last executing test programs:

12.047067984s ago: executing program 2 (id=1034):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0xfffff6d8, 0x20800)
ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0, {0x81, 0x101}}, './file0\x00'})
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/206, 0xce, 0x0, &(0x7f0000000180)=""/21, 0x15}, &(0x7f0000000200)=0x40)
r2 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x90, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0x8, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x1, 0x3, 0x6, {0x9, 0x21, 0xf51, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0x0, 0x5}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x6, 0x6, 0x8, 0x10}, 0xc, &(0x7f00000002c0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x0, 0xf}]}, 0x2, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x421}}]})
ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000440)={0x60, 0x2, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, &(0x7f00000003c0)=[{0x40, 0x7, 0x4}, {0x4, 0x74c6}, {0x0, 0x8, 0x9c5}, {0x5, 0x2, 0xe}, {0x401, 0x70, 0x4}], 0x5, 0x800, 0x70, 0x1, 0x1, 0x1})
r3 = syz_usb_connect$cdc_ncm(0x4, 0x8c, &(0x7f00000004c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a, 0x2, 0x1, 0xa, 0xc0, 0xff, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "d884f8a41dcf"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x40, 0x1, 0x2}, {0x6, 0x24, 0x1a, 0x93d9}, [@acm={0x4}, @country_functional={0xc, 0x24, 0x7, 0xaf, 0x81, [0x3, 0xa, 0x8001]}, @mbim_extended={0x8, 0x24, 0x1c, 0x400, 0x1f, 0xb}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x1, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x8, 0x0, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x5, 0x9, 0x6}}}}}}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x300, 0x7f, 0x0, 0x57, 0xdf, 0xa9}, 0x43, &(0x7f00000005c0)={0x5, 0xf, 0x43, 0x4, [@ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x87, 0x1, 0x3, 0xff00, 0x2131, [0xffc0]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x6, 0x1}, @ssp_cap={0x24, 0x10, 0xa, 0x3, 0x6, 0x9, 0xf00f, 0x90, [0x0, 0xffff00, 0xff3f00, 0xf, 0xff3fff, 0x30]}]}, 0x7, [{0x28, &(0x7f0000000640)=@string={0x28, 0x3, "12da43530fa2911b4d28ed379ed7cf6c78e9c29b7ff7a9450ae6ad754fbb6b896ef3d4a85e10"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x43e}}, {0x4e, &(0x7f00000006c0)=@string={0x4e, 0x3, "44cd4405636567df6c56130445dde6f016f0641dc8ae1d6790d0257b83345c72ea02f4947c3651dfb35526d145e3093d0767875128ff3fac5d8525182621c9904dc5be9ac3cac8e0e9ac3163"}}, {0x40, &(0x7f0000000740)=@string={0x40, 0x3, "e12dc2f2ee5be95e19867a9aa5cfc632396ac2040e535fb345e290ada77e70fe2708b8dc85db34bc603ee801fd6ac414d697de2f499ceef850bff40823e0"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x430}}, {0x9c, &(0x7f00000007c0)=@string={0x9c, 0x3, "d8cc49e97a245f8f0cc9ad27ff3444049bf5eb8fc68357006830cb75b109e5612a29c89198fc2afabcd18b30818afb749688ed4cb3df5808994d3a6b75e879f5188f263a717543b70c3ab3e0cc0f52a2c8c2ab0bd6d533810ca5204c5ae46b319f21bfbeac97a25453a00448190ba616598ef264d6e6c5fc4e1067d9c86c8692cf02a467ad50f71307ed7d12ed819b41cede6389999c8a6314cb"}}, {0xc1, &(0x7f0000000880)=@string={0xc1, 0x3, "1fc378342e9b97a604c57378f1fccc7c73e240787f0ca911fd31260716d96d38facf2bf46da0a71b55343f32cd983e923663bbe124058364bcfa68b7b25a018decc1d7984b66d7eee8cde461e879d5bc358651c1b3990228e8ef50bb1081154cf76440310d3e9bf83ac5ff036d22de138f5baa97b7a019987828bc22db2fbeb0d1def1adef1bd4c903c20cb46c7007c571be80e52fb3826bc5998eb894b5a280ed82fb656c70915c3cf43bfaa09312c5165ff56a31c6a25c643e6557928839"}}]})
syz_usb_control_io$cdc_ncm(r3, &(0x7f0000000b40)={0xc, &(0x7f0000000a00)={0x20, 0xa, 0xbc, {0xbc, 0x8, "467029a20bf42678045ad367568ca698eea9be25a41cb4996b80134f48e4b7d6abd480a8c6e651461d541ac8c166fc242d5d1c0751c0377459d08cb4112e1c70c908831bdc11e761704ee16cc6a42a8c264bfff47cda76938f76f44c1c3dd29fd93b820772e68502464a2f97eb60ecb09ef38b069f89b8c12ee46bac46d737decb752dbe1dabbaf725d54be939a1d5fbe1e3d7e7cbbf23f2793c167aab44df14d74dec6371abb9adeda72cc65f1039fded7531115246e95fab61"}}, &(0x7f0000000b00)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000e80)={0x24, &(0x7f0000000b80)={0x20, 0x0, 0x100, "02e9156c49f6e2fa2d1fbfcd31b1ed30d96f2596c4fe3f6fe5d3bb5974947234abb21647886f5849ef2c3f54abea02eb7108137e91bd7eb31539017779be66d27dd70ffb074c46b0a66f38ba3a081f2134d5e604e9e0871b2e76960bd98474bc32b8bb7fc5315eacee3afbbb1a3c2a09535807fa94d0b99fecf00827dd27f4b980fef0d90ff5994e0febc742c774b43bb510532985d14b40e6b43d63cb629f73e2a0ddcd1588c3656fdbe0eab5c2dd990933c742846cfc2d7f7c57159f3c131bd5f933fd4abff7fb57ffa3c956c3b0806b9dc647b5b615b73b5a62e391dcbd55188053f0e8e43eae40cbbb8d0b8d00eded2075c404f2479cb8cf9a3695b702e3"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000d40)={0x20, 0x80, 0x1c, {0x8, 0x9, 0x401, 0x2, 0xa, 0xff, 0xd21, 0x2, 0xd93d, 0x5, 0x10, 0x3ff}}, &(0x7f0000000d80)={0x20, 0x85, 0x4, 0x4}, &(0x7f0000000dc0)={0x20, 0x83, 0x2}, &(0x7f0000000e00)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000e40)={0x20, 0x89, 0x2, 0x1}})
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_io_uring_setup(0x65e, &(0x7f0000000ec0)={0x0, 0x7849, 0x80, 0x1, 0x130, 0x0, r1}, &(0x7f0000000f40), &(0x7f0000000f80))
setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000fc0)=0x2b3c, 0x4)
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000001000)={[0x789, 0x81, 0x400, 0x92fb, 0x1, 0x6, 0xb, 0xa000, 0x5, 0x1, 0x7, 0x5, 0x7279, 0x81, 0x6, 0xdaaf], 0x1000, 0x10040})
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001300)={0x6, 0x4, &(0x7f00000010c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xf47}, [@ldst={0x2, 0x1, 0x4, 0x9, 0x7, 0xfffffffffffffff0, 0xfffffffffffffff0}]}, &(0x7f0000001100)='syzkaller\x00', 0x0, 0x9a, &(0x7f0000001140)=""/154, 0x41000, 0x20, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000001200)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000001240)={0x3, 0x1, 0x10000, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000001280)=[r1], &(0x7f00000012c0)=[{0x4, 0x5, 0x3, 0x6}, {0x5, 0x1, 0xc, 0x5}, {0x3, 0x3, 0xd, 0x5}, {0x5, 0x4, 0xe, 0x6}], 0x10, 0x2, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001600)={r4, 0x0, 0x3a, 0x2e, &(0x7f00000013c0)="6699ad2985e0a59b07dc5325797291fc52bcc45c2ded273b6c719e505e32aa223a30f1b515508cbe9a28e383e091a34e14d9f84a2a2b3808573b", &(0x7f0000001400)=""/46, 0x7ff, 0x0, 0xc4, 0xb5, &(0x7f0000001440)="6a469e1b3c489b7ebd9ec8bdcfc01c5d10890aa654c367bddc0f9d225ed59760c3c460e9b68e032a3d8641a4efe4316eaa0fbe0df81834cd58475e2b92874dea275d345c1dfd07409fcf1ba616f8081685637e083d8553d4a45ed552bdd6f8110b658e36c010741daca57478399f54d1e0480e64abcc2cbbc8710acecc221e993d686f48ded08cae55605be378727e90fa4c17bc768807bc5e4baabee6912f4d274055b0d9415ec149111d7f0f6dba7076b81f3b78499de30582d176b78dc46feb231571", &(0x7f0000001540)="b2944225296ddb9d166febd32493b44b6b15778d9691fe1c7b665803a081f9aa7c7f9f6b4f0c7e9be4d35db40376eeb4f792b19a37af97631d784b22ef4bd566ba665e7a2646127090de2724fe90bb92fb17aac9ed5605e573011e15da1e1944b60fef90182224b635dd87d654874305e8f228ac32fdc0825d455138939028b21aa70c243018e9235c54937942d1ffbbf114d6bafc542ea4687998d4ff32b9d206cc05948d9edbd89592c4d89b371d90f52dc5f56c"}, 0x4c)
openat$sndseq(0xffffff9c, &(0x7f0000001680), 0x6884)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001900)={r1, 0x58, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a00)={0x18, 0x10, &(0x7f00000016c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x66}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001740)='GPL\x00', 0xbdf, 0xd3, &(0x7f0000001780)=""/211, 0x40f00, 0x53, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001940)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001980)={0x2, 0xf, 0x1, 0xffffffff}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0), 0x10, 0xee, @void, @value}, 0x94)
r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000001cc0)={0x14, &(0x7f0000001ac0)={0x20, 0x21, 0x98, {0x98, 0xa, "7c6f69e4519e6f26ba9f0fcfa326dbb0b1618cb312cd6bb16f0ac84a1dc4d4c76b43492289982ddbdd1e5fdd912edb86c6b22f221579596d5f6c8f6b4360b529c9ec01f688f1c34291f7b5950edec371460efd4035336b0b8b5b85ef8fd8f229072f6bad635587c73b57c4dc5a8a8be0b834f6c10620549c303a655d42309e5d0bb2a3a4c5e9af45ea54fc45ba515db67d9844d1d703"}}, &(0x7f0000001b80)={0x0, 0x3, 0x85, @string={0x85, 0x3, "406b2df579d31af66503ede26201ff0a972c6e75439c8400f88c67005966b20f12add5f9cb8e459a2c00691c489fa87b26a78b5f675ad03eb23ce1466406888dd8b77679cea11e571ef66c8a8cb5c7f13f711d68952359c9eb8ea2e48dd3075e5d42074f869ea6824a17186b1a23304635d22f223af728a167a5d4fcb577f3339ff756"}}, &(0x7f0000001c40)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0xa, "e9"}, @local=@item_4={0x3, 0x2, 0x4, "9e512e00"}]}}, &(0x7f0000001c80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x9, 0x1, {0x22, 0x995}}}}, &(0x7f0000001f40)={0x18, &(0x7f0000001d00)={0x0, 0x5, 0xcb, "6df7049da4446882a6a36648c6d267997dc0bf454177b87a4384b77419cc12c0fac4b9ce271edb63a0e33cf268bc1e73770a681a32f5db6d51f5bf5415e6c89b409727329797d496ae4d632662e5f0aa59a2a526723b6f3b9a833ed4c901080acd5cd0db226a67d28d67aedb007c76faf1ff0157e50ee9b2e2eec0cf8eef239ec96bd09c52096c192fa158862535741a7dc94e1bad41e517051b9c076e9b9946a6eae881b672b940154a9f415fff89e7146f82b092fb64bb89da8ef629d1bd294f828c5b5f91d4e91e9ca7"}, &(0x7f0000001e00)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001e40)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001e80)={0x20, 0x1, 0x3c, "5f5f99e4b495ba8d9e4bc3ccb3f39ed806c95146c533affc0edce3f22bb2dae12b0d124a12b34ea2043a8969dedfc73201d0a2d25258a3ab0c672a57"}, &(0x7f0000001f00)={0x20, 0x3, 0x1, 0x6}})
sendmsg$NFT_BATCH(r1, &(0x7f0000002080)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002040)={&(0x7f0000001fc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TYPE={0x8}}], {0x14}}, 0x44}, 0x1, 0x0, 0x0, 0x200d0}, 0x20000000)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f00000020c0)=0x80000000, 0x4)
getsockopt$netlink(r1, 0x10e, 0x9, &(0x7f0000002100)=""/5, &(0x7f0000002140)=0x5)
socket$netlink(0x10, 0x3, 0x5)
ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000002180)={0x7, 0x7f, 0x8})
syz_usb_ep_write(r3, 0xb8, 0x4, &(0x7f00000021c0)="d5f695ea")
ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000002200)={0x8, 0xfff})
sendmsg$kcm(r1, &(0x7f0000002680)={&(0x7f0000002240)=@x25, 0x80, &(0x7f0000002340)=[{&(0x7f00000022c0)="081ca24a77f32e7b0d01d4d0b802b8e174ecb59e98d94e70be411d069cb385789299095e63104f5803674e155aba3f76005007b3a74bd084088dd7dd5b55b528cfffad2c11f30d0cd6d6a6d40a60f29fd24f296a4804e381e78f34eeb8667b27f10bb6f2ddcf276a0b5a4bb3a8ea41692d8692638cc53bb367a203a3dbd35f", 0x7f}], 0x1, &(0x7f0000002380)=[{0xe0, 0x88, 0x1, "e797a6c288e9652aa9c107da17e3935f5c1a6fefb5ea880bb71a5fc05f53dff28074d254e900f7ed65292e6149a80c3456f955f1dd66213d9ce9302145a743fc76591c82387a02e5f928c048c9d449b29e997be04a32d4b97daf36ce5efe87a38ebf5085661bb512eaabdfa4656e1ae481f216cfe6828244b142397c4c94c9134edb0e6a6fa71fba528e15f1b5698a46a104a5409fa83d70e017c2050650b599c2625b85c4bc38453c5c6b4e7a0263fcbe7aff692ee67ad94da027dadf2f8006611d532743016336c08b23d0fd04efb5aa1e0f87"}, {0x58, 0x116, 0x7, "2302f96dbd9d5034abd19ee62dc47537f430dba53fa72617aa3d76e69c86a4eb62ff05baf5a941f9c6e3410e0b15d2d6254961f54857904948309d1f29e2d28499018140b18769e42d"}, {0xe0, 0x111, 0xfffffffb, "1259745d47ec00f14609a2dc7070e6710fdc98e317f5bf9bf734e0bfec347cc6a696adc9a085180a3e9bd15bd493466be4fe96c882413d3e9314b35f7ffa1efe9b67ca71911d71bd046413d058449d20c711d8f37d13efac516ca6cb41d31424d2a3554f85ab742bbc50f4c11d3b40cadc1ed443dc4d664f7637a5956ff338b5cd127f4ecc552fb7f11b3f0f00cab72ecead0254fa153b71abc1d6d3eeca856a39f572bbf492b2cd8df7a1b607a8961f0ac4263342bc50cb7d1dce89fda97a8c07c7fbb445fa2aa14e7cd9cff133a6dbf5465ace"}, {0xe4, 0x0, 0x9, "b9a3d553ecd3ef18e5b2eadc3717e8334471c2d84e2cb284ae5dd18beb1429734b677947b354202e05f4a79ebccd4a315ba5bc012383a068934aac7eafcffccb24bc37d698162c67fcea284993d4cb23892e7f13f449461fe4567e65ba30adb65a99e81fd43a5b9dfef3689251006ff1528568c15ef7469f1f4e0d2005af3ef212a577fa3119fc20ce9713e9c7b72d31a70a1d58347fd3357385253e73bcd4bcab2650a9fd5afd9c1dd5352c39fdb3883a332d3460b6010f5c568a5af481bccefeb5308598ab5774edf7569fe73da593d4a89d9176"}], 0x2fc}, 0x402c8a5)
syz_usb_connect$uac1(0x3, 0xcf, &(0x7f00000026c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbd, 0x3, 0x1, 0xf7, 0x80, 0xf, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x4}, [@input_terminal={0xc, 0x24, 0x2, 0x3, 0x202, 0x6, 0x3, 0x5, 0xae, 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x202, 0x5, 0x5, 0x8, 0xac, 0x2}, @processing_unit={0x7, 0x24, 0x7, 0x4, 0x6, 0x81}, @processing_unit={0xc, 0x24, 0x7, 0x3, 0x4, 0xe, "bddd4c8912"}, @selector_unit={0x9, 0x24, 0x5, 0x4, 0x8, "9891b0d0"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xa, 0x38, 0x9, {0x7, 0x25, 0x1, 0x2, 0x9, 0x400}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x1, 0x5}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x8, 0x3, 0x5, "0783"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x5d, 0x4, 0x9e, 0x4, "40bce1131ceb0826e6"}, @as_header={0x7, 0x24, 0x1, 0x0, 0xb, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x5, 0x80, 0x5, {0x7, 0x25, 0x1, 0x2, 0xf, 0x11}}}}}}}]}}, &(0x7f0000002980)={0xa, &(0x7f00000027c0)={0xa, 0x6, 0x200, 0x4, 0x6, 0xf, 0x20, 0x7}, 0x44, &(0x7f0000002800)={0x5, 0xf, 0x44, 0x3, [@ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x4, 0xf000, 0x7, [0xc0cf, 0xf, 0x30, 0x3f30, 0x0]}, @ptm_cap={0x3}, @generic={0x1c, 0x10, 0x3, "92dd85b42a57d0dac795a72740f47d8a4fa12d088254832ca2"}]}, 0x2, [{0x4, &(0x7f0000002880)=@lang_id={0x4, 0x3, 0x3c01}}, {0xbd, &(0x7f00000028c0)=@string={0xbd, 0x3, "aaddeba4aea78f207fa253da2be3b00c16c67b068b38959f3b8acd00c452dd3284cd10d341580fbe00d00ecf531fe1170eff30dfeb043a2f6cb597682f6461ea2a45b73fbf1bf66a3e9f4765aade825633404b6277d8e252480b15cd7e1bb88dfb09f7d0fce8733153363d185c2187413982435030bddaeea1413cda9a74e4ee606da9215da863b373c7cfaaae78c05963dc2483a6441a6424d6611a344560b2e46f07a09e8ab5b40d64bd90d77e2cabc1043afbcb54d680a0ca8b"}}]})
write$P9_RREAD(r1, &(0x7f00000029c0)={0xe1, 0x75, 0x2, {0xd6, "db8a199315b70774629f2719547eff2119b22b545fb3e7c0cb7c89fbd597f59bcfcd74f55d561261792c23f02b4337c43262f4b5619f7dc8253d4058605534caaad57ad3b5b1d6194d7991ac05c61e285fa24931b3dc3266972ceb39a38198440a30cb560c10313c1b51c71dee33eb1cd5dcb8be95d874f7c2b10a656c841b16a2db83c7137183ca749bc08a122bc71299acfb70000522f4daf2c392a359e5e4c925cb91f5fbd14d7fca1cc7658860c465dcdb31c6017d58b24743797ed71866d81a3828cbaa45fc6876300fe8ad42a6d68e9d149401"}}, 0xe1)
openat$dir(0xffffff9c, &(0x7f0000002ac0)='./file0\x00', 0x4080, 0x108)

11.454606327s ago: executing program 1 (id=1039):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="26003300b0910300ffffffffffff08021100000050505050505457f99eb3c401010003005c0200000600cd000000000004008e"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

11.123325495s ago: executing program 1 (id=1041):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
userfaultfd(0x801)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket(0x11, 0x1, 0x2000027)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000180)=0x1)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
listen(0xffffffffffffffff, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
writev(0xffffffffffffffff, 0x0, 0x0)
shutdown(r5, 0x1)
r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x9, 0xffffffffffffff3e})
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)="316202ab5d4addffc19e9fb1dd315c61799629b987d39cb1d27a579c89894c8a16a392db5a40d7ad808181936bd867652cb73c3f518d8afe9cd9ab5c363e4279ae9ceb6b357f47c94b8b0fe98544e1ec50464b9a94e5556c8c38bb2a6709c85f1c52db041c2cf8ee5dd1265c59ce67d1cc2e94e576e7ba7ddfe20d0c9c1502de91114d5c68fa2b46d35ec7ec997738577084726683e28994f09e710507bd", 0x9e}, {&(0x7f00000001c0)="ae44466fe94aee475c74e67bc4e1a61d74311c776c400218fbf4f8643cdb97b6c30994167b7b9ce01b3cf178eb2ffa148d4c52c00406e62c8323e328057cd76a5f403efc50662ca7edb9b4d2422f470815ff34a53deeedc481d7c32b959499643c1a8a", 0x63}, {&(0x7f0000000400)="65411bc1ed4dd09ff544b2ba313aee34cdf08fffda0f87eed2da97412e5076403d4f3fe51a6732fcfe3c62ba03765efc443804fd231f0bb46d24b1961f5db2fa27e293e1052da50332f1011f5ce2e77543a7e294a77699a999b066ab8b807414d0cdc45fcb01410fa27ee974f694f0116ebf4c085599c56271bf03993973a1e91b5f2b71b6a6c5f160e9dab53c379dae07263b7360debcfc5182a7c0f6f4224d1eaf5b26f10d6ed0c7b90feabd19c83166c4e88b993e2a55abbc88b2d98e00151020f8f955e49aff7883556171859cb83f09729a", 0xd4}, {&(0x7f0000000500)="9aee25d9b3462b5c62b14c55eb790ffa85e63a83901f8cd5e1c1f8385fc96d057eca602898c9eeab92c131fd591d2df229066d46dd33a0794087633b147c27d522efaf8ab76962e6e56a3d3faa", 0x4d}, {&(0x7f0000000a80)="a5925002a8c913c40dbd4d1124e5e99f631afa8a7fbe72c9ca0e01d5cbced4d191e6855be472419f21a1e2fc6f073f49433495f4ad7da7c0e636e2479372d9d3fb232fd91f325f1c25e74a2461e9544dcc254510c4cf366b9e92f040df742e002a8e29fb42eac7fda085f40b88a7f4e83f9ffcd445ebbb7f67fa933624f9a4c0a94d97ce4154dc4a8eda566b858dfad6ceed19941407e911b68e37eb45e467a6fc21da506d29c0497ef5f22e05956be7799189d0b1ca6cb0e28c9ed15f333a07a50b7397403728b5f15350bd5af3368e1ee8957fca0008d6c4291d6c1eda8e4fab9c3f914410362faeaabd25f6be5a0989dfca76dbf4ae1b1520a3a02c8c6856cf377dfbdd786d69cd11ed6023d37d56ad0ff19141a41a79f0b5aa07c5f62718e76b30fabe24fb60b68e90d898f763696bf5239fe68d56160462bda4eabcd7de3f88e64f25e76bdb8dd6c5e121a3fac7a6d6bb71086fa89f5a75272f3ec91b514c088800143b2e32b0d697ed64ff7fe36e4f40bf1aa09dc1258318d610b54df71b31a11c3128d231c20edc27dd9b934e5959b34359c1c8f01a5c9fb63686cf09794cd68d8aa8f7fb8076da4040deaaca17bb25738ae1caaa64dd2063e4ab5b5d47636b3f0de9671ab808c712313ef0375927b2338e355976d4a0ae76ae68610655d7f8803ce3c93a3c8812a8055d05e3fa6725f16ad3114b40cfa3b67bda5959820d342be86090675b1f933d63fbd90244f511304208d5d01b1a67d8da32cd023de89282b0cd7afc3ae9ed09d033fba5e24793c9c3add08e21e88beaf6c6e98c6fd93b01d38607969d689dd1201191faceef139eb888ce5045cb167059fb7a9f59f6d8633a1b34b65da7864b1428687e6c469307be8605f841b1ac63bb39d011c9f3aa24315c3fbf63087f88dd50ff902cb0254f99d8e8b967a456709ab66e8e718933d375b9deeed76480009f8bd49b2ebf5c9b5dc113968d70b7bab46fdfd55940b7675e52df6b2f59e9a80bd9949bfd4337b12bc968ce154b3eec0bd6fe9985f0f5f3886a7fe8512b0b3404a83f2ff36f6c0c8725f580c87474578d6d030205d4b8931a2b1c8f4032fda84ce6c2d2ea0cdde6f5551173f3faf0f3709d037e0db78c51676abec6246bd8c1cb10c1ebebd3675d82b9a43e2557550ce45e82a74221d8d8d9f9dd7e38df0e81a950cf736c395017f582a21db74008ca5d886761314bebf01726f29c62332c3a43d65228ae4b871a075594256b07ae4b413b404fea9c41512bb9e6bc86d18a455a1fa23c06ed9390b28872432121ac6944b52f3f1912ff4b3704b476902d867714947e15642cfa3b431e593964fe93bfcabadc20a4b6bf71d68bf4c36c255d1bb934524d249900d107fc1404ee482ff95e58d1b0cc9e5f69dafefa2bddf1731c889e2558f238344fb5515a9944f0e142bad3b2b87bc9fdf6b57f2075f6a3b5b53637381abd2a484274e5d5816d6196e253a8430935564bebcf5d6fca7bbb0c223160d55ca6bfeb1b86c1e19266d2e286292c1717c3e354a3404bf3e0c737005b69ea417c0e671343abea451d4ddb95895c02aa5281a065397786e9fd3c4a7d6bc6378aab56427c2df9ecf70db6c90b066d10d9901141cd37e78151cf0e59117f7e3de123967e6505fffc4708a512bc810b44ab111542ee6617b91f10acbff2cc7bd6b0fd2e2cb1b8d40654fa42a79ddf728f33d80b3d8f355677d5b6e0ea49a8e73239496637bd7df7dc8335751988185489451b40cfbe322d46bb770d6dd00d4a5de8fd61f2eef841c3b761d033620dd3f72d97e1250ca908944032fec5f180cd8e6fe077d8655ab8c815aee5ad5e6924150c915b7491a695545005da560aa1bce843404d6d0877b4382b8415baa818f930f95a4d9bb2738506a932bd7207e62f695c0b862ff0dbc936ccbc553b8f8ec96cec4651c6fa2e6ec779864f4b84e2701ed4955e5e875b8e89f9ddf72d3dee09c9b69863e394e498b7b21b798e8ad7172efcc463789e50f08bc077266465f6dd01e424456f563ffedd7a80e7b39465d2dbb8184b6659e4e9b9d6d651b48a5054e237e249191cc8dfc6a2b72d6ee1e0b5c4b8e1239358978beb9d40be8e368be4288123e5a789e936de990907005ee237f7c54c09d45f71baa08adc99b9d715c3799c0210613e26fdf639488f56aa77a1510c92c3dc6150c861cda4309284bb3baaae149736493ce5ac8c82d343c9179e7663312b5c4698a2a9583f4e0a5068f98d9810dfadd6e275ae63097689d730b61e88eb9381eb68c4e0a0ed229eb4c1bae221d8d58326a55ae9abc2600af1c5c60187aa7199096f134448e7e7e62ed88bb3280aebaa4a56b8fe537599044f6f4ede255d574efe1ba5794a19ee5b15b4042f45bfa8b71cdf9ce46c87af27bfcee01f7df38b58b3012944fac85c7d3df0677c2d39b9b19fd16ad2b71320ce205088df8e8e25c54716b4d6d4598039754ef18f54c922f1ca3f19ddbaab99cf0eb5c9c64b18a24bac89e57ee73e1bc3816a26e308db8ff73a772ad9b0379c8b8652eb7477cb2ec119122c52f07cef2c351d06d42a17d05312b7c89d17ad8e7a3a6ced75f3154c55b4411868e2029b5b5b1ea0e492a400e98e74df5d2166ad1e189ac6e28bfa02cea618a52d10343cd997aa28e4b56a11a02bf3fc04129eb2141f825029c299b03addde6e70979170be7315dbd293e31e02409ec36449233df287eac0cff47677f321fe8fe483692f411c499f473972f90ac284214eac078bf541451d603accef9993e51568a0c1c33eb5893bcc66cfba858622c9a3ca4a14e060ad0f3c118c97400c2d5b64b0ae405ebd29193f77f171b9a9dfce67f14de80b108d7dee54b842c141bbcbda54e10fffc5ecb6adea9087f88aab6660ffcef2af295345defc5441e9db233001b001eb26dcda352356c0e44b8af8d9cf091eead10debe2beb64eab28eb9da265ded53cc5061e946f99d9bdd53fea20b172e902f93e931566319b78605a49146a3aba1f8433db1363e49b5b40f4a30edf759f8ae75038fc3476794672f0f354c9a9433037cf5b2dff3e5ad0fa76c28afaf26bd439d5128c3e04be3f659be2481ca4972d8d5b807759dfd3234ed697adf3edf9f30672d3672833cdf3e4728764c13ccfa640b7fb273f38104f153feecfc12a00cbb5037b8bc376d769c4f49a66128ab23042b8eb613846fd36e297c52bafd949b290cd0b083f9cce4070d54e591880e0a8fec015bcc3aefd705fa1dd9f38610408cfcea60c34a075e93bfab4f060295b4c2fa090d07318b505e0bb46f6e715d0d00b7764bac3b17b852b613ecead298a576020ff7b3688d93f7568057b5d1178a54a7acfe4e0873b246a5f256907f08dad836465771e42c093b3d78523c5a1d746a5d71f4f8a2e125d745321f5ff5b65cbc004570d264c47cd592ab8906c7637bd6ba3bdd020158aaf843c8f2b6cfc8ec6305776f61fe304a8ced97b40698251b6452721630353e2a2c9677bc4bd272ad38ab19bb71d92456d1ed76e8c7760eee3c5c20725ead9e94a2df3ad5e67539bbe3fcadf4e1ea795daa963b8ffb036c8a5b72c79bb55aebef158e026aaae18098bced96d5341b195d903f4f69d061f0bd5ea43de76f78f9d960345b74640f92542be58097272035bfb705dc458bbab3d3cadddb0cce200aff5120e16aaa796552e8d3591a431b523352f0b2fa5c0fb129668ee9dedcfefca9a803133dfcf3e21776b36317dcf710f33af16c58568d6e23dd6d7aa44737283aa6fd60887d3c78dfe22800c42a64b135ee76d2cf1ff1d4636d9ace615c474f76fb9f6cd1e6f42b3fdc489382c69fad360ef6f5c409d56ff8805c46cdd27bb5b640218eee57b24a1d6ea213b85479fae23966c765a3a5db21123c3aecf2e97d9b75e122c3835ba9126b320ef076345aae4c1f07da851d228d49452571d53dde7fa758cabd4a44863560038a4d39a29d10dc7ef8d1998a80b10fea14195870ea5794b8a59b8d9d5c54c8ce66b1eaf07dfb2d6f114787040c5da463ae4cde94a6c1ff00bc3d6e36edb80f5983ee813df36928cd839c683f049e6fc993dd04000f6940a7e644726a0a310567eab619bcc5f293c5ed16b41d447f0451142651e445a4a2e640726afc42311de67a71d5c28786465b5cdf09ca4989975873acff421d13ec0263cd91a8975a657d8281d9e9db46dd7be712a2fe7e7fd77936e18b4a41f3dbf14d964312a0482ec6a3b8b1fe84e0e3c883cb387536a47ad0971c6b35afc2376b86276b5a02972167bd1d51c756532e216a399af6d78fcc970f1101ceef42f21501beaa5df99592c0a4976005785b5d4f0cd1556f5ffa97e229ca7267dcb9b7542b44b40c27c96c199595e28cc7cc451ba17d019c8b98b0e940b55f798520ca584507ccc0cff05a5258902747f251682a80b740cab1393ac6e539497d2d18f72b383e8de8d7c18bf69ec7f82d6d9f988011c6a6732768e5435f4a2f03863636ef3a41165661605494f84b5687940caa7f2bcc2d1ed00d0ee8e34891d0c1d8b737c5f7486f2d226cf062b6c8518570049f0ccfcd42c20de95f4c6f70d6838359f0b9d4168515e5334a8103d89c3d8ce54859a413a1368da5996aeaffda392bde5440f0f7b15518cc7b94c1711c6b8e490a3a96193fbd6021ffc91954a13e51e29af3512db626a3c85019c5a0aef4ee39e7e91b841a4679e1e99e770315cbc87cec2d64939f8cbe9cbb9a7e346d5a16207eb9defa8f2d4a0596f6988f60284dad67df34c8baaee6cacfe9b6f9aa17d13fd232da14ef5e19358fd43dcdf5b799aa22d7dafbc700113cc5041eebe69df987e00cc1b91ea9d7bba00ff738d28502584e2baf5402d7e0274bf53a3aad0eb3a55836c15522b415d402e1d6d00d59831d56bc99f30ad6df5692d764769549eaa63ac42e365d0d8cebf0cd76c6c7bac617fae37f29d783d775c405561c46c9274937076de15b042a464760e2f82e30e07335bab49055d24464201b40ad77608f872b234acb314afc61302894039e205790bcd7dc4ea09a22ddb471a2f33fe81bcdc9bda65f9c360e2d0f41a50ff2a2d0ef778e2c2e34527530959240759806af8100a765e9ca34078f33c7f5b3e42f9181a6961538fd165ea1b2a4485fd5b3466f17a16a2b903a6b8dc9d0fb85d8fd19e63180ed280e84e0d9ea173443464114e8b6f42d3a4bb1a803668f7686c890455db334c0dde0d805e15135f27400aeca1e09bb2d3bef9b98d977f154b3cfcdd91bea5ff38215131e782ca3091ec25eb1ad9e0dfd64b44411a64bdc10e1a3ae3115de7952170e1e89838ac8b5943467534639b199f24130691ac50e2469a28d000673782dc452cb58cf3e82c77a8c2aeb6f9ef1e7d37062e13d4768bd117f5017b74d226bb9f863a7ecd3f6e0e5890e34f69d7c951f00be73722a13f27976b3320c77add43b65816948be131a314d8f8829392b91dd54c2081eab80922aaeb3d503c2019f274ed3008323f549122f7278abbc3cbf54f66d484e7acc08f99e2795e16268cf20424402bb979f819a7ac736f1cf5d04f77e8876ca78512a5a0f0ecdf1062b87ccc70a5e539de4c3d3e0dec0c407822f5ffb3aedace7f9b5529c4e4c31fd3e73d7dac65658c32efb0edb90fdab4eb464d2d02e589e4c6a610ed66c08e4856909c464d580d6ba6ab7f77fad362112a02270c0d5da29837201982936cf9161d9159cda3167a5000f38d1685622583d34dd4078689f6ba11562c4c40f38422c38e4f2aa4fc97414bbef526b5a0", 0x1000}], 0x5}, 0x4010)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0)
r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_open_dev$midi(0x0, 0x500, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x40)
close(r8)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r9, 0xffffffffffffffff, 0x0)

9.870257613s ago: executing program 2 (id=1044):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
prctl$PR_SET_CHILD_SUBREAPER(0x41555856, 0x1)
sendmmsg$unix(r0, &(0x7f00000bd000), 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0210ff090200090000000000000000007632c4402e8de4efec92829359dca8d819a513b0bdaf871313"], 0x10}, 0x1, 0x7}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9e46, &(0x7f0000006680))
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
unlinkat(0xffffffffffffff9c, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x77359400}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x23, &(0x7f0000000200)=[{0x4, 0x81, 0x36, 0xfffffffe}, {0xfff6, 0x9, 0xf, 0x8000002}, {0x80, 0x10, 0x8, 0xfffffff8}]})
mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000, 0xcb25880a3a34e19c, &(0x7f0000000000/0x3000)=nil)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
r7 = dup(r6)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000002c0)=ANY=[])

9.098450067s ago: executing program 0 (id=1047):
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0)
close_range(r0, r0, 0x2)
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0)
ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000080)=0x8)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(0xffffffffffffffff, 0x8010661b, 0x0)
syz_usb_connect(0x6, 0x132, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xa6, 0xc2, 0x2, 0x8, 0xc26, 0xa, 0xeb69, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x120, 0x2, 0xb9, 0x7, 0x70, 0x5, [{{0x9, 0x4, 0x35, 0x3, 0x1, 0x29, 0x89, 0x5e, 0x1, [], [{{0x9, 0x5, 0x7, 0x4, 0x20, 0x3, 0x2, 0xe}}]}}, {{0x9, 0x4, 0xfc, 0x8, 0x3, 0xf6, 0xfe, 0x7c, 0xf5, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x3, 0x6, 0x8}, {0x6, 0x24, 0x1a, 0x6, 0x1}}, @generic={0xc4, 0x0, "23aa85ef36ef01a8d1ac92e6d37ef9bce8fe4306444a3825d5d99dbc48ebc3f01b6f96b7992d96b396dbb5d925630650c762c1addd7bd6c650a29f1c128d6315bdbcda91194ed9a52912951eb686a7ec8d6cca6f01fd28163f9b48c3efe337ab66bbaf12c445ee75a039097f5dd38542e7b4dc2c47cc76837deb3f7abe52f05bd26f1d2bcfb69641727e55241b5210779d7ff0fea919aa989d5680f34dc72273bb80addf9b85463e942fa18dc8a9a15390b3713d7540704d47269a1cf58c9ec1a79c"}], [{{0x9, 0x5, 0x8, 0x0, 0x20, 0x0, 0x7, 0x4}}, {{0x9, 0x5, 0x2, 0x2, 0x40, 0x2, 0x0, 0x4}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x0, 0xc, 0x5}}]}}]}}]}}, 0x0)
r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000005c0)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}})
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@fallback=r3, r3, 0x37, 0x2000, 0x0, @value=r3}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000180)={'sit0\x00', <r4=>0x0, 0x80, 0x80, 0x400, 0x4, {{0x3f, 0x4, 0x3, 0x24, 0xfc, 0x67, 0x0, 0x81, 0x4, 0x0, @broadcast, @broadcast, {[@rr={0x7, 0xf, 0x46, [@broadcast, @multicast2, @empty]}, @generic={0x89, 0xa, "3b5e2ebf9b168519"}, @timestamp_addr={0x44, 0x24, 0x61, 0x1, 0xb, [{@broadcast, 0x6}, {@loopback, 0x6}, {@broadcast, 0x3}, {@empty, 0x8001}]}, @timestamp_addr={0x44, 0x4c, 0x69, 0x1, 0x9, [{@multicast1, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@local, 0x280}, {@remote, 0x471}, {@local, 0x8}, {@loopback}, {@rand_addr=0x64010102, 0x80}, {@multicast2, 0x2}, {@remote, 0x3}]}, @ssrr={0x89, 0xf, 0x84, [@broadcast, @private=0xa010102, @remote]}, @cipso={0x86, 0x49, 0x0, [{0x1, 0x5, "cc6390"}, {0x7, 0xe, "d72ba00fd747516e9ee79ac1"}, {0x7, 0x11, "e449a598a266ad3eb5d8d13dd333c1"}, {0x6, 0xc, "fb7983855344f749df87"}, {0x0, 0x5, "dbd75b"}, {0x0, 0xe, "488d80fc1c1d1351eabb8c10"}]}, @end, @ra={0x94, 0x4, 0x1}]}}}}})
sendmsg$nl_route(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@bridge_getlink={0x64, 0x12, 0x100, 0x70bd2c, 0x25dfdbfd, {0x7, 0x0, 0x0, r4, 0x1021, 0x330}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x10001}, @IFLA_MAP={0x20, 0xe, {0xd, 0x1, 0xd2, 0x3, 0x8, 0x6}}, @IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x7}, @IFLA_EVENT={0x8, 0x2c, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4)

8.244688081s ago: executing program 0 (id=1051):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000003f80)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x80003ec0, 0xfeffff07, 0x0, 0x80003ef0, 0x80003f20], 0x0, 0x0, &(0x7f0000003ec0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000cb892a9b0000000000000000000000000000000000ff0000000000000000000000fcffffff0000040000000000000000000000f0ffffff000000000000fa6a0000000000000000000000ffffffff00"/144]}, 0xe0)

7.977893931s ago: executing program 1 (id=1052):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fspick(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xa)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a000000140007800800114000000000080012400000ffff16000300686173687a6e6574"], 0x64}, 0x1, 0x0, 0x0, 0x2000001d}, 0x4044880)
ftruncate(r4, 0x200004)
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCADDRT(r6, 0x890c, &(0x7f0000000040)={0x0, @l2={0x1f, 0x3ff}, @in={0x2, 0x4e21, @loopback}, @nl=@unspec, 0x0, 0x0, 0x0, 0x0, 0x3})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60)
ioctl$KVM_SIGNAL_MSI(r9, 0x4020aea5, &(0x7f0000000140)={0x8080000, 0x4, 0x44, 0x1, 0x80000003})
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x18, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r10 = socket$inet6(0xa, 0x80002, 0x1)
ioctl$sock_TIOCINQ(r10, 0x541b, &(0x7f00000005c0))
sendfile(r3, r4, 0x0, 0x80001d00c0d1)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card3/oss_mixer\x00', 0x262103, 0x0)

7.712238558s ago: executing program 4 (id=1053):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x1, 0x8, 0x9, 0x200f}, {0x7fff, 0x6, 0x81, 0x1000}, {0x81, 0x59, 0x3, 0x5}]})
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
listen(r1, 0x4)
ioctl$sock_TIOCINQ(r1, 0x541b, 0x0)
syz_emit_ethernet(0x72, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x3c, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c17f008400000000880000"}}}}}}}, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0xdb, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000480)=0x5, 0x4)
r4 = socket$kcm(0x10, 0x2, 0x0)
r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0)
openat$cgroup(r5, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0)
r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000000)=0xffff0018)
ioctl$SNDCTL_DSP_GETISPACE(r6, 0x8010500d, &(0x7f0000000040))
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
ppoll(&(0x7f0000000040)=[{r7, 0x5408}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newlink={0x38, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r9}]]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e1406024439000002800000121f05cacc8f99533152b34e12533af24e368a353df21842f11069061fbb2ed4e5a500"/83, 0x53}], 0x1}, 0x24000010)
close_range(r0, 0xffffffffffffffff, 0x0)

7.406111435s ago: executing program 0 (id=1054):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8400)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x9}, 0x8)
setsockopt(r1, 0x84, 0x82, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mknodat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x80, 0x20000)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r5=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0xb, @ipv4={'\x00', '\xff\xff', @broadcast}}, r5, 0x91}}, 0x48)
r6 = socket$netlink(0x10, 0x3, 0x0)
syz_emit_ethernet(0x3e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaa86dd60b8192300080000fe8000000000000000000000000000aafe8000000000000000000000000000aa0000000000000000073d23c95f4e05e2aea0a8eb593ceda508877153266e01153acecd50ae1cd40f9d6007496e7665950aae7442736556d68f9c633336a13a30dd2a93f5e5880b17af20927402761c1158f5c1b1f3bfb0aab3764a3b214ce1657cba80dcf527d1b21797a19e1143d8411d7b1fefaea1a11b1d8e48ffffffff00000000267f3c01c98865258c8b8f34e82186a54a5f9ae35436b24ac45a723f371c40f99ec20b64205fa7014f7c7b3264427de64a8bc6907461a9f4152c16a7404cc4011f0f0993e8", @ANYRES64=0x0, @ANYRESOCT=r0], 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x100000, @loopback}], 0x1c)
sendto$inet6(r1, &(0x7f0000000040)="ee", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x101, @loopback, 0x8000005}, 0x1c)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_procfs(0x0, &(0x7f0000000280)='net/fib_trie\x00')
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x1f, 0x2, @buffer={0x0, 0xb7, &(0x7f00000003c0)=""/183}, &(0x7f00000002c0)="4b8df15e0900000000000000f4358ea65d1d89f74e00000000000400000000", 0x0, 0x1, 0x0, 0x0, 0x0})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a080006400000002509"], 0xd8}, 0x1, 0x0, 0x0, 0x2000c0c0}, 0x804)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="05000003", @ANYRES32=0x0], 0x1c}}, 0x0)
socket(0x10, 0x803, 0x0)

7.037795107s ago: executing program 3 (id=1055):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1807a200ddff0000000000000000022018001800", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b70300000000000085000000d4000000bf0900200000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0xffc, &(0x7f0000001e40)=""/4092, 0x40f00, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94)

6.175774805s ago: executing program 2 (id=1056):
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', <r0=>0x0})
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001880)={0xffffffffffffffff, 0xe0, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000015c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000001600)=[0x0, 0x0], &(0x7f0000001640)=[0x0, 0x0, 0x0], <r2=>0x0, 0xa, &(0x7f0000001680)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000016c0), &(0x7f0000001700), 0x8, 0xcc, 0x8, 0x8, &(0x7f0000001740)}}, 0x10)
r3 = openat$vcsu(0xffffff9c, &(0x7f00000003c0), 0x800, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000080), &(0x7f00000000c0)='%pI4   \x00'}, 0x1c)
r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001900)=@generic={&(0x7f00000018c0)='./file0\x00'}, 0x14)
r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000002c80), 0x8000, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
ioctl$PTP_EXTTS_REQUEST(r6, 0x40103d02, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000019c0)={{0xffffffffffffffff, <r7=>0xffffffffffffffff}, &(0x7f0000001940), &(0x7f0000001980)='%ps    \x00'}, 0x1c)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="a4a000000000fa450400000000000000003951c5", @ANYRES32=0x0, @ANYRES32, @ANYRES64=r3], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x6, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000580)=""/4096, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000001580)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x2, &(0x7f0000001a80)=[r3, r4, r6, r7, 0x1, r8], &(0x7f0000001ac0)=[{0x0, 0x2, 0x1, 0x5}, {0x3, 0x2, 0x7}], 0x10, 0x9, @void, @value}, 0x94)
r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={0xffffffffffffffff}, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = dup(r10)
getsockname$packet(r11, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0xffffffffffffffff, <r12=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, <r13=>0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000300)}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x16, &(0x7f0000000040)=@raw=[@generic={0x0, 0x1, 0x6, 0xfffa, 0x7}, @generic={0x1, 0xc, 0x9, 0x110d, 0x1}, @tail_call, @jmp={0x5, 0x0, 0x4, 0x5, 0xa, 0xffffffffffffffc0, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0x4, 0x0, 0x6, 0x20, 0x10}, @call={0x85, 0x0, 0x0, 0x8b}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x2, 0x1, 0x6, 0x8, 0x5, 0xffffffffffffffff, 0x10}, @map_idx={0x18, 0x4, 0x5, 0x0, 0xb}], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', r0, @fallback=0x1a, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x1, 0x1, 0x9, 0x80000000}, 0x10, r2, r9, 0x5, &(0x7f0000000380)=[r11, r12, r13], &(0x7f00000003c0)=[{0x0, 0x3, 0x4, 0x7}, {0x0, 0x1, 0xa, 0x4}, {0x1, 0x4, 0x5}, {0x5, 0x5, 0x7, 0x4}, {0x1, 0x5, 0x6, 0x9}], 0x10, 0xc, @void, @value}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)
pipe(0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000380)}], 0x1, 0x5)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

6.175180123s ago: executing program 3 (id=1057):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
socket$packet(0x11, 0x2, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb0800440000640000000080029078ac1414aae0000001863c0000000106062d5ff72803122eaf13b50eb84d112d3ae80646179496010a88af41cd747f575a050aa156c83ebf12b0ae000a3ef68daef6a836fa11009078000000001e0000010000000080000000"], 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0)
ioctl$TCSBRKP(r5, 0x5425, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$TCSETSW2(r6, 0x5408, &(0x7f0000000300)={0xff, 0x3eb, 0xfffffffe, 0x7fffffef, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1002, 0xfffffffc})
r8 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=r10, @ANYBLOB="002e0a001162050034006a00031cf5048005001b00010000000500000000"], 0x54}, 0x1, 0x0, 0x0, 0x8c041}, 0x800)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r11, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r11, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r11, &(0x7f0000000040), 0x0, 0x5, 0x0, 0x0)
recvfrom$inet(r11, 0x0, 0x0, 0x40010000, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e4, 0x188, 0x2b8, 0x0, 0x188, 0x0, 0x31c, 0x3a8, 0x3a8, 0x31c, 0x3a8, 0x3, 0x0, {[{{@ipv6={@mcast1, @dev, [], [], 'veth0_to_batadv\x00', 'wg2\x00'}, 0x0, 0x120, 0x188, 0x0, {0xd2030000}, [@common=@unspec=@connbytes={{0x38}, {[{0xdac4}, {0x6}]}}, @common=@unspec=@helper={{0x44}, {0x0, 'irc-20000\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @private1, [], [0x0, 0x0, 0x0, 0xff000000], 'bond0\x00', 'pim6reg1\x00', {}, {0xff}}, 0x0, 0x154, 0x194, 0x0, {}, [@common=@srh1={{0x8c}, {0x62, 0x7, 0xd, 0xff, 0x62d6, @local, @empty, @dev={0xfe, 0x80, '\x00', 0x3e}, [0x0, 0xffff00, 0xff, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xffffff00], [0xffffff00, 0xff, 0xff, 0xff], 0x380}}, @inet=@rpfilter={{0x24}, {0x3}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7, 0xd4bf, 0x3, 0x1, 0x6, 0x7, 0x2, 0x5]}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x440)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

5.856487171s ago: executing program 4 (id=1058):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002880)=ANY=[@ANYBLOB="140000001000040000000000000000040000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021740000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000004800038044000080080003400000000238000b"], 0xf8}}, 0x6000040)

5.203415581s ago: executing program 0 (id=1059):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
lchown(0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000000c0)={0x5, 0x0, 0x5000, 0x2000, &(0x7f000002f000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x4, 0x3, 0xf000, 0x1000, &(0x7f000002f000/0x1000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x3, 0x0, 0xeeee8000, 0x1000, &(0x7f0000ffb000/0x1000)=nil})
r5 = mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0)
syz_memcpy_off$KVM_EXIT_HYPERCALL(r5, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)

5.108658445s ago: executing program 4 (id=1060):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x91, @loopback={0xffffffffffff0000}}}, 0x0, 0x0, 0xffffffff, 0x0, 0x54, 0x2}, 0x9c)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcf8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

4.209643179s ago: executing program 4 (id=1061):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x44, &(0x7f0000000200)=""/68}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000})

4.147558793s ago: executing program 3 (id=1062):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xf, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001fc0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, @void, @value}, 0x94)

3.987996956s ago: executing program 2 (id=1063):
socket(0x1d, 0x2, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x103201, 0x0)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0xfd85)
r2 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
lstat(0x0, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x0, '\x00', @p_u32=0x0}})
pwritev(r2, 0x0, 0x0, 0xa, 0x8)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, 0x0, 0x0)
rseq(0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188)

3.808437403s ago: executing program 4 (id=1064):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
fcntl$setstatus(r1, 0x4, 0x42000)
userfaultfd(0x801)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket(0x11, 0x1, 0x2000027)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000180)=0x1)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
listen(0xffffffffffffffff, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
writev(0xffffffffffffffff, 0x0, 0x0)
shutdown(r5, 0x1)
r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x9, 0xffffffffffffff3e})
r7 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)="316202ab5d4addffc19e9fb1dd315c61799629b987d39cb1d27a579c89894c8a16a392db5a40d7ad808181936bd867652cb73c3f518d8afe9cd9ab5c363e4279ae9ceb6b357f47c94b8b0fe98544e1ec50464b9a94e5556c8c38bb2a6709c85f1c52db041c2cf8ee5dd1265c59ce67d1cc2e94e576e7ba7ddfe20d0c9c1502de91114d5c68fa2b46d35ec7ec997738577084726683e28994f09e710507bd", 0x9e}, {&(0x7f00000001c0)="ae44466fe94aee475c74e67bc4e1a61d74311c776c400218fbf4f8643cdb97b6c30994167b7b9ce01b3cf178eb2ffa148d4c52c00406e62c8323e328057cd76a5f403efc50662ca7edb9b4d2422f470815ff34a53deeedc481d7c32b959499643c1a8a", 0x63}, {&(0x7f0000000400)="65411bc1ed4dd09ff544b2ba313aee34cdf08fffda0f87eed2da97412e5076403d4f3fe51a6732fcfe3c62ba03765efc443804fd231f0bb46d24b1961f5db2fa27e293e1052da50332f1011f5ce2e77543a7e294a77699a999b066ab8b807414d0cdc45fcb01410fa27ee974f694f0116ebf4c085599c56271bf03993973a1e91b5f2b71b6a6c5f160e9dab53c379dae07263b7360debcfc5182a7c0f6f4224d1eaf5b26f10d6ed0c7b90feabd19c83166c4e88b993e2a55abbc88b2d98e00151020f8f955e49aff7883556171859cb83f09729a", 0xd4}, {&(0x7f0000000500)="9aee25d9b3462b5c62b14c55eb790ffa85e63a83901f8cd5e1c1f8385fc96d057eca602898c9eeab92c131fd591d2df229066d46dd33a0794087633b147c27d522efaf8ab76962e6e56a3d3faa", 0x4d}, {&(0x7f0000000a80)="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", 0x1000}], 0x5}, 0x4010)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0)
r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
syz_open_dev$midi(0x0, 0x500, 0x0)
sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x40)
close(r8)
r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r9, 0xffffffffffffffff, 0x0)

3.688280136s ago: executing program 3 (id=1065):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async)
connect$unix(r0, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r4 = io_uring_setup(0xf08, &(0x7f0000000000)={0x0, 0xe9ce, 0x400, 0x20004, 0x3})
io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r5, 0xffffffffffffffff, 0x200000000000000)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) (async)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
connect$inet6(r6, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
socket$packet(0x11, 0x2, 0x300)
syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x3, 0x16, 0x34, 0x66, 0x0, 0xa, 0x6, 0x0, @local, @loopback, {[@ssrr={0x89, 0x3, 0x13}]}}, {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x7, 0x8, 0xac0, 0x0, 0x400, {[@mss={0x2, 0x4, 0x9ec}, @sack={0x5, 0x2}]}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x42, &(0x7f00000004c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x3, 0x16, 0x34, 0x66, 0x0, 0xa, 0x6, 0x0, @local, @loopback, {[@ssrr={0x89, 0x3, 0x13}]}}, {{0x4e20, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x7, 0x8, 0xac0, 0x0, 0x400, {[@mss={0x2, 0x4, 0x9ec}, @sack={0x5, 0x2}]}}}}}}}, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "3d8b00", "d4cc4a4423daabeb8e7ba12fe6e1c742a683fa6e58757db76aae864d57fbaf37", "c3650f3f", "5e963dfa951f9b3d"}, 0x38)
sendto$inet6(r6, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) (async)
sendto$inet6(r6, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137)

3.593784612s ago: executing program 1 (id=1066):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2e}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x60, {0x0, 0x84}}}, 0x84}}, 0x0)

3.408446779s ago: executing program 0 (id=1067):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$audio(0xffffff9c, 0x0, 0x402, 0x0)
connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x2, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x800000}, 0xffffffce)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0)
sched_setattr(0x0, 0x0, 0x0)
fsopen(0x0, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000140001002abd7000ffdb"], 0x2c}, 0x1, 0x0, 0x0, 0x20002074}, 0x24005040)
socket$rxrpc(0x21, 0x2, 0x2)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x204000, &(0x7f0000000ac0)=ANY=[@ANYBLOB="66643d2f2f6d38a8567c86b5898521f43c636fe1d96b850bf30da2e9d187342d10c95ee78649d4b904fdf91cbd87dff51ebaa460cf64f990066e6fe9be0cb90d71c0d85a088a439b9d97dfafe37c8831c564d86b4667f9fe0adaacb9e2d7bf77b34d84fa9c0d82301a00c4dbe9f830ecf68d591fa64dc7728f61ae9ee0ec5ea878b18aa70b4d69c5db5ae5ade003aebd5d0705d50d1e1adec39c631558ba21fd5ac2bcde2447504272126f2291f2d0ac7fc76d0cb4fa121075a2dc0522987266708afc0a27f679d24962115addd852e32468baf2caf1e6b60d11bc68de11f1473f265bd2c7d4eb1878ef6e94e7985a70ddcd61d2517b3d7f", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000080000001,blksize=0x0000000000001800,context=unconfined_u,euid<', @ANYRESDEC=0x0, @ANYBLOB="2c72772c66736d616769633d3078303030303030303030303030303030312c6f626a5f747970653d2f6465762f736723002c646f6e745f6d6561737572652c6673757569643d61303063386635312d636437612d646639332dc26266622d6662cd30643935642c726f6f74636f6e746578743d756e636f6e66696e65645f752c6d61736b3d5e4d41595f524541442c00"])
ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4}]})
ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000400)={0x1, 0x0, @ioapic={0x2000, 0xa, 0x6a86, 0x4, 0x0, [{0x0, 0x11, 0x1, '\x00', 0x1}, {0x4, 0x4, 0xf, '\x00', 0x9}, {0x1, 0x1, 0x10, '\x00', 0x1}, {0xf8, 0x2, 0x3, '\x00', 0x6}, {0xff, 0x6, 0x0, '\x00', 0x1}, {0x2, 0x9c, 0x1, '\x00', 0x5}, {0xa9, 0x5e, 0xff, '\x00', 0x1}, {0x8, 0x4, 0x7, '\x00', 0x7c}, {0x40, 0xe, 0x0, '\x00', 0x4}, {0x2, 0x0, 0x4}, {0x1, 0x0, 0xe4, '\x00', 0x6}, {0x6, 0x6, 0x6, '\x00', 0xfe}, {0x2, 0x3, 0x4a, '\x00', 0xa}, {0x5, 0x4, 0x4, '\x00', 0xb}, {0xfe, 0x7f, 0x7, '\x00', 0x4}, {0x3, 0x7, 0xdc, '\x00', 0x2}, {0x81, 0x9f, 0x0, '\x00', 0x2}, {0x8, 0xd, 0x7, '\x00', 0x8}, {0x8, 0x90, 0xd, '\x00', 0x3}, {0xbf, 0x7, 0xe, '\x00', 0x4}, {0xf, 0x6, 0xe}, {0x81, 0xa, 0x1, '\x00', 0x9}, {0x80, 0x4, 0x3, '\x00', 0x81}, {0x3, 0x71, 0x2}]}})
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x40, &(0x7f0000000240)={0x4, 0x0, 0x8, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x2}, &(0x7f00000000c0)={0x1f, 0xfffffffffffffffe, 0x40, 0x0, 0x0, 0x1, 0x0, 0x8}, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xd, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94)
unshare(0x28020480)
ftruncate(0xffffffffffffffff, 0xc17a)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x8, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1ab3e6c239ec993b528b36c8a60000", @ANYRES32, @ANYRES8=r0], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x7c, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x10, 0x5e400c2a, @void, @value}, 0x94)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)

3.300636922s ago: executing program 3 (id=1068):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="26003300b0910300ffffffffffff08021100000050505050505457f99eb3c401010003005c0200000600cd000000000004008e"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

3.300179784s ago: executing program 1 (id=1069):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
prctl$PR_SET_CHILD_SUBREAPER(0x41555856, 0x1)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xe, 0x0, 0x9, 0x2}, 0x10}, 0x1, 0x7}, 0x0)
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xd3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0xc9, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xff, 0x1, 0x1, {0x22, 0xbb0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0x7f, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x8, 0xe, 0x1}}]}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0)

2.990578269s ago: executing program 3 (id=1070):
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f00000013c0), 0x0, &(0x7f0000001400)=""/196}, 0x9}], 0x800021c, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
fcntl$lock(r1, 0x0, &(0x7f0000001200)={0x2, 0x3, 0x1000, 0x6})
syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x1, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x3, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x6, 0x1, 0x6}}}}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x11, &(0x7f0000000200)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0x4, 0x0, 0x811, 0xff0f, 0x6}]}})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f00000011c0)={0xffe, 0xb1f, 0x0, 0x0})
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x3000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0xa}}, [@TCA_RATE={0x6, 0x5, {0x3b, 0xd3}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @qdisc_kind_options=@q_mq={0x7}]}, 0x3c}}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19)
pipe(0x0)
r6 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
vmsplice(r6, &(0x7f0000001240)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="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", 0xff}], 0x2, 0xa)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000001180)=0x401)
r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)
madvise(&(0x7f00003f5000/0x3000)=nil, 0x3000, 0x15)

2.150209604s ago: executing program 0 (id=1071):
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fec57d6366384c2aa5f61adf1aad36b64d857108480b0730120001a60ba927e369c31f00235226000000000000000000a8a59c48"], 0x0)
socket(0x1d, 0x2, 0x6)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x8000)
syz_open_dev$radio(0x0, 0x1, 0x2)

1.775472429s ago: executing program 2 (id=1072):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$audio(0xffffff9c, 0x0, 0x402, 0x0)
connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
fsopen(0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000140001002abd7000ffdb"], 0x2c}, 0x1, 0x0, 0x0, 0x20002074}, 0x24005040)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94)
r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @buffer={0x17, 0x44, &(0x7f0000000200)=""/68}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x1000000, 0x0, 0x0})

149.230037ms ago: executing program 4 (id=1073):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
socket$packet(0x11, 0x2, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb0800440000640000000080029078ac1414aae0000001863c0000000106062d5ff72803122eaf13b50eb84d112d3ae80646179496010a88af41cd747f575a050aa156c83ebf12b0ae000a3ef68daef6a836fa11009078000000001e0000010000000080000000"], 0x0)
openat$nullb(0xffffffffffffff9c, 0x0, 0x84042, 0x0)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0)
ioctl$TCSBRKP(r5, 0x5425, 0x0)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$TCSETSW2(r6, 0x5408, &(0x7f0000000300)={0xff, 0x3eb, 0xfffffffe, 0x7fffffef, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf", 0x1002, 0xfffffffc})
r8 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=r10, @ANYBLOB="002e0a001162050034006a00031cf5048005001b00010000000500000000"], 0x54}, 0x1, 0x0, 0x0, 0x8c041}, 0x800)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r11, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r11, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r11, &(0x7f0000000040), 0x0, 0x5, 0x0, 0x0)
recvfrom$inet(r11, 0x0, 0x0, 0x40010000, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e4, 0x188, 0x2b8, 0x0, 0x188, 0x0, 0x31c, 0x3a8, 0x3a8, 0x31c, 0x3a8, 0x3, 0x0, {[{{@ipv6={@mcast1, @dev, [], [], 'veth0_to_batadv\x00', 'wg2\x00'}, 0x0, 0x120, 0x188, 0x0, {0xd2030000}, [@common=@unspec=@connbytes={{0x38}, {[{0xdac4}, {0x6}]}}, @common=@unspec=@helper={{0x44}, {0x0, 'irc-20000\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @private1, [], [0x0, 0x0, 0x0, 0xff000000], 'bond0\x00', 'pim6reg1\x00', {}, {0xff}}, 0x0, 0x154, 0x194, 0x0, {}, [@common=@srh1={{0x8c}, {0x62, 0x7, 0xd, 0xff, 0x62d6, @local, @empty, @dev={0xfe, 0x80, '\x00', 0x3e}, [0x0, 0xffff00, 0xff, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xffffff00], [0xffffff00, 0xff, 0xff, 0xff], 0x380}}, @inet=@rpfilter={{0x24}, {0x3}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x7, 0xd4bf, 0x3, 0x1, 0x6, 0x7, 0x2, 0x5]}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x440)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

146.449761ms ago: executing program 2 (id=1083):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
prctl$PR_SET_CHILD_SUBREAPER(0x41555856, 0x1)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001240), 0x802, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000300)=@mangle={'mangle\x00', 0x1f, 0x6, 0x454, 0x0, 0x320, 0x320, 0xdc, 0x320, 0x460, 0x460, 0x460, 0x460, 0x460, 0x6, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2b}, @multicast2, 0xff, 0xffffffff, 'pimreg\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x21, 0x2, 0xc}, 0x0, 0xb8, 0xdc, 0x0, {}, [@common=@icmp={{0x24}, {0xe, "b16e"}}, @inet=@rpfilter={{0x24}, {0x1}}]}, @TTL={0x24, 'TTL\x00', 0x0, {0x2, 0xe2}}}, {{@uncond, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@empty, @local, 0xffffff00, 0xffffffff, 'wg1\x00', 'syzkaller1\x00', {0xff}, {}, 0x67, 0x3, 0x24}, 0x0, 0x90, 0xc0, 0x0, {}, [@common=@socket0={{0x20}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x7, 0x800, @loopback, 0x4e22}}}, {{@uncond, 0x0, 0x94, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0xa062, 0xb, [0x15, 0x2b, 0x37, 0x24, 0xc, 0x19, 0x5, 0x3c, 0x31, 0x3b, 0x2, 0x34, 0x2, 0x8, 0x24, 0x1e], 0x1, 0x7983, 0x8}}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x8001, @broadcast, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x4b0)
read(r2, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000280)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="020e000902000000000000009f03f5c84fd62232aabb4cc68d41092b96b6d143a419ab0a12a082b4c229b84ba2d8086ed7bf4528d6e72ea26b53d2c34e5b5becfa179083f5be4efcf7af790a0fe183d1569b6d1607f70e24ebbcbe0f5f3fc8f43bf4af1c9bd5ffdbfdd58b35ed868a00400000000000307b2b2c13e344e94720550177253efe606158817840d8627bcf3a66417a7737e7f151728e50405dc684be33f9193ac17b1795d1628e33c7d5b8828eea110920df6dccd7d541d0537fe47f659a0159d56176cde6e866247539cb74a7ec83278c253f633a66c0b16cee19c4d34a348b373c7de72d26f915"], 0x10}, 0x1, 0x7}, 0x0)
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xd3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0xc9, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xff, 0x1, 0x1, {0x22, 0xbb0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0x7f, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x8, 0xe, 0x1}}]}}}]}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r5)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000840)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000c80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000cc0)={0x3cc, r6, 0x300, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x128, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x18, 0x1, [0x12, 0x0, 0x60, 0x5, 0x48, 0x30, 0x12, 0x30, 0x6, 0x18, 0x48, 0x0, 0x18, 0x2, 0xb, 0x1b, 0xc, 0xb, 0xb, 0x16]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4a1b, 0xfff8, 0x5, 0x0, 0xd, 0x3, 0x2, 0x8]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x6c, 0x4, 0x36, 0x30, 0x5, 0x48, 0x16, 0x2, 0x6, 0x4, 0x5, 0xb, 0x48, 0xc, 0x12, 0x4, 0x30, 0xb, 0x1, 0x13, 0x18, 0x24, 0x9]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x74, 0x16]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8, 0x9, 0xb21e, 0x2, 0x101, 0xff, 0xd0f5]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x16, 0x30, 0x48, 0x3, 0x6c, 0x68, 0x6, 0x1b, 0x2, 0x6, 0x18, 0x34, 0x1f, 0x1, 0x60, 0x48]}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xc, 0x48, 0xc, 0x3, 0x3, 0x18, 0x0, 0x1b, 0xb, 0x1b, 0x0, 0x24, 0x3, 0xc, 0x24, 0x6, 0x2, 0x16, 0xb, 0x1b, 0x6c, 0x36, 0x30, 0x4, 0x6c, 0x5, 0x48, 0x24, 0x16, 0x30, 0xc]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xa5, 0x9, 0xd3, 0x3, 0x0, 0x28e, 0xeb]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x1, 0x60, 0x5, 0x9d8a748bcd167054, 0x6, 0x1b, 0x18]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7fff, 0x3ff, 0x8, 0x94, 0x0, 0x19]}}]}]}, @NL80211_ATTR_TX_RATES={0x7c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x200, 0x7f, 0x3, 0xfffb, 0x0, 0x6, 0x101]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0xb, 0x36, 0x0, 0x1b, 0x18, 0x48, 0xe19c3d43b8f77fee, 0x6, 0x0, 0x12, 0x6c, 0x3, 0x4, 0xb, 0x36, 0x3, 0x48, 0x1b, 0x48, 0x6c, 0xc, 0x8, 0x16, 0x5, 0x3]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x48, 0x24, 0x12, 0x1, 0x12, 0x9, 0x48, 0x5, 0x6, 0x24, 0x1e, 0xb, 0x4, 0x12, 0x5, 0x1, 0x6, 0x2, 0x30, 0x12, 0xb, 0x36, 0x1, 0x24, 0x16, 0x5, 0x9, 0x18, 0x6c]}]}]}, @NL80211_ATTR_TX_RATES={0x20c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x43, 0x2, [{0x3, 0x2}, {0x6, 0x7}, {0x5, 0x9}, {0x1, 0x3}, {0x1, 0x5}, {0x4, 0x2}, {0x4, 0x8}, {0x1}, {0x4, 0x2}, {0x0, 0x8}, {0x0, 0x7}, {0x2, 0x8}, {0x4, 0x1}, {0x2, 0x8}, {0x6, 0x1}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x1}, {0x0, 0xa}, {0x3, 0x6}, {0x2}, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0xa}, {0x0, 0xa}, {0x3, 0x2}, {0x4, 0x7}, {0x5, 0x3}, {0x1, 0x2}, {0x6, 0x8}, {0x2, 0x9}, {0x0, 0x7}, {0x2, 0x2}, {0x3, 0x7}, {0x3, 0x8}, {0x1, 0x4}, {0x2, 0x4}, {0x5, 0x2}, {0x2, 0xa}, {0x0, 0x4}, {0x0, 0x8}, {0x1, 0x9}, {0x7, 0x7}, {0x0, 0x4}, {0x2, 0x3}, {0x2, 0x8}, {0x1, 0x2}, {0x6, 0x3}, {0x6, 0x7}, {0x5, 0x3}, {0x1, 0x8}, {0x0, 0x9}, {0x5, 0x9}, {0x1, 0x2}, {0x7, 0xa}, {0x0, 0x9}, {0x1, 0x8}, {0x5, 0x8}, {0x3, 0x9}, {0x5, 0x4}, {0x3, 0xa}, {0x2, 0x1}, {0x2, 0xa}]}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x4, 0x18, 0x30, 0x24, 0x30, 0x6, 0x5, 0x6, 0x24, 0x5, 0x36, 0x30]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6027, 0x9, 0x101, 0xd, 0x9, 0x3e, 0x5, 0x9]}}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x0, 0x7}, {0x0, 0x8}, {0x6}, {0x7, 0x4}, {0x3, 0x1}, {0x4, 0xa}, {0x3, 0x2}, {0x3, 0x7}, {0x5, 0x2}, {0x7, 0x1}, {0x6, 0x9}, {0x7, 0xa}, {0x1, 0xa}, {0x4, 0x6}, {}, {0x2, 0x7}, {0x0, 0x9}, {0x1, 0x7}, {0x6, 0x3}, {0x1, 0x2}, {0x0, 0xa}, {0x0, 0x1}, {0x0, 0x8}, {0x7}, {0x7}, {0x7, 0x8}, {0x4, 0xa}, {0x1}, {0x0, 0x4}, {0x4, 0x4}, {0x3}, {0x4, 0x2}, {0x6}, {0x0, 0x6}, {0x1}, {0x3, 0x8}, {0x1, 0x9}, {0x4, 0x3}, {0x7}, {0x0, 0x9}, {0x7, 0xa}, {0x7, 0x9}, {0x5, 0x1}, {0x5, 0x2}, {0x1, 0x4}, {0x2, 0x3}, {0x2, 0x5}, {0x2, 0x2}, {0x5, 0x9}, {0x5, 0x2}, {0x0, 0x8}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x1}, {0x5, 0x8}, {0x1, 0x8}, {0x2, 0x1}, {0x4, 0x7}, {0x7, 0x9}, {0x0, 0x9}, {0x4, 0xa}, {0x0, 0x3}, {0x0, 0x7}, {0x1, 0x9}, {0x1, 0x4}, {0x7}, {0x3, 0x1}, {0x1, 0x3}, {0x6, 0x4}, {0x1}, {0x3, 0x1}, {0x0, 0x4}, {0x1, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x4, 0x6, 0x15, 0x3, 0x5, 0x8, 0xb0d]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xff9b, 0xe, 0x7, 0x28, 0x800, 0x4, 0xf081]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xfff, 0xddeb, 0x7, 0xb, 0x1, 0x9]}}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x4, 0xa}, {0x3, 0x6}, {0x6, 0x3}, {0x5, 0x4}, {0x6, 0x9}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x6}, {0x7, 0x3}, {0x7, 0x6}, {0x7, 0x2}, {0x6, 0x4}, {0x2, 0x3}, {0x1, 0x3}, {0x2, 0x7}, {0x2, 0x3}, {0x7, 0xa}, {0x0, 0x7}, {0x1, 0x9}, {0x7, 0x1}, {0x7, 0x5}, {0x4, 0x2}, {}, {0x6, 0x6}, {0x1, 0x1}, {0x2, 0x9}, {0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x300, 0x4, 0x200, 0x32, 0x4, 0xffff, 0xaa, 0x8]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x36, 0xc, 0x16, 0x2, 0xb, 0x4, 0x12, 0x5, 0x24, 0x18, 0x3, 0x6c, 0x9, 0x2, 0x1]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x800, 0x2, 0xfff7, 0x5, 0xc9a, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x8001, 0x279f, 0x9a8, 0x8, 0x4, 0x7, 0x32b4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xffff, 0x7, 0x2, 0x3ff, 0x3, 0xdc, 0x96a]}}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x60, 0x1b]}]}]}]}, 0x3cc}, 0x1, 0x0, 0x0, 0x40088d4}, 0x5)
sendmsg$nl_generic(r5, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0)

0s ago: executing program 1 (id=1074):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="26003300b0910300ffffffffffff08021100000050505050505457f99eb3c401010003005c0200000600cd000000000004008e"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

kernel console output (not intermixed with test programs):

[ T8014] netlink: 'syz.3.596': attribute type 30 has an invalid length.
[  231.182676][ T7968] syz.1.581 (7968): drop_caches: 2
[  231.188151][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  231.188332][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  231.242713][ T8019] xt_hashlimit: overflow, try lower: 18446744073709551615/2251804108652543
[  231.384648][ T8021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.599'.
[  231.573391][   T30] kauditd_printk_skb: 60 callbacks suppressed
[  231.573409][   T30] audit: type=1326 audit(1749498128.504:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8022 comm="syz.1.600" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7fc7539 code=0x0
[  231.727427][ T5937] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  231.831310][    C0] Unknown status report in ack skb
[  231.874411][ T5937] usb 1-1: device descriptor read/64, error -71
[  232.114960][ T5937] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  232.224466][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  232.231516][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  232.334436][ T5937] usb 1-1: device descriptor read/64, error -71
[  232.444587][ T5937] usb usb1-port1: attempt power cycle
[  232.526424][ T8046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.607'.
[  232.797089][ T5937] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  232.837079][ T5937] usb 1-1: device descriptor read/8, error -71
[  233.084473][ T5937] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  233.108918][ T5937] usb 1-1: device descriptor read/8, error -71
[  233.224918][ T5937] usb usb1-port1: unable to enumerate USB device
[  233.264424][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  233.271449][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  233.544538][ T5937] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  233.706542][ T5937] usb 3-1: device descriptor read/64, error -71
[  233.760240][ T5857] usb 5-1: unable to get BOS descriptor or descriptor too short
[  233.776921][ T5857] usb 5-1: unable to read config index 0 descriptor/start: -71
[  233.797709][ T5857] usb 5-1: can't read configurations, error -71
[  233.974372][ T5937] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  234.136327][ T5937] usb 3-1: device descriptor read/64, error -71
[  234.263726][ T8069] --map-set only usable from mangle table
[  234.274637][ T5937] usb usb3-port1: attempt power cycle
[  234.314433][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  234.321526][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  234.928596][ T8078] FAULT_INJECTION: forcing a failure.
[  234.928596][ T8078] name failslab, interval 1, probability 0, space 0, times 0
[  234.942605][ T8078] CPU: 1 UID: 0 PID: 8078 Comm: syz.0.617 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) 
[  234.942630][ T8078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  234.942640][ T8078] Call Trace:
[  234.942647][ T8078]  <TASK>
[  234.942655][ T8078]  dump_stack_lvl+0x189/0x250
[  234.942685][ T8078]  ? __pfx____ratelimit+0x10/0x10
[  234.942711][ T8078]  ? __pfx_dump_stack_lvl+0x10/0x10
[  234.942736][ T8078]  ? __pfx__printk+0x10/0x10
[  234.942759][ T8078]  ? __pfx___might_resched+0x10/0x10
[  234.942789][ T8078]  should_fail_ex+0x414/0x560
[  234.942816][ T8078]  should_failslab+0xa8/0x100
[  234.942836][ T8078]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  234.942855][ T8078]  ? __alloc_skb+0x112/0x2d0
[  234.942879][ T8078]  __alloc_skb+0x112/0x2d0
[  234.942902][ T8078]  netlink_sendmsg+0x5c6/0xb30
[  234.942932][ T8078]  ? __pfx_netlink_sendmsg+0x10/0x10
[  234.942955][ T8078]  ? __import_iovec+0x5d4/0x7f0
[  234.942971][ T8078]  ? aa_sock_msg_perm+0x94/0x160
[  234.942994][ T8078]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  234.943015][ T8078]  ? __pfx_netlink_sendmsg+0x10/0x10
[  234.943036][ T8078]  __sock_sendmsg+0x219/0x270
[  234.943064][ T8078]  ____sys_sendmsg+0x505/0x830
[  234.943091][ T8078]  ? __pfx_____sys_sendmsg+0x10/0x10
[  234.943128][ T8078]  ___sys_sendmsg+0x21f/0x2a0
[  234.943153][ T8078]  ? __pfx____sys_sendmsg+0x10/0x10
[  234.943215][ T8078]  ? __fget_files+0x2a/0x420
[  234.943233][ T8078]  ? __fget_files+0x3a0/0x420
[  234.943262][ T8078]  __sys_sendmsg+0x164/0x220
[  234.943285][ T8078]  ? __pfx___sys_sendmsg+0x10/0x10
[  234.943319][ T8078]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  234.943345][ T8078]  ? lockdep_hardirqs_on+0x9c/0x150
[  234.943372][ T8078]  __do_fast_syscall_32+0xb6/0x2b0
[  234.943389][ T8078]  ? lockdep_hardirqs_on+0x9c/0x150
[  234.943416][ T8078]  do_fast_syscall_32+0x34/0x80
[  234.943434][ T8078]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  234.943454][ T8078] RIP: 0023:0xf7f02539
[  234.943470][ T8078] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  234.943484][ T8078] RSP: 002b:00000000f502655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  234.943502][ T8078] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080
[  234.943514][ T8078] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  234.943524][ T8078] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  234.943533][ T8078] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  234.943543][ T8078] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  234.943569][ T8078]  </TASK>
[  235.224989][ T5937] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  235.279197][ T5937] usb 3-1: device descriptor read/8, error -71
[  235.344453][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  235.351572][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  235.524376][ T5937] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  235.579156][ T5937] usb 3-1: device descriptor read/8, error -71
[  235.794455][   T10] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  235.844951][ T5937] usb usb3-port1: unable to enumerate USB device
[  236.044742][   T10] usb 1-1: Using ep0 maxpacket: 32
[  236.062887][   T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  236.107038][   T10] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  236.135144][   T10] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  236.177559][   T10] usb 1-1: Product: syz
[  236.181776][   T10] usb 1-1: Manufacturer: syz
[  236.216469][   T10] usb 1-1: SerialNumber: syz
[  236.248050][   T10] usb 1-1: config 0 descriptor??
[  236.261747][ T8083] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  236.384430][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  236.391420][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  236.486776][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.623'.
[  236.581320][ T5911] usb 1-1: USB disconnect, device number 26
[  236.904470][   T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  237.054391][   T10] usb 3-1: Using ep0 maxpacket: 16
[  237.067563][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  237.087070][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  237.122946][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  237.146837][   T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  237.166938][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  237.192466][   T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  237.204291][   T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  237.236821][   T10] usb 3-1: Manufacturer: syz
[  237.273100][   T10] usb 3-1: config 0 descriptor??
[  237.424434][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  237.431560][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  237.697205][   T10] rc_core: IR keymap rc-hauppauge not found
[  237.713443][   T10] Registered IR keymap rc-empty
[  237.737327][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  237.877091][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  237.894654][ T5928] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  237.926081][   T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  237.965274][   T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8
[  238.020001][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  238.044690][ T5928] usb 4-1: Using ep0 maxpacket: 16
[  238.050101][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  238.059056][ T5928] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  238.074619][ T5928] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  238.109195][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  238.147713][ T5928] usb 4-1: config 0 has no interface number 0
[  238.161723][ T5928] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  238.171468][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  238.178801][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.187244][ T5928] usb 4-1: Product: syz
[  238.198676][ T5928] usb 4-1: Manufacturer: syz
[  238.207343][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  238.221178][ T5928] usb 4-1: SerialNumber: syz
[  238.244725][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  238.256443][ T5928] usb 4-1: config 0 descriptor??
[  238.284752][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  238.317432][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  238.374665][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  238.414438][   T10] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  238.464665][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  238.465721][   T10] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[  238.471808][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  238.509405][ T5928] usb 4-1: Found UVC 0.00 device syz (046d:08d3)
[  238.523955][   T10] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  238.544536][ T5928] usb 4-1: No valid video chain found.
[  238.583598][   T10] usb 3-1: USB disconnect, device number 26
[  238.727869][ T5928] usb 4-1: USB disconnect, device number 25
[  239.195110][ T5911] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  239.406826][ T5911] usb 2-1: device descriptor read/64, error -71
[  239.514445][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  239.521607][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  239.674422][ T5911] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  239.821508][ T8158] netlink: 44 bytes leftover after parsing attributes in process `syz.3.639'.
[  239.838278][ T5911] usb 2-1: device descriptor read/64, error -71
[  239.956478][ T5911] usb usb2-port1: attempt power cycle
[  240.084402][ T5937] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  240.246417][ T5937] usb 1-1: Using ep0 maxpacket: 32
[  240.267184][ T5937] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[  240.281991][ T5937] usb 1-1: config 0 has an invalid descriptor of length 100, skipping remainder of the config
[  240.304454][ T5911] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[  240.351847][ T5937] usb 1-1: config 0 has no interface number 0
[  240.385218][ T5911] usb 2-1: device descriptor read/8, error -71
[  240.391606][ T5937] usb 1-1: too many endpoints for config 0 interface 85 altsetting 31: 200, using maximum allowed: 30
[  240.531654][ T8169] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  240.545155][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  240.552227][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  240.703376][ T5937] usb 1-1: config 0 interface 85 altsetting 31 has 0 endpoint descriptors, different from the interface descriptor's value: 200
[  240.727920][ T5937] usb 1-1: config 0 interface 85 has no altsetting 0
[  240.775736][ T5911] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[  240.889996][ T5911] usb 2-1: device descriptor read/8, error -71
[  240.900813][ T5937] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  240.921101][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  240.956673][ T5937] usb 1-1: Product: syz
[  240.979078][ T5937] usb 1-1: Manufacturer: syz
[  240.983731][ T5937] usb 1-1: SerialNumber: syz
[  241.024803][ T5911] usb usb2-port1: unable to enumerate USB device
[  241.044506][ T5937] usb 1-1: config 0 descriptor??
[  241.444403][ T5911] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  241.584479][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  241.591582][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  241.618937][ T5911] usb 3-1: Using ep0 maxpacket: 32
[  241.621752][ T8181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.647'.
[  241.631631][ T5911] usb 3-1: New USB device found, idVendor=04f1, idProduct=1001, bcdDevice=19.63
[  241.647676][ T8181] netlink: 4 bytes leftover after parsing attributes in process `syz.3.647'.
[  241.673998][ T5911] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.722128][ T5911] usb 3-1: Product: syz
[  241.740011][ T5911] usb 3-1: Manufacturer: syz
[  241.759899][ T5911] usb 3-1: SerialNumber: syz
[  241.782641][ T5911] usb 3-1: config 0 descriptor??
[  241.812359][ T5911] gspca_main: sunplus-2.14.0 probing 04f1:1001
[  242.102359][ T8186] batadv_slave_1: entered promiscuous mode
[  242.131278][ T8186] fuse: Bad value for 'fd'
[  242.194005][ T5928] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[  242.404630][   T10] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  242.416170][ T5928] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  242.428475][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.431251][ T8188] xt_hashlimit: overflow, try lower: 18446744073709551615/2251804108652543
[  242.438376][ T5928] usb 4-1: Product: syz
[  242.452830][ T5928] usb 4-1: Manufacturer: syz
[  242.458992][ T5928] usb 4-1: SerialNumber: syz
[  242.471087][ T5928] usb 4-1: config 0 descriptor??
[  242.555195][   T10] usb 2-1: Using ep0 maxpacket: 32
[  242.563160][   T10] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  242.582191][   T10] usb 2-1: config 0 has no interface number 0
[  242.605832][   T10] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  242.624556][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  242.631659][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  242.634354][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.649317][   T10] usb 2-1: Product: syz
[  242.653531][   T10] usb 2-1: Manufacturer: syz
[  242.658240][   T10] usb 2-1: SerialNumber: syz
[  242.669054][ T5911] gspca_sunplus: reg_w_riv err -71
[  242.675740][   T10] usb 2-1: config 0 descriptor??
[  242.689068][ T5911] sunplus 3-1:0.0: probe with driver sunplus failed with error -71
[  242.690132][   T10] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  242.709570][ T5911] usb 3-1: USB disconnect, device number 27
[  242.715384][ T8192] unsupported nla_type 256
[  242.772301][ T5937] usb 1-1: USB disconnect, device number 27
[  242.867035][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.653'.
[  242.888395][ T8186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  242.902348][ T8186] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  242.922838][   T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  242.938276][   T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  243.004641][    T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  243.133085][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 231
[  243.184794][    T9] usb 5-1: Using ep0 maxpacket: 16
[  243.229483][    T9] usb 5-1: config 8 has an invalid interface number: 206 but max is 0
[  243.239411][    T9] usb 5-1: config 8 has no interface number 0
[  243.246230][    T9] usb 5-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87
[  243.258572][    T9] usb 5-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024
[  243.270098][    T9] usb 5-1: config 8 interface 206 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  243.281935][    T9] usb 5-1: config 8 interface 206 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  243.296213][    T9] usb 5-1: config 8 interface 206 has no altsetting 0
[  243.308832][    T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb
[  243.336401][    C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  243.337278][ T8185] batadv_slave_1: left promiscuous mode
[  243.352440][   T43] usb 2-1: USB disconnect, device number 18
[  243.382996][   T43] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  243.428957][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.429042][   T43] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  243.450123][ T5937] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  243.467682][   T43] quatech2 2-1:0.51: device disconnected
[  243.492731][    T9] usb 5-1: Product: syz
[  243.500688][    T9] usb 5-1: Manufacturer: syz
[  243.520133][    T9] usb 5-1: SerialNumber: syz
[  243.534821][ T5928] airspy 4-1:0.0: usb_control_msg() failed -110 request 09
[  243.542055][ T5928] airspy 4-1:0.0: Could not detect board
[  243.568985][ T5928] airspy 4-1:0.0: probe with driver airspy failed with error -110
[  243.624773][ T5937] usb 1-1: Using ep0 maxpacket: 16
[  243.664418][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  243.847285][    T9] garmin_gps 5-1:8.206: Garmin GPS usb/tty converter detected
[  243.871516][    T9] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  243.882974][   T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  243.963171][    T9] usb 5-1: USB disconnect, device number 22
[  244.035758][    T9] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  244.134313][   T10] usb 3-1: Using ep0 maxpacket: 16
[  244.140909][    T9] garmin_gps 5-1:8.206: device disconnected
[  244.667146][    T9] usb 4-1: USB disconnect, device number 26
[  244.704410][    C1] net_ratelimit: 1 callbacks suppressed
[  244.704428][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  244.717086][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  244.783615][ T8212] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  244.915325][ T8212] fuse: Bad value for 'fd'
[  244.940307][ T8214] netlink: 44 bytes leftover after parsing attributes in process `syz.3.659'.
[  245.177473][ T8218] FAULT_INJECTION: forcing a failure.
[  245.177473][ T8218] name failslab, interval 1, probability 0, space 0, times 0
[  245.190256][ T8218] CPU: 1 UID: 0 PID: 8218 Comm: syz.4.660 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) 
[  245.190279][ T8218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  245.190290][ T8218] Call Trace:
[  245.190297][ T8218]  <TASK>
[  245.190305][ T8218]  dump_stack_lvl+0x189/0x250
[  245.190335][ T8218]  ? __pfx____ratelimit+0x10/0x10
[  245.190365][ T8218]  ? __pfx_dump_stack_lvl+0x10/0x10
[  245.190390][ T8218]  ? __pfx__printk+0x10/0x10
[  245.190421][ T8218]  ? __pfx___might_resched+0x10/0x10
[  245.190445][ T8218]  ? fs_reclaim_acquire+0x7d/0x100
[  245.190470][ T8218]  should_fail_ex+0x414/0x560
[  245.190498][ T8218]  should_failslab+0xa8/0x100
[  245.190518][ T8218]  __kmalloc_noprof+0xcb/0x4f0
[  245.190534][ T8218]  ? kfree+0x4d/0x440
[  245.190555][ T8218]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  245.190584][ T8218]  tomoyo_realpath_from_path+0xe3/0x5d0
[  245.190609][ T8218]  ? tomoyo_domain+0xd9/0x130
[  245.190638][ T8218]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  245.190659][ T8218]  tomoyo_path_number_perm+0x1e8/0x5a0
[  245.190682][ T8218]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  245.190720][ T8218]  ? __lock_acquire+0xab9/0xd20
[  245.190764][ T8218]  ? __fget_files+0x2a/0x420
[  245.190787][ T8218]  ? __fget_files+0x3a0/0x420
[  245.190804][ T8218]  ? __fget_files+0x2a/0x420
[  245.190827][ T8218]  security_file_ioctl_compat+0xcb/0x2d0
[  245.190850][ T8218]  __ia32_compat_sys_ioctl+0x128/0x840
[  245.190878][ T8218]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  245.190903][ T8218]  ? __fget_files+0x3a0/0x420
[  245.190928][ T8218]  ? fput+0xa0/0xd0
[  245.190949][ T8218]  ? ksys_write+0x22a/0x250
[  245.190973][ T8218]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  245.191000][ T8218]  ? lockdep_hardirqs_on+0x9c/0x150
[  245.191027][ T8218]  __do_fast_syscall_32+0xb6/0x2b0
[  245.191045][ T8218]  ? lockdep_hardirqs_on+0x9c/0x150
[  245.191073][ T8218]  do_fast_syscall_32+0x34/0x80
[  245.191091][ T8218]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  245.191111][ T8218] RIP: 0023:0xf711e539
[  245.191126][ T8218] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  245.191141][ T8218] RSP: 002b:00000000f50cc55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  245.191159][ T8218] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000002285
[  245.191171][ T8218] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000
[  245.191182][ T8218] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  245.191192][ T8218] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  245.191202][ T8218] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  245.191229][ T8218]  </TASK>
[  245.191267][ T8218] ERROR: Out of memory at tomoyo_realpath_from_path.
[  245.754486][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  245.761509][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  246.257255][ T5937] usb 1-1: unable to get BOS descriptor or descriptor too short
[  246.398004][ T5937] usb 1-1: unable to read config index 0 descriptor/start: -71
[  246.429499][ T5937] usb 1-1: can't read configurations, error -71
[  246.794402][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  246.801653][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  246.828177][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[  246.847768][   T10] usb 3-1: unable to read config index 0 descriptor/start: -71
[  246.894323][ T5937] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  246.903523][   T10] usb 3-1: can't read configurations, error -71
[  247.032019][ T8228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.665'.
[  247.074344][ T5937] usb 1-1: Using ep0 maxpacket: 32
[  247.092442][ T5937] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  247.100859][ T5937] usb 1-1: config 0 has no interface number 0
[  247.134982][ T5937] usb 1-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  247.194834][ T5937] usb 1-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  247.238174][ T5937] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  247.273665][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.302525][ T5937] usb 1-1: Product: syz
[  247.334338][ T5937] usb 1-1: Manufacturer: syz
[  247.354334][ T5937] usb 1-1: SerialNumber: syz
[  247.372068][ T5937] usb 1-1: config 0 descriptor??
[  247.436176][ T5937] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  247.756092][ T8253] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.662'.
[  247.824422][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  247.831512][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  247.875157][   T43] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  247.944475][    T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  248.024484][   T43] usb 2-1: device descriptor read/64, error -71
[  248.127014][    T9] usb 5-1: config 0 has no interfaces?
[  248.143618][    T9] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  248.153976][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.166512][    T9] usb 5-1: Product: syz
[  248.171046][    T9] usb 5-1: Manufacturer: syz
[  248.178134][    T9] usb 5-1: SerialNumber: syz
[  248.193681][    T9] usb 5-1: config 0 descriptor??
[  248.274335][   T43] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  248.414329][   T43] usb 2-1: device descriptor read/64, error -71
[  248.524990][   T43] usb usb2-port1: attempt power cycle
[  248.864528][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  248.871534][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  248.894364][   T43] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  248.925002][   T43] usb 2-1: device descriptor read/8, error -71
[  249.194352][   T43] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  249.224963][   T43] usb 2-1: device descriptor read/8, error -71
[  249.688140][   T43] usb usb2-port1: unable to enumerate USB device
[  249.775219][ T8266] netlink: 56 bytes leftover after parsing attributes in process `syz.3.677'.
[  249.815327][ T5937] usb 1-1: qt2_attach - failed to power on unit: -71
[  249.892023][   T10] usb 5-1: USB disconnect, device number 23
[  249.904399][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  249.911421][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  249.972073][ T5937] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71
[  250.022006][ T5937] usb 1-1: USB disconnect, device number 29
[  250.221350][ T8281] FAULT_INJECTION: forcing a failure.
[  250.221350][ T8281] name failslab, interval 1, probability 0, space 0, times 0
[  250.221385][ T8281] CPU: 0 UID: 0 PID: 8281 Comm: syz.0.683 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) 
[  250.221409][ T8281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  250.221420][ T8281] Call Trace:
[  250.221427][ T8281]  <TASK>
[  250.221434][ T8281]  dump_stack_lvl+0x189/0x250
[  250.221463][ T8281]  ? __pfx____ratelimit+0x10/0x10
[  250.221489][ T8281]  ? __pfx_dump_stack_lvl+0x10/0x10
[  250.221513][ T8281]  ? __pfx__printk+0x10/0x10
[  250.221538][ T8281]  ? ref_tracker_alloc+0x318/0x460
[  250.221564][ T8281]  should_fail_ex+0x414/0x560
[  250.221592][ T8281]  should_failslab+0xa8/0x100
[  250.221612][ T8281]  kmem_cache_alloc_noprof+0x73/0x3c0
[  250.221637][ T8281]  ? skb_clone+0x212/0x3a0
[  250.221672][ T8281]  skb_clone+0x212/0x3a0
[  250.221698][ T8281]  __netlink_deliver_tap+0x404/0x850
[  250.221729][ T8281]  ? netlink_deliver_tap+0x2e/0x1b0
[  250.221751][ T8281]  netlink_deliver_tap+0x19c/0x1b0
[  250.221773][ T8281]  netlink_unicast+0x72f/0x8d0
[  250.221803][ T8281]  netlink_sendmsg+0x805/0xb30
[  250.221833][ T8281]  ? __pfx_netlink_sendmsg+0x10/0x10
[  250.221857][ T8281]  ? __import_iovec+0x5d4/0x7f0
[  250.221871][ T8281]  ? aa_sock_msg_perm+0x94/0x160
[  250.221895][ T8281]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  250.221917][ T8281]  ? __pfx_netlink_sendmsg+0x10/0x10
[  250.221938][ T8281]  __sock_sendmsg+0x219/0x270
[  250.221966][ T8281]  ____sys_sendmsg+0x505/0x830
[  250.221992][ T8281]  ? __pfx_____sys_sendmsg+0x10/0x10
[  250.222027][ T8281]  ___sys_sendmsg+0x21f/0x2a0
[  250.222051][ T8281]  ? __pfx____sys_sendmsg+0x10/0x10
[  250.222107][ T8281]  ? __fget_files+0x2a/0x420
[  250.222125][ T8281]  ? __fget_files+0x3a0/0x420
[  250.222154][ T8281]  __sys_sendmsg+0x164/0x220
[  250.222176][ T8281]  ? __pfx___sys_sendmsg+0x10/0x10
[  250.222210][ T8281]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  250.222237][ T8281]  ? lockdep_hardirqs_on+0x9c/0x150
[  250.222262][ T8281]  __do_fast_syscall_32+0xb6/0x2b0
[  250.222280][ T8281]  ? lockdep_hardirqs_on+0x9c/0x150
[  250.222308][ T8281]  do_fast_syscall_32+0x34/0x80
[  250.222326][ T8281]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  250.222346][ T8281] RIP: 0023:0xf7f02539
[  250.222361][ T8281] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  250.222376][ T8281] RSP: 002b:00000000f502655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  250.222395][ T8281] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080
[  250.222408][ T8281] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  250.222418][ T8281] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  250.222428][ T8281] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  250.222439][ T8281] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  250.222466][ T8281]  </TASK>
[  250.564722][   T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  250.713317][    T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  250.804550][   T10] usb 4-1: Using ep0 maxpacket: 32
[  250.806495][   T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  250.808473][   T10] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  250.808498][   T10] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  250.808518][   T10] usb 4-1: Product: syz
[  250.808533][   T10] usb 4-1: Manufacturer: syz
[  250.808547][   T10] usb 4-1: SerialNumber: syz
[  250.817410][   T10] usb 4-1: config 0 descriptor??
[  250.817977][ T8285] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  250.874993][    T9] usb 1-1: Using ep0 maxpacket: 8
[  250.907165][    T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  250.907192][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.908258][    T9] usb 1-1: Product: syz
[  250.908274][    T9] usb 1-1: Manufacturer: syz
[  250.908289][    T9] usb 1-1: SerialNumber: syz
[  250.912511][    T9] usb 1-1: config 0 descriptor??
[  250.946234][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  250.946424][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  251.117705][    T9] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  251.998915][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  251.999083][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  253.024438][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  253.031529][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  253.390292][    T9] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  253.413156][    T9] usb 1-1: USB disconnect, device number 30
[  253.484897][   T24] usb 4-1: USB disconnect, device number 27
[  253.521701][ T5937] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  253.640011][    C1] Unknown status report in ack skb
[  253.697291][ T5937] usb 3-1: config 0 has an invalid interface number: 32 but max is 0
[  253.708674][ T5937] usb 3-1: config 0 has no interface number 0
[  253.721963][ T8331] xt_hashlimit: overflow, try lower: 18446744073709551615/2251804108652543
[  253.732745][ T5937] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  253.763604][ T8333] netlink: 44 bytes leftover after parsing attributes in process `syz.4.700'.
[  253.773745][ T5937] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  253.793202][ T5937] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00
[  253.823121][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.835281][ T5937] usb 3-1: config 0 descriptor??
[  254.064423][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  254.071506][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  254.079417][ T8341] netlink: 32 bytes leftover after parsing attributes in process `syz.4.703'.
[  254.216103][ T8345] tty tty2: ldisc open failed (-12), clearing slot 1
[  254.334699][ T5937] usbhid 3-1:0.32: can't add hid device: -71
[  254.344972][   T24] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  254.354403][ T5937] usbhid 3-1:0.32: probe with driver usbhid failed with error -71
[  254.393491][ T5937] usb 3-1: USB disconnect, device number 30
[  254.549949][   T24] usb 1-1: Using ep0 maxpacket: 32
[  254.573073][   T24] usb 1-1: config 0 has an invalid interface number: 35 but max is 0
[  254.619724][   T24] usb 1-1: config 0 has no interface number 0
[  254.651635][   T24] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  254.664834][ T8360] netlink: 4 bytes leftover after parsing attributes in process `syz.2.709'.
[  254.677007][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.697521][   T24] usb 1-1: Product: syz
[  254.734707][   T24] usb 1-1: Manufacturer: syz
[  254.751622][   T24] usb 1-1: SerialNumber: syz
[  254.763900][   T24] usb 1-1: config 0 descriptor??
[  255.114434][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  255.121541][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  255.217151][   T24] radio-si470x 1-1:0.35: DeviceID=0x9242 ChipID=0x0000
[  255.255463][   T24] radio-si470x 1-1:0.35: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  255.294365][ T5857] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  255.417926][   T24] radio-si470x 1-1:0.35: software version 76, hardware version 235
[  255.425980][   T24] radio-si470x 1-1:0.35: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  255.476347][ T5857] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  255.487474][ T5857] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  255.518220][ T5857] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  255.543517][ T5857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.565040][ T5857] usb 3-1: Product: syz
[  255.569280][ T5857] usb 3-1: Manufacturer: syz
[  255.594283][ T5857] usb 3-1: SerialNumber: syz
[  255.793289][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  255.799877][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  255.822587][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  255.829374][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  255.836074][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  255.842772][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  255.849415][   T24] radio-si470x 1-1:0.35: si470x_set_report: usb_control_msg returned -71
[  255.857957][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  255.864616][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  255.871242][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  255.877861][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  255.884425][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  255.890962][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  255.897514][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  255.904050][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  255.910664][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  255.917362][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  255.926233][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  255.932833][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  255.939399][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  255.946054][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  255.952669][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  255.959313][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  255.965984][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  255.972593][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  255.979271][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  255.985911][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  255.992525][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  255.999176][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.005847][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.012434][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.019035][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.027124][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.033681][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.040292][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.046893][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.053435][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.060036][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.067147][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.073706][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.080471][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.087036][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.093581][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.100144][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.106697][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.113233][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.119811][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.127692][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.134255][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.140882][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.147547][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  256.147681][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  256.147838][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.154746][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.161638][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.168202][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.174759][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.181301][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.187870][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.194470][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.201056][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.207612][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.214149][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.220712][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.228893][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.235457][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.241997][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.248558][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.255130][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.261690][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.268242][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.274802][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.281363][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.287931][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.294500][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.301043][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.307694][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.314253][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.320870][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.328256][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.335425][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.341968][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.348529][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.355088][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.361628][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.368202][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.374767][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.381307][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.387928][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.394484][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.401021][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.407586][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.414124][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.420711][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.427348][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.435593][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.442237][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.448871][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.455514][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.462122][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.468738][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.475293][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.481829][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.488374][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.494930][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.501467][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.508022][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.514593][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.521132][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.527689][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.535881][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.542422][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.548982][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.555549][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.562085][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.568632][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.575254][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.581792][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.588335][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.594883][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.601415][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.607974][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.614558][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.621124][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.627688][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.634241][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.648574][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.655133][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.661710][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.668289][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.674840][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.681373][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.687919][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.694472][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.701016][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.707569][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.714106][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.720659][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.727224][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.733764][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.748246][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.754815][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.761356][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.767906][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.774473][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.781009][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.787572][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.794104][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.800648][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.807198][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.813729][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.820272][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.826826][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.833387][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.841514][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.848186][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.855257][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.861904][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.868578][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.875319][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.882040][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.888726][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.895383][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.902031][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.908702][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.915418][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.922127][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.928892][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.936714][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.943453][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.950195][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.956889][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.963601][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.973617][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.980318][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.987026][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  256.993736][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  257.000460][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  257.007191][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  257.013902][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  257.020605][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  257.030241][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  257.037538][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  257.045517][    C1] radio-si470x 1-1:0.35: non-zero urb status (-71)
[  257.053485][   T24] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -22
[  257.095769][   T24] radio-raremono 1-1:0.35: this is not Thanko's Raremono.
[  257.151527][   T24] usb 1-1: USB disconnect, device number 31
[  257.162888][ T8377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  257.184403][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  257.191430][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  257.247399][ T8377] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  257.735349][ T5937] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  257.989151][   T10] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  258.024283][ T5937] usb 2-1: Using ep0 maxpacket: 16
[  258.051938][ T5937] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  258.066054][ T5937] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 170, changing to 11
[  258.111275][ T5857] cdc_ncm 3-1:1.0: bind() failure
[  258.121494][ T5937] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 34661, setting to 1024
[  258.145095][ T5857] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  258.151870][ T5857] cdc_ncm 3-1:1.1: bind() failure
[  258.174751][   T10] usb 1-1: Using ep0 maxpacket: 16
[  258.200846][ T5937] usb 2-1: config 0 interface 0 has no altsetting 0
[  258.224400][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  258.231466][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  258.247447][ T5937] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  258.260971][ T5857] usb 3-1: USB disconnect, device number 31
[  258.272081][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.341928][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  258.349732][ T5937] usb 2-1: Product: syz
[  258.368181][ T5937] usb 2-1: Manufacturer: syz
[  258.377150][   T10] usb 1-1: config 1 interface 0 altsetting 201 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  258.385585][ T5937] usb 2-1: SerialNumber: syz
[  258.415999][   T10] usb 1-1: config 1 interface 0 has no altsetting 0
[  258.432732][ T5937] usb 2-1: config 0 descriptor??
[  258.473898][ T8382] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  258.493764][   T10] usb 1-1: New USB device found, idVendor=056a, idProduct=00d3, bcdDevice= 0.40
[  258.502993][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.522604][   T10] usb 1-1: Product: syz
[  258.552403][   T10] usb 1-1: Manufacturer: syz
[  258.568202][   T10] usb 1-1: SerialNumber: syz
[  258.694229][ T8380] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  258.755159][ T5937] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input9
[  258.793606][ T8400] syzkaller1: entered promiscuous mode
[  258.812110][ T8400] syzkaller1: entered allmulticast mode
[  258.830311][ T8400] netlink: 'syz.2.721': attribute type 10 has an invalid length.
[  258.846369][ T8400] hsr_slave_0: left promiscuous mode
[  259.054854][ T5928] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  259.070865][ T5857] usb 2-1: USB disconnect, device number 23
[  259.264473][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  259.271564][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  259.274411][ T5928] usb 4-1: Using ep0 maxpacket: 32
[  259.383794][ T8405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.722'.
[  259.392851][ T5928] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  259.422716][ T5928] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  259.449092][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  259.484113][ T5928] usb 4-1: Product: syz
[  259.493029][ T5928] usb 4-1: Manufacturer: syz
[  259.511881][ T5928] usb 4-1: SerialNumber: syz
[  259.528633][ T5928] usb 4-1: config 0 descriptor??
[  259.541450][ T8401] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  259.925763][ T8413] loop6: detected capacity change from 0 to 524287999
[  260.179182][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.725'.
[  260.304424][    C1] net_ratelimit: 1 callbacks suppressed
[  260.304443][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  260.317144][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  260.877084][   T10] usbhid 1-1:1.0: can't add hid device: -71
[  260.891983][   T10] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  260.947770][   T10] usb 1-1: USB disconnect, device number 32
[  261.297954][ T8430] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  261.304514][ T8430] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  261.322052][ T8430] vhci_hcd vhci_hcd.0: Device attached
[  261.344422][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  261.351494][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  261.471788][ T5937] hid (null): report_id 2709143923 is invalid
[  261.480693][ T8434] FAULT_INJECTION: forcing a failure.
[  261.480693][ T8434] name failslab, interval 1, probability 0, space 0, times 0
[  261.514510][   T10] vhci_hcd: vhci_device speed not set
[  261.516318][ T5937] hid-generic 0E2E:000C:0400.0007: report_id 2709143923 is invalid
[  261.540520][ T8434] CPU: 1 UID: 0 PID: 8434 Comm: syz.2.730 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) 
[  261.540553][ T8434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  261.540564][ T8434] Call Trace:
[  261.540571][ T8434]  <TASK>
[  261.540578][ T8434]  dump_stack_lvl+0x189/0x250
[  261.540609][ T8434]  ? __pfx____ratelimit+0x10/0x10
[  261.540634][ T8434]  ? __pfx_dump_stack_lvl+0x10/0x10
[  261.540658][ T8434]  ? __pfx__printk+0x10/0x10
[  261.540682][ T8434]  ? __pfx___might_resched+0x10/0x10
[  261.540706][ T8434]  ? fs_reclaim_acquire+0x7d/0x100
[  261.540730][ T8434]  should_fail_ex+0x414/0x560
[  261.540758][ T8434]  should_failslab+0xa8/0x100
[  261.540778][ T8434]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  261.540796][ T8434]  ? __alloc_skb+0x112/0x2d0
[  261.540820][ T8434]  __alloc_skb+0x112/0x2d0
[  261.540843][ T8434]  netlink_ack+0x146/0xa50
[  261.540859][ T8434]  ? __pfx_genl_rcv_msg+0x10/0x10
[  261.540881][ T8434]  ? ref_tracker_free+0x63a/0x7d0
[  261.540901][ T8434]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  261.540923][ T8434]  ? __pfx_nl80211_post_doit+0x10/0x10
[  261.540947][ T8434]  ? __pfx_ref_tracker_free+0x10/0x10
[  261.540979][ T8434]  netlink_rcv_skb+0x28c/0x470
[  261.541000][ T8434]  ? __pfx_genl_rcv_msg+0x10/0x10
[  261.541025][ T8434]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  261.541062][ T8434]  ? down_read+0x1ad/0x2e0
[  261.541082][ T8434]  genl_rcv+0x28/0x40
[  261.541104][ T8434]  netlink_unicast+0x75b/0x8d0
[  261.541133][ T8434]  netlink_sendmsg+0x805/0xb30
[  261.541164][ T8434]  ? __pfx_netlink_sendmsg+0x10/0x10
[  261.541186][ T8434]  ? __import_iovec+0x5d4/0x7f0
[  261.541202][ T8434]  ? aa_sock_msg_perm+0x94/0x160
[  261.541226][ T8434]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  261.541246][ T8434]  ? __pfx_netlink_sendmsg+0x10/0x10
[  261.541267][ T8434]  __sock_sendmsg+0x219/0x270
[  261.541295][ T8434]  ____sys_sendmsg+0x505/0x830
[  261.541322][ T8434]  ? __pfx_____sys_sendmsg+0x10/0x10
[  261.541359][ T8434]  ___sys_sendmsg+0x21f/0x2a0
[  261.541384][ T8434]  ? __pfx____sys_sendmsg+0x10/0x10
[  261.541441][ T8434]  ? __fget_files+0x2a/0x420
[  261.541458][ T8434]  ? __fget_files+0x3a0/0x420
[  261.541488][ T8434]  __sys_sendmsg+0x164/0x220
[  261.541512][ T8434]  ? __pfx___sys_sendmsg+0x10/0x10
[  261.541556][ T8434]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  261.541581][ T8434]  ? lockdep_hardirqs_on+0x9c/0x150
[  261.541608][ T8434]  __do_fast_syscall_32+0xb6/0x2b0
[  261.541626][ T8434]  ? lockdep_hardirqs_on+0x9c/0x150
[  261.541653][ T8434]  do_fast_syscall_32+0x34/0x80
[  261.541670][ T8434]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  261.541690][ T8434] RIP: 0023:0xf712e539
[  261.541705][ T8434] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  261.541719][ T8434] RSP: 002b:00000000f511e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  261.541738][ T8434] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080
[  261.541749][ T8434] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  261.541760][ T8434] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  261.541770][ T8434] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  261.541780][ T8434] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  261.541806][ T8434]  </TASK>
[  261.604972][   T10] usb 33-1: new full-speed USB device number 2 using vhci_hcd
[  261.684289][ T5937] hid-generic 0E2E:000C:0400.0007: item 0 4 1 8 parsing failed
[  262.098480][ T5928] usb 4-1: USB disconnect, device number 28
[  262.118485][ T5937] hid-generic 0E2E:000C:0400.0007: probe with driver hid-generic failed with error -22
[  262.384427][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  262.391509][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  262.419290][ T8431] vhci_hcd: connection reset by peer
[  262.440499][   T12] vhci_hcd: stop threads
[  262.454295][   T12] vhci_hcd: release socket
[  262.481073][   T12] vhci_hcd: disconnect device
[  263.393119][ T5937] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  263.424414][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  263.431442][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  263.644361][ T5937] usb 3-1: Using ep0 maxpacket: 16
[  263.777280][ T5937] usb 3-1: unable to get BOS descriptor or descriptor too short
[  263.788398][ T5937] usb 3-1: config 1 interface 0 altsetting 201 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  263.917696][ T5937] usb 3-1: config 1 interface 0 has no altsetting 0
[  264.019949][ T5937] usb 3-1: New USB device found, idVendor=056a, idProduct=00d3, bcdDevice= 0.40
[  264.094613][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.102714][ T5937] usb 3-1: Product: syz
[  264.112846][ T5937] usb 3-1: Manufacturer: syz
[  264.117791][ T5937] usb 3-1: SerialNumber: syz
[  264.464423][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  264.471553][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  265.066634][ T8489] FAULT_INJECTION: forcing a failure.
[  265.066634][ T8489] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  265.100968][ T8489] CPU: 0 UID: 0 PID: 8489 Comm: syz.4.748 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) 
[  265.100994][ T8489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  265.101004][ T8489] Call Trace:
[  265.101010][ T8489]  <TASK>
[  265.101014][ T8489]  dump_stack_lvl+0x189/0x250
[  265.101036][ T8489]  ? __pfx____ratelimit+0x10/0x10
[  265.101061][ T8489]  ? __pfx_dump_stack_lvl+0x10/0x10
[  265.101086][ T8489]  ? __pfx__printk+0x10/0x10
[  265.101105][ T8489]  ? __might_fault+0xb0/0x130
[  265.101132][ T8489]  should_fail_ex+0x414/0x560
[  265.101147][ T8489]  _copy_from_user+0x2d/0xb0
[  265.101158][ T8489]  sg_new_write+0x519/0x7b0
[  265.101171][ T8489]  ? __pfx_sg_new_write+0x10/0x10
[  265.101220][ T8489]  sg_ioctl+0x11af/0x2230
[  265.101248][ T8489]  ? __pfx_sg_ioctl+0x10/0x10
[  265.101266][ T8489]  ? __fget_files+0x2a/0x420
[  265.101286][ T8489]  ? __fget_files+0x3a0/0x420
[  265.101295][ T8489]  ? __fget_files+0x2a/0x420
[  265.101306][ T8489]  ? bpf_lsm_file_ioctl_compat+0x9/0x20
[  265.101322][ T8489]  __ia32_compat_sys_ioctl+0x540/0x840
[  265.101338][ T8489]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  265.101362][ T8489]  ? __fget_files+0x3a0/0x420
[  265.101388][ T8489]  ? fput+0xa0/0xd0
[  265.101412][ T8489]  ? ksys_write+0x22a/0x250
[  265.101435][ T8489]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  265.101450][ T8489]  ? lockdep_hardirqs_on+0x9c/0x150
[  265.101464][ T8489]  __do_fast_syscall_32+0xb6/0x2b0
[  265.101474][ T8489]  ? lockdep_hardirqs_on+0x9c/0x150
[  265.101492][ T8489]  do_fast_syscall_32+0x34/0x80
[  265.101509][ T8489]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  265.101529][ T8489] RIP: 0023:0xf711e539
[  265.101544][ T8489] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  265.101558][ T8489] RSP: 002b:00000000f50cc55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  265.101576][ T8489] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000002285
[  265.101585][ T8489] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000
[  265.101591][ T8489] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  265.101597][ T8489] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  265.101602][ T8489] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  265.101616][ T8489]  </TASK>
[  265.514443][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  265.521450][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  266.044412][   T30] audit: type=1326 audit(1749498162.914:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8470 comm="syz.1.744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7fc00000
[  266.118123][   T30] audit: type=1326 audit(1749498162.924:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8470 comm="syz.1.744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc7539 code=0x7fc00000
[  266.253471][   T30] audit: type=1326 audit(1749498162.924:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8470 comm="syz.1.744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7fc00000
[  266.316506][ T5937] usbhid 3-1:1.0: can't add hid device: -71
[  266.322596][ T5937] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  266.348495][ T8497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.751'.
[  266.390169][ T5937] usb 3-1: USB disconnect, device number 32
[  266.398491][   T30] audit: type=1326 audit(1749498162.924:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8470 comm="syz.1.744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7fc00000
[  266.544422][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  266.546895][ T8502] netlink: 36 bytes leftover after parsing attributes in process `syz.2.752'.
[  266.551470][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  266.576448][   T30] audit: type=1326 audit(1749498162.934:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8470 comm="syz.1.744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7fc00000
[  266.608029][ T8502] netlink: 68 bytes leftover after parsing attributes in process `syz.2.752'.
[  266.640633][ T8501] netlink: 48 bytes leftover after parsing attributes in process `syz.2.752'.
[  267.224400][   T10] vhci_hcd: vhci_device speed not set
[  267.584424][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  267.591539][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  267.856978][ T8526] netlink: 44 bytes leftover after parsing attributes in process `syz.2.760'.
[  268.345462][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.766'.
[  268.405464][   T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  268.429720][ T8546] FAULT_INJECTION: forcing a failure.
[  268.429720][ T8546] name failslab, interval 1, probability 0, space 0, times 0
[  268.448559][ T8546] CPU: 1 UID: 0 PID: 8546 Comm: syz.0.769 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) 
[  268.448580][ T8546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  268.448590][ T8546] Call Trace:
[  268.448598][ T8546]  <TASK>
[  268.448605][ T8546]  dump_stack_lvl+0x189/0x250
[  268.448635][ T8546]  ? __pfx____ratelimit+0x10/0x10
[  268.448661][ T8546]  ? __pfx_dump_stack_lvl+0x10/0x10
[  268.448685][ T8546]  ? __pfx__printk+0x10/0x10
[  268.448718][ T8546]  should_fail_ex+0x414/0x560
[  268.448744][ T8546]  should_failslab+0xa8/0x100
[  268.448764][ T8546]  kmem_cache_alloc_noprof+0x73/0x3c0
[  268.448789][ T8546]  ? skb_clone+0x212/0x3a0
[  268.448815][ T8546]  skb_clone+0x212/0x3a0
[  268.448839][ T8546]  __netlink_deliver_tap+0x404/0x850
[  268.448871][ T8546]  ? netlink_deliver_tap+0x2e/0x1b0
[  268.448892][ T8546]  netlink_deliver_tap+0x19c/0x1b0
[  268.448912][ T8546]  netlink_sendskb+0x68/0x140
[  268.448931][ T8546]  netlink_rcv_skb+0x28c/0x470
[  268.448951][ T8546]  ? __pfx_genl_rcv_msg+0x10/0x10
[  268.448975][ T8546]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  268.449013][ T8546]  ? down_read+0x1ad/0x2e0
[  268.449033][ T8546]  genl_rcv+0x28/0x40
[  268.449054][ T8546]  netlink_unicast+0x75b/0x8d0
[  268.449083][ T8546]  netlink_sendmsg+0x805/0xb30
[  268.449122][ T8546]  ? __pfx_netlink_sendmsg+0x10/0x10
[  268.449146][ T8546]  ? __import_iovec+0x5d4/0x7f0
[  268.449159][ T8546]  ? aa_sock_msg_perm+0x94/0x160
[  268.449181][ T8546]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  268.449202][ T8546]  ? __pfx_netlink_sendmsg+0x10/0x10
[  268.449223][ T8546]  __sock_sendmsg+0x219/0x270
[  268.449250][ T8546]  ____sys_sendmsg+0x505/0x830
[  268.449277][ T8546]  ? __pfx_____sys_sendmsg+0x10/0x10
[  268.449313][ T8546]  ___sys_sendmsg+0x21f/0x2a0
[  268.449335][ T8546]  ? __pfx____sys_sendmsg+0x10/0x10
[  268.449392][ T8546]  ? __fget_files+0x2a/0x420
[  268.449410][ T8546]  ? __fget_files+0x3a0/0x420
[  268.449440][ T8546]  __sys_sendmsg+0x164/0x220
[  268.449464][ T8546]  ? __pfx___sys_sendmsg+0x10/0x10
[  268.449499][ T8546]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  268.449526][ T8546]  ? lockdep_hardirqs_on+0x9c/0x150
[  268.449552][ T8546]  __do_fast_syscall_32+0xb6/0x2b0
[  268.449570][ T8546]  ? lockdep_hardirqs_on+0x9c/0x150
[  268.449597][ T8546]  do_fast_syscall_32+0x34/0x80
[  268.449614][ T8546]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  268.449634][ T8546] RIP: 0023:0xf7f02539
[  268.449649][ T8546] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  268.449664][ T8546] RSP: 002b:00000000f502655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  268.449683][ T8546] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080
[  268.449695][ T8546] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  268.449704][ T8546] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  268.449713][ T8546] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  268.449723][ T8546] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  268.449750][ T8546]  </TASK>
[  268.754127][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  268.761239][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  268.866105][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  268.877440][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  268.895622][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  268.914503][    T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  268.934404][ T5937] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  269.086577][   T10] usb 3-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00
[  269.094318][ T5937] usb 2-1: Using ep0 maxpacket: 8
[  269.095845][    T9] usb 4-1: Using ep0 maxpacket: 32
[  269.104174][ T5937] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  269.110065][   T10] usb 3-1: New USB device strings: Mfr=8, Product=0, SerialNumber=0
[  269.115065][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.132564][ T5937] usb 2-1: Product: syz
[  269.153755][ T5937] usb 2-1: Manufacturer: syz
[  269.159249][   T10] usb 3-1: Manufacturer: syz
[  269.159561][    T9] usb 4-1: config 0 has an invalid interface number: 106 but max is 0
[  269.178920][    T9] usb 4-1: config 0 has no interface number 0
[  269.187418][   T10] usb 3-1: config 0 descriptor??
[  269.193499][    T9] usb 4-1: config 0 interface 106 has no altsetting 0
[  269.209846][ T5937] usb 2-1: SerialNumber: syz
[  269.213320][    T9] usb 4-1: New USB device found, idVendor=0421, idProduct=6901, bcdDevice=2d.1d
[  269.228144][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.237801][    T9] usb 4-1: Product: syz
[  269.243190][    T9] usb 4-1: Manufacturer: syz
[  269.251093][    T9] usb 4-1: SerialNumber: syz
[  269.267622][    T9] usb 4-1: config 0 descriptor??
[  269.275676][    T9] cdc_phonet 4-1:0.106: probe with driver cdc_phonet failed with error -22
[  269.312411][ T5937] usb 2-1: config 0 descriptor??
[  269.374552][ T5937] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  269.382754][ T5937] usb 2-1: setting power ON
[  269.387829][ T5937] dvb-usb: bulk message failed: -22 (2/0)
[  269.396070][ T8534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.417310][ T8534] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.418660][ T5937] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  269.466173][ T5937] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  269.514316][ T5937] usb 2-1: media controller created
[  269.603682][ T8561] netlink: 'syz.3.771': attribute type 5 has an invalid length.
[  269.616231][ T8561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.626135][ T8561] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.638608][ T8534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.651047][ T8534] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.681953][ T5937] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  269.690022][   T10] usbhid 3-1:0.0: can't add hid device: -71
[  269.696880][   T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  269.729870][   T10] usb 3-1: USB disconnect, device number 33
[  269.731911][ T5937] usb 2-1: selecting invalid altsetting 6
[  269.775663][ T5937] usb 2-1: digital interface selection failed (-22)
[  269.803306][ T5937] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  269.824691][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  269.831668][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  269.883185][ T5937] usb 2-1: setting power OFF
[  269.909835][ T5937] dvb-usb: bulk message failed: -22 (2/0)
[  269.937935][ T5937] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  269.968668][ T5937] (NULL device *): no alternate interface
[  270.099595][ T5937] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  270.247058][ T5911] usb 4-1: USB disconnect, device number 29
[  270.334607][ T5937] usb 2-1: USB disconnect, device number 24
[  270.864672][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  270.871748][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  271.129715][ T8576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.778'.
[  271.543269][ T8585] netlink: 44 bytes leftover after parsing attributes in process `syz.2.782'.
[  271.665715][ T8591] netlink: 40 bytes leftover after parsing attributes in process `syz.4.784'.
[  271.831322][ T8597] PKCS7: Unknown OID: [4] 0.38.35.36.951720.33.17
[  271.839292][ T8597] PKCS7: Only support pkcs7_signedData type
[  271.891334][ T8600] netlink: 8 bytes leftover after parsing attributes in process `syz.4.788'.
[  271.904708][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  271.911777][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  272.087235][ T8607] FAULT_INJECTION: forcing a failure.
[  272.087235][ T8607] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  272.147657][ T8607] CPU: 0 UID: 0 PID: 8607 Comm: syz.3.790 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) 
[  272.147681][ T8607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  272.147692][ T8607] Call Trace:
[  272.147700][ T8607]  <TASK>
[  272.147708][ T8607]  dump_stack_lvl+0x189/0x250
[  272.147738][ T8607]  ? __pfx____ratelimit+0x10/0x10
[  272.147770][ T8607]  ? __pfx_dump_stack_lvl+0x10/0x10
[  272.147796][ T8607]  ? __pfx__printk+0x10/0x10
[  272.147827][ T8607]  should_fail_ex+0x414/0x560
[  272.147854][ T8607]  _copy_to_user+0x31/0xb0
[  272.147874][ T8607]  simple_read_from_buffer+0xe1/0x170
[  272.147897][ T8607]  proc_fail_nth_read+0x1df/0x250
[  272.147920][ T8607]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  272.147944][ T8607]  ? rw_verify_area+0x258/0x650
[  272.147968][ T8607]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  272.147990][ T8607]  vfs_read+0x200/0x980
[  272.148021][ T8607]  ? __pfx___mutex_lock+0x10/0x10
[  272.148039][ T8607]  ? __pfx_vfs_read+0x10/0x10
[  272.148065][ T8607]  ? __fget_files+0x2a/0x420
[  272.148088][ T8607]  ? __fget_files+0x3a0/0x420
[  272.148106][ T8607]  ? __fget_files+0x2a/0x420
[  272.148134][ T8607]  ksys_read+0x145/0x250
[  272.148153][ T8607]  ? __pfx_ksys_read+0x10/0x10
[  272.148181][ T8607]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  272.148206][ T8607]  ? lockdep_hardirqs_on+0x9c/0x150
[  272.148233][ T8607]  __do_fast_syscall_32+0xb6/0x2b0
[  272.148252][ T8607]  ? lockdep_hardirqs_on+0x9c/0x150
[  272.148281][ T8607]  do_fast_syscall_32+0x34/0x80
[  272.148298][ T8607]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  272.148319][ T8607] RIP: 0023:0xf7f64539
[  272.148334][ T8607] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  272.148352][ T8607] RSP: 002b:00000000f5086590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[  272.148372][ T8607] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5086620
[  272.148385][ T8607] RDX: 000000000000000f RSI: 00000000f73f2ff4 RDI: 0000000000000000
[  272.148396][ T8607] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000
[  272.148406][ T8607] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  272.148416][ T8607] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  272.148442][ T8607]  </TASK>
[  272.794757][ T8619] xt_hashlimit: overflow, try lower: 18446744073709551615/2251804108652543
[  272.905961][ T8624] syzkaller0: tun_chr_ioctl cmd 1074025677
[  272.944586][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  272.951549][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  272.991059][ T8624] syzkaller0: linktype set to 768
[  273.124531][   T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  273.201066][ T8631] team_slave_0: entered promiscuous mode
[  273.207066][ T8631] team_slave_1: entered promiscuous mode
[  273.224458][ T8631] vlan2: entered promiscuous mode
[  273.229738][ T8631] team0: entered promiscuous mode
[  273.244348][ T5911] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  273.294546][   T10] usb 4-1: Using ep0 maxpacket: 16
[  273.315080][    T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  273.404415][ T5911] usb 1-1: Using ep0 maxpacket: 16
[  273.497975][ T8638] netlink: 'syz.3.795': attribute type 1 has an invalid length.
[  273.507940][ T8638] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.795'.
[  273.525137][    T9] usb 5-1: Using ep0 maxpacket: 32
[  273.536761][    T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  273.547199][ T5911] usb 1-1: config index 0 descriptor too short (expected 4495, got 71)
[  273.570294][    T9] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  273.580158][    T9] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  273.590099][    T9] usb 5-1: Product: syz
[  273.596246][ T5911] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[  273.596618][    T9] usb 5-1: Manufacturer: syz
[  273.653663][    T9] usb 5-1: SerialNumber: syz
[  273.661393][ T5911] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  273.718355][ T5911] usb 1-1: config 0 has no interface number 0
[  273.740987][ T5911] usb 1-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01
[  273.759213][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.774574][ T5911] usb 1-1: Product: syz
[  273.783498][ T5911] usb 1-1: Manufacturer: syz
[  273.867813][    T9] usb 5-1: config 0 descriptor??
[  273.887955][ T5911] usb 1-1: SerialNumber: syz
[  273.896276][ T8626] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  273.984734][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  273.991857][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  274.013945][ T5911] usb 1-1: config 0 descriptor??
[  274.974188][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[  275.000339][   T10] usb 4-1: unable to read config index 0 descriptor/start: -71
[  275.009402][   T10] usb 4-1: can't read configurations, error -71
[  275.024764][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  275.031823][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  275.464499][   T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  275.476066][ T8665] netlink: 44 bytes leftover after parsing attributes in process `syz.1.807'.
[  275.610500][ T5911] usb 1-1: USB disconnect, device number 33
[  275.671828][   T10] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  275.700578][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.724721][   T10] usb 4-1: Product: syz
[  275.738254][   T10] usb 4-1: Manufacturer: syz
[  275.745968][   T10] usb 4-1: SerialNumber: syz
[  275.757974][   T10] usb 4-1: config 0 descriptor??
[  276.064690][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  276.071863][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  276.133424][ T5857] usb 5-1: USB disconnect, device number 24
[  276.204728][ T5900] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  276.364375][ T5900] usb 2-1: Using ep0 maxpacket: 16
[  276.405766][ T5900] usb 2-1: unable to get BOS descriptor or descriptor too short
[  276.418816][ T5900] usb 2-1: config 1 interface 0 altsetting 201 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  276.463573][ T5900] usb 2-1: config 1 interface 0 has no altsetting 0
[  276.485356][ T5900] usb 2-1: New USB device found, idVendor=056a, idProduct=00d3, bcdDevice= 0.40
[  276.594457][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.681697][ T5900] usb 2-1: Product: syz
[  276.691709][ T5900] usb 2-1: Manufacturer: syz
[  276.707349][ T5900] usb 2-1: SerialNumber: syz
[  276.887847][ T8700] netlink: 60 bytes leftover after parsing attributes in process `syz.0.819'.
[  277.104701][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  277.111875][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  277.550460][ T8711] netlink: 44 bytes leftover after parsing attributes in process `syz.0.822'.
[  277.877989][ T8713] warning: `syz.4.824' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  277.914106][ T8713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.824'.
[  278.145094][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  278.152176][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  278.225830][   T10] usb 4-1: f81604_read: reg: 105 failed: -ETIMEDOUT
[  278.234309][   T10] f81604 4-1:0.0: Setting termination of CH#1 failed: -ETIMEDOUT
[  278.312477][   T10] f81604 4-1:0.0: probe with driver f81604 failed with error -110
[  278.605389][   T10] usb 4-1: USB disconnect, device number 31
[  278.880238][ T8727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.827'.
[  279.169941][ T5900] usbhid 2-1:1.0: can't add hid device: -71
[  279.178363][ T5900] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  279.184784][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  279.193164][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  279.201071][ T5900] usb 2-1: USB disconnect, device number 25
[  279.714941][ T8738] xt_hashlimit: overflow, try lower: 18446744073709551615/2251804108652543
[  279.765055][ T8742] qrtr: Invalid version 0
[  279.924526][ T5900] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  280.098545][ T5900] usb 1-1: config 0 has no interfaces?
[  280.119858][ T5900] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  280.152695][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.188705][ T5900] usb 1-1: Product: syz
[  280.199732][ T5900] usb 1-1: Manufacturer: syz
[  280.213922][ T5900] usb 1-1: SerialNumber: syz
[  280.224524][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  280.231683][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  280.238287][ T5900] usb 1-1: config 0 descriptor??
[  280.356356][ T8755] netlink: 44 bytes leftover after parsing attributes in process `syz.4.838'.
[  280.688560][ T5857] usb 1-1: USB disconnect, device number 34
[  280.924411][   T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  281.163172][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.844'.
[  281.224904][   T10] usb 4-1: Using ep0 maxpacket: 16
[  281.258876][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[  281.274401][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  281.281562][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  281.311930][   T10] usb 4-1: config 1 interface 0 altsetting 201 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  281.482345][   T10] usb 4-1: config 1 interface 0 has no altsetting 0
[  281.611646][   T10] usb 4-1: New USB device found, idVendor=056a, idProduct=00d3, bcdDevice= 0.40
[  281.631746][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.719423][   T10] usb 4-1: Product: syz
[  281.746314][   T10] usb 4-1: Manufacturer: syz
[  281.762640][   T10] usb 4-1: SerialNumber: syz
[  282.234423][    T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  282.314402][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  282.321518][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  282.396994][    T9] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  282.409893][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.423611][    T9] usb 3-1: config 0 descriptor??
[  282.434189][    T9] cp210x 3-1:0.0: cp210x converter detected
[  282.503684][ T8794] xt_hashlimit: overflow, try lower: 18446744073709551615/2251804108652543
[  282.632817][    T9] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -121
[  282.795298][ T8803] netlink: 'syz.4.855': attribute type 1 has an invalid length.
[  282.837762][ T8797] CUSE: unknown device info "l"
[  282.847836][ T8797] CUSE: unknown device info "$"
[  282.874400][ T8797] CUSE: unknown device info "Ae-�p"
[  282.895368][ T8797] CUSE: unknown device info "���%"
[  282.919500][ T8797] CUSE: unknown device info ""
[  282.948023][ T8797] CUSE: unknown device info "����"
[  282.972456][ T8797] CUSE: unknown device info "��H"
[  282.979656][ T8797] CUSE: unknown device info "�"
[  282.986187][ T8797] CUSE: unknown device info "
"
[  282.991198][ T8797] CUSE: unknown device info "���р"
[  283.008650][ T8797] CUSE: unknown device info "
"
[  283.018583][ T8797] CUSE: unknown device info ""
[  283.023607][ T8797] CUSE: unknown device info "
"
[  283.028848][ T5937] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  283.044670][ T8797] CUSE: unknown device info "
"
[  283.052076][ T8797] CUSE: unknown device info ""
[  283.058885][ T8797] CUSE: unknown device info ""
[  283.064504][ T8797] CUSE: unknown device info ""
[  283.069649][ T8797] CUSE: unknown device info ""
[  283.074861][ T8797] CUSE: unknown device info "
"
[  283.086671][ T8811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.859'.
[  283.096047][ T8797] CUSE: DEVNAME unspecified
[  283.134612][    T9] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -71
[  283.194477][ T5937] usb 2-1: device descriptor read/64, error -71
[  283.194532][    T9] cp210x 3-1:0.0: GPIO initialisation failed: -71
[  283.244135][ T8816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.860'.
[  283.291258][    T9] usb 3-1: cp210x converter now attached to ttyUSB0
[  283.335048][    T9] usb 3-1: USB disconnect, device number 34
[  283.344435][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  283.351576][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  283.495094][ T5937] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  283.524638][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  283.581076][    T9] cp210x 3-1:0.0: device disconnected
[  283.687444][   T10] usbhid 4-1:1.0: can't add hid device: -71
[  283.734066][ T5937] usb 2-1: device descriptor read/64, error -71
[  283.811249][   T10] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  283.944667][ T5937] usb usb2-port1: attempt power cycle
[  284.003028][   T10] usb 4-1: USB disconnect, device number 32
[  284.314707][ T5937] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  284.375172][ T5937] usb 2-1: device descriptor read/8, error -71
[  284.394437][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  284.401575][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  284.714330][ T5937] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  284.934590][ T5937] usb 2-1: device descriptor read/8, error -71
[  285.153881][ T5937] usb usb2-port1: unable to enumerate USB device
[  285.434453][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  285.441646][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  285.463247][    C1] Unknown status report in ack skb
[  286.145016][   T10] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  286.304580][    T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  286.316315][   T10] usb 1-1: Using ep0 maxpacket: 32
[  286.342392][   T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  286.358470][   T10] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  286.384792][   T10] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  286.393236][   T10] usb 1-1: Product: syz
[  286.399208][   T10] usb 1-1: Manufacturer: syz
[  286.404004][   T10] usb 1-1: SerialNumber: syz
[  286.432549][   T10] usb 1-1: config 0 descriptor??
[  286.464425][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  286.471566][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  286.476980][ T8850] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  286.520280][    T9] usb 2-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice= d.5b
[  286.535292][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  286.570553][    T9] usb 2-1: Product: syz
[  286.584811][    T9] usb 2-1: Manufacturer: syz
[  286.597633][    T9] usb 2-1: SerialNumber: syz
[  286.716528][ T8863] xt_hashlimit: overflow, try lower: 18446744073709551615/2251804108652543
[  286.846740][    T9] gspca_main: pac207-2.14.0 probing 093a:2476
[  286.884385][ T5937] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  286.955615][    T9] gspca_pac207: Failed to read a register (index 0x0000, error -110)
[  286.976750][    T9] usb 2-1: Found UVC 0.00 device syz (093a:2476)
[  286.983543][    T9] usb 2-1: No valid video chain found.
[  287.047677][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  287.067719][ T5911] usb 2-1: USB disconnect, device number 30
[  287.075355][ T5937] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  287.218652][ T5937] usb 3-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00
[  287.256562][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.325918][    T9] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  287.395624][ T5937] usb 3-1: config 0 descriptor??
[  287.504470][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  287.511561][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  287.559412][    T9] usb 4-1: Using ep0 maxpacket: 16
[  287.573277][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  287.590152][    T9] usb 4-1: config 1 interface 0 altsetting 201 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  287.606186][    T9] usb 4-1: config 1 interface 0 has no altsetting 0
[  287.619414][    T9] usb 4-1: New USB device found, idVendor=056a, idProduct=00d3, bcdDevice= 0.40
[  287.630740][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.639621][    T9] usb 4-1: Product: syz
[  287.644177][    T9] usb 4-1: Manufacturer: syz
[  287.651132][    T9] usb 4-1: SerialNumber: syz
[  288.119110][ T5937] usbhid 3-1:0.0: can't add hid device: -71
[  288.125645][ T5937] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  288.139385][ T5937] usb 3-1: USB disconnect, device number 35
[  288.437638][ T8880] netdevsim netdevsim1: Direct firmware load for he_free failed with error -2
[  288.492559][ T8880] netdevsim netdevsim1: Falling back to sysfs fallback for: he_free
[  288.544412][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  288.551555][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  289.167911][ T8886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.878'.
[  289.194942][ T8886] netlink: 100 bytes leftover after parsing attributes in process `syz.2.878'.
[  289.224188][ T8886] netlink: 100 bytes leftover after parsing attributes in process `syz.2.878'.
[  289.319990][ T5900] usb 1-1: USB disconnect, device number 35
[  289.562998][ T8892] netlink: 40 bytes leftover after parsing attributes in process `syz.2.882'.
[  289.582534][ T8894] fuse: Bad value for 'fd'
[  289.594385][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  289.601438][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  289.931934][    T9] usbhid 4-1:1.0: can't add hid device: -71
[  289.941250][    T9] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  289.959097][    T9] usb 4-1: USB disconnect, device number 33
[  290.184639][ T5900] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  290.457437][ T5900] usb 1-1: Using ep0 maxpacket: 32
[  290.476670][ T5900] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  290.496623][ T5900] usb 1-1: config 0 has no interface number 0
[  290.534762][ T5900] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  290.552712][    T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  290.624407][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  290.631527][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  290.828963][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.972526][ T5900] usb 1-1: Product: syz
[  290.984378][    T9] usb 2-1: device descriptor read/64, error -71
[  291.025235][ T5900] usb 1-1: Manufacturer: syz
[  291.029898][ T5900] usb 1-1: SerialNumber: syz
[  291.178504][ T5900] usb 1-1: config 0 descriptor??
[  291.416418][ T5900] smsc95xx v2.0.0
[  291.445456][    T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  291.632343][ T5900] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  291.663436][ T5900] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  291.674395][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  291.681381][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  291.684625][    T9] usb 2-1: device descriptor read/64, error -71
[  291.859143][    T9] usb usb2-port1: attempt power cycle
[  292.234608][    T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  292.269618][    T9] usb 2-1: device descriptor read/8, error -71
[  292.514485][    T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  292.538577][    T9] usb 2-1: device descriptor read/8, error -71
[  292.634472][ T5928] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  292.654650][    T9] usb usb2-port1: unable to enumerate USB device
[  292.704403][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  292.711504][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  292.795939][ T5928] usb 4-1: Using ep0 maxpacket: 16
[  292.816614][ T5928] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10
[  292.827341][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.844634][ T5928] usb 4-1: Product: syz
[  292.867665][ T5928] usb 4-1: Manufacturer: syz
[  292.882711][ T5928] usb 4-1: SerialNumber: syz
[  292.887659][ T8942] netlink: 44 bytes leftover after parsing attributes in process `syz.4.897'.
[  292.930427][ T5928] usb 4-1: config 0 descriptor??
[  292.966077][ T5928] go7007 4-1:0.0: probe with driver go7007 failed with error -12
[  293.377967][ T5900] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32
[  293.391321][ T8903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  293.401278][ T5900] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32
[  293.417551][ T8903] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  293.425825][ T5928] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  293.471424][ T8953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.893'.
[  293.506999][ T8953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.893'.
[  293.568369][ T8955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  293.590863][ T5900] usb 1-1: USB disconnect, device number 36
[  293.597287][ T5928] usb 5-1: Using ep0 maxpacket: 16
[  293.602894][ T8955] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  293.654778][ T8957] netlink: 'syz.2.900': attribute type 10 has an invalid length.
[  293.689570][ T5928] usb 5-1: unable to get BOS descriptor or descriptor too short
[  293.715822][ T8957] netlink: 40 bytes leftover after parsing attributes in process `syz.2.900'.
[  293.727717][ T5928] usb 5-1: config 1 interface 0 altsetting 201 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  293.744602][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  293.751707][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  293.778053][ T5928] usb 5-1: config 1 interface 0 has no altsetting 0
[  293.820919][ T5928] usb 5-1: New USB device found, idVendor=056a, idProduct=00d3, bcdDevice= 0.40
[  293.831194][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.849182][ T8957] team0: entered allmulticast mode
[  293.856638][ T5928] usb 5-1: Product: syz
[  293.860952][ T8957] team_slave_0: entered allmulticast mode
[  293.874490][ T8957] team_slave_1: entered allmulticast mode
[  293.886916][ T5928] usb 5-1: Manufacturer: syz
[  293.901039][ T5928] usb 5-1: SerialNumber: syz
[  293.926768][ T8957] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  294.518460][ T8975] xt_hashlimit: overflow, try lower: 18446744073709551615/2251804108652543
[  294.784479][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  294.791604][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  295.016231][ T8984] netlink: 36 bytes leftover after parsing attributes in process `syz.1.910'.
[  295.166160][ T8987] netlink: 44 bytes leftover after parsing attributes in process `syz.2.911'.
[  295.210155][   T30] audit: type=1326 audit(1749498192.144:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8989 comm="syz.1.913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7ffc0000
[  295.318487][   T30] audit: type=1326 audit(1749498192.244:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8989 comm="syz.1.913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7ffc0000
[  295.351411][   T30] audit: type=1326 audit(1749498192.254:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8989 comm="syz.1.913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf7fc7539 code=0x7ffc0000
[  295.468217][   T30] audit: type=1326 audit(1749498192.254:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8989 comm="syz.1.913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7ffc0000
[  295.523883][ T5857] usb 4-1: USB disconnect, device number 34
[  295.556892][    C0] Unknown status report in ack skb
[  295.615647][   T30] audit: type=1326 audit(1749498192.254:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8989 comm="syz.1.913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7ffc0000
[  295.659799][   T30] audit: type=1326 audit(1749498192.254:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8989 comm="syz.1.913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=442 compat=1 ip=0xf7fc7539 code=0x7ffc0000
[  295.782763][   T30] audit: type=1326 audit(1749498192.254:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8989 comm="syz.1.913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7ffc0000
[  295.824426][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  295.915215][   T30] audit: type=1326 audit(1749498192.254:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8989 comm="syz.1.913" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7539 code=0x7ffc0000
[  296.476894][ T5928] usbhid 5-1:1.0: can't add hid device: -71
[  296.485284][ T5928] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  296.566191][ T5928] usb 5-1: USB disconnect, device number 25
[  296.864425][    C1] net_ratelimit: 1 callbacks suppressed
[  296.864447][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  296.877215][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  297.369949][ T9021] xt_hashlimit: overflow, try lower: 18446744073709551615/2251804108652543
[  297.494344][    T9] usb 3-1: new full-speed USB device number 36 using dummy_hcd
[  297.747614][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  297.769025][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  297.797973][    T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  297.808095][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.838089][    T9] usb 3-1: Product: syz
[  297.855870][    T9] usb 3-1: Manufacturer: syz
[  297.879006][    T9] usb 3-1: SerialNumber: syz
[  297.898027][ T9033] netlink: 44 bytes leftover after parsing attributes in process `syz.1.928'.
[  297.914408][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  297.921506][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  297.932780][   T24] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  298.035139][    C0] Unknown status report in ack skb
[  298.114418][   T24] usb 5-1: Using ep0 maxpacket: 32
[  298.121936][   T24] usb 5-1: unable to get BOS descriptor or descriptor too short
[  298.127186][ T9017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.921'.
[  298.151016][   T24] usb 5-1: config 0 has an invalid interface number: 156 but max is 2
[  298.159871][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  298.168565][    T9] usb 3-1: 0:2 : does not exist
[  298.201570][    T9] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  298.230278][   T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3
[  298.269948][   T24] usb 5-1: config 0 has no interface number 0
[  298.279425][   T24] usb 5-1: config 0 interface 156 has no altsetting 0
[  298.299158][   T24] usb 5-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=b2.1d
[  298.312305][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.320646][   T24] usb 5-1: Product: syz
[  298.325099][   T24] usb 5-1: Manufacturer: syz
[  298.329708][   T24] usb 5-1: SerialNumber: syz
[  298.339843][   T24] usb 5-1: config 0 descriptor??
[  298.415614][    T9] usb 3-1: USB disconnect, device number 36
[  298.494379][ T5857] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  298.684622][ T5857] usb 2-1: Using ep0 maxpacket: 16
[  298.820621][ T6526] udevd[6526]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  298.899043][ T5857] usb 2-1: unable to get BOS descriptor or descriptor too short
[  298.923655][ T5857] usb 2-1: config 1 interface 0 altsetting 201 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  298.944919][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  298.951986][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  299.090596][ T5857] usb 2-1: config 1 interface 0 has no altsetting 0
[  299.217407][   T24] usb 5-1: USB disconnect, device number 26
[  299.283235][ T5857] usb 2-1: New USB device found, idVendor=056a, idProduct=00d3, bcdDevice= 0.40
[  299.515255][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.542860][ T6000] udevd[6000]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.156/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  299.559616][ T5857] usb 2-1: Product: syz
[  299.559638][ T5857] usb 2-1: Manufacturer: syz
[  299.664318][ T5857] usb 2-1: SerialNumber: syz
[  299.984419][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  299.991473][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  300.354722][   T24] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  300.684345][   T24] usb 3-1: Using ep0 maxpacket: 32
[  300.691361][   T24] usb 3-1: config 0 interface 0 has no altsetting 0
[  300.702602][   T24] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  300.714428][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.735027][ T9084] xt_hashlimit: overflow, try lower: 18446744073709551615/2251804108652543
[  300.743673][   T24] usb 3-1: Product: syz
[  300.750390][   T24] usb 3-1: Manufacturer: syz
[  300.766217][   T24] usb 3-1: SerialNumber: syz
[  300.812199][   T24] usb 3-1: config 0 descriptor??
[  301.024418][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  301.031522][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  301.258170][ T9072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  301.281001][ T9072] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  301.362275][   T24] gs_usb 3-1:0.0: Configuring for 224 interfaces
[  301.362306][   T24] gs_usb 3-1:0.0: Driver cannot handle more that 3 CAN interfaces
[  301.362321][   T24] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22
[  302.064422][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  302.071447][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  302.415109][ T5857] usbhid 2-1:1.0: can't add hid device: -71
[  302.424318][ T5937] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  302.434519][ T5857] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  302.513259][ T5857] usb 2-1: USB disconnect, device number 35
[  302.584455][ T5937] usb 5-1: Using ep0 maxpacket: 16
[  302.593069][ T5937] usb 5-1: config 0 has an invalid interface number: 39 but max is 0
[  302.604500][ T5937] usb 5-1: config 0 has no interface number 0
[  302.614870][ T5937] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=70.6d
[  302.624334][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.641172][    T9] usb 3-1: USB disconnect, device number 37
[  302.654297][ T5937] usb 5-1: Product: syz
[  302.658636][ T5937] usb 5-1: Manufacturer: syz
[  302.663239][ T5937] usb 5-1: SerialNumber: syz
[  302.692919][ T5937] usb 5-1: config 0 descriptor??
[  302.754695][ T5937] i2c-tiny-usb 5-1:0.39: version 70.6d found at bus 005 address 027
[  302.971373][ T5937]  (null): failure setting delay to 10us
[  302.987493][ T5937] i2c-tiny-usb 5-1:0.39: probe with driver i2c-tiny-usb failed with error -5
[  303.020061][ T5937] usb 5-1: USB disconnect, device number 27
[  303.104381][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  303.111619][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  303.496416][ T5911] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  303.664401][ T5911] usb 2-1: Using ep0 maxpacket: 16
[  303.675348][ T5911] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  303.693279][ T5911] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  303.716899][ T5911] usb 2-1: config 0 interface 0 has no altsetting 0
[  303.740177][ T5911] usb 2-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00
[  303.764017][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.844717][ T5911] usb 2-1: config 0 descriptor??
[  303.872144][ T5911] usbhid 2-1:0.0: can't add hid device: -22
[  303.882378][ T5911] usbhid 2-1:0.0: probe with driver usbhid failed with error -22
[  304.070065][ T9116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  304.144394][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  304.151480][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  304.197199][ T9116] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  304.323852][ T5937] usb 2-1: USB disconnect, device number 36
[  304.812488][ T9146] xt_hashlimit: overflow, try lower: 18446744073709551615/2251804108652543
[  304.834681][ T5937] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  305.000914][ T5937] usb 2-1: config 0 has no interfaces?
[  305.034390][ T5937] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  305.079265][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  305.147344][ T5937] usb 2-1: Product: syz
[  305.152437][ T5937] usb 2-1: Manufacturer: syz
[  305.184391][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  305.191499][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  305.234280][ T5937] usb 2-1: SerialNumber: syz
[  305.270463][ T5937] usb 2-1: config 0 descriptor??
[  305.354330][ T9158] netlink: 44 bytes leftover after parsing attributes in process `syz.2.965'.
[  305.994853][ T5928] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  306.224413][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  306.231549][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  306.236220][ T5928] usb 5-1: Using ep0 maxpacket: 16
[  306.711919][ T5928] usb 5-1: unable to get BOS descriptor or descriptor too short
[  306.725019][ T5928] usb 5-1: config 1 interface 0 altsetting 201 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  306.741524][ T5928] usb 5-1: config 1 interface 0 has no altsetting 0
[  306.807886][ T5928] usb 5-1: New USB device found, idVendor=056a, idProduct=00d3, bcdDevice= 0.40
[  306.825501][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.903551][ T5928] usb 5-1: Product: syz
[  306.949653][ T5928] usb 5-1: Manufacturer: syz
[  306.993485][ T5928] usb 5-1: SerialNumber: syz
[  307.264458][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  307.271625][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  307.474363][ T5937] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  307.577994][ T9121] syz.0.953 (9121): drop_caches: 1
[  307.647713][ T9125] syz.0.953 (9125): drop_caches: 1
[  307.687059][ T5937] usb 3-1: Using ep0 maxpacket: 8
[  307.748424][ T5937] usb 3-1: config 7 has an invalid interface number: 29 but max is 0
[  307.756787][ T5937] usb 3-1: config 7 has no interface number 0
[  307.762925][ T5937] usb 3-1: config 7 interface 29 altsetting 6 bulk endpoint 0xD has invalid maxpacket 1024
[  307.779170][   T10] usb 2-1: USB disconnect, device number 37
[  307.799487][ T5937] usb 3-1: config 7 interface 29 altsetting 6 endpoint 0xB has invalid wMaxPacketSize 0
[  307.812985][ T5937] usb 3-1: config 7 interface 29 altsetting 6 has a duplicate endpoint with address 0x4, skipping
[  307.905960][ T5937] usb 3-1: config 7 interface 29 has no altsetting 0
[  308.304465][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  308.311570][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  309.026876][ T9196] netlink: 4 bytes leftover after parsing attributes in process `syz.1.971'.
[  309.344422][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  309.351527][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  309.919853][ T5928] usbhid 5-1:1.0: can't add hid device: -71
[  309.967077][ T5928] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  309.994453][ T5928] usb 5-1: USB disconnect, device number 28
[  310.255463][ T5937] usb 3-1: string descriptor 0 read error: -71
[  310.261796][ T5937] usb 3-1: New USB device found, idVendor=2537, idProduct=1068, bcdDevice=64.99
[  310.288492][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.375839][ T5937] usb 3-1: can't set config #7, error -71
[  310.394411][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  310.401521][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  310.448651][ T9216] xt_hashlimit: overflow, try lower: 18446744073709551615/2251804108652543
[  310.492852][ T5937] usb 3-1: USB disconnect, device number 38
[  310.904277][ T5911] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  311.001690][ T9230] netlink: 44 bytes leftover after parsing attributes in process `syz.1.984'.
[  311.066434][ T5911] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  311.075186][ T9225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.983'.
[  311.082380][ T5911] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  311.147564][ T5911] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.176868][ T5911] usb 5-1: config 0 descriptor??
[  311.227941][ T5911] pwc: Askey VC010 type 2 USB webcam detected.
[  311.391618][ T9206] netlink: 'syz.0.976': attribute type 14 has an invalid length.
[  311.424459][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  311.431564][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  311.468246][ T5911] pwc: recv_control_msg error -32 req 02 val 2b00
[  311.476422][ T9222] netlink: 4 bytes leftover after parsing attributes in process `syz.4.982'.
[  311.494406][ T5911] pwc: recv_control_msg error -32 req 02 val 2700
[  311.495534][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.982'.
[  312.204356][ T5911] pwc: recv_control_msg error -71 req 02 val 2c00
[  312.220704][ T5911] pwc: recv_control_msg error -71 req 04 val 1000
[  312.374543][ T5911] pwc: recv_control_msg error -71 req 04 val 1300
[  312.394127][ T9237] delete_channel: no stack
[  312.454455][ T5911] pwc: recv_control_msg error -71 req 04 val 1400
[  312.474097][ T5911] pwc: recv_control_msg error -71 req 02 val 2000
[  312.480680][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  312.480809][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  312.525901][ T5911] pwc: recv_control_msg error -71 req 02 val 2100
[  312.540622][ T5911] pwc: recv_control_msg error -71 req 04 val 1500
[  312.564769][ T5911] pwc: recv_control_msg error -71 req 02 val 2500
[  312.627354][ T5911] pwc: recv_control_msg error -71 req 02 val 2400
[  312.654947][ T5911] pwc: recv_control_msg error -71 req 02 val 2600
[  312.693882][ T5911] pwc: recv_control_msg error -71 req 02 val 2900
[  312.735015][ T5911] pwc: recv_control_msg error -71 req 02 val 2800
[  312.779804][ T5911] pwc: recv_control_msg error -71 req 04 val 1100
[  312.817014][ T5911] pwc: recv_control_msg error -71 req 04 val 1200
[  312.873376][ T5911] pwc: Registered as video103.
[  312.918629][ T5911] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11
[  313.038314][ T5911] usb 5-1: USB disconnect, device number 29
[  313.484614][ T9276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.996'.
[  313.504384][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  313.511389][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  313.704336][ T5928] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  313.900806][ T5928] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  313.914078][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.930100][ T5928] usb 3-1: Product: syz
[  313.942584][ T5928] usb 3-1: Manufacturer: syz
[  313.954434][ T5928] usb 3-1: SerialNumber: syz
[  313.954736][ T9289] xt_hashlimit: overflow, try lower: 18446744073709551615/2251804108652543
[  313.991676][ T5928] usb 3-1: config 0 descriptor??
[  314.219854][ T5928] usb-storage 3-1:0.0: USB Mass Storage device detected
[  314.273179][ T9299] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1005'.
[  314.340625][ T5928] usb 3-1: USB disconnect, device number 39
[  314.427762][    C1] Unknown status report in ack skb
[  314.434510][ T5937] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  314.544376][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  314.551467][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  314.639596][ T5937] usb 4-1: Using ep0 maxpacket: 32
[  314.795079][ T5937] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  314.819618][ T5937] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  314.830470][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  314.840640][ T5937] usb 4-1: Product: syz
[  315.023382][ T5937] usb 4-1: Manufacturer: syz
[  315.030838][ T5937] usb 4-1: SerialNumber: syz
[  315.052431][ T5937] usb 4-1: config 0 descriptor??
[  315.079405][ T9296] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  315.264419][ T5915] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  315.394324][ T5915] usb 1-1: device descriptor read/64, error -71
[  315.594373][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  315.601461][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  315.634298][ T5915] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  315.774397][ T5915] usb 1-1: device descriptor read/64, error -71
[  315.887661][ T5915] usb usb1-port1: attempt power cycle
[  316.234308][ T5915] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  316.306236][ T5915] usb 1-1: device descriptor read/8, error -71
[  316.556650][ T5915] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  316.595451][ T5915] usb 1-1: device descriptor read/8, error -71
[  316.624415][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  316.631448][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  316.714823][ T5915] usb usb1-port1: unable to enumerate USB device
[  317.030536][ T5915] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  317.425159][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[  317.431556][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[  317.577196][ T5915] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  317.607330][ T5915] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  317.622166][ T5915] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  317.633439][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.650665][ T5911] usb 4-1: USB disconnect, device number 36
[  317.662371][ T9326] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  317.664428][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  317.676579][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  317.692092][ T9339] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1014'.
[  317.721653][ T5915] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  317.941289][ T9326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1013'.
[  317.964524][ T9326] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1013'.
[  318.255442][ T9355] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1020'.
[  318.704397][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  318.711533][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  319.053422][ T9369] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1026'.
[  319.394919][ T9377] futex_wake_op: syz.4.1021 tries to shift op by -33; fix this program
[  319.440107][ T5915] usb 2-1: USB disconnect, device number 38
[  319.447845][ T9377] netdevsim netdevsim4: Direct firmware load for .
[  319.447845][ T9377]  failed with error -2
[  319.459987][ T9377] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  319.459987][ T9377] 
[  319.744352][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  319.751361][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  319.810138][    C0] Unknown status report in ack skb
[  320.674537][ T5915] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  320.784412][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  320.791552][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  320.811844][    C1] Unknown status report in ack skb
[  320.856712][ T5915] usb 3-1: Using ep0 maxpacket: 16
[  320.885801][ T5915] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  320.911710][ T5915] usb 3-1: config 1 has an invalid descriptor of length 208, skipping remainder of the config
[  320.983511][ T5915] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  321.071676][ T5915] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  321.104137][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.122950][ T5915] usb 3-1: Product: syz
[  321.165797][ T5915] usb 3-1: Manufacturer: ꓫꞮ₏ꉿರ옖ٻ㢋龕註Í勄㋝춄판塁븏퀀켎ὓ១．ӫ⼺땬梗搯䔪㾷ᮿ櫶鼾敇嚂䀳手勢ୈ촕᭾趸৻탷ㅳ㙓ᠽ⅜䆇船偃봰䆡璚浠↩ꡝ덣읳꫏碮姀茤䒦搚혤ᩡ䔴뉠濤ꀇ語뒵損邽绗ꬬӁךּ哋胖쪠
[  321.396853][ T5915] usb 3-1: SerialNumber: syz
[  321.824430][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  321.831525][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  321.906025][ T5915] usb 3-1: 0:2 : does not exist
[  322.051166][ T5915] usb 3-1: USB disconnect, device number 40
[  322.204544][ T5937] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  322.426568][ T5937] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  322.455080][ T5937] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  322.504249][ T5937] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  322.726114][ T5937] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  322.769617][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.811647][ T5937] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  322.864390][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  322.871482][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  323.014668][ T5937] usb 2-1: invalid MIDI out EP 0
[  323.455165][ T5999] udevd[5999]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  323.472291][ T5937] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22
[  323.534921][ T5937] usb 2-1: USB disconnect, device number 39
[  323.904412][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  323.911557][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  324.850650][   T30] audit: type=1326 audit(1749498221.784:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9424 comm="syz.2.1044" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf712e539 code=0x0
[  324.944429][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  324.951437][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  325.020438][ T9456] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1053'.
[  325.597522][ T9467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1054'.
[  325.608645][ T9467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1054'.
[  325.619471][ T9467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1054'.
[  325.984380][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  325.991466][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  326.780402][ T9482] xt_connbytes: Forcing CT accounting to be enabled
[  326.814407][ T9482] xt_CT: You must specify a L4 protocol and not use inversions on it
[  327.024414][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  327.031507][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  328.064429][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  328.071479][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  329.104446][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  329.111477][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  329.146786][ T5937] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  329.422706][ T5937] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  329.468381][ T5937] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  329.504515][ T5911] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  329.632035][ T5937] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  329.702183][ T5937] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  329.715940][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.768715][ T5937] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  329.775857][ T5911] usb 2-1: Using ep0 maxpacket: 16
[  329.781917][ T5937] usb 5-1: invalid MIDI out EP 0
[  329.868974][ T5911] usb 2-1: unable to get BOS descriptor or descriptor too short
[  329.884422][ T5857] usb 4-1: new full-speed USB device number 37 using dummy_hcd
[  329.898668][ T5911] usb 2-1: config 1 interface 0 altsetting 201 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  329.917596][ T5911] usb 2-1: config 1 interface 0 has no altsetting 0
[  329.934962][ T5911] usb 2-1: New USB device found, idVendor=056a, idProduct=00d3, bcdDevice= 0.40
[  329.950022][ T5937] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22
[  329.959186][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.974801][ T5911] usb 2-1: Product: syz
[  330.009893][ T5911] usb 2-1: Manufacturer: syz
[  330.020021][ T5911] usb 2-1: SerialNumber: syz
[  330.077292][ T5857] usb 4-1: not running at top speed; connect to a high speed hub
[  330.137699][ T5915] usb 5-1: USB disconnect, device number 30
[  330.144379][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  330.151462][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  330.190377][ T5857] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[  330.265634][ T5857] usb 4-1: config 1 interface 0 has no altsetting 0
[  330.287538][ T5857] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  330.297860][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  330.328743][ T5857] usb 4-1: Product: syz
[  330.380676][ T5857] usb 4-1: Manufacturer: syz
[  330.418745][ T5857] usb 4-1: SerialNumber: syz
[  330.435783][ T9526] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  330.587888][ T5937] usb 1-1: new full-speed USB device number 41 using dummy_hcd
[  330.724334][ T5937] usb 1-1: device descriptor read/64, error -71
[  330.964410][ T5937] usb 1-1: new full-speed USB device number 42 using dummy_hcd
[  331.104552][ T5937] usb 1-1: device descriptor read/64, error -71
[  331.194435][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  331.201554][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  331.230539][ T5937] usb usb1-port1: attempt power cycle
[  331.674519][ T5937] usb 1-1: new full-speed USB device number 43 using dummy_hcd
[  331.706488][ T5937] usb 1-1: device descriptor read/8, error -71
[  331.978656][ T5857] usb 4-1: USB disconnect, device number 37
[  332.005329][ T5937] usb 1-1: new full-speed USB device number 44 using dummy_hcd
[  332.125537][ T5937] usb 1-1: device descriptor read/8, error -71
[  332.224362][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  332.231383][    C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  332.238900][ T5937] usb usb1-port1: unable to enumerate USB device
[  332.292242][ T5911] usbhid 2-1:1.0: can't add hid device: -71
[  332.304390][ T5911] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[  332.352450][ T5911] usb 2-1: USB disconnect, device number 40
[  332.410484][    C1] ------------[ cut here ]------------
[  332.416050][    C1] UBSAN: array-index-out-of-bounds in net/wireless/scan.c:3288:35
[  332.423972][    C1] index 3 is out of range for type 'u8[0]' (aka 'unsigned char[0]')
[  332.432033][    C1] CPU: 1 UID: 0 PID: 9540 Comm: syz.1.1074 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) 
[  332.432062][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  332.432086][    C1] Call Trace:
[  332.432096][    C1]  <IRQ>
[  332.432105][    C1]  dump_stack_lvl+0x189/0x250
[  332.432151][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  332.432187][    C1]  ? __pfx__printk+0x10/0x10
[  332.432216][    C1]  ? __lock_acquire+0xab9/0xd20
[  332.432252][    C1]  ubsan_epilogue+0xa/0x40
[  332.432277][    C1]  __ubsan_handle_out_of_bounds+0xe9/0xf0
[  332.432320][    C1]  cfg80211_inform_bss_frame_data+0x660/0x7b0
[  332.432361][    C1]  ? ieee80211_bss_info_update+0x2dc/0x9e0
[  332.432399][    C1]  ieee80211_bss_info_update+0x746/0x9e0
[  332.432439][    C1]  ? __pfx_ieee80211_bss_info_update+0x10/0x10
[  332.432488][    C1]  ? ieee80211_get_channel_khz+0x15b/0x8a0
[  332.432522][    C1]  ieee80211_scan_rx+0x593/0xa20
[  332.432563][    C1]  ieee80211_rx_list+0x22fc/0x2d80
[  332.432622][    C1]  ? __pfx_ieee80211_rx_list+0x10/0x10
[  332.432659][    C1]  ? ieee80211_rx_napi+0xca/0x3d0
[  332.432691][    C1]  ? ieee80211_rx_napi+0xca/0x3d0
[  332.432735][    C1]  ? ieee80211_rx_napi+0xca/0x3d0
[  332.432767][    C1]  ieee80211_rx_napi+0x1a8/0x3d0
[  332.432803][    C1]  ? __pfx_ieee80211_rx_napi+0x10/0x10
[  332.432842][    C1]  ? skb_dequeue+0x10e/0x150
[  332.432866][    C1]  ieee80211_handle_queued_frames+0xe8/0x1f0
[  332.432904][    C1]  tasklet_action_common+0x36c/0x580
[  332.432935][    C1]  ? __pfx_tasklet_action_common+0x10/0x10
[  332.432956][    C1]  ? sched_clock_cpu+0x74/0x430
[  332.432989][    C1]  ? lapic_next_event+0x11/0x20
[  332.433020][    C1]  ? clockevents_program_event+0x24d/0x360
[  332.433051][    C1]  ? workqueue_softirq_action+0xd4/0x150
[  332.433078][    C1]  handle_softirqs+0x286/0x870
[  332.433115][    C1]  ? do_softirq+0xec/0x180
[  332.433152][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  332.433191][    C1]  ? __ieee80211_tx_skb_tid_band+0x4cb/0x680
[  332.433225][    C1]  do_softirq+0xec/0x180
[  332.433256][    C1]  </IRQ>
[  332.433263][    C1]  <TASK>
[  332.433272][    C1]  ? __pfx_do_softirq+0x10/0x10
[  332.433307][    C1]  ? ieee80211_set_qos_hdr+0x1ca/0x520
[  332.433333][    C1]  ? lockdep_softirqs_on+0x13b/0x1c0
[  332.433365][    C1]  __local_bh_enable_ip+0x17d/0x1c0
[  332.433398][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  332.433432][    C1]  ? __ieee80211_tx_skb_tid_band+0x4cb/0x680
[  332.433466][    C1]  ? ieee80211_tx_skb_tid+0x2f/0x420
[  332.433495][    C1]  ? ieee80211_tx_skb_tid+0x2f/0x420
[  332.433528][    C1]  ieee80211_tx_skb_tid+0x266/0x420
[  332.433563][    C1]  ieee80211_mgmt_tx+0x1c25/0x21d0
[  332.433598][    C1]  ? ieee80211_mgmt_tx+0x1478/0x21d0
[  332.433621][    C1]  ? ieee80211_mgmt_tx+0xab0/0x21d0
[  332.433652][    C1]  cfg80211_mlme_mgmt_tx+0x7ef/0x1620
[  332.433702][    C1]  nl80211_tx_mgmt+0x9fd/0xd50
[  332.433733][    C1]  ? __pfx_nl80211_tx_mgmt+0x10/0x10
[  332.433759][    C1]  ? __pfx_netdev_run_todo+0x10/0x10
[  332.433795][    C1]  ? __pfx___cfg80211_wdev_from_attrs+0x10/0x10
[  332.433837][    C1]  ? nl80211_pre_doit+0x4f1/0x930
[  332.433875][    C1]  genl_family_rcv_msg_doit+0x215/0x300
[  332.433917][    C1]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  332.433958][    C1]  ? bpf_lsm_capable+0x9/0x20
[  332.433977][    C1]  ? security_capable+0x7e/0x2e0
[  332.434011][    C1]  genl_rcv_msg+0x60e/0x790
[  332.434051][    C1]  ? __pfx_genl_rcv_msg+0x10/0x10
[  332.434082][    C1]  ? ref_tracker_free+0x63a/0x7d0
[  332.434111][    C1]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  332.434141][    C1]  ? __pfx_nl80211_tx_mgmt+0x10/0x10
[  332.434164][    C1]  ? __pfx_nl80211_post_doit+0x10/0x10
[  332.434199][    C1]  ? __pfx_ref_tracker_free+0x10/0x10
[  332.434235][    C1]  netlink_rcv_skb+0x208/0x470
[  332.434262][    C1]  ? __pfx_genl_rcv_msg+0x10/0x10
[  332.434296][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  332.434335][    C1]  ? down_read+0x1ad/0x2e0
[  332.434360][    C1]  genl_rcv+0x28/0x40
[  332.434390][    C1]  netlink_unicast+0x75b/0x8d0
[  332.434425][    C1]  netlink_sendmsg+0x805/0xb30
[  332.434462][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  332.434492][    C1]  ? __import_iovec+0x5d4/0x7f0
[  332.434513][    C1]  ? aa_sock_msg_perm+0x94/0x160
[  332.434543][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  332.434579][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  332.434608][    C1]  __sock_sendmsg+0x219/0x270
[  332.434646][    C1]  ____sys_sendmsg+0x505/0x830
[  332.434679][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  332.434715][    C1]  ? __pfx_futex_wake_mark+0x10/0x10
[  332.434751][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  332.434782][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  332.434846][    C1]  ? __fget_files+0x2a/0x420
[  332.434870][    C1]  ? __fget_files+0x3a0/0x420
[  332.434904][    C1]  __sys_sendmsg+0x164/0x220
[  332.434935][    C1]  ? __pfx___sys_sendmsg+0x10/0x10
[  332.434972][    C1]  ? rcu_is_watching+0x15/0xb0
[  332.435009][    C1]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  332.435045][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  332.435081][    C1]  __do_fast_syscall_32+0xb6/0x2b0
[  332.435103][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  332.435140][    C1]  do_fast_syscall_32+0x34/0x80
[  332.435162][    C1]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  332.435189][    C1] RIP: 0023:0xf7fc7539
[  332.435209][    C1] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  332.435229][    C1] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  332.435253][    C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080
[  332.435269][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  332.435282][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  332.435295][    C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  332.435308][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  332.435338][    C1]  </TASK>
[  333.006863][    C1] ---[ end trace ]---
[  333.010877][    C1] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[  333.018085][    C1] CPU: 1 UID: 0 PID: 9540 Comm: syz.1.1074 Not tainted 6.16.0-rc1-syzkaller #0 PREEMPT(full) 
[  333.028320][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  333.038367][    C1] Call Trace:
[  333.041650][    C1]  <IRQ>
[  333.044484][    C1]  dump_stack_lvl+0x99/0x250
[  333.049075][    C1]  ? __asan_memcpy+0x40/0x70
[  333.053658][    C1]  ? __pfx_dump_stack_lvl+0x10/0x10
[  333.058849][    C1]  ? __pfx__printk+0x10/0x10
[  333.063432][    C1]  panic+0x2db/0x790
[  333.067329][    C1]  ? __pfx_panic+0x10/0x10
[  333.071738][    C1]  ? _printk+0xcf/0x120
[  333.075903][    C1]  ? __pfx__printk+0x10/0x10
[  333.080490][    C1]  check_panic_on_warn+0x89/0xb0
[  333.085426][    C1]  __ubsan_handle_out_of_bounds+0xe9/0xf0
[  333.091149][    C1]  cfg80211_inform_bss_frame_data+0x660/0x7b0
[  333.097223][    C1]  ? ieee80211_bss_info_update+0x2dc/0x9e0
[  333.103031][    C1]  ieee80211_bss_info_update+0x746/0x9e0
[  333.108666][    C1]  ? __pfx_ieee80211_bss_info_update+0x10/0x10
[  333.114823][    C1]  ? ieee80211_get_channel_khz+0x15b/0x8a0
[  333.120623][    C1]  ieee80211_scan_rx+0x593/0xa20
[  333.125560][    C1]  ieee80211_rx_list+0x22fc/0x2d80
[  333.130673][    C1]  ? __pfx_ieee80211_rx_list+0x10/0x10
[  333.136132][    C1]  ? ieee80211_rx_napi+0xca/0x3d0
[  333.141149][    C1]  ? ieee80211_rx_napi+0xca/0x3d0
[  333.146170][    C1]  ? ieee80211_rx_napi+0xca/0x3d0
[  333.151186][    C1]  ieee80211_rx_napi+0x1a8/0x3d0
[  333.156117][    C1]  ? __pfx_ieee80211_rx_napi+0x10/0x10
[  333.161572][    C1]  ? skb_dequeue+0x10e/0x150
[  333.166151][    C1]  ieee80211_handle_queued_frames+0xe8/0x1f0
[  333.172125][    C1]  tasklet_action_common+0x36c/0x580
[  333.177400][    C1]  ? __pfx_tasklet_action_common+0x10/0x10
[  333.183191][    C1]  ? sched_clock_cpu+0x74/0x430
[  333.188035][    C1]  ? lapic_next_event+0x11/0x20
[  333.192877][    C1]  ? clockevents_program_event+0x24d/0x360
[  333.198674][    C1]  ? workqueue_softirq_action+0xd4/0x150
[  333.204322][    C1]  handle_softirqs+0x286/0x870
[  333.209122][    C1]  ? do_softirq+0xec/0x180
[  333.213540][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  333.218825][    C1]  ? __ieee80211_tx_skb_tid_band+0x4cb/0x680
[  333.224807][    C1]  do_softirq+0xec/0x180
[  333.229050][    C1]  </IRQ>
[  333.231970][    C1]  <TASK>
[  333.234895][    C1]  ? __pfx_do_softirq+0x10/0x10
[  333.239740][    C1]  ? ieee80211_set_qos_hdr+0x1ca/0x520
[  333.245191][    C1]  ? lockdep_softirqs_on+0x13b/0x1c0
[  333.250471][    C1]  __local_bh_enable_ip+0x17d/0x1c0
[  333.255661][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  333.261370][    C1]  ? __ieee80211_tx_skb_tid_band+0x4cb/0x680
[  333.267362][    C1]  ? ieee80211_tx_skb_tid+0x2f/0x420
[  333.272652][    C1]  ? ieee80211_tx_skb_tid+0x2f/0x420
[  333.277938][    C1]  ieee80211_tx_skb_tid+0x266/0x420
[  333.283137][    C1]  ieee80211_mgmt_tx+0x1c25/0x21d0
[  333.288245][    C1]  ? ieee80211_mgmt_tx+0x1478/0x21d0
[  333.293514][    C1]  ? ieee80211_mgmt_tx+0xab0/0x21d0
[  333.298705][    C1]  cfg80211_mlme_mgmt_tx+0x7ef/0x1620
[  333.304079][    C1]  nl80211_tx_mgmt+0x9fd/0xd50
[  333.308837][    C1]  ? __pfx_nl80211_tx_mgmt+0x10/0x10
[  333.314110][    C1]  ? __pfx_netdev_run_todo+0x10/0x10
[  333.319407][    C1]  ? __pfx___cfg80211_wdev_from_attrs+0x10/0x10
[  333.325654][    C1]  ? nl80211_pre_doit+0x4f1/0x930
[  333.330742][    C1]  genl_family_rcv_msg_doit+0x215/0x300
[  333.336290][    C1]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  333.342360][    C1]  ? bpf_lsm_capable+0x9/0x20
[  333.347026][    C1]  ? security_capable+0x7e/0x2e0
[  333.351958][    C1]  genl_rcv_msg+0x60e/0x790
[  333.356462][    C1]  ? __pfx_genl_rcv_msg+0x10/0x10
[  333.361485][    C1]  ? ref_tracker_free+0x63a/0x7d0
[  333.366510][    C1]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  333.371876][    C1]  ? __pfx_nl80211_tx_mgmt+0x10/0x10
[  333.377151][    C1]  ? __pfx_nl80211_post_doit+0x10/0x10
[  333.382609][    C1]  ? __pfx_ref_tracker_free+0x10/0x10
[  333.387982][    C1]  netlink_rcv_skb+0x208/0x470
[  333.392737][    C1]  ? __pfx_genl_rcv_msg+0x10/0x10
[  333.397755][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  333.403043][    C1]  ? down_read+0x1ad/0x2e0
[  333.407448][    C1]  genl_rcv+0x28/0x40
[  333.411427][    C1]  netlink_unicast+0x75b/0x8d0
[  333.416186][    C1]  netlink_sendmsg+0x805/0xb30
[  333.420946][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  333.426226][    C1]  ? __import_iovec+0x5d4/0x7f0
[  333.431072][    C1]  ? aa_sock_msg_perm+0x94/0x160
[  333.436005][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  333.441282][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  333.446565][    C1]  __sock_sendmsg+0x219/0x270
[  333.451241][    C1]  ____sys_sendmsg+0x505/0x830
[  333.456010][    C1]  ? __pfx_____sys_sendmsg+0x10/0x10
[  333.461285][    C1]  ? __pfx_futex_wake_mark+0x10/0x10
[  333.466570][    C1]  ___sys_sendmsg+0x21f/0x2a0
[  333.471240][    C1]  ? __pfx____sys_sendmsg+0x10/0x10
[  333.476448][    C1]  ? __fget_files+0x2a/0x420
[  333.481029][    C1]  ? __fget_files+0x3a0/0x420
[  333.485707][    C1]  __sys_sendmsg+0x164/0x220
[  333.490289][    C1]  ? __pfx___sys_sendmsg+0x10/0x10
[  333.495393][    C1]  ? rcu_is_watching+0x15/0xb0
[  333.500155][    C1]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  333.506737][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  333.511930][    C1]  __do_fast_syscall_32+0xb6/0x2b0
[  333.517033][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  333.522225][    C1]  do_fast_syscall_32+0x34/0x80
[  333.527065][    C1]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  333.533387][    C1] RIP: 0023:0xf7fc7539
[  333.537444][    C1] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  333.557053][    C1] RSP: 002b:00000000f50e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  333.565466][    C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080
[  333.573448][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  333.581413][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  333.589376][    C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  333.597337][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  333.605307][    C1]  </TASK>
[  333.608559][    C1] Kernel Offset: disabled
[  333.612877][    C1] Rebooting in 86400 seconds..