last executing test programs:

53.46891873s ago: executing program 4 (id=124):
msgget$private(0x0, 0x0)

53.10639799s ago: executing program 4 (id=127):
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x2, {0x2, 0xff, 0x2}, 0xfe}, 0x18)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={0x0, 0x100000, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

51.664789795s ago: executing program 4 (id=128):
pipe(&(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000300000000000000", @ANYRES32=r0, @ANYBLOB="ff0f00"/20, @ANYRES32=0x0, @ANYRES32=r2], 0x50)
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f00000010c0)="9c", 0x1}], 0x1, 0x6)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x2, 0x2d98, 0x7, 0x1, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50)
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xffbffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000)
r4 = socket$netlink(0x10, 0x3, 0x9)
splice(r0, 0x0, r4, 0x0, 0x10d00, 0xf)

51.290927668s ago: executing program 4 (id=129):
r0 = socket(0x1d, 0x2, 0x6)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
unshare(0x26020480)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r4=>0x0})
bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r4, 0x2, {0x2, 0xff, 0x2}, 0xfe}, 0x18)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)

50.244868911s ago: executing program 4 (id=134):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x24, r0, 0x101, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='0'}]}, 0x24}}, 0x4004880)

49.946587683s ago: executing program 4 (id=137):
msgget$private(0x0, 0x0)

49.545589212s ago: executing program 32 (id=137):
msgget$private(0x0, 0x0)

10.112434465s ago: executing program 0 (id=258):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r2, 0xfffffffc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x70bd2d, 0x25dfdbfd, {0x2, 0x0, 0x0, 0xcb}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010101}, @IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x28}}, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000000)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0})
r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000a40)={&(0x7f0000000140)=[{0x18, 0x4000, 0x1, &(0x7f00000001c0)='\x00'}, {0x2, 0x4000, 0x0, 0x0}], 0x2})

7.875853523s ago: executing program 2 (id=266):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x8000})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0x84, @local, 0x15, 0x3, 'sed\x00', 0x1, 0x400000, 0x4}, 0x2c)
r3 = socket$kcm(0xa, 0x2, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x33, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x3, 'rr\x00', 0x8, 0x323c, 0x55}, {@multicast2, 0x4e23, 0x10000, 0x48, 0x12d5c, 0x12d5c}}, 0x44)
sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0x6}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
write$6lowpan_control(r5, &(0x7f0000000980)='connect aa:aa:aa:aa:aa:10 2', 0x1b)

7.576625737s ago: executing program 2 (id=268):
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
r0 = syz_open_pts(0xffffffffffffffff, 0x103800)
ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3)
write$binfmt_script(r3, &(0x7f0000000040)={'#! ', '', [{0x20, '\t\xbb\x9b\x81\xa61\xdd\xd6\xe6\xb3R\xb9\xdb?\xbe\xd3&n\xe2\xb6\xf5%\xb2\xdf\xf5\x83\xba\xeb\x93~\x88\xdc\xec[6=\x01p\xcd\x8ay\x0ez\\U\xae\x9fj@5q\xb2\x89\x00\x17\xe3\x82\x81\xbeS\xd8\x00\x1c\x10\xf8\xf3\xd4\xddI<%\xbb\xa6\xab\x9a\xe5\xec\x19\xfa\xcb\x94\x90u\x9b\x13W\xbd\x9f\xfa\x032-{\x96{\x12\xddy\xb8\x0e%\xabx/\x9cb\xfe\xccO\x00\xf0\xf2\x9dZ\x19_\xc7\xf2\vI'}]}, 0x7d)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r4 = socket(0x2, 0x80805, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x3c)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x5000, 0x3, @mcast2, 0x3}, 0x1c)
writev(r5, &(0x7f00000192c0)=[{&(0x7f0000019380)="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", 0xffb}, {&(0x7f00000191c0)="91a734f9ec34f417d2fd4ceebf91d450feaee433e903ae37504e59f7fd28526a05fb42f5316b21c39b07f6f4002375b40b6871f65f7d8dc988437ffab21315c6f4ce5673a7ae29fc2886d176d71b6f861210af114a3d8c8579363cf7a7e0a10759d14f7dd30a7cf6d116ff1ae9d014da95838138469eb6c724abf520758dc0bf0e0d061631b399be0ec39bcb592701428df40874a1811bf684c7f075a6e9dc484aa153c5b92c552a75cfd69e2d7a3bfcc117a5", 0xb3}, {&(0x7f000001a500)="5359b30adba55aba146e23d2d24b922d83acd5b893234064d638038f27ec41c3f6190b219ded5a2b500e79693dcde53c159faeed9dfe060c830a673d50991502867f04987972375a102e8d4b062ee0beb0fa90b1abb5f67fa6ca26a9880b7192f96825a883caed920c0c6498944adac8dc337446a3e530a522f8dee3777fc613cac6fd65732f4a3a8f4aa0226a6722f4aa53", 0x92}, {&(0x7f000001a440)="373f0c6e77dc2a0f40cabfb07fa976c4f3af8c5d4aafdc85b7ec98c79b29b092417f368fd2b04f282d176554b5fabd5996ba17dcf3d1e878b50dddaaf6dad740d3b88bbe3d1c5b939e609ca0e6c984a1c226780f8dd92309d34842e027b5503701b3104f4633e138c3af0f8aab5de142acc623ee6a60eb00c6b37eba777419bb227ba5507191c7b5d18b9992e1068156dac8258affc0c16197fccc58", 0x9c}], 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, 0x0}, 0x0)
r7 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c)
bind$can_raw(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000)
sendmmsg$inet_sctp(r4, 0x0, 0x0, 0x0)

7.528196249s ago: executing program 3 (id=270):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r0, 0xda90)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x82, 0x30082)
ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f0000000300)={0xa})
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
accept4(r0, 0x0, 0x0, 0x0)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804df0000000000000109022400010000100009040008020300000009210000ff0122070009058103ff"], 0x0)
r3 = inotify_init()
inotify_add_watch(r3, &(0x7f0000000340)='./file0\x00', 0x48)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x9, 0xc, 0x4, 0x81, 0x0, 0x66, 0x5, 0x4, 0x80, 0xb, 0xa5}, {0x7, 0x3, 0x0, 0x3, 0x1c, 0x23, 0xfd, 0x0, 0x2, 0x4, 0x3, 0x2}, {0x200003, 0x2, 0x20, 0x8, 0x40, 0x0, 0x5f, 0x5, 0x0, 0x2, 0x0, 0x3, 0x8}], 0x1fffeff})
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0)
sendmmsg(r4, &(0x7f0000000180), 0x3ef, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x1, 'j'}, @main=@item_4={0x3, 0x0, 0x9, "5f72be78"}]}}, 0x0}, 0x0)

7.313308436s ago: executing program 1 (id=271):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc", 0xb9}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384d", 0x8e}], 0x1}}], 0x2, 0x2090)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68)
r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7})
socket$inet_sctp(0x2, 0x1, 0x84)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="26000000040000000100000022bf0000000000", @ANYRES32, @ANYBLOB="0000000000ffe4"], 0x50)
io_uring_enter(0xffffffffffffffff, 0x6214, 0x7721, 0x13, 0x0, 0x38)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x241)

7.080209677s ago: executing program 0 (id=272):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000400007012bbd701b00000000017c00000400c2800c000180"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007"], 0x38}}, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$key(0xf, 0x3, 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xc31b3efc13c25f52}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdd2503000900800000001cdc0dca1d9f68846960e56de42944af05000600002000000a000000000000000000000000000000000000000000000102000000000000000200010000000000000007180000000005000500000000000a"], 0x88}, 0x1, 0x7}, 0x0)
sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r5=>0x0})
r6 = socket(0x15, 0x5, 0x0)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
getsockname$packet(r6, 0x0, &(0x7f0000000500))
r7 = syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x840)
ioctl$VIDIOC_QUERY_EXT_CTRL(r7, 0xc0e85667, &(0x7f0000000200)={0x409a090a, 0x101, "eb38845cf6f2e168f59e5c708b4cddb9f54e0b26c78afaea3096d9061a2df0c1", 0x10001, 0x1000000000001, 0x400000001000000, 0xffffffffffffffff, 0x1000, 0xc, 0x4, 0x8, [0x3, 0x2, 0x4, 0x96a]})
timer_create(0x2, &(0x7f000049efa0)={0x0, 0x0, 0x1}, &(0x7f0000044000)=<r8=>0x0)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0)
timer_gettime(r8, &(0x7f0000000040))
r9 = socket$nl_route(0x10, 0x3, 0x0)
timer_settime(r8, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000300))
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, 0x4982}, [@IFLA_LINKINFO={0x14, 0x37, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc10}, 0x8000)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@ipv6_delroute={0x34, 0x19, 0x4, 0x70bd2c, 0x4000000, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x500}, [@RTA_PRIORITY={0x8, 0x1e, 0x200}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0xffff}}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x4000050)
setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000000)=0x5, 0x4)

5.94335945s ago: executing program 0 (id=273):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x5, 0x4000)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x20000000, 0x4b0, 0xbbba, 0x9, 0x0, 0x0, {}, {0x2, 0x2}, {0x0, 0x5, 0x20}, {0x1, 0x8, 0x4}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0xb})

5.891997076s ago: executing program 1 (id=274):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003800), 0x0, 0x4000c000)
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x1, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)
r3 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x84)
fcntl$setlease(r3, 0x400, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0xffffff8c)

5.644357545s ago: executing program 0 (id=276):
bind$isdn(0xffffffffffffffff, &(0x7f0000000100)={0x22, 0x7, 0xff, 0x5, 0xb9}, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@delchain={0x278, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x8}, {0x0, 0x1}, {0x0, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x244, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x98, 0x1, [@m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0x5c, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x2b, 0x6, "726786f30e509174574dc37f3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0x5, 0x0, 0x1, 0xfffffffa}, {0xff, 0x5, 0x44, 0x3}, {0x3, 0x2, 0x7f, 0xeaec}, {0x4, 0x6, 0x7, 0x9}, {0x1, 0x0, 0xac, 0xfffff294}, {0x7f, 0x0, 0x7, 0x8}]}}, @TCA_BPF_ACT={0x144, 0x1, [@m_ctinfo={0x110, 0x4, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x53}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x7f, 0x10000000, 0x82c}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x98c}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xf3fa}]}, {0x9c, 0x6, "c14309d56e11f3e88ad36b866a06cff47631fe31f29c2d83a2e6f0bf13045227d5cfc3c4f57b9a903cf86c567461f60a0fb69f562613042765a016443f0181bfeba7e917511c20f8585f40c15cc948ecdd08e5acfddde4c4d1eeb8e4156045960e71ed491970a569097578137069861cf0a28baddf976ebf5e96eca138cadcea7bfb921158875a49e4975a5dbb3ab54f13ee0f5254fe6f75"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x1}}}}, @m_skbmod={0x30, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x278}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x88802, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x41)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1", 0x2d}], 0x1}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000a00)=[{&(0x7f0000000240)="8a677d9ef91666a42c7f2ff086b44431613a0630b534fcf41b804d991f610b8384c1e202b13192eb0ada3696ed1901b9dd4eed0fe8635f6d89f3648a18234af24b3daf82e1c5cc137d3ac92a75e1ac77cb44d6aa85fb0a20a9cdd67541e5c588a3f9c51a", 0x64}, {&(0x7f00000002c0)="681d35eebfc227cc3b82898f2cb493a28090e55f0629692f21eba4346cb5b409036436ba1c201cb4453b4dd1c06bbe4378be1ea6c405dcbe26c549d0db576376772399d06bc5664b05d7bdfa05ac46656ecd6978bef9907cc0790165fe299d2a37c01e20ac7051993d3c84f8dc4629b2379a3c831cc2dd1ba4247d982f949077f4fe0908a99844d5c8f7c7733f3de8bb495029087b4132b8c2eb2add91e32e875d7dc872471de74d6ba05c9fd8e8fdb3cb3e57d97fe634d4a30ec247c3b043029db470516e58922624856211d468c54a236ab29661c22f28a179520be5ff92b0674e", 0xe2}, {&(0x7f0000000100)}, {&(0x7f0000000800)="1cb3490bd70687dbaa12604d5ffbbbac6373352d268e83051d0fe53bd2d24a2d6afd3170dac58528d81a3c98ba4cbd7d6a7565f56e6e681a44816af87139b561e0f82834733d962e57cf84bea5f9f252164686283731a6270051c5004a427299ca751f3992cf626ee0f4d6ad5e2910b5ee3431a2d02db312a09c7ed09cbf01f8f2501b69bc5aac57c82313551ccce890ca73b67fb1aa439127b9c9079c89fa98b313647844d5432af26d63dbfe27bb885a23967e95961907b740beafc7d501b76611d3998d87796aa80dca3f38a66b1263bc716f17e80af17a3aa05ef378e12373486d4644fb1a7d1bdaa3f2f5cb2d345f367dbe6d80b18c", 0xf8}, {&(0x7f00000003c0)="2bf5cd42b0f71696a558eabf965581d00629125af2828431e704ed6c2b082a4250d4133fec0d9d7a65e35b8a77219e5c7f5b33decdb12be034210b577032b250d385d44e765ab86275ddd1cdd6a438e5f4119484a8ad1ea8ab15380aaaac9199ae3486a5691d5b1c30ad323bc6d0cd273a422f08fb3dc33a39e43bb1ca", 0x7d}, {&(0x7f0000000900)="957085f64b3777c35d5664cf33a285fb85f905ee22e39685881f7163b0bcffde307639812dcc184577ea6feebb4f45608d0c7948215efce33fd0a84bbb4d8c3dcea16572c05f181e9b2bdcfc88d420b97ca95851c1316777d2c32ab1b02bc62e77af8a40a94ee8b44eb6419a428bb6bebd20d1938647f1e09cdad4730f7c24e34c8b3aa1f52b26a9bdfc553bfaddaf19f96c2786049b21f3288887711d131df318241160c693df2309d001a0386a6004c13609e8e3fbcfe53d16275d282c92efcbd7ee5a0253143db49de7567adbe549b195b5fceff0acc4487570823524e07ed4f1", 0xe2}], 0x6, 0x0, 0x4)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0xa, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'wg0\x00'})
r5 = socket$qrtr(0x2a, 0x2, 0x0)
r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8)
sendmsg$sock(r5, &(0x7f0000001540)={&(0x7f0000000500)=@pppoe={0x2a, 0x0, {0x0, @local, 'nicvf0\x00'}}, 0x80, 0x0}, 0x0)

5.383493578s ago: executing program 5 (id=277):
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x2a, 0x2, 0x1, "9adb4b552fb8af2b8f72f10d000000a590d24d77680300009623ba17fd815cee", 0x30385056})
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1})
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0x400, 0x1000})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0)
ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa, 0x7f})

4.911481391s ago: executing program 1 (id=278):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400add427ab62201745b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003fffffffffffffffff7ffffe7ee000000deff0000000200000000", 0x58}], 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)={0x20, r3, 0x1, 0x70bd25, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x100400c0}, 0x48840)

4.856807444s ago: executing program 5 (id=279):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xf7fc, 0x0, 0x0, 0x4}, 0x8)
sendto$inet6(r0, &(0x7f00000003c0)="81", 0x1, 0xc041, &(0x7f0000000440)={0xa, 0x4000, 0x8, @local, 0x4}, 0x1c)

4.683787278s ago: executing program 1 (id=280):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x240880d1)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e)
r1 = syz_io_uring_setup(0x88b, &(0x7f0000000140)={0x0, 0x3f84, 0x10, 0x4, 0x6fd}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000580)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, 0x0, 0x0, 0x0)
recvmmsg(r5, 0x0, 0x0, 0x2, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
dup(r4)
io_uring_enter(0xffffffffffffffff, 0x2ded, 0xef92, 0x0, 0x0, 0x0)
r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009})
pread64(r7, 0x0, 0x0, 0x378e)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MADVISE={0x19, 0x8, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x13, 0x1})
io_uring_enter(r1, 0x47f6, 0x0, 0x4, 0x0, 0x0) (fail_nth: 1)

4.508955034s ago: executing program 2 (id=281):
syz_usb_connect(0x5, 0x1bb, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000a677c120229062d60eb3000000010902a901"], 0x0)
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000180)="3c7a50baaff8de41839a5dc0a632b2b12ea4a33b46016c65479784a84aaba68083cc412ff9981bb546fe", 0x2a}, {&(0x7f00000008c0)="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", 0xc00}, {&(0x7f00000002c0)="9983373752d42f7710e0e2c87996677a521012dfce1f2fed3a7e00b9d229da9219f7788ef8c2e5ebdba70c1b49253a39fcfe944619291eac517ec24408c03a37e77f7eb46d5da996f2520b4225284a1090b9882e8163974064f3d9e45b41aa7dcd4e10397c730195c444ed3dfdc2bc0c06c870f80e2a7c8b56acfb8c5129b7cbdc81c5338f9c54f76bc8a102c6b3c421f21a1c05309ef4f031151b588d33a8e26e05ff163426b994c5114cc37d24aafd1f4798a14d49cc973c5cbef585d649407136649ee443a812d2eb44ef8fc96e3cf1b35dd6492f7b9babb2263148984d34f4604de1b75775bb73facccb0d94c8", 0xef}, {&(0x7f00000001c0)="be21f1db671b201e21f69b7afc93dd2c4bc4ad9c6d709e04b7b513fa1a6518bfc5c41676b25ec90cec38b4f80790fef1c1e9bd0d248fc0ce23f891f6d33636ba0b5291cef3afd34fdc51365004b8b56e46f3314fc590f6b9f5d769f3f305bd399e1858d15c0b91", 0x67}, {&(0x7f0000000240)="d64d2b069f966aed246419214bbfd7feac92246ffc4022795ae0afa8", 0x1c}, {&(0x7f00000003c0)="560f8608d36685fd21a8c57d48a328b4adac4e418ed371f1f1797223cac4f31c181f9c3df73ba7d3c7063eb8a6dad68e9a921e154dcbeb7dc4203b88aabfa43da723201e122bd17587808fc40f3c38ed09c84a8ab3edbfbd362ec75d2e5fd4947f907a6bb7c6f3a2fd032511414e7592ae7c7a4e1f5330fb4654f50f1bc45c810a1773ba099dc2f06c9c7fc96a578ab25655fd8481d90d6ffc7f6580e680c9d2f9bbd205500290473708f18fb58f600db45381215e548911d21c01afeccd12eb10039dedae4bd8419b3939bf2d2e22d8dbd7ceb2d4ae2957d7fe393e67bcf746b41b", 0xe2}, {0x0}, {&(0x7f0000000540)="33559c5dd1e2f8d29cf71542576acd1fe2255dbc255347306c0d8ad42d111fff2fc171da5136643db6681606c71580382d9e3df5b83dac533f277752d2c4b961c32a0ff7045f679167848d3b68b591564da0b616bfa26bc82991", 0x5a}, {&(0x7f00000005c0)="9adef9a4cc080b1509f93276a154df4c4f197455d3618f01faee04736caadc6b73ac5aae36a3fb4c4eb987689ee5127ad7ad0d9eb9cec66fd79b334532e31122c4440ba0fbbd5bf772c760e92eefa0da2b12a98f8002757319edfd6610576888bb3ed5b061eb4362ad6a7d30ac2f9aa548ec0b8f6c704b641bb2fab943bfcadd71b2677c00ac9823be547fdae7ca85a4e403f1c173b393a9d8be72493045bd4371e6708d740eead826a46cbff54d84bc1418f6f7704cd705a5a9fe11549ef019e5055f3ef77328a8a218676bf4b749786bb843204dd49dacc6bee5cc7a77533eb41e4882b851", 0xe6}], 0x9)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000280)={0x1, 0x8, 0x7, &(0x7f00000000c0)={0x15, "9c8b7b54ed6c11328c605f56210be9e44338a796c88bca91b6df79768d434313e8"}})

4.410605866s ago: executing program 0 (id=282):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xf7fc, 0x0, 0x0, 0x4}, 0x8)
sendto$inet6(r3, &(0x7f00000003c0)="81", 0x1, 0xc041, &(0x7f0000000440)={0xa, 0x4000, 0x8, @local, 0x4}, 0x1c)
getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000080)=0x8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'tunl0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000006040)=ANY=[@ANYBLOB="7400000010000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="000000000000000054001280090001006970697000000000440002800600100000000000050004000000000008000200000000000500050000000000060011000000000008000100", @ANYRES32=0x0, @ANYBLOB="060011004e240000050004004b"], 0x74}}, 0x0)
r7 = fsmount(r2, 0x1, 0x0)
fchdir(r7)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

4.409420635s ago: executing program 5 (id=283):
r0 = socket(0x80000000000000a, 0x2, 0x0)
socket$inet6(0xa, 0x1, 0x8010000000000084)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x101402)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r3, 0xc0145401, &(0x7f0000000980)={0x3, 0x0, 0x800008c9, 0x1, 0xfffffffd})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, 0x0, &(0x7f00000000c0))
ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[], 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x3}]}, 0x10)
sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r6, &(0x7f0000000000)="d1", 0x1, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x7}, 0x1c)
shutdown(r6, 0x1)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x82, &(0x7f0000000200), 0x8)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004)
ioctl$sock_SIOCBRDELBR(r8, 0x89a2, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, 0x0, 0x0)

4.057976092s ago: executing program 3 (id=284):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000000400007012bbd701b00000000017c00000400c2800c000180"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007"], 0x38}}, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = socket$key(0xf, 0x3, 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, 0x0, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xc31b3efc13c25f52}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdd2503000900800000001cdc0dca1d9f68846960e56de42944af05000600002000000a000000000000000000000000000000000000000000000102000000000000000200010000000000000007180000000005000500000000000a"], 0x88}, 0x1, 0x7}, 0x0)
sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r5=>0x0})
r6 = socket(0x15, 0x5, 0x0)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
getsockname$packet(r6, 0x0, &(0x7f0000000500))
r7 = syz_open_dev$video4linux(&(0x7f0000000000), 0x101, 0x840)
ioctl$VIDIOC_QUERY_EXT_CTRL(r7, 0xc0e85667, &(0x7f0000000200)={0x409a090a, 0x101, "eb38845cf6f2e168f59e5c708b4cddb9f54e0b26c78afaea3096d9061a2df0c1", 0x10001, 0x1000000000001, 0x400000001000000, 0xffffffffffffffff, 0x1000, 0xc, 0x4, 0x8, [0x3, 0x2, 0x4, 0x96a]})
timer_create(0x2, &(0x7f000049efa0)={0x0, 0x0, 0x1}, &(0x7f0000044000)=<r8=>0x0)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{}, {0x0, 0x9}}, 0x0)
timer_gettime(r8, &(0x7f0000000040))
r9 = socket$nl_route(0x10, 0x3, 0x0)
timer_settime(r8, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000300))
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, 0x4982}, [@IFLA_LINKINFO={0x14, 0x37, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc10}, 0x8000)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='cubic', 0x5)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@ipv6_delroute={0x34, 0x19, 0x4, 0x70bd2c, 0x4000000, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x500}, [@RTA_PRIORITY={0x8, 0x1e, 0x200}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0xffff}}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x4000050)
setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000000)=0x5, 0x4)

3.58087113s ago: executing program 1 (id=285):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r1, 0x0, 0x0, 0x0, <r2=>0x0})
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000180)={0x28, 0x0, r2, 0x1000, &(0x7f0000001540)=""/4096})
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000000)={0x0, 0x400, 0x2, 0x1, 0xfffffffd, 0xffffff00})
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/drivers\x00', 0x0, 0x0)
io_setup(0x8, &(0x7f0000000540)=<r5=>0x0)
io_submit(r5, 0x1, &(0x7f0000000000)=[&(0x7f0000002f00)={0x0, 0x0, 0x0, 0x7, 0x8, r4, 0x0, 0x0, 0xffffffffffffffff}])
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, 0x0, 0x0)

3.377611638s ago: executing program 3 (id=286):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcca)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x400)
r1 = syz_io_uring_setup(0x1510, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0xfffffffc, 0x2e9}, &(0x7f0000000380)=<r2=>0x0, &(0x7f0000000200)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x567, 0x8e2f, 0x0, 0x0, 0x0)
r4 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000080))

3.152212608s ago: executing program 3 (id=287):
socket(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x4, 0x0, 0xfffffffffffffd14, 0x0, 'syz0\x00', 0x0, 0x3})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48})
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc})
add_key$keyring(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d80000001b0001000000000000000000fc00000000", @ANYRES32=0x0, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x4044001}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000000201010000"], 0x14}}, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x4e0, 0x378, 0x180, 0x0, 0x2e0, 0x180, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@uncond, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [], @ipv6=@local, [], @ipv4=@private, [], @ipv6=@private1}}}, @common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x218}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @dev, 0x0, 0x0, 'syzkaller0\x00', 'macvlan1\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r7, 0x11, 0x67, 0x0, &(0x7f0000000480))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3)

3.072687806s ago: executing program 1 (id=288):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x4000010}, 0x4000010)
recvmsg$unix(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x12160)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x101001a, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}}, 0xfb, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c26, 0x10100, 0x0, 0xfffffffd, 0x0, r4}, &(0x7f0000000580)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r5, 0x2ded, 0xef92, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
r8 = dup(r4)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r9, 0x6, 0x7, 0x0, &(0x7f0000000140))
r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901)
getsockopt$bt_hci(r8, 0x0, 0x3, &(0x7f0000000200)=""/133, &(0x7f0000000080)=0x85)
open_tree(r10, &(0x7f0000000640)='\x00', 0x81101)
syz_usb_connect(0x5, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x79, 0xd5, 0x20, 0x10, 0xdda, 0x1, 0x12, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0xe, 0x0, 0x7, [{{0x9, 0x4, 0xd3, 0xa6, 0x0, 0x2f, 0xcd, 0x94, 0xce}}]}}]}}, 0x0)

3.028971284s ago: executing program 0 (id=289):
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0)
io_setup(0x3, &(0x7f0000000180)=<r1=>0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r2, 0x402, 0x4)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r3, 0x402, 0xd)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="080086dd0001110004000000a60c6eec00be04f82bff060000000000000000000000000008aaff020000000000000000000000000001539e"], 0xfdef)
close(0x3)
io_submit(r1, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
truncate(&(0x7f0000000080)='./file1\x00', 0x80000001)
ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000040)={0xfdfdffff, 0xfffffff7, 0x1, 0x4, 0x0, "518aba4d000000000000000000000000002000"})
r8 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0)
syz_usb_control_io(r8, 0x0, 0x0)
syz_usb_control_io(r8, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0)
syz_usb_control_io$printer(r8, 0x0, 0x0)
syz_usb_control_io(r8, 0x0, 0x0)
syz_usb_control_io$uac1(r8, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0)
r9 = dup(r7)
write$UHID_INPUT(r9, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006)
dup(r2)
socket$inet(0x2, 0x2, 0x0)

2.895043367s ago: executing program 2 (id=290):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r3, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000002200)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}}], 0x40000000000027f, 0x0)

1.301712114s ago: executing program 2 (id=291):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000b00)=0xffffffffffffffff, 0x4) (async)
sendmmsg$unix(r0, &(0x7f0000001300), 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x31b, &(0x7f0000000740)=ANY=[@ANYRESDEC=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) (async)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x465b1646c33a3936, r3, &(0x7f00000006c0), 0x1000000, &(0x7f0000000900)={{0x0, <r4=>0x0}})
r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x0)
preadv(r5, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/148, 0x94}], 0x1, 0x1, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r8=>0x0}) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r9, &(0x7f0000003900)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="62883407acec4fa07f809f1b911e5166e5a3c0aaaf1d8f5427b5631dfdacb90b154c121ef8e7126d123da3386020ea21eca8dcb294c44df70d545f4905757c", @ANYRES16=r7, @ANYRES8=0x0, @ANYRES8=r4, @ANYRES16=r3], 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x100000d4)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32=r8], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4040040) (async)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010026bd5000f8dbdf2555000000080001004f00000008000300", @ANYRES8, @ANYRESHEX, @ANYRESHEX=0x0], 0x24}, 0x1, 0x0, 0x0, 0x20044040}, 0x24008004) (async)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="020000000400000006000000aa0b000000000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) (async)
gettid() (async)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000800)=ANY=[@ANYBLOB="980000000a06010f00000000000900000000000000000940000000090900020073797a3200000000400008800c00078008000b40000010000c000780060004404e2400000c00078008000840000000b10c00078005001500030000000c000780080009400000000408000940000092ad080009400000000105000100070000000c00078006001d40e00000000900020073797a3000000000"], 0x98}, 0x1, 0x0, 0x0, 0x20000008}, 0x15) (async)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r11}, 0x38) (async)
close(r0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
timer_create(0x5, &(0x7f0000000140)={0x0, 0x36, 0x1, @thr={&(0x7f0000000340)="f4642b312b90bfac332416a5f8ff46e951971aa61474e54c31d178a9606df5be6e2afd8ca93e7358b2c099db2b7edf06727c4c46b89de9820b7aa6c73d5519aabdeab1f9", &(0x7f0000001540)="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"}}, &(0x7f0000000280)=<r12=>0x0)
timer_settime(r12, 0x1, &(0x7f0000000180)={{}, {0x77359400}}, &(0x7f0000000240))

740.020262ms ago: executing program 5 (id=292):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$video4linux(&(0x7f00000001c0), 0xe3, 0x400)
ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0205647, &(0x7f00000000c0)={0xf010000, 0x0, "4f2572ce1cedbf10981e10326800000000000000000000000500", 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x400, 0xfffffffd]})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r3, 0xc016}], 0x1, 0x0, 0x0, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000000)={0x1, 0x2, 0x1, {0x2, @raw_data="678c45ecb3935475fcee62a6d1e39da68e81f51ef5c86ffb77b377cbe87d4bbd8f04acda7a8cf4b9f90f3d7c263c918cc0dbe1049affd3440d0474769d27cd9d0d3cbfe3702cb7c132a5b380615ae2430394ec3449d20827f251795ba9abfb606d0013680586d2fc70b08acf888480c8d79961383c9106b9b4cfcd2cf9c1c626fd514c4c6708e3ba62d2d2a324a7bdfe44e9604df47de52ace6c24ca92a778bfaa80ccc277b13b9e2e5036b1dda5f199aac0f47b9db9ef80688c12e839d65c7e56384f9090984b3f"}, 0xfa3})
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e20, @rand_addr=0x64010101}, 0xb)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2c, r2, 0x5, 0x0, 0x9000000, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon, @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0xfffffffffffffe49}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2c}}, 0x0)
r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2040, 0x0)
ioctl$KVM_MEMORY_ENCRYPT_UNREG_REGION(r6, 0x8010aebc, &(0x7f0000000040)={0x3000, 0x11000})

649.733516ms ago: executing program 2 (id=293):
bind$isdn(0xffffffffffffffff, &(0x7f0000000100)={0x22, 0x7, 0xff, 0x5, 0xb9}, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@delchain={0x278, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x8}, {0x0, 0x1}, {0x0, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x244, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x98, 0x1, [@m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0x5c, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x2b, 0x6, "726786f30e509174574dc37f3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0x5, 0x0, 0x1, 0xfffffffa}, {0xff, 0x5, 0x44, 0x3}, {0x3, 0x2, 0x7f, 0xeaec}, {0x4, 0x6, 0x7, 0x9}, {0x1, 0x0, 0xac, 0xfffff294}, {0x7f, 0x0, 0x7, 0x8}]}}, @TCA_BPF_ACT={0x144, 0x1, [@m_ctinfo={0x110, 0x4, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x53}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x7f, 0x10000000, 0x82c}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x98c}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xf3fa}]}, {0x9c, 0x6, "c14309d56e11f3e88ad36b866a06cff47631fe31f29c2d83a2e6f0bf13045227d5cfc3c4f57b9a903cf86c567461f60a0fb69f562613042765a016443f0181bfeba7e917511c20f8585f40c15cc948ecdd08e5acfddde4c4d1eeb8e4156045960e71ed491970a569097578137069861cf0a28baddf976ebf5e96eca138cadcea7bfb921158875a49e4975a5dbb3ab54f13ee0f5254fe6f75"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x1}}}}, @m_skbmod={0x30, 0x4, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x278}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x88802, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f00000000c0)=0x41)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1", 0x2d}], 0x1}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000a00)=[{&(0x7f0000000240)="8a677d9ef91666a42c7f2ff086b44431613a0630b534fcf41b804d991f610b8384c1e202b13192eb0ada3696ed1901b9dd4eed0fe8635f6d89f3648a18234af24b3daf82e1c5cc137d3ac92a75e1ac77cb44d6aa85fb0a20a9cdd67541e5c588a3f9c51a", 0x64}, {&(0x7f00000002c0)="681d35eebfc227cc3b82898f2cb493a28090e55f0629692f21eba4346cb5b409036436ba1c201cb4453b4dd1c06bbe4378be1ea6c405dcbe26c549d0db576376772399d06bc5664b05d7bdfa05ac46656ecd6978bef9907cc0790165fe299d2a37c01e20ac7051993d3c84f8dc4629b2379a3c831cc2dd1ba4247d982f949077f4fe0908a99844d5c8f7c7733f3de8bb495029087b4132b8c2eb2add91e32e875d7dc872471de74d6ba05c9fd8e8fdb3cb3e57d97fe634d4a30ec247c3b043029db470516e58922624856211d468c54a236ab29661c22f28a179520be5ff92b0674e", 0xe2}, {&(0x7f0000000100)}, {&(0x7f0000000800)="1cb3490bd70687dbaa12604d5ffbbbac6373352d268e83051d0fe53bd2d24a2d6afd3170dac58528d81a3c98ba4cbd7d6a7565f56e6e681a44816af87139b561e0f82834733d962e57cf84bea5f9f252164686283731a6270051c5004a427299ca751f3992cf626ee0f4d6ad5e2910b5ee3431a2d02db312a09c7ed09cbf01f8f2501b69bc5aac57c82313551ccce890ca73b67fb1aa439127b9c9079c89fa98b313647844d5432af26d63dbfe27bb885a23967e95961907b740beafc7d501b76611d3998d87796aa80dca3f38a66b1263bc716f17e80af17a3aa05ef378e12373486d4644fb1a7d1bdaa3f2f5cb2d345f367dbe6d80b18c", 0xf8}, {&(0x7f00000003c0)="2bf5cd42b0f71696a558eabf965581d00629125af2828431e704ed6c2b082a4250d4133fec0d9d7a65e35b8a77219e5c7f5b33decdb12be034210b577032b250d385d44e765ab86275ddd1cdd6a438e5f4119484a8ad1ea8ab15380aaaac9199ae3486a5691d5b1c30ad323bc6d0cd273a422f08fb3dc33a39e43bb1ca", 0x7d}, {&(0x7f0000000900)="957085f64b3777c35d5664cf33a285fb85f905ee22e39685881f7163b0bcffde307639812dcc184577ea6feebb4f45608d0c7948215efce33fd0a84bbb4d8c3dcea16572c05f181e9b2bdcfc88d420b97ca95851c1316777d2c32ab1b02bc62e77af8a40a94ee8b44eb6419a428bb6bebd20d1938647f1e09cdad4730f7c24e34c8b3aa1f52b26a9bdfc553bfaddaf19f96c2786049b21f3288887711d131df318241160c693df2309d001a0386a6004c13609e8e3fbcfe53d16275d282c92efcbd7ee5a0253143db49de7567adbe549b195b5fceff0acc4487570823524e07ed4f1", 0xe2}], 0x6, 0x0, 0x4)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0xa, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'wg0\x00'})
r5 = socket$qrtr(0x2a, 0x2, 0x0)
r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8)
sendmsg$sock(r5, &(0x7f0000001540)={&(0x7f0000000500)=@pppoe={0x2a, 0x0, {0x0, @local, 'nicvf0\x00'}}, 0x80, 0x0}, 0x0)

491.062555ms ago: executing program 5 (id=294):
socket$nl_route(0x10, 0x3, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0x0)
fchdir(r2)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, 0x0)
quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000802, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x34, r6, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fffffff}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendfile(r4, r3, 0x0, 0xffffffff)
socket$inet_udp(0x2, 0x2, 0x0)

361.211196ms ago: executing program 3 (id=295):
r0 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x78)

52.667158ms ago: executing program 3 (id=296):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81)
write$sndseq(r1, 0x0, 0x0)
poll(&(0x7f0000000940)=[{r1, 0x20}, {r1, 0x20}], 0x2, 0x100)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000240)={0x80, 0x4, 0x14a, 0x0, 0x0, 0x4000002})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x5}, 0x1c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_io_uring_setup(0x22f, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x1, 0x100002cf}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000040)=<r6=>0x0)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_MSG_RING={0x28, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, {0x0, r7}})
io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0)
ioctl$UI_DEV_CREATE(r9, 0x5501)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', <r10=>0x0})
sendto$packet(r8, &(0x7f0000000000)="208c", 0x2, 0x20008801, &(0x7f0000000200)={0x11, 0x8100, r10, 0x1, 0x0, 0x6, @broadcast}, 0x14)

0s ago: executing program 5 (id=297):
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc8701, 0x0)
r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
pread64(r1, &(0x7f0000000600)=""/4099, 0x1003, 0x110)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0)
ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000080)={0x8000, 0x2, 0x4, 0x40, 0xc274, {0x0, 0x2710}, {0x2, 0x0, 0xc, 0x9, 0x8, 0xb, "fdd22f45"}, 0x5, 0x4, {}, 0xffffffff, 0x0, r2})
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r3, 0xc0105b08, &(0x7f0000000040))

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.66' (ED25519) to the list of known hosts.
[   71.054463][ T5813] cgroup: Unknown subsys name 'net'
[   71.157873][ T5813] cgroup: Unknown subsys name 'cpuset'
[   71.166755][ T5813] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   71.467960][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[   71.474500][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[   72.597036][ T5813] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   76.605446][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   76.613841][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   76.621622][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   76.629337][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   76.629767][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   76.645821][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   76.659510][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   76.667324][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   76.675032][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   76.683625][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   76.683791][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   76.691517][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   76.715142][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   76.726346][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   76.734616][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   76.742384][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   76.746389][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   76.765258][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   76.765253][ T5830] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   76.807961][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   76.815628][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   76.825045][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   76.832520][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   76.839731][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   76.849784][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   77.458659][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   77.534878][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   77.613010][ T5846] chnl_net:caif_netlink_parms(): no params data found
[   77.730835][ T5843] chnl_net:caif_netlink_parms(): no params data found
[   77.801319][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.808602][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.816916][ T5841] bridge_slave_0: entered allmulticast mode
[   77.823933][ T5841] bridge_slave_0: entered promiscuous mode
[   77.837206][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   77.867884][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.875102][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.882323][ T5841] bridge_slave_1: entered allmulticast mode
[   77.889820][ T5841] bridge_slave_1: entered promiscuous mode
[   78.004174][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.011410][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.018991][ T5846] bridge_slave_0: entered allmulticast mode
[   78.026128][ T5846] bridge_slave_0: entered promiscuous mode
[   78.036179][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.045798][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.052926][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.060933][ T5842] bridge_slave_0: entered allmulticast mode
[   78.068033][ T5842] bridge_slave_0: entered promiscuous mode
[   78.091250][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.098709][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.106013][ T5846] bridge_slave_1: entered allmulticast mode
[   78.113001][ T5846] bridge_slave_1: entered promiscuous mode
[   78.123017][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.132418][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.139871][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.147682][ T5842] bridge_slave_1: entered allmulticast mode
[   78.154817][ T5842] bridge_slave_1: entered promiscuous mode
[   78.233002][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.241084][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.248333][ T5843] bridge_slave_0: entered allmulticast mode
[   78.255833][ T5843] bridge_slave_0: entered promiscuous mode
[   78.275805][ T5841] team0: Port device team_slave_0 added
[   78.284729][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.317183][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.324675][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.331927][ T5843] bridge_slave_1: entered allmulticast mode
[   78.339328][ T5843] bridge_slave_1: entered promiscuous mode
[   78.360477][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.371569][ T5841] team0: Port device team_slave_1 added
[   78.380066][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.441579][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.451265][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.458563][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.466482][ T5845] bridge_slave_0: entered allmulticast mode
[   78.473446][ T5845] bridge_slave_0: entered promiscuous mode
[   78.483518][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.527661][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.535800][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.542960][ T5845] bridge_slave_1: entered allmulticast mode
[   78.550303][ T5845] bridge_slave_1: entered promiscuous mode
[   78.558730][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.570149][ T5846] team0: Port device team_slave_0 added
[   78.588659][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.595722][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.621693][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.660799][ T5846] team0: Port device team_slave_1 added
[   78.670379][ T5842] team0: Port device team_slave_0 added
[   78.677450][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.684970][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.710996][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   78.735182][ T5831] Bluetooth: hci0: command tx timeout
[   78.758933][ T5842] team0: Port device team_slave_1 added
[   78.776204][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   78.787023][ T5843] team0: Port device team_slave_0 added
[   78.814434][ T5831] Bluetooth: hci2: command tx timeout
[   78.833533][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.840543][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.866989][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.881289][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   78.892036][ T5843] team0: Port device team_slave_1 added
[   78.897750][ T5831] Bluetooth: hci1: command tx timeout
[   78.898065][ T5831] Bluetooth: hci4: command tx timeout
[   78.905003][   T52] Bluetooth: hci3: command tx timeout
[   78.921797][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0
[   78.929155][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   78.955524][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   78.968135][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1
[   78.975353][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.001374][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.013152][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.020166][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.046504][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.124081][ T5845] team0: Port device team_slave_0 added
[   79.131747][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.138983][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.165464][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.195968][ T5841] hsr_slave_0: entered promiscuous mode
[   79.202817][ T5841] hsr_slave_1: entered promiscuous mode
[   79.235373][ T5845] team0: Port device team_slave_1 added
[   79.241827][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.249233][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.275620][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.359598][ T5842] hsr_slave_0: entered promiscuous mode
[   79.365929][ T5842] hsr_slave_1: entered promiscuous mode
[   79.371957][ T5842] debugfs: 'hsr0' already exists in 'hsr'
[   79.377841][ T5842] Cannot create hsr debugfs directory
[   79.388792][ T5846] hsr_slave_0: entered promiscuous mode
[   79.395497][ T5846] hsr_slave_1: entered promiscuous mode
[   79.401505][ T5846] debugfs: 'hsr0' already exists in 'hsr'
[   79.407443][ T5846] Cannot create hsr debugfs directory
[   79.423738][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.430788][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.457165][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.528900][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.536320][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   79.562607][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.625323][ T5843] hsr_slave_0: entered promiscuous mode
[   79.631980][ T5843] hsr_slave_1: entered promiscuous mode
[   79.638302][ T5843] debugfs: 'hsr0' already exists in 'hsr'
[   79.644038][ T5843] Cannot create hsr debugfs directory
[   79.848754][ T5845] hsr_slave_0: entered promiscuous mode
[   79.855283][ T5845] hsr_slave_1: entered promiscuous mode
[   79.861334][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   79.867838][ T5845] Cannot create hsr debugfs directory
[   80.182029][ T5841] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   80.194420][ T5841] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   80.212183][ T5841] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   80.230234][ T5841] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   80.302515][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   80.314100][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   80.328613][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   80.340836][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   80.439936][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   80.452675][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   80.463978][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   80.476026][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   80.579105][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.592837][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   80.603372][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   80.618286][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   80.632314][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   80.677215][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   80.722284][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.729602][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.801173][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   80.813379][ T4252] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.815645][   T52] Bluetooth: hci0: command tx timeout
[   80.820668][ T4252] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.836517][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   80.848201][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   80.860081][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   80.870380][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   80.895282][   T52] Bluetooth: hci2: command tx timeout
[   80.950313][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   80.975050][   T52] Bluetooth: hci3: command tx timeout
[   80.980498][   T52] Bluetooth: hci4: command tx timeout
[   80.986755][ T5831] Bluetooth: hci1: command tx timeout
[   81.016844][ T4252] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.024026][ T4252] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.039010][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.059041][ T4252] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.066207][ T4252] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.116399][ T5846] 8021q: adding VLAN 0 to HW filter on device team0
[   81.176358][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.183453][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.199386][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.230172][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   81.239119][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.246293][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.280583][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   81.319436][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.326616][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.336567][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.343680][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.365502][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.390035][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   81.418245][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   81.425429][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   81.441828][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.472933][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   81.480059][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   81.585421][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.647431][ T5842] veth0_vlan: entered promiscuous mode
[   81.657615][ T5841] veth0_vlan: entered promiscuous mode
[   81.676888][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.700352][ T5841] veth1_vlan: entered promiscuous mode
[   81.713295][ T5842] veth1_vlan: entered promiscuous mode
[   81.830443][ T5846] veth0_vlan: entered promiscuous mode
[   81.859603][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.881254][ T5841] veth0_macvtap: entered promiscuous mode
[   81.898185][ T5842] veth0_macvtap: entered promiscuous mode
[   81.918542][ T5846] veth1_vlan: entered promiscuous mode
[   81.943657][ T5841] veth1_macvtap: entered promiscuous mode
[   81.961359][ T5842] veth1_macvtap: entered promiscuous mode
[   81.992975][ T5843] veth0_vlan: entered promiscuous mode
[   82.067134][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.102550][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.112502][ T5843] veth1_vlan: entered promiscuous mode
[   82.122735][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.147710][ T5845] veth0_vlan: entered promiscuous mode
[   82.167446][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.177558][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.201647][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.210863][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.223410][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.232766][ T5845] veth1_vlan: entered promiscuous mode
[   82.243032][ T5846] veth0_macvtap: entered promiscuous mode
[   82.275494][ T5846] veth1_macvtap: entered promiscuous mode
[   82.282897][   T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.292559][   T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.316119][   T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.325156][   T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.367795][ T5843] veth0_macvtap: entered promiscuous mode
[   82.397762][ T5843] veth1_macvtap: entered promiscuous mode
[   82.425918][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.439303][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.479355][ T5845] veth0_macvtap: entered promiscuous mode
[   82.505073][ T4252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.508021][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.513012][ T4252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.522548][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.546388][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.558424][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.575939][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.590076][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.627715][ T5845] veth1_macvtap: entered promiscuous mode
[   82.643710][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.660802][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.669767][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.677728][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.688272][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.697570][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.697735][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.748929][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.759077][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.791146][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   82.809227][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.826220][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.893683][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.895621][   T52] Bluetooth: hci0: command tx timeout
[   82.974929][   T52] Bluetooth: hci2: command tx timeout
[   83.007964][ T4252] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.033243][ T4252] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.042406][ T4252] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.055062][ T5831] Bluetooth: hci4: command tx timeout
[   83.058251][ T5839] Bluetooth: hci1: command tx timeout
[   83.060538][   T52] Bluetooth: hci3: command tx timeout
[   83.077736][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.094362][ T4252] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.116993][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.158104][ T5923] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   83.198873][ T4252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.216581][ T4252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.337316][ T4252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.369246][ T4252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.459119][ T5928] kvm: pic: non byte write
[   83.905779][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.914036][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.916279][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.957938][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.310395][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.361199][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.521138][ T5936] netlink: 'syz.2.7': attribute type 1 has an invalid length.
[   84.662583][ T5941] process 'syz.0.9' launched './file1' with NULL argv: empty string added
[   84.836415][ T5902] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   84.887285][ T5948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10'.
[   84.946053][ T5917] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   84.974713][   T52] Bluetooth: hci0: command tx timeout
[   85.017641][ T5902] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[   85.029078][ T5902] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[   85.040680][ T5902] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   85.049863][ T5902] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.058452][   T52] Bluetooth: hci2: command tx timeout
[   85.076029][ T5936] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   85.083835][ T5936] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   85.112615][ T5902] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[   85.130565][ T5917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[   85.144865][ T5839] Bluetooth: hci4: command tx timeout
[   85.144948][ T5831] Bluetooth: hci1: command tx timeout
[   85.150326][   T52] Bluetooth: hci3: command tx timeout
[   85.174197][ T5917] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   85.183534][ T5917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.192184][ T5917] usb 1-1: Product: syz
[   85.196968][ T5917] usb 1-1: Manufacturer: syz
[   85.201733][ T5917] usb 1-1: SerialNumber: syz
[   85.233900][ T5917] usb 1-1: config 0 descriptor??
[   85.320410][ T5902] usb 3-1: USB disconnect, device number 2
[   85.400601][ T5958] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   85.448733][ T5958] syz.4.12 uses obsolete (PF_INET,SOCK_PACKET)
[   85.522338][ T5936] usb usb8: usbfs: process 5936 (syz.2.7) did not claim interface 0 before use
[   85.623232][ T5964] mmap: syz.4.12 (5964) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   85.665829][ T5958] loop6: detected capacity change from 0 to 524287487
[   85.674181][ T5958] Buffer I/O error on dev loop6, logical block 0, async page read
[   85.691862][ T5958] Buffer I/O error on dev loop6, logical block 0, async page read
[   85.700131][ T5962] FAULT_INJECTION: forcing a failure.
[   85.700131][ T5962] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   85.700172][ T5962] CPU: 1 UID: 0 PID: 5962 Comm: syz.1.13 Not tainted syzkaller #0 PREEMPT(full) 
[   85.700193][ T5962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   85.700212][ T5962] Call Trace:
[   85.700220][ T5962]  <TASK>
[   85.700227][ T5962]  dump_stack_lvl+0x189/0x250
[   85.700263][ T5962]  ? __pfx____ratelimit+0x10/0x10
[   85.700290][ T5962]  ? __pfx_dump_stack_lvl+0x10/0x10
[   85.700316][ T5962]  ? __pfx__printk+0x10/0x10
[   85.700335][ T5962]  ? __might_fault+0xb0/0x130
[   85.700381][ T5962]  should_fail_ex+0x414/0x560
[   85.700415][ T5962]  _copy_from_user+0x2d/0xb0
[   85.700440][ T5962]  ___sys_sendmsg+0x158/0x2a0
[   85.700465][ T5962]  ? __pfx____sys_sendmsg+0x10/0x10
[   85.700522][ T5962]  ? __fget_files+0x2a/0x420
[   85.700540][ T5962]  ? __fget_files+0x3a0/0x420
[   85.700568][ T5962]  __x64_sys_sendmsg+0x19b/0x260
[   85.700592][ T5962]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   85.700622][ T5962]  ? __pfx_ksys_write+0x10/0x10
[   85.700653][ T5962]  ? do_syscall_64+0xbe/0xfa0
[   85.700681][ T5962]  do_syscall_64+0xfa/0xfa0
[   85.700706][ T5962]  ? lockdep_hardirqs_on+0x9c/0x150
[   85.700731][ T5962]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.700750][ T5962]  ? clear_bhb_loop+0x60/0xb0
[   85.700772][ T5962]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.700790][ T5962] RIP: 0033:0x7f3e69b8f749
[   85.700815][ T5962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   85.700831][ T5962] RSP: 002b:00007f3e6aa07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   85.700852][ T5962] RAX: ffffffffffffffda RBX: 00007f3e69de5fa0 RCX: 00007f3e69b8f749
[   85.700865][ T5962] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[   85.700874][ T5962] RBP: 00007f3e6aa07090 R08: 0000000000000000 R09: 0000000000000000
[   85.700884][ T5962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   85.700893][ T5962] R13: 00007f3e69de6038 R14: 00007f3e69de5fa0 R15: 00007f3e69f0fa28
[   85.700921][ T5962]  </TASK>
[   85.704571][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   85.921770][    C1] vkms_vblank_simulate: vblank timer overrun
[   85.939990][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   85.995706][ T5958] Buffer I/O error on dev loop6, logical block 0, async page read
[   86.011514][ T5958] Buffer I/O error on dev loop6, logical block 0, async page read
[   86.020544][ T5958] Buffer I/O error on dev loop6, logical block 0, async page read
[   86.029366][ T5958] Buffer I/O error on dev loop6, logical block 0, async page read
[   86.062947][ T5958] Buffer I/O error on dev loop6, logical block 0, async page read
[   86.244660][ T5958] Buffer I/O error on dev loop6, logical block 0, async page read
[   86.274702][ T5954] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   86.302888][ T5958] ldm_validate_partition_table(): Disk read failed.
[   86.309976][ T5958] Buffer I/O error on dev loop6, logical block 0, async page read
[   86.326268][ T5958] Buffer I/O error on dev loop6, logical block 0, async page read
[   86.367494][ T5972] FAULT_INJECTION: forcing a failure.
[   86.367494][ T5972] name failslab, interval 1, probability 0, space 0, times 1
[   86.382736][ T5958] Dev loop6: unable to read RDB block 0
[   86.390450][ T5958]  loop6: unable to read partition table
[   86.408714][ T5958] loop_reread_partitions: partition scan of loop6 (3Ÿ¾x³˜CÖ

) failed (rc=-5)
[   86.424207][ T5972] CPU: 0 UID: 0 PID: 5972 Comm: syz.2.16 Not tainted syzkaller #0 PREEMPT(full) 
[   86.424233][ T5972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   86.424245][ T5972] Call Trace:
[   86.424253][ T5972]  <TASK>
[   86.424261][ T5972]  dump_stack_lvl+0x189/0x250
[   86.424293][ T5972]  ? __pfx____ratelimit+0x10/0x10
[   86.424318][ T5972]  ? __pfx_dump_stack_lvl+0x10/0x10
[   86.424342][ T5972]  ? __pfx__printk+0x10/0x10
[   86.424364][ T5972]  ? __pfx___might_resched+0x10/0x10
[   86.424386][ T5972]  should_fail_ex+0x414/0x560
[   86.424420][ T5972]  should_failslab+0xa8/0x100
[   86.424441][ T5972]  __kmalloc_noprof+0xcb/0x7f0
[   86.424467][ T5972]  ? copy_splice_read+0x143/0xa50
[   86.424502][ T5972]  copy_splice_read+0x143/0xa50
[   86.424542][ T5972]  ? __pfx_copy_splice_read+0x10/0x10
[   86.424568][ T5972]  ? look_up_lock_class+0x74/0x170
[   86.424599][ T5972]  ? register_lock_class+0x51/0x320
[   86.424621][ T5972]  ? __pfx_pipe_lock_cmp_fn+0x10/0x10
[   86.424656][ T5972]  ? alloc_pipe_info+0x374/0x4d0
[   86.424684][ T5972]  ? __pfx_copy_splice_read+0x10/0x10
[   86.424711][ T5972]  splice_direct_to_actor+0x4a9/0xcc0
[   86.424760][ T5972]  ? __pfx_direct_splice_actor+0x10/0x10
[   86.424789][ T5972]  ? __pfx_splice_direct_to_actor+0x10/0x10
[   86.424830][ T5972]  do_splice_direct+0x181/0x270
[   86.424862][ T5972]  ? __pfx_do_splice_direct+0x10/0x10
[   86.424891][ T5972]  ? __pfx_direct_file_splice_eof+0x10/0x10
[   86.424916][ T5972]  ? rw_verify_area+0x255/0x4d0
[   86.424946][ T5972]  do_sendfile+0x4da/0x7e0
[   86.424967][ T5972]  ? __pfx_vfs_write+0x10/0x10
[   86.424999][ T5972]  ? __pfx_do_sendfile+0x10/0x10
[   86.425039][ T5972]  ? __fget_files+0x3a0/0x420
[   86.425076][ T5972]  __se_sys_sendfile64+0x13e/0x190
[   86.425098][ T5972]  ? __pfx___se_sys_sendfile64+0x10/0x10
[   86.425121][ T5972]  ? do_syscall_64+0xbe/0xfa0
[   86.425150][ T5972]  do_syscall_64+0xfa/0xfa0
[   86.425174][ T5972]  ? lockdep_hardirqs_on+0x9c/0x150
[   86.425200][ T5972]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   86.425219][ T5972]  ? clear_bhb_loop+0x60/0xb0
[   86.425241][ T5972]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   86.425259][ T5972] RIP: 0033:0x7fafe958f749
[   86.425274][ T5972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   86.425290][ T5972] RSP: 002b:00007fafea3d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[   86.425311][ T5972] RAX: ffffffffffffffda RBX: 00007fafe97e5fa0 RCX: 00007fafe958f749
[   86.425324][ T5972] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004
[   86.425335][ T5972] RBP: 00007fafea3d7090 R08: 0000000000000000 R09: 0000000000000000
[   86.425346][ T5972] R10: 00000000ffffffff R11: 0000000000000246 R12: 0000000000000001
[   86.425358][ T5972] R13: 00007fafe97e6038 R14: 00007fafe97e5fa0 R15: 00007fafe990fa28
[   86.425389][ T5972]  </TASK>
[   86.710759][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   86.735174][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   86.743469][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   86.804612][    T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!!
[   86.813863][    T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!!
[   86.823172][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   86.849108][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   86.868940][   T43] cfg80211: failed to load regulatory.db
[   86.887474][ T5954] usb 4-1: Using ep0 maxpacket: 8
[   86.897358][ T5954] usb 4-1: config index 0 descriptor too short (expected 30, got 18)
[   86.911632][ T5954] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[   86.921178][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.929275][ T5954] usb 4-1: Product: syz
[   86.933574][ T5954] usb 4-1: Manufacturer: syz
[   86.938319][ T5954] usb 4-1: SerialNumber: syz
[   86.945850][ T5954] usb 4-1: config 0 descriptor??
[   86.954039][ T5954] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[   86.962488][ T5954] usb 4-1: setting power ON
[   86.967707][ T5954] dvb-usb: bulk message failed: -22 (2/0)
[   86.978854][ T5954] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   86.991173][ T5954] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[   86.999780][ T5954] usb 4-1: media controller created
[   87.024456][ T5916] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   87.051840][ T5954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   87.102943][ T5954] usb 4-1: selecting invalid altsetting 6
[   87.125172][ T5954] usb 4-1: digital interface selection failed (-22)
[   87.147194][ T5954] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[   87.167353][ T5966] dvb-usb: bulk message failed: -22 (3/0)
[   87.174410][ T5916] usb 2-1: Using ep0 maxpacket: 16
[   87.186457][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   87.210386][ T5916] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   87.223601][ T5954] usb 4-1: setting power OFF
[   87.230044][ T5954] dvb-usb: bulk message failed: -22 (2/0)
[   87.237202][ T5916] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[   87.246922][ T5954] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[   87.257966][ T5916] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.266114][ T5954] (NULL device *): no alternate interface
[   87.287699][ T5916] usb 2-1: config 0 descriptor??
[   87.355303][ T5954] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[   87.371336][ T5954] usb 4-1: USB disconnect, device number 2
[   87.384723][ T5828] udevd[5828]: setting mode of /dev/bus/usb/004/002 to 020664 failed: No such file or directory
[   87.403430][ T5828] udevd[5828]: setting owner of /dev/bus/usb/004/002 to uid=0, gid=0 failed: No such file or directory
[   87.575779][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   87.830783][ T5945] usb 1-1: USB disconnect, device number 2
[   88.039728][ T5985] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   88.059814][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_0
[   88.077075][ T5916] usbhid 2-1:0.0: can't add hid device: -71
[   88.093329][ T5916] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   88.105934][ T5985] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   88.122362][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_1
[   88.146501][ T5916] usb 2-1: USB disconnect, device number 2
[   88.327018][ T6002] netlink: 'syz.3.23': attribute type 1 has an invalid length.
[   88.703109][   T30] audit: type=1326 audit(1763744535.649:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977138f749 code=0x7ffc0000
[   88.783478][   T30] audit: type=1326 audit(1763744535.699:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f977138f749 code=0x7ffc0000
[   88.901859][   T30] audit: type=1326 audit(1763744535.699:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f977138f749 code=0x7ffc0000
[   88.903008][ T6014] netlink: 160 bytes leftover after parsing attributes in process `syz.2.27'.
[   89.070746][   T30] audit: type=1326 audit(1763744535.699:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f977138f749 code=0x7ffc0000
[   89.404686][ T5887] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[   89.536663][ T5887] usb 3-1: device descriptor read/64, error -71
[   89.884886][ T5887] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   90.040561][ T5887] usb 3-1: device descriptor read/64, error -71
[   90.164232][ T5887] usb usb3-port1: attempt power cycle
[   90.615372][ T5887] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[   90.865545][ T5887] usb 3-1: device descriptor read/8, error -71
[   91.109565][ T5887] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[   91.182191][ T5887] usb 3-1: device descriptor read/8, error -71
[   91.335239][ T5887] usb usb3-port1: unable to enumerate USB device
[   92.393983][ T6065] kAFS: unable to lookup cell '(,c¾Ì'
[   92.443168][ T6066] netlink: 'syz.3.40': attribute type 27 has an invalid length.
[   92.534564][ T6068] netlink: 24 bytes leftover after parsing attributes in process `syz.4.42'.
[   92.686897][ T6072] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   92.796705][ T6065] netlink: 'syz.2.41': attribute type 1 has an invalid length.
[   92.964375][ T5887] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   93.031273][ T6066] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.039544][ T6066] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.163541][ T5887] usb 4-1: Using ep0 maxpacket: 16
[   93.171306][ T5887] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[   93.183047][ T5887] usb 4-1: config 0 has no interface number 0
[   93.195074][ T5887] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[   93.204522][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.212536][ T5887] usb 4-1: Product: syz
[   93.221515][ T5887] usb 4-1: Manufacturer: syz
[   93.226414][ T5887] usb 4-1: SerialNumber: syz
[   93.252869][ T6075] netlink: 28 bytes leftover after parsing attributes in process `syz.0.44'.
[   93.277537][ T5887] usb 4-1: config 0 descriptor??
[   93.351652][ T5887] gspca_main: spca1528-2.14.0 probing 04fc:1528
[   93.701003][ T6066] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.810758][ T6066] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.879270][ T5887] gspca_spca1528: reg_w err -110
[   93.906599][ T5887] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110
[   93.995664][ T6080] FAULT_INJECTION: forcing a failure.
[   93.995664][ T6080] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   94.125032][ T6080] CPU: 0 UID: 0 PID: 6080 Comm: syz.1.43 Not tainted syzkaller #0 PREEMPT(full) 
[   94.125102][ T6080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   94.125109][ T6080] Call Trace:
[   94.125117][ T6080]  <TASK>
[   94.125122][ T6080]  dump_stack_lvl+0x189/0x250
[   94.125141][ T6080]  ? __pfx____ratelimit+0x10/0x10
[   94.125157][ T6080]  ? __pfx_dump_stack_lvl+0x10/0x10
[   94.125170][ T6080]  ? __pfx__printk+0x10/0x10
[   94.125181][ T6080]  ? __might_fault+0xb0/0x130
[   94.125201][ T6080]  should_fail_ex+0x414/0x560
[   94.125219][ T6080]  _copy_from_iter+0x1de/0x1790
[   94.125235][ T6080]  ? rcu_is_watching+0x15/0xb0
[   94.125248][ T6080]  ? kmalloc_reserve+0xbd/0x290
[   94.125259][ T6080]  ? __pfx__copy_from_iter+0x10/0x10
[   94.125271][ T6080]  ? __build_skb_around+0x262/0x3f0
[   94.125282][ T6080]  ? netlink_sendmsg+0x642/0xb30
[   94.125292][ T6080]  ? skb_put+0x11b/0x210
[   94.125303][ T6080]  netlink_sendmsg+0x6b2/0xb30
[   94.125318][ T6080]  ? __pfx_netlink_sendmsg+0x10/0x10
[   94.125330][ T6080]  ? aa_sock_msg_perm+0xf1/0x1d0
[   94.125347][ T6080]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   94.125356][ T6080]  ? __pfx_netlink_sendmsg+0x10/0x10
[   94.125367][ T6080]  __sock_sendmsg+0x21c/0x270
[   94.125383][ T6080]  ____sys_sendmsg+0x505/0x830
[   94.125397][ T6080]  ? __pfx_____sys_sendmsg+0x10/0x10
[   94.125412][ T6080]  ? import_iovec+0x74/0xa0
[   94.125427][ T6080]  ___sys_sendmsg+0x21f/0x2a0
[   94.125439][ T6080]  ? __pfx____sys_sendmsg+0x10/0x10
[   94.125468][ T6080]  ? __fget_files+0x2a/0x420
[   94.125478][ T6080]  ? __fget_files+0x3a0/0x420
[   94.125511][ T6080]  __x64_sys_sendmsg+0x19b/0x260
[   94.125532][ T6080]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   94.125559][ T6080]  ? __pfx_ksys_write+0x10/0x10
[   94.125585][ T6080]  ? do_syscall_64+0xbe/0xfa0
[   94.125612][ T6080]  do_syscall_64+0xfa/0xfa0
[   94.125629][ T6080]  ? lockdep_hardirqs_on+0x9c/0x150
[   94.125644][ T6080]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.125654][ T6080]  ? clear_bhb_loop+0x60/0xb0
[   94.125666][ T6080]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   94.125677][ T6080] RIP: 0033:0x7f3e69b8f749
[   94.125687][ T6080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   94.125696][ T6080] RSP: 002b:00007f3e6aa07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   94.125708][ T6080] RAX: ffffffffffffffda RBX: 00007f3e69de5fa0 RCX: 00007f3e69b8f749
[   94.125715][ T6080] RDX: 00000000000080c0 RSI: 0000200000000000 RDI: 0000000000000003
[   94.125721][ T6080] RBP: 00007f3e6aa07090 R08: 0000000000000000 R09: 0000000000000000
[   94.125727][ T6080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   94.125733][ T6080] R13: 00007f3e69de6038 R14: 00007f3e69de5fa0 R15: 00007f3e69f0fa28
[   94.125756][ T6080]  </TASK>
[   95.073921][ T6070] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.245169][   T52] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[   95.253772][   T52] Bluetooth: hci0: Injecting HCI hardware error event
[   95.263553][   T52] Bluetooth: hci0: hardware error 0x00
[   95.328390][ T6070] 8021q: adding VLAN 0 to HW filter on device team0
[   95.440477][ T6070] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   95.469627][   T36] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.485455][   T36] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.499456][   T36] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.511640][   T36] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   95.642474][ T5833] usb 4-1: USB disconnect, device number 3
[   96.234483][   T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   96.477507][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   96.510601][   T10] usb 3-1: config 0 has no interfaces?
[   96.511410][ T6105] netlink: 16 bytes leftover after parsing attributes in process `syz.0.50'.
[   96.634587][   T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   96.682424][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.747126][   T10] usb 3-1: config 0 descriptor??
[   96.923042][ T6105] netlink: 'syz.0.50': attribute type 1 has an invalid length.
[   96.980386][ T6111] program syz.4.51 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   97.072108][ T6096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.081157][ T6096] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.092361][   T10] usb 3-1: USB disconnect, device number 7
[   97.391474][   T52] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[   97.409764][ T6129] netlink: 24 bytes leftover after parsing attributes in process `syz.0.54'.
[   97.814875][ T6134] Zero length message leads to an empty skb
[   98.590315][ T6145] hub 9-0:1.0: USB hub found
[   98.596268][ T6145] hub 9-0:1.0: 1 port detected
[   99.262146][ T6145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.61'.
[   99.275094][ T6145] erspan0: entered promiscuous mode
[   99.826448][ T6154] FAULT_INJECTION: forcing a failure.
[   99.826448][ T6154] name fail_usercopy, interval 1, probability 0, space 0, times 0
[   99.864528][ T6154] CPU: 0 UID: 0 PID: 6154 Comm: syz.1.62 Not tainted syzkaller #0 PREEMPT(full) 
[   99.864554][ T6154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[   99.864564][ T6154] Call Trace:
[   99.864570][ T6154]  <TASK>
[   99.864576][ T6154]  dump_stack_lvl+0x189/0x250
[   99.864595][ T6154]  ? __pfx____ratelimit+0x10/0x10
[   99.864610][ T6154]  ? __pfx_dump_stack_lvl+0x10/0x10
[   99.864623][ T6154]  ? __pfx__printk+0x10/0x10
[   99.864634][ T6154]  ? __might_fault+0xb0/0x130
[   99.864654][ T6154]  should_fail_ex+0x414/0x560
[   99.864672][ T6154]  _copy_from_user+0x2d/0xb0
[   99.864687][ T6154]  ___sys_sendmsg+0x158/0x2a0
[   99.864700][ T6154]  ? __pfx____sys_sendmsg+0x10/0x10
[   99.864729][ T6154]  ? __fget_files+0x2a/0x420
[   99.864739][ T6154]  ? __fget_files+0x3a0/0x420
[   99.864754][ T6154]  __sys_sendmmsg+0x227/0x430
[   99.864768][ T6154]  ? __pfx___sys_sendmmsg+0x10/0x10
[   99.864783][ T6154]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[   99.864808][ T6154]  ? ksys_write+0x22a/0x250
[   99.864823][ T6154]  ? __pfx_ksys_write+0x10/0x10
[   99.864840][ T6154]  __x64_sys_sendmmsg+0xa0/0xc0
[   99.864852][ T6154]  do_syscall_64+0xfa/0xfa0
[   99.864866][ T6154]  ? lockdep_hardirqs_on+0x9c/0x150
[   99.864879][ T6154]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.864889][ T6154]  ? clear_bhb_loop+0x60/0xb0
[   99.864901][ T6154]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   99.864911][ T6154] RIP: 0033:0x7f3e69b8f749
[   99.864922][ T6154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   99.864931][ T6154] RSP: 002b:00007f3e6aa07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[   99.864942][ T6154] RAX: ffffffffffffffda RBX: 00007f3e69de5fa0 RCX: 00007f3e69b8f749
[   99.864949][ T6154] RDX: 0400000000000181 RSI: 00002000000030c0 RDI: 0000000000000004
[   99.864956][ T6154] RBP: 00007f3e6aa07090 R08: 0000000000000000 R09: 0000000000000000
[   99.864963][ T6154] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000001
[   99.864969][ T6154] R13: 00007f3e69de6038 R14: 00007f3e69de5fa0 R15: 00007f3e69f0fa28
[   99.864985][ T6154]  </TASK>
[  102.631085][ T6191] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  103.772067][ T6214] netlink: 24 bytes leftover after parsing attributes in process `syz.4.76'.
[  105.006917][ T6227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.78'.
[  105.067463][ T6227] hsr_slave_1 (unregistering): left promiscuous mode
[  105.117110][ T6228] bond1: option all_slaves_active: invalid value (9)
[  105.128188][ T6228] bond1 (unregistering): Released all slaves
[  105.637127][ T5833] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  105.858702][ T5833] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  106.017154][   T52] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  106.027779][   T52] Bluetooth: hci1: Injecting HCI hardware error event
[  106.038104][   T52] Bluetooth: hci1: hardware error 0x00
[  106.046881][ T5833] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  106.054401][ T5902] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  106.093954][ T5833] usb 3-1: config 0 interface 0 has no altsetting 0
[  106.118087][ T5833] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  106.138617][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.166828][ T5833] usb 3-1: config 0 descriptor??
[  106.172476][ T6233] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  106.224435][ T5902] usb 2-1: Using ep0 maxpacket: 16
[  106.355181][ T5902] usb 2-1: config 0 has an invalid interface number: 49 but max is 0
[  106.364869][ T5902] usb 2-1: config 0 has no interface number 0
[  106.371016][ T5902] usb 2-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16
[  106.655863][ T5902] usb 2-1: config 0 interface 49 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  106.682997][ T5902] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7
[  106.696652][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.712535][ T5902] usb 2-1: Product: syz
[  106.728647][ T5902] usb 2-1: Manufacturer: syz
[  106.733912][ T5902] usb 2-1: SerialNumber: syz
[  106.746562][ T5902] usb 2-1: config 0 descriptor??
[  106.763068][ T6242] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  106.796927][ T5833] logitech 0003:046D:C24F.0001: unbalanced collection at end of report description
[  106.808045][ T5833] logitech 0003:046D:C24F.0001: parse failed
[  106.815337][ T5833] logitech 0003:046D:C24F.0001: probe with driver logitech failed with error -22
[  106.988128][ T6233] trusted_key: syz.2.79 sent an empty control message without MSG_MORE.
[  108.334481][   T52] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  108.466182][   T10] usb 3-1: USB disconnect, device number 8
[  108.527020][ T6277] macvlan0: entered promiscuous mode
[  108.557069][ T6277] netlink: 'syz.0.93': attribute type 1 has an invalid length.
[  108.640544][ T6277] netlink: 'syz.0.93': attribute type 2 has an invalid length.
[  108.658785][ T5902] usb 2-1: USB disconnect, device number 3
[  108.887343][   T30] audit: type=1326 audit(1763744555.889:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6282 comm="syz.1.95" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e69b8f749 code=0x0
[  108.945753][ T6291] netlink: 24 bytes leftover after parsing attributes in process `syz.4.96'.
[  109.024456][   T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  109.199177][   T10] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  109.272274][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.288607][   T10] usb 3-1: Product: syz
[  109.298445][   T10] usb 3-1: Manufacturer: syz
[  109.309757][   T10] usb 3-1: SerialNumber: syz
[  109.332377][   T10] usb 3-1: config 0 descriptor??
[  109.605124][   T30] audit: type=1326 audit(1763744556.609:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6301 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8dd8f749 code=0x7ffc0000
[  109.756898][   T10] usb 3-1: Firmware: major: 15, minor: 97, hardware type: UNKNOWN (127)
[  109.777885][   T30] audit: type=1326 audit(1763744556.609:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6301 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fde8dd8f749 code=0x7ffc0000
[  109.861587][   T30] audit: type=1326 audit(1763744556.629:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6301 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8dd8f749 code=0x7ffc0000
[  109.959045][   T10] usb 3-1: no permanent extended address found, random address set
[  109.986892][   T30] audit: type=1326 audit(1763744556.629:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6301 comm="syz.0.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8dd8f749 code=0x7ffc0000
[  110.130492][   T10] usb 3-1: atusb_probe: initialization failed, error = -524
[  110.288957][   T10] atusb 3-1:0.0: probe with driver atusb failed with error -524
[  110.314788][   T10] usb 3-1: USB disconnect, device number 9
[  110.704453][ T5945] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[  110.881888][ T5945] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  110.994357][   T30] audit: type=1326 audit(1763744557.939:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.4.102" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e8298f749 code=0x0
[  111.029664][ T5945] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  111.040610][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.060989][ T5945] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  111.341853][ T6309] capability: warning: `syz.0.101' uses deprecated v2 capabilities in a way that may be insecure
[  111.390344][ T6309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.101'.
[  111.403353][ T6309] hsr_slave_0: left promiscuous mode
[  111.423265][ T5945] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2
[  112.140621][   T10] usb 1-1: USB disconnect, device number 3
[  113.124840][ T5887] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  113.289537][ T5945] IPVS: starting estimator thread 0...
[  113.292710][ T5887] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  113.314522][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  113.383181][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64
[  113.452137][ T5887] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  113.526828][ T6345] IPVS: using max 32 ests per chain, 76800 per kthread
[  113.528228][ T5887] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  113.564592][ T5887] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  113.594739][ T5887] usb 4-1: Manufacturer: syz
[  113.644347][ T5887] usb 4-1: config 0 descriptor??
[  114.241268][ T6360] kAFS: unable to lookup cell 'ÿ'
[  114.272343][ T6360] kAFS: unable to lookup cell '(,c¾Ì'
[  114.305630][ T5887] rc_core: IR keymap rc-hauppauge not found
[  114.311570][ T5887] Registered IR keymap rc-empty
[  114.345295][ T5887] mceusb 4-1:0.0: Error: mce write urb status = -71
[  114.358009][ T6360] netlink: 'syz.4.112': attribute type 1 has an invalid length.
[  114.384750][ T5887] mceusb 4-1:0.0: Error: mce write urb status = -71
[  114.419212][ T5887] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  114.439945][ T5887] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5
[  114.511177][ T5887] mceusb 4-1:0.0: Error: mce write urb status = -71
[  114.605229][ T5887] mceusb 4-1:0.0: Error: mce write urb status = -71
[  114.666943][ T5887] mceusb 4-1:0.0: Error: mce write urb status = -71
[  114.695312][ T5887] mceusb 4-1:0.0: Error: mce write urb status = -71
[  114.712432][ T6369] FAULT_INJECTION: forcing a failure.
[  114.712432][ T6369] name failslab, interval 1, probability 0, space 0, times 0
[  114.726665][ T6369] CPU: 0 UID: 0 PID: 6369 Comm: syz.0.116 Not tainted syzkaller #0 PREEMPT(full) 
[  114.726689][ T6369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  114.726701][ T6369] Call Trace:
[  114.726709][ T6369]  <TASK>
[  114.726717][ T6369]  dump_stack_lvl+0x189/0x250
[  114.726749][ T6369]  ? __pfx____ratelimit+0x10/0x10
[  114.726776][ T6369]  ? __pfx_dump_stack_lvl+0x10/0x10
[  114.726802][ T6369]  ? __pfx__printk+0x10/0x10
[  114.726829][ T6369]  ? __pfx___might_resched+0x10/0x10
[  114.726855][ T6369]  should_fail_ex+0x414/0x560
[  114.726889][ T6369]  should_failslab+0xa8/0x100
[  114.726911][ T6369]  kmem_cache_alloc_noprof+0x74/0x6e0
[  114.726940][ T6369]  ? __anon_vma_prepare+0xcb/0x4a0
[  114.726973][ T6369]  __anon_vma_prepare+0xcb/0x4a0
[  114.727004][ T6369]  ? __pte_alloc+0x15e/0x1a0
[  114.727027][ T6369]  __handle_mm_fault+0x4aff/0x5400
[  114.727070][ T6369]  ? __pfx___handle_mm_fault+0x10/0x10
[  114.727122][ T6369]  ? __pfx___might_resched+0x10/0x10
[  114.727148][ T6369]  handle_mm_fault+0x40a/0x8e0
[  114.727183][ T6369]  __get_user_pages+0x165c/0x2a00
[  114.727239][ T6369]  get_user_pages_remote+0x2f1/0xac0
[  114.727272][ T6369]  ? __pfx_get_user_pages_remote+0x10/0x10
[  114.727294][ T6369]  ? down_read+0x1ad/0x2e0
[  114.727316][ T6369]  ? mmap_read_lock_maybe_expand+0xc6/0x3c0
[  114.727348][ T6369]  get_arg_page+0x104/0x330
[  114.727373][ T6369]  ? up_write+0x1c4/0x420
[  114.727397][ T6369]  ? __pfx_get_arg_page+0x10/0x10
[  114.727430][ T6369]  copy_string_kernel+0x191/0x2a0
[  114.727460][ T6369]  do_execveat_common+0x3c5/0x6a0
[  114.727500][ T6369]  __x64_sys_execveat+0xc4/0xe0
[  114.727530][ T6369]  do_syscall_64+0xfa/0xfa0
[  114.727555][ T6369]  ? lockdep_hardirqs_on+0x9c/0x150
[  114.727581][ T6369]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.727600][ T6369]  ? clear_bhb_loop+0x60/0xb0
[  114.727622][ T6369]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.727640][ T6369] RIP: 0033:0x7fde8dd8f749
[  114.727658][ T6369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  114.727673][ T6369] RSP: 002b:00007fde8ec2a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142
[  114.727692][ T6369] RAX: ffffffffffffffda RBX: 00007fde8dfe5fa0 RCX: 00007fde8dd8f749
[  114.727707][ T6369] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  114.727718][ T6369] RBP: 00007fde8ec2a090 R08: 0000000000001000 R09: 0000000000000000
[  114.727730][ T6369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  114.727741][ T6369] R13: 00007fde8dfe6038 R14: 00007fde8dfe5fa0 R15: 00007fde8e10fa28
[  114.727773][ T6369]  </TASK>
[  114.738927][ T5887] mceusb 4-1:0.0: Error: mce write urb status = -71
[  115.039718][ T6371] syzkaller0: entered promiscuous mode
[  115.046172][ T6371] syzkaller0: entered allmulticast mode
[  115.108268][ T5887] mceusb 4-1:0.0: Error: mce write urb status = -71
[  115.144950][ T5887] mceusb 4-1:0.0: Error: mce write urb status = -71
[  115.160242][ T6374] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 1, id = 0
[  115.178514][ T5887] mceusb 4-1:0.0: Error: mce write urb status = -71
[  115.205290][ T5887] mceusb 4-1:0.0: Error: mce write urb status = -71
[  115.266759][ T5887] mceusb 4-1:0.0: Error: mce write urb status = -71
[  115.325148][ T5887] mceusb 4-1:0.0: Registered ࠌ with mce emulator interface version 1
[  115.370249][ T5887] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  115.400229][ T5887] usb 4-1: USB disconnect, device number 4
[  115.466315][ T6386] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  115.574921][   T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  115.767171][   T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  115.929313][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  116.049378][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  116.086201][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  116.104980][   T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  116.114499][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.129942][   T10] usb 3-1: config 0 descriptor??
[  117.086760][   T10] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max
[  117.396430][ T6382] fuse: Bad value for 'fd'
[  117.471185][   T10] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  117.788511][   T10] usb 3-1: USB disconnect, device number 10
[  117.939652][ T6412] fido_id[6412]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  118.911675][ T6426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.133'.
[  118.947123][ T6426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.133'.
[  118.975971][ T6426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.133'.
[  118.986721][ T6427] netlink: 'syz.3.133': attribute type 10 has an invalid length.
[  119.120388][ T6427] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  119.336175][   T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.363439][ T6437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.138'.
[  119.480473][   T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.576512][   T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.730963][   T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  119.776648][ T6445] netlink: 16 bytes leftover after parsing attributes in process `syz.2.141'.
[  120.018848][ T5954] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  120.105037][   T13] bridge_slave_1: left allmulticast mode
[  120.126132][   T13] bridge_slave_1: left promiscuous mode
[  120.143012][ T6453] hub 9-0:1.0: USB hub found
[  120.143398][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.149942][ T6453] hub 9-0:1.0: 1 port detected
[  120.157315][   T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  120.175925][ T6453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.146'.
[  120.185229][ T5954] usb 1-1: Using ep0 maxpacket: 16
[  120.197871][   T13] bridge_slave_0: left allmulticast mode
[  120.199081][ T5954] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[  120.203544][   T13] bridge_slave_0: left promiscuous mode
[  120.212514][ T5954] usb 1-1: config 0 has no interface number 0
[  120.223958][ T5954] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  120.239400][ T5954] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  120.241534][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.250129][ T5954] usb 1-1: config 0 interface 41 has no altsetting 0
[  120.269416][ T5954] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  120.279553][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.280595][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  120.288412][ T5954] usb 1-1: Product: syz
[  120.297547][ T5902] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  120.309741][ T5954] usb 1-1: Manufacturer: syz
[  120.313996][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  120.314903][ T5954] usb 1-1: SerialNumber: syz
[  120.322884][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  120.341195][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  120.341204][ T5954] usb 1-1: config 0 descriptor??
[  120.359241][ T6447] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  120.368161][ T6447] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  120.375960][   T10] usb 4-1: Using ep0 maxpacket: 16
[  120.381693][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  120.401554][   T10] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  120.415016][   T10] usb 4-1: config 0 has no interface number 0
[  120.421310][   T10] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  120.432882][   T10] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  120.443342][   T10] usb 4-1: config 0 interface 41 has no altsetting 0
[  120.459484][   T10] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  120.469784][ T5902] usb 2-1: device descriptor read/64, error -71
[  120.478340][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.486692][   T10] usb 4-1: Product: syz
[  120.490905][   T10] usb 4-1: Manufacturer: syz
[  120.496863][   T10] usb 4-1: SerialNumber: syz
[  120.505685][   T10] usb 4-1: config 0 descriptor??
[  120.512269][ T6449] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  120.524879][ T6449] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  120.558283][   T13] erspan0 (unregistering): left promiscuous mode
[  120.606950][ T6447] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  120.614579][ T6447] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  120.714655][ T5902] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  120.733639][ T6449] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  120.741497][ T6449] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  120.850855][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  120.863061][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  120.872214][ T5902] usb 2-1: device descriptor read/64, error -71
[  120.881508][   T13] bond0 (unregistering): Released all slaves
[  120.914104][ T6453] erspan0: entered promiscuous mode
[  120.986294][ T5902] usb usb2-port1: attempt power cycle
[  121.037688][ T5954] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -22
[  121.162929][   T10] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -22
[  121.346420][ T5902] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  121.391843][ T5902] usb 2-1: device descriptor read/8, error -71
[  121.455645][ T6472] FAULT_INJECTION: forcing a failure.
[  121.455645][ T6472] name failslab, interval 1, probability 0, space 0, times 0
[  121.475335][ T6472] CPU: 0 UID: 0 PID: 6472 Comm: syz.3.144 Not tainted syzkaller #0 PREEMPT(full) 
[  121.475360][ T6472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  121.475373][ T6472] Call Trace:
[  121.475381][ T6472]  <TASK>
[  121.475389][ T6472]  dump_stack_lvl+0x189/0x250
[  121.475421][ T6472]  ? __pfx____ratelimit+0x10/0x10
[  121.475446][ T6472]  ? __pfx_dump_stack_lvl+0x10/0x10
[  121.475472][ T6472]  ? __pfx__printk+0x10/0x10
[  121.475498][ T6472]  ? __pfx___might_resched+0x10/0x10
[  121.475525][ T6472]  should_fail_ex+0x414/0x560
[  121.475556][ T6472]  should_failslab+0xa8/0x100
[  121.475577][ T6472]  __kmalloc_noprof+0xcb/0x7f0
[  121.475610][ T6472]  ? kfree+0x4d/0x6d0
[  121.475630][ T6472]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  121.475663][ T6472]  tomoyo_realpath_from_path+0xe3/0x5d0
[  121.475693][ T6472]  ? tomoyo_domain+0xd9/0x130
[  121.475713][ T6472]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  121.475738][ T6472]  tomoyo_path_number_perm+0x1e8/0x5a0
[  121.475766][ T6472]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  121.475828][ T6472]  ? __fget_files+0x2a/0x420
[  121.475848][ T6472]  ? __fget_files+0x3a0/0x420
[  121.475865][ T6472]  ? __fget_files+0x2a/0x420
[  121.475888][ T6472]  security_file_ioctl+0xcb/0x2d0
[  121.475914][ T6472]  __se_sys_ioctl+0x47/0x170
[  121.475940][ T6472]  do_syscall_64+0xfa/0xfa0
[  121.475967][ T6472]  ? lockdep_hardirqs_on+0x9c/0x150
[  121.475993][ T6472]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.476013][ T6472]  ? clear_bhb_loop+0x60/0xb0
[  121.476037][ T6472]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.476056][ T6472] RIP: 0033:0x7f977138f749
[  121.476073][ T6472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  121.476100][ T6472] RSP: 002b:00007f97721bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  121.476119][ T6472] RAX: ffffffffffffffda RBX: 00007f97715e6090 RCX: 00007f977138f749
[  121.476132][ T6472] RDX: 0000200000000040 RSI: 00000000c028aa05 RDI: 0000000000000008
[  121.476144][ T6472] RBP: 00007f97721bc090 R08: 0000000000000000 R09: 0000000000000000
[  121.476156][ T6472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  121.476166][ T6472] R13: 00007f97715e6128 R14: 00007f97715e6090 R15: 00007f977170fa28
[  121.476199][ T6472]  </TASK>
[  121.476207][ T6472] ERROR: Out of memory at tomoyo_realpath_from_path.
[  121.994589][ T5902] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  122.070266][ T5902] usb 2-1: device descriptor read/8, error -71
[  122.104678][ T6477] syzkaller1: entered promiscuous mode
[  122.110345][ T6477] syzkaller1: entered allmulticast mode
[  122.199738][ T5902] usb usb2-port1: unable to enumerate USB device
[  122.227117][   T13] hsr_slave_0: left promiscuous mode
[  122.278580][   T13] hsr_slave_1: left promiscuous mode
[  122.372403][   T13] veth1_macvtap: left promiscuous mode
[  122.389251][   T13] veth0_macvtap: left promiscuous mode
[  122.407444][   T13] veth1_vlan: left promiscuous mode
[  122.414488][   T52] Bluetooth: hci2: command tx timeout
[  122.424217][   T13] veth0_vlan: left promiscuous mode
[  122.647753][ T5902] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  122.814395][ T5902] usb 3-1: Using ep0 maxpacket: 32
[  122.837404][ T5902] usb 3-1: config index 0 descriptor too short (expected 9, got 0)
[  122.845697][ T5902] usb 3-1: can't read configurations, error -22
[  122.994354][ T5902] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  123.176009][ T5902] usb 3-1: Using ep0 maxpacket: 32
[  123.199585][ T5902] usb 3-1: config index 0 descriptor too short (expected 9, got 0)
[  123.224682][ T5902] usb 3-1: can't read configurations, error -22
[  123.247487][ T5902] usb usb3-port1: attempt power cycle
[  123.624424][ T5902] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  123.646128][   T10] usb 1-1: USB disconnect, device number 4
[  123.671286][ T5902] usb 3-1: Using ep0 maxpacket: 32
[  123.680626][ T5902] usb 3-1: config index 0 descriptor too short (expected 9, got 0)
[  123.689347][ T5902] usb 3-1: can't read configurations, error -22
[  123.880300][ T5902] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  123.905818][ T5902] usb 3-1: Using ep0 maxpacket: 32
[  123.925475][ T5902] usb 3-1: config index 0 descriptor too short (expected 9, got 0)
[  123.952729][ T5902] usb 3-1: can't read configurations, error -22
[  123.997748][ T5902] usb usb3-port1: unable to enumerate USB device
[  124.315276][   T13] team0 (unregistering): Port device team_slave_1 removed
[  124.455202][   T13] team0 (unregistering): Port device team_slave_0 removed
[  124.495197][   T52] Bluetooth: hci2: command tx timeout
[  124.626736][ T6495] netlink: 96 bytes leftover after parsing attributes in process `syz.3.151'.
[  124.798637][   T10] usb 4-1: USB disconnect, device number 5
[  125.098186][ T6499] geneve2: entered allmulticast mode
[  125.146195][ T6456] chnl_net:caif_netlink_parms(): no params data found
[  125.434460][ T5902] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  125.618414][ T5902] usb 1-1: Using ep0 maxpacket: 32
[  125.636455][ T5902] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  125.681570][ T6520] hub 9-0:1.0: USB hub found
[  125.689310][ T6520] hub 9-0:1.0: 1 port detected
[  125.694746][ T5902] usb 1-1: config 0 has no interfaces?
[  125.741997][ T5902] usb 1-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e
[  125.748738][ T6456] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.752196][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.788355][ T5902] usb 1-1: config 0 descriptor??
[  125.813690][ T6456] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.826464][ T6520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.156'.
[  125.853684][ T6456] bridge_slave_0: entered allmulticast mode
[  125.869128][ T6456] bridge_slave_0: entered promiscuous mode
[  125.883494][ T6520] erspan0: entered promiscuous mode
[  125.927168][ T6456] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.940189][ T6456] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.948960][ T6456] bridge_slave_1: entered allmulticast mode
[  126.003116][ T6456] bridge_slave_1: entered promiscuous mode
[  126.005474][ T5887] usb 1-1: USB disconnect, device number 5
[  126.139109][ T6456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  126.140246][   T13] IPVS: stop unused estimator thread 0...
[  126.165818][ T6456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  126.194153][ T6529] macvlan0: entered promiscuous mode
[  126.199890][ T6529] netlink: 'syz.3.157': attribute type 1 has an invalid length.
[  126.207996][ T6529] netlink: 'syz.3.157': attribute type 2 has an invalid length.
[  126.426804][ T6456] team0: Port device team_slave_0 added
[  126.480478][ T6456] team0: Port device team_slave_1 added
[  126.575577][   T52] Bluetooth: hci2: command tx timeout
[  126.654514][ T6456] batman_adv: batadv0: Adding interface: batadv_slave_0
[  126.661497][ T6456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  126.708644][ T5954] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  126.717600][ T6543] netlink: 44 bytes leftover after parsing attributes in process `syz.0.160'.
[  126.803426][ T6456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  126.852020][ T6456] batman_adv: batadv0: Adding interface: batadv_slave_1
[  126.865868][ T6456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  126.947845][ T5954] usb 4-1: Using ep0 maxpacket: 32
[  126.958513][ T5954] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  126.975199][ T5954] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  126.989368][ T6456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  127.000054][ T5954] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  127.052178][ T5954] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  127.115529][ T5954] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  127.129267][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.141155][ T5954] usb 4-1: Product: syz
[  127.157715][ T5954] usb 4-1: Manufacturer: syz
[  127.163618][ T5954] usb 4-1: SerialNumber: syz
[  127.178374][ T6456] hsr_slave_0: entered promiscuous mode
[  127.185080][ T6456] hsr_slave_1: entered promiscuous mode
[  127.363001][ T6553] capability: warning: `syz.1.161' uses 32-bit capabilities (legacy support in use)
[  127.425071][ T5954] usb 4-1: 2:1 : format type 0 is detected, processed as PCM
[  127.450144][ T5954] usb 4-1: 2:1 : invalid channels 0
[  127.605625][ T5954] usb 4-1: USB disconnect, device number 6
[  128.035125][ T6456] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  128.070373][ T6456] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  128.117324][ T6456] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  128.164973][ T6456] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  128.363777][ T6570] netlink: 84 bytes leftover after parsing attributes in process `syz.3.164'.
[  128.654944][   T52] Bluetooth: hci2: command tx timeout
[  128.999318][ T6456] 8021q: adding VLAN 0 to HW filter on device bond0
[  129.061069][ T6456] 8021q: adding VLAN 0 to HW filter on device team0
[  129.103328][ T4252] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.110510][ T4252] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.189314][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.196518][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[  130.024493][ T6456] 8021q: adding VLAN 0 to HW filter on device batadv0
[  130.661624][ T6456] veth0_vlan: entered promiscuous mode
[  130.741296][ T6456] veth1_vlan: entered promiscuous mode
[  130.875471][ T6456] veth0_macvtap: entered promiscuous mode
[  130.902276][ T6456] veth1_macvtap: entered promiscuous mode
[  130.978256][ T6456] batman_adv: batadv0: Interface activated: batadv_slave_0
[  131.022271][ T6456] batman_adv: batadv0: Interface activated: batadv_slave_1
[  131.055696][ T5927] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  131.087563][ T4252] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.096473][ T4252] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.112069][ T4252] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.142222][ T4252] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.674411][ T5927] usb 4-1: Using ep0 maxpacket: 32
[  131.705923][ T5927] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  131.733741][ T5927] usb 4-1: config 0 has no interfaces?
[  131.755090][ T5927] usb 4-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e
[  131.802969][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.880663][ T4252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  131.899011][ T5927] usb 4-1: config 0 descriptor??
[  131.926739][ T4252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.011135][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.020859][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.139859][   T10] usb 4-1: USB disconnect, device number 7
[  132.184521][ T5954] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  132.365019][ T5954] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  132.407729][ T5954] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  132.432988][ T5954] usb 1-1: config 0 interface 0 has no altsetting 0
[  132.452080][ T5954] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  132.452808][ T6633] openvswitch: netlink: Flow actions attr not present in new flow.
[  132.483683][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.534022][ T5954] usb 1-1: config 0 descriptor??
[  132.563545][ T6624] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  132.874457][ T6642] macvlan0: entered promiscuous mode
[  132.899652][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  132.910165][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  132.929473][ T6642] netlink: 'syz.5.175': attribute type 1 has an invalid length.
[  132.963905][ T6642] netlink: 'syz.5.175': attribute type 2 has an invalid length.
[  133.071397][ T5954] logitech 0003:046D:C24F.0003: unbalanced collection at end of report description
[  133.102207][ T5954] logitech 0003:046D:C24F.0003: parse failed
[  133.114454][ T5954] logitech 0003:046D:C24F.0003: probe with driver logitech failed with error -22
[  133.319429][ T5954] usb 1-1: USB disconnect, device number 6
[  133.364489][ T6658] netlink: 24 bytes leftover after parsing attributes in process `syz.5.178'.
[  134.364382][ T5927] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  134.552680][ T5927] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  134.600666][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.874453][ T5927] usb 4-1: Product: syz
[  134.879094][ T5927] usb 4-1: Manufacturer: syz
[  134.883791][ T5927] usb 4-1: SerialNumber: syz
[  137.049253][ T6716] netlink: 20 bytes leftover after parsing attributes in process `syz.0.187'.
[  137.484717][ T6736] netlink: 'syz.1.188': attribute type 27 has an invalid length.
[  137.821184][ T5927] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  137.926575][ T5927] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO
[  137.939125][ T5927] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  137.971801][ T5927] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  138.019018][ T5927] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  138.081889][ T6736] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.089744][ T6736] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.091979][ T5927] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  138.145384][ T5927] usb 4-1: USB disconnect, device number 8
[  138.151427][ T5945] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  138.321790][ T6754] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  138.574311][   T30] audit: type=1326 audit(1763744585.519:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6750 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8dd8f749 code=0x7ffc0000
[  138.624374][ T5945] usb 2-1: Using ep0 maxpacket: 16
[  138.954418][   T30] audit: type=1326 audit(1763744585.519:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6750 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8dd8f749 code=0x7ffc0000
[  139.052143][ T5945] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  139.101564][ T6736] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  139.134460][   T30] audit: type=1326 audit(1763744585.519:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6750 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fde8dd8f749 code=0x7ffc0000
[  139.160402][   T30] audit: type=1326 audit(1763744585.519:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6750 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8dd8f749 code=0x7ffc0000
[  139.184070][   T30] audit: type=1326 audit(1763744585.529:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6750 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fde8dd8f749 code=0x7ffc0000
[  139.185195][ T6736] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  139.207428][   T30] audit: type=1326 audit(1763744585.529:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6750 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8dd8f749 code=0x7ffc0000
[  139.224621][ T5945] usb 2-1: config 0 has no interface number 0
[  139.238648][   T30] audit: type=1326 audit(1763744585.529:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6750 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fde8dd8f749 code=0x7ffc0000
[  139.272340][   T30] audit: type=1326 audit(1763744585.539:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6750 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8dd8f749 code=0x7ffc0000
[  139.337746][ T5945] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  139.347701][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.357500][ T5945] usb 2-1: Product: syz
[  139.364986][ T5945] usb 2-1: Manufacturer: syz
[  139.370225][ T5945] usb 2-1: SerialNumber: syz
[  139.386561][ T5945] usb 2-1: config 0 descriptor??
[  139.395909][   T30] audit: type=1326 audit(1763744585.559:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6750 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fde8dd8f749 code=0x7ffc0000
[  139.419995][ T5945] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  139.426370][   T30] audit: type=1326 audit(1763744585.879:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6750 comm="syz.0.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde8dd8f749 code=0x7ffc0000
[  139.954691][ T5945] gspca_spca1528: reg_w err -110
[  139.976735][ T5945] spca1528 2-1:0.1: probe with driver spca1528 failed with error -110
[  140.070787][ T6739] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.081807][ T6739] 8021q: adding VLAN 0 to HW filter on device team0
[  140.200089][ T6739] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  140.308548][   T60] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.320254][   T60] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.359244][   T60] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  140.395245][   T60] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  141.185345][ T5954] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  141.388509][ T5954] usb 4-1: config 0 has no interfaces?
[  141.396477][ T5954] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  141.406193][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.414717][ T5954] usb 4-1: Product: syz
[  141.419132][ T5954] usb 4-1: Manufacturer: syz
[  141.423830][ T5954] usb 4-1: SerialNumber: syz
[  141.448587][ T5954] usb 4-1: config 0 descriptor??
[  141.723295][ T5945] usb 4-1: USB disconnect, device number 9
[  141.802707][ T5954] usb 2-1: USB disconnect, device number 8
[  141.859504][ T6796] use of bytesused == 0 is deprecated and will be removed in the future,
[  141.868322][ T6796] use the actual size instead.
[  142.089364][ T6802] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  142.126343][ T6805] netlink: 24 bytes leftover after parsing attributes in process `syz.5.203'.
[  143.714201][ T6820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.206'.
[  143.795121][ T6819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.205'.
[  145.763780][ T6849] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.824633][ T6855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.211'.
[  145.845482][ T6854] netlink: 84 bytes leftover after parsing attributes in process `syz.3.214'.
[  146.055085][ T5927] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  146.155495][ T5954] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  146.195717][ T6873] netlink: 'syz.3.217': attribute type 27 has an invalid length.
[  146.356248][ T5954] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  146.403755][ T5954] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  146.427476][ T5927] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  146.434894][ T5954] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  146.455215][ T5927] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  146.484495][ T5927] usb 1-1: config 0 interface 0 has no altsetting 0
[  146.587383][ T6873] macvlan0: left promiscuous mode
[  146.605080][ T5927] usb 1-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  146.633751][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.644861][ T6873] erspan0: left promiscuous mode
[  146.665549][ T5927] usb 1-1: config 0 descriptor??
[  146.686793][ T6853] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  146.843571][ T5954] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  146.887686][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.943852][ T6875] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.950826][ T5833] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  146.973363][ T6875] 8021q: adding VLAN 0 to HW filter on device team0
[  147.005448][ T6875] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  147.025816][ T5954] usb 3-1: Product: syz
[  147.054415][ T5954] usb 3-1: Manufacturer: syz
[  147.062569][ T5954] usb 3-1: SerialNumber: syz
[  147.121403][ T5927] logitech 0003:046D:C24F.0004: unbalanced collection at end of report description
[  147.126028][ T5954] usb 3-1: config 0 descriptor??
[  147.143538][ T5927] logitech 0003:046D:C24F.0004: parse failed
[  147.203906][ T5833] usb 4-1: Using ep0 maxpacket: 16
[  147.478223][ T5927] logitech 0003:046D:C24F.0004: probe with driver logitech failed with error -22
[  147.521816][ T5833] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  147.554696][ T5833] usb 4-1: config 0 has no interface number 0
[  147.554809][ T6847] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  147.609162][ T6847] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  147.633459][ T5927] usb 1-1: USB disconnect, device number 7
[  147.645278][ T5954] usb 3-1: ucan: probing device on interface #0
[  147.783476][ T5833] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  147.798392][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.818332][ T5833] usb 4-1: Product: syz
[  147.948629][ T5833] usb 4-1: Manufacturer: syz
[  148.004655][ T5954] usb 3-1: ucan: device protocol version 2137132035 is not supported
[  148.014563][ T5833] usb 4-1: SerialNumber: syz
[  148.051350][ T5954] usb 3-1: ucan: probe failed; try to update the device firmware
[  148.061654][ T5833] usb 4-1: config 0 descriptor??
[  148.085881][ T5833] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  148.595147][ T5833] gspca_spca1528: reg_w err -110
[  148.618034][ T6903] kAFS: unable to lookup cell 'ÿ'
[  148.624513][ T5833] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110
[  148.641889][ T6903] kAFS: unable to lookup cell '(,c¾Ì'
[  148.692582][ T6903] netlink: 'syz.1.223': attribute type 1 has an invalid length.
[  148.701520][ T6905] netlink: 'syz.5.224': attribute type 27 has an invalid length.
[  149.029705][ T6905] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.037278][ T6905] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.215325][   T43] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  149.386944][   T24] usb 3-1: USB disconnect, device number 15
[  149.404409][   T43] usb 6-1: Using ep0 maxpacket: 16
[  149.449811][   T43] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  149.476636][   T43] usb 6-1: config 0 has no interface number 0
[  149.508832][   T43] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  149.519595][   T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.565856][ T6914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.226'.
[  149.593737][   T43] usb 6-1: Product: syz
[  149.624525][ T6914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.226'.
[  149.675751][ T6905] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  149.694856][ T6905] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  149.734789][ T5887] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  149.794107][ T6905] macvlan0: left promiscuous mode
[  150.034190][   T43] usb 6-1: Manufacturer: syz
[  150.048695][   T43] usb 6-1: SerialNumber: syz
[  150.074589][   T43] usb 6-1: config 0 descriptor??
[  150.133756][   T43] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  150.187935][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  150.204621][ T5887] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  150.229879][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  150.248802][ T5887] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  150.269559][ T5887] usb 2-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  150.274132][ T6924] input: syz0 as /devices/virtual/input/input6
[  150.284485][ T5887] usb 2-1: New USB device strings: Mfr=28, Product=2, SerialNumber=3
[  150.319186][ T5887] usb 2-1: Product: syz
[  150.323648][ T5887] usb 2-1: Manufacturer: syz
[  150.344148][ T5887] usb 2-1: SerialNumber: syz
[  150.471180][ T5887] usb 2-1: config 0 descriptor??
[  150.526171][ T5887] kvaser_usb 2-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0
[  150.531766][ T5833] usb 4-1: USB disconnect, device number 10
[  150.584337][ T5954] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  150.634341][ T5887] kvaser_usb 2-1:0.0: error -EMSGSIZE: Failed to initialize card
[  150.661785][   T43] gspca_spca1528: reg_w err -110
[  150.669257][ T6907] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.678556][ T5887] kvaser_usb 2-1:0.0: probe with driver kvaser_usb failed with error -90
[  150.693354][   T43] spca1528 6-1:0.1: probe with driver spca1528 failed with error -110
[  150.720267][ T6907] 8021q: adding VLAN 0 to HW filter on device team0
[  150.747174][ T6907] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  150.754687][ T5954] usb 3-1: device descriptor read/64, error -71
[  150.866165][   T60] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.884719][   T60] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  150.903536][ T6931] netlink: 24 bytes leftover after parsing attributes in process `syz.3.229'.
[  150.943846][   T60] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.018868][   T60] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  151.028638][ T5954] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  151.185685][ T5954] usb 3-1: device descriptor read/64, error -71
[  151.307193][ T5954] usb usb3-port1: attempt power cycle
[  151.543343][   T10] usb 2-1: USB disconnect, device number 9
[  151.642983][ T6946] random: crng reseeded on system resumption
[  151.663986][ T5954] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  151.751936][ T5954] usb 3-1: device descriptor read/8, error -71
[  152.064754][ T5954] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  152.085596][ T5954] usb 3-1: device descriptor read/8, error -71
[  152.134971][   T10] usb 6-1: USB disconnect, device number 2
[  152.224907][ T5954] usb usb3-port1: unable to enumerate USB device
[  152.554378][   T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  152.824518][   T10] usb 6-1: Using ep0 maxpacket: 32
[  152.886250][   T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  152.969163][   T10] usb 6-1: config 0 has no interfaces?
[  152.982619][   T10] usb 6-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e
[  153.017935][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.049992][   T10] usb 6-1: config 0 descriptor??
[  153.391791][   T10] usb 6-1: USB disconnect, device number 3
[  153.976688][ T6987] netlink: 24 bytes leftover after parsing attributes in process `syz.2.236'.
[  154.758785][ T7005] netlink: 'syz.3.242': attribute type 27 has an invalid length.
[  155.039595][ T7006] 8021q: adding VLAN 0 to HW filter on device bond0
[  155.053910][ T7006] 8021q: adding VLAN 0 to HW filter on device team0
[  155.081104][ T7006] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  155.364629][   T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  155.413599][ T7013] netlink: 12 bytes leftover after parsing attributes in process `syz.5.243'.
[  155.514416][   T10] usb 4-1: Using ep0 maxpacket: 16
[  155.538378][   T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  155.557295][   T10] usb 4-1: config 0 has no interface number 0
[  155.592804][   T10] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  155.604297][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.632725][   T10] usb 4-1: Product: syz
[  155.644923][   T10] usb 4-1: Manufacturer: syz
[  155.649989][   T10] usb 4-1: SerialNumber: syz
[  155.673068][   T10] usb 4-1: config 0 descriptor??
[  155.692688][   T10] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  155.936388][ T5945] usb 2-1: new full-speed USB device number 10 using dummy_hcd
[  155.944454][ T5954] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  156.148281][ T5945] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  156.159832][ T5954] usb 1-1: Using ep0 maxpacket: 32
[  156.169049][ T5954] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  156.180511][ T5954] usb 1-1: config 0 has no interfaces?
[  156.193047][ T5954] usb 1-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e
[  156.293017][ T5945] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  156.435228][   T10] gspca_spca1528: reg_w err -110
[  156.442659][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.450978][ T5945] usb 2-1: config 0 interface 0 has no altsetting 0
[  156.459642][   T10] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110
[  156.470714][ T5954] usb 1-1: config 0 descriptor??
[  156.475984][ T5945] usb 2-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00
[  156.488605][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.524436][ T5945] usb 2-1: config 0 descriptor??
[  156.530933][ T7020] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  156.699478][   T10] usb 1-1: USB disconnect, device number 8
[  156.971084][ T5945] logitech 0003:046D:C24F.0005: unbalanced collection at end of report description
[  157.037131][ T5945] logitech 0003:046D:C24F.0005: parse failed
[  157.073887][ T5945] logitech 0003:046D:C24F.0005: probe with driver logitech failed with error -22
[  157.187439][ T5945] usb 2-1: USB disconnect, device number 10
[  157.410329][ T7028] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  157.431563][ T7028] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  157.489035][ T7028] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  157.512325][ T7028] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  157.559706][ T7028] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  157.627436][ T7028] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  157.647743][ T7028] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  157.653973][ T7028] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  157.662162][ T7028] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  157.732464][ T7038] netlink: 24 bytes leftover after parsing attributes in process `syz.0.251'.
[  157.912817][ T5945] usb 4-1: USB disconnect, device number 11
[  158.150160][ T7042] netlink: 244 bytes leftover after parsing attributes in process `syz.1.252'.
[  158.214686][ T7042] openvswitch: netlink: Flow key attr not present in new flow.
[  158.324033][ T7044] warning: `syz.2.253' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  158.366666][ T7046] netlink: 32 bytes leftover after parsing attributes in process `syz.3.254'.
[  158.692125][ T5945] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0
[  158.710210][ T5945] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0
[  158.734681][ T5945] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0
[  158.765394][ T5945] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0
[  158.791094][ T5945] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0
[  158.833664][ T5945] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0
[  158.859785][ T5945] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0
[  158.881210][ T5945] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0
[  158.903146][ T5945] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0
[  158.923153][ T5945] hid-generic 0006:0004:0009.0006: unknown main item tag 0x0
[  158.970142][ T5945] hid-generic 0006:0004:0009.0006: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[  159.044464][   T10] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[  159.149692][ T7058] fido_id[7058]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  159.216446][   T10] usb 3-1: config 0 has an invalid interface number: 48 but max is 0
[  159.226094][   T10] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  159.253771][   T10] usb 3-1: config 0 has no interface number 0
[  159.281206][   T10] usb 3-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30
[  159.312595][   T10] usb 3-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  159.367134][   T10] usb 3-1: config 0 interface 48 has no altsetting 0
[  159.383576][   T10] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a
[  159.392930][ T5945] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  159.418421][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.438311][   T10] usb 3-1: config 0 descriptor??
[  159.454594][   T52] Bluetooth: hci3: command 0x0c1a tx timeout
[  159.534998][   T52] Bluetooth: hci4: command 0x0c1a tx timeout
[  159.556530][ T5945] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  159.569499][ T5945] usb 1-1: config 0 has no interface number 0
[  159.602485][ T5945] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  159.613216][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.628026][ T5945] usb 1-1: Product: syz
[  159.632811][ T5945] usb 1-1: Manufacturer: syz
[  159.638369][ T5945] usb 1-1: SerialNumber: syz
[  159.649443][ T7053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.660118][ T7053] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.664393][ T5887] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  159.671628][ T5945] usb 1-1: config 0 descriptor??
[  159.688106][   T10] usb 3-1: string descriptor 0 read error: -71
[  159.694915][   T52] Bluetooth: hci2: command 0x0c1a tx timeout
[  159.725167][   T10] usb 3-1: USB disconnect, device number 20
[  159.818971][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.261'.
[  159.846339][ T5887] usb 2-1: Using ep0 maxpacket: 32
[  159.855269][ T5887] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  159.865950][ T5887] usb 2-1: config 0 has no interfaces?
[  159.872178][ T5887] usb 2-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e
[  159.882810][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.899615][ T5887] usb 2-1: config 0 descriptor??
[  160.035096][ T5945] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  160.064043][ T5945] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  160.081845][ T5945] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  160.090204][ T5945] usb 1-1: media controller created
[  160.134660][ T5945] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  160.806378][ T7076] netlink: 40 bytes leftover after parsing attributes in process `syz.5.263'.
[  160.927580][ T7076] netlink: 80 bytes leftover after parsing attributes in process `syz.5.263'.
[  160.937763][ T7076] netlink: 40 bytes leftover after parsing attributes in process `syz.5.263'.
[  160.947988][ T7076] netlink: 80 bytes leftover after parsing attributes in process `syz.5.263'.
[  161.218039][ T7071] usb 1-1: dvb_usb_ec168: I2C read not implemented
[  161.226278][   T43] usb 2-1: USB disconnect, device number 11
[  161.281802][ T5945] i2c i2c-1: ec100: i2c rd failed=-32 reg=33
[  161.377489][ T5945] usb 1-1: USB disconnect, device number 9
[  161.421798][ T5833] IPVS: starting estimator thread 0...
[  161.436491][ T7084] IPVS: set_ctl: invalid protocol: 51 172.30.1.3:20004
[  161.537425][   T52] Bluetooth: hci3: command 0x0c1a tx timeout
[  161.545121][ T7085] IPVS: using max 25 ests per chain, 60000 per kthread
[  161.614845][   T52] Bluetooth: hci4: command 0x0c1a tx timeout
[  161.780212][   T52] Bluetooth: hci2: command 0x0c1a tx timeout
[  162.134368][ T5833] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  162.855893][ T7108] netlink: 'syz.0.272': attribute type 1 has an invalid length.
[  162.863578][ T7108] netlink: 'syz.0.272': attribute type 2 has an invalid length.
[  162.888388][ T5833] usb 4-1: Using ep0 maxpacket: 16
[  162.910079][ T5833] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  162.926606][ T5833] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  162.957020][ T5833] usb 4-1: config 0 interface 0 has no altsetting 0
[  163.058186][ T5833] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00
[  163.198031][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.260264][ T5833] usb 4-1: config 0 descriptor??
[  163.614938][   T52] Bluetooth: hci3: command 0x0c1a tx timeout
[  163.705312][   T52] Bluetooth: hci4: command 0x0c1a tx timeout
[  163.800523][ T5833] mcp2200 0003:04D8:00DF.0007: item 0 4 0 9 parsing failed
[  163.808395][ T5833] mcp2200 0003:04D8:00DF.0007: can't parse reports
[  163.853030][ T5833] mcp2200 0003:04D8:00DF.0007: probe with driver mcp2200 failed with error -22
[  163.865489][   T52] Bluetooth: hci2: command 0x0c1a tx timeout
[  164.930559][   T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  164.959007][ T7142] netlink: 'syz.5.283': attribute type 27 has an invalid length.
[  165.069026][ T5917] usb 4-1: USB disconnect, device number 12
[  165.146273][   T10] usb 3-1: Using ep0 maxpacket: 32
[  165.153546][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  165.169189][   T10] usb 3-1: config 0 has no interfaces?
[  165.250859][ T7142] 8021q: adding VLAN 0 to HW filter on device bond0
[  165.261557][ T7142] 8021q: adding VLAN 0 to HW filter on device team0
[  165.314675][ T7142] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  165.338448][   T10] usb 3-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e
[  165.352164][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.391619][   T10] usb 3-1: config 0 descriptor??
[  165.417088][ T7146] macvlan0: entered promiscuous mode
[  165.422768][ T7146] netlink: 'syz.3.284': attribute type 1 has an invalid length.
[  165.431107][ T7146] netlink: 'syz.3.284': attribute type 2 has an invalid length.
[  165.565578][ T5945] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  165.606469][ T7151] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  165.639919][ T7151] ucma_write: process 211 (syz.1.285) changed security contexts after opening file descriptor, this is not allowed.
[  165.641814][   T10] usb 3-1: USB disconnect, device number 21
[  165.784513][ T5945] usb 6-1: Using ep0 maxpacket: 16
[  165.950170][ T5945] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  165.974959][ T5945] usb 6-1: config 0 has no interface number 0
[  166.005922][ T5945] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  166.028882][ T5945] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.062814][ T5945] usb 6-1: Product: syz
[  166.077949][ T5945] usb 6-1: Manufacturer: syz
[  166.118473][ T5945] usb 6-1: SerialNumber: syz
[  166.146773][ T5945] usb 6-1: config 0 descriptor??
[  166.163173][ T5945] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  166.262743][ T7159] netlink: 24 bytes leftover after parsing attributes in process `syz.3.287'.
[  166.705208][ T5945] gspca_spca1528: reg_w err -110
[  166.726629][ T5945] spca1528 6-1:0.1: probe with driver spca1528 failed with error -110
[  166.944514][ T5887] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  166.955131][   T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  167.114324][ T5887] usb 1-1: Using ep0 maxpacket: 32
[  167.120590][   T10] usb 2-1: Using ep0 maxpacket: 16
[  167.127515][ T5887] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[  167.144418][ T5887] usb 1-1: config 0 has no interface number 0
[  167.150578][ T5887] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  167.169687][ T5887] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  167.178935][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.187101][ T5887] usb 1-1: Product: syz
[  167.192163][ T5887] usb 1-1: Manufacturer: syz
[  167.196915][ T5887] usb 1-1: SerialNumber: syz
[  167.222367][ T5887] usb 1-1: config 0 descriptor??
[  167.251733][ T5887] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  167.272737][ T5887] em28xx 1-1:0.132: Video interface 132 found:
[  167.302051][   T10] usb 2-1: config 6 has an invalid interface number: 211 but max is 0
[  167.515578][   T10] usb 2-1: config 6 has no interface number 0
[  167.535823][   T10] usb 2-1: config 6 interface 211 has no altsetting 0
[  167.661629][   T10] usb 2-1: New USB device found, idVendor=0dda, idProduct=0001, bcdDevice= 0.12
[  167.671798][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.867132][ T5887] em28xx 1-1:0.132: unknown em28xx chip ID (0)
[  167.932016][   T10] usb 2-1: Product: syz
[  167.936440][   T10] usb 2-1: Manufacturer: syz
[  167.941185][   T10] usb 2-1: SerialNumber: syz
[  168.297502][ T5887] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5)
[  168.311123][ T5887] em28xx 1-1:0.132: board has no eeprom
[  168.381118][ T5833] usb 6-1: USB disconnect, device number 4
[  168.483537][ T7178] netlink: 16 bytes leftover after parsing attributes in process `syz.5.292'.
[  168.504494][ T5887] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  168.522367][ T5887] em28xx 1-1:0.132: analog set to bulk mode.
[  168.550934][   T24] em28xx 1-1:0.132: Registering V4L2 extension
[  168.969549][   T24] em28xx 1-1:0.132: failed to get i2c transfer status from bridge register (error=-5)
[  168.980194][ T5887] usb 1-1: USB disconnect, device number 10
[  168.993076][ T5887] em28xx 1-1:0.132: Disconnecting em28xx
[  169.264036][   T24] em28xx 1-1:0.132: Config register raw data: 0xffffffed
[  169.291398][   T24] em28xx 1-1:0.132: AC97 chip type couldn't be determined
[  169.314753][   T24] em28xx 1-1:0.132: No AC97 audio processor
[  169.335279][   T24] usb 1-1: Decoder not found
[  169.348405][   T24] em28xx 1-1:0.132: failed to create media graph
[  169.437615][   T24] em28xx 1-1:0.132: V4L2 device video103 deregistered
[  169.442978][   T10] usb-storage 2-1:6.211: USB Mass Storage device detected
[  169.452700][   T24] em28xx 1-1:0.132: Remote control support is not available for this card.
[  169.462703][ T7197] ==================================================================
[  169.470809][ T7197] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xac/0x420
[  169.478228][ T7197] Read of size 8 at addr ffff88803273c740 by task v4l_id/7197
[  169.485787][ T7197] 
[  169.488224][ T7197] CPU: 0 UID: 0 PID: 7197 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) 
[  169.488248][ T7197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  169.488260][ T7197] Call Trace:
[  169.488271][ T7197]  <TASK>
[  169.488280][ T7197]  dump_stack_lvl+0x189/0x250
[  169.488310][ T7197]  ? __virt_addr_valid+0x1c8/0x5c0
[  169.488338][ T7197]  ? rcu_is_watching+0x15/0xb0
[  169.488360][ T7197]  ? __pfx_dump_stack_lvl+0x10/0x10
[  169.488390][ T7197]  ? rcu_is_watching+0x15/0xb0
[  169.488411][ T7197]  ? lock_release+0x4b/0x3e0
[  169.488430][ T7197]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  169.488457][ T7197]  ? __virt_addr_valid+0x1c8/0x5c0
[  169.488483][ T7197]  ? __virt_addr_valid+0x4a5/0x5c0
[  169.488510][ T7197]  print_report+0xca/0x240
[  169.488533][ T7197]  ? v4l2_fh_open+0xac/0x420
[  169.488553][ T7197]  kasan_report+0x118/0x150
[  169.488580][ T7197]  ? v4l2_fh_open+0xac/0x420
[  169.488603][ T7197]  v4l2_fh_open+0xac/0x420
[  169.488622][ T7197]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  169.488655][ T7197]  em28xx_v4l2_open+0x157/0x9a0
[  169.488691][ T7197]  v4l2_open+0x1bf/0x3a0
[  169.488715][ T7197]  chrdev_open+0x4cc/0x5e0
[  169.488735][ T7197]  ? __pfx_chrdev_open+0x10/0x10
[  169.488755][ T7197]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  169.488777][ T7197]  ? __pfx_chrdev_open+0x10/0x10
[  169.488794][ T7197]  do_dentry_open+0x953/0x13f0
[  169.488822][ T7197]  vfs_open+0x3b/0x340
[  169.488841][ T7197]  ? path_openat+0x2ecd/0x3830
[  169.488867][ T7197]  path_openat+0x2ee5/0x3830
[  169.488907][ T7197]  ? __pfx_path_openat+0x10/0x10
[  169.488940][ T7197]  do_filp_open+0x1fa/0x410
[  169.488963][ T7197]  ? __lock_acquire+0xab9/0xd20
[  169.488982][ T7197]  ? __pfx_do_filp_open+0x10/0x10
[  169.489016][ T7197]  ? _raw_spin_unlock+0x28/0x50
[  169.489040][ T7197]  ? alloc_fd+0x64c/0x6c0
[  169.489073][ T7197]  do_sys_openat2+0x121/0x1c0
[  169.489096][ T7197]  ? __pfx_do_sys_openat2+0x10/0x10
[  169.489119][ T7197]  ? exc_page_fault+0x82/0x100
[  169.489148][ T7197]  ? do_user_addr_fault+0xc85/0x1380
[  169.489169][ T7197]  __x64_sys_openat+0x138/0x170
[  169.489194][ T7197]  do_syscall_64+0xfa/0xfa0
[  169.489222][ T7197]  ? lockdep_hardirqs_on+0x9c/0x150
[  169.489248][ T7197]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.489268][ T7197]  ? clear_bhb_loop+0x60/0xb0
[  169.489289][ T7197]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.489308][ T7197] RIP: 0033:0x7f199a0a7407
[  169.489327][ T7197] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  169.489344][ T7197] RSP: 002b:00007ffdb2828620 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  169.489366][ T7197] RAX: ffffffffffffffda RBX: 00007f199a824880 RCX: 00007f199a0a7407
[  169.489380][ T7197] RDX: 0000000000000000 RSI: 00007ffdb2829f1b RDI: ffffffffffffff9c
[  169.489394][ T7197] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  169.489406][ T7197] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  169.489418][ T7197] R13: 00007ffdb2828870 R14: 00007f199a98b000 R15: 000055bcbe3784d8
[  169.489440][ T7197]  </TASK>
[  169.489446][ T7197] 
[  169.802834][ T7197] Allocated by task 24:
[  169.807098][ T7197]  kasan_save_track+0x3e/0x80
[  169.812119][ T7197]  __kasan_kmalloc+0x93/0xb0
[  169.816747][ T7197]  __kmalloc_cache_noprof+0x3d5/0x6f0
[  169.822231][ T7197]  em28xx_v4l2_init+0x10b/0x2e70
[  169.827185][ T7197]  em28xx_init_extension+0x120/0x1c0
[  169.832612][ T7197]  process_scheduled_works+0xae1/0x17b0
[  169.838364][ T7197]  worker_thread+0x8a0/0xda0
[  169.842985][ T7197]  kthread+0x711/0x8a0
[  169.847084][ T7197]  ret_from_fork+0x4bc/0x870
[  169.851866][ T7197]  ret_from_fork_asm+0x1a/0x30
[  169.856730][ T7197] 
[  169.859058][ T7197] Freed by task 24:
[  169.862870][ T7197]  kasan_save_track+0x3e/0x80
[  169.868355][ T7197]  __kasan_save_free_info+0x46/0x50
[  169.873566][ T7197]  __kasan_slab_free+0x5c/0x80
[  169.878352][ T7197]  kfree+0x19a/0x6d0
[  169.882278][ T7197]  em28xx_v4l2_init+0x1683/0x2e70
[  169.887339][ T7197]  em28xx_init_extension+0x120/0x1c0
[  169.892668][ T7197]  process_scheduled_works+0xae1/0x17b0
[  169.898237][ T7197]  worker_thread+0x8a0/0xda0
[  169.902892][ T7197]  kthread+0x711/0x8a0
[  169.906992][ T7197]  ret_from_fork+0x4bc/0x870
[  169.911776][ T7197]  ret_from_fork_asm+0x1a/0x30
[  169.916575][ T7197] 
[  169.918908][ T7197] The buggy address belongs to the object at ffff88803273c000
[  169.918908][ T7197]  which belongs to the cache kmalloc-8k of size 8192
[  169.933154][ T7197] The buggy address is located 1856 bytes inside of
[  169.933154][ T7197]  freed 8192-byte region [ffff88803273c000, ffff88803273e000)
[  169.947412][ T7197] 
[  169.949763][ T7197] The buggy address belongs to the physical page:
[  169.956210][ T7197] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32738
[  169.965254][ T7197] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  169.973865][ T7197] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  169.981529][ T7197] page_type: f5(slab)
[  169.985617][ T7197] raw: 00fff00000000040 ffff88801a027280 ffffea0000bb7a00 0000000000000002
[  169.994218][ T7197] raw: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[  170.002900][ T7197] head: 00fff00000000040 ffff88801a027280 ffffea0000bb7a00 0000000000000002
[  170.011622][ T7197] head: 0000000000000000 0000000080020002 00000000f5000000 0000000000000000
[  170.020486][ T7197] head: 00fff00000000003 ffffea0000c9ce01 00000000ffffffff 00000000ffffffff
[  170.029177][ T7197] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  170.038031][ T7197] page dumped because: kasan: bad access detected
[  170.044659][ T7197] page_owner tracks the page as allocated
[  170.050575][ T7197] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5489, tgid 5489 (start-stop-daem), ts 46547104514, free_ts 46407838584
[  170.071616][ T7197]  post_alloc_hook+0x234/0x290
[  170.076452][ T7197]  get_page_from_freelist+0x2365/0x2440
[  170.082209][ T7197]  __alloc_frozen_pages_noprof+0x181/0x370
[  170.088123][ T7197]  alloc_pages_mpol+0x232/0x4a0
[  170.093265][ T7197]  allocate_slab+0x96/0x350
[  170.097815][ T7197]  ___slab_alloc+0xf56/0x1990
[  170.102527][ T7197]  __slab_alloc+0x65/0x100
[  170.107126][ T7197]  __kmalloc_cache_noprof+0x411/0x6f0
[  170.112697][ T7197]  tomoyo_init_log+0x111f/0x1f70
[  170.117755][ T7197]  tomoyo_supervisor+0x340/0x1480
[  170.122814][ T7197]  tomoyo_env_perm+0x149/0x1e0
[  170.127784][ T7197]  tomoyo_find_next_domain+0x15cf/0x1aa0
[  170.133622][ T7197]  tomoyo_bprm_check_security+0x11c/0x180
[  170.139552][ T7197]  security_bprm_check+0x89/0x270
[  170.144621][ T7197]  bprm_execve+0x8ee/0x1450
[  170.149152][ T7197]  do_execveat_common+0x510/0x6a0
[  170.154206][ T7197] page last free pid 5486 tgid 5486 stack trace:
[  170.160724][ T7197]  __free_frozen_pages+0xbc4/0xd30
[  170.166148][ T7197]  __put_partials+0x146/0x170
[  170.170954][ T7197]  put_cpu_partial+0x1f2/0x2e0
[  170.175833][ T7197]  __slab_free+0x2b9/0x390
[  170.180278][ T7197]  qlist_free_all+0x97/0x140
[  170.184899][ T7197]  kasan_quarantine_reduce+0x148/0x160
[  170.190403][ T7197]  __kasan_slab_alloc+0x22/0x80
[  170.196516][ T7197]  __kmalloc_noprof+0x3c3/0x7f0
[  170.203757][ T7197]  tomoyo_realpath_from_path+0xe3/0x5d0
[  170.211230][ T7197]  tomoyo_path_perm+0x213/0x4b0
[  170.216477][ T7197]  security_inode_getattr+0x12f/0x330
[  170.221980][ T7197]  __x64_sys_newfstat+0xfc/0x200
[  170.227315][ T7197]  do_syscall_64+0xfa/0xfa0
[  170.231893][ T7197]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.237906][ T7197] 
[  170.240324][ T7197] Memory state around the buggy address:
[  170.246144][ T7197]  ffff88803273c600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  170.254403][ T7197]  ffff88803273c680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  170.262576][ T7197] >ffff88803273c700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  170.270930][ T7197]                                            ^
[  170.277097][ T7197]  ffff88803273c780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  170.285168][ T7197]  ffff88803273c800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  170.293237][ T7197] ==================================================================
[  170.303061][ T5887] em28xx 1-1:0.132: Closing input extension
[  170.337509][ T7197] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  170.344751][ T7197] CPU: 0 UID: 0 PID: 7197 Comm: v4l_id Not tainted syzkaller #0 PREEMPT(full) 
[  170.353698][ T7197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  170.363760][ T7197] Call Trace:
[  170.367062][ T7197]  <TASK>
[  170.370010][ T7197]  dump_stack_lvl+0x99/0x250
[  170.374615][ T7197]  ? __asan_memcpy+0x40/0x70
[  170.379211][ T7197]  ? __pfx_dump_stack_lvl+0x10/0x10
[  170.384428][ T7197]  ? __pfx__printk+0x10/0x10
[  170.389181][ T7197]  vpanic+0x237/0x6d0
[  170.393169][ T7197]  ? __pfx_vpanic+0x10/0x10
[  170.397675][ T7197]  ? preempt_schedule+0xae/0xc0
[  170.402638][ T7197]  ? __pfx_preempt_schedule+0x10/0x10
[  170.408006][ T7197]  panic+0xb9/0xc0
[  170.411829][ T7197]  ? __pfx_panic+0x10/0x10
[  170.416260][ T7197]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  170.422161][ T7197]  ? is_module_address+0x17/0xf0
[  170.427153][ T7197]  ? v4l2_fh_open+0xac/0x420
[  170.431751][ T7197]  check_panic_on_warn+0x89/0xb0
[  170.436873][ T7197]  ? v4l2_fh_open+0xac/0x420
[  170.441517][ T7197]  end_report+0x78/0x160
[  170.445751][ T7197]  kasan_report+0x129/0x150
[  170.450265][ T7197]  ? v4l2_fh_open+0xac/0x420
[  170.454932][ T7197]  v4l2_fh_open+0xac/0x420
[  170.459338][ T7197]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  170.465418][ T7197]  em28xx_v4l2_open+0x157/0x9a0
[  170.470320][ T7197]  v4l2_open+0x1bf/0x3a0
[  170.474577][ T7197]  chrdev_open+0x4cc/0x5e0
[  170.478995][ T7197]  ? __pfx_chrdev_open+0x10/0x10
[  170.483918][ T7197]  ? fsnotify_open_perm_and_set_mode+0x113/0x610
[  170.490329][ T7197]  ? __pfx_chrdev_open+0x10/0x10
[  170.495281][ T7197]  do_dentry_open+0x953/0x13f0
[  170.500046][ T7197]  vfs_open+0x3b/0x340
[  170.504103][ T7197]  ? path_openat+0x2ecd/0x3830
[  170.508856][ T7197]  path_openat+0x2ee5/0x3830
[  170.513520][ T7197]  ? __pfx_path_openat+0x10/0x10
[  170.518479][ T7197]  do_filp_open+0x1fa/0x410
[  170.522985][ T7197]  ? __lock_acquire+0xab9/0xd20
[  170.527827][ T7197]  ? __pfx_do_filp_open+0x10/0x10
[  170.532867][ T7197]  ? _raw_spin_unlock+0x28/0x50
[  170.537733][ T7197]  ? alloc_fd+0x64c/0x6c0
[  170.542064][ T7197]  do_sys_openat2+0x121/0x1c0
[  170.546733][ T7197]  ? __pfx_do_sys_openat2+0x10/0x10
[  170.551932][ T7197]  ? exc_page_fault+0x82/0x100
[  170.556704][ T7197]  ? do_user_addr_fault+0xc85/0x1380
[  170.561978][ T7197]  __x64_sys_openat+0x138/0x170
[  170.566820][ T7197]  do_syscall_64+0xfa/0xfa0
[  170.571324][ T7197]  ? lockdep_hardirqs_on+0x9c/0x150
[  170.576548][ T7197]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.582613][ T7197]  ? clear_bhb_loop+0x60/0xb0
[  170.587281][ T7197]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.593158][ T7197] RIP: 0033:0x7f199a0a7407
[  170.597561][ T7197] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  170.617414][ T7197] RSP: 002b:00007ffdb2828620 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  170.625817][ T7197] RAX: ffffffffffffffda RBX: 00007f199a824880 RCX: 00007f199a0a7407
[  170.633881][ T7197] RDX: 0000000000000000 RSI: 00007ffdb2829f1b RDI: ffffffffffffff9c
[  170.641943][ T7197] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  170.649918][ T7197] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000
[  170.658154][ T7197] R13: 00007ffdb2828870 R14: 00007f199a98b000 R15: 000055bcbe3784d8
[  170.666287][ T7197]  </TASK>
[  170.669862][ T7197] Kernel Offset: disabled
[  170.674263][ T7197] Rebooting in 86400 seconds..