last executing test programs:

1m20.115416118s ago: executing program 0 (id=1436):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x9)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x44, r3, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x44}, 0x1, 0xfc00, 0x0, 0x600488d0}, 0x0)

1m19.845702598s ago: executing program 0 (id=1439):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x1178}], 0x1, 0x0, 0x0, 0x10004800}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0xe4)

1m19.146849765s ago: executing program 0 (id=1442):
r0 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) (async)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f00000001c0)={0x1, 0x5}) (async)
syz_open_dev$usbmon(&(0x7f0000000140), 0x4, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) (async)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async)
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000080)={0xb8d9, 0x3231564e, 0x1, @discrete={0x52c, 0x3}}) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
sendfile(r1, r1, 0x0, 0x7ffff000)

1m17.91441963s ago: executing program 0 (id=1447):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000200)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@cipso={0x86, 0x8, 0x3400, [{0x5, 0x2}]}]}}, {0x4e20, 0x4e23, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x8}}}}}}}, 0x46)

1m17.162892589s ago: executing program 0 (id=1454):
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x6, 'ip6erspan0\x00', {0x1}, 0x105})
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r2=>0x0})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000808000400050000000800010002000000240003"], 0x7c}}, 0x0)

1m16.914332413s ago: executing program 0 (id=1455):
io_cancel(0x0, 0x0, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r4=>0x0})
r5 = socket$inet(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='pimreg\x00', 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10)
r6 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00')
read$FUSE(r6, &(0x7f0000005e80)={0x2020}, 0x2049)
ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000200)={0xc, r4})
ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r3, 0x3b71, &(0x7f00000001c0)={0x20, 0x0, 0x0, 0xfffffffffffffffa, 0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x13, 0x4)
fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
setreuid(0x0, r7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r3, 0x2000)

1m1.635340501s ago: executing program 32 (id=1455):
io_cancel(0x0, 0x0, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r4=>0x0})
r5 = socket$inet(0x2, 0x1, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='pimreg\x00', 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
connect$inet(r5, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10)
r6 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00')
read$FUSE(r6, &(0x7f0000005e80)={0x2020}, 0x2049)
ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000200)={0xc, r4})
ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r3, 0x3b71, &(0x7f00000001c0)={0x20, 0x0, 0x0, 0xfffffffffffffffa, 0xffffffffffffffff})
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x13, 0x4)
fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
setreuid(0x0, r7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r3, 0x2000)

53.774638498s ago: executing program 1 (id=1538):
r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x1)
fchdir(r1)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xc0800, &(0x7f0000000340)={[{@uuid_auto}]})
prctl$PR_SET_SYSCALL_USER_DISPATCH_OFF(0x3b, 0x0)
rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000000)={0x2e, 0x1, 0x100})
mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x4400, 0x0)

53.246628232s ago: executing program 1 (id=1539):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xc3a51000)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) (async)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000170100000300000001"], 0x18}], 0x1, 0x0)
r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
r6 = syz_usb_connect$uac1(0x3, 0xd4, &(0x7f0000001140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc2, 0x3, 0x1, 0x10, 0x90, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1000, 0x9}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x205, 0x5, 0xf9, 0x0, 0xed, 0x81}, @selector_unit={0xb, 0x24, 0x5, 0x4, 0xc, "1dbde60c290d"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x4, 0x1, 0x72, 0x6, "250441ad734129ff"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x5, 0x1001}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0xd, 0x0, 0x8c, "8cbe9e60d9de"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x6, 0x3, 0x0, 0x9, "3ed0b42d242536"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0x1, 0xc, {0x7, 0x25, 0x1, 0x1, 0x9, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x6, 0x2, 0x6, "42208bb1"}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x3, 0x380, 0xb4, "ff"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xdd, 0x8, 0x3, {0x7, 0x25, 0x1, 0x0, 0x9, 0x1}}}}}}}]}}, &(0x7f0000001300)={0xa, &(0x7f0000001240)={0xa, 0x6, 0x250, 0x3, 0xa, 0x0, 0x40, 0x3e}, 0xc, &(0x7f0000001280)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x0, 0x7fff}]}, 0x1, [{0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x843}}]})
syz_usb_control_io$uac1(r6, &(0x7f0000001480)={0x14, &(0x7f0000001340)={0x40, 0x65, 0xc3, {0xc3, 0x9, "c585ac472b23f1b4546e2274a388d8f46f1084e7cde58555ad2c296cebb42c1c5d85c6f601b5e5e789e8893187557c6c0bb01ef3071a52e3f226b14d550187362e7aec4873ce5b31e905cbf655f4a628d7403803d70513aca9fac55cb96310844c56b76da3f08bfdbbb8f7f0ff4e1d867dd7e27847c743ce835e6e245fb84b228799739581a1d5b352b18a5cd5450eda9d8c74841244ebc0276de8f08bb1fce6f9f3983472bb578edd98791971a426b9e465d568dbe2c4a574792ba020ed4bfa17"}}, &(0x7f0000001440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x820}}}, &(0x7f0000001740)={0x44, &(0x7f00000014c0)={0x40, 0x1, 0xb1, "ddd581dc106c9147a847a804a9712a1cb2fc06069237f1dccfd18b65fb286ef8746efbe17d1ce0a28bac30c29b32b65e06ff470a6bd8e6f897e82fe0aed7c6ccd75a41ae9a619730ce4a639f0426df1618ccccbfbe5177677e2260a4464c8936a171f024cf704157b6b7b14e0730b460a07b5b7ce30b57fbcc9f99b29bf265d9d19a960e254ea6d756eedf7022a6e1bc83f458efbff22296e97701715d2a99a7eb5abe4b3bf310574cc73b76df21527b87"}, &(0x7f0000001580)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000015c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000001600)={0x20, 0x81, 0x1, '`'}, &(0x7f0000001640)={0x20, 0x82, 0x2, "3086"}, &(0x7f0000001680)={0x20, 0x83, 0x1, "9e"}, &(0x7f00000016c0)={0x20, 0x84, 0x4, "38587216"}, &(0x7f0000001700)={0x20, 0x85, 0x3, "bde5b8"}})
ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2})
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000180)=@multiplanar_userptr={0x7, 0xa, 0x4, 0x0, 0x89, {0x0, 0xea60}, {0x2, 0x0, 0xc1, 0x6a, 0xc, 0x5, "a8edc511"}, 0xfff, 0x2, {&(0x7f0000000100)=[{0x8000, 0xa000, {0x0}, 0xa}, {0x9fb, 0xd4, {0x0}, 0x100d}]}, 0x5}) (async)
ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000180)=@multiplanar_userptr={0x7, 0xa, 0x4, 0x0, 0x89, {0x0, 0xea60}, {0x2, 0x0, 0xc1, 0x6a, 0xc, 0x5, "a8edc511"}, 0xfff, 0x2, {&(0x7f0000000100)=[{0x8000, 0xa000, {0x0}, 0xa}, {0x9fb, 0xd4, {0x0}, 0x100d}]}, 0x5})
syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r3) (async)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r3)
r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000001080)={<r9=>0x0, <r10=>0x0})
ioctl$vim2m_VIDIOC_QUERYBUF(r8, 0xc0585609, &(0x7f00000010c0)=@mmap={0x0, 0x1, 0x4, 0x2, 0x7fffffff, {r9, r10/1000+10000}, {0x2, 0x1, 0x4, 0x7, 0x81, 0xe, "f2cfdb27"}, 0x1}) (async)
ioctl$vim2m_VIDIOC_QUERYBUF(r8, 0xc0585609, &(0x7f00000010c0)=@mmap={0x0, 0x1, 0x4, 0x2, 0x7fffffff, {r9, r10/1000+10000}, {0x2, 0x1, 0x4, 0x7, 0x81, 0xe, "f2cfdb27"}, 0x1})
r11 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x640000, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r11, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x1c, r7, 0x100, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000005}, 0x4008040)
recvmmsg(r3, &(0x7f0000002300)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000900)=""/82, 0x52}], 0x1}, 0x8000007f}], 0x1, 0x11102, 0x0) (async)
recvmmsg(r3, &(0x7f0000002300)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000900)=""/82, 0x52}], 0x1}, 0x8000007f}], 0x1, 0x11102, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1) (async)
r12 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r13 = dup(r12)
write$UHID_INPUT(r13, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) (async)
write$UHID_INPUT(r13, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006)
socket$pppoe(0x18, 0x1, 0x0) (async)
r14 = socket$pppoe(0x18, 0x1, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r11, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0xc0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0)
ioctl$EXT4_IOC_SETFSUUID(r14, 0x4008662c, &(0x7f0000000040)={0x10, 0x0, "46eb817c5befda638ac63125cb1170db"})
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r7, 0x300, 0x70bd29, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x13, 0x9, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x44082) (async)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r7, 0x300, 0x70bd29, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x13, 0x9, @udp='udp:syz2\x00'}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x44082)
setsockopt$sock_int(r2, 0x1, 0x2b, &(0x7f0000000080)=0x80, 0x4) (async)
setsockopt$sock_int(r2, 0x1, 0x2b, &(0x7f0000000080)=0x80, 0x4)

50.474476667s ago: executing program 2 (id=1546):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2c000000010a050000000000000000000af7ff080900012173797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000)

50.289160215s ago: executing program 2 (id=1547):
sendmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="817bb97cdac2f8f819447aa4a50c293af36b43cab2641b7753df26944b52221c709e64446077", 0x26}], 0x1}, 0x24040050)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000100)={0x9, &(0x7f0000000400)=[{@fixed}, {}, {@fixed}, {}, {}, {}, {@fixed}, {@none}, {@fixed}]})
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x1f0, @none, 0x1, 0xa13153fd332a494a}, 0xe)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x1c}}, 0x20000014)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0xb0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0})
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="0e00010002"], 0x8)
recvmmsg(r4, &(0x7f0000007440)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000140)=""/53, 0x35}], 0x1}, 0x3ff}], 0x1, 0x40012040, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

50.164766748s ago: executing program 3 (id=1548):
sendmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="817bb97cdac2f8f819447aa4a50c293af36b43cab2641b7753df26944b52221c709e644460775e", 0x27}], 0x1}, 0x24040050)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000100)={0x0, &(0x7f0000000400)})
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x1f0, @none, 0x1, 0xa13153fd332a494a}, 0xe)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"])
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x1c}}, 0x20000014)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0xb0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0})
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="0e00010002"], 0x8)
recvmmsg(r4, &(0x7f0000007440)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000140)=""/53, 0x35}], 0x1}, 0x3ff}], 0x1, 0x40012040, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

49.814426611s ago: executing program 1 (id=1549):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='pagemap\x00')
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]})
socket$inet(0x2, 0x1, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000b12000/0x4000)=nil, 0x4000, 0x7, 0x80010, r0, 0x8ee4a000)
memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7)
futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)

49.605612962s ago: executing program 2 (id=1550):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f0000000240)=ANY=[@ANYRES8=r2, @ANYRES8=0x0, @ANYBLOB="1e686fb37cbed23fa119ee1c1b0880112afa97983d36eaf033cec3323be0e63f4c29d768d926ffb746cf4e8d737650328a386da798111cf04b9d1f14ab2c96e3d06d4b839446f4af88590e6476120061e7b99165aaf351a18d303f9a4901dd94f085411665cfc714945a02a1141ea5f69de48abaf1e150344c1a293ee7e2640a0b", @ANYRESDEC=r2])
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100))
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r4, r3, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$SNDRV_TIMER_IOCTL_CREATE(r5, 0xc02054a5, &(0x7f00000000c0)={0xfffffffffffffff7, r1, 'id0\x00'})
mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f00000001c0)={[{@gid}]})
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0)

49.397082911s ago: executing program 2 (id=1551):
r0 = socket$inet6(0xa, 0x5, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
sendmmsg$sock(r1, &(0x7f0000000000)=[{{&(0x7f0000000640)=@tipc=@name={0x1e, 0x2, 0x1, {{0x41}}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}}], 0x1, 0x4)
close(0x3)
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001040)=ANY=[@ANYBLOB="200000002b000b0000000000000000000a0000000c0001"], 0x20}}, 0x8000)
connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000040)={0x3, 'batadv_slave_1\x00', {0x2}, 0xc})
bind$netrom(r4, &(0x7f00000004c0)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)
listen(r4, 0x80)
accept$netrom(r4, 0x0, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x2, 0x0)
write$FUSE_NOTIFY_STORE(r5, &(0x7f00000002c0)=ANY=[], 0x28)
r6 = socket$packet(0x11, 0x2, 0x300)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
bind$packet(r6, &(0x7f0000000000)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendmsg$nl_xfrm(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000001080)=@newsa={0x1168, 0x10, 0x4, 0x70bd2d, 0x25dfdbff, {{@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in6=@private1, 0x4e23, 0x0, 0x4e23, 0x5, 0xa, 0x20, 0x20, 0xc, r8, 0xffffffffffffffff}, {@in6=@mcast2, 0x4d4, 0xff}, @in6=@dev={0xfe, 0x80, '\x00', 0x43}, {0x7, 0x7f5, 0xfffffffffffffffd, 0x1ff, 0x80, 0x4, 0x8, 0x1}, {0x0, 0x2, 0x7, 0x2}, {0x80000001, 0x7}, 0x70bd27, 0x0, 0x2, 0x1, 0xa, 0x1}, [@algo_crypt={0x1048, 0x2, {{'pcbc(fcrypt)\x00'}, 0x8000, "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"}}, @srcaddr={0x14, 0xd, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}, @encap={0x1c, 0x4, {0x1, 0x4e23, 0x4e20, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}}}]}, 0x1168}, 0x1, 0x0, 0x0, 0x4}, 0x48001)
mount$fuse(0x0, 0x0, 0x0, 0x1, 0x0)
close(0x3)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01')
r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x100000001, 0x2)
r10 = socket$isdn(0x22, 0x3, 0x22)
getsockopt$MISDN_TIME_STAMP(r10, 0x0, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
ioctl$vim2m_VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f00000003c0)={0x2c, 0x1, 0x0, "a6892d080000000e5dedae4d40137137c17a5ac1f393f65946a68dd1f8822c88", 0x30314742})
ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'ip6gre0\x00', 0x6})

49.210147039s ago: executing program 3 (id=1552):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0x2, 0x3}, 0x6)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00')
preadv(r2, &(0x7f0000000080)=[{&(0x7f0000003240)=""/4102, 0xfffffccc}], 0x1, 0xf6f, 0x7)
sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000004280)=ANY=[@ANYBLOB="b4110000", @ANYRES16, @ANYBLOB="00032cbd7000fedbdf250f0000005400098008000100ff0300000800010001000000080002000400000008000200bb000000080001000700000008000100ff01000008000100e608000008000100b5ffffff08000200ff0f000008000200040000003c0004801300010062726f6164636173742d6c696e6b0000240007800800020001040000080004007c4300000800040008000000080002007f00000014000380080002000d00000008000300090000001c0002800800010001000000080002000104000008000200ff0f0000140001800e00010069623a64756d6d793000000010100680080006000200000004100300403b64f10884bb8af9dec102d224b56e5a35901192f18a7e156696d9b132ae1269b4ac922bcc45f2cc6adefc51e8ee8fed168b28d02a1459d566f499200eb3f64f8813aaff7aa61eb22ccd375f0b0801fb4ae8fffab64e3b2e51101158e8a667584329cabf6142fef742f726c197ccd9680a0d183b78b4ea9daba3b767d5db62381c9192cb3c06fef7fe3dbd34d925a965046e45ae9e6dc93e2f00e386c1d1a513eb1f9ef934889aca53324d50aaf0573cd390dc188c2e662827382d8db232aba5b680b174718c5fc7e52f0f6ef574631f56ea7c0d2aac546543116153502a055c2c55b72b7ec8b7aa2ce1d5d6cf7919eb294ced0a441d742fdf44e93c3d9a1d0af6a2f6a168c5bb0c6ca4a6d7d80d580eba6cbd38092af1235ac614592002a3a86490093ac8ec93bf2f1d968e5dd5a36f6e001a5abc77731f2131ccfcf9ed85e95b1f114224ab7dc62300059c9aafaf1b33d11d6904b15833ccebad66003ed88becfe9da62233783464f9ebc28bd6c372c8d74f714d0426c6fa85514dab929096f272474e1734b536ed9aa4341f8d78f340bcc89f8b962a1182fdca1336ed902caaa92e4b3a4f925df4faa576341db97beb0136ed284439eead185333a347f08400b222c439e6e68b627fadcd35d750084aef3473c51cc756a06d8a064e2cce2007323f564f67cade94fa1cbcdf32e6ba29033deb30a1915560a21b09dbb9811b7cb567a8fc15697443e256591f15c7fcb1133330926c9279998362b0961bfca23d760b923187dbb7ca277851359b475c0115e788b3abcec7698af4e3f63ae669b1f34ef6dbad85b4a9b13eaaeec8dbc0a33ff6d1869fb59694a8cda7ab1cefeb7f24d9a2248eab37f4cfbed11c6e990d0200000000000000cb3eab1d719d40781f5b021cb640d191a5f7d73a3c3a80a6221a43726271091c2b86bbb2e715dc0007ebbb4346a94956deb95dd51b37e9db14aaa4e499757de36e06528e1d9b76fda4b6c19730263c7ce5d4daea007db0fb9218ed9a792484912e19e682a9980f6c99dcba707ac313c6945da2632cf792d28f4de1ddc319a6fade7780de8e8446d1d9c8fc7173cb6be487adf2c6f932f655ac58cdf4d6633d91ad716f098bcaba7e7d6388a4bdf23377a9a9f15724f93b528dba83363f86ec1ec82c7bc87b3bf774b2b94165506b56faa83f60c45d102610b59ffd93134fdd64f893ed7b440bd2d2629ae15f9641ab223b3a80a5b5032ba9573d5de2cc15b106fd0829ded3bf17fd9e2538597bc45f78fc61cc09f3150caf783ab5bf942a5ff3c271f3d027c124dbc6335c671de0382d1c31225562973010d12454c0f59edd16428c205e14f3c3d6dab250c61812aae2dc59c8dd64e00e3fd4f4270e9c57ed37013722857d9014a26ed96705cf2e5b712cd24d0610218c5028627c4507a4d596c45e70d851bc233d7cbd981b2c56779bf484eeb5fc480031d210b525b6adb919fddbe0960deab7f607ce1d07dbbcee9f105a3ea5e0dbd2046db1d64dc18448d4e533af4084f31a4385cc10d39e0a658019e5e85bfa62f52177efa47106e2c0b69cc3483c7ddf2ca2c61d47faa97dc420474fec0c910c0884e696cb74cb29bb45a59deb16c1b1a6692063d08e6aa7cc7c2e75595f791b1c191286adeb04498bc902f044c343da7ebea2c730906d19df09a4011ce1980382c71bbd04e306d376ccd5e9d8ce725183b034abc6784ea1d5d1e5005d3cccae01dfd46b41806661f0752087773a7ba5582e9ad710de4e6de8932ed8715ec0fd3736bcb14cc976d94a87f8e885351bed22943ce4a6c2ef50fab44f22348c103a9838e720a13291aa39e5a147120b517245a5e893a7e64bf2299fedd7c5e013bde5490ff569962c5f4e1cb9f6dde83df0486ce027225011d54bdc328897dc3717c6a99066aad4ed450444f899c476e04033cfe97460183c72c747638f89426f7334d8fb94121d5de60e7191b65877d74c8a86e86e3b8966ffa064ef97f41010fd043324a49a101556c694a9a93ed59b718fced254ebfe575a44330863b5a2d469eb335da05a44e04a7ed89c927d60ed6bd5e562fc1c9b25b2f5b207568f8dd29efbdbee918e938d00a7d3d90fdf31fbe4aba0040cc4bc45c6daedd6ed916b4f8754d1684f97a408ae60ab0521a8991fe4d8fe6a19196aaaae0767b81b3de7cd4cfdf4b890a49c61cc663c406f80497fd31172ea37e6b9453c8c163e6a2477ec5fb11a990fa2433d39292bd60f5c43712860542376fa39c587d17bef07fcee09ca4170cf5d6d29f4e66b0f3ba261e8985b5442662982d72a64e0f9c8e64fc0bfe07206df9f9916c5f68bc4234425972c276a3ca7189bedda4b861fccd05c3953a950f738bebcfc0eaed386989fd779042a4189003578391a7ad7df7a91053937909207bd77c5f2e01711e0f751a03281000bb151a49a03c2a46bc527889e0e6df6f0bc7b2d70e7c4e0f89b4ff26c513f78081c3ebe20f83b597dd548336e594d17fdbe26b2f8c905d090ddde1bb1d445cd46f69899e004bee8b704ac2103419da2acf3bb6ffc203e207bdc5090eab03950fc319f7f08f33d379e4c3d9eab4df781b3e5de2bb84d1a36b2ad9eb6a4a01c448e4cf1aaedf1b026cc5803476d1d41a95e1c0670407113100fc963743c18db2c5e7d55751f5c7aef9aba316f2e712331933b62085c148163498140dbf2a03304855a9a8685e509ef95799ce82539551270793110afc84d29684016aab899299b15311f5a0fcdd2598b050e2f7b0f90cad4d2efab09657f1ebed0793e08e57a6b607c7b1e900264a85f747081940fa6b5d8064563c2f7ead016fc7c7f00765af87cd82ab7b6d6e66545e73244037d4e43ac2cc0d9ce354f01ee267f86090acadce5cf1212b150244904984093be853e3001a396f2dec04f3cc054962982f1ac73870ff0d70b21d334d28233e01ebc4e342bebc32e1396f3e40a785c1ccfa731a221b8f2a3e7fd14f423899a2f21f4287115f69b894ff69f10d1d17aace08d0219a7c9361fdbea201a77c7e5a05c0964d820170df9128129e02cdb2ab1b8ae4534a47d7249c1a2500e7a88eb6552de00e41e1f6a3dcac31e331a6b89f92c9661b56694f02c4974501ea457471398c2646b0ce58e8c8404b43d68c6a86f18146ae50c3bfc728233ca5f1786b7c8fec7c5ec72401b143556f9f06c82b99618c13610f27f1fe1509d4371f0e2cdd8b8541fabf0b497e6b4c485baebdd870abd07a790ccad613913e9b026e169b784bf419b5de3a347d8049267352afceae0c63f854ae2524831f6a065ba02e7dd3537efe79c2f033c61bfcf02cbcf2275a0315d3557506aaae4264ff070ba52abcb751cbe2e61486aeb6cedcea4d102a44c0467c26e68ae907c8d0ddf57157ef37eed7d30ae0d62383340190b9bf7c858cf51955a610ac09716ec4fb8c72d6979d6feaf30f81a82a82a97dcd803bc193e90056e238e3010c9572e7aeaeb8b1eb2f7166d40c0d26c05309e5c845fe807cb832b73eec2e9615baee9fef44ff79935d7e13c45fd206f435986049713e15861a96931cc4b470dc7a1f93e458e6a086bdecf6ed4a78a2490cea99ec6abb1068d8572e2ef35dc0f0ea6b4861d11bffa0d02194ed27c62bc586b9f92076ef65aa7c06939adfbd95ec1d7db693ac7aa9b7d7ff06cf55e5128b60a29e0717cb77f67ddab92e764745abbf338a63547b30266791d80a0e2831143791a7551df973ad9b5d540f9a4fe745a1c3b9036d33d129562d14298c311fea16e3ddc4a9fabaca7756f99f1b7bdfe3a4355134dde1e2aa8768ba0ca854dcdeeaaade034c23f8985487d305252b00d269028abd1fc8c574960842de03985cc99184ecd8bbbbd05ca93851887e789088ce01bbe76fc26cda8288d904b0fd9f75a6d3012de202a224aee852671ea7b93b905fbd713129ccdbdb4886916eb6ab14a9165187260faf301977531233a3b7b50da43f9bc6a03f8192548d64dfb1a6b9b93ab68c386d7676a25168333deb75e2edb9e69f11ff5ae22a6882f261f3cf573f72dd45aa749633100000000e7de700a07a86c52615f84571f32cb3dd8180b406fb8bd6020253a0d2480c5106d8fe54b5762ca9c32484fbe99f6709ddc47454c5eaea2c661cf27f35ba2578d7a165930970ea2974d8788e2df65573620bbfa5ffa1358df1d0093cadad3c0f71beff7b214fa9d51ef15eb54fb653c5eb49a1bf8927df750a3fe30a34dc7479b48e7154827262d24a139b083b811b5c7954ac23ccdf9265a6dc47e9cf9bde7f255d0700d47bde8d90c89a3f8499eb61e8b6c23be51e2d3dacf2bda5dc323abf847fb3409780b4f04fd7eadea1805b5f2f5a740acef36c859a472cf7c45983798365c761984919fb8bb1f0d3e4b615c81544efbb7b5df367dd37757578cd8547a6d2c03976d357363c4afb442010414cd070b6f3fb3a56e180367ec0aca0121011ae727b2f5f6d6cf1f1b323d27735341722ae850eae96939938c91473b80d43d0c4b091d28c8e86970fd4da6e3c897b5dea3cc6459787f1e4eccee668e714dbbaa7a76ee97a0489f9320670ce75b74a37b2c3370cc8a4b7ce829efa0293b5fe05d28f4373323b4ca8db694937490600bad478984850471cdd04ee126f351026d8593850691e1470478986df52899876d3f23be1bba28f1ab19950fec767af008cf9893b4e7fcb4cf6626743be2f003e47e14954c5846970bc10349416f308c9d7bfe3420c7adadc47f721af70ad5e447722eb7e3499770bfe2de6afbc472d246fce80800b28cf24819a0350bdff5ef3fe51f7794fc85a8d35db7b14cb732284f09825c4982ad61d91bfc811152a04f1d1c8583ba5e5eb95ca687855753aaa731f8d159c3ef53db892e41af969757f9c3a86caf004bfc228fb3d42ee3e70a457f944fadd40dc5cae07ed2240e985aaf25d4b6bbe6a6550169c4ce2d8b8dac6be23360778ad297267dc537e788969ad93c28a37553e6d6ea1599b5aaf036cb1dda2107772092289bbe545830c18b4a8823287ff37f19e9c165040b6248c9e991a25c36d5d3155879e1c104ea0a52b3d9a4a3eb912531de4d58cd97c9c103298c4bcc935dbd73866b39457287015225f721e73e3a021aed071b88fe0f13b4f1c73a17e23bffa032707c4986d6b4997a905eb320a659e38666c173f4fef82e8bee373b1928efa04c89a6510aa2ca516d241df74a2e4b804b07064bea79c6aa8a39867a929f074bfd16757cb3c5d1b9b02cfb80f3880ea325d1ae0186993b6fecd267f0ab031c36be5fe63f68172fe8fbd84c8a038f61797cdece486adcee10ba5bc90cfc69b0dc7d242184f70b54fee0eede0d1bb162743cd0b90ab547105b3a06507831c09d1bce405b13e75c8db8cd81fc7eee6cd0991247ea8b43bfbe33d806339d9f6d8a20618954856b184aa33d8c0ccf90a6a25e60d5620ab0a41446b19436cd9823c449e5a8da0e622b3d5263353a925517e3c1e4533b8727987a5355927cb56d44cce361f180b4f6f338ad3c5f075dd5fef62792de8a1258734d2e8a8360f746d48d569755cde8e82fe0e9316f6c4bd166803638584ba99b4b12fade0aa01c2c6bf5f92e0f867965e2839c8ed1abb43176e99ebbbdf953e6af8a438cf629e388f43b9b956eea4e379178315e2cb886673f00a2de91bd9ef1b4ce62104be2cfe74c120eda55facbc97b2f8f5fd7784f8fb6c70e95dacba80a4f5fffa512e6af66dfa0b64fc5fffab94bdf6854fdaebd27310b9a3e5df32f41cb4398fd4c15262b1400068004000200040005000400020004000200a80004802c00078008000400720d00000800010015000000080001001500000008000200e6718d3908000300800000002c0007800800040003000000080004000600000008000300ff7f00000800020000020000080003007e0000000c00078008000300010000003c00078008000100060000000800010003000000080004001cb7ffff080002000101000008000300780000000800040001000000080003000200000004000780fdcb0e165a6a330dbf3ff94c62a460e1faae4aad4ce4d5077424037d503311aa77953efdbf6f4cb6eb147efe858feffc963fb10f91188c50be5adcf8c456abf0f4ca6fb65f222311e7d581fd8e"], 0x11b4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
mount$cgroup(0x0, 0x0, &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]})
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010800000000000000000c00000008000300", @ANYRES32=r8, @ANYBLOB="0a00060008021100000100003000508011000a004abee339084eeef16f162471f4000000080007"], 0x58}}, 0x800)
sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="94000000", @ANYRES16=r5, @ANYBLOB="04002dbd7000fddbdf257c00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900030000007c0000000a00060008021100000100000a000600080211000008021100000000000a00060008021100000100000a00060008021100000000000a00060008021100000100000a00060008021100000000000a000600ffffffffffff00000a000600ffffffffffff0000"], 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x24000080)

48.80735812s ago: executing program 3 (id=1553):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x90, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x0, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x0, 0x1, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_SIZE={0xa, 0x17, 0x1, 0x0, 0x800}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xc5}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL, @IPSET_ATTR_FAMILY={0x0, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL, @IPSET_ATTR_FAMILY={0x0, 0x5, 0x1}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x0, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_FAMILY={0x0, 0x5, 0x1}]}, 0x90}}, 0x80)
socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'batadv_slave_0\x00', @remote})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000840)={0x1, 0x0, @pic={0x69, 0xfe, 0xe1, 0x4, 0x7, 0xd9, 0x0, 0x1, 0xfb, 0x8, 0xc, 0x0, 0x1, 0x9, 0x58, 0x5}})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x6a, 0x0, 0x0, 0x200, 0x0, 0x0, 0x6c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x10008, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
r5 = dup(r1)
write$UHID_INPUT(r5, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa)
write$tun(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="0800880006000600000014000000450a0014006600140b32907864010102ffffffff"], 0x22)

48.780311195s ago: executing program 1 (id=1554):
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000800)="2fae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dea658eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7701448658864b429e9472edfeffbf34d6e7c78f4aa73c0", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000240)}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b0d", 0x16}, {&(0x7f00000000c0)="63686a201e1333f9f30021", 0xb}], 0x5, 0x0, 0x0, 0x900}}], 0x1, 0x4044040)

48.638542736s ago: executing program 4 (id=1512):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], 0x1178}], 0x1, 0x0, 0x0, 0x10004800}, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (fail_nth: 6)

48.498343878s ago: executing program 1 (id=1555):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f00000007c0)={'filter\x00', 0x1000, "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"}, &(0x7f00000002c0)=0x1024)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0x40505330, &(0x7f0000000940)={{0xee}})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r5 = dup3(r4, r2, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x50, 0x2, 0x23}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x48}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})
sendmmsg$inet(r0, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="4fa3176756113369df8b913f2c0f5bc12e941d0000", 0x15}, {&(0x7f0000000180)="55c0cc0ba6f3b908ecb5c6e93e4dc70ed9c875dd444569fab05e32a08e71d1c480fa1ada9e6f952dea418e2eb2dd8dcdd18f82c2be42e92405d2eccae94e713594f13ebfe37be3cb7ce0eb237d63f25744e42baf027055a65359c121788ba610f7df23b902755c5771d93efedd8252aca1dda5efe1493ec0a5a9e965666d1afe33b384953a9102b3f1e446aea391ccff253fccc951d4091f1d6b69faee7e7d4b669c48b70ef01c3879af3f35e0682a49", 0xb0}], 0x2}}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000006c0)="900d3798e4653207eae6da23bf6c69f8e965679b910b52e0a4de8e3c4ef97ab320820bd9275a6e2a4609c4feb730084e64cc106664be66878f403244c97c0411b65371955f45c915599f9f722d1962a221a86918d50891c838bfdf21f7a255f2e2cf5839d1c3aa3dbfcd94ca44e18c7863d497ff4f85628494915bc016f7c5d62747bb5368ef052201a0ee3cc9dca7156e893cf07b494f98a177460a7ec073fd8af879ae71c8cac715a241052bae3a3f09f4f4dda617e5ca05290be71acaabf4544ca83830272440b95c66d0aa091c738b41f76df43c9498d47f3d35a56205f4c1050cabb8cfd44814884bee33f013", 0xef}], 0x1}}], 0x2, 0x400c0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000480)=0xdf9, 0x4)
syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b808090504105802030d580904"], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0})
sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0)

48.184757534s ago: executing program 2 (id=1556):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="0014"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000a80)={0x44, &(0x7f0000000800)={0x20, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

47.390075308s ago: executing program 4 (id=1557):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000100)={0x9, &(0x7f0000000400)=[{@fixed}, {}, {@fixed}, {}, {}, {}, {@fixed}, {@none}, {@fixed}]})
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x1f0, @none, 0x1, 0xa13153fd332a494a}, 0xe)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"])
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0xb0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0})
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="0e00010002"], 0x8)
recvmmsg(r3, &(0x7f0000007440)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000140)=""/53, 0x35}], 0x1}, 0x3ff}], 0x1, 0x40012040, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

46.668231212s ago: executing program 4 (id=1558):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001880)={'wg2\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x40, r3, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fcffffff0100000024000341a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb54208000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x8c0}, 0x20000000)

46.345364621s ago: executing program 3 (id=1559):
sendmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="817bb97cdac2f8f819447aa4a50c293af36b43cab2641b7753df26944b52221c709e644460775e", 0x27}], 0x1}, 0x24040050)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000100)={0x0, &(0x7f0000000400)})
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x1f0, @none, 0x1, 0xa13153fd332a494a}, 0xe)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"])
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x1c}}, 0x20000014)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r4, &(0x7f0000000380)=ANY=[@ANYBLOB="0e00010002"], 0x8)
recvmmsg(r4, &(0x7f0000007440)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000140)=""/53, 0x35}], 0x1}, 0x3ff}], 0x1, 0x40012040, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

45.90862284s ago: executing program 4 (id=1560):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)='\x02\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00<r\xe9\x9cD\x90\xce\xe1\xc5\xff\x01\x00\x00\xbbQ\xde\xc3\xe3\x7f\xcf\x1f\x17G\xa6\x13\xae\x92 \x1c\xbf\xfa\xe8e\x8cD\"\xa3w\x04\xa2,\xda\xcep\x00nT\xfb\x99\xc7-2\x00\x00\xf8\xe5TW\xcd\xd7\x0e\x9c\bh\xae!]{x\xc1\x1fm )>\xfaC\x93\xc0S\xaf\f\x1a\fEik\x86\x15\xab\x909\xf8i\xc0\xa7\xa9\xb1\xbe\xc7\x1d\xe0\x18\xd2\xbaG|\xd5fC\x8d\t\x00/I\x8b\xbf\x94\xf4\x96[us\x96\x90\x8d\x9d\xfb\xdc\x7f0&\xab\x17@)\xf1\xc3Q\xb2M :\xaa\x99G\xdd\xa9E6A]@>\f\xb1n\x1a\x8c\xc6e7{@\x90\x8fz\xfcf\x88\x15A\x0e\xbf\xb8\xff\xa8\xb9\xab\x83>\xf9I0\xdd\x93#\x1e\x00\xed#\xc9\xd0Uk\xa6b\xa6/\x15\x92\xc6,p\xc9\xce\xe1\xc3\xd5\x89Lw\x17\x16\x18\xddh\xc8\x81w\x1e\x7f\xc7\x16\xe5\x96\x03\t\xc3\x94\xc7\xeb\xd6.\xfa\xb3\xe0\x1f\xa9\x19\xfaS\x1f[T\x1e\xc5nX\x84\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00=0\xc3\xbc\xfd\xce~\xe3\xcaO\"\xbb\xd1\x15\xf2y\xb91\x1d\xab\xeaO\x19\rH4\xc2\xe4\x922~K^K`55\xb7\xd1\n\xba\xb7,\xdb\xc2\x86\xc30bnc\x06\x06q\xe9\x97\fHA<\x94`\xf7H?\x86\xb8C9\b\x18vFWRdNee\xf1A\x06\x8f\x97\x99\xa5A\xfa\x94IfB\xa9\xf5\xd8\x83\xc5\b\x0eL\\Z\x80](f6D\x1a\xf7si\xa4l\xa8\x0f\xcc\xa1\xef\x1bCq\x0e\xf87\xfc\xce\x96cm\x83\x05S\x01Zj`dP:d\xba\x02\x14\xaa\x051\xd7\x87\x1b\xcb\xa2.\x89\x16CRx\x9b\x04\x1f\x8fA\t<\x99/\'tk\xcb\xd7|\x0f\xc9m\x95\x9a\n\v&\xca\xcd\x11\xec\xfd\x17a$.\xe9\x14\x8f\n\x15\x8d\rJ\x99\x8a\x87\x81\xc4S\x85L\xe5w\xa1\xbf\x91Q&6\x8e\xd1\x02\x19K\xd3\xab\xe5\xdc\xac\x05\x8dQ\xf4\x1aa\x86\xbc6\\\x06\xdf\x84\x00+F|\xa6\xc4\xab\x00G\xd0\x14N+\xf9\x84i?C\x81\x8eu\xd3\xcbg\xb7\a\xd9\x9a*\x17>\xac\x9d\x9d\xf6\t\xd8b\x19\x8a\x1e&\xde\x87-%\xf3\x8a2L\x1cQ2\f\x94\xf7\xf9\xadI\xedU\xabr\xe2\xe1\xc2{\b\xa8\xc2\n4\x0f\'\xed\xcc\xd7qG\xa7p\x8ct\xe3/l\v\x93\x8a\x95R\xd6\x19L\x85\x80\x18\x15\xcezn\xa8,i\xf1\x91@\xc0\xb1\a\xfd\xec\x95>\b(\xfa~O\xfd\xe2\a6b\x97\xc6$?;\x8eJ/P\x9d\x17\xaaU\xc4\b')
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100fffffffffbffaaaa8aaaaabb08060001080006040001"], 0x2e)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, <r3=>0x0})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3})
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r4, 0x5708e000)

45.661647097s ago: executing program 1 (id=1561):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0x2, 0x3}, 0x6)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00')
preadv(r2, &(0x7f0000000080)=[{&(0x7f0000003240)=""/4102, 0xfffffccc}], 0x1, 0xf6f, 0x7)
sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000004280)=ANY=[@ANYBLOB="b4110000", @ANYRES16, @ANYBLOB="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"], 0x11b4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0)
mount$cgroup(0x0, 0x0, &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}, {@xattr}]})
write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x7}}, 0x10)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010800000000000000000c00000008000300", @ANYRES32=r8, @ANYBLOB="0a00060008021100000100003000508011000a004abee339084eeef16f162471f4000000080007"], 0x58}}, 0x800)
sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="94000000", @ANYRES16=r5, @ANYBLOB="04002dbd7000fddbdf257c00000008000300", @ANYRES32=r8, @ANYBLOB="0c009900030000007c0000000a00060008021100000100000a000600080211000008021100000000000a00060008021100000100000a00060008021100000000000a00060008021100000100000a00060008021100000000000a000600ffffffffffff00000a000600ffffffffffff0000"], 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x24000080)

44.777780875s ago: executing program 3 (id=1562):
r0 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c)
sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000800)="2fae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dea658eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7701448658864b429e9472edfeffbf34d6e7c78f4aa73c0", 0x2de}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a610b3738b393eed8633fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf58f2f33e47a0e416573cfdcfb44ed9dd4ce41af4de9c471c49f12f090934c3b32f2f4777c65b1574826727f5f62", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b0d", 0x16}, {&(0x7f00000000c0)="63686a201e1333f9f36772", 0xb}], 0x5, 0x0, 0x1200, 0x900}}], 0x1, 0x4044040)

44.478482656s ago: executing program 3 (id=1563):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
read$usbmon(0xffffffffffffffff, &(0x7f0000000000)=""/24, 0x18)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0x7f778000, 0x2000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x10000, 0x9, 0x1, 0x3, 0x9, 0x9, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x2, 0xd000, 0x0, 0x6, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0xa, 0x9, 0x54, 0xc, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]})
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000003308"])

40.118339337s ago: executing program 2 (id=1564):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000100)={0x8, &(0x7f0000000400)=[{@fixed}, {}, {@fixed}, {}, {}, {}, {@fixed}, {@none}]})
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0x1f0, @none, 0x1, 0xa13153fd332a494a}, 0xe)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"])
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x1c}}, 0x20000014)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0xb0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0})
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="0e00010002"], 0x8)
recvmmsg(r3, &(0x7f0000007440)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000140)=""/53, 0x35}], 0x1}, 0x3ff}], 0x1, 0x40012040, 0x0)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

0s ago: executing program 33 (id=1560):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)='\x02\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00<r\xe9\x9cD\x90\xce\xe1\xc5\xff\x01\x00\x00\xbbQ\xde\xc3\xe3\x7f\xcf\x1f\x17G\xa6\x13\xae\x92 \x1c\xbf\xfa\xe8e\x8cD\"\xa3w\x04\xa2,\xda\xcep\x00nT\xfb\x99\xc7-2\x00\x00\xf8\xe5TW\xcd\xd7\x0e\x9c\bh\xae!]{x\xc1\x1fm )>\xfaC\x93\xc0S\xaf\f\x1a\fEik\x86\x15\xab\x909\xf8i\xc0\xa7\xa9\xb1\xbe\xc7\x1d\xe0\x18\xd2\xbaG|\xd5fC\x8d\t\x00/I\x8b\xbf\x94\xf4\x96[us\x96\x90\x8d\x9d\xfb\xdc\x7f0&\xab\x17@)\xf1\xc3Q\xb2M :\xaa\x99G\xdd\xa9E6A]@>\f\xb1n\x1a\x8c\xc6e7{@\x90\x8fz\xfcf\x88\x15A\x0e\xbf\xb8\xff\xa8\xb9\xab\x83>\xf9I0\xdd\x93#\x1e\x00\xed#\xc9\xd0Uk\xa6b\xa6/\x15\x92\xc6,p\xc9\xce\xe1\xc3\xd5\x89Lw\x17\x16\x18\xddh\xc8\x81w\x1e\x7f\xc7\x16\xe5\x96\x03\t\xc3\x94\xc7\xeb\xd6.\xfa\xb3\xe0\x1f\xa9\x19\xfaS\x1f[T\x1e\xc5nX\x84\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00=0\xc3\xbc\xfd\xce~\xe3\xcaO\"\xbb\xd1\x15\xf2y\xb91\x1d\xab\xeaO\x19\rH4\xc2\xe4\x922~K^K`55\xb7\xd1\n\xba\xb7,\xdb\xc2\x86\xc30bnc\x06\x06q\xe9\x97\fHA<\x94`\xf7H?\x86\xb8C9\b\x18vFWRdNee\xf1A\x06\x8f\x97\x99\xa5A\xfa\x94IfB\xa9\xf5\xd8\x83\xc5\b\x0eL\\Z\x80](f6D\x1a\xf7si\xa4l\xa8\x0f\xcc\xa1\xef\x1bCq\x0e\xf87\xfc\xce\x96cm\x83\x05S\x01Zj`dP:d\xba\x02\x14\xaa\x051\xd7\x87\x1b\xcb\xa2.\x89\x16CRx\x9b\x04\x1f\x8fA\t<\x99/\'tk\xcb\xd7|\x0f\xc9m\x95\x9a\n\v&\xca\xcd\x11\xec\xfd\x17a$.\xe9\x14\x8f\n\x15\x8d\rJ\x99\x8a\x87\x81\xc4S\x85L\xe5w\xa1\xbf\x91Q&6\x8e\xd1\x02\x19K\xd3\xab\xe5\xdc\xac\x05\x8dQ\xf4\x1aa\x86\xbc6\\\x06\xdf\x84\x00+F|\xa6\xc4\xab\x00G\xd0\x14N+\xf9\x84i?C\x81\x8eu\xd3\xcbg\xb7\a\xd9\x9a*\x17>\xac\x9d\x9d\xf6\t\xd8b\x19\x8a\x1e&\xde\x87-%\xf3\x8a2L\x1cQ2\f\x94\xf7\xf9\xadI\xedU\xabr\xe2\xe1\xc2{\b\xa8\xc2\n4\x0f\'\xed\xcc\xd7qG\xa7p\x8ct\xe3/l\v\x93\x8a\x95R\xd6\x19L\x85\x80\x18\x15\xcezn\xa8,i\xf1\x91@\xc0\xb1\a\xfd\xec\x95>\b(\xfa~O\xfd\xe2\a6b\x97\xc6$?;\x8eJ/P\x9d\x17\xaaU\xc4\b')
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100fffffffffbffaaaa8aaaaabb08060001080006040001"], 0x2e)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, <r3=>0x0})
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000)
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r3})
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r4, 0x5708e000)

kernel console output (not intermixed with test programs):

5.042242][ T5906] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input40
[  595.091053][ T6000] usb 3-1: Using ep0 maxpacket: 32
[  595.115496][ T6000] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  595.125982][ T6000] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  595.146334][ T6000] usb 3-1: config 0 descriptor??
[  595.164177][ T6000] gspca_main: sq930x-2.14.0 probing 041e:403c
[  595.264756][ T9283] vxfs: WRONG superblock magic 00000000 at 1
[  595.288962][ T9283] vxfs: WRONG superblock magic 00000000 at 8
[  595.301063][ T9283] vxfs: can't find superblock.
[  595.316361][ T8937] usb 2-1: USB disconnect, device number 37
[  595.957721][  T982] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  595.969459][ T9285] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1119'.
[  596.022647][  T982] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  596.047584][  T982] asix 4-1:0.0: probe with driver asix failed with error -71
[  596.070947][ T6000] gspca_sq930x: reg_w 0105 bf00 failed -71
[  596.124297][  T982] usb 4-1: USB disconnect, device number 33
[  596.161554][ T6000] sq930x 3-1:0.0: probe with driver sq930x failed with error -71
[  596.202094][ T6000] usb 3-1: USB disconnect, device number 32
[  596.362386][ T9311] netlink: 'syz.3.1127': attribute type 4 has an invalid length.
[  596.408680][ T9313] netlink: 'syz.0.1128': attribute type 4 has an invalid length.
[  596.491020][ T5958] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  596.559731][ T9319] syzkaller1: entered promiscuous mode
[  596.566074][ T9319] syzkaller1: entered allmulticast mode
[  596.650802][ T5958] usb 2-1: Using ep0 maxpacket: 16
[  596.662734][ T5958] usb 2-1: config 1 has an invalid interface number: 105 but max is 0
[  596.690562][ T5958] usb 2-1: config 1 has no interface number 0
[  596.699146][ T5958] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  596.700805][ T6000] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  596.715073][ T5958] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  596.729397][ T5958] usb 2-1: config 1 interface 105 has no altsetting 0
[  596.744362][ T5958] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  596.769936][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  596.784971][ T5958] usb 2-1: Product: syz
[  596.792535][ T5958] usb 2-1: Manufacturer: syz
[  596.797200][ T5958] usb 2-1: SerialNumber: syz
[  596.847261][ T9307] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  596.867582][ T9307] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  596.900942][ T6000] usb 4-1: Using ep0 maxpacket: 32
[  596.924447][ T6000] usb 4-1: config 0 has an invalid interface number: 89 but max is 0
[  596.953499][ T6000] usb 4-1: config 0 has no interface number 0
[  596.976741][ T6000] usb 4-1: config 0 interface 89 has no altsetting 0
[  596.996475][ T6000] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  597.014103][ T6000] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.022947][ T6000] usb 4-1: Product: syz
[  597.035756][ T6000] usb 4-1: Manufacturer: syz
[  597.040729][ T6000] usb 4-1: SerialNumber: syz
[  597.049550][ T6000] usb 4-1: config 0 descriptor??
[  597.127102][ T9333] syzkaller1: entered promiscuous mode
[  597.133397][ T9333] syzkaller1: entered allmulticast mode
[  597.214021][ T5906] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  597.280497][ T9307] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  597.295931][ T9307] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  597.374482][ T5906] usb 1-1: Using ep0 maxpacket: 8
[  597.391322][ T5906] usb 1-1: unable to get BOS descriptor or descriptor too short
[  597.402263][ T5906] usb 1-1: config 129 has an invalid interface number: 71 but max is 0
[  597.412194][ T5906] usb 1-1: config 129 has no interface number 0
[  597.419614][ T5906] usb 1-1: config 129 interface 71 has no altsetting 0
[  597.430253][ T5906] usb 1-1: New USB device found, idVendor=2013, idProduct=0262, bcdDevice=5b.8b
[  597.444528][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.453921][ T5906] usb 1-1: Product: syz
[  597.458749][ T5906] usb 1-1: Manufacturer: syz
[  597.464176][ T5906] usb 1-1: SerialNumber: syz
[  597.652410][ T9342] netlink: 'syz.2.1138': attribute type 4 has an invalid length.
[  597.702125][ T5906] usb 1-1: USB disconnect, device number 27
[  597.798783][ T5958] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  597.827088][ T5958] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  597.851242][ T5958] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  597.922829][ T5958] aqc111 2-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a6:53:34:87:a8:12
[  597.946496][ T5958] usb 2-1: USB disconnect, device number 38
[  597.962336][ T5958] aqc111 2-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  598.044122][ T5958] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  598.071544][ T5958] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  598.100073][ T5958] aqc111 2-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  598.865157][ T9382] FAULT_INJECTION: forcing a failure.
[  598.865157][ T9382] name failslab, interval 1, probability 0, space 0, times 0
[  598.911855][ T9382] CPU: 1 UID: 0 PID: 9382 Comm: syz.1.1146 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) 
[  598.911886][ T9382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  598.911899][ T9382] Call Trace:
[  598.911906][ T9382]  <TASK>
[  598.911915][ T9382]  dump_stack_lvl+0x189/0x250
[  598.911948][ T9382]  ? __pfx____ratelimit+0x10/0x10
[  598.911977][ T9382]  ? __pfx_dump_stack_lvl+0x10/0x10
[  598.912003][ T9382]  ? __pfx__printk+0x10/0x10
[  598.912036][ T9382]  ? __pfx___might_resched+0x10/0x10
[  598.912057][ T9382]  ? fs_reclaim_acquire+0x7d/0x100
[  598.912084][ T9382]  should_fail_ex+0x414/0x560
[  598.912111][ T9382]  should_failslab+0xa8/0x100
[  598.912132][ T9382]  __kmalloc_noprof+0xcb/0x4f0
[  598.912158][ T9382]  ? kfree+0x4d/0x440
[  598.912181][ T9382]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  598.912209][ T9382]  tomoyo_realpath_from_path+0xe3/0x5d0
[  598.912235][ T9382]  ? tomoyo_domain+0xd9/0x130
[  598.912266][ T9382]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  598.912287][ T9382]  tomoyo_path_number_perm+0x1e8/0x5a0
[  598.912311][ T9382]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  598.912357][ T9382]  ? __lock_acquire+0xab9/0xd20
[  598.912400][ T9382]  ? __fget_files+0x2a/0x420
[  598.912427][ T9382]  ? __fget_files+0x2a/0x420
[  598.912449][ T9382]  ? __fget_files+0x3a0/0x420
[  598.912469][ T9382]  ? __fget_files+0x2a/0x420
[  598.912496][ T9382]  security_file_ioctl+0xcb/0x2d0
[  598.912526][ T9382]  __se_sys_ioctl+0x47/0x170
[  598.912557][ T9382]  do_syscall_64+0xfa/0x3b0
[  598.912574][ T9382]  ? lockdep_hardirqs_on+0x9c/0x150
[  598.912608][ T9382]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  598.912627][ T9382]  ? clear_bhb_loop+0x60/0xb0
[  598.912651][ T9382]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  598.912670][ T9382] RIP: 0033:0x7f2024f8eb69
[  598.912690][ T9382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  598.912705][ T9382] RSP: 002b:00007f2022df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  598.912728][ T9382] RAX: ffffffffffffffda RBX: 00007f20251b5fa0 RCX: 00007f2024f8eb69
[  598.912743][ T9382] RDX: 0000000000000000 RSI: 00000000c008aeba RDI: 0000000000000005
[  598.912755][ T9382] RBP: 00007f2022df6090 R08: 0000000000000000 R09: 0000000000000000
[  598.912768][ T9382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  598.912779][ T9382] R13: 0000000000000000 R14: 00007f20251b5fa0 R15: 00007ffdeb0988d8
[  598.912813][ T9382]  </TASK>
[  598.912822][ T9382] ERROR: Out of memory at tomoyo_realpath_from_path.
[  599.561769][ T6000] usb 4-1: USB disconnect, device number 34
[  599.633955][ T9405] program syz.3.1151 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  599.764134][ T9412] netlink: 'syz.2.1154': attribute type 10 has an invalid length.
[  600.202782][ T9428] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  600.682939][ T9440] Can't find a SQUASHFS superblock on rnullb0
[  601.061086][ T8937] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  601.231087][ T8937] usb 4-1: Using ep0 maxpacket: 32
[  601.245909][ T8937] usb 4-1: config 0 has an invalid interface number: 89 but max is 0
[  601.273834][ T8937] usb 4-1: config 0 has no interface number 0
[  601.283550][ T8937] usb 4-1: config 0 interface 89 has no altsetting 0
[  601.301244][ T8937] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  601.315909][ T8937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  601.334166][ T8937] usb 4-1: Product: syz
[  601.339914][ T8937] usb 4-1: Manufacturer: syz
[  601.356350][ T8937] usb 4-1: SerialNumber: syz
[  601.370031][ T8937] usb 4-1: config 0 descriptor??
[  601.394060][ T8937] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  601.420747][ T8937] em28xx 4-1:0.89: Video interface 89 found: bulk
[  602.003708][ T8937] em28xx 4-1:0.89: unknown em28xx chip ID (0)
[  602.163164][ T9481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1175'.
[  602.260995][  T982] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  602.464034][  T982] usb 3-1: Using ep0 maxpacket: 32
[  602.486872][  T982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  602.573482][  T982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  602.620965][  T982] usb 3-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00
[  602.645492][  T982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  602.698118][  T982] usb 3-1: config 0 descriptor??
[  602.841089][ T9444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  602.874462][ T9444] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  602.897170][ T9444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  602.923391][ T9444] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  603.129459][  T982] hid_mf 0003:0079:1801.0009: item fetching failed at offset 0/2
[  603.157489][  T982] hid_mf 0003:0079:1801.0009: HID parse failed.
[  603.178011][ T8937] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  603.187645][  T982] hid_mf 0003:0079:1801.0009: probe with driver hid_mf failed with error -22
[  603.198347][ T8937] em28xx 4-1:0.89: board has no eeprom
[  603.265891][ T8937] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67)
[  603.286819][ T8937] em28xx 4-1:0.89: analog set to bulk mode.
[  603.295638][  T982] em28xx 4-1:0.89: Registering V4L2 extension
[  603.318888][ T8937] usb 4-1: USB disconnect, device number 35
[  603.333185][ T9475] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1173'.
[  603.357565][ T8937] em28xx 4-1:0.89: Disconnecting em28xx
[  603.397678][ T9507] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1183'.
[  603.415368][ T5958] usb 3-1: USB disconnect, device number 33
[  603.655544][  T982] em28xx 4-1:0.89: Config register raw data: 0xffffffed
[  603.668995][  T982] em28xx 4-1:0.89: AC97 chip type couldn't be determined
[  603.677504][  T982] em28xx 4-1:0.89: No AC97 audio processor
[  603.694326][  T982] usb 4-1: Decoder not found
[  603.699841][  T982] em28xx 4-1:0.89: failed to create media graph
[  603.711180][  T982] em28xx 4-1:0.89: V4L2 device video103 deregistered
[  603.725224][  T982] em28xx 4-1:0.89: Registering snapshot button...
[  603.750226][  T982] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input41
[  603.797013][  T982] em28xx 4-1:0.89: Remote control support is not available for this card.
[  603.827246][ T8937] em28xx 4-1:0.89: Closing input extension
[  603.842556][ T8937] em28xx 4-1:0.89: Deregistering snapshot button
[  603.890945][ T8937] em28xx 4-1:0.89: Freeing device
[  603.958220][ T9514] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1185'.
[  604.665332][ T9539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1194'.
[  604.841465][ T9546] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1196'.
[  605.021115][ T5958] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  605.037343][ T9551] netlink: 'syz.1.1198': attribute type 4 has an invalid length.
[  605.191318][ T5958] usb 4-1: Using ep0 maxpacket: 8
[  605.206009][ T5958] usb 4-1: unable to get BOS descriptor or descriptor too short
[  605.232227][ T5958] usb 4-1: string descriptor 0 read error: -22
[  605.249134][ T5958] usb 4-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe
[  605.256405][ T9558] /dev/rnullb0: Can't open blockdev
[  605.268216][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  605.417247][ T9564] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1202'.
[  605.518656][ T5958] asix 4-1:7.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  605.581113][ T9568] syzkaller1: entered promiscuous mode
[  605.587150][ T9568] syzkaller1: entered allmulticast mode
[  605.903159][  T982] kernel write not supported for file /830/clear_refs (pid: 982 comm: kworker/1:2)
[  605.939481][ T9575] tipc: Started in network mode
[  605.949731][ T9575] tipc: Node identity ac14140f, cluster identity 4711
[  605.973510][ T9575] tipc: New replicast peer: 255.255.255.255
[  605.986209][ T9575] tipc: Enabled bearer <udp:syz2>, priority 10
[  606.355744][ T9585] /dev/rnullb0: Can't open blockdev
[  606.484726][ T9587] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1211'.
[  606.572519][ T5999] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  606.744627][ T5999] usb 3-1: unable to get BOS descriptor or descriptor too short
[  606.763672][   T30] audit: type=1326 audit(1754120522.357:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9588 comm="syz.1.1212" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2024f8eb69 code=0x0
[  606.808891][ T5999] usb 3-1: config 1 has an invalid interface number: 172 but max is 1
[  606.832612][ T5999] usb 3-1: config 1 has no interface number 1
[  606.861019][ T5999] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  606.909796][ T5999] usb 3-1: too many endpoints for config 1 interface 172 altsetting 161: 221, using maximum allowed: 30
[  606.985635][ T5999] usb 3-1: config 1 interface 172 altsetting 161 has 0 endpoint descriptors, different from the interface descriptor's value: 221
[  607.036028][ T5999] usb 3-1: config 1 interface 0 has no altsetting 0
[  607.062064][ T5999] usb 3-1: config 1 interface 172 has no altsetting 0
[  607.083872][ T5999] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  607.093725][ T5999] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  607.105586][ T5906] tipc: Node number set to 2886997007
[  607.121930][ T5999] usb 3-1: Product: syz
[  607.132229][ T5999] usb 3-1: Manufacturer: syz
[  607.141845][ T5999] usb 3-1: SerialNumber: syz
[  607.497876][ T5999] smsusb:smsusb_probe: board id=8, interface number 0
[  607.558168][ T5999] smsusb:smsusb_probe: board id=8, interface number 172
[  607.601190][ T5999] usb 3-1: USB disconnect, device number 34
[  607.656913][ T9600] netlink: 'syz.0.1216': attribute type 4 has an invalid length.
[  607.764960][ T5958] asix 4-1:7.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  607.798168][ T5958] asix 4-1:7.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  608.011153][ T5958] asix 4-1:7.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  608.022609][ T5958] asix 4-1:7.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  608.243023][ T5958] asix 4-1:7.0 eth1: register 'asix' at usb-dummy_hcd.3-1, ASIX AX88178 USB 2.0 Ethernet, ce:6f:b4:e8:9d:ff
[  608.316844][ T5958] usb 4-1: USB disconnect, device number 36
[  608.346778][ T5958] asix 4-1:7.0 eth1: unregister 'asix' usb-dummy_hcd.3-1, ASIX AX88178 USB 2.0 Ethernet
[  609.252036][ T9641] binder: BINDER_SET_CONTEXT_MGR already set
[  609.258171][ T9641] binder: 9638:9641 ioctl 4018620d 200000000040 returned -16
[  609.511239][ T5999] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  609.738305][ T5999] usb 2-1: unable to get BOS descriptor or descriptor too short
[  609.774187][ T5999] usb 2-1: config 1 has an invalid interface number: 172 but max is 1
[  609.801299][ T5999] usb 2-1: config 1 has no interface number 1
[  609.825114][ T5999] usb 2-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  609.870083][ T5999] usb 2-1: too many endpoints for config 1 interface 172 altsetting 161: 221, using maximum allowed: 30
[  609.920747][ T5999] usb 2-1: config 1 interface 172 altsetting 161 has 0 endpoint descriptors, different from the interface descriptor's value: 221
[  609.984277][ T5999] usb 2-1: config 1 interface 0 has no altsetting 0
[  610.007799][ T5999] usb 2-1: config 1 interface 172 has no altsetting 0
[  610.044533][ T5999] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  610.096469][ T5999] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  610.123499][ T5999] usb 2-1: Product: syz
[  610.146919][ T5999] usb 2-1: Manufacturer: syz
[  610.155858][ T5999] usb 2-1: SerialNumber: syz
[  610.431504][ T5999] smsusb:smsusb_probe: board id=8, interface number 0
[  610.511066][ T5999] smsusb:smsusb_probe: board id=8, interface number 172
[  610.569264][ T5999] usb 2-1: USB disconnect, device number 39
[  610.775439][ T9691] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1239'.
[  611.934824][ T9734] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1253'.
[  612.172182][ T5999] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  612.262496][ T9746] netlink: 'syz.1.1258': attribute type 1 has an invalid length.
[  612.333514][ T5999] usb 3-1: unable to get BOS descriptor or descriptor too short
[  612.346763][ T5999] usb 3-1: config 1 has an invalid interface number: 172 but max is 1
[  612.358838][ T9750] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  612.372197][ T5999] usb 3-1: config 1 has no interface number 1
[  612.382369][ T5999] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  612.412252][ T5999] usb 3-1: too many endpoints for config 1 interface 172 altsetting 161: 221, using maximum allowed: 30
[  612.428236][ T5999] usb 3-1: config 1 interface 172 altsetting 161 has 0 endpoint descriptors, different from the interface descriptor's value: 221
[  612.443117][ T5999] usb 3-1: config 1 interface 0 has no altsetting 0
[  612.451573][ T5999] usb 3-1: config 1 interface 172 has no altsetting 0
[  612.462956][ T5999] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  612.473409][ T5999] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  612.482588][ T5999] usb 3-1: Product: syz
[  612.487680][ T5999] usb 3-1: Manufacturer: syz
[  612.492997][ T5999] usb 3-1: SerialNumber: syz
[  612.674766][ T5906] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  612.715737][ T5999] smsusb:smsusb_probe: board id=8, interface number 0
[  612.739328][ T5999] smsusb:smsusb_probe: board id=8, interface number 172
[  612.774857][ T5999] usb 3-1: USB disconnect, device number 35
[  612.821541][ T5906] usb 1-1: device descriptor read/64, error -71
[  612.855352][ T9757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1262'.
[  613.080932][ T5906] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  613.230786][ T5906] usb 1-1: device descriptor read/64, error -71
[  613.326297][  T982] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  613.342452][ T5906] usb usb1-port1: attempt power cycle
[  613.503144][  T982] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 52, changing to 7
[  613.516911][  T982] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 9272, setting to 1024
[  613.535740][  T982] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  613.555678][  T982] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  613.568390][  T982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  613.577937][  T982] usb 4-1: SerialNumber: syz
[  613.646083][ T9771] FAULT_INJECTION: forcing a failure.
[  613.646083][ T9771] name failslab, interval 1, probability 0, space 0, times 0
[  613.659371][ T9771] CPU: 1 UID: 0 PID: 9771 Comm: syz.1.1268 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) 
[  613.659400][ T9771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  613.659412][ T9771] Call Trace:
[  613.659420][ T9771]  <TASK>
[  613.659428][ T9771]  dump_stack_lvl+0x189/0x250
[  613.659454][ T9771]  ? __pfx____ratelimit+0x10/0x10
[  613.659477][ T9771]  ? __pfx_dump_stack_lvl+0x10/0x10
[  613.659493][ T9771]  ? __pfx__printk+0x10/0x10
[  613.659512][ T9771]  ? __pfx___might_resched+0x10/0x10
[  613.659526][ T9771]  ? fs_reclaim_acquire+0x7d/0x100
[  613.659548][ T9771]  should_fail_ex+0x414/0x560
[  613.659566][ T9771]  should_failslab+0xa8/0x100
[  613.659579][ T9771]  __kmalloc_noprof+0xcb/0x4f0
[  613.659596][ T9771]  ? kfree+0x4d/0x440
[  613.659610][ T9771]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  613.659629][ T9771]  tomoyo_realpath_from_path+0xe3/0x5d0
[  613.659644][ T9771]  ? tomoyo_domain+0xd9/0x130
[  613.659663][ T9771]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  613.659675][ T9771]  tomoyo_path_number_perm+0x1e8/0x5a0
[  613.659689][ T9771]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  613.659712][ T9771]  ? __lock_acquire+0xab9/0xd20
[  613.659737][ T9771]  ? __fget_files+0x2a/0x420
[  613.659754][ T9771]  ? __fget_files+0x2a/0x420
[  613.659769][ T9771]  ? __fget_files+0x3a0/0x420
[  613.659784][ T9771]  ? __fget_files+0x2a/0x420
[  613.659800][ T9771]  security_file_ioctl+0xcb/0x2d0
[  613.659822][ T9771]  __se_sys_ioctl+0x47/0x170
[  613.659842][ T9771]  do_syscall_64+0xfa/0x3b0
[  613.659853][ T9771]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  613.659865][ T9771]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  613.659877][ T9771]  ? clear_bhb_loop+0x60/0xb0
[  613.659892][ T9771]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  613.659903][ T9771] RIP: 0033:0x7f2024f8eb69
[  613.659916][ T9771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  613.659936][ T9771] RSP: 002b:00007f2022df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  613.659950][ T9771] RAX: ffffffffffffffda RBX: 00007f20251b5fa0 RCX: 00007f2024f8eb69
[  613.659960][ T9771] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  613.659967][ T9771] RBP: 00007f2022df6090 R08: 0000000000000000 R09: 0000000000000000
[  613.659975][ T9771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  613.659982][ T9771] R13: 0000000000000000 R14: 00007f20251b5fa0 R15: 00007ffdeb0988d8
[  613.660001][ T9771]  </TASK>
[  613.660026][ T9771] ERROR: Out of memory at tomoyo_realpath_from_path.
[  613.700903][ T5906] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  613.859337][  T982] usbtest 4-1:1.0: Linux user mode ISO test driver
[  613.961825][  T982] usbtest 4-1:1.0: high-speed {control bulk-in iso-out} tests (+alt)
[  613.966947][ T5906] usb 1-1: device descriptor read/8, error -71
[  614.021162][  T982] usb 4-1: USB disconnect, device number 37
[  614.224647][ T5906] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  614.271605][ T5906] usb 1-1: device descriptor read/8, error -71
[  614.319153][ T9783] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  614.381404][ T5906] usb usb1-port1: unable to enumerate USB device
[  614.438556][ T9787] JFS: discard option not supported on device
[  614.447308][ T9787] Mount JFS Failure: -22
[  614.456155][ T9787] jfs_mount failed w/return code = -22
[  614.621437][ T9792] /dev/rnullb0: Can't open blockdev
[  615.004990][ T9808] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1281'.
[  615.152255][ T5906] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  615.228396][ T9812] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2
[  615.239853][ T9812] netdevsim netdevsim3: Falling back to sysfs fallback for: ..€
[  615.332540][ T5906] usb 3-1: Using ep0 maxpacket: 16
[  615.346859][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  615.385529][ T5906] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  615.445990][ T5906] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  615.473907][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  615.492874][ T5906] usb 3-1: config 0 descriptor??
[  616.041443][ T5999] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  616.230901][ T5999] usb 1-1: Using ep0 maxpacket: 8
[  616.238496][ T5999] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  616.250206][ T5999] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  616.264934][ T5999] usb 1-1: config 0 interface 0 has no altsetting 0
[  616.272031][ T5999] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  616.282477][ T5999] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  616.290817][  T982] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  616.294855][ T5999] usb 1-1: config 0 descriptor??
[  616.450887][  T982] usb 4-1: Using ep0 maxpacket: 32
[  616.459720][  T982] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  616.468348][  T982] usb 4-1: config 0 has no interface number 0
[  616.479252][  T982] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  616.489382][  T982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  616.498099][  T982] usb 4-1: Product: syz
[  616.502604][  T982] usb 4-1: Manufacturer: syz
[  616.507644][  T982] usb 4-1: SerialNumber: syz
[  616.516050][  T982] usb 4-1: config 0 descriptor??
[  616.540426][  T982] smsc95xx v2.0.0
[  616.733417][ T5999] steelseries 0003:1038:1410.000A: missing HID_OUTPUT_REPORT 0
[  616.938342][ T5958] usb 1-1: USB disconnect, device number 32
[  616.965803][ T9833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  616.975024][  T982] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  616.981652][ T9833] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  616.998078][  T982] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  617.219066][  T982] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  617.233169][  T982] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[  617.251186][  T982] usb 4-1: USB disconnect, device number 38
[  617.453185][ T9841] fuse: Unknown parameter '^d'
[  617.964365][ T5906] usbhid 3-1:0.0: can't add hid device: -71
[  618.001367][ T5906] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  618.026421][ T5906] usb 3-1: USB disconnect, device number 36
[  618.446105][ T9865] Mount JFS Failure: -22
[  618.453691][ T9865] Mount JFS Failure: -22
[  618.461770][ T9865] Mount JFS Failure: -22
[  618.469478][ T9865] Mount JFS Failure: -22
[  618.476308][ T9865] Mount JFS Failure: -22
[  618.506469][ T9865] Mount JFS Failure: -22
[  618.532640][ T9865] Mount JFS Failure: -22
[  618.554091][ T9865] Mount JFS Failure: -22
[  618.573445][ T9865] Mount JFS Failure: -22
[  618.599832][ T9865] Mount JFS Failure: -22
[  618.617199][ T9865] Mount JFS Failure: -22
[  618.628005][ T9872] netlink: 'syz.0.1304': attribute type 9 has an invalid length.
[  618.639933][ T9865] Mount JFS Failure: -22
[  618.647647][ T9865] Mount JFS Failure: -22
[  618.656726][ T9865] Mount JFS Failure: -22
[  618.665142][ T9865] Mount JFS Failure: -22
[  618.674238][ T9865] Mount JFS Failure: -22
[  618.698457][ T9865] Mount JFS Failure: -22
[  618.708026][ T9874] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1305'.
[  618.724772][ T9865] Mount JFS Failure: -22
[  618.739577][ T9865] Mount JFS Failure: -22
[  618.757849][ T9865] Mount JFS Failure: -22
[  618.775332][ T9865] Mount JFS Failure: -22
[  618.791698][ T9865] Mount JFS Failure: -22
[  618.805653][ T9865] Mount JFS Failure: -22
[  618.829773][ T9878] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  618.843175][ T9865] Mount JFS Failure: -22
[  618.855110][ T9865] Mount JFS Failure: -22
[  618.869593][ T9865] Mount JFS Failure: -22
[  618.881935][ T9865] Mount JFS Failure: -22
[  618.896145][ T9865] Mount JFS Failure: -22
[  618.916031][ T9865] Mount JFS Failure: -22
[  618.932111][ T9865] Mount JFS Failure: -22
[  618.938657][ T9865] Mount JFS Failure: -22
[  618.946035][ T9865] Mount JFS Failure: -22
[  618.952390][ T9865] Mount JFS Failure: -22
[  619.109348][ T9889] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1310'.
[  619.888103][ T9908] syzkaller1: entered promiscuous mode
[  619.898746][ T9908] syzkaller1: entered allmulticast mode
[  620.193947][ T9912] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  620.400910][ T9922] netlink: 'syz.3.1321': attribute type 10 has an invalid length.
[  620.748050][ T9931] netlink: 'syz.3.1325': attribute type 33 has an invalid length.
[  620.767428][ T9931] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1325'.
[  621.083035][ T9941] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  621.092418][ T9941] VFS: Can't find a romfs filesystem on dev rnullb0.
[  621.092418][ T9941] 
[  621.477449][ T9954] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1334'.
[  621.581265][  T985] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  621.740752][  T985] usb 3-1: Using ep0 maxpacket: 32
[  621.750038][  T985] usb 3-1: config 0 has an invalid interface number: 89 but max is 0
[  621.765082][  T985] usb 3-1: config 0 has no interface number 0
[  621.771858][ T5906] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[  621.783452][  T985] usb 3-1: config 0 interface 89 has no altsetting 0
[  621.794782][  T985] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  621.810632][  T985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  621.819352][  T985] usb 3-1: Product: syz
[  621.827121][  T985] usb 3-1: Manufacturer: syz
[  621.832293][  T985] usb 3-1: SerialNumber: syz
[  621.841644][  T985] usb 3-1: config 0 descriptor??
[  621.855941][  T985] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  621.873221][  T985] em28xx 3-1:0.89: Video interface 89 found: bulk
[  621.943838][ T5906] usb 4-1: unable to get BOS descriptor or descriptor too short
[  621.962965][ T5906] usb 4-1: config 1 has an invalid interface number: 172 but max is 1
[  621.979104][ T5906] usb 4-1: config 1 has no interface number 1
[  621.989740][ T5906] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  622.006202][ T5906] usb 4-1: too many endpoints for config 1 interface 172 altsetting 161: 221, using maximum allowed: 30
[  622.018285][ T5906] usb 4-1: config 1 interface 172 altsetting 161 has 0 endpoint descriptors, different from the interface descriptor's value: 221
[  622.036958][ T5906] usb 4-1: config 1 interface 0 has no altsetting 0
[  622.044442][ T5906] usb 4-1: config 1 interface 172 has no altsetting 0
[  622.060944][ T5906] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  622.070835][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  622.079329][ T5906] usb 4-1: Product: syz
[  622.084375][ T5906] usb 4-1: Manufacturer: syz
[  622.089327][ T5906] usb 4-1: SerialNumber: syz
[  622.331985][ T5906] smsusb:smsusb_probe: board id=8, interface number 0
[  622.346881][ T5906] smsusb:smsusb_probe: board id=8, interface number 172
[  622.350472][ T9968] 9pnet_fd: Insufficient options for proto=fd
[  622.359165][ T5906] usb 4-1: USB disconnect, device number 39
[  622.459733][  T985] em28xx 3-1:0.89: unknown em28xx chip ID (0)
[  622.890568][  T985] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[  622.914180][  T985] em28xx 3-1:0.89: board has no eeprom
[  623.180304][ T9993] hpfs: Bad magic ... probably not HPFS
[  623.188469][  T985] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67)
[  623.198207][  T985] em28xx 3-1:0.89: analog set to bulk mode.
[  623.205630][ T5906] em28xx 3-1:0.89: Registering V4L2 extension
[  623.229875][  T985] usb 3-1: USB disconnect, device number 37
[  623.333723][  T985] em28xx 3-1:0.89: Disconnecting em28xx
[  623.390149][ T5906] em28xx 3-1:0.89: Config register raw data: 0xffffffed
[  623.406843][ T5906] em28xx 3-1:0.89: AC97 chip type couldn't be determined
[  623.425603][ T5906] em28xx 3-1:0.89: No AC97 audio processor
[  623.448999][ T5906] usb 3-1: Decoder not found
[  623.461723][ T5906] em28xx 3-1:0.89: failed to create media graph
[  623.475016][ T5906] em28xx 3-1:0.89: V4L2 device video103 deregistered
[  623.491676][ T5906] em28xx 3-1:0.89: Registering snapshot button...
[  623.521231][ T5906] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input43
[  623.551869][ T5906] em28xx 3-1:0.89: Remote control support is not available for this card.
[  623.574446][  T985] em28xx 3-1:0.89: Closing input extension
[  623.601222][  T985] em28xx 3-1:0.89: Deregistering snapshot button
[  623.640547][  T985] em28xx 3-1:0.89: Freeing device
[  623.740994][ T5999] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  623.906407][T10017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1358'.
[  623.931204][ T5999] usb 4-1: unable to get BOS descriptor or descriptor too short
[  623.949389][ T5999] usb 4-1: config 1 has an invalid interface number: 172 but max is 1
[  623.964907][ T5999] usb 4-1: config 1 has no interface number 1
[  623.972426][ T5999] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  624.010743][ T5999] usb 4-1: too many endpoints for config 1 interface 172 altsetting 161: 221, using maximum allowed: 30
[  624.027880][ T5999] usb 4-1: config 1 interface 172 altsetting 161 has 0 endpoint descriptors, different from the interface descriptor's value: 221
[  624.048379][ T5999] usb 4-1: config 1 interface 0 has no altsetting 0
[  624.056253][ T5999] usb 4-1: config 1 interface 172 has no altsetting 0
[  624.061411][   T24] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  624.069703][ T5999] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  624.088192][ T5999] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  624.097668][ T5999] usb 4-1: Product: syz
[  624.106319][ T5999] usb 4-1: Manufacturer: syz
[  624.115863][ T5999] usb 4-1: SerialNumber: syz
[  624.231976][   T24] usb 2-1: Using ep0 maxpacket: 32
[  624.240222][   T24] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  624.252613][   T24] usb 2-1: config 0 has no interface number 0
[  624.269385][   T24] usb 2-1: New USB device found, idVendor=16d8, idProduct=6803, bcdDevice=e5.e5
[  624.352258][ T5999] smsusb:smsusb_probe: board id=8, interface number 0
[  624.374993][ T5999] smsusb:smsusb_probe: board id=8, interface number 172
[  624.394587][ T5999] usb 4-1: USB disconnect, device number 40
[  624.510757][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  624.519137][   T24] usb 2-1: Product: syz
[  624.530620][   T24] usb 2-1: Manufacturer: syz
[  624.535550][   T24] usb 2-1: SerialNumber: syz
[  624.552874][   T24] usb 2-1: config 0 descriptor??
[  624.561082][   T24] hub 2-1:0.184: bad descriptor, ignoring hub
[  624.567668][   T24] hub 2-1:0.184: probe with driver hub failed with error -5
[  624.576892][   T24] option 2-1:0.184: GSM modem (1-port) converter detected
[  624.781283][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  624.787976][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  624.813983][T10013] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found
[  624.830999][T10013] UDF-fs: Scanning with blocksize 4096 failed
[  624.944916][  T982] usb 2-1: USB disconnect, device number 40
[  624.975461][  T982] option 2-1:0.184: device disconnected
[  625.068120][T10041] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1364'.
[  625.098535][T10041] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1364'.
[  625.230956][ T5906] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  625.384481][ T5906] usb 3-1: Using ep0 maxpacket: 8
[  625.392472][ T5906] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  625.412272][ T5906] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  625.426141][ T5906] usb 3-1: config 0 interface 0 has no altsetting 0
[  625.435709][ T5906] usb 3-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  625.447517][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  625.465612][ T5906] usb 3-1: config 0 descriptor??
[  625.505652][T10053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1368'.
[  625.923667][ T5906] steelseries 0003:1038:1410.000B: missing HID_OUTPUT_REPORT 0
[  625.980890][  T982] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  626.133899][ T5906] usb 3-1: USB disconnect, device number 38
[  626.149797][  T982] usb 2-1: unable to get BOS descriptor or descriptor too short
[  626.157868][T10067] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  626.177809][  T982] usb 2-1: config 1 has an invalid interface number: 172 but max is 1
[  626.190030][  T982] usb 2-1: config 1 has no interface number 1
[  626.197289][  T982] usb 2-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  626.216037][  T982] usb 2-1: too many endpoints for config 1 interface 172 altsetting 161: 221, using maximum allowed: 30
[  626.235838][  T982] usb 2-1: config 1 interface 172 altsetting 161 has 0 endpoint descriptors, different from the interface descriptor's value: 221
[  626.285971][  T982] usb 2-1: config 1 interface 0 has no altsetting 0
[  626.308067][  T982] usb 2-1: config 1 interface 172 has no altsetting 0
[  626.323223][  T982] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  626.336741][  T982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  626.347212][  T982] usb 2-1: Product: syz
[  626.356604][  T982] usb 2-1: Manufacturer: syz
[  626.363707][  T982] usb 2-1: SerialNumber: syz
[  626.610244][  T982] smsusb:smsusb_probe: board id=8, interface number 0
[  626.645530][  T982] smsusb:smsusb_probe: board id=8, interface number 172
[  626.662933][  T982] usb 2-1: USB disconnect, device number 41
[  627.531374][T10118] netlink: 'syz.0.1392': attribute type 4 has an invalid length.
[  627.558632][T10119] XFS (rnullb0): Invalid superblock magic number
[  627.640572][T10130] FAULT_INJECTION: forcing a failure.
[  627.640572][T10130] name failslab, interval 1, probability 0, space 0, times 0
[  627.678856][T10130] CPU: 1 UID: 0 PID: 10130 Comm: syz.1.1393 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) 
[  627.678888][T10130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  627.678900][T10130] Call Trace:
[  627.678908][T10130]  <TASK>
[  627.678917][T10130]  dump_stack_lvl+0x189/0x250
[  627.678951][T10130]  ? __pfx____ratelimit+0x10/0x10
[  627.678981][T10130]  ? __pfx_dump_stack_lvl+0x10/0x10
[  627.679006][T10130]  ? __pfx__printk+0x10/0x10
[  627.679037][T10130]  ? __pfx___might_resched+0x10/0x10
[  627.679058][T10130]  ? fs_reclaim_acquire+0x7d/0x100
[  627.679084][T10130]  should_fail_ex+0x414/0x560
[  627.679112][T10130]  should_failslab+0xa8/0x100
[  627.679134][T10130]  __kmalloc_cache_noprof+0x70/0x3d0
[  627.679163][T10130]  ? vhost_task_create+0xf6/0x290
[  627.679192][T10130]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  627.679223][T10130]  vhost_task_create+0xf6/0x290
[  627.679262][T10130]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  627.679294][T10130]  ? __pfx_vhost_task_create+0x10/0x10
[  627.679331][T10130]  ? __pfx_vhost_task_fn+0x10/0x10
[  627.679381][T10130]  kvm_mmu_post_init_vm+0x14c/0x300
[  627.679407][T10130]  kvm_arch_vcpu_ioctl_run+0xdc/0x1940
[  627.679460][T10130]  ? __mutex_trylock_common+0x153/0x260
[  627.679486][T10130]  ? __pfx___mutex_trylock_common+0x10/0x10
[  627.679510][T10130]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  627.679541][T10130]  ? rcu_is_watching+0x15/0xb0
[  627.679563][T10130]  ? trace_contention_end+0x39/0x120
[  627.679586][T10130]  ? look_up_lock_class+0x74/0x170
[  627.679616][T10130]  ? register_lock_class+0x51/0x320
[  627.679641][T10130]  ? __lock_acquire+0xab9/0xd20
[  627.679699][T10130]  kvm_vcpu_ioctl+0x95c/0xe90
[  627.679736][T10130]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  627.679761][T10130]  ? __lock_acquire+0xab9/0xd20
[  627.679804][T10130]  ? __fget_files+0x2a/0x420
[  627.679832][T10130]  ? __fget_files+0x2a/0x420
[  627.679855][T10130]  ? __fget_files+0x3a0/0x420
[  627.679877][T10130]  ? __fget_files+0x2a/0x420
[  627.679904][T10130]  ? bpf_lsm_file_ioctl+0x9/0x20
[  627.679931][T10130]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  627.679961][T10130]  __se_sys_ioctl+0xfc/0x170
[  627.679995][T10130]  do_syscall_64+0xfa/0x3b0
[  627.680012][T10130]  ? lockdep_hardirqs_on+0x9c/0x150
[  627.680039][T10130]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  627.680059][T10130]  ? clear_bhb_loop+0x60/0xb0
[  627.680084][T10130]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  627.680103][T10130] RIP: 0033:0x7f2024f8eb69
[  627.680124][T10130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  627.680139][T10130] RSP: 002b:00007f2022dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  627.680163][T10130] RAX: ffffffffffffffda RBX: 00007f20251b6080 RCX: 00007f2024f8eb69
[  627.680178][T10130] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  627.680191][T10130] RBP: 00007f2022dd5090 R08: 0000000000000000 R09: 0000000000000000
[  627.680203][T10130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  627.680215][T10130] R13: 0000000000000001 R14: 00007f20251b6080 R15: 00007ffdeb0988d8
[  627.680262][T10130]  </TASK>
[  628.130798][ T5906] usb 4-1: new full-speed USB device number 41 using dummy_hcd
[  628.138821][ T5999] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  628.300939][ T5999] usb 3-1: Using ep0 maxpacket: 32
[  628.308947][ T5906] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  628.322608][ T5906] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  628.335449][ T5999] usb 3-1: config 0 has an invalid interface number: 89 but max is 0
[  628.345768][ T5999] usb 3-1: config 0 has no interface number 0
[  628.358700][ T5999] usb 3-1: config 0 interface 89 has no altsetting 0
[  628.383894][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  628.400850][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  628.416537][ T5906] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  628.431586][ T5999] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  628.443288][  T985] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  628.452403][ T5999] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  628.467802][ T5999] usb 3-1: Product: syz
[  628.472619][ T5999] usb 3-1: Manufacturer: syz
[  628.477772][ T5999] usb 3-1: SerialNumber: syz
[  628.486843][ T5906] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  628.499727][ T5999] usb 3-1: config 0 descriptor??
[  628.505104][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  628.516265][ T5906] usb 4-1: Product: syz
[  628.524869][ T5999] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  628.536673][ T5906] usb 4-1: Manufacturer: syz
[  628.542739][ T5906] usb 4-1: SerialNumber: syz
[  628.547923][ T5999] em28xx 3-1:0.89: Video interface 89 found: bulk
[  628.559651][ T5906] usb 4-1: config 0 descriptor??
[  628.626470][  T985] usb 2-1: unable to get BOS descriptor or descriptor too short
[  628.637373][  T985] usb 2-1: config 1 has an invalid interface number: 172 but max is 1
[  628.646186][  T985] usb 2-1: config 1 has no interface number 1
[  628.657782][  T985] usb 2-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  628.671484][  T985] usb 2-1: too many endpoints for config 1 interface 172 altsetting 161: 221, using maximum allowed: 30
[  628.683868][  T985] usb 2-1: config 1 interface 172 altsetting 161 has 0 endpoint descriptors, different from the interface descriptor's value: 221
[  628.698308][  T985] usb 2-1: config 1 interface 0 has no altsetting 0
[  628.705667][  T985] usb 2-1: config 1 interface 172 has no altsetting 0
[  628.716110][  T985] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  628.750789][  T985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  628.759671][  T985] usb 2-1: Product: syz
[  628.777808][  T985] usb 2-1: Manufacturer: syz
[  628.783621][  T985] usb 2-1: SerialNumber: syz
[  628.798047][T10133] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  628.888490][ T5906] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -71
[  628.897778][ T5906] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5
[  628.915034][ T5906] usb 4-1: USB disconnect, device number 41
[  628.992075][  T982] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  629.020298][  T985] smsusb:smsusb_probe: board id=8, interface number 0
[  629.031278][  T985] smsusb:smsusb_probe: board id=8, interface number 172
[  629.047926][  T985] usb 2-1: USB disconnect, device number 42
[  629.149404][ T5999] em28xx 3-1:0.89: unknown em28xx chip ID (0)
[  629.150861][T10131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  629.164818][  T982] usb 1-1: Using ep0 maxpacket: 32
[  629.170518][T10131] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  629.180449][  T982] usb 1-1: config 0 has an invalid interface number: 89 but max is 0
[  629.189068][  T982] usb 1-1: config 0 has no interface number 0
[  629.195851][  T982] usb 1-1: config 0 interface 89 has no altsetting 0
[  629.206371][  T982] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  629.215742][  T982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  629.224380][  T982] usb 1-1: Product: syz
[  629.228571][  T982] usb 1-1: Manufacturer: syz
[  629.234430][  T982] usb 1-1: SerialNumber: syz
[  629.242395][  T982] usb 1-1: config 0 descriptor??
[  629.257085][  T982] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  629.267238][  T982] em28xx 1-1:0.89: Video interface 89 found: bulk
[  629.713294][T10152] bridge0: port 3(veth0_to_bridge) entered blocking state
[  629.736763][T10152] bridge0: port 3(veth0_to_bridge) entered disabled state
[  629.748697][T10152] veth0_to_bridge: entered allmulticast mode
[  629.757982][T10152] veth0_to_bridge: entered promiscuous mode
[  629.769710][T10152] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  629.799766][T10152] bridge0: port 3(veth0_to_bridge) entered blocking state
[  629.804096][ T5999] em28xx 3-1:0.89: failed to get i2c transfer status from bridge register (error=-5)
[  629.807547][T10152] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  629.841813][ T5999] em28xx 3-1:0.89: board has no eeprom
[  629.864745][  T982] em28xx 1-1:0.89: unknown em28xx chip ID (0)
[  629.915625][ T5999] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67)
[  629.927591][ T5999] em28xx 3-1:0.89: analog set to bulk mode.
[  629.933901][  T985] em28xx 3-1:0.89: Registering V4L2 extension
[  629.966983][ T5999] usb 3-1: USB disconnect, device number 39
[  629.992672][ T5999] em28xx 3-1:0.89: Disconnecting em28xx
[  630.055188][  T985] em28xx 3-1:0.89: Config register raw data: 0xffffffed
[  630.068526][  T985] em28xx 3-1:0.89: AC97 chip type couldn't be determined
[  630.077145][  T985] em28xx 3-1:0.89: No AC97 audio processor
[  630.087577][  T985] usb 3-1: Decoder not found
[  630.094595][  T985] em28xx 3-1:0.89: failed to create media graph
[  630.103082][  T985] em28xx 3-1:0.89: V4L2 device video103 deregistered
[  630.114332][  T985] em28xx 3-1:0.89: Registering snapshot button...
[  630.137873][  T985] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input44
[  630.163828][  T985] em28xx 3-1:0.89: Remote control support is not available for this card.
[  630.180940][ T5999] em28xx 3-1:0.89: Closing input extension
[  630.187120][ T5999] em28xx 3-1:0.89: Deregistering snapshot button
[  630.229268][ T5999] em28xx 3-1:0.89: Freeing device
[  630.505626][  T982] em28xx 1-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64)
[  630.517916][  T982] em28xx 1-1:0.89: board has no eeprom
[  630.747211][T10172] netlink: 'syz.2.1408': attribute type 33 has an invalid length.
[  630.761088][  T982] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67)
[  630.777870][T10172] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1408'.
[  630.800747][  T982] em28xx 1-1:0.89: analog set to bulk mode.
[  630.807161][   T24] em28xx 1-1:0.89: Registering V4L2 extension
[  630.827934][  T982] usb 1-1: USB disconnect, device number 33
[  630.862664][  T982] em28xx 1-1:0.89: Disconnecting em28xx
[  630.923452][T10175] netlink: 'syz.1.1409': attribute type 33 has an invalid length.
[  630.949468][T10175] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1409'.
[  630.974251][   T24] em28xx 1-1:0.89: Config register raw data: 0xffffffed
[  630.995838][   T24] em28xx 1-1:0.89: AC97 chip type couldn't be determined
[  631.013270][   T24] em28xx 1-1:0.89: No AC97 audio processor
[  631.032192][   T24] usb 1-1: Decoder not found
[  631.052286][   T24] em28xx 1-1:0.89: failed to create media graph
[  631.078124][   T24] em28xx 1-1:0.89: V4L2 device video103 deregistered
[  631.107682][   T24] em28xx 1-1:0.89: Registering snapshot button...
[  631.130572][T10181] binder: BINDER_SET_CONTEXT_MGR already set
[  631.138524][T10181] binder: 10179:10181 ioctl 4018620d 200000000040 returned -16
[  631.157300][   T24] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input45
[  631.186203][   T24] em28xx 1-1:0.89: Remote control support is not available for this card.
[  631.199503][  T982] em28xx 1-1:0.89: Closing input extension
[  631.206410][  T982] em28xx 1-1:0.89: Deregistering snapshot button
[  631.242527][  T982] em28xx 1-1:0.89: Freeing device
[  631.346791][ T5965] Bluetooth: hci4: Frame reassembly failed (-84)
[  631.360361][T10183] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2
[  631.391371][ T5958] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  631.715154][ T5958] usb 3-1: unable to get BOS descriptor or descriptor too short
[  631.727666][ T5958] usb 3-1: config 1 has an invalid interface number: 172 but max is 1
[  631.741384][ T5958] usb 3-1: config 1 has no interface number 1
[  631.747901][ T5958] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  631.780758][ T5958] usb 3-1: too many endpoints for config 1 interface 172 altsetting 161: 221, using maximum allowed: 30
[  631.811289][ T5958] usb 3-1: config 1 interface 172 altsetting 161 has 0 endpoint descriptors, different from the interface descriptor's value: 221
[  631.853503][ T5958] usb 3-1: config 1 interface 0 has no altsetting 0
[  631.860444][ T5958] usb 3-1: config 1 interface 172 has no altsetting 0
[  631.884600][ T5958] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  631.896960][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  631.920729][ T5958] usb 3-1: Product: syz
[  631.925072][ T5958] usb 3-1: Manufacturer: syz
[  631.933568][ T5958] usb 3-1: SerialNumber: syz
[  632.175070][ T5958] smsusb:smsusb_probe: board id=8, interface number 0
[  632.200456][ T5958] smsusb:smsusb_probe: board id=8, interface number 172
[  632.234651][ T5958] usb 3-1: USB disconnect, device number 40
[  632.979577][T10205] syzkaller1: entered promiscuous mode
[  632.996314][T10205] syzkaller1: entered allmulticast mode
[  633.055500][T10209] netlink: 4416 bytes leftover after parsing attributes in process `syz.0.1422'.
[  633.419402][ T5898] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  633.445216][ T5167] Bluetooth: hci4: command 0x1003 tx timeout
[  633.565043][T10216] openvswitch: netlink: Missing key (keys=400040, expected=80)
[  633.806357][T10216] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1425'.
[  634.265094][T10229] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1430'.
[  634.678054][T10233] netlink: 'syz.1.1431': attribute type 10 has an invalid length.
[  635.322058][  T985] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  635.514948][  T985] usb 2-1: Using ep0 maxpacket: 16
[  635.557982][  T985] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  635.598560][  T985] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  635.669186][  T985] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  635.718301][  T985] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  635.755951][  T985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  635.795439][  T985] usb 2-1: Product: syz
[  635.810769][  T985] usb 2-1: Manufacturer: syz
[  635.828724][  T985] usb 2-1: SerialNumber: syz
[  635.938274][T10256] syzkaller1: entered promiscuous mode
[  635.954161][T10256] syzkaller1: entered allmulticast mode
[  636.274797][  T985] usb 2-1: 0:2 : does not exist
[  636.508493][T10262] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1443'.
[  636.940433][  T985] usb 2-1: 1:0: failed to get current value for ch 0 (-22)
[  637.053216][  T985] usb 2-1: USB disconnect, device number 43
[  637.175868][ T5909] udevd[5909]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  637.870629][T10283] openvswitch: netlink: Missing key (keys=400040, expected=80)
[  637.892974][T10283] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1452'.
[  638.170796][  T985] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  638.352932][  T985] usb 2-1: Using ep0 maxpacket: 32
[  638.387374][  T985] usb 2-1: config 0 has an invalid interface number: 89 but max is 0
[  638.433894][  T985] usb 2-1: config 0 has no interface number 0
[  638.463954][  T985] usb 2-1: config 0 interface 89 has no altsetting 0
[  638.540114][  T985] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  638.585082][  T985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  638.640600][  T985] usb 2-1: Product: syz
[  638.659773][  T985] usb 2-1: Manufacturer: syz
[  638.665361][  T985] usb 2-1: SerialNumber: syz
[  638.679119][  T985] usb 2-1: config 0 descriptor??
[  638.698848][  T985] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  638.719663][  T985] em28xx 2-1:0.89: Video interface 89 found: bulk
[  638.859154][T10295] netlink: 'syz.3.1456': attribute type 33 has an invalid length.
[  638.870230][T10295] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1456'.
[  639.311383][  T985] em28xx 2-1:0.89: unknown em28xx chip ID (0)
[  639.357109][T10304] netlink: 'syz.2.1459': attribute type 33 has an invalid length.
[  639.365943][T10304] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1459'.
[  639.768205][T10309] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  639.977234][  T985] em28xx 2-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64)
[  639.989872][  T985] em28xx 2-1:0.89: board has no eeprom
[  640.041053][ T5999] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  640.180866][ T5999] usb 3-1: device descriptor read/64, error -71
[  640.192570][ T5906] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  640.231421][  T985] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67)
[  640.239279][  T985] em28xx 2-1:0.89: analog set to bulk mode.
[  640.246400][ T5987] em28xx 2-1:0.89: Registering V4L2 extension
[  640.271372][  T985] usb 2-1: USB disconnect, device number 44
[  640.279472][  T985] em28xx 2-1:0.89: Disconnecting em28xx
[  640.360986][ T5906] usb 4-1: Using ep0 maxpacket: 8
[  640.368898][ T5906] usb 4-1: config 2 has an invalid interface number: 76 but max is 0
[  640.385652][ T5906] usb 4-1: config 2 has no interface number 0
[  640.394434][ T5987] em28xx 2-1:0.89: Config register raw data: 0xffffffed
[  640.404166][ T5906] usb 4-1: config 2 interface 76 altsetting 9 endpoint 0xB has an invalid bInterval 252, changing to 11
[  640.416980][ T5987] em28xx 2-1:0.89: AC97 chip type couldn't be determined
[  640.433551][ T5987] em28xx 2-1:0.89: No AC97 audio processor
[  640.440988][ T5999] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  640.450429][ T5906] usb 4-1: config 2 interface 76 altsetting 9 has an invalid endpoint descriptor of length 4, skipping
[  640.465689][ T5987] usb 2-1: Decoder not found
[  640.470517][ T5987] em28xx 2-1:0.89: failed to create media graph
[  640.478116][ T5906] usb 4-1: config 2 interface 76 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  640.492936][ T5987] em28xx 2-1:0.89: V4L2 device video103 deregistered
[  640.501377][ T5906] usb 4-1: config 2 interface 76 has no altsetting 0
[  640.510432][ T5987] em28xx 2-1:0.89: Registering snapshot button...
[  640.524594][ T5906] usb 4-1: New USB device found, idVendor=10cf, idProduct=8062, bcdDevice=50.79
[  640.536556][ T5987] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input46
[  640.554160][ T5906] usb 4-1: New USB device strings: Mfr=217, Product=2, SerialNumber=3
[  640.566054][ T5987] em28xx 2-1:0.89: Remote control support is not available for this card.
[  640.579401][ T5906] usb 4-1: Product: syz
[  640.586343][ T5906] usb 4-1: Manufacturer: syz
[  640.594934][ T5999] usb 3-1: device descriptor read/64, error -71
[  640.602048][  T985] em28xx 2-1:0.89: Closing input extension
[  640.610068][ T5906] usb 4-1: SerialNumber: syz
[  640.619328][  T985] em28xx 2-1:0.89: Deregistering snapshot button
[  640.641202][T10312] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  640.694999][  T985] em28xx 2-1:0.89: Freeing device
[  640.713013][ T5999] usb usb3-port1: attempt power cycle
[  641.080851][ T5999] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  641.126144][ T5906] vmk80xx 4-1:2.76: driver 'vmk80xx' failed to auto-configure device.
[  641.145186][ T5999] usb 3-1: device descriptor read/8, error -71
[  641.167900][ T5906] usb 4-1: USB disconnect, device number 42
[  641.390811][ T5999] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  641.439261][ T5999] usb 3-1: device descriptor read/8, error -71
[  641.552039][ T5999] usb usb3-port1: unable to enumerate USB device
[  642.121221][ T5999] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[  642.261023][ T5999] usb 4-1: device descriptor read/64, error -71
[  642.310905][ T5906] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  642.470877][ T5906] usb 2-1: Using ep0 maxpacket: 32
[  642.484528][ T5906] usb 2-1: config 0 has an invalid interface number: 89 but max is 0
[  642.494366][ T5906] usb 2-1: config 0 has no interface number 0
[  642.501070][ T5999] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[  642.513335][ T5906] usb 2-1: config 0 interface 89 has no altsetting 0
[  642.527870][ T5906] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  642.543580][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  642.556575][ T5906] usb 2-1: Product: syz
[  642.562924][ T5906] usb 2-1: Manufacturer: syz
[  642.568259][ T5906] usb 2-1: SerialNumber: syz
[  642.579800][ T5906] usb 2-1: config 0 descriptor??
[  642.600058][ T5906] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  642.620708][ T5906] em28xx 2-1:0.89: Video interface 89 found: bulk
[  642.650865][ T5999] usb 4-1: device descriptor read/64, error -71
[  642.770560][ T5999] usb usb4-port1: attempt power cycle
[  642.970069][T10334] mmap: syz.2.1470 (10334): VmData 37478400 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data.
[  643.961216][ T5906] em28xx 2-1:0.89: unknown em28xx chip ID (0)
[  644.016247][ T5999] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  644.069921][ T5999] usb 4-1: device descriptor read/8, error -71
[  644.320957][ T5999] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  644.365929][ T5999] usb 4-1: device descriptor read/8, error -71
[  644.436895][ T5906] em28xx 2-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64)
[  644.456006][ T5906] em28xx 2-1:0.89: board has no eeprom
[  644.482563][ T5999] usb usb4-port1: unable to enumerate USB device
[  644.700764][ T5906] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67)
[  644.708884][ T5906] em28xx 2-1:0.89: analog set to bulk mode.
[  644.720783][ T5999] em28xx 2-1:0.89: Registering V4L2 extension
[  644.745116][ T5906] usb 2-1: USB disconnect, device number 45
[  644.772428][ T5906] em28xx 2-1:0.89: Disconnecting em28xx
[  644.838831][ T5999] em28xx 2-1:0.89: Config register raw data: 0xffffffed
[  644.852882][ T5999] em28xx 2-1:0.89: AC97 chip type couldn't be determined
[  644.880375][ T5999] em28xx 2-1:0.89: No AC97 audio processor
[  644.903324][ T5999] usb 2-1: Decoder not found
[  644.918045][ T5999] em28xx 2-1:0.89: failed to create media graph
[  644.938653][ T5999] em28xx 2-1:0.89: V4L2 device video103 deregistered
[  644.956535][ T5999] em28xx 2-1:0.89: Registering snapshot button...
[  644.966731][ T5999] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input47
[  644.980271][ T5999] em28xx 2-1:0.89: Remote control support is not available for this card.
[  644.991539][ T5906] em28xx 2-1:0.89: Closing input extension
[  644.997654][ T5906] em28xx 2-1:0.89: Deregistering snapshot button
[  645.045785][ T5906] em28xx 2-1:0.89: Freeing device
[  645.201279][T10344] netlink: 'syz.3.1473': attribute type 10 has an invalid length.
[  645.858712][T10352] netlink: 'syz.3.1477': attribute type 4 has an invalid length.
[  645.921802][T10354] syzkaller1: entered promiscuous mode
[  645.950885][T10354] syzkaller1: entered allmulticast mode
[  646.267841][T10360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1480'.
[  646.784340][T10366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1483'.
[  646.932660][T10366] /dev/rnullb0: Can't open blockdev
[  646.950822][ T5906] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  647.114006][ T5906] usb 3-1: Using ep0 maxpacket: 32
[  647.130070][ T5906] usb 3-1: config 0 has an invalid interface number: 89 but max is 0
[  647.151397][ T5906] usb 3-1: config 0 has no interface number 0
[  647.158307][ T5906] usb 3-1: config 0 interface 89 has no altsetting 0
[  647.188271][ T5906] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  647.203951][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  647.226014][ T5906] usb 3-1: Product: syz
[  647.230481][ T5906] usb 3-1: Manufacturer: syz
[  647.249593][ T5906] usb 3-1: SerialNumber: syz
[  647.275599][ T5906] usb 3-1: config 0 descriptor??
[  647.304108][ T5906] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  647.329235][ T5906] em28xx 3-1:0.89: Video interface 89 found: bulk
[  647.905674][ T5906] em28xx 3-1:0.89: unknown em28xx chip ID (0)
[  647.963488][T10373] delete_channel: no stack
[  648.174556][T10378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1488'.
[  648.529330][ T5906] em28xx 3-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64)
[  648.562696][ T5906] em28xx 3-1:0.89: board has no eeprom
[  648.690893][ T5987] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  648.784577][T10388] netlink: 'syz.1.1492': attribute type 4 has an invalid length.
[  648.821791][ T5906] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67)
[  648.833018][ T5906] em28xx 3-1:0.89: analog set to bulk mode.
[  648.839384][ T5999] em28xx 3-1:0.89: Registering V4L2 extension
[  648.866662][ T5987] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 52, changing to 7
[  648.893693][ T5906] usb 3-1: USB disconnect, device number 45
[  648.902481][ T5906] em28xx 3-1:0.89: Disconnecting em28xx
[  648.918456][ T5987] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 9272, setting to 1024
[  648.957714][ T5987] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  648.989343][ T5987] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  649.003999][ T5987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  649.013453][ T5987] usb 4-1: SerialNumber: syz
[  649.108941][ T5999] em28xx 3-1:0.89: Config register raw data: 0xffffffed
[  649.119864][ T5999] em28xx 3-1:0.89: AC97 chip type couldn't be determined
[  649.140031][ T5999] em28xx 3-1:0.89: No AC97 audio processor
[  649.165294][ T5999] usb 3-1: Decoder not found
[  649.175137][ T5999] em28xx 3-1:0.89: failed to create media graph
[  649.182768][ T5999] em28xx 3-1:0.89: V4L2 device video103 deregistered
[  649.194426][ T5999] em28xx 3-1:0.89: Registering snapshot button...
[  649.209072][ T5999] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input48
[  649.224601][ T5999] em28xx 3-1:0.89: Remote control support is not available for this card.
[  649.247858][ T5987] usbtest 4-1:1.0: Linux user mode ISO test driver
[  649.272118][ T5906] em28xx 3-1:0.89: Closing input extension
[  649.290828][ T5987] usbtest 4-1:1.0: high-speed {control bulk-in iso-out} tests (+alt)
[  649.309517][ T5906] em28xx 3-1:0.89: Deregistering snapshot button
[  649.344234][ T5987] usb 4-1: USB disconnect, device number 47
[  649.425810][ T5906] em28xx 3-1:0.89: Freeing device
[  649.619039][T10391] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  651.267794][T10416] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma?
[  651.382405][T10417] /dev/rnullb0: Can't open blockdev
[  651.890877][ T5987] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  652.064951][ T5987] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 52, changing to 7
[  652.099453][ T5987] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 9272, setting to 1024
[  652.121512][ T5987] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  652.155764][ T5987] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  652.186927][ T5987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  652.294107][ T5987] usb 3-1: SerialNumber: syz
[  652.689956][ T5987] usbtest 3-1:1.0: Linux user mode ISO test driver
[  652.898421][ T5987] usbtest 3-1:1.0: high-speed {control bulk-in iso-out} tests (+alt)
[  652.907746][T10440] ./cgroup: Can't lookup blockdev
[  652.929770][T10440] MTD: Attempt to mount non-MTD device "/dev/rnullb0"
[  652.979453][ T5987] usb 3-1: USB disconnect, device number 46
[  652.982712][T10440] /dev/rnullb0: Can't open blockdev
[  653.226368][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[  653.305078][    T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!!
[  653.341983][    T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!!
[  653.439327][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[  653.489509][    T0] NOHZ tick-stop error: local softirq work is pending, handler #21a!!!
[  653.681172][    T0] NOHZ tick-stop error: local softirq work is pending, handler #88!!!
[  653.869268][    T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!!
[  653.898808][    T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!!
[  653.929962][    T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!!
[  654.003828][    T0] NOHZ tick-stop error: local softirq work is pending, handler #20a!!!
[  654.167312][T10434] /dev/sg0: Can't lookup blockdev
[  654.992062][T10468] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  655.068212][ T5906] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  655.203003][ T5167] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  655.216957][ T5167] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  655.226485][ T5167] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  655.235894][ T5167] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  655.244501][ T5167] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  655.270837][ T5906] usb 4-1: Using ep0 maxpacket: 32
[  655.299701][ T5898] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  655.307631][ T5898] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  655.316484][ T5898] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  655.331091][ T5898] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  655.339826][ T5898] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  655.351286][ T5906] usb 4-1: config 0 has an invalid interface number: 89 but max is 0
[  655.415636][ T5906] usb 4-1: config 0 has no interface number 0
[  655.460838][ T5906] usb 4-1: config 0 interface 89 has no altsetting 0
[  655.517867][ T5906] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  655.550928][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  655.580228][ T5906] usb 4-1: Product: syz
[  655.610324][ T5906] usb 4-1: Manufacturer: syz
[  655.625901][ T5906] usb 4-1: SerialNumber: syz
[  655.657333][ T5906] usb 4-1: config 0 descriptor??
[  655.693969][ T5906] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  655.741324][ T5906] em28xx 4-1:0.89: Video interface 89 found: bulk
[  656.316400][ T5906] em28xx 4-1:0.89: unknown em28xx chip ID (0)
[  656.666842][T10469] chnl_net:caif_netlink_parms(): no params data found
[  657.143078][T10469] bridge0: port 1(bridge_slave_0) entered blocking state
[  657.156392][ T5906] em28xx 4-1:0.89: writing to i2c device at 0xa0 failed (error=-5)
[  657.201944][T10469] bridge0: port 1(bridge_slave_0) entered disabled state
[  657.209296][T10469] bridge_slave_0: entered allmulticast mode
[  657.220094][ T5906] em28xx 4-1:0.89: failed to read eeprom (err=-5)
[  657.237032][ T5906] em28xx 4-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5]
[  657.261319][T10469] bridge_slave_0: entered promiscuous mode
[  657.276325][T10469] bridge0: port 2(bridge_slave_1) entered blocking state
[  657.286820][T10469] bridge0: port 2(bridge_slave_1) entered disabled state
[  657.297522][T10469] bridge_slave_1: entered allmulticast mode
[  657.321174][T10469] bridge_slave_1: entered promiscuous mode
[  657.331098][ T5906] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67)
[  657.351236][ T5906] em28xx 4-1:0.89: analog set to bulk mode.
[  657.380384][ T5987] em28xx 4-1:0.89: Registering V4L2 extension
[  657.400958][ T5167] Bluetooth: hci4: command tx timeout
[  657.421414][ T5906] usb 4-1: USB disconnect, device number 48
[  657.430894][ T5999] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  657.457801][ T5906] em28xx 4-1:0.89: Disconnecting em28xx
[  657.605858][ T5987] em28xx 4-1:0.89: Config register raw data: 0xffffffed
[  657.614276][ T5987] em28xx 4-1:0.89: AC97 chip type couldn't be determined
[  657.626406][ T5999] usb 3-1: Using ep0 maxpacket: 8
[  657.632934][ T5987] em28xx 4-1:0.89: No AC97 audio processor
[  657.644746][ T5999] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04
[  657.660966][ T5987] usb 4-1: Decoder not found
[  657.666451][ T5999] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  657.680800][ T5987] em28xx 4-1:0.89: failed to create media graph
[  657.687470][ T5987] em28xx 4-1:0.89: V4L2 device video103 deregistered
[  657.717464][ T5999] usb 3-1: Product: syz
[  657.726828][ T5999] usb 3-1: Manufacturer: syz
[  657.734116][ T5987] em28xx 4-1:0.89: Registering snapshot button...
[  657.753191][ T5999] usb 3-1: SerialNumber: syz
[  657.777031][ T5987] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input49
[  657.792082][ T5999] usb 3-1: config 0 descriptor??
[  657.841635][ T5987] em28xx 4-1:0.89: Remote control support is not available for this card.
[  657.866252][ T5906] em28xx 4-1:0.89: Closing input extension
[  657.883897][ T5906] em28xx 4-1:0.89: Deregistering snapshot button
[  658.001881][ T5999] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  658.344220][T10469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  658.373417][ T5906] em28xx 4-1:0.89: Freeing device
[  658.435046][T10469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  658.948341][T10469] team0: Port device team_slave_0 added
[  658.978952][T10469] team0: Port device team_slave_1 added
[  659.027378][T10502] binder: BINDER_SET_CONTEXT_MGR already set
[  659.034108][T10502] binder: 10501:10502 ioctl 4018620d 200000000040 returned -16
[  659.259303][ T5999] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  659.291762][T10469] batman_adv: batadv0: Adding interface: batadv_slave_0
[  659.298934][T10469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  659.335386][ T5906] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  659.362159][ T5999] usb 3-1: USB disconnect, device number 47
[  659.480191][T10469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  659.492193][ T5898] Bluetooth: hci4: command tx timeout
[  659.535985][ T5906] usb 2-1: unable to get BOS descriptor or descriptor too short
[  659.557274][T10469] batman_adv: batadv0: Adding interface: batadv_slave_1
[  659.589755][ T5906] usb 2-1: config 1 has an invalid interface number: 172 but max is 1
[  659.603475][T10469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  659.630497][ T5906] usb 2-1: config 1 has no interface number 1
[  659.637874][ T5906] usb 2-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  659.664679][ T5906] usb 2-1: too many endpoints for config 1 interface 172 altsetting 161: 221, using maximum allowed: 30
[  659.679576][T10469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  659.692548][ T5906] usb 2-1: config 1 interface 172 altsetting 161 has 0 endpoint descriptors, different from the interface descriptor's value: 221
[  659.724897][ T5906] usb 2-1: config 1 interface 0 has no altsetting 0
[  659.737513][ T5906] usb 2-1: config 1 interface 172 has no altsetting 0
[  659.768395][ T5906] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  659.788308][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  659.813252][ T5906] usb 2-1: Product: syz
[  659.828968][ T5906] usb 2-1: Manufacturer: syz
[  659.846858][ T5906] usb 2-1: SerialNumber: syz
[  659.947484][T10469] hsr_slave_0: entered promiscuous mode
[  659.955553][T10469] hsr_slave_1: entered promiscuous mode
[  659.969475][T10469] debugfs: 'hsr0' already exists in 'hsr'
[  659.975876][T10469] Cannot create hsr debugfs directory
[  660.092407][ T5906] smsusb:smsusb_probe: board id=8, interface number 0
[  660.186960][ T5906] smsusb:smsusb_probe: board id=8, interface number 172
[  660.263884][ T5906] usb 2-1: USB disconnect, device number 46
[  661.018769][T10469] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  661.089240][T10469] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  661.148134][T10469] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  661.203200][T10524] warning: `syz.1.1535' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  661.226424][T10469] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  661.510436][T10532] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1537'.
[  661.561102][ T5898] Bluetooth: hci4: command tx timeout
[  661.591767][T10533] /dev/rnullb0: Can't open blockdev
[  661.616162][T10532] netlink: 5948 bytes leftover after parsing attributes in process `syz.3.1537'.
[  661.657867][T10532] netlink: 5948 bytes leftover after parsing attributes in process `syz.3.1537'.
[  661.695851][T10533] /dev/rnullb0: Can't open blockdev
[  661.731924][T10533] /dev/rnullb0: Can't open blockdev
[  661.749749][T10469] 8021q: adding VLAN 0 to HW filter on device bond0
[  661.769787][T10532] netlink: 5948 bytes leftover after parsing attributes in process `syz.3.1537'.
[  661.821970][T10533] /dev/rnullb0: Can't open blockdev
[  661.858991][T10533] /dev/rnullb0: Can't open blockdev
[  661.890565][T10469] 8021q: adding VLAN 0 to HW filter on device team0
[  661.901912][T10532] netlink: 5948 bytes leftover after parsing attributes in process `syz.3.1537'.
[  661.919042][T10533] /dev/rnullb0: Can't open blockdev
[  661.942887][T10533] /dev/rnullb0: Can't open blockdev
[  661.966047][T10533] /dev/rnullb0: Can't open blockdev
[  661.978694][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  661.978823][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  661.988796][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  661.988925][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  662.038156][T10533] /dev/rnullb0: Can't open blockdev
[  662.075778][T10533] /dev/rnullb0: Can't open blockdev
[  662.075866][T10532] netlink: 5948 bytes leftover after parsing attributes in process `syz.3.1537'.
[  662.955312][T10547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1540'.
[  663.390880][T10555] binder_alloc: 10553: binder_alloc_buf, no vma
[  663.411133][ T5999] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  663.573848][ T5999] usb 2-1: device descriptor read/64, error -71
[  663.641946][ T5906] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  663.650549][ T5898] Bluetooth: hci4: command tx timeout
[  663.830870][ T5999] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  663.876250][ T5906] usb 4-1: unable to get BOS descriptor or descriptor too short
[  663.933181][ T5906] usb 4-1: config 1 has an invalid interface number: 172 but max is 1
[  663.953885][ T5906] usb 4-1: config 1 has no interface number 1
[  663.960555][ T5906] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  664.018148][ T5906] usb 4-1: too many endpoints for config 1 interface 172 altsetting 161: 221, using maximum allowed: 30
[  664.050829][ T5999] usb 2-1: device descriptor read/64, error -71
[  664.068597][ T5906] usb 4-1: config 1 interface 172 altsetting 161 has 0 endpoint descriptors, different from the interface descriptor's value: 221
[  664.096644][T10469] 8021q: adding VLAN 0 to HW filter on device batadv0
[  664.109392][ T5906] usb 4-1: config 1 interface 0 has no altsetting 0
[  664.139862][ T5906] usb 4-1: config 1 interface 172 has no altsetting 0
[  664.165826][ T5999] usb usb2-port1: attempt power cycle
[  664.186650][ T5906] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  664.204371][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  664.226402][ T5906] usb 4-1: Product: syz
[  664.236191][ T5906] usb 4-1: Manufacturer: syz
[  664.253325][ T5906] usb 4-1: SerialNumber: syz
[  664.484891][ T5906] smsusb:smsusb_probe: board id=8, interface number 0
[  664.533072][ T5999] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  664.555834][ T5906] smsusb:smsusb_probe: board id=8, interface number 172
[  664.605118][ T5999] usb 2-1: device descriptor read/8, error -71
[  664.632005][ T5906] usb 4-1: USB disconnect, device number 49
[  664.866514][T10572] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1546'.
[  664.890861][ T5999] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  664.922227][ T5999] usb 2-1: device descriptor read/8, error -71
[  665.031473][ T5999] usb usb2-port1: unable to enumerate USB device
[  665.379062][T10469] veth0_vlan: entered promiscuous mode
[  665.436151][T10469] veth1_vlan: entered promiscuous mode
[  665.492922][   T30] audit: type=1326 audit(1754120581.097:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10581 comm="syz.1.1549" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2024f8eb69 code=0x0
[  665.549311][T10469] veth0_macvtap: entered promiscuous mode
[  665.565140][T10469] veth1_macvtap: entered promiscuous mode
[  665.661425][T10469] batman_adv: batadv0: Interface activated: batadv_slave_0
[  665.715041][T10469] batman_adv: batadv0: Interface activated: batadv_slave_1
[  665.784239][   T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  665.817335][   T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  665.840568][   T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  665.889023][   T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  666.123598][T10587] netlink: 'syz.2.1551': attribute type 1 has an invalid length.
[  666.150007][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  666.173790][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  666.304977][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  666.328144][T10594] nfs4: Unknown parameter '
'
[  666.366324][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  666.734275][  T985] kernel read not supported for file /vcs (pid: 985 comm: kworker/0:2)
[  666.992520][T10604] binder_alloc: 10603: binder_alloc_buf, no vma
[  667.021283][T10605] FAULT_INJECTION: forcing a failure.
[  667.021283][T10605] name failslab, interval 1, probability 0, space 0, times 0
[  667.105386][T10605] CPU: 0 UID: 0 PID: 10605 Comm: syz.4.1512 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) 
[  667.105414][T10605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  667.105425][T10605] Call Trace:
[  667.105432][T10605]  <TASK>
[  667.105441][T10605]  dump_stack_lvl+0x189/0x250
[  667.105487][T10605]  ? __pfx____ratelimit+0x10/0x10
[  667.105517][T10605]  ? __pfx_dump_stack_lvl+0x10/0x10
[  667.105542][T10605]  ? __pfx__printk+0x10/0x10
[  667.105576][T10605]  ? __pfx___might_resched+0x10/0x10
[  667.105597][T10605]  ? fs_reclaim_acquire+0x7d/0x100
[  667.105625][T10605]  should_fail_ex+0x414/0x560
[  667.105654][T10605]  should_failslab+0xa8/0x100
[  667.105676][T10605]  kmem_cache_alloc_noprof+0x73/0x3c0
[  667.105705][T10605]  ? alloc_pid+0x9f/0xab0
[  667.105726][T10605]  ? copy_thread+0x4c6/0x9a0
[  667.105754][T10605]  alloc_pid+0x9f/0xab0
[  667.105792][T10605]  copy_process+0x198e/0x3c00
[  667.105837][T10605]  ? copy_process+0x97f/0x3c00
[  667.105872][T10605]  ? __pfx_copy_process+0x10/0x10
[  667.105912][T10605]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  667.105942][T10605]  vhost_task_create+0x1c4/0x290
[  667.105968][T10605]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  667.106000][T10605]  ? __pfx_vhost_task_create+0x10/0x10
[  667.106037][T10605]  ? __pfx_vhost_task_fn+0x10/0x10
[  667.106086][T10605]  kvm_mmu_post_init_vm+0x14c/0x300
[  667.106112][T10605]  kvm_arch_vcpu_ioctl_run+0xdc/0x1940
[  667.106149][T10605]  ? __mutex_trylock_common+0x153/0x260
[  667.106179][T10605]  ? __pfx___mutex_trylock_common+0x10/0x10
[  667.106205][T10605]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  667.106237][T10605]  ? rcu_is_watching+0x15/0xb0
[  667.106261][T10605]  ? trace_contention_end+0x39/0x120
[  667.106286][T10605]  ? look_up_lock_class+0x74/0x170
[  667.106318][T10605]  ? register_lock_class+0x51/0x320
[  667.106347][T10605]  ? __lock_acquire+0xab9/0xd20
[  667.106402][T10605]  kvm_vcpu_ioctl+0x95c/0xe90
[  667.106439][T10605]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  667.106476][T10605]  ? __lock_acquire+0xab9/0xd20
[  667.106522][T10605]  ? __fget_files+0x2a/0x420
[  667.106551][T10605]  ? __fget_files+0x2a/0x420
[  667.106573][T10605]  ? __fget_files+0x3a0/0x420
[  667.106595][T10605]  ? __fget_files+0x2a/0x420
[  667.106624][T10605]  ? bpf_lsm_file_ioctl+0x9/0x20
[  667.106652][T10605]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  667.106681][T10605]  __se_sys_ioctl+0xfc/0x170
[  667.106715][T10605]  do_syscall_64+0xfa/0x3b0
[  667.106733][T10605]  ? lockdep_hardirqs_on+0x9c/0x150
[  667.106761][T10605]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  667.106789][T10605]  ? clear_bhb_loop+0x60/0xb0
[  667.106815][T10605]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  667.106835][T10605] RIP: 0033:0x7f505c38eb69
[  667.106854][T10605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  667.106872][T10605] RSP: 002b:00007f505d239038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  667.106896][T10605] RAX: ffffffffffffffda RBX: 00007f505c5b6080 RCX: 00007f505c38eb69
[  667.106912][T10605] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  667.106924][T10605] RBP: 00007f505d239090 R08: 0000000000000000 R09: 0000000000000000
[  667.106936][T10605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  667.106948][T10605] R13: 0000000000000001 R14: 00007f505c5b6080 R15: 00007fffcf914a18
[  667.106982][T10605]  </TASK>
[  667.471143][    C0] vkms_vblank_simulate: vblank timer overrun
[  667.804927][ T5906] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  668.038738][ T5906] usb 2-1: unable to get BOS descriptor or descriptor too short
[  668.051868][ T5906] usb 2-1: config 1 has an invalid interface number: 172 but max is 1
[  668.113144][ T5906] usb 2-1: config 1 has no interface number 1
[  668.143791][ T5906] usb 2-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  668.212735][ T5906] usb 2-1: too many endpoints for config 1 interface 172 altsetting 161: 221, using maximum allowed: 30
[  668.274666][ T5906] usb 2-1: config 1 interface 172 altsetting 161 has 0 endpoint descriptors, different from the interface descriptor's value: 221
[  668.312178][ T5906] usb 2-1: config 1 interface 0 has no altsetting 0
[  668.329728][ T5906] usb 2-1: config 1 interface 172 has no altsetting 0
[  668.359791][ T5906] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  668.380719][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  668.400757][  T985] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  668.420327][ T5906] usb 2-1: Product: syz
[  668.430515][ T5906] usb 2-1: Manufacturer: syz
[  668.444971][ T5906] usb 2-1: SerialNumber: syz
[  668.484416][    C0] vkms_vblank_simulate: vblank timer overrun
[  668.600942][  T985] usb 3-1: Using ep0 maxpacket: 32
[  668.630792][  T985] usb 3-1: config 0 has an invalid interface number: 89 but max is 0
[  668.660842][  T985] usb 3-1: config 0 has no interface number 0
[  668.667898][  T985] usb 3-1: config 0 interface 89 has no altsetting 0
[  668.778143][  T985] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  668.823887][  T985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  668.887827][  T985] usb 3-1: Product: syz
[  668.907096][  T985] usb 3-1: Manufacturer: syz
[  668.957285][ T5906] smsusb:smsusb_probe: board id=8, interface number 0
[  668.970038][  T985] usb 3-1: SerialNumber: syz
[  669.011833][  T985] usb 3-1: config 0 descriptor??
[  669.032474][ T5906] smsusb:smsusb_probe: board id=8, interface number 172
[  669.050870][  T985] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  669.096602][ T5906] usb 2-1: USB disconnect, device number 51
[  669.125167][  T985] em28xx 3-1:0.89: Video interface 89 found: bulk
[  669.655530][  T985] em28xx 3-1:0.89: unknown em28xx chip ID (0)
[  670.306269][  T985] em28xx 3-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64)
[  670.336266][  T985] em28xx 3-1:0.89: board has no eeprom
[  670.575181][  T985] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67)
[  670.612588][  T985] em28xx 3-1:0.89: analog set to bulk mode.
[  670.633914][ T5987] em28xx 3-1:0.89: Registering V4L2 extension
[  670.694801][  T985] usb 3-1: USB disconnect, device number 48
[  670.719612][  T985] em28xx 3-1:0.89: Disconnecting em28xx
[  674.742773][ T5987] em28xx 3-1:0.89: Config register raw data: 0xffffffed
[  680.759241][ T5987] em28xx 3-1:0.89: AC97 chip type couldn't be determined
[  687.865111][ T5987] em28xx 3-1:0.89: No AC97 audio processor
[  691.335303][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  691.348505][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  691.365037][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  691.378471][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  691.395212][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  691.408165][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  691.424192][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  691.437755][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  691.454138][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  691.467165][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  695.995802][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  696.017008][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  696.343554][    C1] net_ratelimit: 2480 callbacks suppressed
[  696.343579][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  696.362923][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  696.380351][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  696.393806][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  696.409817][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  696.422825][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  696.438689][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  696.451335][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  696.466975][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  696.480055][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  701.351023][    C1] net_ratelimit: 2532 callbacks suppressed
[  701.351046][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  701.369833][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  701.386049][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  701.399143][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  701.414454][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  701.427537][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  701.443177][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  701.455908][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  701.471405][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  701.484554][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  706.360805][    C0] net_ratelimit: 5526 callbacks suppressed
[  706.360829][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  706.362941][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  706.368528][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  706.380461][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  706.393356][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  706.407948][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  706.418495][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  706.430118][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  706.443460][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  706.458136][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  711.370864][    C0] net_ratelimit: 5763 callbacks suppressed
[  711.370889][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  711.371978][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  711.378491][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  711.389922][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  711.403283][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  711.417028][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  711.427907][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  711.438854][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  711.451845][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  711.465994][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  716.381671][    C0] net_ratelimit: 5958 callbacks suppressed
[  716.381696][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  716.383369][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  716.388882][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  716.400639][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  716.414387][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  716.427998][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  716.438557][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  716.450195][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  716.463254][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  716.477316][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  721.392121][    C0] net_ratelimit: 5034 callbacks suppressed
[  721.392145][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  721.393386][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  721.401698][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  721.411320][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:2b:eb:06:a0:b3, vlan:0)
[  721.427030][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  721.436635][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  721.452737][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  721.464421][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  721.477985][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  721.487140][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:2b:eb:06:a0:b3, vlan:0)
[  726.401116][    C1] net_ratelimit: 4539 callbacks suppressed
[  726.401138][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  726.402953][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  726.408330][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:2b:eb:06:a0:b3, vlan:0)
[  726.423952][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  726.433645][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  726.449427][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  726.460999][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  726.474379][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  726.484227][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:2b:eb:06:a0:b3, vlan:0)
[  726.500003][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  731.412279][    C1] net_ratelimit: 4526 callbacks suppressed
[  731.412303][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  731.413608][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  731.418788][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:2b:eb:06:a0:b3, vlan:0)
[  731.434420][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  731.444113][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  731.459757][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  731.471610][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  731.484279][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  731.493614][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:2b:eb:06:a0:b3, vlan:0)
[  731.508947][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  736.421178][    C1] net_ratelimit: 4606 callbacks suppressed
[  736.421204][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  736.424255][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  736.427854][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:2b:eb:06:a0:b3, vlan:0)
[  736.445949][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  736.453969][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  736.471388][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  736.481025][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  736.501439][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  736.505264][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:2b:eb:06:a0:b3, vlan:0)
[  736.522186][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  741.432448][    C1] net_ratelimit: 4653 callbacks suppressed
[  741.432472][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  741.434027][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  741.439207][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:2b:eb:06:a0:b3, vlan:0)
[  741.454901][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  741.464179][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  741.479298][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  741.491942][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  741.505580][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  741.515542][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:2b:eb:06:a0:b3, vlan:0)
[  741.533017][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  746.440665][    C1] net_ratelimit: 4620 callbacks suppressed
[  746.440690][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:2b:eb:06:a0:b3, vlan:0)
[  746.443597][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  746.447242][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  746.463970][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  746.474866][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  746.488983][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  746.498632][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:2b:eb:06:a0:b3, vlan:0)
[  746.514568][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  746.524455][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  746.540870][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  747.819407][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  747.840224][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  751.450854][    C1] net_ratelimit: 4671 callbacks suppressed
[  751.450878][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  751.453343][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  751.459979][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  751.473156][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  751.482481][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:2b:eb:06:a0:b3, vlan:0)
[  751.497973][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  751.506861][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  751.522533][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  751.534792][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  751.548423][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  756.462031][    C1] net_ratelimit: 4724 callbacks suppressed
[  756.462054][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  756.463922][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  756.468463][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:2b:eb:06:a0:b3, vlan:0)
[  756.493102][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  756.497065][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  756.507873][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  756.524121][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  756.536630][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  756.561049][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  756.572996][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:2b:eb:06:a0:b3, vlan:0)
[  761.470736][    C1] net_ratelimit: 4736 callbacks suppressed
[  761.470765][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  761.471363][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  761.480121][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  761.508161][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  761.517297][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:2b:eb:06:a0:b3, vlan:0)
[  761.534853][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  761.544341][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  761.560670][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  761.572271][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  761.586447][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  766.480806][    C1] net_ratelimit: 4494 callbacks suppressed
[  766.480828][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:2b:eb:06:a0:b3, vlan:0)
[  766.481692][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  766.487621][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  766.504502][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  766.518467][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  766.533692][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  766.543848][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:2b:eb:06:a0:b3, vlan:0)
[  766.560752][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  766.571210][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  766.586712][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  771.490771][    C1] net_ratelimit: 4553 callbacks suppressed
[  771.490796][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  771.491252][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  771.497326][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:2b:eb:06:a0:b3, vlan:0)
[  771.513282][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  771.522532][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  771.538709][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  771.550180][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  771.563887][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  771.572994][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:2b:eb:06:a0:b3, vlan:0)
[  771.588389][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  776.500804][    C1] net_ratelimit: 4612 callbacks suppressed
[  776.500828][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:2b:eb:06:a0:b3, vlan:0)
[  776.502153][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  776.507707][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  776.524513][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  776.535472][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  776.550033][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  776.560187][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:2b:eb:06:a0:b3, vlan:0)
[  776.575995][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  776.585096][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  776.601294][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  781.511382][    C1] net_ratelimit: 4536 callbacks suppressed
[  781.511407][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  781.511495][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  781.518379][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:2b:eb:06:a0:b3, vlan:0)
[  781.534327][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  781.543485][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  781.559556][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  781.570671][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  781.584498][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  781.593578][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:2b:eb:06:a0:b3, vlan:0)
[  781.609521][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  786.520928][    C1] net_ratelimit: 4619 callbacks suppressed
[  786.520952][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  786.524144][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  786.530559][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  786.545856][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  786.555256][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:2b:eb:06:a0:b3, vlan:0)
[  786.571307][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  786.580175][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  786.596452][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  786.608223][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  786.621615][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  791.530785][    C1] net_ratelimit: 4581 callbacks suppressed
[  791.530809][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  791.532469][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  791.537433][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:2b:eb:06:a0:b3, vlan:0)
[  791.552787][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  791.562303][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  791.578751][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  791.590797][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  791.603930][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  791.612836][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:2b:eb:06:a0:b3, vlan:0)
[  791.628328][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  796.541203][    C0] net_ratelimit: 4548 callbacks suppressed
[  796.541228][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  796.541969][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  796.552442][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  796.562534][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:2b:eb:06:a0:b3, vlan:0)
[  796.579135][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  796.589045][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  796.604483][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  796.617193][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  796.629444][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  796.638745][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:2b:eb:06:a0:b3, vlan:0)
[  801.553353][    C1] net_ratelimit: 4585 callbacks suppressed
[  801.553379][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  801.553915][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  801.559900][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:2b:eb:06:a0:b3, vlan:0)
[  801.575144][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  801.585243][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  801.601042][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  801.612761][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  801.625889][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  801.635716][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:2b:eb:06:a0:b3, vlan:0)
[  801.652200][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  806.561155][    C1] net_ratelimit: 4615 callbacks suppressed
[  806.561180][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  806.563901][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  806.567611][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:2b:eb:06:a0:b3, vlan:0)
[  806.583747][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  806.592958][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  806.609262][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  806.620723][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  806.634743][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  806.644734][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:2b:eb:06:a0:b3, vlan:0)
[  806.660841][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  809.592658][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  809.613940][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  811.571106][    C0] net_ratelimit: 4748 callbacks suppressed
[  811.571130][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  811.572534][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  811.572993][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:2b:eb:06:a0:b3, vlan:0)
[  811.573420][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  811.575338][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  811.576485][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  811.576987][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:2b:eb:06:a0:b3, vlan:0)
[  811.577389][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  811.579796][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  811.580362][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  816.580749][    C1] net_ratelimit: 4947 callbacks suppressed
[  816.580783][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  816.581249][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:2b:eb:06:a0:b3, vlan:0)
[  816.581644][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  816.583444][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  816.584691][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  816.585209][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:2b:eb:06:a0:b3, vlan:0)
[  816.585605][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  816.587963][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  816.588530][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  816.588996][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c2:2b:eb:06:a0:b3, vlan:0)
[  820.705414][   T31] INFO: task kworker/u8:0:12 blocked for more than 144 seconds.
[  820.705456][   T31]       Not tainted 6.16.0-next-20250731-syzkaller #0
[  820.705470][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  820.705482][   T31] task:kworker/u8:0    state:D stack:22264 pid:12    tgid:12    ppid:2      task_flags:0x4208060 flags:0x00004000
[  820.705549][   T31] Workqueue: events_unbound linkwatch_event
[  820.705583][   T31] Call Trace:
[  820.705593][   T31]  <TASK>
[  820.705610][   T31]  __schedule+0x1798/0x4cc0
[  820.705658][   T31]  ? __lock_acquire+0xab9/0xd20
[  820.705690][   T31]  ? __lock_acquire+0xab9/0xd20
[  820.705714][   T31]  ? __pfx___schedule+0x10/0x10
[  820.705763][   T31]  ? schedule+0x91/0x360
[  820.705798][   T31]  schedule+0x165/0x360
[  820.705831][   T31]  schedule_preempt_disabled+0x13/0x30
[  820.705860][   T31]  __mutex_lock+0x7e6/0x1360
[  820.705891][   T31]  ? look_up_lock_class+0x74/0x170
[  820.705926][   T31]  ? __mutex_lock+0x5b6/0x1360
[  820.705974][   T31]  ? linkwatch_event+0xe/0x60
[  820.706005][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  820.706052][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  820.706080][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  820.706105][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  820.706132][   T31]  linkwatch_event+0xe/0x60
[  820.706157][   T31]  process_scheduled_works+0xade/0x17b0
[  820.706218][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  820.706265][   T31]  worker_thread+0x8a0/0xda0
[  820.706324][   T31]  kthread+0x70e/0x8a0
[  820.706358][   T31]  ? __pfx_worker_thread+0x10/0x10
[  820.706384][   T31]  ? __pfx_kthread+0x10/0x10
[  820.706416][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  820.706445][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  820.706472][   T31]  ? __pfx_kthread+0x10/0x10
[  820.706504][   T31]  ret_from_fork+0x3fc/0x770
[  820.706535][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  820.706570][   T31]  ? __switch_to_asm+0x39/0x70
[  820.706601][   T31]  ? __switch_to_asm+0x33/0x70
[  820.706630][   T31]  ? __pfx_kthread+0x10/0x10
[  820.706661][   T31]  ret_from_fork_asm+0x1a/0x30
[  820.706699][   T31]  </TASK>
[  820.706748][   T31] INFO: task kworker/0:2:985 blocked for more than 144 seconds.
[  820.706764][   T31]       Not tainted 6.16.0-next-20250731-syzkaller #0
[  820.706777][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  820.706788][   T31] task:kworker/0:2     state:D stack:21176 pid:985   tgid:985   ppid:2      task_flags:0x4288060 flags:0x00004000
[  820.706965][   T31] Workqueue: usb_hub_wq hub_event
[  820.706991][   T31] Call Trace:
[  820.707001][   T31]  <TASK>
[  820.707017][   T31]  __schedule+0x1798/0x4cc0
[  820.707066][   T31]  ? __pfx___console_unlock+0x10/0x10
[  820.707099][   T31]  ? __lock_acquire+0xab9/0xd20
[  820.707122][   T31]  ? __pfx___schedule+0x10/0x10
[  820.707171][   T31]  ? schedule+0x91/0x360
[  820.707205][   T31]  schedule+0x165/0x360
[  820.707236][   T31]  schedule_timeout+0x9a/0x270
[  820.707281][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  820.707322][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  820.707351][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  820.707379][   T31]  ? wait_for_completion+0x267/0x5d0
[  820.707413][   T31]  wait_for_completion+0x2bf/0x5d0
[  820.707459][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[  820.707500][   T31]  ? __flush_work+0xd2/0xbc0
[  820.707529][   T31]  ? __flush_work+0xd2/0xbc0
[  820.707557][   T31]  __flush_work+0x9b9/0xbc0
[  820.707585][   T31]  ? __pfx_dev_printk_emit+0x10/0x10
[  820.707620][   T31]  ? __flush_work+0xd2/0xbc0
[  820.707651][   T31]  ? __pfx___flush_work+0x10/0x10
[  820.707681][   T31]  ? __pfx_wq_barrier_func+0x10/0x10
[  820.707721][   T31]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  820.707766][   T31]  em28xx_usb_disconnect+0x163/0x2f0
[  820.707796][   T31]  usb_unbind_interface+0x26b/0x910
[  820.707835][   T31]  ? __pfx_usb_unbind_interface+0x10/0x10
[  820.707864][   T31]  device_release_driver_internal+0x4d6/0x800
[  820.707898][   T31]  bus_remove_device+0x34d/0x410
[  820.707944][   T31]  device_del+0x511/0x8e0
[  820.707981][   T31]  ? kfree+0x18e/0x440
[  820.708014][   T31]  ? __pfx_device_del+0x10/0x10
[  820.708046][   T31]  ? kobject_put+0x446/0x480
[  820.708081][   T31]  usb_disable_device+0x3e9/0x8a0
[  820.708117][   T31]  usb_disconnect+0x330/0x950
[  820.708151][   T31]  hub_event+0x1cf5/0x4a20
[  820.708208][   T31]  ? do_raw_spin_lock+0x121/0x290
[  820.708242][   T31]  ? register_lock_class+0x51/0x320
[  820.708285][   T31]  ? __pfx_hub_event+0x10/0x10
[  820.708310][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  820.708343][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  820.708369][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  820.708393][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[  820.708421][   T31]  process_scheduled_works+0xade/0x17b0
[  820.708481][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[  820.708527][   T31]  worker_thread+0x8a0/0xda0
[  820.708584][   T31]  kthread+0x70e/0x8a0
[  820.708618][   T31]  ? __pfx_worker_thread+0x10/0x10
[  820.708644][   T31]  ? __pfx_kthread+0x10/0x10
[  820.708676][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  820.708704][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  820.708732][   T31]  ? __pfx_kthread+0x10/0x10
[  820.708763][   T31]  ret_from_fork+0x3fc/0x770
[  820.708793][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  820.708827][   T31]  ? __switch_to_asm+0x39/0x70
[  820.708857][   T31]  ? __switch_to_asm+0x33/0x70
[  820.708885][   T31]  ? __pfx_kthread+0x10/0x10
[  820.708916][   T31]  ret_from_fork_asm+0x1a/0x30
[  820.708964][   T31]  </TASK>
[  820.709114][   T31] INFO: task syz.4.1560:10620 blocked for more than 144 seconds.
[  820.709131][   T31]       Not tainted 6.16.0-next-20250731-syzkaller #0
[  820.709144][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  820.709155][   T31] task:syz.4.1560      state:D stack:27432 pid:10620 tgid:10618 ppid:10469  task_flags:0x400140 flags:0x00004004
[  820.709226][   T31] Call Trace:
[  820.709234][   T31]  <TASK>
[  820.709250][   T31]  __schedule+0x1798/0x4cc0
[  820.709294][   T31]  ? __lock_acquire+0xab9/0xd20
[  820.709325][   T31]  ? __lock_acquire+0xab9/0xd20
[  820.709350][   T31]  ? __pfx___schedule+0x10/0x10
[  820.709397][   T31]  ? schedule+0x91/0x360
[  820.709430][   T31]  schedule+0x165/0x360
[  820.709463][   T31]  schedule_preempt_disabled+0x13/0x30
[  820.709490][   T31]  __mutex_lock+0x7e6/0x1360
[  820.709527][   T31]  ? __mutex_lock+0x5b6/0x1360
[  820.709566][   T31]  ? devinet_ioctl+0x323/0x1b50
[  820.709594][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  820.709637][   T31]  ? bpf_lsm_capable+0x9/0x20
[  820.709658][   T31]  ? security_capable+0x7e/0x2e0
[  820.709691][   T31]  devinet_ioctl+0x323/0x1b50
[  820.709730][   T31]  ? __pfx_devinet_ioctl+0x10/0x10
[  820.709758][   T31]  ? get_user_ifreq+0x12c/0x180
[  820.709789][   T31]  inet_ioctl+0x3c0/0x4c0
[  820.709822][   T31]  ? __pfx_inet_ioctl+0x10/0x10
[  820.709878][   T31]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  820.709902][   T31]  ? packet_ioctl+0x254/0x350
[  820.709942][   T31]  sock_do_ioctl+0xd9/0x300
[  820.709976][   T31]  ? __pfx_sock_do_ioctl+0x10/0x10
[  820.710002][   T31]  ? __lock_acquire+0xab9/0xd20
[  820.710045][   T31]  sock_ioctl+0x576/0x790
[  820.710075][   T31]  ? __pfx_sock_ioctl+0x10/0x10
[  820.710104][   T31]  ? __fget_files+0x2a/0x420
[  820.710131][   T31]  ? __fget_files+0x3a0/0x420
[  820.710156][   T31]  ? __fget_files+0x2a/0x420
[  820.710185][   T31]  ? bpf_lsm_file_ioctl+0x9/0x20
[  820.710216][   T31]  ? __pfx_sock_ioctl+0x10/0x10
[  820.710244][   T31]  __se_sys_ioctl+0xfc/0x170
[  820.710280][   T31]  do_syscall_64+0xfa/0x3b0
[  820.710300][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  820.710331][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  820.710354][   T31]  ? clear_bhb_loop+0x60/0xb0
[  820.710383][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  820.710406][   T31] RIP: 0033:0x7f505c38eb69
[  820.710426][   T31] RSP: 002b:00007f505d239038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  820.710451][   T31] RAX: ffffffffffffffda RBX: 00007f505c5b6080 RCX: 00007f505c38eb69
[  820.710468][   T31] RDX: 0000200000000180 RSI: 0000000000008914 RDI: 0000000000000005
[  820.710508][   T31] RBP: 00007f505c411df1 R08: 0000000000000000 R09: 0000000000000000
[  820.710524][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  820.710539][   T31] R13: 0000000000000000 R14: 00007f505c5b6080 R15: 00007fffcf914a18
[  820.725142][   T31]  </TASK>
[  820.725162][   T31] INFO: task syz.1.1561:10624 blocked for more than 144 seconds.
[  820.725181][   T31]       Not tainted 6.16.0-next-20250731-syzkaller #0
[  820.725194][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  820.725206][   T31] task:syz.1.1561      state:D stack:24968 pid:10624 tgid:10622 ppid:5894   task_flags:0x400140 flags:0x00004004
[  820.725275][   T31] Call Trace:
[  820.725285][   T31]  <TASK>
[  820.725299][   T31]  __schedule+0x1798/0x4cc0
[  820.725347][   T31]  ? __lock_acquire+0xab9/0xd20
[  820.725380][   T31]  ? __lock_acquire+0xab9/0xd20
[  820.725404][   T31]  ? __pfx___schedule+0x10/0x10
[  820.725452][   T31]  ? schedule+0x91/0x360
[  820.725486][   T31]  schedule+0x165/0x360
[  820.725518][   T31]  schedule_preempt_disabled+0x13/0x30
[  820.725549][   T31]  __mutex_lock+0x7e6/0x1360
[  820.725587][   T31]  ? __mutex_lock+0x5b6/0x1360
[  820.725626][   T31]  ? nl80211_pre_doit+0x5f/0x930
[  820.725658][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  820.725703][   T31]  ? __nla_parse+0x40/0x60
[  820.725737][   T31]  nl80211_pre_doit+0x5f/0x930
[  820.725761][   T31]  ? genl_family_rcv_msg_attrs_parse+0x212/0x2a0
[  820.725799][   T31]  genl_family_rcv_msg_doit+0x1bb/0x300
[  820.725836][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  820.725878][   T31]  ? bpf_lsm_capable+0x9/0x20
[  820.725898][   T31]  ? security_capable+0x7e/0x2e0
[  820.725940][   T31]  genl_rcv_msg+0x60e/0x790
[  820.725975][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  820.726001][   T31]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  820.726023][   T31]  ? __pfx_nl80211_del_key+0x10/0x10
[  820.726048][   T31]  ? __pfx_nl80211_post_doit+0x10/0x10
[  820.726090][   T31]  netlink_rcv_skb+0x205/0x470
[  820.726121][   T31]  ? __lock_acquire+0xab9/0xd20
[  820.726145][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  820.726173][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  820.726228][   T31]  ? down_read+0x1ad/0x2e0
[  820.726255][   T31]  genl_rcv+0x28/0x40
[  820.726278][   T31]  netlink_unicast+0x82c/0x9e0
[  820.726320][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  820.726353][   T31]  ? netlink_sendmsg+0x642/0xb30
[  820.726372][   T31]  ? skb_put+0x11b/0x210
[  820.726400][   T31]  netlink_sendmsg+0x805/0xb30
[  820.726434][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  820.726461][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[  820.726491][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  820.726518][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  820.726540][   T31]  __sock_sendmsg+0x21c/0x270
[  820.726575][   T31]  ____sys_sendmsg+0x505/0x830
[  820.726607][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  820.726644][   T31]  ? import_iovec+0x74/0xa0
[  820.726669][   T31]  ___sys_sendmsg+0x21f/0x2a0
[  820.726697][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  820.726765][   T31]  ? __fget_files+0x2a/0x420
[  820.726790][   T31]  ? __fget_files+0x3a0/0x420
[  820.726829][   T31]  __x64_sys_sendmsg+0x19b/0x260
[  820.726859][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  820.726898][   T31]  ? rcu_is_watching+0x15/0xb0
[  820.726930][   T31]  ? do_syscall_64+0xbe/0x3b0
[  820.726974][   T31]  do_syscall_64+0xfa/0x3b0
[  820.726996][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  820.727018][   T31]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  820.727040][   T31]  ? clear_bhb_loop+0x60/0xb0
[  820.727067][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  820.727089][   T31] RIP: 0033:0x7f2024f8eb69
[  820.727108][   T31] RSP: 002b:00007f2022df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  820.727134][   T31] RAX: ffffffffffffffda RBX: 00007f20251b5fa0 RCX: 00007f2024f8eb69
[  820.727151][   T31] RDX: 0000000000000800 RSI: 00002000000006c0 RDI: 0000000000000009
[  820.727166][   T31] RBP: 00007f2025011df1 R08: 0000000000000000 R09: 0000000000000000
[  820.727181][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  820.727196][   T31] R13: 0000000000000000 R14: 00007f20251b5fa0 R15: 00007ffdeb0988d8
[  820.727232][   T31]  </TASK>
[  820.727245][   T31] 
[  820.727245][   T31] Showing all locks held in the system:
[  820.727256][   T31] 2 locks held by kthreadd/2:
[  820.727271][   T31] 1 lock held by kworker/R-kvfre/6:
[  820.727284][   T31] 3 locks held by kworker/u8:0/12:
[  820.727297][   T31]  #0: ffff88801a889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  820.727363][   T31]  #1: ffffc90000117bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  820.727424][   T31]  #2: ffffffff8f934988 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  820.727485][   T31] 1 lock held by kworker/R-mm_pe/14:
[  820.727501][   T31] 2 locks held by kworker/1:0/24:
[  820.727514][   T31] 1 lock held by khungtaskd/31:
[  820.727527][   T31]  #0: ffffffff8e539f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  820.727592][   T31] 4 locks held by kworker/u8:2/36:
[  820.727608][   T31] 4 locks held by kworker/u8:3/49:
[  820.727631][   T31] 2 locks held by kworker/1:2/982:
[  820.727646][   T31] 5 locks held by kworker/0:2/985:
[  820.727660][   T31]  #0: ffff8881442c7d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  820.727714][   T31]  #1: ffffc90003737bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  820.727761][   T31]  #2: ffff888027f94198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20
[  820.727809][   T31]  #3: ffff88802837e198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950
[  820.727862][   T31]  #4: ffff88807aa41160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800
[  820.727926][   T31] 4 locks held by kworker/u8:6/1149:
[  820.727971][   T31] 3 locks held by kworker/R-ipv6_/3186:
[  820.727984][   T31]  #0: ffff88802f675148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  820.728047][   T31]  #1: ffffc9000b16fba0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  820.728106][   T31]  #2: ffffffff8f934988 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  820.728169][   T31] 5 locks held by kworker/R-bat_e/3410:
[  820.728185][   T31] 1 lock held by klogd/5206:
[  820.728199][   T31] 1 lock held by udevd/5217:
[  820.728211][   T31] 3 locks held by dhcpcd/5511:
[  820.728224][   T31] 2 locks held by dhcpcd/5512:
[  820.728238][   T31] 2 locks held by getty/5612:
[  820.728250][   T31]  #0: ffff8880303ee0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  820.728316][   T31]  #1: ffffc900036c62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  820.728378][   T31] 3 locks held by kworker/0:0/5875:
[  820.728392][   T31] 2 locks held by syz-executor/5883:
[  820.728407][   T31] 1 lock held by syz-executor/5893:
[  820.728420][   T31] 1 lock held by syz-executor/5895:
[  820.728434][   T31] 3 locks held by kworker/1:1/5897:
[  820.728448][   T31] 5 locks held by kworker/u9:2/5898:
[  820.728461][   T31]  #0: ffff888028129948 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  820.728521][   T31]  #1: ffffc90004407bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  820.728583][   T31]  #2: ffff888030b98dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0
[  820.728643][   T31]  #3: ffff888030b980b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30
[  820.728704][   T31]  #4: ffffffff8e53f9b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  820.728759][   T31] 2 locks held by kworker/0:3/5906:
[  820.728773][   T31] 4 locks held by udevd/5909:
[  820.728786][   T31]  #0: ffff888048338668 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10
[  820.728887][   T31]  #1: ffff88805a9b7488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0
[  820.728964][   T31]  #2: ffff8880511d0d28 (kn->active#26){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0
[  820.729032][   T31]  #3: ffff88802837e198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0
[  820.729091][   T31] 3 locks held by kworker/u8:1/5918:
[  820.729111][   T31] 2 locks held by kworker/1:4/5958:
[  820.729125][   T31] 5 locks held by kworker/u8:4/5965:
[  820.729139][   T31] 2 locks held by kworker/1:5/5966:
[  820.729152][   T31] 3 locks held by kworker/u8:5/5971:
[  820.729166][   T31] 3 locks held by kworker/u8:7/5980:
[  820.729179][   T31] 5 locks held by kworker/0:4/5987:
[  820.729193][   T31] 3 locks held by kworker/0:5/5999:
[  820.729205][   T31]  #0: ffff88801a882148 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  820.729268][   T31]  #1: ffffc9000a96fbc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  820.729328][   T31]  #2: ffffffff8f934988 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf30
[  820.729386][   T31] 3 locks held by kworker/0:7/6008:
[  820.729401][   T31] 3 locks held by kworker/1:6/8937:
[  820.729413][   T31]  #0: ffff88801a880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  820.729474][   T31]  #1: ffffc9000b78fbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  820.729534][   T31]  #2: ffffffff8f934988 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
[  820.729597][   T31] 2 locks held by syz.4.1560/10619:
[  820.729611][   T31] 1 lock held by syz.4.1560/10620:
[  820.729624][   T31]  #0: ffffffff8f934988 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x323/0x1b50
[  820.729681][   T31] 2 locks held by syz.1.1561/10624:
[  820.729693][   T31]  #0: ffffffff8f999e30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  820.729752][   T31]  #1: ffffffff8f934988 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x930
[  820.729812][   T31] 4 locks held by kworker/u8:8/10635:
[  820.729825][   T31] 2 locks held by kworker/u8:9/10636:
[  820.729838][   T31] 4 locks held by kworker/u8:10/10637:
[  820.729853][   T31] 
[  820.729861][   T31] =============================================
[  820.729861][   T31] 
[  820.729872][   T31] NMI backtrace for cpu 1
[  820.729886][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) 
[  820.729908][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  820.729920][   T31] Call Trace:
[  820.729927][   T31]  <TASK>
[  820.729947][   T31]  dump_stack_lvl+0x189/0x250
[  820.729979][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  820.730004][   T31]  ? __pfx__printk+0x10/0x10
[  820.730044][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  820.730073][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  820.730100][   T31]  ? __pfx__printk+0x10/0x10
[  820.730133][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  820.730157][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  820.730185][   T31]  watchdog+0xf93/0xfe0
[  820.730210][   T31]  ? watchdog+0x1de/0xfe0
[  820.730235][   T31]  kthread+0x70e/0x8a0
[  820.730264][   T31]  ? __pfx_watchdog+0x10/0x10
[  820.730282][   T31]  ? __pfx_kthread+0x10/0x10
[  820.730312][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  820.730338][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  820.730363][   T31]  ? __pfx_kthread+0x10/0x10
[  820.730391][   T31]  ret_from_fork+0x3fc/0x770
[  820.730418][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  820.730448][   T31]  ? __switch_to_asm+0x39/0x70
[  820.730499][   T31]  ? __switch_to_asm+0x33/0x70
[  820.730525][   T31]  ? __pfx_kthread+0x10/0x10
[  820.730554][   T31]  ret_from_fork_asm+0x1a/0x30
[  820.730587][   T31]  </TASK>
[  820.744175][   T31] Sending NMI from CPU 1 to CPUs 0:
[  820.744213][    C0] NMI backtrace for cpu 0
[  820.744230][    C0] CPU: 0 UID: 0 PID: 3410 Comm: kworker/R-bat_e Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) 
[  820.744251][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  820.744263][    C0] Workqueue: bat_events batadv_tt_purge
[  820.744289][    C0] RIP: 0010:check_preemption_disabled+0x6/0x120
[  820.744309][    C0] Code: c7 c6 e0 cd 04 8c eb 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 <48> 83 ec 10 65 48 8b 05 fe c1 62 07 48 89 44 24 08 65 8b 05 06 c2
[  820.744322][    C0] RSP: 0018:ffffc90000006410 EFLAGS: 00000282
[  820.744335][    C0] RAX: 0000000000000001 RBX: ffffffff8a561c95 RCX: ffff8880305f1e00
[  820.744347][    C0] RDX: 0000000000000000 RSI: ffffffff8c04cde0 RDI: ffffffff8c04cda0
[  820.744358][    C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff81730195
[  820.744369][    C0] R10: ffffc90000006578 R11: ffffffff81ac8020 R12: 1ffff92000000ca5
[  820.744381][    C0] R13: ffffc90000006560 R14: ffffc90000006528 R15: ffffffff81730195
[  820.744392][    C0] FS:  0000000000000000(0000) GS:ffff88812580a000(0000) knlGS:0000000000000000
[  820.744405][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  820.744416][    C0] CR2: 00007fdcc00e56c0 CR3: 000000000e336000 CR4: 00000000003526f0
[  820.744433][    C0] Call Trace:
[  820.744439][    C0]  <IRQ>
[  820.744445][    C0]  ? NF_HOOK+0x215/0x3c0
[  820.744468][    C0]  ? unwind_next_frame+0xa5/0x2390
[  820.744487][    C0]  rcu_is_watching+0x15/0xb0
[  820.744504][    C0]  ? NF_HOOK+0x215/0x3c0
[  820.744524][    C0]  ? unwind_next_frame+0xa5/0x2390
[  820.744541][    C0]  unwind_next_frame+0xd4/0x2390
[  820.744562][    C0]  ? unwind_next_frame+0xa5/0x2390
[  820.744580][    C0]  ? nf_hook_slow+0xc2/0x220
[  820.744597][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  820.744618][    C0]  arch_stack_walk+0x11c/0x150
[  820.744640][    C0]  ? NF_HOOK+0x215/0x3c0
[  820.744662][    C0]  stack_trace_save+0x9c/0xe0
[  820.744688][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  820.744707][    C0]  ? nf_hook_slow+0xc2/0x220
[  820.744723][    C0]  ? __lock_acquire+0xab9/0xd20
[  820.744739][    C0]  kasan_save_track+0x3e/0x80
[  820.744759][    C0]  ? kasan_save_track+0x3e/0x80
[  820.744777][    C0]  ? kasan_save_free_info+0x46/0x50
[  820.744793][    C0]  ? __kasan_slab_free+0x5b/0x80
[  820.744813][    C0]  ? kmem_cache_free+0x18f/0x400
[  820.744833][    C0]  ? br_nf_dev_queue_xmit+0x4ee/0x24a0
[  820.744849][    C0]  ? NF_HOOK+0x618/0x6b0
[  820.744862][    C0]  ? br_nf_post_routing+0xb66/0xfe0
[  820.744876][    C0]  ? nf_hook_slow+0xc2/0x220
[  820.744889][    C0]  ? NF_HOOK+0x215/0x3c0
[  820.744908][    C0]  ? br_forward_finish+0xd3/0x130
[  820.744929][    C0]  ? br_nf_forward_finish+0xa40/0xe60
[  820.744945][    C0]  ? NF_HOOK+0x618/0x6b0
[  820.744959][    C0]  ? br_nf_forward_ip+0x647/0x7e0
[  820.744974][    C0]  ? nf_hook_slow+0xc2/0x220
[  820.744988][    C0]  ? NF_HOOK+0x215/0x3c0
[  820.745024][    C0]  ? br_nf_dev_queue_xmit+0x4ee/0x24a0
[  820.745041][    C0]  kasan_save_free_info+0x46/0x50
[  820.745059][    C0]  __kasan_slab_free+0x5b/0x80
[  820.745080][    C0]  kmem_cache_free+0x18f/0x400
[  820.745100][    C0]  ? __skb_ext_put+0x218/0x2e0
[  820.745119][    C0]  br_nf_dev_queue_xmit+0x4ee/0x24a0
[  820.745140][    C0]  ? NF_HOOK+0x9e/0x6b0
[  820.745154][    C0]  NF_HOOK+0x618/0x6b0
[  820.745172][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  820.745187][    C0]  ? __pfx_br_nf_dev_queue_xmit+0x10/0x10
[  820.745204][    C0]  ? net_generic+0x1e/0x240
[  820.745219][    C0]  ? net_generic+0x1e/0x240
[  820.745233][    C0]  ? net_generic+0x1e/0x240
[  820.745246][    C0]  ? skb_pull+0xc1/0x1d0
[  820.745266][    C0]  br_nf_post_routing+0xb66/0xfe0
[  820.745282][    C0]  ? __pfx_br_nf_dev_queue_xmit+0x10/0x10
[  820.745300][    C0]  ? __pfx_br_nf_post_routing+0x10/0x10
[  820.745317][    C0]  nf_hook_slow+0xc2/0x220
[  820.745332][    C0]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  820.745355][    C0]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  820.745376][    C0]  NF_HOOK+0x215/0x3c0
[  820.745399][    C0]  ? NF_HOOK+0x9e/0x3c0
[  820.745419][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  820.745439][    C0]  ? net_generic+0x1e/0x240
[  820.745455][    C0]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  820.745479][    C0]  ? net_generic+0x1e/0x240
[  820.745495][    C0]  br_forward_finish+0xd3/0x130
[  820.745516][    C0]  ? __pfx_br_dev_queue_push_xmit+0x10/0x10
[  820.745540][    C0]  br_nf_forward_finish+0xa40/0xe60
[  820.745560][    C0]  ? __pfx_br_nf_forward_finish+0x10/0x10
[  820.745578][    C0]  ? __pfx_br_forward_finish+0x10/0x10
[  820.745601][    C0]  ? NF_HOOK+0x9e/0x6b0
[  820.745616][    C0]  ? NF_HOOK+0x9e/0x6b0
[  820.745630][    C0]  NF_HOOK+0x618/0x6b0
[  820.745648][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  820.745662][    C0]  ? net_generic+0x1e/0x240
[  820.745689][    C0]  br_nf_forward_ip+0x647/0x7e0
[  820.745705][    C0]  ? __pfx_br_nf_forward_finish+0x10/0x10
[  820.745722][    C0]  ? __pfx_br_nf_forward+0x10/0x10
[  820.745739][    C0]  nf_hook_slow+0xc2/0x220
[  820.745754][    C0]  ? __pfx_br_forward_finish+0x10/0x10
[  820.745775][    C0]  ? __pfx_br_forward_finish+0x10/0x10
[  820.745797][    C0]  NF_HOOK+0x215/0x3c0
[  820.745819][    C0]  ? NF_HOOK+0x9e/0x3c0
[  820.745840][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  820.745862][    C0]  ? __pfx_br_forward_finish+0x10/0x10
[  820.745888][    C0]  __br_forward+0x41e/0x600
[  820.745909][    C0]  ? __pfx_br_forward_finish+0x10/0x10
[  820.745930][    C0]  ? skb_clone+0x246/0x3a0
[  820.745949][    C0]  ? __pfx___br_forward+0x10/0x10
[  820.745975][    C0]  br_handle_frame_finish+0x14b4/0x19b0
[  820.745991][    C0]  ? stack_depot_save_flags+0x40/0x860
[  820.746014][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  820.746029][    C0]  ? br_handle_frame+0x97f/0x14c0
[  820.746044][    C0]  ? __netif_receive_skb+0x72/0x380
[  820.746063][    C0]  ? process_backlog+0x60e/0x14f0
[  820.746084][    C0]  ? __napi_poll+0xc7/0x360
[  820.746103][    C0]  ? handle_softirqs+0x283/0x870
[  820.746120][    C0]  ? do_softirq+0xec/0x180
[  820.746135][    C0]  ? __local_bh_enable_ip+0x17d/0x1c0
[  820.746152][    C0]  ? process_scheduled_works+0xade/0x17b0
[  820.746169][    C0]  ? rescuer_thread+0x53c/0xdd0
[  820.746186][    C0]  ? kthread+0x70e/0x8a0
[  820.746205][    C0]  ? tsc_refine_calibration_work+0x4d0/0x520
[  820.746222][    C0]  ? ret_from_fork_asm+0x1a/0x30
[  820.746239][    C0]  ? nf_hook_slow+0x176/0x220
[  820.746255][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  820.746271][    C0]  br_nf_hook_thresh+0x3c3/0x4a0
[  820.746290][    C0]  ? __pfx_br_nf_hook_thresh+0x10/0x10
[  820.746306][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  820.746327][    C0]  br_nf_pre_routing_finish_ipv6+0x948/0xd00
[  820.746345][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  820.746365][    C0]  ? br_nf_pre_routing_ipv6+0x42f/0x6b0
[  820.746382][    C0]  br_nf_pre_routing_ipv6+0x37e/0x6b0
[  820.746401][    C0]  ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10
[  820.746419][    C0]  ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10
[  820.746436][    C0]  ? br_nf_pre_routing+0x720/0x1470
[  820.746455][    C0]  ? __pfx_br_nf_pre_routing+0x10/0x10
[  820.746470][    C0]  br_handle_frame+0x97f/0x14c0
[  820.746490][    C0]  ? __pfx_br_handle_frame+0x10/0x10
[  820.746507][    C0]  ? __pfx_br_handle_frame_finish+0x10/0x10
[  820.746526][    C0]  ? __pfx_br_handle_frame+0x10/0x10
[  820.746543][    C0]  __netif_receive_skb_core+0x10b6/0x4020
[  820.746564][    C0]  ? ip6_mc_input+0x8f4/0xaf0
[  820.746589][    C0]  ? ip6_mc_input+0x8f4/0xaf0
[  820.746613][    C0]  ? __pfx_ip6_mc_input+0x10/0x10
[  820.746636][    C0]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  820.746657][    C0]  ? ip6_rcv_finish+0x29e/0x2e0
[  820.746679][    C0]  ? NF_HOOK+0x309/0x3a0
[  820.746705][    C0]  ? skb_orphan+0xaf/0xd0
[  820.746727][    C0]  ? __lock_acquire+0xab9/0xd20
[  820.746746][    C0]  ? process_backlog+0x2d5/0x14f0
[  820.746768][    C0]  ? process_backlog+0x2d5/0x14f0
[  820.746791][    C0]  __netif_receive_skb+0x72/0x380
[  820.746813][    C0]  ? process_backlog+0x2d5/0x14f0
[  820.746835][    C0]  process_backlog+0x60e/0x14f0
[  820.746863][    C0]  ? __pfx_process_backlog+0x10/0x10
[  820.746886][    C0]  ? do_raw_spin_lock+0x121/0x290
[  820.746908][    C0]  __napi_poll+0xc7/0x360
[  820.746927][    C0]  ? net_rx_action+0x46d/0xe30
[  820.746951][    C0]  net_rx_action+0x707/0xe30
[  820.746980][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  820.747016][    C0]  handle_softirqs+0x283/0x870
[  820.747035][    C0]  ? do_softirq+0xec/0x180
[  820.747054][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  820.747073][    C0]  ? batadv_tt_purge+0x4d1/0x9e0
[  820.747094][    C0]  do_softirq+0xec/0x180
[  820.747110][    C0]  </IRQ>
[  820.747116][    C0]  <TASK>
[  820.747123][    C0]  ? __pfx_do_softirq+0x10/0x10
[  820.747143][    C0]  ? lockdep_softirqs_on+0x13b/0x1c0
[  820.747160][    C0]  __local_bh_enable_ip+0x17d/0x1c0
[  820.747178][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  820.747196][    C0]  ? do_raw_spin_unlock+0x122/0x240
[  820.747217][    C0]  ? batadv_tt_purge+0x4d1/0x9e0
[  820.747238][    C0]  batadv_tt_purge+0x4d1/0x9e0
[  820.747260][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  820.747279][    C0]  process_scheduled_works+0xade/0x17b0
[  820.747307][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  820.747329][    C0]  ? assign_work+0x381/0x410
[  820.747347][    C0]  rescuer_thread+0x53c/0xdd0
[  820.747368][    C0]  ? rescuer_thread+0xbb/0xdd0
[  820.747393][    C0]  kthread+0x70e/0x8a0
[  820.747415][    C0]  ? __pfx_rescuer_thread+0x10/0x10
[  820.747433][    C0]  ? __pfx_kthread+0x10/0x10
[  820.747454][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  820.747474][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  820.747494][    C0]  ? __pfx_kthread+0x10/0x10
[  820.747515][    C0]  ret_from_fork+0x3fc/0x770
[  820.747534][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  820.747553][    C0]  ? __switch_to_asm+0x39/0x70
[  820.747574][    C0]  ? __switch_to_asm+0x33/0x70
[  820.747594][    C0]  ? __pfx_kthread+0x10/0x10
[  820.747615][    C0]  ret_from_fork_asm+0x1a/0x30
[  820.747635][    C0]  </TASK>
[  820.748212][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  820.748231][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) 
[  820.748257][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  820.748271][   T31] Call Trace:
[  820.748281][   T31]  <TASK>
[  820.748292][   T31]  dump_stack_lvl+0x99/0x250
[  820.748322][   T31]  ? __asan_memcpy+0x40/0x70
[  820.748351][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  820.748380][   T31]  ? __pfx__printk+0x10/0x10
[  820.748423][   T31]  vpanic+0x281/0x750
[  820.748451][   T31]  ? __pfx_vpanic+0x10/0x10
[  820.748475][   T31]  ? tick_nohz_tick_stopped+0x86/0xb0
[  820.748504][   T31]  ? __irq_work_queue_local+0x1de/0x550
[  820.748545][   T31]  panic+0xb9/0xc0
[  820.748568][   T31]  ? __pfx_panic+0x10/0x10
[  820.748594][   T31]  ? irq_work_queue+0xbc/0x140
[  820.748630][   T31]  ? nmi_trigger_cpumask_backtrace+0x234/0x300
[  820.748660][   T31]  watchdog+0xfd2/0xfe0
[  820.748685][   T31]  ? watchdog+0x1de/0xfe0
[  820.748711][   T31]  kthread+0x70e/0x8a0
[  820.748744][   T31]  ? __pfx_watchdog+0x10/0x10
[  820.748763][   T31]  ? __pfx_kthread+0x10/0x10
[  820.748795][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  820.748823][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  820.748851][   T31]  ? __pfx_kthread+0x10/0x10
[  820.748881][   T31]  ret_from_fork+0x3fc/0x770
[  820.748909][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  820.748949][   T31]  ? __switch_to_asm+0x39/0x70
[  820.748978][   T31]  ? __switch_to_asm+0x33/0x70
[  820.749007][   T31]  ? __pfx_kthread+0x10/0x10
[  820.749038][   T31]  ret_from_fork_asm+0x1a/0x30
[  820.749073][   T31]  </TASK>
[  820.749593][   T31] Kernel Offset: disabled