last executing test programs:

19.603177469s ago: executing program 1 (id=327):
socket$nl_netfilter(0x10, 0x3, 0xc)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10)
socket$inet6(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x12000021)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x478)
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r3, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10)
sendto$inet(r3, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0)
splice(r3, 0x0, r2, 0x0, 0x7ffff041, 0x1200000000000000)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x6a, 0x5, 0x0, &(0x7f0000000040))

16.279090292s ago: executing program 1 (id=336):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000)

16.142838503s ago: executing program 1 (id=337):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x2, 0x428200)
r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000100)=0x3)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_io_uring_setup(0xa39, &(0x7f00000000c0)={0x0, 0xfdc8, 0x10100}, &(0x7f0000000180)=<r5=>0x0, &(0x7f0000000340)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
write$binfmt_script(r3, &(0x7f0000020240), 0x10010)
syz_fuse_handle_req(r2, &(0x7f0000001ac0)="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", 0x2000, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r7 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r7, &(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x42}}}, 0x10)
r8 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0x80}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x41}, 0x10)
r9 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r9, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x42, 0x2}, 0x4000}}, 0x10)
r10 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r10, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000140)={0x0, @bt={0xf00, 0x3, 0x0, 0x2800, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x8, 0x2800, 0x6, 0x2, 0xba2, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}})
r11 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000000200), 0x400, 0x0)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r14=>0x0})
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="01000000914b2d7a5f518cdd000008000300", @ANYRES32=r14], 0x38}}, 0x0)
sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="0889456f6c", @ANYRES16=r12, @ANYBLOB="02002cbd7000fcdbdf253b00000008000300", @ANYRES32=r14, @ANYBLOB="0c009900080d00004000000004008e000800a10001010000050019010e0000000800a100070000000400870004008e00"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4002000)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000300)={0x0, 0x0, 0x0})
getdents(0xffffffffffffffff, &(0x7f0000000140)=""/72, 0x48)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000480)={0x200, 0xf3b9, 0x0, 'queue1\x00', 0x3})
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x57, 0xaf, 0xe3, 0x40, 0x7392, 0x7822, 0x3635, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x70, 0x0, 0x0, 0x89, 0x30, 0x7a}}]}}]}}, 0x0)

15.463156808s ago: executing program 0 (id=340):
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7}]}, 0x8)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[], 0x4c}}, 0x0)

15.018452426s ago: executing program 0 (id=341):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0)
getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r6, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000), 0x20000328)
setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f00000004c0)=0x6, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19)
setsockopt$RXRPC_SECURITY_KEY(0xffffffffffffffff, 0x110, 0xffe, 0x0, 0x0)
write$6lowpan_control(r5, &(0x7f0000000300)='connect aa:aa:aa:aa:aa:11 1', 0x1b)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xf, 0x5, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4138ae84, &(0x7f0000000c40)=@x86={0xab, 0xd, 0x18, 0x0, 0x100, 0x8, 0x7, 0x0, 0x40, 0x3, 0xc, 0xfd, 0x0, 0x1, 0xa, 0x8a, 0x7, 0x14, 0x33, '\x00', 0x8, 0x2})
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000e006"])

13.164257793s ago: executing program 4 (id=344):
socket$nl_route(0x10, 0x3, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg2\x00', <r2=>0x0})
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x404c880, &(0x7f0000000000)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r4 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0xd, <r5=>r3})
mmap$dsp(&(0x7f0000fff000/0x1000)=nil, 0x1002, 0x0, 0x11, r5, 0x0)
r6 = getpid()
syz_pidfd_open(r6, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0)
read$FUSE(r7, &(0x7f0000005b80)={0x2020}, 0x2020)
ioctl$BTRFS_IOC_ADD_DEV(r7, 0xff08, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r9=>0x0})
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "0a766976d5b3080c", "3a7d5da9a45c579e3d7fffb4108001ee", "04000001", "539057fa3b2cae06"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x2, &(0x7f0000000680)=@ccm_128={{0x304}, "0600", "c7e0263773934a6ccd3b843739b73a9f", "0202004d", "5460b4c38a406346"}, 0x1f)
sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80)
socket$nl_route(0x10, 0x3, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r11, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000340)="b9e403c6630d698cb8a00b04339c07f7c9768bf6", 0x0, 0xfa, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

11.638881911s ago: executing program 0 (id=345):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)={0x2c, 0x3e, 0x107, 0x0, 0x25dfdbfb, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x1c, 0x0, 0x0, @uid}]}]}, 0x2c}}, 0x0)
fchdir(r0)
ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000240))
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402003c68e010000000109021200010000000009040001"], 0x0)
r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x7e}, 0x10)
sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000001a00012200000000000000050a000000000000000000000006001d000000000008001e80"], 0x2c}}, 0x0)
r7 = dup(r5)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYRESHEX=r7], 0x0}, 0x94)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x9, 0xfc, 0x2, '\x00', 0x8001})
ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f00000002c0)=0x10000)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000300)={[0xe6, 0x55e, 0xffffffff, 0x4, 0xffffffffffffffff, 0x7, 0x9, 0xb, 0x4, 0x80, 0x6, 0x794, 0xa, 0x40, 0xc976, 0x6], 0x2, 0x20200})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000500)={0x4, @capture={0x1000, 0x1, {0x3, 0x7}, 0x7}})
close(r0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a)
unlink(&(0x7f00000001c0)='./file1\x00')
r8 = syz_open_dev$video4linux(&(0x7f0000001140), 0x400, 0x8100)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r8, 0xc040564a, &(0x7f0000000080)={0x0, 0x0, 0x101c, 0x0, 0x0, 0x0, 0x0, 0x1})

9.403448255s ago: executing program 4 (id=353):
syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x9, 0x8, 0x0, 0x3}, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0)
r3 = syz_io_uring_setup(0x10d, &(0x7f0000000480)={0x0, 0x701c, 0x700, 0x1, 0x1ef}, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
r7 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3)
ftruncate(r7, 0xffff)
fcntl$addseals(r7, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000100)={r7, 0x0, 0x0, 0x1000})
syz_io_uring_submit(r4, r5, 0x0)
io_uring_enter(r3, 0x3f72, 0x74f1, 0xc00000000000000, 0x0, 0x39)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = userfaultfd(0x80801)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x430})
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff)
ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r9, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f000022a000/0x4000)=nil, 0x800000})
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000000f060300000000000000000005000000050001"], 0x48}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000"], 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00')

8.178515303s ago: executing program 0 (id=358):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x45, 0x0, 0x0, &(0x7f0000000080))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_usb_connect(0x2, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000095e7d086d04c308166b0102030109025000010000000009041f0000ff0100000a2401040005020102072407"], 0x0)
syz_open_dev$mouse(&(0x7f0000000040), 0xa, 0x100000)
sendmsg(r0, 0x0, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0xc, {"a2e3ad21ed0d52f91b5d520987f70e06d038e7ff7fc6e5539b3247298b089b0708356d090890e0878f0e1ac6e7049b3350959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b31070d074b0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c300003e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76e0e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9e1ed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acabdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff17705037eefcff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b4b3f0432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eef05ebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)
r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x4b36, 0x3010, 0x0, 0x3bd}, &(0x7f0000001380)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x48, 0x0, @fd_index=0x4, 0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x52}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)

6.309213843s ago: executing program 1 (id=360):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'sit0\x00', &(0x7f00000001c0)={'sit0\x00', <r5=>0x0, 0x7, 0x8000, 0x8, 0x7fffffff, {{0x6, 0x4, 0x3, 0x1, 0x18, 0x65, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, {[@noop]}}}}})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r4, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000814}, 0x10008080)
r6 = dup(r2)
mprotect(&(0x7f0000f9b000/0x1000)=nil, 0x1000, 0x8)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x7, 0x6, 0x81, '\x00', 0x3c})
ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f00000000c0)=0xffff)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

6.197724495s ago: executing program 4 (id=361):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000540), 0x8)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0x7}]}, 0x8)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x10, @scatter={0x20000000000001f1, 0xcc, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/195, 0xc3}]}, &(0x7f0000000240)="128d7acf0800", 0x0, 0x0, 0x0, 0xffffffff, 0x0})
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket(0x3, 0x80000, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r8, @ANYBLOB="08002600851600000a00180000000000000000001c005a80180001801400"], 0x4c}}, 0x0)
sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r6, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0xa, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x7f, 0xd1, 0xf}}]}, @NL80211_ATTR_IE={0xd, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x40}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20004010)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r5, @ANYBLOB="01980000000000001800128008000100677265000c0002800800070cac141400"], 0x38}}, 0x0)
sendto$packet(r3, &(0x7f0000000100)='1', 0x1, 0x40, &(0x7f0000000200)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @local}, 0x14)

5.938500428s ago: executing program 1 (id=363):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="200000002900000032000000000000000000a68cb7f60686fdd0416c", @ANYRES32=0x0, @ANYBLOB=' \x00\x00'], 0x40}}], 0x1, 0x10)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0xf, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000014}, 0x24000000)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0)
syz_usb_connect$uac1(0x0, 0xc8, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb6, 0x3, 0x1, 0x8, 0xc0, 0xf, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xc0, 0xeb}, [@processing_unit={0x9, 0x24, 0x7, 0x3, 0x0, 0x3, "2ab5"}, @selector_unit={0xb, 0x24, 0x5, 0x5, 0x8, "bc31dab9872f"}, @mixer_unit={0x6, 0x24, 0x4, 0x1, 0x70, "0f"}, @selector_unit={0x9, 0x24, 0x5, 0x6, 0xd, "142296de"}, @input_terminal={0xc, 0x24, 0x2, 0x6, 0x3f9, 0x2, 0x9, 0x3, 0x7, 0x27}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9, 0x7, 0x6, {0x7, 0x25, 0x1, 0x82, 0x9, 0xfeb6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9e, 0x1, 0x4b, 0x10, "d3691d"}, @as_header={0x7, 0x24, 0x1, 0xba, 0x0, 0x1002}, @as_header={0x7, 0x24, 0x1, 0x0, 0x3, 0x5}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x2, 0x2, 0x3, 0x7, "4b7752c26e6f3d"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x4, 0x1, 0x9, {0x7, 0x25, 0x1, 0x80, 0xcf, 0x100}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x2, 0x6, 0x2, 0x8}, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}, 0x8, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x1404}}, {0xed, &(0x7f0000000240)=@string={0xed, 0x3, "f5a336cb6147a3cb448285751d997f289b515a31e575edec4bf2f4017ca3d47ed068511e8c7c623f86fb5cb2d9f451066f2043c5fa49a8b1286ac3bb3de9a55064b3ef7de6d3e7b7261ecd2e48960f5adae355c506127822118945b716e7603039af7f6035e9e14e6e58c8ddd4e7e7acefac4758694fe0ac84313b25940368272ceedbc81925586a9ccf43660fdc2669fd1b0c05c362cdb5b5b77611e4011ce6f70dbfd41cc3d44a1572c8b8b86e3ff8bb82aef0a335d6ff947995e610be0b8586f5228cfaf96329321585e3cb3a6432a4f819192fa6def1dc69f1b0a6887b185ea297323f4b7edb5958db"}}, {0x68, &(0x7f0000000340)=@string={0x68, 0x3, "bc753fee6d6c7dd0c01ffe92be9437d91a2cc325f7b3953bfca6049e66e86fb2b9d383f2fd3b012bfa6ba6349cc443f668ac02872e9c76f9f939540423654602ecd9b4e04faa5302f6144a00c6fb8a3036db4f0a225e1d1fcc46b6d06af5fadf267662762c65"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x439}}, {0x6, &(0x7f0000000440)=@string={0x6, 0x3, "60f411bf"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x1409}}]})
r5 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)

5.811277006s ago: executing program 4 (id=365):
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000002c0))
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0xb744, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}, 0x1c)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r6, &(0x7f00000006c0)={0x2020}, 0x2020)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000001c0))
r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4138ae84, &(0x7f0000000080)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0x8d, 0xce, 0x1c, 0xc9, 0xa0, 0x7, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x9, 0x3fb})
r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d})
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r9 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x1}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(r9, 0x2, &(0x7f00000000c0)={0x3}, 0x0)
syz_usb_connect(0x4, 0x379, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x84, 0x89, 0x46, 0xff, 0x1d4d, 0xc, 0x1197, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x367, 0x2, 0x21, 0x0, 0x10, 0x1, [{{0x9, 0x4, 0x14, 0xf, 0x0, 0xb8, 0xf, 0xb7, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x2fb, 0x4, 0x3, 0x2}, @feature_unit={0x11, 0x24, 0x6, 0x2, 0x2, 0x5, [0x3, 0x6, 0x4, 0x6, 0x2], 0x5}, @selector_unit={0x8, 0x24, 0x5, 0x5, 0xfc, "489f31"}, @mixer_unit={0xb, 0x24, 0x4, 0x2, 0x60, "f5d74665a1f7"}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0x81}]}]}}, {{0x9, 0x4, 0x7e, 0x8, 0x8, 0xc4, 0xe4, 0x13, 0x1, [], [{{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x19, 0xe, 0x1d}}, {{0x9, 0x5, 0x80, 0x1, 0x3ff, 0x6, 0x0, 0x9, [@generic={0x66, 0x23, "fb447ad422c6fb89b413bb7479684ba153f15f8f6f1c4781d0f238e000b0b244da55bd794ce1f85172e00e97050b67fda0e47fb00fe703e1bdc39f1bdae7c61f86eb160ac623d813a7ad1f4202ab454843b2e7ed2caf80fc8652d2bf7581a3f2d61c31f8"}]}}, {{0x9, 0x5, 0xe, 0x4, 0x40, 0x7, 0xd, 0x5}}, {{0x9, 0x5, 0xc, 0x1d, 0x0, 0x1, 0x1f, 0x8, [@generic={0x74, 0xd, "c5c0bdc29492e54dbcf0e81f2202ddd6d466ff4059ccd0133121b7fe039dfac3793b7f523c55299a358991390c23b13fe78fbfcea8d0dba58099408cd289205a628f21010cb00697028a98116f7521b3c42fb596d1376c27ca1ad769d8f694c749314108b48afad637f59ac608bb7b97bc58"}, @uac_iso={0x7, 0x25, 0x1, 0xbeea4e69913121f6, 0xe0, 0x3}]}}, {{0x9, 0x5, 0xc, 0x10, 0x10, 0x2, 0xe, 0xd, [@generic={0x41, 0xc, "26f5046af0276a40f990be2b5c39e1a4b6abecbcd88363fc0f8b96224e6ac781fd22ae23eb6bdcf023c58f550c5a0dd23f04a2bee664295a991210d7458cc7"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8f, 0x6}]}}, {{0x9, 0x5, 0x9, 0x1, 0x3ff, 0x8a, 0x7, 0xe, [@generic={0xb8, 0x23, "58f56c744b9b29edc00cbca93ec2c3a9ccbf8c5b42722932f25ec3bf76abf8349e9a7e08fae1fd7b442fcac625b57eca929f0a53dddb51d036235a78d185e27e44c17d420a78485585946aa3878d2c3f1bfeba232621babdc0513be397d45eee60659ecaa5948a7332333e32803fb1b91842a6f5de870a88d7817176b819e96c203466a75bb6e12fb3c1ed3bbe0b2f95306c517ead5e5dbefb0fd2edc74ebfa9a0a52e3df7a444d286d383f8094e121a52bafa611175"}, @generic={0x6b, 0x1, "d711f13ed609e160a4fe792461d93b458b91067321480acf39685cb92b63dbe867a80b1267f4d346e01de58cb15bbe11b1821cb4e8271c586f5fe2f755fbb3d71b4f7ed05d4fa45a1cf4a5e29061efdf0420dbddb1c59ff905e224c1e534e0cc2e27dee22b7754271f"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x10, 0xd, 0x2, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x5}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x9, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x4, 0x3}, @generic={0x6f, 0x21, "62577cba293bba305869f08ab851fb587e2eed458fc5bee46fb025d3b967f9be90be8b40ef3017c99ab22f13b5397107174a572a16ea33ad9f9831c43dd24de095a4d57925d4674c489889f2ccdabe0f1557cd9c48a56a1fb0a9197b1d83cd6232ebd79caba58a2a6b22e45ebf"}]}}]}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x10, 0x0, 0x15, 0x66, 0x40, 0x8b}, 0x19, &(0x7f0000000340)=ANY=[@ANYBLOB="050f1900020a1003020c000825f0000a1003020c0005030d00"], 0x4, [{0xa7, &(0x7f0000000cc0)=ANY=[@ANYBLOB="a70362dd396ed9f6d9bf69252fc70cbd708841f5f9950454323e22900253b3695ae886d90228ef82a4bb1fe8b0da3e06fc8884b27df1c20f9739a714571ebeeb600f193a7d018f075a02c62651d5d46fac40036a4e4996fc3ab74b9e0ac84e9f3412a8f53de6f36df89e1022ce648101c1f4a7b986adc33b8f10ace339159da5483e3153c66ad185ed040cbf3d1418c10a56e45d48cff8ebc05d30fba421283bd4fa65"]}, {0x27, &(0x7f0000000e80)=ANY=[@ANYBLOB="270379204a220ba6a052dca752c7fabea369beb9c7fd1f1caa6883ee8ac40aac4f494b1b2b640755f6d38c166f17e4ebb488352b7ee857df57274829c33b69be20a1bc72b10e6be52982525af228c53658c01b5750c52a0aca985043d08a73cbb8e28dd791252ebc477d01cfdeaa137414101260ea29addbd103400d4a87fb92725530e70bec5f675ed73328d6a35adf3fba433e87e02493f9b234fa1ab182c1ff55ab600da467af13b1ac6cd57b93fd"]}, {0x7f, &(0x7f0000002700)=ANY=[@ANYBLOB="7f0398f00e93d60892f2959702446f58c88211916e11b45c33212fbd5e5df6395154736cb0a1dd20331bf488eec9cdbbb55ffd429bd18a295b26cfcfa1293f80607100384d032c4ff2ed22d8f1658a212adc33223813ae40d67a9e6712566e390dd57c654bbf57fd2b040caddfe0cc4e0246af824b72fbaa22990000000000c6d7d1007144854f8fd9846dd4c46a57c9737a02ec343b0c9489f0f412748222fa76749afcb259097f4b5538567f545ae9d96bf7b3"]}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x1001}}]})
openat$full(0xffffffffffffff9c, 0x0, 0x2fb71da98128d4bd, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES64=r7], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x48815)

5.290502333s ago: executing program 2 (id=367):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioprio_set$pid(0x1, 0xffffffffffffffff, 0x4007)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0x2, 0xfffffffc, 0x3, 0xfffffffc}}, 0xffffffffffffffc4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$vicodec1(0xffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f0000000300)={0x5, "69592436c86c8001000000ff0f001e4e0f00", 0x1, 0x100, 0xffffbb71, 0x800, 0x1, 0x3, 0x7f, 0x6})
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000140)={0x1, "030000000000000023000000debd12ffff00000000000000000020000400", <r4=>0xffffffffffffffff})
r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r5, 0x75fa, 0xe475, 0x0, 0x0, 0x0)
r8 = dup3(r4, r3, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000000b060300000080000000000002000006"], 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x4000002)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r10 = socket$inet6(0xa, 0x800000000000002, 0x0)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x20})
connect$inet6(r10, &(0x7f0000000100)={0xa, 0x4e25, 0x2, @mcast2, 0xb}, 0x1c)
setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000080)='wlan0\x00', 0x10)
write(r10, &(0x7f0000000300), 0x0)
getpeername$packet(r8, &(0x7f00000000c0)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000340)={'syztnl2\x00', r11, 0x2d, 0x6, 0xf, 0x44ed7391, 0x64, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x7800, 0xf, 0x1}})
bind$inet6(r1, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000040)={0x80000000})

5.015356738s ago: executing program 3 (id=368):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000040)=0x2000007)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r1, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x81, 0x8a, 0x100000}, 0x20)
ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000400)=0x7)

4.740513568s ago: executing program 3 (id=369):
clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040))

4.68232835s ago: executing program 0 (id=370):
r0 = syz_usb_connect(0x5, 0x24, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_open_dev$usbfs(0x0, 0x1ff, 0xa401)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8)
r4 = accept4(r3, 0x0, 0x0, 0x80000)
r5 = dup(r4)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmmsg$unix(r6, &(0x7f0000000080)=[{{0x0, 0x8d, &(0x7f00000009c0)=[{&(0x7f0000000480)='Y', 0x1}, {&(0x7f0000000100)="d5", 0xf4240}], 0x2}}], 0x1, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000880)={'sit0\x00', 0x0, 0x7800, 0x0, 0x81, 0x2, {{0x5, 0x4, 0x2, 0x10, 0x14, 0x68, 0x0, 0x2, 0x4, 0x0, @broadcast, @remote}}}})
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x40010)
lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000011f0000e800000002007e073cb11ed483d730168e5a8a6afb7cb9b166b0285edcd4baeceb0996c46334b1856792c7a6b7e3d3b195c183c6300ce4afac4863dadf048fa128a683aa428754e2a792e4564c39248ba4583fa856c1f514843cf799592c6fa73bcfb7d7af3f23b8b4494076c926343a5b63f93ff4c1e590bfb5cf4a6568", @ANYRES32=0x0, @ANYBLOB="040000000000000010000100000000002000000000000000"], 0x2c, 0x1)
getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', &(0x7f0000000400)=""/254, 0x145)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58)
r8 = accept4$alg(r7, 0x0, 0x0, 0x0)
writev(r8, &(0x7f0000000200)=[{&(0x7f00000002c0)="69fcc5d50c", 0x5}, {&(0x7f00000011c0)="ab33b057", 0x4}], 0x2)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0x3a, [0x4, 0x8, 0xfffffff1, 0x8, 0x0, 0x1, 0x3e9, 0x5, 0x9, 0x7, 0x7fffffff, 0x6, 0x7ff, 0x4, 0x4, 0x3ff, 0x4, 0x8, 0x2, 0x4, 0x6, 0x4, 0x8, 0x1, 0xfffffa0c, 0x7, 0x8, 0x9be, 0x3, 0x3ff, 0x6, 0x14dc, 0x147, 0x400009, 0x1, 0x3, 0x4, 0x0, 0x9, 0x6, 0x7, 0x5, 0x0, 0xfffffffb, 0x8, 0x80000000, 0x9, 0x100, 0x5, 0x19dd, 0x7, 0x5, 0x0, 0x6, 0xf667, 0xfffffffc, 0x4007, 0x80000008, 0x7f, 0x6, 0xc8, 0x6, 0x0, 0xc3, 0x4, 0x10, 0xffffffa8, 0x1, 0x40000009, 0x9, 0x1, 0x83, 0x0, 0xcf, 0x10, 0x401, 0x7, 0x7, 0x2a, 0x71c9, 0x1, 0x321, 0xfffffeff, 0x7f, 0x66, 0x1c24, 0xff, 0x9, 0x4, 0x2, 0x3, 0xff, 0x100, 0x126, 0x1, 0x8, 0x40000000, 0xc, 0x4, 0x8, 0xffffffc0, 0x4, 0x10001, 0x5, 0x74a000, 0x44e27, 0x3ff, 0x0, 0x8356, 0x0, 0x6, 0x9b7, 0x1, 0x80000001, 0x82, 0xea, 0x6, 0x80000000, 0xff, 0x7, 0x0, 0x5, 0x10001, 0x8, 0x69e4, 0x80000001, 0xfffffff4, 0x100]}})

4.354642256s ago: executing program 2 (id=371):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xd01, 0x0)
r1 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x4040, 0x0)
acct(0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close(r2)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x1}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0)
syz_open_dev$vim2m(&(0x7f0000000000), 0x82000000003, 0x2)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x100, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x75, 0x200000, 0xb}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x9}, [@coaddr={0x14, 0xe, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x100}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041)
r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
pselect6(0x40, &(0x7f0000000600)={0x11, 0xff7ffffffffffffc, 0x2, 0xffffffffffffffff, 0xfffffffffffffffe, 0x9, 0x2, 0x8}, 0x0, &(0x7f0000000400)={0x7fc, 0x2, 0x800000, 0x0, 0x0, 0xc3ad}, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x2, 0xd, 0x7, 0x7}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x9, 0x7, 0x4, 0x0, 0x5, 0x2}, 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0xf)
prlimit64(0x0, 0x8, &(0x7f00000001c0), 0x0)
r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r6)

3.969820311s ago: executing program 1 (id=372):
syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x9, 0x8, 0x0, 0x3}, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0)
r3 = syz_io_uring_setup(0x10d, &(0x7f0000000480)={0x0, 0x701c, 0x700, 0x1, 0x1ef}, &(0x7f0000000200)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2)
r7 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3)
ftruncate(r7, 0xffff)
fcntl$addseals(r7, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000100)={r7, 0x0, 0x0, 0x1000})
syz_io_uring_submit(r4, r5, 0x0)
io_uring_enter(r3, 0x3f72, 0x74f1, 0xc00000000000000, 0x0, 0x39)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = userfaultfd(0x80801)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x430})
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xf0ffffff)
ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r9, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000800000/0x800000)=nil, &(0x7f000022a000/0x4000)=nil, 0x800000})
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000000f060300000000000000000005000000050001"], 0x48}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ff4ae0086d04dd08f4ff080203010902120001000000"], 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00')

3.793250279s ago: executing program 3 (id=373):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480))
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2, 0x0, 0x800800}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0)

3.502738505s ago: executing program 3 (id=374):
ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000000240)={0x9, 0x0, 0x5e6, 0x83, 0x7})

3.279830481s ago: executing program 2 (id=375):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000540), 0x8)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x0, 0x7}]}, 0x8)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x800)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x10, @scatter={0x20000000000001f1, 0xcc, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/195, 0xc3}]}, &(0x7f0000000240)="128d7acf0800", 0x0, 0x0, 0x0, 0xffffffff, 0x0})
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket(0x3, 0x80000, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r8, @ANYBLOB="08002600851600000a00180000000000000000001c005a80180001801400"], 0x4c}}, 0x0)
sendmsg$NL80211_CMD_DISASSOCIATE(r4, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r6, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0xa, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x7f, 0xd1, 0xf}}]}, @NL80211_ATTR_IE={0xd, 0x2a, [@mesh_config={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x40}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20004010)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r5, @ANYBLOB="01980000000000001800128008000100677265000c0002800800070cac141400"], 0x38}}, 0x0)
sendto$packet(r3, &(0x7f0000000100)='1', 0x1, 0x40, &(0x7f0000000200)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @local}, 0x14)

3.16888615s ago: executing program 3 (id=376):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0)
mlock2(&(0x7f000027f000/0x2000)=nil, 0x2000, 0x1)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000240)=0xffffffff)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
pipe(&(0x7f0000000200))
epoll_create1(0x80000)
syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/route\x00')
socket$unix(0x1, 0x5, 0x0)
read$FUSE(r4, &(0x7f0000002140)={0x2020}, 0x2020)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000)
r5 = socket(0x15, 0x5, 0x0)
getsockopt(r5, 0x200000000114, 0x2711, &(0x7f0000032580)=""/102396, &(0x7f0000000000)=0x18ffc)
setrlimit(0x2, &(0x7f00000000c0)={0x2000000, 0xffffffffffffffff})
socket$unix(0x1, 0x5, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0)

2.945348681s ago: executing program 2 (id=377):
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = signalfd(r0, &(0x7f00000000c0)={[0x6, 0x3]}, 0x8)
r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffd, 0x100a1, 0xfffffffe, 0x0, 0x0, r2}, &(0x7f0000020940)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000080)=0x200000000)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="680100001000130700000000fcdbdf25fffffb00000000000f000000000000005fcd4e2200004e2100020a0000003b00"/64, @ANYRESHEX=r0, @ANYRES32=r3, @ANYBLOB="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"], 0x168}, 0x1, 0x0, 0x0, 0x880}, 0x0)
r8 = dup2(r6, r6)
read$FUSE(r8, &(0x7f0000002fc0)={0x2020}, 0x2020)

2.204638944s ago: executing program 4 (id=378):
openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = io_uring_setup(0x627d, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1)
syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'pimreg\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002340)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xfff2, 0xa}, {0x2}}}, 0x24}}, 0x4000)
r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0)
mq_notify(r4, 0x0)
sendmsg$DEVLINK_CMD_RATE_SET(r0, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)}, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f000037d000/0x2000)=nil, 0x2000}})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16)
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2)
ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000140)={0xf0f002, 0x1})
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, 0x0)

1.718571965s ago: executing program 2 (id=379):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x8002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000001500), 0x0, 0x4000800)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0)
shmat(0x0, &(0x7f0000ff6000/0x4000)=nil, 0x400c)
munmap(&(0x7f0000ff6000/0x2000)=nil, 0x2000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa8}}, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x4dc8aa39}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe0b5bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x1ff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

660.139021ms ago: executing program 4 (id=380):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x45, 0x0, 0x0, &(0x7f0000000080))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_usb_connect(0x2, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000095e7d086d04c308166b0102030109025000010000000009041f0000ff0100000a2401040005020102072407"], 0x0)
syz_open_dev$mouse(&(0x7f0000000040), 0xa, 0x100000)
sendmsg(r0, 0x0, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0xc, {"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", 0x1000}}, 0x1006)
r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x4b36, 0x3010, 0x0, 0x3bd}, &(0x7f0000001380)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x48, 0x0, @fd_index=0x4, 0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x52}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)

356.455118ms ago: executing program 0 (id=381):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={<r3=>0x0, 0x5}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e23, 0x530e, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}}, [0xffffffffffffffff, 0x7, 0x6, 0x8b, 0x4, 0x9, 0x5, 0x3, 0xb, 0x1000, 0x9, 0x6, 0x4, 0x10000, 0xbb]}, &(0x7f00000000c0)=0xfc)
r4 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r7, 0x4038ae7a, &(0x7f0000000340)={0x80, 0x40000094, 0x0, 0x0})
r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000020001c0"])
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xadc0}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
ioctl$FITHAW(r0, 0xc0045878)
socket$inet6_mptcp(0xa, 0x1, 0x106)

299.213127ms ago: executing program 2 (id=382):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)={0x2c, 0x3e, 0x107, 0x0, 0x25dfdbfb, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x1c, 0x0, 0x0, @uid}]}]}, 0x2c}}, 0x0)
fchdir(r0)
ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000240))
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402003c68e010000000109021200010000000009040001"], 0x0)
r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r6 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x7e}, 0x10)
sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000001a00012200000000000000050a000000000000000000000006001d000000000008001e80"], 0x2c}}, 0x0)
r7 = dup(r5)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYRESHEX=r7], 0x0}, 0x94)
ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x9, 0xfc, 0x2, '\x00', 0x8001})
ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f00000002c0)=0x10000)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000300)={[0xe6, 0x55e, 0xffffffff, 0x4, 0xffffffffffffffff, 0x7, 0x9, 0xb, 0x4, 0x80, 0x6, 0x794, 0xa, 0x40, 0xc976, 0x6], 0x2, 0x20200})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f0000000500)={0x4, @capture={0x1000, 0x1, {0x3, 0x7}, 0x7}})
close(r0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a)
unlink(&(0x7f00000001c0)='./file1\x00')
r8 = syz_open_dev$video4linux(&(0x7f0000001140), 0x400, 0x8100)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r8, 0xc040564a, &(0x7f0000000080)={0x0, 0x0, 0x101c, 0x0, 0x0, 0x0, 0x0, 0x1})

0s ago: executing program 3 (id=383):
clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040))

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.104' (ED25519) to the list of known hosts.
[   81.502583][ T5836] cgroup: Unknown subsys name 'net'
[   81.621202][ T5836] cgroup: Unknown subsys name 'cpuset'
[   81.630531][ T5836] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   83.296721][ T5836] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   85.873831][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   85.891898][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   85.911336][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   85.921907][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   85.929993][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   85.938216][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   85.946635][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   85.953862][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   85.961890][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   85.972080][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   85.979867][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   85.987457][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   85.999643][ T5858] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   86.027888][ T5860] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   86.040686][ T5860] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   86.057537][ T5861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   86.058767][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   86.072268][ T5861] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   86.077611][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   86.086387][ T5169] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   86.094178][ T5169] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   86.102593][ T5169] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   86.109910][ T5861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   86.118590][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   86.127896][   T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   86.661736][ T5862] chnl_net:caif_netlink_parms(): no params data found
[   86.764167][ T5863] chnl_net:caif_netlink_parms(): no params data found
[   86.985129][ T5864] chnl_net:caif_netlink_parms(): no params data found
[   87.031626][ T5866] chnl_net:caif_netlink_parms(): no params data found
[   87.192120][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.203349][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.211802][ T5862] bridge_slave_0: entered allmulticast mode
[   87.223031][ T5862] bridge_slave_0: entered promiscuous mode
[   87.281064][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.288337][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.295475][ T5862] bridge_slave_1: entered allmulticast mode
[   87.303516][ T5862] bridge_slave_1: entered promiscuous mode
[   87.315720][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.323336][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.331277][ T5863] bridge_slave_0: entered allmulticast mode
[   87.338970][ T5863] bridge_slave_0: entered promiscuous mode
[   87.352126][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.359458][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.367193][ T5863] bridge_slave_1: entered allmulticast mode
[   87.374414][ T5863] bridge_slave_1: entered promiscuous mode
[   87.441028][ T5867] chnl_net:caif_netlink_parms(): no params data found
[   87.481455][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.538685][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.560801][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.568096][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.575286][ T5864] bridge_slave_0: entered allmulticast mode
[   87.582987][ T5864] bridge_slave_0: entered promiscuous mode
[   87.602503][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.614307][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.623988][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.632084][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.639497][ T5866] bridge_slave_0: entered allmulticast mode
[   87.647088][ T5866] bridge_slave_0: entered promiscuous mode
[   87.670485][ T5862] team0: Port device team_slave_0 added
[   87.681721][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.689069][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.696256][ T5864] bridge_slave_1: entered allmulticast mode
[   87.704238][ T5864] bridge_slave_1: entered promiscuous mode
[   87.755494][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.762877][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.770558][ T5866] bridge_slave_1: entered allmulticast mode
[   87.778565][ T5866] bridge_slave_1: entered promiscuous mode
[   87.788027][ T5862] team0: Port device team_slave_1 added
[   87.843659][ T5863] team0: Port device team_slave_0 added
[   87.853671][ T5863] team0: Port device team_slave_1 added
[   87.889012][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.904493][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.946433][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.953415][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.980546][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.027327][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.040270][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.050663][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.058163][ T5850] Bluetooth: hci0: command tx timeout
[   88.064033][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.090202][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.127755][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.134734][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.162152][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.174013][ T5850] Bluetooth: hci3: command tx timeout
[   88.215736][ T5864] team0: Port device team_slave_0 added
[   88.221595][ T5849] Bluetooth: hci4: command tx timeout
[   88.221866][ T5850] Bluetooth: hci2: command tx timeout
[   88.233032][ T5849] Bluetooth: hci1: command tx timeout
[   88.236222][ T5864] team0: Port device team_slave_1 added
[   88.257459][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.264475][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.291051][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.305247][ T5866] team0: Port device team_slave_0 added
[   88.315339][ T5866] team0: Port device team_slave_1 added
[   88.362686][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.370698][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.378297][ T5867] bridge_slave_0: entered allmulticast mode
[   88.385709][ T5867] bridge_slave_0: entered promiscuous mode
[   88.439920][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.447144][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.473156][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.484599][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.491931][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.499791][ T5867] bridge_slave_1: entered allmulticast mode
[   88.507211][ T5867] bridge_slave_1: entered promiscuous mode
[   88.533374][ T5862] hsr_slave_0: entered promiscuous mode
[   88.540692][ T5862] hsr_slave_1: entered promiscuous mode
[   88.548264][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.555228][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.582170][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.594163][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.601210][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.627435][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.671513][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.681728][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.689421][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.715870][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.769138][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.810979][ T5863] hsr_slave_0: entered promiscuous mode
[   88.818229][ T5863] hsr_slave_1: entered promiscuous mode
[   88.824513][ T5863] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.832551][ T5863] Cannot create hsr debugfs directory
[   88.861892][ T5867] team0: Port device team_slave_0 added
[   88.910944][ T5867] team0: Port device team_slave_1 added
[   88.995762][ T5866] hsr_slave_0: entered promiscuous mode
[   89.003217][ T5866] hsr_slave_1: entered promiscuous mode
[   89.009815][ T5866] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   89.018538][ T5866] Cannot create hsr debugfs directory
[   89.051882][ T5864] hsr_slave_0: entered promiscuous mode
[   89.060105][ T5864] hsr_slave_1: entered promiscuous mode
[   89.066300][ T5864] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   89.074231][ T5864] Cannot create hsr debugfs directory
[   89.081333][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.088431][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.114496][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.188546][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.196568][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.223288][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.504030][ T5867] hsr_slave_0: entered promiscuous mode
[   89.510693][ T5867] hsr_slave_1: entered promiscuous mode
[   89.517302][ T5867] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   89.524920][ T5867] Cannot create hsr debugfs directory
[   89.819559][ T5862] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   89.833772][ T5862] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   89.863339][ T5862] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   89.888550][ T5862] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   89.950764][ T5864] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   89.964301][ T5864] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   89.975628][ T5864] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   89.988884][ T5864] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   90.101138][ T5866] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   90.113067][ T5866] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   90.125506][ T5866] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   90.146660][ T5850] Bluetooth: hci0: command tx timeout
[   90.182913][ T5866] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   90.227030][ T5850] Bluetooth: hci3: command tx timeout
[   90.239578][ T5863] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   90.265828][ T5863] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   90.277966][ T5863] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   90.297142][ T5849] Bluetooth: hci1: command tx timeout
[   90.297169][   T51] Bluetooth: hci4: command tx timeout
[   90.302756][ T5850] Bluetooth: hci2: command tx timeout
[   90.340506][ T5863] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   90.409127][ T5867] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   90.420922][ T5867] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   90.437462][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.456184][ T5867] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   90.468714][ T5867] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   90.512560][ T5862] 8021q: adding VLAN 0 to HW filter on device team0
[   90.560057][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.567402][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.592218][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.599448][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.620376][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.710087][ T5864] 8021q: adding VLAN 0 to HW filter on device team0
[   90.725666][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.732895][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.798044][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.805230][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.872870][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.929446][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.963136][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0
[   90.978119][ T5866] 8021q: adding VLAN 0 to HW filter on device team0
[   91.012539][ T5867] 8021q: adding VLAN 0 to HW filter on device team0
[   91.062052][  T164] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.069712][  T164] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.082395][  T164] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.089549][  T164] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.104757][ T5863] 8021q: adding VLAN 0 to HW filter on device team0
[   91.127595][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.134802][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.169923][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.177147][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.187489][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.194639][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.230771][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.237935][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.260177][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.395716][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.461639][ T5862] veth0_vlan: entered promiscuous mode
[   91.493342][ T5862] veth1_vlan: entered promiscuous mode
[   91.513933][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.552650][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.600941][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0
[   91.653200][ T5866] veth0_vlan: entered promiscuous mode
[   91.674302][ T5864] veth0_vlan: entered promiscuous mode
[   91.714189][ T5864] veth1_vlan: entered promiscuous mode
[   91.722875][ T5866] veth1_vlan: entered promiscuous mode
[   91.731880][ T5862] veth0_macvtap: entered promiscuous mode
[   91.759530][ T5862] veth1_macvtap: entered promiscuous mode
[   91.793380][ T5863] veth0_vlan: entered promiscuous mode
[   91.843859][ T5863] veth1_vlan: entered promiscuous mode
[   91.860206][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0
[   91.875532][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1
[   91.903928][   T43] cfg80211: failed to load regulatory.db
[   91.907942][ T5866] veth0_macvtap: entered promiscuous mode
[   91.924933][ T5864] veth0_macvtap: entered promiscuous mode
[   91.935200][ T5864] veth1_macvtap: entered promiscuous mode
[   91.952923][ T5866] veth1_macvtap: entered promiscuous mode
[   91.961989][ T5862] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   91.972179][ T5862] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   91.983004][ T5862] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   91.992163][ T5862] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.003789][ T5867] veth0_vlan: entered promiscuous mode
[   92.048440][ T5867] veth1_vlan: entered promiscuous mode
[   92.067286][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.080615][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.105755][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.121286][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.155999][ T5866] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.166122][ T5866] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.175427][ T5866] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.184495][ T5866] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.201586][ T5863] veth0_macvtap: entered promiscuous mode
[   92.210461][ T5864] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.220380][ T5864] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.229565][ T5850] Bluetooth: hci0: command tx timeout
[   92.236000][ T5864] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.244935][ T5864] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.299119][ T5850] Bluetooth: hci3: command tx timeout
[   92.305541][ T5863] veth1_macvtap: entered promiscuous mode
[   92.349485][ T5867] veth0_macvtap: entered promiscuous mode
[   92.380968][ T5850] Bluetooth: hci4: command tx timeout
[   92.386597][   T51] Bluetooth: hci2: command tx timeout
[   92.392044][   T51] Bluetooth: hci1: command tx timeout
[   92.414678][ T5867] veth1_macvtap: entered promiscuous mode
[   92.460161][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.483033][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.485010][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.540305][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.553639][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.565560][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.590722][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.595864][ T5863] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.611234][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.615993][ T5863] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.628424][ T5863] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.637553][ T5863] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.663371][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.673502][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0
[   92.682614][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.725523][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.729388][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1
[   92.745295][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.823924][ T5867] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.831096][ T5862] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   92.864176][ T5867] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.876465][ T5867] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.885198][ T5867] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.911308][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   92.924791][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.019634][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.047016][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.230505][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.279608][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.339015][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.400301][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.465361][ T5948] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96
[   93.556137][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   93.576499][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   93.876632][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   94.250358][ T5957] binder: BINDER_SET_CONTEXT_MGR already set
[   94.257564][ T5957] binder: 5956:5957 ioctl 4018620d 80000040 returned -16
[   94.288186][ T5957] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   94.297387][   T51] Bluetooth: hci0: command tx timeout
[   94.379830][   T51] Bluetooth: hci3: command tx timeout
[   94.457278][   T51] Bluetooth: hci1: command tx timeout
[   94.462728][   T51] Bluetooth: hci2: command tx timeout
[   94.468631][ T5850] Bluetooth: hci4: command tx timeout
[   95.273511][ T5966] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   95.281572][ T5966] IPv6: NLM_F_CREATE should be set when creating new route
[   95.427020][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   95.505284][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   95.917435][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[   96.236738][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   96.246619][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   96.256860][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   96.265296][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   96.324948][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   96.356868][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   97.851277][ T5991] trusted_key: encrypted_key: insufficient parameters specified
[   97.977219][ T2154] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   98.272275][ T2154] usb 3-1: config 0 has no interfaces?
[   98.411138][ T5995] netlink: 'syz.1.12': attribute type 10 has an invalid length.
[   98.426816][ T5995] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12'.
[   98.494440][ T5995] team0: Port device geneve0 added
[   98.721367][ T2154] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[   98.730677][ T2154] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.739093][ T2154] usb 3-1: Product: syz
[   98.743838][ T2154] usb 3-1: Manufacturer: syz
[   98.779019][ T2154] usb 3-1: SerialNumber: syz
[   98.952430][ T2154] usb 3-1: config 0 descriptor??
[   99.029995][ T6005] process 'syz.0.15' launched '/dev/fd/12' with NULL argv: empty string added
[   99.404709][ T5995] syz.1.12 (5995) used greatest stack depth: 20040 bytes left
[   99.444007][ T5988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   99.454438][ T5988] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  100.559484][ T5988] [U] 
[  101.512006][ T6003] Zero length message leads to an empty skb
[  101.521718][ T6003] syzkaller1: entered promiscuous mode
[  101.530600][ T6003] syzkaller1: entered allmulticast mode
[  101.572408][  T978] usb 3-1: USB disconnect, device number 2
[  102.093651][ T6025] tipc: Started in network mode
[  102.099048][ T6025] tipc: Node identity 7f000001, cluster identity 4711
[  102.113098][ T6025] tipc: New replicast peer: 0.0.0.0
[  102.310595][ T6025] tipc: Enabled bearer <udp:syz2>, priority 10
[  103.394189][ T6033] netlink: 60 bytes leftover after parsing attributes in process `syz.3.21'.
[  103.427359][  T978] tipc: Node number set to 2130706433
[  103.469844][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21'.
[  103.940507][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'.
[  103.982044][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.24'.
[  104.366489][ T2154] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  104.386520][ T5934] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  104.556497][ T5934] usb 5-1: Using ep0 maxpacket: 16
[  104.570380][ T5934] usb 5-1: config 0 has no interfaces?
[  104.590282][ T5934] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  104.599696][ T2154] usb 4-1: Using ep0 maxpacket: 16
[  104.696167][ T2154] usb 4-1: config 0 has no interfaces?
[  104.709874][ T2154] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  104.736894][ T2154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.908293][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.946189][ T2154] usb 4-1: config 0 descriptor??
[  104.966504][ T5934] usb 5-1: config 0 descriptor??
[  106.439487][ T6064] input: syz1 as /devices/virtual/input/input5
[  107.411162][  T978] usb 5-1: USB disconnect, device number 2
[  107.579598][ T2154] usb 4-1: USB disconnect, device number 2
[  107.818207][ T6070] trusted_key: encrypted_key: insufficient parameters specified
[  108.026657][ T2154] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  108.225679][ T2154] usb 5-1: Using ep0 maxpacket: 16
[  108.273563][ T2154] usb 5-1: config 0 has an invalid interface number: 214 but max is 0
[  108.296705][   T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  108.327135][ T2154] usb 5-1: config 0 has no interface number 0
[  108.333421][ T2154] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[  108.400224][ T2154] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  108.405935][ T6081] trusted_key: encrypted_key: insufficient parameters specified
[  108.446390][ T2154] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.475389][ T2154] usb 5-1: Product: syz
[  108.484936][ T2154] usb 5-1: Manufacturer: syz
[  108.496519][   T24] usb 4-1: Using ep0 maxpacket: 16
[  108.510601][ T2154] usb 5-1: SerialNumber: syz
[  108.522548][   T24] usb 4-1: config 0 has no interfaces?
[  108.532397][ T2154] usb 5-1: config 0 descriptor??
[  108.538420][   T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  108.554913][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.609995][   T24] usb 4-1: config 0 descriptor??
[  108.776462][ T2154] usbtouchscreen 5-1:0.214: Failed to read FW rev: 0
[  108.785593][ T2154] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -5
[  108.925238][ T6090] usb usb8: usbfs: process 6090 (syz.1.37) did not claim interface 0 before use
[  109.195180][ T6093] warning: `syz.0.38' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  111.269513][ T2154] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  111.294300][ T6116] capability: warning: `syz.2.43' uses deprecated v2 capabilities in a way that may be insecure
[  111.629557][ T6117] trusted_key: encrypted_key: insufficient parameters specified
[  111.699862][ T2154] usb 1-1: Using ep0 maxpacket: 16
[  111.727216][ T2154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.054640][ T2154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  112.096424][ T2154] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  112.112730][ T5934] usb 5-1: USB disconnect, device number 3
[  112.236551][ T2154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.263772][ T5847] usb 4-1: USB disconnect, device number 3
[  112.292300][ T2154] usb 1-1: config 0 descriptor??
[  112.460051][ T6123] netlink: 'syz.4.45': attribute type 3 has an invalid length.
[  112.521694][ T6123] netlink: 64 bytes leftover after parsing attributes in process `syz.4.45'.
[  113.027171][ T5847] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  113.206381][ T5847] usb 3-1: Using ep0 maxpacket: 8
[  113.265959][ T5847] usb 3-1: config 2 has an invalid interface number: 31 but max is 0
[  113.274255][ T5847] usb 3-1: config 2 has no interface number 0
[  113.281952][ T2154] corsair 0003:1B1C:1B02.0001: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0
[  113.296670][ T5847] usb 3-1: config 2 interface 31 has no altsetting 0
[  113.335649][ T5847] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  113.346494][ T5847] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.371888][ T5847] usb 3-1: Product: syz
[  113.382529][ T5847] usb 3-1: Manufacturer: syz
[  113.421695][ T5847] usb 3-1: SerialNumber: syz
[  113.441094][ T5847] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22
[  114.590906][ T2154] corsair 0003:1B1C:1B02.0001: Failed to get K90 initial state (error -71).
[  114.731768][ T2154] usb 1-1: USB disconnect, device number 2
[  114.921287][ T6148] netlink: 156 bytes leftover after parsing attributes in process `syz.2.44'.
[  115.686449][ T5934] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  116.195141][   T10] usb 3-1: USB disconnect, device number 3
[  116.288014][ T5934] usb 1-1: config 0 has an invalid interface number: 117 but max is 0
[  116.303310][ T5934] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  116.355623][ T5934] usb 1-1: config 0 has no interface number 0
[  116.381140][ T5934] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  116.391280][ T6163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  116.425602][ T5934] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  116.756753][ T5934] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  116.775020][ T5934] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.795026][ T6167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  116.805916][ T5934] usb 1-1: Product: syz
[  116.829613][ T5934] usb 1-1: Manufacturer: syz
[  116.866347][ T5934] usb 1-1: SerialNumber: syz
[  116.904935][ T2154] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0
[  116.937099][ T5934] usb 1-1: config 0 descriptor??
[  116.942176][ T2154] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0
[  116.971195][ T2154] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0
[  116.986411][ T2154] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0
[  117.014233][ T2154] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0
[  117.051918][ T2154] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0
[  117.076088][ T6169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  117.086183][   T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  117.124448][ T2154] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0
[  117.154388][ T2154] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0
[  117.214992][ T2154] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0
[  117.247592][ T2154] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0
[  117.255058][ T2154] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0
[  117.269716][   T24] usb 4-1: Using ep0 maxpacket: 16
[  117.285354][ T2154] hid-generic 0002:0004:0009.0002: unknown main item tag 0x0
[  117.297408][   T24] usb 4-1: config 0 has no interfaces?
[  117.302918][   T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  117.328378][ T2154] hid-generic 0002:0004:0009.0002: item fetching failed at offset 16/17
[  117.353921][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.381373][ T2154] hid-generic 0002:0004:0009.0002: probe with driver hid-generic failed with error -22
[  117.405971][   T24] usb 4-1: config 0 descriptor??
[  117.448131][ T6173] trusted_key: encrypted_key: insufficient parameters specified
[  117.484800][ T6153] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  117.776520][ T5934] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  117.877269][   T10] usb 1-1: USB disconnect, device number 3
[  117.929126][ T5934] usb 2-1: Using ep0 maxpacket: 16
[  117.940070][ T5934] usb 2-1: config 0 has an invalid interface number: 214 but max is 0
[  117.948492][ T5934] usb 2-1: config 0 has no interface number 0
[  117.954608][ T5934] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[  117.969991][ T5934] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  117.979565][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.987901][ T5934] usb 2-1: Product: syz
[  117.992136][ T5934] usb 2-1: Manufacturer: syz
[  117.997198][ T5934] usb 2-1: SerialNumber: syz
[  118.004881][ T5934] usb 2-1: config 0 descriptor??
[  118.225042][ T5934] usbtouchscreen 2-1:0.214: Failed to read FW rev: 0
[  118.232409][ T5934] usbtouchscreen 2-1:0.214: probe with driver usbtouchscreen failed with error -5
[  119.054291][ T6187] syzkaller1: entered promiscuous mode
[  119.089034][ T6187] syzkaller1: entered allmulticast mode
[  119.636460][ T5934] usb 4-1: USB disconnect, device number 4
[  120.045508][ T6192] can: request_module (can-proto-0) failed.
[  120.168987][ T6209] mmap: syz.4.64 (6209) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  120.596683][   T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  120.638498][ T2154] usb 2-1: USB disconnect, device number 2
[  120.724370][ T6219] FAULT_INJECTION: forcing a failure.
[  120.724370][ T6219] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  120.783765][ T6219] CPU: 0 UID: 0 PID: 6219 Comm: syz.0.66 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) 
[  120.783794][ T6219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  120.783809][ T6219] Call Trace:
[  120.783817][ T6219]  <TASK>
[  120.783823][ T6219]  dump_stack_lvl+0x189/0x250
[  120.783849][ T6219]  ? __pfx____ratelimit+0x10/0x10
[  120.783869][ T6219]  ? __pfx_dump_stack_lvl+0x10/0x10
[  120.783884][ T6219]  ? __pfx__printk+0x10/0x10
[  120.783908][ T6219]  should_fail_ex+0x414/0x560
[  120.783930][ T6219]  _copy_to_user+0x31/0xb0
[  120.783946][ T6219]  video_usercopy+0xeb2/0x14f0
[  120.783969][ T6219]  ? __pfx___video_do_ioctl+0x10/0x10
[  120.783984][ T6219]  ? __pfx_video_usercopy+0x10/0x10
[  120.784011][ T6219]  ? __fget_files+0x2a/0x420
[  120.784029][ T6219]  v4l2_ioctl+0x18a/0x1e0
[  120.784047][ T6219]  v4l2_compat_ioctl32+0x1d4/0x260
[  120.784070][ T6219]  __ia32_compat_sys_ioctl+0x540/0x840
[  120.784087][ T6219]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  120.784102][ T6219]  ? __fget_files+0x3a0/0x420
[  120.784122][ T6219]  ? fput+0xa0/0xd0
[  120.784141][ T6219]  ? ksys_write+0x22a/0x250
[  120.784160][ T6219]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  120.784181][ T6219]  ? lockdep_hardirqs_on+0x9c/0x150
[  120.784201][ T6219]  __do_fast_syscall_32+0xb6/0x2b0
[  120.784214][ T6219]  ? lockdep_hardirqs_on+0x9c/0x150
[  120.784235][ T6219]  do_fast_syscall_32+0x34/0x80
[  120.784248][ T6219]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  120.784263][ T6219] RIP: 0023:0xf702e539
[  120.784276][ T6219] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  120.784286][ T6219] RSP: 002b:00000000f501e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  120.784304][ T6219] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000c0045627
[  120.784313][ T6219] RDX: 0000000080000200 RSI: 0000000000000000 RDI: 0000000000000000
[  120.784330][ T6219] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  120.784337][ T6219] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  120.784344][ T6219] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  120.784361][ T6219]  </TASK>
[  121.006820][   T10] usb 4-1: Using ep0 maxpacket: 8
[  121.017755][   T10] usb 4-1: config 2 has an invalid interface number: 31 but max is 0
[  121.025856][   T10] usb 4-1: config 2 has no interface number 0
[  121.032311][   T10] usb 4-1: config 2 interface 31 has no altsetting 0
[  121.049466][   T10] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  121.058591][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.066674][   T10] usb 4-1: Product: syz
[  121.070851][   T10] usb 4-1: Manufacturer: syz
[  121.075438][   T10] usb 4-1: SerialNumber: syz
[  121.174813][   T10] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22
[  122.802820][ T6236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  122.804749][ T6234] netlink: 156 bytes leftover after parsing attributes in process `syz.3.65'.
[  122.873238][ T6236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  122.900255][   T24] hid-generic 0002:0004:0009.0003: unknown main item tag 0x0
[  122.908824][   T24] hid-generic 0002:0004:0009.0003: unknown main item tag 0x0
[  123.030574][   T24] hid-generic 0002:0004:0009.0003: unknown main item tag 0x0
[  123.070450][ T6240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  123.093508][   T24] hid-generic 0002:0004:0009.0003: unknown main item tag 0x0
[  123.119434][   T24] hid-generic 0002:0004:0009.0003: unknown main item tag 0x0
[  123.140370][   T24] hid-generic 0002:0004:0009.0003: unknown main item tag 0x0
[  123.171551][   T24] hid-generic 0002:0004:0009.0003: unknown main item tag 0x0
[  123.272591][   T24] hid-generic 0002:0004:0009.0003: unknown main item tag 0x0
[  123.356840][   T24] hid-generic 0002:0004:0009.0003: unknown main item tag 0x0
[  123.365059][   T24] hid-generic 0002:0004:0009.0003: unknown main item tag 0x0
[  123.373072][   T24] hid-generic 0002:0004:0009.0003: unknown main item tag 0x0
[  123.380906][   T24] hid-generic 0002:0004:0009.0003: unknown main item tag 0x0
[  123.388626][   T24] hid-generic 0002:0004:0009.0003: item fetching failed at offset 16/17
[  123.399377][   T24] hid-generic 0002:0004:0009.0003: probe with driver hid-generic failed with error -22
[  124.051248][ T5907] usb 4-1: USB disconnect, device number 5
[  124.616155][ T5921] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  124.691775][ T6268] FAULT_INJECTION: forcing a failure.
[  124.691775][ T6268] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  124.714850][ T6268] CPU: 0 UID: 0 PID: 6268 Comm: syz.1.79 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) 
[  124.714880][ T6268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  124.714892][ T6268] Call Trace:
[  124.714901][ T6268]  <TASK>
[  124.714910][ T6268]  dump_stack_lvl+0x189/0x250
[  124.714941][ T6268]  ? __pfx____ratelimit+0x10/0x10
[  124.714975][ T6268]  ? __pfx_dump_stack_lvl+0x10/0x10
[  124.715010][ T6268]  ? __pfx__printk+0x10/0x10
[  124.715053][ T6268]  should_fail_ex+0x414/0x560
[  124.715091][ T6268]  _copy_to_user+0x31/0xb0
[  124.715120][ T6268]  snd_pcm_oss_read2+0x316/0x430
[  124.715155][ T6268]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  124.715182][ T6268]  ? __pfx_snd_pcm_oss_read2+0x10/0x10
[  124.715215][ T6268]  ? __pfx_snd_pcm_post_prepare+0x10/0x10
[  124.715237][ T6268]  ? snd_pcm_action_nonatomic+0x25c/0x2b0
[  124.715264][ T6268]  snd_pcm_oss_read+0x635/0x8d0
[  124.715308][ T6268]  ? __pfx_snd_pcm_oss_read+0x10/0x10
[  124.715347][ T6268]  vfs_read+0x200/0x980
[  124.715381][ T6268]  ? __pfx_vfs_read+0x10/0x10
[  124.715406][ T6268]  ? __fget_files+0x2a/0x420
[  124.715438][ T6268]  ? __fget_files+0x2a/0x420
[  124.715464][ T6268]  ? __fget_files+0x3a0/0x420
[  124.715490][ T6268]  ? __fget_files+0x2a/0x420
[  124.715528][ T6268]  ksys_read+0x145/0x250
[  124.715554][ T6268]  ? __pfx_ksys_read+0x10/0x10
[  124.715581][ T6268]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  124.715615][ T6268]  ? lockdep_hardirqs_on+0x9c/0x150
[  124.715650][ T6268]  __do_fast_syscall_32+0xb6/0x2b0
[  124.715672][ T6268]  ? lockdep_hardirqs_on+0x9c/0x150
[  124.715708][ T6268]  do_fast_syscall_32+0x34/0x80
[  124.715730][ T6268]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  124.715756][ T6268] RIP: 0023:0xf7f77539
[  124.715774][ T6268] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  124.715791][ T6268] RSP: 002b:00000000f509655c EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[  124.715815][ T6268] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800011c0
[  124.715829][ T6268] RDX: 00000000200021d5 RSI: 0000000000000000 RDI: 0000000000000000
[  124.715841][ T6268] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  124.715852][ T6268] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  124.715863][ T6268] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  124.715892][ T6268]  </TASK>
[  124.964606][ T6268] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  124.986485][ T5921] usb 4-1: Using ep0 maxpacket: 16
[  125.079877][ T5921] usb 4-1: config 0 has no interfaces?
[  125.106049][ T2154] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  125.120900][ T5921] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  125.146530][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.196910][ T5921] usb 4-1: config 0 descriptor??
[  125.291301][ T6273] FAULT_INJECTION: forcing a failure.
[  125.291301][ T6273] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  125.305550][ T2154] usb 1-1: Using ep0 maxpacket: 8
[  125.315527][ T6273] CPU: 1 UID: 0 PID: 6273 Comm: syz.1.80 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) 
[  125.315559][ T6273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  125.315571][ T6273] Call Trace:
[  125.315579][ T6273]  <TASK>
[  125.315588][ T6273]  dump_stack_lvl+0x189/0x250
[  125.315619][ T6273]  ? __pfx____ratelimit+0x10/0x10
[  125.315651][ T6273]  ? __pfx_dump_stack_lvl+0x10/0x10
[  125.315677][ T6273]  ? __pfx__printk+0x10/0x10
[  125.315705][ T6273]  ? __might_fault+0xb0/0x130
[  125.315742][ T6273]  should_fail_ex+0x414/0x560
[  125.315777][ T6273]  _copy_from_user+0x2d/0xb0
[  125.315803][ T6273]  get_compat_msghdr+0xad/0x4a0
[  125.315837][ T6273]  ? __pfx_get_compat_msghdr+0x10/0x10
[  125.315878][ T6273]  ___sys_sendmsg+0x193/0x2a0
[  125.315909][ T6273]  ? __pfx____sys_sendmsg+0x10/0x10
[  125.315982][ T6273]  ? __fget_files+0x2a/0x420
[  125.316008][ T6273]  ? __fget_files+0x3a0/0x420
[  125.316047][ T6273]  __sys_sendmmsg+0x28e/0x430
[  125.316080][ T6273]  ? __pfx___sys_sendmmsg+0x10/0x10
[  125.316117][ T6273]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  125.316156][ T6273]  ? ksys_write+0x22a/0x250
[  125.316191][ T6273]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[  125.316222][ T6273]  __do_fast_syscall_32+0xb6/0x2b0
[  125.316243][ T6273]  ? lockdep_hardirqs_on+0x9c/0x150
[  125.316279][ T6273]  do_fast_syscall_32+0x34/0x80
[  125.316299][ T6273]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  125.316324][ T6273] RIP: 0023:0xf7f77539
[  125.316341][ T6273] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  125.316357][ T6273] RSP: 002b:00000000f509655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159
[  125.316379][ T6273] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800056c0
[  125.316394][ T6273] RDX: 0000000000000001 RSI: 0000000037e68e7e RDI: 0000000000000000
[  125.316406][ T6273] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  125.316417][ T6273] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  125.316429][ T6273] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  125.316458][ T6273]  </TASK>
[  125.554308][ T2154] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  125.619948][ T2154] usb 1-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68
[  125.632506][ T2154] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.640556][ T2154] usb 1-1: Product: syz
[  125.644878][ T2154] usb 1-1: Manufacturer: syz
[  125.650606][ T2154] usb 1-1: SerialNumber: syz
[  125.657454][ T2154] usb 1-1: config 0 descriptor??
[  125.669295][ T2154] redrat3 1-1:0.0: Couldn't find all endpoints
[  125.867620][ T6267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  125.884290][ T6267] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  125.896056][   T10] usb 1-1: USB disconnect, device number 4
[  125.944660][ T6265] can: request_module (can-proto-0) failed.
[  126.498517][   T10] usb 3-1: new low-speed USB device number 4 using dummy_hcd
[  126.687888][   T10] usb 3-1: config index 0 descriptor too short (expected 6427, got 27)
[  126.696367][   T10] usb 3-1: config 0 has an invalid interface number: 21 but max is 0
[  126.718574][   T10] usb 3-1: config 0 has no interface number 0
[  126.757905][   T10] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[  126.783529][   T10] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  126.811045][   T10] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[  126.837185][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.877625][   T10] usb 3-1: config 0 descriptor??
[  127.268112][ T5934] usb 4-1: USB disconnect, device number 6
[  127.332855][ T6281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  127.361276][ T6281] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  127.645024][   T10] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.21/input/input9
[  127.791254][   T10] input: failed to attach handler kbd to device input9, error: -5
[  127.836646][ T5934] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  127.896168][ T6312] FAULT_INJECTION: forcing a failure.
[  127.896168][ T6312] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  127.963267][ T6312] CPU: 1 UID: 0 PID: 6312 Comm: syz.0.91 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) 
[  127.963294][ T6312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  127.963305][ T6312] Call Trace:
[  127.963313][ T6312]  <TASK>
[  127.963321][ T6312]  dump_stack_lvl+0x189/0x250
[  127.963350][ T6312]  ? __pfx____ratelimit+0x10/0x10
[  127.963379][ T6312]  ? __pfx_dump_stack_lvl+0x10/0x10
[  127.963401][ T6312]  ? __pfx__printk+0x10/0x10
[  127.963448][ T6312]  ? __might_fault+0xb0/0x130
[  127.963489][ T6312]  should_fail_ex+0x414/0x560
[  127.963523][ T6312]  _copy_from_user+0x2d/0xb0
[  127.963547][ T6312]  generic_map_update_batch+0x51b/0x7f0
[  127.963585][ T6312]  ? __pfx_generic_map_update_batch+0x10/0x10
[  127.963611][ T6312]  ? __fget_files+0x2a/0x420
[  127.963644][ T6312]  ? __pfx_generic_map_update_batch+0x10/0x10
[  127.963669][ T6312]  bpf_map_do_batch+0x369/0x5f0
[  127.963695][ T6312]  __sys_bpf+0x384/0x860
[  127.963715][ T6312]  ? __pfx___sys_bpf+0x10/0x10
[  127.963745][ T6312]  ? ksys_write+0x22a/0x250
[  127.963779][ T6312]  __ia32_sys_bpf+0x7c/0x90
[  127.963807][ T6312]  __do_fast_syscall_32+0xb6/0x2b0
[  127.963828][ T6312]  ? lockdep_hardirqs_on+0x9c/0x150
[  127.963859][ T6312]  do_fast_syscall_32+0x34/0x80
[  127.963874][ T6312]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  127.963894][ T6312] RIP: 0023:0xf702e539
[  127.963908][ T6312] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  127.963920][ T6312] RSP: 002b:00000000f4fdc55c EFLAGS: 00000206 ORIG_RAX: 0000000000000165
[  127.963938][ T6312] RAX: ffffffffffffffda RBX: 000000000000001a RCX: 0000000080000200
[  127.963948][ T6312] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000
[  127.963957][ T6312] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  127.963966][ T6312] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  127.963975][ T6312] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  127.963995][ T6312]  </TASK>
[  128.379360][ T5934] usb 4-1: config 0 has an invalid interface number: 95 but max is 0
[  128.411297][ T5934] usb 4-1: config 0 has no interface number 0
[  128.535261][ T5934] usb 4-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8
[  128.573963][ T5934] usb 4-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46
[  128.589734][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.598620][ T5934] usb 4-1: Product: syz
[  128.602882][ T5934] usb 4-1: Manufacturer: syz
[  128.610056][ T5934] usb 4-1: SerialNumber: syz
[  128.635836][ T5934] usb 4-1: config 0 descriptor??
[  128.747510][ T6301] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  128.776611][ T6317] netlink: 28 bytes leftover after parsing attributes in process `syz.4.92'.
[  129.074078][ T5934] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  129.107857][ T5934] usb 4-1: MIDIStreaming interface descriptor not found
[  129.245002][ T5934] usb 4-1: USB disconnect, device number 7
[  129.394492][ T6125] udevd[6125]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  129.510031][   T10] usb 3-1: USB disconnect, device number 4
[  130.067367][ T6322] netlink: 'syz.2.94': attribute type 5 has an invalid length.
[  130.279019][ T6333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.96'.
[  131.316388][   T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  131.476720][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.104'.
[  131.516383][   T24] usb 1-1: Using ep0 maxpacket: 16
[  131.525043][   T24] usb 1-1: config 0 has no interfaces?
[  131.556544][ T6360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.104'.
[  131.575706][   T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  131.585650][ T6328] can: request_module (can-proto-0) failed.
[  131.674145][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.737813][   T24] usb 1-1: config 0 descriptor??
[  132.178368][   T30] audit: type=1326 audit(1752185233.633:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7fc00000
[  132.201920][   T30] audit: type=1326 audit(1752185233.713:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7fc00000
[  132.330923][   T30] audit: type=1326 audit(1752185233.823:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7fc00000
[  132.373287][   T30] audit: type=1326 audit(1752185233.833:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7fc00000
[  132.406000][   T30] audit: type=1326 audit(1752185233.833:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7fc00000
[  132.427824][   T30] audit: type=1326 audit(1752185233.843:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7fc00000
[  132.449706][   T30] audit: type=1326 audit(1752185233.873:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7fc00000
[  132.478854][   T30] audit: type=1326 audit(1752185233.923:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7fc00000
[  132.525392][   T30] audit: type=1326 audit(1752185233.923:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7fc00000
[  132.572386][   T30] audit: type=1326 audit(1752185233.923:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6362 comm="syz.1.105" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7fc00000
[  132.861132][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  132.873194][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  133.076130][ T6377] syz_tun: entered allmulticast mode
[  133.112554][ T6377] dvmrp1: entered allmulticast mode
[  133.150435][ T6376] syz_tun: left allmulticast mode
[  133.178234][ T6367] delete_channel: no stack
[  133.363181][ T6385] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  133.996238][ T5847] usb 1-1: USB disconnect, device number 5
[  134.282172][ T6409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.120'.
[  134.299793][ T6409] FAULT_INJECTION: forcing a failure.
[  134.299793][ T6409] name failslab, interval 1, probability 0, space 0, times 1
[  134.323157][ T6409] CPU: 0 UID: 0 PID: 6409 Comm: syz.1.120 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) 
[  134.323187][ T6409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  134.323199][ T6409] Call Trace:
[  134.323207][ T6409]  <TASK>
[  134.323216][ T6409]  dump_stack_lvl+0x189/0x250
[  134.323255][ T6409]  ? __pfx____ratelimit+0x10/0x10
[  134.323287][ T6409]  ? __pfx_dump_stack_lvl+0x10/0x10
[  134.323311][ T6409]  ? __pfx__printk+0x10/0x10
[  134.323345][ T6409]  ? __pfx___might_resched+0x10/0x10
[  134.323369][ T6409]  ? fs_reclaim_acquire+0x7d/0x100
[  134.323403][ T6409]  should_fail_ex+0x414/0x560
[  134.323439][ T6409]  should_failslab+0xa8/0x100
[  134.323467][ T6409]  __kmalloc_node_noprof+0xd1/0x4e0
[  134.323491][ T6409]  ? qdisc_alloc+0x97/0xaa0
[  134.323520][ T6409]  qdisc_alloc+0x97/0xaa0
[  134.323554][ T6409]  qdisc_create+0x12c/0xea0
[  134.323578][ T6409]  ? qdisc_lookup+0x36d/0x6d0
[  134.323610][ T6409]  tc_modify_qdisc+0x1426/0x2010
[  134.323643][ T6409]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  134.323712][ T6409]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  134.323731][ T6409]  rtnetlink_rcv_msg+0x77c/0xb70
[  134.323760][ T6409]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  134.323781][ T6409]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  134.323801][ T6409]  ? ref_tracker_free+0x63a/0x7d0
[  134.323831][ T6409]  ? __copy_skb_header+0xa7/0x550
[  134.323863][ T6409]  ? __pfx_ref_tracker_free+0x10/0x10
[  134.323895][ T6409]  ? __skb_clone+0x63/0x7a0
[  134.323931][ T6409]  netlink_rcv_skb+0x205/0x470
[  134.323958][ T6409]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  134.323984][ T6409]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  134.324025][ T6409]  ? netlink_deliver_tap+0x2e/0x1b0
[  134.324049][ T6409]  ? netlink_deliver_tap+0x2e/0x1b0
[  134.324079][ T6409]  netlink_unicast+0x758/0x8d0
[  134.324115][ T6409]  netlink_sendmsg+0x805/0xb30
[  134.324156][ T6409]  ? __pfx_netlink_sendmsg+0x10/0x10
[  134.324185][ T6409]  ? __import_iovec+0x5d4/0x7f0
[  134.324207][ T6409]  ? aa_sock_msg_perm+0x94/0x160
[  134.324248][ T6409]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  134.324280][ T6409]  ? __pfx_netlink_sendmsg+0x10/0x10
[  134.324313][ T6409]  __sock_sendmsg+0x219/0x270
[  134.324354][ T6409]  ____sys_sendmsg+0x505/0x830
[  134.324386][ T6409]  ? __pfx_____sys_sendmsg+0x10/0x10
[  134.324432][ T6409]  ___sys_sendmsg+0x21f/0x2a0
[  134.324463][ T6409]  ? __pfx____sys_sendmsg+0x10/0x10
[  134.324529][ T6409]  ? __fget_files+0x2a/0x420
[  134.324557][ T6409]  ? __fget_files+0x3a0/0x420
[  134.324597][ T6409]  __sys_sendmsg+0x164/0x220
[  134.324628][ T6409]  ? __pfx___sys_sendmsg+0x10/0x10
[  134.324673][ T6409]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  134.324709][ T6409]  ? lockdep_hardirqs_on+0x9c/0x150
[  134.324744][ T6409]  __do_fast_syscall_32+0xb6/0x2b0
[  134.324767][ T6409]  ? lockdep_hardirqs_on+0x9c/0x150
[  134.324804][ T6409]  do_fast_syscall_32+0x34/0x80
[  134.324826][ T6409]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  134.324851][ T6409] RIP: 0023:0xf7f77539
[  134.324870][ T6409] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  134.324888][ T6409] RSP: 002b:00000000f509655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  134.324910][ T6409] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800007c0
[  134.324929][ T6409] RDX: 0000000000004014 RSI: 0000000000000000 RDI: 0000000000000000
[  134.324942][ T6409] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  134.324954][ T6409] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  134.324966][ T6409] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  134.324997][ T6409]  </TASK>
[  134.681450][    C0] vkms_vblank_simulate: vblank timer overrun
[  134.762291][ T6398] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  134.876585][ T5847] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  135.049887][ T5847] usb 1-1: Using ep0 maxpacket: 16
[  135.096855][ T5940] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  135.118573][ T5847] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  135.137792][ T5847] usb 1-1: config 0 has no interface number 0
[  135.160406][ T5847] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  135.175475][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.201649][ T5847] usb 1-1: Product: syz
[  135.211743][ T5847] usb 1-1: Manufacturer: syz
[  135.222656][ T5847] usb 1-1: SerialNumber: syz
[  135.245812][ T5847] usb 1-1: config 0 descriptor??
[  135.276387][ T5940] usb 2-1: Using ep0 maxpacket: 32
[  135.298735][ T5940] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  135.304870][ T5847] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  135.323494][ T5940] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  135.334969][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.346071][ T5940] usb 2-1: Product: syz
[  135.352962][ T5940] usb 2-1: Manufacturer: syz
[  135.357927][ T5940] usb 2-1: SerialNumber: syz
[  135.372936][ T5940] usb 2-1: config 0 descriptor??
[  135.428960][ T5940] usb 2-1: bad CDC descriptors
[  135.440359][ T5940] usb 2-1: unsupported MDLM descriptors
[  135.634891][   T10] usb 2-1: USB disconnect, device number 3
[  135.719064][ T6428] FAULT_INJECTION: forcing a failure.
[  135.719064][ T6428] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  135.735069][ T6428] CPU: 0 UID: 0 PID: 6428 Comm: syz.2.126 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) 
[  135.735100][ T6428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  135.735113][ T6428] Call Trace:
[  135.735121][ T6428]  <TASK>
[  135.735130][ T6428]  dump_stack_lvl+0x189/0x250
[  135.735161][ T6428]  ? __pfx____ratelimit+0x10/0x10
[  135.735184][ T6428]  ? __pfx_dump_stack_lvl+0x10/0x10
[  135.735202][ T6428]  ? __pfx__printk+0x10/0x10
[  135.735247][ T6428]  should_fail_ex+0x414/0x560
[  135.735283][ T6428]  _copy_to_user+0x31/0xb0
[  135.735311][ T6428]  simple_read_from_buffer+0xe1/0x170
[  135.735335][ T6428]  proc_fail_nth_read+0x1df/0x250
[  135.735360][ T6428]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  135.735401][ T6428]  ? rw_verify_area+0x258/0x650
[  135.735425][ T6428]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  135.735456][ T6428]  vfs_read+0x200/0x980
[  135.735481][ T6428]  ? __pfx___mutex_lock+0x10/0x10
[  135.735497][ T6428]  ? __pfx_vfs_read+0x10/0x10
[  135.735515][ T6428]  ? __fget_files+0x2a/0x420
[  135.735551][ T6428]  ? __fget_files+0x3a0/0x420
[  135.735586][ T6428]  ? __fget_files+0x2a/0x420
[  135.735622][ T6428]  ksys_read+0x145/0x250
[  135.735642][ T6428]  ? __pfx_ksys_read+0x10/0x10
[  135.735660][ T6428]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  135.735694][ T6428]  ? lockdep_hardirqs_on+0x9c/0x150
[  135.735735][ T6428]  __do_fast_syscall_32+0xb6/0x2b0
[  135.735756][ T6428]  ? lockdep_hardirqs_on+0x9c/0x150
[  135.735796][ T6428]  do_fast_syscall_32+0x34/0x80
[  135.735811][ T6428]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  135.735834][ T6428] RIP: 0023:0xf711e539
[  135.735853][ T6428] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  135.735877][ T6428] RSP: 002b:00000000f510e590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[  135.735899][ T6428] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00000000f510e620
[  135.735913][ T6428] RDX: 000000000000000f RSI: 00000000f7483ff4 RDI: 0000000000000000
[  135.735927][ T6428] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  135.735935][ T6428] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  135.735944][ T6428] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  135.735965][ T6428]  </TASK>
[  135.966042][    C0] vkms_vblank_simulate: vblank timer overrun
[  137.173443][ T5847] gspca_spca1528: reg_w err -110
[  137.206684][ T5847] spca1528 1-1:0.1: probe with driver spca1528 failed with error -110
[  137.246242][ T5847] usb 1-1: USB disconnect, device number 6
[  137.786685][ T5847] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  137.956531][ T5847] usb 3-1: Using ep0 maxpacket: 16
[  137.974871][ T5847] usb 3-1: config 0 has no interfaces?
[  137.983235][ T5847] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  138.023360][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.080164][ T5847] usb 3-1: config 0 descriptor??
[  138.457621][ T6451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'.
[  138.466673][ T6451] netlink: 'syz.0.132': attribute type 30 has an invalid length.
[  138.472812][ T6449] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  138.523621][ T6449] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  138.573492][ T6455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.132'.
[  138.585726][ T6451] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  138.595203][ T6451] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  138.604028][ T6451] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  138.612823][ T6451] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  138.797415][ T6455] vxlan1: entered promiscuous mode
[  139.138109][ T6462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.136'.
[  139.751580][ T6477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.137'.
[  139.834297][ T6477] syz.3.137 uses obsolete (PF_INET,SOCK_PACKET)
[  140.566491][ T5921] usb 3-1: USB disconnect, device number 5
[  141.959489][ T6514] FAULT_INJECTION: forcing a failure.
[  141.959489][ T6514] name failslab, interval 1, probability 0, space 0, times 0
[  141.992229][   T30] kauditd_printk_skb: 61 callbacks suppressed
[  141.992247][   T30] audit: type=1326 audit(1752185243.533:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000
[  142.006514][ T6514] CPU: 0 UID: 0 PID: 6514 Comm: syz.3.150 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) 
[  142.006548][ T6514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  142.006561][ T6514] Call Trace:
[  142.006570][ T6514]  <TASK>
[  142.006580][ T6514]  dump_stack_lvl+0x189/0x250
[  142.006617][ T6514]  ? __pfx____ratelimit+0x10/0x10
[  142.006653][ T6514]  ? __pfx_dump_stack_lvl+0x10/0x10
[  142.006682][ T6514]  ? __pfx__printk+0x10/0x10
[  142.006724][ T6514]  ? __pfx___might_resched+0x10/0x10
[  142.006752][ T6514]  ? fs_reclaim_acquire+0x7d/0x100
[  142.006791][ T6514]  should_fail_ex+0x414/0x560
[  142.006831][ T6514]  should_failslab+0xa8/0x100
[  142.006863][ T6514]  kmem_cache_alloc_noprof+0x73/0x3c0
[  142.006891][ T6514]  ? key_alloc+0x308/0x1030
[  142.006922][ T6514]  ? key_user_lookup+0x1bc/0x460
[  142.006960][ T6514]  key_alloc+0x308/0x1030
[  142.007009][ T6514]  keyring_alloc+0x45/0xb0
[  142.007037][ T6514]  lookup_user_key+0x467/0x1090
[  142.007084][ T6514]  ? __pfx_lookup_user_key+0x10/0x10
[  142.007120][ T6514]  ? __pfx_lookup_user_key_possessed+0x10/0x10
[  142.007163][ T6514]  ? _copy_from_user+0x94/0xb0
[  142.007192][ T6514]  ? memdup_user+0x99/0xd0
[  142.007230][ T6514]  __se_sys_request_key+0x1c1/0x340
[  142.007262][ T6514]  ? __pfx___se_sys_request_key+0x10/0x10
[  142.007298][ T6514]  ? syscall_user_dispatch+0x4f/0x90
[  142.007328][ T6514]  __do_fast_syscall_32+0xb6/0x2b0
[  142.007353][ T6514]  ? lockdep_hardirqs_on+0x9c/0x150
[  142.007393][ T6514]  do_fast_syscall_32+0x34/0x80
[  142.007416][ T6514]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  142.007445][ T6514] RIP: 0023:0xf703e539
[  142.007463][ T6514] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  142.007482][ T6514] RSP: 002b:00000000f500d55c EFLAGS: 00000206 ORIG_RAX: 000000000000011f
[  142.007508][ T6514] RAX: ffffffffffffffda RBX: 0000000080000040 RCX: 0000000080000100
[  142.007524][ T6514] RDX: 0000000000000000 RSI: 00000000fffffffe RDI: 0000000000000000
[  142.007539][ T6514] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  142.007551][ T6514] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  142.007564][ T6514] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  142.007596][ T6514]  </TASK>
[  142.113565][ T6519] netlink: 60 bytes leftover after parsing attributes in process `syz.2.152'.
[  142.427914][   T30] audit: type=1326 audit(1752185243.533:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000
[  142.465223][   T30] audit: type=1326 audit(1752185243.813:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f77539 code=0x7ffc0000
[  142.508653][ T6515] netlink: 60 bytes leftover after parsing attributes in process `syz.2.152'.
[  142.612112][   T30] audit: type=1326 audit(1752185243.813:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000
[  142.729372][   T30] audit: type=1326 audit(1752185243.813:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000
[  142.893654][   T30] audit: type=1326 audit(1752185243.813:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f77539 code=0x7ffc0000
[  142.962284][   T30] audit: type=1326 audit(1752185243.823:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000
[  142.988950][   T30] audit: type=1326 audit(1752185243.823:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000
[  143.022101][   T30] audit: type=1326 audit(1752185243.823:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f77539 code=0x7ffc0000
[  143.060700][   T30] audit: type=1326 audit(1752185243.853:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6512 comm="syz.1.151" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f77539 code=0x7ffc0000
[  143.186798][ T5847] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  143.347279][ T5847] usb 4-1: Using ep0 maxpacket: 16
[  143.360628][ T5847] usb 4-1: config 0 has no interfaces?
[  143.367565][ T5847] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  143.385196][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.425688][ T6523] delete_channel: no stack
[  143.454465][ T5847] usb 4-1: config 0 descriptor??
[  143.630424][ T6538] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5)
[  143.637173][ T6538] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  143.754474][ T6538] vhci_hcd vhci_hcd.0: Device attached
[  143.802286][ T6539] vhci_hcd: connection closed
[  143.804517][   T36] vhci_hcd: stop threads
[  143.822868][   T36] vhci_hcd: release socket
[  143.829018][   T36] vhci_hcd: disconnect device
[  143.986532][ T5934] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  144.136563][ T5934] usb 3-1: Using ep0 maxpacket: 32
[  144.148493][ T5934] usb 3-1: config 0 has an invalid interface number: 171 but max is 0
[  144.165010][ T5934] usb 3-1: config 0 has an invalid descriptor of length 167, skipping remainder of the config
[  144.193483][ T5934] usb 3-1: config 0 has no interface number 0
[  144.209413][ T5934] usb 3-1: config 0 interface 171 has no altsetting 0
[  144.232465][ T5934] usb 3-1: New USB device found, idVendor=0403, idProduct=d491, bcdDevice=3e.4a
[  144.267865][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.373112][ T5934] usb 3-1: Product: syz
[  144.392395][ T5934] usb 3-1: Manufacturer: syz
[  144.419881][ T5934] usb 3-1: SerialNumber: syz
[  144.457387][ T5934] usb 3-1: config 0 descriptor??
[  144.679225][ T5934] ftdi_sio 3-1:0.171: FTDI USB Serial Device converter detected
[  144.718408][ T5934] ftdi_sio ttyUSB0: unknown device type: 0x3e4a
[  144.768103][ T5934] usb 3-1: USB disconnect, device number 6
[  144.803754][ T5934] ftdi_sio 3-1:0.171: device disconnected
[  146.558122][ T5921] usb 4-1: USB disconnect, device number 8
[  146.572532][ T6564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.167'.
[  146.657395][ T2154] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  146.846479][ T2154] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  146.880986][ T2154] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  146.902188][ T2154] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.935381][ T2154] usb 3-1: Product: syz
[  146.945358][ T2154] usb 3-1: Manufacturer: syz
[  146.954237][ T2154] usb 3-1: SerialNumber: syz
[  147.243711][ T6575] veth0: entered promiscuous mode
[  147.271986][ T6575] veth0: left promiscuous mode
[  147.295296][ T6577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.173'.
[  147.320397][ T6579] =======================================================
[  147.320397][ T6579] WARNING: The mand mount option has been deprecated and
[  147.320397][ T6579]          and is ignored by this kernel. Remove the mand
[  147.320397][ T6579]          option from the mount to silence this warning.
[  147.320397][ T6579] =======================================================
[  147.355275][    C1] vkms_vblank_simulate: vblank timer overrun
[  147.369517][ T6579] fuse: Bad value for 'fd'
[  147.436806][ T6580] fuse: Bad value for 'fd'
[  147.771808][ T6590] netlink: 48 bytes leftover after parsing attributes in process `syz.3.177'.
[  147.783713][ T6569] delete_channel: no stack
[  148.009946][ T2154] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42
[  148.017195][ T2154] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[  148.025967][ T2154] cdc_ncm 3-1:1.0: setting rx_max = 2048
[  148.332809][ T5934] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  148.658181][ T2154] cdc_ncm 3-1:1.0: setting tx_max = 88
[  148.727621][ T5934] usb 5-1: Using ep0 maxpacket: 16
[  148.743836][ T5934] usb 5-1: config 0 has no interfaces?
[  148.745611][ T2154] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  148.770304][ T5934] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  149.016626][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.033656][ T2154] usb 3-1: USB disconnect, device number 7
[  149.040942][ T5934] usb 5-1: config 0 descriptor??
[  149.077305][ T2154] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP)
[  150.226840][ T5934] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  150.406440][ T5934] usb 4-1: Using ep0 maxpacket: 8
[  150.425714][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  150.458086][ T5934] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  150.475893][ T6632] netlink: 92 bytes leftover after parsing attributes in process `syz.0.189'.
[  150.490368][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.524688][ T5934] usb 4-1: config 0 descriptor??
[  150.784834][ T5934] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  150.950981][ T5934] usb 5-1: USB disconnect, device number 4
[  150.953873][ T6621] FAULT_INJECTION: forcing a failure.
[  150.953873][ T6621] name failslab, interval 1, probability 0, space 0, times 0
[  151.007976][ T6621] CPU: 0 UID: 0 PID: 6621 Comm: syz.3.186 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) 
[  151.008006][ T6621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  151.008018][ T6621] Call Trace:
[  151.008027][ T6621]  <TASK>
[  151.008035][ T6621]  dump_stack_lvl+0x189/0x250
[  151.008066][ T6621]  ? __pfx____ratelimit+0x10/0x10
[  151.008098][ T6621]  ? __pfx_dump_stack_lvl+0x10/0x10
[  151.008123][ T6621]  ? __pfx__printk+0x10/0x10
[  151.008161][ T6621]  ? __pfx___might_resched+0x10/0x10
[  151.008186][ T6621]  ? fs_reclaim_acquire+0x7d/0x100
[  151.008220][ T6621]  should_fail_ex+0x414/0x560
[  151.008256][ T6621]  should_failslab+0xa8/0x100
[  151.008287][ T6621]  __kmalloc_noprof+0xcb/0x4f0
[  151.008310][ T6621]  ? tomoyo_encode+0x28b/0x550
[  151.008335][ T6621]  tomoyo_encode+0x28b/0x550
[  151.008380][ T6621]  tomoyo_realpath_from_path+0x58d/0x5d0
[  151.008420][ T6621]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  151.008450][ T6621]  tomoyo_path_number_perm+0x1e8/0x5a0
[  151.008484][ T6621]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  151.008533][ T6621]  ? __lock_acquire+0xab9/0xd20
[  151.008580][ T6621]  ? __fget_files+0x2a/0x420
[  151.008614][ T6621]  ? __fget_files+0x3a0/0x420
[  151.008641][ T6621]  ? __fget_files+0x2a/0x420
[  151.008674][ T6621]  security_file_ioctl_compat+0xcb/0x2d0
[  151.008706][ T6621]  __ia32_compat_sys_ioctl+0x128/0x840
[  151.008741][ T6621]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  151.008766][ T6621]  ? __fget_files+0x3a0/0x420
[  151.008801][ T6621]  ? fput+0xa0/0xd0
[  151.008834][ T6621]  ? ksys_write+0x22a/0x250
[  151.008867][ T6621]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  151.008908][ T6621]  ? lockdep_hardirqs_on+0x9c/0x150
[  151.008944][ T6621]  __do_fast_syscall_32+0xb6/0x2b0
[  151.008966][ T6621]  ? lockdep_hardirqs_on+0x9c/0x150
[  151.009012][ T6621]  do_fast_syscall_32+0x34/0x80
[  151.009034][ T6621]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  151.009059][ T6621] RIP: 0023:0xf703e539
[  151.009078][ T6621] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  151.009095][ T6621] RSP: 002b:00000000f502e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  151.009118][ T6621] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000000541b
[  151.009133][ T6621] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  151.009145][ T6621] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  151.009156][ T6621] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  151.009174][ T6621] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  151.009204][ T6621]  </TASK>
[  151.009292][ T6621] ERROR: Out of memory at tomoyo_realpath_from_path.
[  151.385659][ T2154] usb 4-1: USB disconnect, device number 9
[  151.777910][ T5934] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  151.956388][ T5934] usb 5-1: Using ep0 maxpacket: 8
[  151.992166][ T5934] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  152.029636][ T5934] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  152.063997][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.113988][ T5934] usb 5-1: config 0 descriptor??
[  152.378649][ T5934] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  152.642004][   T10] usb 5-1: USB disconnect, device number 5
[  153.736762][ T2154] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  153.926437][ T2154] usb 2-1: Using ep0 maxpacket: 8
[  153.977409][ T2154] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  153.985685][ T2154] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  154.036514][ T2154] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  154.057323][ T2154] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  154.082036][ T2154] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  154.136528][ T2154] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  154.176423][ T2154] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.428026][ T2154] usb 2-1: usb_control_msg returned -32
[  154.446458][ T2154] usbtmc 2-1:16.0: can't read capabilities
[  154.496386][ T5847] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  154.686589][ T5847] usb 4-1: Using ep0 maxpacket: 16
[  154.711087][ T6705] IPv6: Can't replace route, no match found
[  154.721497][ T5847] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  154.741715][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.756624][ T5847] usb 4-1: Product: syz
[  154.760874][ T5847] usb 4-1: Manufacturer: syz
[  154.774672][ T5847] usb 4-1: SerialNumber: syz
[  154.809080][ T6708] usbtmc 2-1:16.0: control status returned 0
[  154.815623][ T6708] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  154.840372][ T5847] r8152-cfgselector 4-1: Unknown version 0x0000
[  154.846838][ T5847] r8152-cfgselector 4-1: config 0 descriptor??
[  154.916095][ T6710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  154.946735][ T6710] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  155.052331][ T2154] usb 2-1: USB disconnect, device number 4
[  155.104496][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.203'.
[  155.208089][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.203'.
[  155.442096][ T5847] r8152-cfgselector 4-1: Unknown version 0x0000
[  155.449182][ T5847] r8152-cfgselector 4-1: bad CDC descriptors
[  155.473769][ T5847] r8152-cfgselector 4-1: USB disconnect, device number 10
[  155.588770][ T2154] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  155.747003][ T2154] usb 2-1: Using ep0 maxpacket: 8
[  155.763499][ T2154] usb 2-1: config 11 has an invalid interface number: 95 but max is 0
[  155.773863][ T2154] usb 2-1: config 11 has no interface number 0
[  155.785396][ T2154] usb 2-1: config 11 interface 95 altsetting 64 endpoint 0x82 has an invalid bInterval 25, changing to 8
[  155.801101][ T2154] usb 2-1: config 11 interface 95 altsetting 64 endpoint 0x82 has invalid maxpacket 50090, setting to 1024
[  155.813276][ T2154] usb 2-1: config 11 interface 95 has no altsetting 0
[  155.827911][ T2154] usb 2-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d
[  155.838375][ T2154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.846580][ T2154] usb 2-1: Product: syz
[  155.850979][ T2154] usb 2-1: Manufacturer: syz
[  155.855603][ T2154] usb 2-1: SerialNumber: syz
[  156.145514][ T2154] usbtouchscreen 2-1:11.95: probe with driver usbtouchscreen failed with error -71
[  156.166097][ T2154] usb 2-1: USB disconnect, device number 5
[  156.179550][ T6735] ipt_ECN: cannot use operation on non-tcp rule
[  156.528945][ T6743] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  156.537732][ T6743] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  156.558244][ T6743] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  156.569398][ T6743] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  156.577591][ T6743] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  156.588190][ T6743] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  156.597888][ T6743] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  156.604093][ T6743] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  156.614786][ T6743] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  156.623306][ T6743] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  156.630053][ T6743] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  156.636569][ T2154] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  156.654867][ T6743] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  156.672513][ T6743] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  156.680501][ T6743] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  156.693437][ T6743] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  156.820044][ T2154] usb 5-1: config 1 has an invalid descriptor of length 139, skipping remainder of the config
[  156.851550][ T2154] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  156.906676][ T2154] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  156.926187][ T2154] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.961094][ T2154] usb 5-1: Product: syz
[  156.974497][ T2154] usb 5-1: Manufacturer: syz
[  156.981573][ T2154] usb 5-1: SerialNumber: syz
[  157.220684][ T2154] usb 5-1: 0:2 : does not exist
[  157.278263][ T2154] usb 5-1: USB disconnect, device number 6
[  157.328055][ T6320] udevd[6320]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  157.421372][ T6761] netlink: 'syz.2.225': attribute type 29 has an invalid length.
[  157.450489][ T6761] netlink: 'syz.2.225': attribute type 29 has an invalid length.
[  157.491704][ T6761] netlink: 'syz.2.225': attribute type 29 has an invalid length.
[  157.517899][ T6761] netlink: 'syz.2.225': attribute type 29 has an invalid length.
[  157.730438][ T6769] netlink: 16 bytes leftover after parsing attributes in process `syz.0.227'.
[  157.741514][ T6769] netlink: 16 bytes leftover after parsing attributes in process `syz.0.227'.
[  158.536500][ T5850] Bluetooth: hci0: command 0x0c1a tx timeout
[  158.616470][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout
[  158.625585][ T5850] Bluetooth: hci2: command 0x0c1a tx timeout
[  158.631740][   T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  158.696659][ T5849] Bluetooth: hci4: command 0x0c1a tx timeout
[  158.703552][ T5850] Bluetooth: hci3: command 0x0405 tx timeout
[  158.777051][   T24] usb 2-1: Using ep0 maxpacket: 16
[  158.818810][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  158.851080][   T24] usb 2-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00
[  158.892192][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.928632][   T24] usb 2-1: config 0 descriptor??
[  159.141418][ T6783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.156883][ T6783] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.163378][ T6798] netlink: 16 bytes leftover after parsing attributes in process `syz.2.239'.
[  159.174938][ T6798] netlink: 16 bytes leftover after parsing attributes in process `syz.2.239'.
[  159.215934][ T6804] usb usb8: usbfs: process 6804 (syz.4.240) did not claim interface 0 before use
[  159.235291][ T6783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.256964][ T6783] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.285415][ T6783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.313698][ T6783] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.342793][ T6783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.393013][ T6783] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.421984][ T6807] FAULT_INJECTION: forcing a failure.
[  159.421984][ T6807] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  159.424896][ T6783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.452349][ T6807] CPU: 0 UID: 0 PID: 6807 Comm: syz.2.241 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) 
[  159.452381][ T6807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  159.452394][ T6807] Call Trace:
[  159.452403][ T6807]  <TASK>
[  159.452413][ T6807]  dump_stack_lvl+0x189/0x250
[  159.452444][ T6807]  ? __pfx____ratelimit+0x10/0x10
[  159.452478][ T6807]  ? __pfx_dump_stack_lvl+0x10/0x10
[  159.452504][ T6807]  ? __pfx__printk+0x10/0x10
[  159.452534][ T6807]  ? __might_fault+0xb0/0x130
[  159.452572][ T6807]  should_fail_ex+0x414/0x560
[  159.452608][ T6807]  _copy_from_user+0x2d/0xb0
[  159.452634][ T6807]  get_compat_msghdr+0xad/0x4a0
[  159.452670][ T6807]  ? __pfx_get_compat_msghdr+0x10/0x10
[  159.452713][ T6807]  ___sys_sendmsg+0x193/0x2a0
[  159.452744][ T6807]  ? __pfx____sys_sendmsg+0x10/0x10
[  159.452811][ T6807]  ? __fget_files+0x2a/0x420
[  159.452839][ T6807]  ? __fget_files+0x3a0/0x420
[  159.452878][ T6807]  __sys_sendmsg+0x164/0x220
[  159.452908][ T6807]  ? __pfx___sys_sendmsg+0x10/0x10
[  159.452945][ T6807]  ? rcu_is_watching+0x15/0xb0
[  159.452975][ T6807]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  159.453011][ T6807]  ? lockdep_hardirqs_on+0x9c/0x150
[  159.453050][ T6807]  __do_fast_syscall_32+0xb6/0x2b0
[  159.453072][ T6807]  ? lockdep_hardirqs_on+0x9c/0x150
[  159.453115][ T6807]  do_fast_syscall_32+0x34/0x80
[  159.453137][ T6807]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  159.453174][ T6807] RIP: 0023:0xf711e539
[  159.453192][ T6807] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  159.453226][ T6807] RSP: 002b:00000000f510e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  159.453250][ T6807] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100
[  159.453265][ T6807] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  159.453277][ T6807] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  159.453288][ T6807] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  159.453300][ T6807] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  159.453330][ T6807]  </TASK>
[  159.487001][ T6783] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.010889][   T24] usbhid 2-1:0.0: can't add hid device: -71
[  160.043458][   T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  160.107769][   T24] usb 2-1: USB disconnect, device number 6
[  160.616430][ T5850] Bluetooth: hci0: command 0x0c1a tx timeout
[  160.696450][ T5850] Bluetooth: hci2: command 0x0c1a tx timeout
[  160.706372][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout
[  160.776725][ T5850] Bluetooth: hci3: command 0x0405 tx timeout
[  160.782813][ T5849] Bluetooth: hci4: command 0x0c1a tx timeout
[  161.160412][   T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  161.316379][   T10] usb 4-1: Using ep0 maxpacket: 32
[  161.325437][   T10] usb 4-1: no configurations
[  161.330444][   T10] usb 4-1: can't read configurations, error -22
[  161.496393][   T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  161.657316][   T10] usb 4-1: Using ep0 maxpacket: 32
[  161.665806][   T10] usb 4-1: no configurations
[  161.913004][   T10] usb 4-1: can't read configurations, error -22
[  161.998564][   T10] usb usb4-port1: attempt power cycle
[  162.039657][ T6842] netlink: 'syz.2.250': attribute type 10 has an invalid length.
[  162.054101][ T6842] netlink: 40 bytes leftover after parsing attributes in process `syz.2.250'.
[  162.198461][ T6842] batadv0: entered promiscuous mode
[  162.203990][ T6842] batadv0: entered allmulticast mode
[  162.210139][ T6842] FAULT_INJECTION: forcing a failure.
[  162.210139][ T6842] name failslab, interval 1, probability 0, space 0, times 0
[  162.230707][ T6842] CPU: 1 UID: 0 PID: 6842 Comm: syz.2.250 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) 
[  162.230736][ T6842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  162.230748][ T6842] Call Trace:
[  162.230757][ T6842]  <TASK>
[  162.230766][ T6842]  dump_stack_lvl+0x189/0x250
[  162.230797][ T6842]  ? __pfx____ratelimit+0x10/0x10
[  162.230831][ T6842]  ? __pfx_dump_stack_lvl+0x10/0x10
[  162.230856][ T6842]  ? __pfx__printk+0x10/0x10
[  162.230899][ T6842]  should_fail_ex+0x414/0x560
[  162.230952][ T6842]  should_failslab+0xa8/0x100
[  162.230983][ T6842]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  162.231010][ T6842]  ? rtnl_prop_list_size+0x1ba/0x1e0
[  162.231030][ T6842]  ? __alloc_skb+0x112/0x2d0
[  162.231061][ T6842]  __alloc_skb+0x112/0x2d0
[  162.231091][ T6842]  rtmsg_ifinfo_build_skb+0x84/0x260
[  162.231135][ T6842]  rtmsg_ifinfo+0x8c/0x1a0
[  162.231176][ T6842]  __dev_notify_flags+0xf4/0x2e0
[  162.231207][ T6842]  ? __pfx___dev_notify_flags+0x10/0x10
[  162.231232][ T6842]  ? __dev_change_flags+0x52e/0x6d0
[  162.231266][ T6842]  ? __pfx___dev_change_flags+0x10/0x10
[  162.231307][ T6842]  netif_change_flags+0xe8/0x1a0
[  162.231341][ T6842]  do_setlink+0xc55/0x41c0
[  162.231373][ T6842]  ? trace_sched_exit_tp+0x38/0x120
[  162.231404][ T6842]  ? __pfx_do_setlink+0x10/0x10
[  162.231433][ T6842]  ? __lock_acquire+0xab9/0xd20
[  162.231465][ T6842]  ? do_raw_spin_lock+0x121/0x290
[  162.231507][ T6842]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  162.231540][ T6842]  ? lockdep_hardirqs_on+0x9c/0x150
[  162.231575][ T6842]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  162.231606][ T6842]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  162.231643][ T6842]  ? rcu_is_watching+0x15/0xb0
[  162.231674][ T6842]  ? __mutex_lock+0xa6d/0xe80
[  162.231696][ T6842]  ? __mutex_lock+0x51b/0xe80
[  162.231743][ T6842]  ? irqentry_exit+0x74/0x90
[  162.231763][ T6842]  ? lockdep_hardirqs_on+0x9c/0x150
[  162.231813][ T6842]  ? __dev_get_by_index+0x61/0x110
[  162.231853][ T6842]  rtnl_setlink+0x604/0x900
[  162.231884][ T6842]  ? __pfx_rtnl_setlink+0x10/0x10
[  162.231931][ T6842]  ? kasan_quarantine_put+0xdd/0x220
[  162.232041][ T6842]  ? __pfx_rtnl_setlink+0x10/0x10
[  162.232065][ T6842]  rtnetlink_rcv_msg+0x7cc/0xb70
[  162.232093][ T6842]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  162.232116][ T6842]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  162.232137][ T6842]  ? ref_tracker_free+0x63a/0x7d0
[  162.232169][ T6842]  ? __copy_skb_header+0xa7/0x550
[  162.232200][ T6842]  ? __pfx_ref_tracker_free+0x10/0x10
[  162.232234][ T6842]  ? __skb_clone+0x63/0x7a0
[  162.232271][ T6842]  netlink_rcv_skb+0x205/0x470
[  162.232300][ T6842]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  162.232325][ T6842]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  162.232366][ T6842]  ? netlink_deliver_tap+0x2e/0x1b0
[  162.232392][ T6842]  ? netlink_deliver_tap+0x2e/0x1b0
[  162.232425][ T6842]  netlink_unicast+0x758/0x8d0
[  162.232461][ T6842]  netlink_sendmsg+0x805/0xb30
[  162.232499][ T6842]  ? __pfx_netlink_sendmsg+0x10/0x10
[  162.232530][ T6842]  ? __import_iovec+0x5d4/0x7f0
[  162.232553][ T6842]  ? aa_sock_msg_perm+0x94/0x160
[  162.232587][ T6842]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  162.232621][ T6842]  ? __pfx_netlink_sendmsg+0x10/0x10
[  162.232649][ T6842]  __sock_sendmsg+0x219/0x270
[  162.232688][ T6842]  ____sys_sendmsg+0x505/0x830
[  162.232723][ T6842]  ? __pfx_____sys_sendmsg+0x10/0x10
[  162.232770][ T6842]  ___sys_sendmsg+0x21f/0x2a0
[  162.232802][ T6842]  ? __pfx____sys_sendmsg+0x10/0x10
[  162.232872][ T6842]  ? __fget_files+0x2a/0x420
[  162.232900][ T6842]  ? __fget_files+0x3a0/0x420
[  162.232953][ T6842]  __sys_sendmsg+0x164/0x220
[  162.232985][ T6842]  ? __pfx___sys_sendmsg+0x10/0x10
[  162.233030][ T6842]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  162.233066][ T6842]  ? lockdep_hardirqs_on+0x9c/0x150
[  162.233102][ T6842]  __do_fast_syscall_32+0xb6/0x2b0
[  162.233123][ T6842]  ? lockdep_hardirqs_on+0x9c/0x150
[  162.233161][ T6842]  do_fast_syscall_32+0x34/0x80
[  162.233182][ T6842]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  162.233206][ T6842] RIP: 0023:0xf711e539
[  162.233224][ T6842] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  162.233240][ T6842] RSP: 002b:00000000f510e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  162.233263][ T6842] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0
[  162.233278][ T6842] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  162.233290][ T6842] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  162.233302][ T6842] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  162.233314][ T6842] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  162.233345][ T6842]  </TASK>
[  162.381865][   T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  162.414333][ T6842] bridge0: port 3(batadv0) entered blocking state
[  162.447242][   T10] usb 4-1: Using ep0 maxpacket: 32
[  162.449259][ T6842] bridge0: port 3(batadv0) entered disabled state
[  162.469305][   T10] usb 4-1: no configurations
[  162.479121][ T6842] bridge0: port 3(batadv0) entered blocking state
[  162.484590][   T10] usb 4-1: can't read configurations, error -22
[  162.489017][ T6842] bridge0: port 3(batadv0) entered forwarding state
[  162.760954][ T5850] Bluetooth: hci0: command 0x0c1a tx timeout
[  162.784154][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout
[  162.790733][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout
[  162.828106][   T36] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  162.837717][   T36] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  162.860138][ T5850] Bluetooth: hci3: command 0x0405 tx timeout
[  162.860152][ T5849] Bluetooth: hci4: command 0x0c1a tx timeout
[  162.976731][   T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  162.997907][   T10] usb 4-1: Using ep0 maxpacket: 32
[  163.004698][   T10] usb 4-1: no configurations
[  163.011257][   T10] usb 4-1: can't read configurations, error -22
[  163.035879][   T10] usb usb4-port1: unable to enumerate USB device
[  164.325071][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.253'.
[  164.711297][ T6869] netlink: 20 bytes leftover after parsing attributes in process `syz.1.256'.
[  164.711413][ T6869] IPv6: Can't replace route, no match found
[  166.173564][ T6878] netlink: 'syz.3.258': attribute type 10 has an invalid length.
[  166.192976][ T6878] netlink: 40 bytes leftover after parsing attributes in process `syz.3.258'.
[  166.304373][ T6878] batadv0: entered promiscuous mode
[  166.314844][ T6878] batadv0: entered allmulticast mode
[  166.324242][ T6878] bridge0: port 3(batadv0) entered blocking state
[  166.361782][ T6878] bridge0: port 3(batadv0) entered disabled state
[  166.424431][ T6878] bridge0: port 3(batadv0) entered blocking state
[  166.431126][ T6878] bridge0: port 3(batadv0) entered forwarding state
[  166.467492][ T6885] netlink: 48 bytes leftover after parsing attributes in process `syz.2.260'.
[  166.592000][   T36] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  166.601678][   T36] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  166.669369][ T6889] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.677877][ T6889] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.129201][ T6898] netlink: 12 bytes leftover after parsing attributes in process `syz.2.265'.
[  167.407912][   T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  167.836377][   T24] usb 2-1: Using ep0 maxpacket: 8
[  167.863620][   T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  167.934945][   T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  167.958688][   T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  168.009705][   T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  168.206055][ T6909] IPVS: set_ctl: invalid protocol: 50 172.30.0.4:20001
[  168.237488][   T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  168.291263][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.383508][ T6909] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2340562729 (4681125458 ns) > initial count (2553914556 ns). Using initial count to start timer.
[  168.640118][   T24] usb 2-1: GET_CAPABILITIES returned 0
[  168.645866][   T24] usbtmc 2-1:16.0: can't read capabilities
[  168.796496][ T5934] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  169.132832][ T5934] usb 4-1: Using ep0 maxpacket: 32
[  169.178277][ T5934] usb 4-1: config index 0 descriptor too short (expected 156, got 27)
[  169.204779][ T5934] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  169.267125][ T5921] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  169.294200][ T5934] usb 4-1: config 0 interface 0 altsetting 191 has an invalid descriptor for endpoint zero, skipping
[  169.320092][ T5934] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  169.691492][ T5921] usb 3-1: config 220 has an invalid interface number: 76 but max is 2
[  169.701313][ T5921] usb 3-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config
[  169.715941][ T5934] usb 4-1: config 0 interface 0 has no altsetting 0
[  169.795724][ T5934] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  169.815558][ T5934] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  169.833621][ T5921] usb 3-1: config 220 has no interface number 2
[  169.855241][ T5934] usb 4-1: Product: syz
[  169.868207][ T5921] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  169.881731][ T5934] usb 4-1: Manufacturer: syz
[  169.985728][ T5921] usb 3-1: config 220 interface 0 has no altsetting 0
[  169.992960][ T5934] usb 4-1: SerialNumber: syz
[  170.040118][ T5921] usb 3-1: config 220 interface 76 has no altsetting 0
[  170.041599][ T5934] usb 4-1: config 0 descriptor??
[  170.064545][ T5921] usb 3-1: config 220 interface 1 has no altsetting 0
[  170.094823][ T5934] ldusb 4-1:0.0: Interrupt in endpoint not found
[  170.096995][ T5921] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  170.116229][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.127448][ T5921] usb 3-1: Product: syz
[  170.188445][ T5934] usb 2-1: USB disconnect, device number 7
[  170.194521][ T5921] usb 3-1: Manufacturer: syz
[  170.200751][ T5921] usb 3-1: SerialNumber: syz
[  171.495123][ T5921] usb 3-1: selecting invalid altsetting 0
[  171.541626][ T5921] usb 3-1: Found UVC 7.01 device syz (8086:0b07)
[  171.632053][ T5921] usb 3-1: No valid video chain found.
[  171.672128][ T5921] usb 3-1: selecting invalid altsetting 0
[  171.687541][ T5921] usbtest 3-1:220.1: probe with driver usbtest failed with error -22
[  171.737144][ T5921] usb 3-1: USB disconnect, device number 8
[  171.876056][   T24] usb 4-1: USB disconnect, device number 15
[  172.776659][   T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  172.871623][ T6950] kvm: pic: non byte read
[  172.879319][ T6950] kvm: pic: level sensitive irq not supported
[  172.879503][ T6950] kvm: pic: non byte read
[  172.890981][ T6950] kvm: pic: level sensitive irq not supported
[  172.891050][ T6950] kvm: pic: non byte read
[  172.926376][   T24] usb 4-1: Using ep0 maxpacket: 8
[  172.939589][   T24] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  172.948987][   T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  172.961832][   T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  172.973581][   T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  173.030656][   T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  173.146146][   T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  173.164180][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.392121][   T24] usb 4-1: usb_control_msg returned -32
[  173.403747][   T24] usbtmc 4-1:16.0: can't read capabilities
[  173.895825][ T6961] FAULT_INJECTION: forcing a failure.
[  173.895825][ T6961] name failslab, interval 1, probability 0, space 0, times 0
[  173.931613][ T6962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.946474][ T6961] CPU: 0 UID: 0 PID: 6961 Comm: syz.1.283 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) 
[  173.946503][ T6961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  173.946516][ T6961] Call Trace:
[  173.946523][ T6961]  <TASK>
[  173.946531][ T6961]  dump_stack_lvl+0x189/0x250
[  173.946562][ T6961]  ? __pfx____ratelimit+0x10/0x10
[  173.946595][ T6961]  ? __pfx_dump_stack_lvl+0x10/0x10
[  173.946619][ T6961]  ? __pfx__printk+0x10/0x10
[  173.946654][ T6961]  ? __pfx___might_resched+0x10/0x10
[  173.946678][ T6961]  ? fs_reclaim_acquire+0x7d/0x100
[  173.946712][ T6961]  should_fail_ex+0x414/0x560
[  173.946748][ T6961]  should_failslab+0xa8/0x100
[  173.946777][ T6961]  __kmalloc_noprof+0xcb/0x4f0
[  173.946801][ T6961]  ? snd_pcm_hw_refine+0x967/0x1640
[  173.946833][ T6961]  snd_pcm_hw_refine+0x967/0x1640
[  173.946877][ T6961]  ? __pfx_snd_pcm_hw_refine+0x10/0x10
[  173.946941][ T6961]  ? __asan_memset+0x22/0x50
[  173.946959][ T6961]  ? snd_pcm_oss_change_params_locked+0x7a0/0x3e40
[  173.946994][ T6961]  ? snd_pcm_oss_change_params_locked+0x800/0x3e40
[  173.947031][ T6961]  snd_pcm_oss_change_params_locked+0xa84/0x3e40
[  173.947072][ T6961]  ? __pfx___mutex_trylock_common+0x10/0x10
[  173.947108][ T6961]  ? trace_contention_end+0x39/0x120
[  173.947134][ T6961]  ? __mutex_lock+0x330/0xe80
[  173.947163][ T6961]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  173.947203][ T6961]  ? snd_pcm_oss_get_active_substream+0x136/0x280
[  173.947240][ T6961]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  173.947265][ T6961]  ? __might_fault+0xb0/0x130
[  173.947295][ T6961]  snd_pcm_oss_get_active_substream+0x1e2/0x280
[  173.947323][ T6961]  snd_pcm_oss_set_rate+0x1bc/0x4e0
[  173.947349][ T6961]  snd_pcm_oss_ioctl+0xc2e/0xdd0
[  173.947385][ T6961]  __ia32_compat_sys_ioctl+0x540/0x840
[  173.947410][ T6961]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  173.947434][ T6961]  ? __fget_files+0x3a0/0x420
[  173.947487][ T6961]  ? fput+0xa0/0xd0
[  173.947519][ T6961]  ? ksys_write+0x22a/0x250
[  173.947552][ T6961]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  173.947587][ T6961]  ? lockdep_hardirqs_on+0x9c/0x150
[  173.947623][ T6961]  __do_fast_syscall_32+0xb6/0x2b0
[  173.947646][ T6961]  ? lockdep_hardirqs_on+0x9c/0x150
[  173.947682][ T6961]  do_fast_syscall_32+0x34/0x80
[  173.947703][ T6961]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  173.947729][ T6961] RIP: 0023:0xf7f77539
[  173.947746][ T6961] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  173.947762][ T6961] RSP: 002b:00000000f509655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  173.947786][ T6961] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0045002
[  173.947800][ T6961] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000
[  173.947812][ T6961] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  173.947824][ T6961] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  173.947836][ T6961] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  173.947865][ T6961]  </TASK>
[  173.967097][ T6962] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  174.315731][ T6967] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  174.323085][ T6967] IPv6: NLM_F_CREATE should be set when creating new route
[  175.473729][ T5921] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  175.630044][ T5921] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  175.712801][ T5921] usb 4-1: USB disconnect, device number 16
[  176.908524][ T6996] tap0: tun_chr_ioctl cmd 1074025677
[  176.915873][ T6996] tap0: linktype set to 805
[  178.367754][ T7030] fuse: Unknown parameter 'grGh�FC��id'
[  179.273216][ T7042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.309'.
[  179.299520][ T7042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.309'.
[  179.363218][ T7042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.309'.
[  179.438257][ T7047] netlink: 104 bytes leftover after parsing attributes in process `syz.3.309'.
[  179.449932][ T7047] netlink: 104 bytes leftover after parsing attributes in process `syz.3.309'.
[  181.470828][ T7077] FAULT_INJECTION: forcing a failure.
[  181.470828][ T7077] name failslab, interval 1, probability 0, space 0, times 0
[  181.484467][ T7077] CPU: 0 UID: 0 PID: 7077 Comm: syz.2.318 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) 
[  181.484496][ T7077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  181.484508][ T7077] Call Trace:
[  181.484516][ T7077]  <TASK>
[  181.484525][ T7077]  dump_stack_lvl+0x189/0x250
[  181.484557][ T7077]  ? __pfx____ratelimit+0x10/0x10
[  181.484590][ T7077]  ? __pfx_dump_stack_lvl+0x10/0x10
[  181.484615][ T7077]  ? __pfx__printk+0x10/0x10
[  181.484650][ T7077]  ? __pfx___might_resched+0x10/0x10
[  181.484680][ T7077]  should_fail_ex+0x414/0x560
[  181.484715][ T7077]  should_failslab+0xa8/0x100
[  181.484744][ T7077]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  181.484769][ T7077]  ? __alloc_skb+0x112/0x2d0
[  181.484798][ T7077]  __alloc_skb+0x112/0x2d0
[  181.484826][ T7077]  tcp_stream_alloc_skb+0x3d/0x340
[  181.484852][ T7077]  tcp_sendmsg_locked+0x1fa8/0x56f0
[  181.484872][ T7077]  ? __page_table_check_zero+0xba/0x530
[  181.484898][ T7077]  ? aa_label_sk_perm+0x413/0x560
[  181.484981][ T7077]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  181.485000][ T7077]  ? __local_bh_enable_ip+0x12d/0x1c0
[  181.485028][ T7077]  ? __local_bh_enable_ip+0x12d/0x1c0
[  181.485066][ T7077]  tcp_sendmsg+0x2f/0x50
[  181.485087][ T7077]  __sock_sendmsg+0xe5/0x270
[  181.485125][ T7077]  sock_write_iter+0x258/0x330
[  181.485158][ T7077]  ? __pfx_sock_write_iter+0x10/0x10
[  181.485202][ T7077]  ? __pfx_aa_file_perm+0x10/0x10
[  181.485229][ T7077]  do_iter_readv_writev+0x56b/0x7f0
[  181.485259][ T7077]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  181.485290][ T7077]  ? bpf_lsm_file_permission+0x9/0x20
[  181.485310][ T7077]  ? security_file_permission+0x75/0x290
[  181.485338][ T7077]  ? rw_verify_area+0x258/0x650
[  181.485373][ T7077]  vfs_writev+0x31a/0x960
[  181.485408][ T7077]  ? __lock_acquire+0xab9/0xd20
[  181.485432][ T7077]  ? __pfx_vfs_writev+0x10/0x10
[  181.485477][ T7077]  ? __fget_files+0x2a/0x420
[  181.485510][ T7077]  ? __fget_files+0x3a0/0x420
[  181.485536][ T7077]  ? __fget_files+0x2a/0x420
[  181.485573][ T7077]  do_writev+0x14d/0x2d0
[  181.485605][ T7077]  ? __pfx_do_writev+0x10/0x10
[  181.485638][ T7077]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  181.485673][ T7077]  ? lockdep_hardirqs_on+0x9c/0x150
[  181.485708][ T7077]  __do_fast_syscall_32+0xb6/0x2b0
[  181.485730][ T7077]  ? lockdep_hardirqs_on+0x9c/0x150
[  181.485766][ T7077]  do_fast_syscall_32+0x34/0x80
[  181.485787][ T7077]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  181.485812][ T7077] RIP: 0023:0xf711e539
[  181.485830][ T7077] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  181.485847][ T7077] RSP: 002b:00000000f510e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000092
[  181.485888][ T7077] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080
[  181.485902][ T7077] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  181.485914][ T7077] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  181.485926][ T7077] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  181.485939][ T7077] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  181.485969][ T7077]  </TASK>
[  181.883665][ T7080] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  182.176539][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.321'.
[  182.276151][ T7091] netlink: 104 bytes leftover after parsing attributes in process `syz.0.323'.
[  182.287211][ T7091] netlink: 104 bytes leftover after parsing attributes in process `syz.0.323'.
[  183.598875][   T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  183.823866][   T10] usb 4-1: Using ep0 maxpacket: 8
[  183.832976][   T10] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  183.841764][   T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  183.854431][   T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  183.872433][   T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  183.899180][   T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  184.004086][   T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  184.030539][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.288687][   T10] usb 4-1: usb_control_msg returned -32
[  184.294940][   T10] usbtmc 4-1:16.0: can't read capabilities
[  184.658248][ T7114] sctp: [Deprecated]: syz.4.333 (pid 7114) Use of int in max_burst socket option deprecated.
[  184.658248][ T7114] Use struct sctp_assoc_value instead
[  185.182699][ T7119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.234734][ T7119] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.429169][ T7128] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.437401][ T7128] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.891464][ T7134] netlink: 104 bytes leftover after parsing attributes in process `syz.1.336'.
[  185.942422][ T7134] netlink: 104 bytes leftover after parsing attributes in process `syz.1.336'.
[  186.336599][ T5934] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  186.405713][ T7139] netlink: 28 bytes leftover after parsing attributes in process `syz.1.337'.
[  186.529171][ T5934] usb 5-1: Using ep0 maxpacket: 8
[  186.546958][   T24] usb 4-1: USB disconnect, device number 17
[  186.623182][ T5934] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  186.708048][ T5934] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  186.728704][ T5940] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  186.781220][ T5934] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  186.803994][ T5934] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  186.806393][ T7142] netlink: 28 bytes leftover after parsing attributes in process `syz.2.338'.
[  186.920580][ T5934] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  186.963159][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.126491][   T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  187.278639][ T5934] usb 5-1: GET_CAPABILITIES returned 0
[  187.284283][ T5934] usbtmc 5-1:16.0: can't read capabilities
[  187.296355][   T24] usb 3-1: Using ep0 maxpacket: 32
[  187.307466][   T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  187.325216][   T24] usb 3-1: New USB device found, idVendor=07ca, idProduct=2835, bcdDevice=f5.ac
[  187.371183][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.402754][   T24] usb 3-1: config 0 descriptor??
[  187.450977][   T24] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  187.557627][   T24] dvb_usb_af9035 3-1:0.0: probe with driver dvb_usb_af9035 failed with error -22
[  187.787937][   T24] usb 3-1: USB disconnect, device number 9
[  188.156870][ T7163] netlink: 16 bytes leftover after parsing attributes in process `syz.3.342'.
[  188.920212][   T10] usb 5-1: USB disconnect, device number 7
[  189.606576][   T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  189.771385][   T10] usb 5-1: Using ep0 maxpacket: 32
[  189.785766][   T10] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  189.815234][   T10] usb 5-1: config 0 has no interface number 0
[  189.832251][   T10] usb 5-1: config 0 interface 184 has no altsetting 0
[  189.861031][   T10] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  189.874795][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.960663][   T10] usb 5-1: Product: syz
[  189.974527][   T10] usb 5-1: Manufacturer: syz
[  189.993222][   T10] usb 5-1: SerialNumber: syz
[  190.040504][   T10] usb 5-1: config 0 descriptor??
[  190.066170][   T10] smsc75xx v1.0.0
[  190.113630][   T10] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  190.299428][ T7172] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  190.307746][ T7172] batman_adv: batadv0: Removing interface: batadv_slave_0
[  190.324775][ T7172] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  190.334336][ T7172] batman_adv: batadv0: Removing interface: batadv_slave_1
[  190.403250][   T10] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22
[  190.845654][ T7179] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  191.476580][ T7181] netlink: 104 bytes leftover after parsing attributes in process `syz.3.347'.
[  191.540528][ T7181] netlink: 104 bytes leftover after parsing attributes in process `syz.3.347'.
[  192.061597][ T5940] usb 2-1: unable to get BOS descriptor or descriptor too short
[  192.090817][ T5940] usb 2-1: unable to read config index 0 descriptor/start: -32
[  192.143013][ T5940] usb 2-1: chopping to 0 config(s)
[  192.360397][ T5940] usb 2-1: can't read configurations, error -32
[  192.506464][ T5940] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  192.667411][ T5934] usb 5-1: USB disconnect, device number 8
[  192.676665][ T5940] usb 2-1: device descriptor read/64, error -32
[  192.719668][ T7191] netlink: 48 bytes leftover after parsing attributes in process `syz.3.351'.
[  192.800403][ T5940] usb usb2-port1: attempt power cycle
[  193.190260][ T5940] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  193.214084][ T7198] netlink: 44 bytes leftover after parsing attributes in process `syz.4.353'.
[  193.312221][ T5940] usb 2-1: device descriptor read/8, error -32
[  193.506512][ T5934] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  193.596493][ T5940] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  193.637318][ T5940] usb 2-1: device descriptor read/8, error -32
[  193.707942][ T5934] usb 5-1: Using ep0 maxpacket: 8
[  193.772833][ T5940] usb usb2-port1: unable to enumerate USB device
[  193.793028][ T5934] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  193.815489][ T5934] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  193.852254][ T5934] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  193.861726][ T5934] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  193.872873][ T5934] usb 5-1: Product: syz
[  193.887091][ T5934] usb 5-1: Manufacturer: syz
[  193.891772][ T5934] usb 5-1: SerialNumber: syz
[  193.901122][ T7205] netlink: 'syz.2.357': attribute type 2 has an invalid length.
[  193.902598][ T5934] usb 5-1: config 0 descriptor??
[  194.197829][ T5921] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  194.301710][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  194.308625][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  194.385039][ T5921] usb 3-1: device descriptor read/64, error -71
[  194.647141][ T5921] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  194.816452][ T5847] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  194.825661][ T5921] usb 3-1: device descriptor read/64, error -71
[  194.944051][ T5921] usb usb3-port1: attempt power cycle
[  194.988202][ T5847] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  195.016472][ T5847] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  195.060543][ T5847] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  195.090666][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.442884][ T5921] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  195.464583][ T5847] usb 4-1: usb_control_msg returned -71
[  195.473161][ T5847] usbtmc 4-1:16.0: can't read capabilities
[  195.498625][ T5921] usb 3-1: device descriptor read/8, error -71
[  195.513828][ T5847] usb 4-1: USB disconnect, device number 18
[  195.748369][ T5921] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  195.827482][ T5921] usb 3-1: device descriptor read/8, error -71
[  195.881802][ T5940] usb 5-1: USB disconnect, device number 9
[  195.987512][ T5921] usb usb3-port1: unable to enumerate USB device
[  196.294452][ T7223] netlink: 40 bytes leftover after parsing attributes in process `syz.1.363'.
[  196.346007][ T7225] netlink: 48 bytes leftover after parsing attributes in process `syz.3.364'.
[  196.567055][ T5921] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  196.759613][ T5921] usb 2-1: config 1 has an invalid descriptor of length 249, skipping remainder of the config
[  196.773642][ T5921] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  196.875343][ T5921] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  196.890666][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.909507][ T5921] usb 2-1: Product: ꏵ쬶䝡쮣艄疅餝⡿军ㅚ痥Ǵꍼ绔棐ṑ粌㽢ﮆ뉜ّ앃䧺놨樨믃傥덤緯폦럧Ḧ⻍陈娏압ሆ≸褑띅だ꼹恿仡塮곧곯塇佩고ㆄ┻Δ❨죛┙橘쾜晃椦᯽Ԍ拃뗍략ᅶǤ෷풿쌜䫔爕룈溸芻㖣ￖ禔븐蔋谢狀⥣ᔲ㫋㉤ᤙ꘯槜냱袦᡻ꉞ㊗䬿塙
[  197.015675][ T5921] usb 2-1: Manufacturer: ᐄ
[  197.025459][ T5921] usb 2-1: SerialNumber: 疼汭큽῀鋾钾Ⱊ◃돷㮕꛼鸄뉯펹㯽⬁毺㒦쒜걨蜂鰮略㧹є攣Ɇ꩏ɓᓶJ﯆り੏帢Ἕ䛌킶瘦癢攬
[  197.397747][ T5921] usb 2-1: 0:2 : does not exist
[  197.513579][ T5921] usb 2-1: USB disconnect, device number 12
[  197.643752][ T6320] udevd[6320]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  198.669859][ T7252] netlink: 44 bytes leftover after parsing attributes in process `syz.1.372'.
[  198.948817][ T5921] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  199.259953][ T5921] usb 2-1: Using ep0 maxpacket: 8
[  199.311337][ T5921] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  199.371589][ T5921] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  199.773896][ T5921] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  199.817683][ T5921] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  199.930587][ T5921] usb 2-1: Product: syz
[  199.966222][ T5921] usb 2-1: Manufacturer: syz
[  199.999769][ T5921] usb 2-1: SerialNumber: syz
[  200.052448][ T5921] usb 2-1: config 0 descriptor??
[  202.145377][ T7278] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  202.184142][ T7280] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  202.196171][ T7280] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  202.204682][ T7280] CPU: 1 UID: 0 PID: 7280 Comm: syz.0.381 Not tainted 6.16.0-rc5-syzkaller-00053-g8c2e52ebbe88 #0 PREEMPT(full) 
[  202.216580][ T7280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  202.226640][ T7280] RIP: 0010:__list_del_entry_valid_or_report+0x25/0x190
[  202.233595][ T7280] Code: 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 55 41 54 53 48 89 fb 49 bd 00 00 00 00 00 fc ff df 48 83 c7 08 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 4f d3 5b fd 4c 8b 7b 08 48 89 d8 48 c1 e8
[  202.246433][ T5907] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  202.253202][ T7280] RSP: 0018:ffffc90003e5f040 EFLAGS: 00010202
[  202.266860][ T7280] RAX: 000000000000000b RBX: 0000000000000050 RCX: 0000000000080000
[  202.274832][ T7280] RDX: ffffc9000c00a000 RSI: 0000000000000341 RDI: 0000000000000058
[  202.282806][ T7280] RBP: dffffc0000000000 R08: ffff88802b621e00 R09: 0000000000000002
[  202.290779][ T7280] R10: 00000000ffffffff R11: ffffffff8986ff20 R12: 0000000000000000
[  202.298750][ T7280] R13: dffffc0000000000 R14: 0000000000000050 R15: ffff888024020800
[  202.306720][ T7280] FS:  0000000000000000(0000) GS:ffff888125d1b000(0063) knlGS:00000000f501eb40
[  202.315675][ T7280] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  202.322263][ T7280] CR2: 00000000f510d510 CR3: 0000000079136000 CR4: 00000000003526f0
[  202.330239][ T7280] Call Trace:
[  202.333521][ T7280]  <TASK>
[  202.336473][ T7280]  drr_qlen_notify+0x2c/0xf0
[  202.341101][ T7280]  qdisc_tree_reduce_backlog+0x299/0x480
[  202.346833][ T7280]  ? qdisc_tree_reduce_backlog+0x3c/0x480
[  202.352579][ T7280]  fq_codel_change+0xa96/0xef0
[  202.357365][ T7280]  ? __kmalloc_cache_noprof+0x230/0x3d0
[  202.362926][ T7280]  ? __pfx_fq_codel_change+0x10/0x10
[  202.368216][ T7280]  ? __sock_sendmsg+0x219/0x270
[  202.373083][ T7280]  fq_codel_init+0x355/0x960
[  202.377691][ T7280]  ? lockdep_rtnl_is_held+0x26/0x40
[  202.382896][ T7280]  ? __pfx_fq_codel_init+0x10/0x10
[  202.388015][ T7280]  qdisc_create+0x7a9/0xea0
[  202.392520][ T7280]  tc_modify_qdisc+0x1426/0x2010
[  202.397462][ T7280]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  202.402844][ T7280]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  202.408127][ T7280]  rtnetlink_rcv_msg+0x77c/0xb70
[  202.413079][ T7280]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  202.418213][ T7280]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  202.423672][ T7280]  ? ref_tracker_free+0x63a/0x7d0
[  202.428822][ T7280]  ? __copy_skb_header+0xa7/0x550
[  202.433854][ T7280]  ? __pfx_ref_tracker_free+0x10/0x10
[  202.439252][ T7280]  ? __skb_clone+0x63/0x7a0
[  202.443770][ T7280]  netlink_rcv_skb+0x205/0x470
[  202.448640][ T7280]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  202.454106][ T7280]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  202.459399][ T7280]  ? netlink_deliver_tap+0x2e/0x1b0
[  202.464608][ T7280]  ? netlink_deliver_tap+0x2e/0x1b0
[  202.469814][ T7280]  netlink_unicast+0x758/0x8d0
[  202.474585][ T7280]  netlink_sendmsg+0x805/0xb30
[  202.479387][ T7280]  ? __pfx_netlink_sendmsg+0x10/0x10
[  202.484702][ T7280]  ? __import_iovec+0x5d4/0x7f0
[  202.489563][ T7280]  ? aa_sock_msg_perm+0x94/0x160
[  202.494511][ T7280]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  202.499814][ T7280]  ? __pfx_netlink_sendmsg+0x10/0x10
[  202.505106][ T7280]  __sock_sendmsg+0x219/0x270
[  202.509817][ T7280]  ____sys_sendmsg+0x505/0x830
[  202.514619][ T7280]  ? __pfx_____sys_sendmsg+0x10/0x10
[  202.519923][ T7280]  ? __pfx_futex_wake_mark+0x10/0x10
[  202.525218][ T7280]  ___sys_sendmsg+0x21f/0x2a0
[  202.529911][ T7280]  ? __pfx____sys_sendmsg+0x10/0x10
[  202.535132][ T7280]  ? __fget_files+0x2a/0x420
[  202.539739][ T7280]  ? __fget_files+0x3a0/0x420
[  202.544434][ T7280]  __sys_sendmsg+0x164/0x220
[  202.549038][ T7280]  ? __pfx___sys_sendmsg+0x10/0x10
[  202.554163][ T7280]  ? rcu_is_watching+0x15/0xb0
[  202.558935][ T7280]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  202.565541][ T7280]  ? lockdep_hardirqs_on+0x9c/0x150
[  202.570772][ T7280]  __do_fast_syscall_32+0xb6/0x2b0
[  202.575901][ T7280]  ? lockdep_hardirqs_on+0x9c/0x150
[  202.581124][ T7280]  do_fast_syscall_32+0x34/0x80
[  202.585988][ T7280]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  202.592335][ T7280] RIP: 0023:0xf702e539
[  202.596412][ T7280] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  202.616040][ T7280] RSP: 002b:00000000f501e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  202.624484][ T7280] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280
[  202.632472][ T7280] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000
[  202.640455][ T7280] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  202.648456][ T7280] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  202.656471][ T7280] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  202.664455][ T7280]  </TASK>
[  202.667477][ T7280] Modules linked in:
[  202.671501][ T7280] ---[ end trace 0000000000000000 ]---
[  202.676980][ T7280] RIP: 0010:__list_del_entry_valid_or_report+0x25/0x190
[  202.683931][ T7280] Code: 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 41 55 41 54 53 48 89 fb 49 bd 00 00 00 00 00 fc ff df 48 83 c7 08 48 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 05 e8 4f d3 5b fd 4c 8b 7b 08 48 89 d8 48 c1 e8
[  202.703563][ T7280] RSP: 0018:ffffc90003e5f040 EFLAGS: 00010202
[  202.709653][ T7280] RAX: 000000000000000b RBX: 0000000000000050 RCX: 0000000000080000
[  202.717744][ T7280] RDX: ffffc9000c00a000 RSI: 0000000000000341 RDI: 0000000000000058
[  202.725745][ T7280] RBP: dffffc0000000000 R08: ffff88802b621e00 R09: 0000000000000002
[  202.733762][ T7280] R10: 00000000ffffffff R11: ffffffff8986ff20 R12: 0000000000000000
[  202.741788][ T7280] R13: dffffc0000000000 R14: 0000000000000050 R15: ffff888024020800
[  202.749781][ T7280] FS:  0000000000000000(0000) GS:ffff888125d1b000(0063) knlGS:00000000f501eb40
[  202.758730][ T7280] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[  202.765313][ T7280] CR2: 00000000f510d510 CR3: 0000000079136000 CR4: 00000000003526f0
[  202.773356][ T7280] Kernel panic - not syncing: Fatal exception in interrupt
[  202.781118][ T7280] Kernel Offset: disabled
[  202.785473][ T7280] Rebooting in 86400 seconds..