.649212][ T6549]  ? __pfx__printk+0x10/0x10
[  631.649232][ T6549]  ? print_lock_name+0xde/0x100
[  631.649250][ T6549]  print_circular_bug+0x2ee/0x310
[  631.649269][ T6549]  check_noncircular+0x134/0x160
[  631.649289][ T6549]  validate_chain+0xb9b/0x2140
[  631.649313][ T6549]  __lock_acquire+0xab9/0xd20
[  631.649329][ T6549]  ? team_device_event+0x182/0xa20
[  631.649342][ T6549]  lock_acquire+0x120/0x360
[  631.649355][ T6549]  ? team_device_event+0x182/0xa20
[  631.649370][ T6549]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  631.649397][ T6549]  __mutex_lock+0x182/0xe80
[  631.649413][ T6549]  ? team_device_event+0x182/0xa20
[  631.649429][ T6549]  ? __try_to_del_timer_sync+0x34a/0x3a0
[  631.649449][ T6549]  ? team_device_event+0x182/0xa20
[  631.649463][ T6549]  ? __pfx___mutex_lock+0x10/0x10
[  631.649478][ T6549]  ? __timer_delete_sync+0x218/0x2d0
[  631.649504][ T6549]  team_device_event+0x182/0xa20
[  631.649520][ T6549]  notifier_call_chain+0x1b3/0x3e0
[  631.649539][ T6549]  dev_close_many+0x29c/0x410
[  631.649557][ T6549]  ? __lock_acquire+0xab9/0xd20
[  631.649571][ T6549]  ? __pfx_dev_close_many+0x10/0x10
[  631.649592][ T6549]  unregister_netdevice_many_notify+0x619/0x2320
[  631.649610][ T6549]  ? __local_bh_enable_ip+0x12d/0x1c0
[  631.649627][ T6549]  ? __local_bh_enable_ip+0x12d/0x1c0
[  631.649642][ T6549]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  631.649663][ T6549]  ? unregister_netdevice_queue+0x1b3/0x380
[  631.649681][ T6549]  ? batadv_meshif_destroy_netlink+0x1dd/0x270
[  631.649702][ T6549]  default_device_exit_batch+0x819/0x890
[  631.649725][ T6549]  ? __pfx___might_resched+0x10/0x10
[  631.649742][ T6549]  ? __pfx_default_device_exit_batch+0x10/0x10
[  631.649762][ T6549]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  631.649780][ T6549]  ? net_generic+0x1e/0x240
[  631.649798][ T6549]  ? __pfx_default_device_exit_batch+0x10/0x10
[  631.649817][ T6549]  ops_undo_list+0x522/0x990
[  631.649839][ T6549]  ? __pfx_ops_undo_list+0x10/0x10
[  631.649862][ T6549]  cleanup_net+0x4c5/0x800
[  631.649883][ T6549]  ? __pfx_cleanup_net+0x10/0x10
[  631.649903][ T6549]  ? _raw_spin_unlock_irq+0x23/0x50
[  631.649916][ T6549]  ? process_scheduled_works+0x9ef/0x17b0
[  631.649931][ T6549]  ? process_scheduled_works+0x9ef/0x17b0
[  631.649947][ T6549]  process_scheduled_works+0xade/0x17b0
[  631.649972][ T6549]  ? __pfx_process_scheduled_works+0x10/0x10
[  631.649992][ T6549]  worker_thread+0x8a0/0xda0
[  631.650016][ T6549]  kthread+0x70e/0x8a0
[  631.650036][ T6549]  ? __pfx_worker_thread+0x10/0x10
[  631.650052][ T6549]  ? __pfx_kthread+0x10/0x10
[  631.650072][ T6549]  ? _raw_spin_unlock_irq+0x23/0x50
[  631.650084][ T6549]  ? lockdep_hardirqs_on+0x9c/0x150
[  631.650099][ T6549]  ? __pfx_kthread+0x10/0x10
[  631.650117][ T6549]  ret_from_fork+0x3fc/0x770
[  631.650133][ T6549]  ? __pfx_ret_from_fork+0x10/0x10
[  631.650148][ T6549]  ? __switch_to_asm+0x39/0x70
[  631.650165][ T6549]  ? __switch_to_asm+0x33/0x70
[  631.650194][ T6549]  ? __pfx_kthread+0x10/0x10
[  631.650212][ T6549]  ret_from_fork_asm+0x1a/0x30
[  631.650235][ T6549]  </TASK>
[  631.993321][ T6549] veth1_macvtap: left promiscuous mode
[  631.998949][ T6549] veth0_macvtap: left promiscuous mode
[  632.004943][ T6549] veth1_vlan: left promiscuous mode
[  632.010196][ T6549] veth0_vlan: left promiscuous mode
[  632.142365][ T6549] team0 (unregistering): Port device team_slave_1 removed
[  632.166857][ T6549] team0 (unregistering): Port device team_slave_0 removed
[  632.287173][ T6549] team0 (unregistering): Port device dummy0 removed
[  632.601225][ T6549] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  632.611752][ T6549] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.649764][ T6549] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  632.660335][ T6549] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.706578][ T6549] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  632.717156][ T6549] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.757556][ T6549] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  632.767931][ T6549] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.831140][ T6549] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.877584][ T6549] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.937819][ T6549] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.986832][ T6549] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  633.261575][ T6549] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  633.327436][ T6549] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  633.376617][ T6549] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  633.437614][ T6549] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  633.499514][ T6549] bridge_slave_1: left allmulticast mode
[  633.505238][ T6549] bridge_slave_1: left promiscuous mode
[  633.510982][ T6549] bridge0: port 2(bridge_slave_1) entered disabled state
[  633.519696][ T6549] bridge_slave_0: left allmulticast mode
[  633.526268][ T6549] bridge_slave_0: left promiscuous mode
[  633.532031][ T6549] bridge0: port 1(bridge_slave_0) entered disabled state
[  633.541165][ T6549] bridge_slave_1: left allmulticast mode
[  633.547322][ T6549] bridge_slave_1: left promiscuous mode
[  633.552959][ T6549] bridge0: port 2(bridge_slave_1) entered disabled state
[  633.561407][ T6549] bridge_slave_0: left allmulticast mode
[  633.567927][ T6549] bridge_slave_0: left promiscuous mode
[  633.573842][ T6549] bridge0: port 1(bridge_slave_0) entered disabled state
[  633.582568][ T6549] bridge_slave_1: left allmulticast mode
[  633.588700][ T6549] bridge_slave_1: left promiscuous mode
[  633.595495][ T6549] bridge0: port 2(bridge_slave_1) entered disabled state
[  633.605322][ T6549] bridge_slave_0: left allmulticast mode
[  633.611122][ T6549] bridge_slave_0: left promiscuous mode
[  633.617449][ T6549] bridge0: port 1(bridge_slave_0) entered disabled state
[  633.626696][ T6549] dummy0: left allmulticast mode
[  633.631756][ T6549] bridge0: port 3(dummy0) entered disabled state
[  633.639254][ T6549] bridge_slave_1: left allmulticast mode
[  633.644959][ T6549] bridge_slave_1: left promiscuous mode
[  633.650605][ T6549] bridge0: port 2(bridge_slave_1) entered disabled state
[  633.659726][ T6549] bridge_slave_0: left allmulticast mode
[  633.665543][ T6549] bridge_slave_0: left promiscuous mode
[  633.671327][ T6549] bridge0: port 1(bridge_slave_0) entered disabled state
[  633.783320][ T6549] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  633.794389][ T6549] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  633.804764][ T6549] bond0 (unregistering): Released all slaves
[  633.879207][ T6549] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  633.889093][ T6549] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  633.898780][ T6549] bond0 (unregistering): Released all slaves
[  634.180987][ T6549] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  634.190603][ T6549] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  634.200257][ T6549] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  634.210306][ T6549] bond0 (unregistering): Released all slaves
[  634.418769][ T6549] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  634.428634][ T6549] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  634.439489][ T6549] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  634.449528][ T6549] bond0 (unregistering): Released all slaves
[  634.532541][ T6549] : left promiscuous mode
[  635.070062][ T6549] hsr_slave_0: left promiscuous mode
[  635.076008][ T6549] hsr_slave_1: left promiscuous mode
[  635.081771][ T6549] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  635.089422][ T6549] batman_adv: batadv0: Removing interface: batadv_slave_0
[  635.097065][ T6549] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  635.104544][ T6549] batman_adv: batadv0: Removing interface: batadv_slave_1
[  635.118033][ T6549] hsr_slave_0: left promiscuous mode
[  635.124178][ T6549] hsr_slave_1: left promiscuous mode
[  635.129918][ T6549] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  635.137550][ T6549] batman_adv: batadv0: Removing interface: batadv_slave_0
[  635.145329][ T6549] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  635.152844][ T6549] batman_adv: batadv0: Removing interface: batadv_slave_1
[  635.160718][ T6549] batman_adv: batadv0: Removing interface: virt_wifi0
[  635.171014][ T6549] hsr_slave_0: left promiscuous mode
[  635.177624][ T6549] hsr_slave_1: left promiscuous mode
[  635.183462][ T6549] batman_adv: batadv0: Removing interface: batadv_slave_0
[  635.191022][ T6549] batman_adv: batadv0: Removing interface: batadv_slave_1
[  635.201202][ T6549] hsr_slave_0: left promiscuous mode
[  635.207264][ T6549] hsr_slave_1: left promiscuous mode
[  635.213017][ T6549] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  635.220664][ T6549] batman_adv: batadv0: Removing interface: batadv_slave_0
[  635.229057][ T6549] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  635.236880][ T6549] batman_adv: batadv0: Removing interface: batadv_slave_1
[  635.250571][ T6549] veth1_macvtap: left promiscuous mode
[  635.256229][ T6549] veth0_macvtap: left promiscuous mode
[  635.261980][ T6549] veth1_vlan: left promiscuous mode
[  635.267425][ T6549] veth0_vlan: left promiscuous mode
[  635.273643][ T6549] veth1_macvtap: left promiscuous mode
[  635.279165][ T6549] veth0_macvtap: left promiscuous mode
[  635.285160][ T6549] veth1_vlan: left promiscuous mode
[  635.290450][ T6549] veth0_vlan: left promiscuous mode
[  635.297018][ T6549] veth1_macvtap: left promiscuous mode
[  635.302932][ T6549] veth0_macvtap: left promiscuous mode
[  635.308690][ T6549] veth1_vlan: left promiscuous mode
[  635.314050][ T6549] veth0_vlan: left promiscuous mode
[  635.524197][ T6549] team0 (unregistering): Port device team_slave_1 removed
[  635.721389][ T6549] team0 (unregistering): Port device team_slave_1 removed
[  635.747467][ T6549] team0 (unregistering): Port device team_slave_0 removed
[  636.101203][ T6549] team0 (unregistering): Port device team_slave_1 removed
[  636.135986][ T6549] team0 (unregistering): Port device team_slave_0 removed
[  636.541023][ T6549] team0 (unregistering): Port device team_slave_1 removed
[  636.564916][ T6549] team0 (unregistering): Port device team_slave_0 removed