last executing test programs:

8.055335481s ago: executing program 1 (id=1642):
socket(0x2a, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x21000, 0x0)
ioctl$TIOCMIWAIT(r1, 0x545c, 0x300fff2)
ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000180)=0xf1e8)
r2 = socket(0x840000000002, 0x3, 0xff)
sendmmsg$inet(r2, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000140)="a1c0ffff000039a9029e2d34161c0000", 0xff69}, {0x0}], 0x2}}], 0x1, 0x0)

7.9900349s ago: executing program 1 (id=1644):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c00000013000500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300766c616e300000000000000000000000080004000000000034002b8008000100", @ANYRES32, @ANYBLOB="110008"], 0x8c}}, 0x0)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0})
r2 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x2002})
r3 = syz_open_dev$sndctrl(&(0x7f0000002440), 0x6, 0x2)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000005040)=<r4=>0x0)
quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000300, r4, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f00000024c0)=0x7ae5)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, &(0x7f0000005200)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000500)=""/91, 0x5b}, {&(0x7f0000000180)=""/22, 0x16}], 0x2}, 0x7}, {{&(0x7f0000000580)=@sco, 0x80, &(0x7f0000000680)=[{&(0x7f0000000600)=""/11, 0xb}, {&(0x7f0000000640)=""/46, 0x2e}], 0x2, &(0x7f00000006c0)=""/27, 0x1b}, 0x20}, {{&(0x7f0000000780)=@ieee802154, 0x80, &(0x7f0000000800)=[{&(0x7f0000000700)=""/53, 0x35}], 0x1, &(0x7f0000000840)=""/37, 0x25}, 0x1}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000880)=""/171, 0xab}], 0x1, &(0x7f0000000980)=""/234, 0xea}, 0xf}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000a80)=""/133, 0x85}, {&(0x7f0000000cc0)=""/168, 0xa8}, {&(0x7f0000000b40)=""/40, 0x28}, {&(0x7f0000000d80)=""/222, 0xde}, {&(0x7f0000000e80)=""/136, 0x88}], 0x5}, 0x8}, {{&(0x7f0000000f40)=@hci, 0x80, &(0x7f0000001100)=[{&(0x7f0000000fc0)=""/55, 0x37}, {&(0x7f0000001000)=""/231, 0xe7}], 0x2, &(0x7f0000001140)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000002140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, &(0x7f0000002540)=[{&(0x7f00000021c0)=""/101, 0x65}, {&(0x7f0000002240)=""/71, 0x47}, {&(0x7f00000022c0)=""/22, 0x16}, {&(0x7f0000002300)=""/24, 0x18}, {&(0x7f0000002340)=""/191, 0xbf}, {&(0x7f0000002400)=""/47, 0x2f}, {&(0x7f0000002440)}, {&(0x7f0000002480)=""/63, 0x3f}, {&(0x7f00000024c0)}, {&(0x7f0000002500)=""/59, 0x3b}], 0xa, &(0x7f0000002600)=""/4096, 0x1000}, 0xc}, {{&(0x7f0000003600)=@x25, 0x80, &(0x7f0000003800)=[{&(0x7f0000003680)=""/80, 0x50}, {&(0x7f0000003700)=""/224, 0xe0}], 0x2, &(0x7f0000003840)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000004840)=@x25, 0x80, &(0x7f00000049c0)=[{&(0x7f00000048c0)=""/203, 0xcb}], 0x1, &(0x7f0000004a00)=""/231, 0xe7}, 0xa88}, {{&(0x7f0000004b00)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000005100)=[{&(0x7f0000004b80)=""/186, 0xba}, {&(0x7f0000004c40)=""/159, 0x9f}, {&(0x7f0000004d00)=""/97, 0x61}, {&(0x7f0000004d80)=""/184, 0xb8}, {&(0x7f0000004e40)=""/35, 0x23}, {&(0x7f0000004e80)=""/151, 0x97}, {&(0x7f0000004f40)=""/188, 0xbc}, {&(0x7f0000005000)=""/32, 0x20}, {&(0x7f0000005040)}, {&(0x7f0000005080)=""/79, 0x4f}], 0xa, &(0x7f00000051c0)=""/28, 0x1c}, 0x7}], 0xa, 0x40000000, 0x0)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="c8080000", @ANYRES16=r6, @ANYBLOB="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"], 0x8c8}}, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, &(0x7f00000000c0)={0x2, 0x200, 0x8000, 0x8, 0x6000, 0x800})
ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f0000000040)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x8}, @can, @nl=@kern={0x10, 0x0, 0x0, 0x80201000}, 0x79, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)='erspan0\x00', 0x2, 0x8, 0x4})

7.829300958s ago: executing program 4 (id=1646):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r1, &(0x7f0000002f40)=[{{&(0x7f0000000280)=@pppoe={0x18, 0x0, {0x2, @multicast, 'rose0\x00'}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000340)="569e54051465eb63b6e07b6cde998f8a9b2c49b7cc0bedd64ad4a0c5af48bd1358f634163fa941328bbe", 0x2a}, {&(0x7f00000003c0)="47b6c3bca7c3241728dc8da4dee2eeb3aa52f31ce4a821fde29c32425141ce4ffc9f4d0e68296ea2db29bb25bd85e9fc33bb0bb9661c", 0x36}, {&(0x7f0000000640)="324296d5190736b618ee73f3ffa084f51a31d083db063f2adce5841dcb6b5becba3b81d4389ca9fa3bff1d642f47097f552a5ddfda1f78c8554cd23f36d59347fa435f99c3b758c04d49755f5c152b63c9f48cda1be4da384f110fd9251e62772deffef68531283826b26a1f434dcbdd306903ca98", 0x75}, {&(0x7f00000006c0)="7081aa48c0ad58e78a0d15a8fdcfd0e803b7fd617c2e8721a036381c20dab7c4ec12c38d1c93bff25c488f6e4b1750550be9ebed7051a6596a0d7997e221c5d3f7b94693796f5b391849e48d75562f3def04620a3364d3437f57b038d013651f3a22b1d5888541596a7aaa6e22a68ddff159aff804500ae5dbd6be9adb0d25d55b4d1e44f07ed97da7a02bf459db4f4f27bbf622d0af999159e3de88890f802d45", 0xa1}, {&(0x7f0000000780)="18c65612753d8707bb6b37f7ae95fabd8fd439756c1299066b1c9b60e83a0001e0e2ace52ccdfd001e06b2d64854ebd51c4dcefe40b7314d9aa0ce1e7441a596fdb68fab9c6526a450d081d18b71f086650d4a57dd444e02f3ba7a8d13d570c18575e7ffe00c0a42a5e35ef79adeaec611618cf0e57ad329c210c2763b786026a64a11ae567421fa3f44b5bed4ece31b6bb44e40432d0afa402612b3af3e55d0f7b10038769ad6c8c2bc8aaae2a92c3671d8231cc8f1329c63b3ba30ce583d411597c3eb549b95", 0xc7}, {&(0x7f0000000440)="66376fe6fb88bed409f57627efb5f128a8660948f804fe19b6f54891b63a07baa7b560f67967fbbd89c753f175cbba09230c627fb12a391058dac3e4a1", 0x3d}], 0x6, &(0x7f0000000940)=[{0x48, 0x10f, 0x2, "a0191c69f66e1689ebca7aa3de8cb7d6a7ae64dbd4bb193aaef6a2296f82bdd5a1528b83e91b396de102ba08deb5c20040d6"}, {0xb8, 0x107, 0x2, "3681aca9dd6ce801ab8ffa5eb7108fbbf2c0fa04935e19869f9db5b68c3139a0098ff43d2a3debe4621eacb3436c1ee59ca4a98634451497e01ad010c0b0d8bc3bd2addba2e34f3cdf1a7d04d0e3c50939ce2c7b304224902b685e3866195e981ec38f31a17a646e39765dfa2c8cf2ece3c9c0ae29de9a306b339bbee7cbb9b96f9cb863218db7b5a1e40153493374171c7ec6663e05963acc427eb350f5366855a4722002"}, {0xa0, 0x10c, 0x0, "f3d656f6a211387eea22e9471210c48ae58f0d53d832741d71048cdf905aa1d7465c2d8959ac4a883f10834d07e29ac27ff4e97192ac66493fe8fa907487cc3a93a849006576cc46e55e386a6029d8258bb877471ce41f5f1659d5fe9cfd20af4d6c8c9421e76473a36de287a8f3b2cd1e902c3666172c6485a33afe9df08d321982b574210a273d0aeb"}, {0x78, 0x10e, 0xbd4, "92af37af3845516547d672ca7d4a40c9879f0c60eb0876c06a2b16832609bf7f45184ba6f6720dd7dbe40e06c26f3eabbd0952986df8d9da53034e6fbaa529fd085c402eaad63747f25f04814a0fd84288f7f956a3d6402d4edfcc6abf0a934900d661def6"}, {0xd0, 0x109, 0x3, "d98aeb55e67770489addfbcbfa72bf9343d4e29ddd19166a4e069f7c52f8a873c73a4aaf6ac34e77552a961a6622ff819b007a67b8ea5750da9ec198aadeba2463a050fa90aff16b0134355031115356eb9800ee8145cde0db025f9b10520a01850f86d6b00cef9ebbf89b7d5bbf353b03ce6912836b72736d55acab4703de157b083940bc75ac9392b6a29c408a167495ab27262482d6f6c23721f1f56be2c0ccb0e6808f96452d860b7d581f735bb628cb322f07bea218057c"}, {0x70, 0x113, 0x101, "83a34777e5730343edad29901f27ff4bb164f7bfefa7f7f6eeea3e94e876113f6a8710032d31b25cedf3277f6711765a73b9063688aef8e5ef4cb8d92c3fc0165c46503ee3f1a8877e631e48c461b3e0a3fd3a87c0c58ba99c9d2e74"}, {0xc8, 0x109, 0x7fff, "19352b7ddc2eb1be0d82eb6d4614e1cc610517d6ccbce56c3a4c8642f4650acae17c4dfdfc1d882e1e98f5f40b8b46d3228bd5d5bbea369456926ac0926cefe9857f1ff71312b5406691750155c806b46b80c342deed608b4e0d36ec49951ddab0445ebbf034d131fd79ce255feb9ca501e2ba7b09609184acae1c4eef9938114f021fe20abc7f2c9366ddd4770aed415abf2acc3815b7afb254e6240c892277a0e6cc5ea91fb39e4c10d560f99ae8244e14ea347b34"}, {0x1010, 0x101, 0x6, "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"}, {0x20, 0x102, 0x2, "4708838b8542ccf091"}], 0x1450}}, {{&(0x7f0000001dc0)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000002e40)=[{&(0x7f0000001e40)="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", 0x1000}], 0x1, &(0x7f0000002e80)=[{0x98, 0x119, 0x515a8604, "a30f79a38273d16ac49f2ba6eb9811cb7a4dc1e3902312e068a5499472a61b9de911022eb9e818abf8a78f454547e57d8de93a7d7a06c5fe63908c84511e4e9cdcdbe951da653aea89de191a257fcbf471dbd9fe77ba55d223d4a361fdd3a7fa55df5d2870489e364af932ce5a80a4bb734778e2880672194fdd7b8448af91bf0cac1d8ca9770d3d"}], 0x98}}], 0x2, 0x20044000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x40, &(0x7f00000052c0)={0x77359400})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = userfaultfd(0x80001)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r6 = dup3(r5, r4, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="91109c000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6}, 0x94)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
close(r3)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r7=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002fc0)=@newneigh={0x84, 0x1c, 0x4, 0x70bd26, 0x25dfdbff, {0x2, 0x0, 0x0, r7, 0x8, 0x80, 0xb}, [@NDA_PORT={0x6, 0x6, 0x4e20}, @NDA_DST_MAC={0xa, 0x1, @local}, @NDA_MASTER={0x8, 0x9, 0xc3c}, @NDA_MASTER={0x8, 0x9, 0x3}, @NDA_NH_ID={0x8, 0xd, 0x400}, @NDA_FDB_EXT_ATTRS={0x3c, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5}, @NFEA_ACTIVITY_NOTIFY={0x5}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xd}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x9}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x82781)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000580)={0x3, 0x0, 0x0, 'queue0\x00'})
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}})
r9 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
ioctl$EVIOCSMASK(r9, 0x40104593, &(0x7f0000000000)={0x1, 0x0, 0x0})
write$char_usb(r9, &(0x7f0000000040)="e2", 0xff0f)
sendmsg$nl_route(r0, &(0x7f0000005780)={0x0, 0x0, &(0x7f0000005740)={&(0x7f00000056c0)=@getneigh={0x14, 0x1e, 0x400, 0x70bd25, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0xc0)

7.504724076s ago: executing program 4 (id=1647):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)={0x10000008})
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
setns(r3, 0x8020000)
mount_setattr(r0, &(0x7f0000000180)='.\x00', 0x1800, &(0x7f0000000040)={0x8, 0x1000f8, 0x80000, {r0}}, 0x20)

7.443905268s ago: executing program 4 (id=1648):
syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
epoll_create1(0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_TABLE(r3, 0x0, 0xcf, &(0x7f0000000700)=0xfe, 0x4)
setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @remote}, 0x10)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe}, 0x94)
setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
r5 = pidfd_getfd(0xffffffffffffffff, r3, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x0, @sdr={0x3436324d, 0x800}})
syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x5, 0x4, 0x3, @rand_addr=0x64010102, @local}}}}}}, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df05f496d0420922f45a71c1daa8b630468cd140526c41ef8d3a4a422", 0x3, 0x1, 0x85}, 0x3c)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r7, 0xc0a85322, &(0x7f00000003c0)={0x1003, 0x0, 'client0\x00', 0x0, "92c18f5458d5f54f", "c3e64652ce2fc415a5b53ac6428c8b50af67d6c99cdfe5c1e40001df2c325f95"})
r8 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$6lowpan_control(r8, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:10 1', 0x1b)
write$6lowpan_control(r8, 0x0, 0x0)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))

7.166987326s ago: executing program 2 (id=1650):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f0000000080))
socket$inet6(0xa, 0x3, 0xff)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0)
io_setup(0x1, &(0x7f0000000040)=<r5=>0x0)
io_submit(r5, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r4, &(0x7f0000000000)='%', 0x104000}, 0x0, 0x0])
fspick(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
r6 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x2}, 0x0, 0x0, 0x0)
request_key(&(0x7f0000000880)='pkcs7_test\x00', &(0x7f00000008c0)={'syz', 0x1}, &(0x7f0000000900)=':$-.@\x00', r6)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0xa)
openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0)
r7 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f00000001c0)=0x800)
r8 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[<r9=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r9, <r10=>0x0})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r8, 0xc01864b0, &(0x7f0000000000)={r9, r10, 0x1, 0x0, 0x3})
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000008000340000000000800024000000000080007400000000008000840000800000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0)
close(0xffffffffffffffff)

7.05688098s ago: executing program 1 (id=1653):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="04000b000800ef00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="000000100015002c2e0728282640272d2423"], 0x2b4}}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00')
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r7, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e23, 0x3, @private1, 0x7}}}, 0x3a)
read$FUSE(r6, &(0x7f00000001c0)={0x2020}, 0x2020)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r9=>0x0})
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0)
sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES32=r9, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$SMC_PNETID_GET(r1, 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000370410000000ffdbdf2500000000", @ANYRES32=r11, @ANYBLOB="83550500010000001c0012800b00010067656e65766500000c00028005000c00"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80)

6.609271004s ago: executing program 4 (id=1654):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140))
ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000280)={0x29, 0x1})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})
recvmmsg(r1, &(0x7f0000000100)=[{{&(0x7f0000000180)=@alg, 0x80, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/230, 0xe6}], 0x1, &(0x7f00000003c0)=""/169, 0xa9}, 0x8}], 0x1, 0x10000, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r3 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000002580), 0x2, 0x0)
read(r3, &(0x7f0000000000)=""/83, 0x53)
ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newlink={0x48, 0x10, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2102, 0x22008}, [@IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x5}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x48}}, 0x0)

5.954141952s ago: executing program 2 (id=1655):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2c, &(0x7f0000000000)=0x100000001, 0x4)

5.800702598s ago: executing program 2 (id=1656):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000140))
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
r3 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
r7 = accept4(r6, 0x0, 0x0, 0x0)
r8 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4)
ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000100))
sendmsg$nl_route_sched_retired(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x5}}}, 0x24}}, 0x0)
r9 = fcntl$getown(r5, 0x9)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=<r10=>0x0)
kcmp(r9, r10, 0x2, r1, r6)
connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
r11 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x2f, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYRES64=r7, @ANYRES64=r1, @ANYBLOB="0000000000000000140012800b000100", @ANYBLOB="9da5762469f7f84290b4b27be6b90104e9a6ab8690f531b872ea2ddab88cabcb17b625b5c8e6919869094f67fd024b41156241dc8f874c9704bb392810ee12cb06", @ANYRESHEX=r1, @ANYRES64=0x0], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x40010)
sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x68}, 0x1, 0x7}, 0x0)

4.90091449s ago: executing program 4 (id=1658):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002680)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="04000b000800ef00", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000100015002c2e0728282640272d242300"], 0x2b4}}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00')
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r7, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x0, 0x1, 0x0, {0xa, 0x4e23, 0x3, @private1, 0x7}}}, 0x3a)
read$FUSE(r6, &(0x7f00000001c0)={0x2020}, 0x2020)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r9=>0x0})
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r10 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0)
sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010027bd7000fddbdf2500000000", @ANYRES32=r9, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80)
sendmsg$SMC_PNETID_GET(r1, 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000370410000000ffdbdf2500000000", @ANYRES32=r11, @ANYBLOB="83550500010000001c0012800b00010067656e65766500000c00028005000c00"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80)

4.897607794s ago: executing program 1 (id=1659):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xa00, &(0x7f00000000c0)={&(0x7f0000000580)=@newlink={0x48, 0x10, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2102, 0x22008}, [@IFLA_IFNAME={0x14, 0x3, 'vcan0\x00'}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x5}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x48}}, 0x0)

4.588192817s ago: executing program 1 (id=1661):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYBLOB='sK'], 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0)
r3 = fsopen(&(0x7f0000000100)='proc\x00', 0x0)
r4 = fsmount(r3, 0x0, 0x1)
fchdir(r4)
r5 = open(&(0x7f00000001c0)='.\x00', 0x141400, 0x4)
ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc048aeca, 0x0)
getdents(r5, &(0x7f0000000280)=""/4096, 0x9005)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_open_pts(r5, 0x10080)
pipe(&(0x7f0000000480)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
vmsplice(r6, &(0x7f0000000200), 0x3af, 0x2)
write$uinput_user_dev(r0, &(0x7f0000000040)={'syz0\x00', {0x9, 0x2, 0x3c1a, 0x5}, 0x3b, [0x400, 0xfffffff8, 0xfffffff7, 0x3, 0xd, 0x7, 0x7, 0x1, 0x9, 0xdb48, 0x5c7f, 0x7f, 0x9, 0x4, 0x4, 0x44, 0x66cf, 0x10001, 0x1, 0x40, 0x1, 0x10000, 0xffff, 0x3, 0xfffffff7, 0x1, 0x7, 0xa5, 0x8, 0x3ff, 0x80, 0x0, 0x3, 0xf74, 0x5, 0x8001, 0x29, 0x75cc26d, 0x1, 0x7fffffff, 0x6, 0x8, 0x5, 0x0, 0xfffff8c5, 0x5, 0x23cd4ae5, 0x2, 0x8cf, 0x0, 0x4, 0x10001, 0x6340048e, 0xb131, 0x5, 0x9, 0xd4, 0x200, 0x3, 0x6, 0x3, 0x15df, 0xf15, 0x5], [0x0, 0x0, 0x9, 0x8, 0xc736, 0x2, 0x3, 0x0, 0x8, 0x7, 0x2, 0x3, 0x1, 0x5, 0x6, 0x8, 0x738, 0x5, 0x6, 0x3, 0x8, 0x9, 0x0, 0x35, 0x5, 0xfffffff7, 0x10001, 0x0, 0xa, 0x7f, 0x80000001, 0x3317, 0x0, 0x8, 0x5, 0x400, 0x1, 0x7, 0x3, 0x5, 0xe8e, 0x8, 0x2, 0x4, 0x80000000, 0x8000, 0x7ea, 0x9eb5, 0x101, 0x7, 0x2, 0x6df2818a, 0xd, 0x7, 0x6, 0x5, 0x2, 0xfffffff0, 0x800, 0x0, 0xab7f, 0x1, 0xfffffffb, 0x3], [0x5, 0x5, 0xbb2b, 0x2, 0x7, 0x6, 0xd6, 0x7ff, 0x8, 0x2, 0x8, 0x1, 0x4, 0x7ff, 0x9, 0xf, 0x0, 0x8ed, 0x5, 0x80, 0x29, 0x0, 0x8001, 0x401, 0x4, 0xffff, 0x2, 0x0, 0x4, 0xfffffff9, 0x4, 0x1ff, 0xfffffffe, 0x5, 0x5, 0xffffffff, 0xffffffff, 0xeb, 0xc26f, 0x7, 0x4, 0x58c2, 0x101, 0x6, 0x5, 0x1000, 0x81, 0x3, 0x3, 0x7f, 0x2, 0x101, 0x6, 0x10000, 0x80000001, 0x18, 0x3, 0x6119, 0x3ff, 0x6, 0xd9, 0x5, 0x1, 0x992], [0x204e81a1, 0x2, 0x7, 0x8, 0x2, 0x1, 0x4, 0x4, 0x1, 0x7, 0xfffff54d, 0x6, 0x7, 0x8, 0x8, 0x8, 0x8001, 0x2, 0x6, 0x10001, 0x506, 0x7, 0x401, 0x8, 0xe, 0x4e42, 0x9, 0x4, 0x2b53e7fb, 0x0, 0x0, 0x1, 0x10, 0x9, 0x3, 0x5, 0x80, 0x1, 0x81, 0x1, 0x7, 0x80, 0x80000001, 0x80000000, 0x0, 0x3, 0x10000, 0x0, 0x169, 0x0, 0x5, 0x1, 0x0, 0x4, 0xfffffffb, 0x8, 0x4, 0x2e8e, 0x9, 0x8000010b, 0x0, 0x1, 0x7, 0xec1]}, 0x45c)
ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0)

4.095324645s ago: executing program 3 (id=1665):
set_mempolicy(0x2, &(0x7f00000000c0)=0x8, 0xf5) (async)
getpriority(0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
set_mempolicy(0x2, &(0x7f0000000040)=0x2, 0x7) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000380)={0x3c0, 0x20, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {0x0, 0x2}, 0x3, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x2, 0xfff, 0x3d, 0x963, 0x3, 0x53, 0x202, 0x0, 0xc}) (async)
ioctl$FBIOGET_FSCREENINFO(r2, 0x4602, 0x0) (async)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, &(0x7f0000000300)={0x2, 0x2})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x48010) (async)
r4 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) (async)
sendmsg$inet(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000e80)='\a', 0x1}], 0x1}, 0x800) (async)
sendmsg(r4, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) (async)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) (async)
socket(0x10, 0x2, 0x0) (async)
r6 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/igmp6\x00')
read$alg(r6, 0x0, 0x0)
ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000640)=0x5)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x8c0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

3.780944624s ago: executing program 0 (id=1666):
syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x201)
timer_create(0x2, &(0x7f0000000080)={0x0, 0x13, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$kcm(0x2, 0x3, 0x84)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fd9e1a40f30c74933bbc0000000109021b0001040000000904000065d4695e000905", @ANYBLOB='1M@'], 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x200})
sendmsg$inet(r0, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f00000004c0)="5f74a874eec639d0a431865ae40232b2c254da19197c3cca19e638475b", 0x1d}], 0x1}, 0x4000000)
setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x10)
socket$kcm(0x2, 0x3, 0x2)
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"})
add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="bf160000"], 0x0}, 0x94)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e20, 0x2, @local}}, 0x0, 0x8001}, &(0x7f00000003c0)=0x90)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f00000001c0)={'ip6tnl0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
r6 = syz_open_procfs(r5, &(0x7f0000000100)='net/mcfilter\x00')
read$FUSE(r6, 0x0, 0x0)
write$tcp_congestion(r6, &(0x7f00000000c0)='bic\x00', 0x4)
syz_open_dev$vcsu(&(0x7f0000000080), 0x4, 0x84000)
ioctl$USBDEVFS_GET_SPEED(r6, 0x551f)

2.475598997s ago: executing program 2 (id=1667):
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x4000001, 0x1010, 0xffffffffffffffff, 0xad1cc000)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001000)='/proc/crypto\x00', 0x0, 0x0) (async)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f000001f400), 0x2, 0x0)
sendfile(r1, r0, 0x0, 0x2) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
waitid(0x0, 0x0, 0x0, 0x61000006, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=@newtaction={0x4c, 0x1e, 0x109, 0x100, 0x0, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x11, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x6, 0x6, 'oX'}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x9506c56c30e36a6}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x0)
mbind(&(0x7f00003b9000/0x3000)=nil, 0x3000, 0xfffffffffffffffd, &(0x7f0000000000)=0x8, 0x47, 0x0) (async)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000040)={'gretap0\x00', <r3=>0x0, 0x1, 0x80, 0x1, 0x200, {{0x8, 0x4, 0x0, 0x1, 0x20, 0x65, 0x0, 0x2, 0x4bb49045ecf697bd, 0x0, @remote, @loopback, {[@noop, @generic={0x82, 0x3, 'q'}, @generic={0x7, 0x5, "56c338"}]}}}}})
sendto$packet(r0, &(0x7f0000000140)="a7b84f9d26e17d16297948ce0078dfb6e7e9a991531d6727777b5b7e12626b7d3b5d006425528f21e91a10d1338daa4d50ae0a5f37b1ea6a662350d269a8f2d997d0aa9e5752aab1750334323d666ec5d3de367c36dcc5864abfeb59c975d1e6e9da74da56dd9fafe838b433cb7535635c43f68ce452c2326fc3a4760708aaade2796dec598c6898f540d97a3012c78e2654ef5a9fdb468e48d8b53358308b23c4d59292e85b8292c8fd895418e3cc1cb5432f0e48ebf8156e6cf34c8d251aa516191bfb1af4b8d61b", 0xc9, 0x40000, &(0x7f00000000c0)={0x11, 0x3, r3, 0x1, 0x81, 0x6, @multicast}, 0x14)

2.112511795s ago: executing program 3 (id=1668):
mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1000, 0xffffff81)
creat(&(0x7f0000000380)='./file0\x00', 0x0)
r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)

2.015993909s ago: executing program 0 (id=1669):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x1500, &(0x7f0000000140)={&(0x7f0000000380)={0x20, r1, 0x5, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x20}, 0x1, 0x0, 0x0, 0x40048}, 0x0)

1.866373904s ago: executing program 4 (id=1670):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xa, 0x86, 0xf3, 0x40, 0x1110, 0x9024, 0xdb24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xe9, 0x50, 0x9, [{{0x9, 0x4, 0x62, 0x4, 0x0, 0x6f, 0x6f, 0x49, 0x5}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000780)=ANY=[], 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r2, @ANYRES64=r1, @ANYBLOB="ed"], 0x20)
r3 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00')
readlinkat(r3, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010)
write$ppp(r3, &(0x7f0000000080)="dfe7cecacf5732bd97eaa5c9a0c5e97e6c90a589503b346bc72d105bad2f72be6f2a43bcea0369b7fa9d5dc30a129836a6763b3811e0c5f23a2fa985d3994d0c77013313be31fb229181cd4366808f442733ace3d28ea40b7192df8d3a208afe679f03e77dadaa3c8789621dc87faa646d65c32549fe75ca49b9076cb0bd985b631f7f94321f8e001cac6722d680481b294fd88cce6fd2f3d41d5103bf4172a891b7d48ac8a16953c7e59e253410a3", 0xaf)

1.756356335s ago: executing program 2 (id=1671):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x80005, 0x0)
syz_usb_disconnect(r1)
syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa1, 0x12, 0x17, 0x10, 0xb95, 0x172a, 0xf7f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x0, 0x6c, 0x5d, 0x65}}]}}]}}, 0x0)
ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000100)=""/94)
fstatfs(r1, &(0x7f0000000080)=""/33)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f00000001c0)={&(0x7f0000000180)=""/37, 0x25, 0x3fc, 0xffffffff})
ioctl$EVIOCRMFF(r1, 0x550c, 0x0)

1.737885s ago: executing program 0 (id=1672):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)='}', 0x1}], 0x1}, 0x2404c011)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendto$unix(r2, 0x0, 0x0, 0xf0, 0x0, 0x0)

1.653098648s ago: executing program 0 (id=1673):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0) (async)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f000000cdc0)=0x10, 0x4) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', <r4=>0x0}) (async)
setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000040)=0x10, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async)
bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x0, r4, 0x80000000}, 0x10)
bind$xdp(r1, &(0x7f0000000200)={0x2c, 0x1, r4, 0x0, r2}, 0x10)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'netdevsim0\x00', <r6=>0x0}) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) (async)
setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85)
sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x408}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=@getlink={0x1e4, 0x12, 0x2, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x40008, 0x2024}, [@IFLA_MASTER={0x8}, @IFLA_PROMISCUITY={0x8, 0x1e, 0xffff}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x153}, @IFLA_AF_SPEC={0x180, 0x1a, 0x0, 0x1, [@AF_INET6={0x68, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x9}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}, @IFLA_INET6_TOKEN={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x6}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}, @IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}, @AF_INET6={0x80, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xab}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x8}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x14}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}]}, @AF_BRIDGE={0x4}, @AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x12, 0x0, 0x0, 0x8}, {0x8, 0x6, 0x0, 0x0, 0x3}, {0x8, 0xf, 0x0, 0x0, 0x7f}]}}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1}]}, @AF_BRIDGE={0x4}]}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_WEIGHT={0x8, 0xf, 0x2}, @IFLA_IFALIAS={0x14, 0x14, 'bond0\x00'}]}, 0x1e4}, 0x1, 0x0, 0x0, 0x4}, 0x8090)

1.237688499s ago: executing program 3 (id=1674):
r0 = getpgid(0xffffffffffffffff)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000040)={{0x9, 0x3, 0x5, 0x6, 'syz0\x00', 0x5}, 0x0, 0x10, 0x2, r0, 0x4, 0x3, 'syz0\x00', &(0x7f0000000000)=[')}\xc4\x00', '3\x00', '\\\x10[]+\\\x00', '\x00'], 0xe})
removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@random={'user.', '\\\x10[]+\\\x00'})
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
recvmsg(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000200)=""/49, 0x31}, {&(0x7f0000000240)=""/199, 0xc7}, {&(0x7f0000000340)=""/66, 0x42}, {&(0x7f00000003c0)=""/134, 0x86}, {&(0x7f0000000480)=""/76, 0x4c}, {&(0x7f0000000500)=""/250, 0xfa}, {&(0x7f0000000600)=""/87, 0x57}, {&(0x7f0000000680)=""/226, 0xe2}, {&(0x7f0000000780)=""/105, 0x69}, {&(0x7f0000000800)=""/201, 0xc9}], 0xa, &(0x7f00000009c0)=""/4096, 0x1000}, 0x40)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001a40)={{0x1, 0x1, 0x18, <r2=>r1, {<r3=>0xffffffffffffffff, <r4=>0xee00}}, './file0\x00'})
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000001a00)=@md0, r3, &(0x7f0000001a80)='./file0\x00')
r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001b00), 0x20000, 0x0)
r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001b40), 0x600400, 0x0)
r7 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001b80)={r2, 0x0, 0x25, 0x14, @val=@perf_event={0x9}}, 0x18)
sendmsg$unix(r2, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001ac0), 0x0, &(0x7f0000001bc0)=[@rights={{0x1c, 0x1, 0x1, [r2, r1, r2]}}, @rights={{0x2c, 0x1, 0x1, [r2, r2, 0xffffffffffffffff, r1, r5, 0xffffffffffffffff, r6]}}, @cred={{0x1c, 0x1, 0x2, {r0, r3, r4}}}, @rights={{0x28, 0x1, 0x1, [r2, 0xffffffffffffffff, r1, r1, r1, r7]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r3, r4}}}, @rights={{0x20, 0x1, 0x1, [r2, r1, r2, r1]}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}], 0xf0, 0x20000000}, 0x20000004)
pipe(&(0x7f0000001d00)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = add_key$keyring(&(0x7f0000001e80), &(0x7f0000001ec0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
add_key$user(&(0x7f0000001d40), &(0x7f0000001d80)={'syz', 0x0}, &(0x7f0000001dc0)="a2abcefafead981006f474701437e8c00a2561db8d15d38897407d50cb94d186f0b596ccd55e62203d2668af5a8d1c7200e3a10e41017133866819bb5c5c40149b7085d656026f5c4390f4ba9712e1f582b51be5f302b82aaac32ac7aee499c423aad46c799a62d51238a3319b238d57114e8a1fa6e2c3bb1c90985e535b534aa0e47695544026c9911e2b223a13522fddff248bef6b70517da06f670d580bbecbfb87d14268e6a51fd1e4fda290341f6be56da5e0fc435c", 0xb8, r10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000001f00)={'vxcan0\x00', <r11=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000001fc0)={'ip6_vti0\x00', &(0x7f0000001f40)={'ip6_vti0\x00', r11, 0x4, 0x4, 0x4, 0x10001, 0x31, @empty, @local, 0x8000, 0x1, 0xd, 0x7fff}})
sendmsg(r8, &(0x7f00000032c0)={&(0x7f0000002000)=@x25, 0x80, &(0x7f0000003240)=[{&(0x7f0000002080)="2eef192c51d012eb3bd2ea58019f096600a592e257349af49e70e4efafafda31677e7a82673bd01c670873a1d6f49c76ebf29b199ebf8fcf0a072441cbe005beb67df252c527c3bba5fa46485847f0a21c55a30fdabca15444ab5354ce56a95f1c1f61bff763c6d6ef7760d0e071a6797137ebac9caac8ebcf175e249a875c8b96e333380270413cd3fce83e0cab191965251d3704e67677e9b9bc757aa8e5285068305e81a20f30bc330d1a4047832cde4f4bc7540b1dd33dd68c5ab91c489d72f5baa8135d0581ddb056cedaecbbc48966872ce3024bb3e829d9b2a7569c55fbef91e0791bcfeed1d95abf794862", 0xef}, {&(0x7f0000002180)="46731aa2c56a01ade08915", 0xb}, {&(0x7f00000021c0)="e51b66b01e630aab89a2a932d1699f67ea13f06a69ae3293a3dd7db952ff4ca276069907526b6b83b4a99646ca3dc4adbaffbef7d233cfa1a258be096eab53ff96291804c9f84dac420bebc6500de276f23ce50b0d228303d0416acb1eae495ffe5fe698ca72ce824ac7606f39c2596289c6e38c86a6475f9b1321343c590c084e846f8edd37cd5642e165e84440692047b373cb9656cc948773e15ed361eb3fe3f643495a3ef9c8a7c7b9e10069135679cd099fc68ffb1bee882e95eb82b06ad2fd2030c5f79b52f2a8bbf90099198bf978789255385396298125f00d05971b7fa701dbf34ea22120ada77486b5097bf45ac831b906e2488556a2e84f1bfab3cfe9943485c2ab5eb87ff9b5b6582eb215aa833655b2ebcb4c6600dd4e2b536c5fad57b967e34ce138e21938d41a89f4c60a6457dca648edd4a7198590d35d87e8076e3c73c6e22bc61052ffaa12188cf7f6e82b545862d5d1014d3deaf0fc10660c6837db200dbed6ba9a6b6b2815490491423dcc65666df32fb6101e14f4c0e004484bc756c2af680fb5f729d9d0f7fae99d0e4e6d07d85e672231c94aff1f9d390639f35a12718ecdbc39a5c404079587061e05fb933e74fa1c8837aac92f76db8c00038c66ea924e580e0691fb22a1bda9bdda8ee26b6a50cd56815c25b06e2db07a039675269211bf329b261efc409cdf05c169c68cdbdc23211c6bdd59e425b849d4c8369f7b9370e230d247d8031bb1e93fa395e83444dab2d1fef6a1a7d05396935b34c97ba234dbca09efddd3e6da3abbb396350b1294c18f716f84e457ebdd72ac9419c72f6693cef26a43932e7b89df3930e3d8a7996879e12afda75ea6068f5e04ec777a341fa78957e7245776d2e50eb4b19c5374ed6bb7ca8b509d9895a838e81a168a75814de3c1aec09ffc1a7e96f86507271923a27cd8672113ed67069c194ae3492d723eacc0f15b8244135b765ee2b3f998dae8ef2402677b1fd091d47dde05d46a564a910c52f6596713a74bec02feb4839568139a4aa6114c87f5a8e4244cd0391196ea7d6c64e2f947d1cf2afc9a73709394866602f384e63944bb326e5394bd248b30c25727edc57ed8cfe32527aa285b65e03d19d6244b76e0daf58791f03eda4ceb8aef192063a8cfe6f15d4aa19242e161256e85d4c1cd895ed4b6e2b3861a7698ed63deac89a4e454f41a6f6918b5aec9a63a2c2762004b8b97e963d25c4fc1a79340a82b95fbb97b2a50537758834afbf6b6957b10deb531f0ec93b58c4807f5ac9096b4f5753bf026bdc12f0f0554aa6aa9b62edb6fe160c1bf755926c335bb08d05d093f41bf6971eb4b318717633abd27fdc4b91f346935349d4d650402fd392994a9b8eb35f741710ebbe4886a3e51ec573ea42e6a69fa5511b3abac6e380b9534441f9bf4fd81428b6f01035b950a1aa56a1ceca2e341b9c956ad1657988efc89f9a3ec35d8f9a6696f1cf4ce54603832b4eec80b3eba76737fb82fed6102ded77fe12604c24660d85e46c037719bf91cca9a663e440d846f0ad32e69005e660b64da833750eaaf9205d5a28653f2d18997f65d6c1af470addf4c4888f6a2a955dd10a2a3e074cc2e3d842e4eb7493b10fbc22957ed45a5f28853228c39d8c99d6fb6cb914c66fbff28761bba767991e881926721d00aedec28c3def8bfeefdd731b8bba811449a670ec29fa45fb8b02f0410cfa0c355e86680502ea1bb22e17e74979f2ee81ad188113bd0bccd8989c72c3e61231e1258fb843d326b2bec118b535922c562cf017c2ad74e2947a02ca822ab26370e47648cb9e23faf1c87669de97d776300c5f5b2623196057c9af577a8c934c0b3b7fe7bd3c56686daa756929ac89513f841b92af615204288aba9ef2306d7cee9e792301270ddabb4deffdc16126c366941a7f7df9d67b5d00251eaf19e1e3e6abe3e44502960d349aa1abe4e15ce2d50401b1ad53bb128c51078cda154f07c996805bc6c18d119d9a7625b73a49110484b8f4785ca3484b2a85d9d5e3d3f29650249ae8542ecb4a7da583e712576bc16ea795604dd72a89ff91a253a31034640fba86cc35d844738a061dcc400ca4aca13a860be039a299772b75d8e524dd11ed5ad87155a42c5685e1f3ebca279524adbd4880b8a92ddd5d4a24067c23a838622445ba3ed0c0a3217fe36e8646b8fa8f9939513d1467a6c43852b5709b1e198356342176634943fa52e9e3094ff2c0224c5ba605b30a5d7c7fe9536c832fe0d4d526cd6a384594d1de0ee0fbefbd44f2c72023115cb73b5cf8369f802b44f77220bfea5f5f5ff43cc8b4a8eddd3f7381027ae6045f8b53382ddceac16210de8c7b39bd30529122ba4e8f8afc759b3c2f94164032d4f43b5d2c42df6dae3d61dccba9a1bb33334e318b3c277e275901415954f8328c940a77863ef34cf9291b0879859a34c66684a494ef835dcd5e4bb0c29e6f1f2ac3b9074b05d9eee57b88f700530b3e190d402600f27135ae399381ad4d5fd3114b93ffa46a0d023c4495c37c8fc4be98251cbd3acd4f9236b4cc72089521d43926cc3e3470247b7042ee5905f13e64272019d4dc2f9c2f6389afb6abd747ee823011dc86c5bdd92b81e3e5b1f49f792c75b91e95352ee588d95ce0ec97c4425cdcbfa79c6029935f5091cb4b82ce471c5e8fa1c6c6de77065b5146cd56d2f3bfb719a38443414c29e86ae378cfb74c7cbd35d8a147796412a194ea1f2a9b0f347b1bed4940cff8796429a552953d4e0d80421b5aeda4062104c17c5c49a37826804373403a5609621df4f5259e578e4fc12eac137b20503fde3d1cba16e9554752c79c217f04d26596f4cc0c996fec20c85e2f3d024012ffea0031fb78bfbe866427c60fe6e655384499c81c95a18eae5bc949838b8c647e0da34d68ecddabd91224ae6f8e706fc6aab476f8d4db0a18acb0c24bf0c021101cf428ef11e16816b097354aa514c10c7566fa9f1d3cec0ae8b603c0729fd56e402f912e32ad3896f9d2f342abb1428db14b7126a6c6a502fffe3f8b0ae6604c49e03af4acbfd2bec322c8047c4779951feea78afecd464cf3a17c9d774c814eea0aa73f2ec56a46ca39a5c1f4a3fc9403766a10ec84d354d94cf9ec2a3cafa5be66e0d585b69a0538dd3a51fa7dcf4b2876e22c36a902d82abd0c27f9182338d59f07700ba2b719a2f94c790e4c82611e5aa84667473bf66a0d062bac6b7a7d91c688e24ccc34e05c258a621c7fee4061b6cbeb9d23e2f1d495b30227550dae3995f31d04d83e12a8d35f7876c8759d89062cc2f311a4126dc6b99df2ec4dbe125b871567e3f5ddd1b40bd825dfa5ac9914048bfa500a7556e6a837cbeab30a90071447fef04e379ee86a7ddd74cc1a0403ac20f2f1456db3b70db0923de8075a335416587affdbdf2e22afbf7656b33aa2f62c2300d702c897fee7a0abbaf334c68a8ec2dd5f766ed038425b40681322cfccabde97e1dfffe8dedae0da3cd5e0e46301e52ed1a01470e95a05cd8c004779b27393dcd2f884ea94012071742aac6f44490f3a58b9f1de414f7945321b93c917c727481f644f8b9a93e2626f24060879c2e1768bb702475656eb94d4ee9747292e1f8ad9b5227770681612a0e301de03158f155a733547e5ed5830c71b932ebb91749327ff4154e6ca98d6f843caa5b043bc5868f6da09e82892d551d4b2de5810754414ce2c00f10e1838df8facdb1f8d3ba8d66e9d2ce68f2e111307945813b9e97daea9f0d86be5fa41e2c9cd517c88feaeda678252269c20f20482cbd13c28e15293ac9ca17a236fe08673a76382081d9b1797aa0de2a3fc61a8306a3f65a7bbbed8483c6290aad220beb832c3fe0f49073eebb2e33b7a8c3367fe11621b09c88a31d1ae540be4306619d5f0727e5f33768b961b5cef1048aa06840943ea431655775c6b6e6bb89c0a842c264b08368c918ee99de54d9f37ef0672aa60195657c4db64f40c3370838b4a9355881caee4b99012926cc97ae5d56dc969f40a49be81fd8520417fdf058b69acba9aaec7342baccaf89ddde5072b4806ae72ec278ae84ed303d02594941d42e3ab3bc0a4ecba3470e3a6631d8e0689313678b6acb11e9abb04503f1de42bbf5c9d877528822790577d4050e2ae7fdf7bdfea147faa92b1382e3bf019786eb016de42e6941cd720656098899003158d2f87bbef8c5818007e8e4235ae9ebf6c38378e7754a7f9f67720a6e07e2f9e4ab2cbeee4f0f09e74e2a2b0a3cdb8743ab22165786384c86610ffd0f3bb6a97295488e69e91601a89442e1a349fbc03ad4b5a93c2bd1065dbd62c93a0c709041db6fbe2e6d6de7e717ec26cc02e6964c4e7571d61fe853964efd5ed56393e1f9b821d080bb07bb7a224fd366df9ec59f00a38be3d0984174bef537180f91447a70d65c261c60f538fec469321c057765f4e0f1835ddae169f511a5a270129790bea3ad469d03fb66f66e8541e79202ef99b0f499e35c20b81dff2ea4d974eab47528b5918f9bbaa26e1ac541af9b9a6c39a11902dd0c803998b42066492eeca4362f536636be831a55c665196a1d8d29539fa97392b253e76adab74c163bfb1c700905b3860c256a3e75f8c8cdab0126818143867e3afcaf5f744c95cd4bfbcf706936d9e69b62864f2b279f4639bf10ac0b81aeebc3c87b2235200ce30f15434077ac03b8e7bf8be0848cd4e72f7b7cc507af9e23fee0d6a24620de75c61d152e65972173a88b70b1333e1d196af47f58bf48b573f37074dcd71ec46b693e2edf94e22f1435f0b73a75dcf3a2cf3a863cd587e08fe579e3d2dd1842269af5de8f9be286e8da2797b935d5dcaba9c640c517247834e99cfc8f1c3b1def45e9de8639f19935cc7cf90b21172b94322b85801ed2a105d1568751f7f7a49222501ad620d0db7b8b906d69d6b67aaf8a031bdfe9eb5db50161ca28902d96f14a85203dba2a143ea49cfe97afdda82b58f7f0e54981573ba8862ae1137a06f2b5a8f8e480228a812865103243334d2d5436fd3d55979f1ab40e68dd58b3c09f7792910827c979746c44cf6307597af5cf06d9c7b95f214e388627fdeaf293b6e11327a883f6feae2de52e01ce515cb9fc0ac93844bc1d5abf2fec80ae4379d4c2dc89c7e72932cc749b05b6bd7b67bf2ca413e489d10d011b92ae1904afe863331115f5fa04f44d77cd91d0f8a91b29bde744530071016f3b717595180a38708da37e619597e07fef64be4c62831abbb5e5e981111dc13276403aef433a26bdd9ac9c5cdc44ef01fa0a554bba2a13a9098744fbc8a42eb65df5867f0e79278c461ac1bf8c308961b1675739aed11529f43a1ed131540e715f5cbafec654b61d150d6c199adb10f3f64bf444a7552aa28d21e19afd82ff970261fec453a97c7c19f96d2d90bbcd5d9dce632f42721ddd2ca1e531b29b5c2cc753afa91a536fb6f0eb77e2cc6ce62e73a2c59cf6b3c03eb70895a8ec0a7538aadd44a34d631ea8b5cb7a326e1ea3b9bc467e18a74d8ab293d38995489614f594efbe3ad6c95e77d570e58b908d8af4c1a67332a6d99718deafd61da49927f22d4d6fd7f1d61ee146d215a9eb22e5aafaac22a9d33524a2650cfc3eaa4b0ad3f06340966a27ee84fae3c57e634132f7222d7bafcb36dcf6f75fe872e3bdd3d57bdedc3264fd50ae9ee716dfdd4e8d08ddf4aebb54eb24d05387e0d8e3046472fdadf77474cbc15b13d2c057c2cb89dbed5868db16f1e8e9499a8d8bec3ce0e1497d9ceb3c4be84cf2", 0x1000}, {&(0x7f00000031c0)="6bd9", 0x2}, {&(0x7f0000003200)="6fcbd47bcd59078035d85618ee71cebf68f6f35dd96468634ddea05bc6d900c8c6eb5f87c37ec7ae", 0x28}], 0x5}, 0x40)
keyctl$get_persistent(0x16, r3, r10)
ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000003300)={0x2, @pix_mp={0x3, 0x2, 0x31363553, 0x5, 0x6, [{0x0, 0x26f}, {0xfffffff8, 0x8}, {0x800, 0xe83}, {0x6, 0x4}, {0x2, 0x6}, {0x9, 0x4}, {0xd0, 0x7}, {0x3, 0xed}], 0x8, 0x56, 0x7}})
ioctl$MON_IOCG_STATS(r9, 0x80089203, &(0x7f0000003400))
bind$can_raw(r9, &(0x7f0000003440)={0x1d, r11}, 0x10)
syz_open_procfs$pagemap(r0, &(0x7f0000003480))
keyctl$unlink(0x9, r10, r10)
keyctl$unlink(0x9, r10, r10)

1.087299152s ago: executing program 3 (id=1675):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x348, 0x30, 0x300, 0x71bd22, 0x25dfdbff, {}, [{0x4}, {0x330, 0x1, [@m_bpf={0x2c, 0x6, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_csum={0x4c, 0x10, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x6, 0x4, 0x6}, 0x32}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_csum={0x1f0, 0x19, 0x0, 0x0, {{0x9}, {0x4}, {0x1c1, 0x6, "f0b8bf92cf8611111a0ff27fcc8825ca405600cfd0f6876d2892df6b5723118bb7d9d86de0a2706031cc8c62f7d1baf9b04f3a9ed11665c75023f87c16ce970413ede5e5f6782d0d17be877ac54c09075ed841c7daeddf3395a210eab4335ed3bcb36fe1598dc94259da01363ad59d8dc384cb8fe469869c99849bd0d19e999b2e8f62d563a2dcea91347cdc754302a566d6d8b7de1368972acbf9cfbdc3db5b71ceed91d4e9613e9cbf5e1ca71f3bf3b25cdf1ce11e5843ff89da11b01cf0b27474847e4fd8e648244e0dc6b3b99b8089d418ec3d6d27aa68b96ef236cc10ce12fb9c2fcd2426620f308c5e7fdb41bd5c78d6dfc482d978b6e7840a4280feab0b46813e74f89578a8084202486b4337e82b2790e39812421153e3352d7c704aa7333c65f298e8ce3466ac49f56e77602fe7e2c4667cb28a496da043ce93e094503497cad7145b73985b54e461016f5ecd42496334b73898ef674afffd9832a3f8df083e77ae2d16badf65e8b3525f750d4d6dcecf662c953a556a6bc771a780d8140f4e2630c11db5031a598d9702144399cc27d12bbae3b3aa089efc555eeae4e80d72848ae3373ba0422444b6c0652d60da6b8ae2b5c5ca271e713d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0xc4, 0x1b, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x7}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x2b}]}, {0x8a, 0x6, "77b227832b90d1ff89f7a47093e4fcd6469c1b0a38a78e003c28c0247261b6866b44c2243e65a09e57be964fc0687b627bbda1f8bb6cacd9cf613adc84e00b323e932cbec11bfdac677d727e7547301900bdc7e317fc3b634794c43c0613b919323039d6099d9f9f41e0f9da2176ba0bb6dd198d0c2f84f876aceee9a631a5585232049c053f"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x348}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040850)
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newlink={0x48, 0x10, 0x403, 0x0, 0xfffffd, {0x0, 0x0, 0x3, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x4040}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x48}}, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

1.008381356s ago: executing program 1 (id=1676):
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x2, 0x200)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x3500000000000000)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000280)={0x6, 0xffffffff, 0x1, {0x1, @win={{0x6, 0x9, 0x3, 0x6f8}, 0x3, 0x6, &(0x7f0000000100)={{0x8d, 0x4, 0x51, 0xbf1}, &(0x7f00000000c0)={{0x6, 0x0, 0x9001, 0x5}, &(0x7f0000000000)={{0x6, 0x0, 0x3, 0xc}}}}, 0x2, &(0x7f0000000200)="794eb7491f98b625ab59f1b76d70d2c4ac2ba82603cc91dbb5", 0xf8}}, 0xffffff7f})
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0)
io_uring_setup(0x4838, &(0x7f0000002fc0)={0x0, 0x6d28, 0x2, 0x0, 0x11f})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, 0x0, 0x0, 0x5}, 0x94)
socket(0x10, 0x803, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0x20008005}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x78}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f00000016c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @remote}, @echo}}}}, 0x0)
syz_usb_connect(0x2, 0x209, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x2e, 0x69, 0x87, 0x40, 0xbb4, 0xa0d, 0x6515, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f7, 0x1, 0x5, 0x9, 0x30, 0x7, [{{0x9, 0x4, 0x63, 0x81, 0x3, 0x3e, 0xb7, 0xef, 0x1, [@cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, "02"}, {0x5, 0x24, 0x0, 0xb}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x9, 0x5}, {0x6, 0x24, 0x1a, 0x9, 0xc}, [@obex={0x5, 0x24, 0x15, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x6, 0xd4}, @country_functional={0x10, 0x24, 0x7, 0x0, 0x7, [0x60, 0x1000, 0x62, 0x80, 0x1]}, @mdlm={0x15, 0x24, 0x12, 0x5}, @obex={0x5, 0x24, 0x15, 0x5}]}], [{{0x9, 0x5, 0x2, 0x10, 0x3ff, 0xac, 0x57, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0xb6b}]}}, {{0x9, 0x5, 0xb, 0x8, 0x400, 0x4, 0x0, 0x7, [@generic={0x2c, 0x22, "8575bafbbc970c98d3f34b179c939411ffb9e50d177a1b94f1be048685932d63bc5dff7bba6b04859785"}, @generic={0x7f, 0x23, "9d3d89e418f587b6d8d5599a23db80af12f61212c4a32f2d76405da8603072e772dbd50bbb83232883123e20b171195837b991767055d16e8b378407a1ec7778f5c79c92f489a80e8d6835ce3f19b74fb9208e95e01f654cd83638f7ffb8e78b19b1106d870a09c2cc7f5d96508033212a3aba8e387e3bc461ff2debcf"}]}}, {{0x9, 0x5, 0x80, 0x8, 0x50, 0xff, 0x1, 0x57, [@generic={0xbf, 0x5, "5fb2d7f1dce415cdf3265a20404a7a24914795e6dc2f7da90b391a826514b7125c1cbdf1e0796fb28394f3da896c6c9c716f578b6ca57205d7f927f843b15d3b65e23fa4e4226b642e4adc843f19eb32424585cb6f0ac4540df30f292f2e63b0e6770e0537f11a7f3a3e87de0474ee1968525ccff5ed30d1de17135a5e3a9b1639831256424fc55d04a1305446cc7cbd0448fc12e5b1669f441b2975ffa6bb1c471d1c501dcb8912f0af10780b66158690225f227e9ef76b082b847c30"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x2}]}}]}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x2, 0x0, 0x97, 0x10, 0x8}, 0x152, &(0x7f0000000500)={0x5, 0xf, 0x152, 0x4, [@generic={0xdb, 0x10, 0x1, "ed6080dc5b673ba26b836854356212776e8423f2d2ac15e4c2b29612df78ea5b5b45ce3f25934b55bf8010d2f10f4481c5b9377b90b7b8d756218cb79e70812ceb40d8d46c6f57f75312897f3f7eb43ae045453a7a911ea66da2037a47f14d5c94fbc12d86a4b955325c701eef3ee338ceb0fc4ae093f70cf8eddb3a433aa343c7800ba93334556ba82b8d7624ab2d5286b3b3cc172356fb35d2757fbdc54605d1034397755fcf42b1e259b020af0c8570605e7edea9eec169c69bd5c706ffc13febe02b453ba32eb0ed7d1bef27ab5ea55e2cee6cd1ad38"}, @generic={0x68, 0x10, 0x1, "b17bc55f68617d6e79f98bbee45864c25c16937bf8893a3921dd056e46591e95e47944d910e1c16dbea2565637f4bb495e249878dc144ec7bc1d94d5dc3f6bd543ede1ba4253df360ffc6c244a5eb3afbd5b73ba0fd5f4bfbfa9b4b82ba926a567d03316ab"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x5, 0x0, 0x8, 0xb7e}]}, 0x2, [{0x8a, &(0x7f00000000c0)=@string={0x8a, 0x3, "54539a4a2bcdb93cc10d66bf7c81cf14cda710e039ef63359fd9c7707f25b46e675d8b8dec96f271fc46c160631d5103fcde32371448c863e56a9396bfd668d94fdd703656d76c84159a0940a30523b3cc7aeddba73e3cfa3b29d3ff8f0591754e624774dfe13e44af217396ab86c498a6c046d7b6c4c1714d13e40dbd15b533e4fe20dea333b0cc"}}, {0x70, &(0x7f0000000180)=@string={0x70, 0x3, "8d15e651c0331b749ca4fb8e7fb8d8c7cddbd26724d918a33139b22c485785f4c1047bcd6dd45c82a5d11e58941e3057706eb89e2f92be31b20f7dd0010b289cfb842db20038b472a1fb21c99c3327d5b1562c7966de08493ac06bde8756724d982f9f3916812a6032cac9413b38"}}]})
ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x1, 0x1012, 0xffffffffffffffff, 0x0, 0x0})

1.007999446s ago: executing program 3 (id=1677):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000003c0)={0x0, 0x7, 0x0, [0x0, 0x8, 0x9, 0x8, 0x9b0], [0x7fffffffffffffff, 0xeaf, 0x1f5, 0x3, 0x9, 0x7, 0x0, 0x8, 0x3, 0x8, 0x1, 0x0, 0x10, 0x6, 0x0, 0x4, 0x6, 0x9, 0x9, 0x9, 0x5, 0xffffffff7fffffff, 0xf, 0x8, 0x9, 0x76f, 0x1fffffffe0, 0x7, 0xa, 0xf, 0x6, 0x1, 0x80000001, 0x0, 0x88, 0x9, 0xdb, 0xfffffffffffffff4, 0xc25c, 0x7, 0x8, 0x8, 0x3, 0x4, 0x1, 0x9, 0x1, 0x9, 0x1, 0x117, 0x5, 0x8000000000000001, 0xfe, 0x4, 0x0, 0x3, 0x4, 0xb, 0xf, 0x0, 0x0, 0x8, 0x4, 0x5, 0x4, 0x2, 0xc66c, 0x9, 0x3, 0x10000, 0x8, 0x1, 0xc, 0x2, 0x8, 0x5, 0xa1, 0x6, 0x9, 0x6, 0x5, 0x2, 0x1, 0xffffffffbfd3f0e9, 0xffffffffd5f54280, 0x2, 0x5, 0x0, 0x0, 0xb7c, 0xffffffffffffff00, 0x96f0, 0x7ff, 0xe91, 0xb, 0x1, 0x8, 0x4, 0x5, 0x7fffffff, 0x1dee, 0x0, 0x8, 0x1, 0x4f48, 0xd, 0x80000000, 0x7fffffff, 0x100, 0x2, 0x3, 0xffff, 0x2, 0x8000000000000001, 0x7ff, 0x7, 0x0, 0x7, 0x1ac5cf3d, 0x7fffffffffffffff, 0xffffffff]})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000180)={0x20003, 0x0, [0x1, 0xe0e0, 0x2, 0xc, 0x0, 0x7, 0x0, 0x8000]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
modify_ldt$write2(0x11, &(0x7f00000003c0)={0x1, 0x0, 0x2000, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1}, 0x10)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000000, 0x0, 'queue1\x00'})
write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d61746368"], 0xc8}}, 0x40000)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9})
close_range(r0, 0xffffffffffffffff, 0x0)

968.223902ms ago: executing program 0 (id=1678):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_emit_ethernet(0x7e, &(0x7f0000000600)={@random="e33110495bfd", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x48, 0x3a, 0xff, @dev, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x14, '\x00', {0xf, 0x6, "02dc5f", 0x9, 0x0, 0xff, @dev={0xfe, 0x80, '\x00', 0x10}, @local, [@dstopts={0x2f, 0x1, '\x00', [@calipso={0x7, 0x8, {0x3, 0x0, 0xd, 0x8}}]}]}}}}}}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000380)={0x10000008})
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x8020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x72, 0x80000}, 0x20)

812.61724ms ago: executing program 0 (id=1679):
r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000c80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000040)=ANY=[])
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, 0x0, 0x28)
ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000080)={'lo\x00', 0x5})
r3 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0\x00'})
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0, 0x9}, &(0x7f0000000180)=0x8)

448.472395ms ago: executing program 2 (id=1680):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d507df08c410448200dc01020301090212000100000000090400000003"], 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) (async, rerun: 64)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
modify_ldt$write2(0x11, &(0x7f0000000000)={0x7, 0x1df4366a401c8696, 0x1400, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) (async, rerun: 32)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000044c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000004380)=ANY=[@ANYBLOB="200180"], 0x0}) (async, rerun: 32)
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000080)={'ip6erspan0\x00', @local})
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x258003, 0x0)

0s ago: executing program 3 (id=1681):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000003180), 0x80043, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000180000000000000500000000060015000200000014001680100008800c00038005002300020400"/56], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0x1, 0x58, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c010000", @ANYRES16=0x0, @ANYBLOB="08002bbd7000fbdbdf250700000020000180140002006970766c616e30000000000000000000080003000300000028000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f766972745f776966690020000180140002006873723000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="2400018008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="1c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="ae000132d1a3", @ANYRES32=0x0, @ANYBLOB="300001801400020073797a5f74756e000000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000003000018008000100", @ANYRES32=0x0, @ANYBLOB="1400020064766d7270310000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="0800030003000000"], 0x11c}, 0x1, 0x0, 0x0, 0x108c0}, 0x8000)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r5=>0x0})
bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000280)=[{0x2, 0x3, {0x1, 0xff}, {0x2, 0x0, 0x2}, 0xff, 0xfe}], 0x20)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)
ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000000))
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="b80000000001050500000000000000000a0000013c0002802c00018014000300fe589a42076e7b70dda478ac80000000000000000000000000003814000400000000000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300fe88000000000000000000000000010114000400fe8000000000000000000000637d00aa0800074000000001240006800c000380060001004e21000014000400fe88000000"], 0xb8}}, 0x0)
r8 = fanotify_init(0x200, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
fanotify_mark(r8, 0x161, 0x40000867, r9, 0x0)
epoll_create1(0x0)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000140)={'batadv0\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "c6b1293607f06e6a69e6d9bd11198e070230d90bc63e136d89c1021cbc2d8948", "b49a48c776fb215bd9605cfb02c62a06e46410dccb3ed7b6afff202b6d7c5965", "bc9fcd9af3cbe044d509283f6a8d5a0a6ee46dbab497c879daa7c3e3f9701bba", "5a869bccc7e73a1b62347380967eb7a7f1824e580f66c3ff319e2c2ff9405fca", "d404af7fbe2484c9f024036d2d78f888c7c06cca2a8066a432a8feb613a24d13", "edf81fdb7816e224f77eff93", 0x6, 0x5, 0xffff, 0x36e9, 0xd}})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r6, 0x4)
r11 = epoll_create(0x80000001)
epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r9, &(0x7f0000000380))
r12 = getpid()
r13 = syz_pidfd_open(r12, 0x0)
setns(r13, 0x8020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x72, 0x80000}, 0x20)

kernel console output (not intermixed with test programs):

usb 4-1: config 0 descriptor??
[  943.440540][T13471] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[  944.694744][T13488] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[  944.958298][T13487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1285'.
[  945.140662][T13494] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  945.935342][T13503] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  946.424811][ T5895] usb 4-1: USB disconnect, device number 51
[  948.841573][T13520] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[  949.644924][T13537] sctp: [Deprecated]: syz.4.1292 (pid 13537) Use of int in maxseg socket option.
[  949.644924][T13537] Use struct sctp_assoc_value instead
[  950.008954][T13511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  952.263233][T13565] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[  952.966882][T13572] sctp: [Deprecated]: syz.0.1298 (pid 13572) Use of int in maxseg socket option.
[  952.966882][T13572] Use struct sctp_assoc_value instead
[  953.000040][T13572] netlink: 'syz.0.1298': attribute type 10 has an invalid length.
[  953.012379][T13572] veth0_vlan: left promiscuous mode
[  953.024174][T13572] veth0_vlan: entered promiscuous mode
[  953.047297][T13572] team0: Device veth0_vlan failed to register rx_handler
[  955.352836][T13594] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  955.746937][T13596] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[  956.704789][T13584] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[  957.525185][T13608] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  957.795231][T13619] sctp: [Deprecated]: syz.3.1303 (pid 13619) Use of int in maxseg socket option.
[  957.795231][T13619] Use struct sctp_assoc_value instead
[  957.810969][    T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  957.839636][T13619] netlink: 'syz.3.1303': attribute type 10 has an invalid length.
[  957.903568][ T5851] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  958.173464][    T9] usb 2-1: Using ep0 maxpacket: 32
[  958.224772][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  958.235252][    T9] usb 2-1: config 0 has no interfaces?
[  958.240863][    T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  958.334429][T13619] veth0_vlan: left promiscuous mode
[  958.350339][T13619] veth0_vlan: entered promiscuous mode
[  958.373239][T13619] team0: Device veth0_vlan failed to register rx_handler
[  958.452874][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  958.493992][    T9] usb 2-1: config 0 descriptor??
[  958.642758][ T5851] usb 1-1: config 0 has no interfaces?
[  958.668175][ T5851] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  958.735160][ T5851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  958.768497][ T5851] usb 1-1: Product: syz
[  958.799015][ T5851] usb 1-1: Manufacturer: syz
[  958.891293][ T5851] usb 1-1: SerialNumber: syz
[  958.919447][ T5851] usb 1-1: config 0 descriptor??
[  960.376940][T13639] sctp: [Deprecated]: syz.4.1308 (pid 13639) Use of int in maxseg socket option.
[  960.376940][T13639] Use struct sctp_assoc_value instead
[  960.398956][T13639] netlink: 'syz.4.1308': attribute type 10 has an invalid length.
[  960.457490][T13639] veth0_vlan: left promiscuous mode
[  960.471508][T13639] veth0_vlan: entered promiscuous mode
[  960.490288][T13639] team0: Device veth0_vlan failed to register rx_handler
[  961.369141][ T5851] usb 1-1: USB disconnect, device number 49
[  961.532154][T13609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  961.549137][T13651] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[  961.675296][ T5919] usb 2-1: USB disconnect, device number 34
[  962.076363][T13657] netlink: 'syz.3.1310': attribute type 10 has an invalid length.
[  962.102638][T13657] veth0_vlan: left promiscuous mode
[  962.127733][T13657] veth0_vlan: entered promiscuous mode
[  962.139456][T13657] team0: Device veth0_vlan failed to register rx_handler
[  962.152672][ T5851] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  962.401879][ T5851] usb 1-1: config 0 has no interfaces?
[  962.607629][ T5851] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  962.687086][ T5851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  962.723404][ T5851] usb 1-1: Product: syz
[  962.727885][ T5851] usb 1-1: Manufacturer: syz
[  962.894336][ T5851] usb 1-1: SerialNumber: syz
[  962.914859][ T5851] usb 1-1: config 0 descriptor??
[  963.611596][T13668] sctp: [Deprecated]: syz.2.1312 (pid 13668) Use of int in maxseg socket option.
[  963.611596][T13668] Use struct sctp_assoc_value instead
[  963.628859][T13668] netlink: 'syz.2.1312': attribute type 10 has an invalid length.
[  963.637204][T13668] veth0_vlan: left promiscuous mode
[  963.645204][T13668] veth0_vlan: entered promiscuous mode
[  963.654725][T13668] team0: Device veth0_vlan failed to register rx_handler
[  964.151987][T13673] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[  966.617796][ T5851] usb 1-1: USB disconnect, device number 50
[  966.845615][T13695] sctp: [Deprecated]: syz.4.1316 (pid 13695) Use of int in maxseg socket option.
[  966.845615][T13695] Use struct sctp_assoc_value instead
[  967.081352][T13694] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  968.995790][T13708] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[  970.164284][T13716] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  970.613456][ T6003] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  970.831115][ T6003] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  970.842521][ T6003] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  971.000698][ T6003] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  971.034800][ T6003] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  971.043703][ T6003] usb 5-1: SerialNumber: syz
[  972.408240][T13744] sctp: [Deprecated]: syz.0.1324 (pid 13744) Use of int in maxseg socket option.
[  972.408240][T13744] Use struct sctp_assoc_value instead
[  972.426082][T13744] netlink: 'syz.0.1324': attribute type 10 has an invalid length.
[  973.463754][T13744] veth0_vlan: left promiscuous mode
[  973.471005][T13744] veth0_vlan: entered promiscuous mode
[  973.483790][T13744] team0: Device veth0_vlan failed to register rx_handler
[  973.926691][ T6003] usb 5-1: cannot find UAC_HEADER
[  974.124160][ T6003] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  974.162219][ T6003] usb 5-1: USB disconnect, device number 35
[  974.184011][ T6674] udevd[6674]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  974.282297][T13751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1326'.
[  975.397280][T13773] sctp: [Deprecated]: syz.1.1329 (pid 13773) Use of int in maxseg socket option.
[  975.397280][T13773] Use struct sctp_assoc_value instead
[  975.743866][T13773] netlink: 'syz.1.1329': attribute type 10 has an invalid length.
[  976.160296][T13773] veth0_vlan: left promiscuous mode
[  976.173223][T13773] veth0_vlan: entered promiscuous mode
[  976.194877][T13773] team0: Device veth0_vlan failed to register rx_handler
[  977.545031][T13788] sctp: [Deprecated]: syz.2.1331 (pid 13788) Use of int in maxseg socket option.
[  977.545031][T13788] Use struct sctp_assoc_value instead
[  977.595880][T13788] netlink: 'syz.2.1331': attribute type 10 has an invalid length.
[  977.606881][T13788] veth0_vlan: left promiscuous mode
[  977.616888][T13788] veth0_vlan: entered promiscuous mode
[  977.696896][T13788] team0: Device veth0_vlan failed to register rx_handler
[  978.074223][ T5937] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  978.402826][ T5937] usb 4-1: config 0 has no interfaces?
[  978.428968][ T5937] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  978.463397][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  978.489470][ T5937] usb 4-1: Product: syz
[  978.502790][ T5937] usb 4-1: Manufacturer: syz
[  978.833681][ T5937] usb 4-1: SerialNumber: syz
[  978.914449][ T5937] usb 4-1: config 0 descriptor??
[  979.627698][ T6003] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  979.879522][ T6003] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  979.890356][ T6003] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  979.903519][ T6003] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  979.923609][ T6003] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  979.938636][ T6003] usb 2-1: SerialNumber: syz
[  981.028574][T13812] sctp: [Deprecated]: syz.4.1336 (pid 13812) Use of int in maxseg socket option.
[  981.028574][T13812] Use struct sctp_assoc_value instead
[  981.050938][T13812] netlink: 'syz.4.1336': attribute type 10 has an invalid length.
[  981.060598][T13812] veth0_vlan: left promiscuous mode
[  981.067734][T13812] veth0_vlan: entered promiscuous mode
[  981.077495][T13812] team0: Device veth0_vlan failed to register rx_handler
[  981.215981][T13805] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[  981.531679][ T5937] usb 4-1: USB disconnect, device number 52
[  983.222357][T13831] netlink: 'syz.0.1340': attribute type 10 has an invalid length.
[  983.231240][T13831] veth0_vlan: left promiscuous mode
[  983.239371][T13831] veth0_vlan: entered promiscuous mode
[  983.341065][ T6003] usb 2-1: cannot find UAC_HEADER
[  983.359857][T13831] team0: Device veth0_vlan failed to register rx_handler
[  983.749387][ T6003] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  983.798476][ T6003] usb 2-1: USB disconnect, device number 35
[  984.116800][T13838] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[  984.205276][ T6674] udevd[6674]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  985.629161][T13842] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[  985.989010][T13849] sctp: [Deprecated]: syz.3.1342 (pid 13849) Use of int in maxseg socket option.
[  985.989010][T13849] Use struct sctp_assoc_value instead
[  986.017172][T13849] netlink: 'syz.3.1342': attribute type 10 has an invalid length.
[  986.178033][T13849] veth0_vlan: left promiscuous mode
[  986.184733][T13849] veth0_vlan: entered promiscuous mode
[  986.194741][T13849] team0: Device veth0_vlan failed to register rx_handler
[  986.743563][T13859] netlink: 'syz.2.1343': attribute type 10 has an invalid length.
[  986.759198][T13859] veth0_vlan: left promiscuous mode
[  986.779988][T13859] veth0_vlan: entered promiscuous mode
[  986.798067][T13859] team0: Device veth0_vlan failed to register rx_handler
[  986.836032][T13861] sctp: [Deprecated]: syz.4.1344 (pid 13861) Use of int in maxseg socket option.
[  986.836032][T13861] Use struct sctp_assoc_value instead
[  986.857235][T13861] netlink: 'syz.4.1344': attribute type 10 has an invalid length.
[  986.932261][T13861] veth0_vlan: left promiscuous mode
[  987.193129][T13861] veth0_vlan: entered promiscuous mode
[  987.209666][T13861] team0: Device veth0_vlan failed to register rx_handler
[  988.821285][T13870] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[  991.511613][T13900] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[  991.915670][T13901] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  992.028063][T13905] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  993.097755][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[  993.104195][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  993.973468][ T5937] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  994.094596][T13925] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  994.173380][ T5937] usb 3-1: Using ep0 maxpacket: 32
[  994.442312][ T5919] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  994.522109][ T5937] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  994.573953][ T5937] usb 3-1: config 0 has no interfaces?
[  994.590924][ T5937] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  994.619038][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  994.673469][ T5919] usb 2-1: Using ep0 maxpacket: 32
[  994.761418][ T5919] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  994.775720][ T5919] usb 2-1: config 0 has no interfaces?
[  994.781269][ T5919] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  994.791872][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  994.809065][ T5919] usb 2-1: config 0 descriptor??
[  994.828705][ T5937] usb 3-1: config 0 descriptor??
[  996.528833][T13950] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[  997.053373][    T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  997.213430][    T9] usb 5-1: Using ep0 maxpacket: 32
[  997.264645][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  997.278003][    T9] usb 5-1: config 0 has no interfaces?
[  997.288227][    T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  997.303078][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  997.421197][    T9] usb 5-1: config 0 descriptor??
[  997.640303][T13924] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  997.651447][    T9] usb 2-1: USB disconnect, device number 36
[  997.931634][T13958] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  998.751660][T13919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  998.799840][ T5937] usb 3-1: USB disconnect, device number 46
[  999.053355][   T24] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  999.556969][   T24] usb 1-1: config 0 has no interfaces?
[  999.735397][   T24] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  999.746055][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  999.785664][   T24] usb 1-1: Product: syz
[  999.799324][   T24] usb 1-1: Manufacturer: syz
[  999.813936][   T24] usb 1-1: SerialNumber: syz
[  999.836372][   T24] usb 1-1: config 0 descriptor??
[ 1000.023068][T13948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1000.035850][ T5919] usb 5-1: USB disconnect, device number 36
[ 1000.123412][    T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[ 1000.836055][    T9] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[ 1000.847335][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1000.891485][T13981] sctp: [Deprecated]: syz.4.1365 (pid 13981) Use of int in maxseg socket option.
[ 1000.891485][T13981] Use struct sctp_assoc_value instead
[ 1000.919582][    T9] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1000.932752][T13981] netlink: 'syz.4.1365': attribute type 10 has an invalid length.
[ 1000.950846][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[ 1000.968922][T13981] veth0_vlan: left promiscuous mode
[ 1000.994199][    T9] usb 2-1: SerialNumber: syz
[ 1001.011390][T13981] veth0_vlan: entered promiscuous mode
[ 1001.032609][T13981] team0: Device veth0_vlan failed to register rx_handler
[ 1001.397628][T13984] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[ 1001.521337][    T9] usb 2-1: cannot find UAC_HEADER
[ 1001.601182][    T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1001.619080][    T9] usb 2-1: USB disconnect, device number 37
[ 1001.688499][ T6674] udevd[6674]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1001.765238][T13974] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[ 1001.823030][ T5919] usb 1-1: USB disconnect, device number 51
[ 1004.194226][T14016] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[ 1004.513353][ T5919] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[ 1004.969575][ T5919] usb 5-1: Using ep0 maxpacket: 32
[ 1005.048491][ T5919] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1005.164661][ T5919] usb 5-1: config 0 has no interfaces?
[ 1005.206159][ T5919] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1005.345030][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1005.420868][ T5919] usb 5-1: config 0 descriptor??
[ 1005.625696][T14027] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1005.741619][T14030] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[ 1007.254430][T14012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1007.286422][ T5919] usb 5-1: USB disconnect, device number 37
[ 1007.341615][T14043] sctp: [Deprecated]: syz.3.1374 (pid 14043) Use of int in maxseg socket option.
[ 1007.341615][T14043] Use struct sctp_assoc_value instead
[ 1007.365314][T14043] netlink: 'syz.3.1374': attribute type 10 has an invalid length.
[ 1007.373782][T14043] veth0_vlan: left promiscuous mode
[ 1007.381639][T14043] veth0_vlan: entered promiscuous mode
[ 1007.392804][T14043] team0: Device veth0_vlan failed to register rx_handler
[ 1007.857795][T14049] sctp: [Deprecated]: syz.4.1375 (pid 14049) Use of int in maxseg socket option.
[ 1007.857795][T14049] Use struct sctp_assoc_value instead
[ 1007.899502][T14049] netlink: 'syz.4.1375': attribute type 10 has an invalid length.
[ 1008.046247][T14049] veth0_vlan: left promiscuous mode
[ 1008.063481][T14049] veth0_vlan: entered promiscuous mode
[ 1008.214887][T14049] team0: Device veth0_vlan failed to register rx_handler
[ 1008.643374][ T5937] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[ 1008.707543][T14060] sctp: [Deprecated]: syz.2.1377 (pid 14060) Use of int in maxseg socket option.
[ 1008.707543][T14060] Use struct sctp_assoc_value instead
[ 1008.775456][T14060] netlink: 'syz.2.1377': attribute type 10 has an invalid length.
[ 1008.794122][T14060] veth0_vlan: left promiscuous mode
[ 1008.802609][T14060] veth0_vlan: entered promiscuous mode
[ 1008.814903][T14060] team0: Device veth0_vlan failed to register rx_handler
[ 1008.914243][ T5937] usb 1-1: Using ep0 maxpacket: 32
[ 1008.924168][ T5937] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1008.935328][ T5937] usb 1-1: config 0 has no interfaces?
[ 1009.198467][ T5937] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1009.255500][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1009.309855][ T5937] usb 1-1: config 0 descriptor??
[ 1011.069549][T14068] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[ 1011.917486][T14052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1011.930213][ T5941] usb 1-1: USB disconnect, device number 52
[ 1012.358280][T14084] netlink: 'syz.0.1380': attribute type 10 has an invalid length.
[ 1012.366912][T14084] veth0_vlan: left promiscuous mode
[ 1012.375022][T14084] veth0_vlan: entered promiscuous mode
[ 1012.390382][T14086] sctp: [Deprecated]: syz.2.1381 (pid 14086) Use of int in maxseg socket option.
[ 1012.390382][T14086] Use struct sctp_assoc_value instead
[ 1012.419465][T14084] team0: Device veth0_vlan failed to register rx_handler
[ 1012.434409][T14086] netlink: 'syz.2.1381': attribute type 10 has an invalid length.
[ 1012.913151][T14086] veth0_vlan: left promiscuous mode
[ 1013.032442][T14086] veth0_vlan: entered promiscuous mode
[ 1013.053860][T14086] team0: Device veth0_vlan failed to register rx_handler
[ 1013.902604][T14100] sctp: [Deprecated]: syz.4.1383 (pid 14100) Use of int in maxseg socket option.
[ 1013.902604][T14100] Use struct sctp_assoc_value instead
[ 1013.937965][T14100] netlink: 'syz.4.1383': attribute type 10 has an invalid length.
[ 1013.972268][T14100] veth0_vlan: left promiscuous mode
[ 1014.124260][T14100] veth0_vlan: entered promiscuous mode
[ 1014.147778][T14100] team0: Device veth0_vlan failed to register rx_handler
[ 1016.631799][T14120] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[ 1017.091769][T14124] sctp: [Deprecated]: syz.0.1387 (pid 14124) Use of int in maxseg socket option.
[ 1017.091769][T14124] Use struct sctp_assoc_value instead
[ 1017.121636][T14124] netlink: 'syz.0.1387': attribute type 10 has an invalid length.
[ 1017.504683][T14124] veth0_vlan: left promiscuous mode
[ 1017.545920][T14124] veth0_vlan: entered promiscuous mode
[ 1017.564248][T14124] team0: Device veth0_vlan failed to register rx_handler
[ 1018.175885][T14140] sctp: [Deprecated]: syz.3.1389 (pid 14140) Use of int in maxseg socket option.
[ 1018.175885][T14140] Use struct sctp_assoc_value instead
[ 1018.464626][T14140] netlink: 'syz.3.1389': attribute type 10 has an invalid length.
[ 1018.474321][T14140] veth0_vlan: left promiscuous mode
[ 1018.481563][T14140] veth0_vlan: entered promiscuous mode
[ 1018.501581][T14140] team0: Device veth0_vlan failed to register rx_handler
[ 1019.854534][T14159] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[ 1020.882895][T14162] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[ 1021.131152][T14166] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1021.766247][T14178] sctp: [Deprecated]: syz.3.1394 (pid 14178) Use of int in maxseg socket option.
[ 1021.766247][T14178] Use struct sctp_assoc_value instead
[ 1021.822547][T14178] netlink: 'syz.3.1394': attribute type 10 has an invalid length.
[ 1022.229671][T14178] veth0_vlan: left promiscuous mode
[ 1022.236784][T14178] veth0_vlan: entered promiscuous mode
[ 1022.254505][T14178] team0: Device veth0_vlan failed to register rx_handler
[ 1022.693618][  T980] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[ 1022.933552][  T980] usb 2-1: Using ep0 maxpacket: 32
[ 1022.973574][ T5851] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[ 1023.026074][  T980] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1023.042292][  T980] usb 2-1: config 0 has no interfaces?
[ 1023.049356][  T980] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1023.064173][  T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1023.084021][  T980] usb 2-1: config 0 descriptor??
[ 1023.216473][ T5851] usb 1-1: Using ep0 maxpacket: 32
[ 1023.268156][ T5851] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1023.292458][ T5851] usb 1-1: config 0 has no interfaces?
[ 1023.298297][ T5851] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1023.411766][ T5851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1023.480196][ T5851] usb 1-1: config 0 descriptor??
[ 1025.506963][T14193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1025.519505][ T5941] usb 1-1: USB disconnect, device number 53
[ 1026.062275][T14186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1026.082113][ T5919] usb 2-1: USB disconnect, device number 38
[ 1026.281986][T14211] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1026.559096][T14220] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1026.591371][T14226] sctp: [Deprecated]: syz.0.1402 (pid 14226) Use of int in maxseg socket option.
[ 1026.591371][T14226] Use struct sctp_assoc_value instead
[ 1026.608849][T14226] netlink: 'syz.0.1402': attribute type 10 has an invalid length.
[ 1026.623541][T14226] veth0_vlan: left promiscuous mode
[ 1026.637174][T14226] veth0_vlan: entered promiscuous mode
[ 1026.806534][T14226] team0: Device veth0_vlan failed to register rx_handler
[ 1026.894838][T14231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1404'.
[ 1028.185837][T14239] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[ 1030.803413][T14263] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[ 1032.503911][  T980] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[ 1032.694707][  T980] usb 5-1: Using ep0 maxpacket: 32
[ 1032.832467][  T980] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1032.921176][  T980] usb 5-1: config 0 has no interfaces?
[ 1032.940092][  T980] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1032.983589][  T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1033.038102][  T980] usb 5-1: config 0 descriptor??
[ 1033.348311][T14287] sctp: [Deprecated]: syz.2.1414 (pid 14287) Use of int in maxseg socket option.
[ 1033.348311][T14287] Use struct sctp_assoc_value instead
[ 1033.380366][T14285] netlink: 'syz.2.1414': attribute type 10 has an invalid length.
[ 1033.751456][T14285] veth0_vlan: left promiscuous mode
[ 1033.763605][T14285] veth0_vlan: entered promiscuous mode
[ 1033.789913][T14285] team0: Device veth0_vlan failed to register rx_handler
[ 1034.935058][T14295] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[ 1036.226269][T14271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1036.243214][ T5919] usb 5-1: USB disconnect, device number 38
[ 1036.438838][T14310] sctp: [Deprecated]: syz.3.1415 (pid 14310) Use of int in maxseg socket option.
[ 1036.438838][T14310] Use struct sctp_assoc_value instead
[ 1036.536661][T14309] netlink: 'syz.3.1415': attribute type 10 has an invalid length.
[ 1036.850968][T14309] veth0_vlan: left promiscuous mode
[ 1036.861802][T14309] veth0_vlan: entered promiscuous mode
[ 1036.876306][T14309] team0: Device veth0_vlan failed to register rx_handler
[ 1037.363050][T14322] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1037.452609][T14323] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1037.460280][ T5919] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[ 1037.707204][ T5919] usb 5-1: config 0 has no interfaces?
[ 1038.090314][ T5919] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1038.141768][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1038.184791][ T5919] usb 5-1: Product: syz
[ 1038.240833][ T5919] usb 5-1: Manufacturer: syz
[ 1038.286789][ T5919] usb 5-1: SerialNumber: syz
[ 1038.344485][ T5919] usb 5-1: config 0 descriptor??
[ 1039.166884][T14307] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[ 1040.126739][T14344] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1041.268249][T14348] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[ 1041.423941][ T5851] usb 5-1: USB disconnect, device number 39
[ 1042.204743][T14370] sctp: [Deprecated]: syz.1.1425 (pid 14370) Use of int in maxseg socket option.
[ 1042.204743][T14370] Use struct sctp_assoc_value instead
[ 1042.221827][T14370] netlink: 'syz.1.1425': attribute type 10 has an invalid length.
[ 1042.243516][ T5941] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[ 1042.328332][T14370] veth0_vlan: left promiscuous mode
[ 1042.335366][T14370] veth0_vlan: entered promiscuous mode
[ 1042.345273][T14370] team0: Device veth0_vlan failed to register rx_handler
[ 1042.562356][ T5941] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[ 1042.583936][ T5941] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1042.612282][ T5941] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1042.621606][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[ 1042.629823][ T5941] usb 5-1: SerialNumber: syz
[ 1042.792265][  T980] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[ 1042.993362][  T980] usb 4-1: Using ep0 maxpacket: 32
[ 1043.004617][  T980] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1043.016681][  T980] usb 4-1: config 0 has no interfaces?
[ 1043.023085][  T980] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1043.040576][  T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1043.086182][  T980] usb 4-1: config 0 descriptor??
[ 1045.094719][T14381] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[ 1045.374643][T14368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1045.460771][ T5851] usb 4-1: USB disconnect, device number 53
[ 1045.787047][ T5941] usb 5-1: cannot find UAC_HEADER
[ 1045.828347][ T5941] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[ 1045.923347][ T5941] usb 5-1: USB disconnect, device number 40
[ 1045.975031][T14388] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1046.071747][ T6674] udevd[6674]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1046.498901][T14397] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1047.454313][T14405] FAULT_INJECTION: forcing a failure.
[ 1047.454313][T14405] name fail_usercopy, interval 1, probability 0, space 0, times 1
[ 1047.496895][T14405] CPU: 0 UID: 0 PID: 14405 Comm: syz.2.1434 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) 
[ 1047.496940][T14405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1047.496974][T14405] Call Trace:
[ 1047.496980][T14405]  <TASK>
[ 1047.496986][T14405]  dump_stack_lvl+0x189/0x250
[ 1047.497036][T14405]  ? __pfx____ratelimit+0x10/0x10
[ 1047.497060][T14405]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1047.497078][T14405]  ? __pfx__printk+0x10/0x10
[ 1047.497107][T14405]  should_fail_ex+0x414/0x560
[ 1047.497133][T14405]  _copy_to_user+0x31/0xb0
[ 1047.497153][T14405]  simple_read_from_buffer+0xe1/0x170
[ 1047.497176][T14405]  proc_fail_nth_read+0x1df/0x250
[ 1047.497201][T14405]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1047.497224][T14405]  ? rw_verify_area+0x258/0x650
[ 1047.497240][T14405]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1047.497263][T14405]  vfs_read+0x200/0x980
[ 1047.497283][T14405]  ? __pfx___mutex_lock+0x10/0x10
[ 1047.497299][T14405]  ? __pfx_vfs_read+0x10/0x10
[ 1047.497317][T14405]  ? __fget_files+0x2a/0x420
[ 1047.497340][T14405]  ? __fget_files+0x3a0/0x420
[ 1047.497359][T14405]  ? __fget_files+0x2a/0x420
[ 1047.497386][T14405]  ksys_read+0x145/0x250
[ 1047.497405][T14405]  ? __pfx_ksys_read+0x10/0x10
[ 1047.497425][T14405]  ? do_syscall_64+0xbe/0x3b0
[ 1047.497443][T14405]  do_syscall_64+0xfa/0x3b0
[ 1047.497457][T14405]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1047.497470][T14405]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1047.497485][T14405]  ? clear_bhb_loop+0x60/0xb0
[ 1047.497502][T14405]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1047.497519][T14405] RIP: 0033:0x7f2aa978d33c
[ 1047.497536][T14405] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1047.497549][T14405] RSP: 002b:00007f2aaa545030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1047.497568][T14405] RAX: ffffffffffffffda RBX: 00007f2aa99b5fa0 RCX: 00007f2aa978d33c
[ 1047.497579][T14405] RDX: 000000000000000f RSI: 00007f2aaa5450a0 RDI: 0000000000000003
[ 1047.497588][T14405] RBP: 00007f2aaa545090 R08: 0000000000000000 R09: 0000000000000000
[ 1047.497596][T14405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1047.497605][T14405] R13: 0000000000000001 R14: 00007f2aa99b5fa0 R15: 00007f2aa9adfa28
[ 1047.497627][T14405]  </TASK>
[ 1048.368956][T14411] syz.2.1435 uses obsolete (PF_INET,SOCK_PACKET)
[ 1048.932107][T14423] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1049.248778][T14428] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[ 1050.816184][T14446] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1051.593223][T14454] FAULT_INJECTION: forcing a failure.
[ 1051.593223][T14454] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1051.781739][T14454] CPU: 1 UID: 0 PID: 14454 Comm: syz.1.1442 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) 
[ 1051.781761][T14454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1051.781769][T14454] Call Trace:
[ 1051.781781][T14454]  <TASK>
[ 1051.781786][T14454]  dump_stack_lvl+0x189/0x250
[ 1051.781808][T14454]  ? __pfx____ratelimit+0x10/0x10
[ 1051.781830][T14454]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1051.781847][T14454]  ? __pfx__printk+0x10/0x10
[ 1051.781865][T14454]  ? __might_fault+0xb0/0x130
[ 1051.781889][T14454]  should_fail_ex+0x414/0x560
[ 1051.781912][T14454]  _copy_from_user+0x2d/0xb0
[ 1051.781929][T14454]  rfkill_fop_write+0x136/0x570
[ 1051.781943][T14454]  ? common_file_perm+0x199/0x200
[ 1051.781965][T14454]  ? __pfx_rfkill_fop_write+0x10/0x10
[ 1051.781979][T14454]  ? security_file_permission+0x50/0x290
[ 1051.782017][T14454]  ? rw_verify_area+0x258/0x650
[ 1051.782033][T14454]  ? __pfx_rfkill_fop_write+0x10/0x10
[ 1051.782049][T14454]  vfs_write+0x27e/0xa90
[ 1051.782072][T14454]  ? __pfx_vfs_write+0x10/0x10
[ 1051.782089][T14454]  ? __fget_files+0x2a/0x420
[ 1051.782111][T14454]  ? __fget_files+0x2a/0x420
[ 1051.782130][T14454]  ? __fget_files+0x3a0/0x420
[ 1051.782148][T14454]  ? __fget_files+0x2a/0x420
[ 1051.782174][T14454]  ksys_write+0x145/0x250
[ 1051.782193][T14454]  ? __pfx_ksys_write+0x10/0x10
[ 1051.782209][T14454]  ? rcu_is_watching+0x15/0xb0
[ 1051.782230][T14454]  ? do_syscall_64+0xbe/0x3b0
[ 1051.782248][T14454]  do_syscall_64+0xfa/0x3b0
[ 1051.782261][T14454]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1051.782282][T14454]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1051.782296][T14454]  ? clear_bhb_loop+0x60/0xb0
[ 1051.782313][T14454]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1051.782326][T14454] RIP: 0033:0x7fe6c5f8e929
[ 1051.782339][T14454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1051.782351][T14454] RSP: 002b:00007fe6c6d26038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1051.782367][T14454] RAX: ffffffffffffffda RBX: 00007fe6c61b5fa0 RCX: 00007fe6c5f8e929
[ 1051.782377][T14454] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003
[ 1051.782386][T14454] RBP: 00007fe6c6d26090 R08: 0000000000000000 R09: 0000000000000000
[ 1051.782395][T14454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1051.782403][T14454] R13: 0000000000000000 R14: 00007fe6c61b5fa0 R15: 00007fe6c62dfa28
[ 1051.782424][T14454]  </TASK>
[ 1052.963420][  T980] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[ 1053.164402][  T980] usb 2-1: Using ep0 maxpacket: 32
[ 1053.204804][  T980] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1053.267399][  T980] usb 2-1: config 0 has no interfaces?
[ 1053.371988][T14481] sctp: [Deprecated]: syz.2.1449 (pid 14481) Use of int in maxseg socket option.
[ 1053.371988][T14481] Use struct sctp_assoc_value instead
[ 1053.413180][  T980] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1053.459025][  T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1053.483399][ T6003] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[ 1053.499380][  T980] usb 2-1: config 0 descriptor??
[ 1053.612378][T14481] netlink: 'syz.2.1449': attribute type 10 has an invalid length.
[ 1053.683373][ T6003] usb 1-1: Using ep0 maxpacket: 16
[ 1053.701938][T14481] veth0_vlan: left promiscuous mode
[ 1053.710229][T14481] veth0_vlan: entered promiscuous mode
[ 1053.730329][T14481] team0: Device veth0_vlan failed to register rx_handler
[ 1053.780750][ T6003] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[ 1053.791679][ T6003] usb 1-1: config 0 has no interface number 0
[ 1053.808274][ T6003] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1054.483526][ T6003] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[ 1054.515501][ T6003] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1054.524921][ T6003] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1054.547746][ T1302] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.554168][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[ 1054.610915][ T6003] usb 1-1: Product: syz
[ 1054.627282][ T6003] usb 1-1: SerialNumber: syz
[ 1054.683708][ T6003] usb 1-1: config 0 descriptor??
[ 1054.810053][ T6003] cm109 1-1:0.8: invalid payload size 0, expected 4
[ 1054.836467][ T6003] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input106
[ 1055.213488][ T5919] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[ 1055.433986][    C1] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1055.435230][    T9] usb 1-1: USB disconnect, device number 54
[ 1055.441270][    C1] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1055.447156][ T5919] usb 4-1: Using ep0 maxpacket: 32
[ 1055.480127][ T5919] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1055.534785][ T5919] usb 4-1: config 0 has no interfaces?
[ 1055.556238][ T5919] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[ 1055.612303][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1055.693595][    T9] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1055.713071][ T5919] usb 4-1: config 0 descriptor??
[ 1055.988003][T14463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1056.131253][    T9] usb 2-1: USB disconnect, device number 39
[ 1056.574727][T14502] netlink: 'syz.0.1454': attribute type 1 has an invalid length.
[ 1057.050674][T14508] netlink: 'syz.4.1455': attribute type 1 has an invalid length.
[ 1057.189763][T14513] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[ 1057.244373][T14514] FAULT_INJECTION: forcing a failure.
[ 1057.244373][T14514] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1057.294302][T14514] CPU: 1 UID: 0 PID: 14514 Comm: syz.4.1455 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) 
[ 1057.294343][T14514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1057.294356][T14514] Call Trace:
[ 1057.294364][T14514]  <TASK>
[ 1057.294373][T14514]  dump_stack_lvl+0x189/0x250
[ 1057.294404][T14514]  ? __pfx____ratelimit+0x10/0x10
[ 1057.294438][T14514]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1057.294463][T14514]  ? __pfx__printk+0x10/0x10
[ 1057.294490][T14514]  ? __might_fault+0xb0/0x130
[ 1057.294527][T14514]  should_fail_ex+0x414/0x560
[ 1057.294564][T14514]  _copy_from_user+0x2d/0xb0
[ 1057.294589][T14514]  ___sys_sendmsg+0x158/0x2a0
[ 1057.294620][T14514]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1057.294684][T14514]  ? __fget_files+0x2a/0x420
[ 1057.294712][T14514]  ? __fget_files+0x3a0/0x420
[ 1057.294750][T14514]  __x64_sys_sendmsg+0x19b/0x260
[ 1057.294782][T14514]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1057.294820][T14514]  ? __pfx_ksys_write+0x10/0x10
[ 1057.294849][T14514]  ? do_syscall_64+0xbe/0x3b0
[ 1057.294875][T14514]  do_syscall_64+0xfa/0x3b0
[ 1057.294894][T14514]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1057.294913][T14514]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1057.294934][T14514]  ? clear_bhb_loop+0x60/0xb0
[ 1057.294959][T14514]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1057.294979][T14514] RIP: 0033:0x7f59cef8e929
[ 1057.294998][T14514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1057.295016][T14514] RSP: 002b:00007f59cfe7a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1057.295038][T14514] RAX: ffffffffffffffda RBX: 00007f59cf1b6080 RCX: 00007f59cef8e929
[ 1057.295052][T14514] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1057.295065][T14514] RBP: 00007f59cfe7a090 R08: 0000000000000000 R09: 0000000000000000
[ 1057.295078][T14514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1057.295090][T14514] R13: 0000000000000001 R14: 00007f59cf1b6080 R15: 00007f59cf2dfa28
[ 1057.295121][T14514]  </TASK>
[ 1058.003166][T14526] FAULT_INJECTION: forcing a failure.
[ 1058.003166][T14526] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1058.033559][T14526] CPU: 0 UID: 0 PID: 14526 Comm: syz.0.1459 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) 
[ 1058.033592][T14526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1058.033604][T14526] Call Trace:
[ 1058.033612][T14526]  <TASK>
[ 1058.033621][T14526]  dump_stack_lvl+0x189/0x250
[ 1058.033652][T14526]  ? __pfx____ratelimit+0x10/0x10
[ 1058.033684][T14526]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1058.033708][T14526]  ? __pfx__printk+0x10/0x10
[ 1058.033735][T14526]  ? __might_fault+0xb0/0x130
[ 1058.033770][T14526]  should_fail_ex+0x414/0x560
[ 1058.033806][T14526]  _copy_from_user+0x2d/0xb0
[ 1058.033832][T14526]  do_fcntl+0x934/0x1910
[ 1058.033859][T14526]  ? __pfx_do_fcntl+0x10/0x10
[ 1058.033884][T14526]  ? __fget_files+0x2a/0x420
[ 1058.033914][T14526]  ? __fget_files+0x2a/0x420
[ 1058.033948][T14526]  ? bpf_lsm_file_fcntl+0x9/0x20
[ 1058.033973][T14526]  __se_sys_fcntl+0xc8/0x150
[ 1058.033994][T14526]  do_syscall_64+0xfa/0x3b0
[ 1058.034013][T14526]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1058.034032][T14526]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1058.034052][T14526]  ? clear_bhb_loop+0x60/0xb0
[ 1058.034076][T14526]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1058.034095][T14526] RIP: 0033:0x7f365e38e929
[ 1058.034113][T14526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1058.034130][T14526] RSP: 002b:00007f365f266038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048
[ 1058.034152][T14526] RAX: ffffffffffffffda RBX: 00007f365e5b6080 RCX: 00007f365e38e929
[ 1058.034166][T14526] RDX: 0000200000000040 RSI: 0000000000000007 RDI: 0000000000000004
[ 1058.034179][T14526] RBP: 00007f365f266090 R08: 0000000000000000 R09: 0000000000000000
[ 1058.034190][T14526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1058.034201][T14526] R13: 0000000000000000 R14: 00007f365e5b6080 R15: 00007f365e6dfa28
[ 1058.034240][T14526]  </TASK>
[ 1058.234452][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1058.655601][T14490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1058.688469][ T5941] usb 4-1: USB disconnect, device number 54
[ 1058.795368][T14528] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[ 1059.254610][ T5941] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[ 1059.348079][T14541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1465'.
[ 1059.375412][T14541] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1465'.
[ 1059.445252][ T5941] usb 5-1: Using ep0 maxpacket: 16
[ 1059.467385][ T5941] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1059.484716][ T5941] usb 5-1: config 5 has an invalid interface number: 225 but max is 0
[ 1059.493810][ T5919] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[ 1059.503960][ T5941] usb 5-1: config 5 has no interface number 0
[ 1059.513371][ T5941] usb 5-1: config 5 interface 225 has no altsetting 0
[ 1059.551136][ T5941] usb 5-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice=89.94
[ 1059.573324][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1059.579005][T14546] FAULT_INJECTION: forcing a failure.
[ 1059.579005][T14546] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1059.581453][ T5941] usb 5-1: Product: syz
[ 1059.581472][ T5941] usb 5-1: Manufacturer: syz
[ 1059.581488][ T5941] usb 5-1: SerialNumber: syz
[ 1059.608839][T14546] CPU: 0 UID: 0 PID: 14546 Comm: syz.3.1467 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) 
[ 1059.608868][T14546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1059.608880][T14546] Call Trace:
[ 1059.608889][T14546]  <TASK>
[ 1059.608898][T14546]  dump_stack_lvl+0x189/0x250
[ 1059.608928][T14546]  ? __pfx____ratelimit+0x10/0x10
[ 1059.608961][T14546]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1059.608986][T14546]  ? __pfx__printk+0x10/0x10
[ 1059.609013][T14546]  ? __might_fault+0xb0/0x130
[ 1059.609051][T14546]  should_fail_ex+0x414/0x560
[ 1059.609087][T14546]  _copy_from_iter+0x1db/0x16f0
[ 1059.609119][T14546]  ? policy_nodemask+0x27c/0x720
[ 1059.609146][T14546]  ? __pfx__copy_from_iter+0x10/0x10
[ 1059.609175][T14546]  ? set_page_refcounted+0xa0/0x1e0
[ 1059.609201][T14546]  ? page_copy_sane+0x4e/0x280
[ 1059.609226][T14546]  copy_page_from_iter+0xdd/0x170
[ 1059.609253][T14546]  tun_get_user+0x1c4d/0x3ce0
[ 1059.609280][T14546]  ? tun_get_user+0x693/0x3ce0
[ 1059.609316][T14546]  ? aa_file_perm+0x11f/0xed0
[ 1059.609338][T14546]  ? __pfx_tun_get_user+0x10/0x10
[ 1059.609359][T14546]  ? aa_file_perm+0x11f/0xed0
[ 1059.609378][T14546]  ? aa_file_perm+0x3e7/0xed0
[ 1059.609412][T14546]  ? ref_tracker_alloc+0x318/0x460
[ 1059.609430][T14546]  ? __lock_acquire+0xab9/0xd20
[ 1059.609453][T14546]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1059.609479][T14546]  ? tun_get+0x1c/0x2f0
[ 1059.609507][T14546]  ? tun_get+0x1c/0x2f0
[ 1059.609528][T14546]  ? tun_get+0x1c/0x2f0
[ 1059.609555][T14546]  tun_chr_write_iter+0x113/0x200
[ 1059.609580][T14546]  vfs_write+0x54b/0xa90
[ 1059.609610][T14546]  ? __pfx_tun_chr_write_iter+0x10/0x10
[ 1059.609633][T14546]  ? __pfx_vfs_write+0x10/0x10
[ 1059.609669][T14546]  ? __fget_files+0x2a/0x420
[ 1059.609706][T14546]  ksys_write+0x145/0x250
[ 1059.609732][T14546]  ? __pfx_ksys_write+0x10/0x10
[ 1059.609771][T14546]  ? do_syscall_64+0xbe/0x3b0
[ 1059.609796][T14546]  do_syscall_64+0xfa/0x3b0
[ 1059.609816][T14546]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1059.609835][T14546]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1059.609856][T14546]  ? clear_bhb_loop+0x60/0xb0
[ 1059.609880][T14546]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1059.609900][T14546] RIP: 0033:0x7f93ab38d3df
[ 1059.609918][T14546] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 1059.609935][T14546] RSP: 002b:00007f93ac2ce000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 1059.609957][T14546] RAX: ffffffffffffffda RBX: 00007f93ab5b5fa0 RCX: 00007f93ab38d3df
[ 1059.609972][T14546] RDX: 0000000000000056 RSI: 0000200000000040 RDI: 00000000000000c8
[ 1059.609985][T14546] RBP: 00007f93ac2ce090 R08: 0000000000000000 R09: 0000000000000000
[ 1059.609997][T14546] R10: 0000000000000056 R11: 0000000000000293 R12: 0000000000000001
[ 1059.610009][T14546] R13: 0000000000000001 R14: 00007f93ab5b5fa0 R15: 00007f93ab6dfa28
[ 1059.610040][T14546]  </TASK>
[ 1059.896796][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1059.981416][ T5919] usb 1-1: Using ep0 maxpacket: 32
[ 1060.005446][ T5919] usb 1-1: config 0 has an invalid interface number: 111 but max is 1
[ 1060.013829][ T5919] usb 1-1: config 0 has no interface number 1
[ 1060.030858][ T5919] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83
[ 1060.040084][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1060.048197][ T5919] usb 1-1: Product: syz
[ 1060.052382][ T5919] usb 1-1: Manufacturer: syz
[ 1060.057059][ T5919] usb 1-1: SerialNumber: syz
[ 1060.088316][ T5919] usb 1-1: config 0 descriptor??
[ 1060.157419][T14551] FAULT_INJECTION: forcing a failure.
[ 1060.157419][T14551] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1060.171024][T14551] CPU: 0 UID: 0 PID: 14551 Comm: syz.3.1469 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) 
[ 1060.171052][T14551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1060.171064][T14551] Call Trace:
[ 1060.171072][T14551]  <TASK>
[ 1060.171080][T14551]  dump_stack_lvl+0x189/0x250
[ 1060.171111][T14551]  ? __pfx____ratelimit+0x10/0x10
[ 1060.171149][T14551]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1060.171171][T14551]  ? __pfx__printk+0x10/0x10
[ 1060.171198][T14551]  ? __might_fault+0xb0/0x130
[ 1060.171234][T14551]  should_fail_ex+0x414/0x560
[ 1060.171271][T14551]  _copy_from_iter+0x1db/0x16f0
[ 1060.171303][T14551]  ? policy_nodemask+0x27c/0x720
[ 1060.171329][T14551]  ? __pfx__copy_from_iter+0x10/0x10
[ 1060.171357][T14551]  ? set_page_refcounted+0xa0/0x1e0
[ 1060.171384][T14551]  ? page_copy_sane+0x4e/0x280
[ 1060.171408][T14551]  copy_page_from_iter+0xdd/0x170
[ 1060.171435][T14551]  tun_get_user+0x1c4d/0x3ce0
[ 1060.171460][T14551]  ? tun_get_user+0x693/0x3ce0
[ 1060.171496][T14551]  ? aa_file_perm+0x11f/0xed0
[ 1060.171516][T14551]  ? __pfx_tun_get_user+0x10/0x10
[ 1060.171535][T14551]  ? aa_file_perm+0x11f/0xed0
[ 1060.171554][T14551]  ? aa_file_perm+0x3e7/0xed0
[ 1060.171587][T14551]  ? ref_tracker_alloc+0x318/0x460
[ 1060.171609][T14551]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1060.171627][T14551]  ? irqentry_exit+0x74/0x90
[ 1060.171646][T14551]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1060.171668][T14551]  ? tun_get+0x1c/0x2f0
[ 1060.171696][T14551]  ? tun_get+0x1c/0x2f0
[ 1060.171717][T14551]  ? tun_get+0x1c/0x2f0
[ 1060.171750][T14551]  tun_chr_write_iter+0x113/0x200
[ 1060.171776][T14551]  vfs_write+0x54b/0xa90
[ 1060.171805][T14551]  ? __pfx_tun_chr_write_iter+0x10/0x10
[ 1060.171828][T14551]  ? __pfx_vfs_write+0x10/0x10
[ 1060.171863][T14551]  ? __fget_files+0x2a/0x420
[ 1060.171901][T14551]  ksys_write+0x145/0x250
[ 1060.171927][T14551]  ? __pfx_ksys_write+0x10/0x10
[ 1060.171957][T14551]  ? do_syscall_64+0xbe/0x3b0
[ 1060.171981][T14551]  do_syscall_64+0xfa/0x3b0
[ 1060.172000][T14551]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1060.172019][T14551]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1060.172039][T14551]  ? clear_bhb_loop+0x60/0xb0
[ 1060.172063][T14551]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1060.172082][T14551] RIP: 0033:0x7f93ab38d3df
[ 1060.172101][T14551] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 1060.172118][T14551] RSP: 002b:00007f93ac2ce000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 1060.172139][T14551] RAX: ffffffffffffffda RBX: 00007f93ab5b5fa0 RCX: 00007f93ab38d3df
[ 1060.172153][T14551] RDX: 0000000000000036 RSI: 0000200000000600 RDI: 00000000000000c8
[ 1060.172165][T14551] RBP: 00007f93ac2ce090 R08: 0000000000000000 R09: 0000000000000000
[ 1060.172176][T14551] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001
[ 1060.172187][T14551] R13: 0000000000000001 R14: 00007f93ab5b5fa0 R15: 00007f93ab6dfa28
[ 1060.172217][T14551]  </TASK>
[ 1060.461466][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1060.580946][T14537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1060.613976][T14537] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1060.674332][ T5919] snd-usb-6fire 1-1:0.111: unable to receive device firmware state.
[ 1060.682478][ T5919] snd-usb-6fire 1-1:0.111: probe with driver snd-usb-6fire failed with error -71
[ 1060.698371][ T5919] usb 1-1: USB disconnect, device number 55
[ 1061.101224][ T6003] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[ 1061.233447][ T6003] usb 4-1: device descriptor read/64, error -71
[ 1061.473375][ T6003] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[ 1061.593571][T14564] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[ 1061.680448][ T6003] usb 4-1: device descriptor read/64, error -71
[ 1061.785053][T14566] netdevsim netdevsim0: Direct firmware load for nel/config failed with error -2
[ 1061.794540][T14566] netdevsim netdevsim0: Falling back to sysfs fallback for: nel/config
[ 1061.814201][ T6003] usb usb4-port1: attempt power cycle
[ 1062.055009][ T5941] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:5.225/input/input107
[ 1062.070590][ T5202] bcm5974 5-1:5.225: could not read from device
[ 1062.088528][ T5941] usb 5-1: USB disconnect, device number 41
[ 1062.096345][ T5202] bcm5974 5-1:5.225: could not read from device
[ 1062.211218][ T5905] udevd[5905]: Error opening device "/dev/input/event4": No such file or directory
[ 1062.229728][ T6003] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[ 1062.254381][ T6003] usb 4-1: device descriptor read/8, error -71
[ 1062.269927][ T5905] udevd[5905]: Unable to EVIOCGABS device "/dev/input/event4"
[ 1062.296386][ T5905] udevd[5905]: Unable to EVIOCGABS device "/dev/input/event4"
[ 1062.323477][ T5905] udevd[5905]: Unable to EVIOCGABS device "/dev/input/event4"
[ 1062.350160][ T5905] udevd[5905]: Unable to EVIOCGABS device "/dev/input/event4"
[ 1062.513378][ T6003] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[ 1062.545873][ T6003] usb 4-1: device descriptor read/8, error -71
[ 1062.598335][ T5941] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[ 1062.744155][ T6003] usb usb4-port1: unable to enumerate USB device
[ 1062.807807][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1062.839314][ T5941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1062.885560][ T5941] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 1062.935006][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1062.974651][ T5941] usb 5-1: config 0 descriptor??
[ 1063.425987][ T5941] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0
[ 1063.467584][ T5941] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0
[ 1063.638756][ T5941] cp2112 0003:10C4:EA90.0001: Part Number: 0x82 Device Version: 0xFE
[ 1063.685945][T14580] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[ 1064.141869][T14586] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[ 1064.249552][ T5941] cp2112 0003:10C4:EA90.0001: error setting SMBus config
[ 1064.250669][T14592] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1478'.
[ 1064.285374][ T5941] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -71
[ 1064.516175][ T5941] usb 5-1: USB disconnect, device number 42
[ 1064.544868][T14595] sch_tbf: burst 88 is lower than device veth3 mtu (1514) !
[ 1065.341999][T14612] sctp: [Deprecated]: syz.4.1483 (pid 14612) Use of int in maxseg socket option.
[ 1065.341999][T14612] Use struct sctp_assoc_value instead
[ 1065.370705][T14612] netlink: 'syz.4.1483': attribute type 10 has an invalid length.
[ 1065.725437][T14612] veth0_vlan: left promiscuous mode
[ 1065.921934][T14622] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1485'.
[ 1065.934573][T14612] veth0_vlan: entered promiscuous mode
[ 1065.974165][T14612] team0: Device veth0_vlan failed to register rx_handler
[ 1066.077995][T14626] netdevsim netdevsim0: Direct firmware load for 41������ failed with error -2
[ 1066.159494][T14626] netdevsim netdevsim0: Falling back to sysfs fallback for: 41������
[ 1066.283732][ T5941] usb 2-1: new full-speed USB device number 40 using dummy_hcd
[ 1066.413395][ T5941] usb 2-1: device descriptor read/64, error -71
[ 1066.653453][ T5941] usb 2-1: new full-speed USB device number 41 using dummy_hcd
[ 1066.793421][ T5941] usb 2-1: device descriptor read/64, error -71
[ 1066.904411][ T5941] usb usb2-port1: attempt power cycle
[ 1067.244031][ T5941] usb 2-1: new full-speed USB device number 42 using dummy_hcd
[ 1067.251848][ T6003] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[ 1067.283994][ T5941] usb 2-1: device descriptor read/8, error -71
[ 1067.293366][    T9] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[ 1067.413378][ T6003] usb 3-1: Using ep0 maxpacket: 32
[ 1067.420514][ T6003] usb 3-1: config 0 has an invalid interface number: 146 but max is 0
[ 1067.431066][ T6003] usb 3-1: config 0 has no interface number 0
[ 1067.437825][ T6003] usb 3-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1067.449605][ T6003] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[ 1067.462659][ T6003] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[ 1067.474318][    T9] usb 1-1: Using ep0 maxpacket: 8
[ 1067.485688][ T6003] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[ 1067.494439][    T9] usb 1-1: config 0 has no interfaces?
[ 1067.517085][    T9] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 1067.523413][ T6003] usb 3-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82
[ 1067.536626][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1067.543342][ T5941] usb 2-1: new full-speed USB device number 43 using dummy_hcd
[ 1067.562920][ T6003] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1067.563736][    T9] usb 1-1: config 0 descriptor??
[ 1067.578708][ T6003] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 1067.592244][ T5941] usb 2-1: device descriptor read/8, error -71
[ 1067.612980][ T6003] usb 3-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024
[ 1067.646071][ T6003] usb 3-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[ 1067.668667][ T6003] usb 3-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1067.706321][ T5941] usb usb2-port1: unable to enumerate USB device
[ 1067.736483][ T6003] usb 3-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[ 1067.767482][ T6003] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1067.786352][ T6003] usb 3-1: Product: syz
[ 1067.796083][ T6003] usb 3-1: Manufacturer: syz
[ 1067.811407][T14637] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1492'.
[ 1067.825184][T14637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1067.833766][ T6003] usb 3-1: SerialNumber: syz
[ 1067.836675][T14637] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1067.849956][ T6003] usb 3-1: config 0 descriptor??
[ 1067.856830][T14637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1067.866859][T14635] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1067.871902][T14637] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1067.876786][T14635] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[ 1067.911929][ T5851] usb 1-1: USB disconnect, device number 56
[ 1067.964378][ T6003] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3
[ 1067.977755][ T6003] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2
[ 1068.005682][ T6003] scsi host1: microtekX6
[ 1068.190664][ T6003] usb 3-1: USB disconnect, device number 47
[ 1068.196886][   T11] microtek usb (rev 0.4.3): error -19 submitting URB
[ 1068.244575][   T11] microtek usb (rev 0.4.3): error -19 submitting URB
[ 1068.283398][   T11] microtek usb (rev 0.4.3): error -19 submitting URB
[ 1068.453436][   T24] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[ 1068.623347][   T24] usb 5-1: Using ep0 maxpacket: 16
[ 1068.640842][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 112, changing to 10
[ 1068.655718][   T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=0224, bcdDevice= 0.00
[ 1068.665467][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1068.693868][   T24] usb 5-1: config 0 descriptor??
[ 1068.934744][T14641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1068.966470][T14641] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1069.090290][   T24] usb 5-1: string descriptor 0 read error: -71
[ 1069.111747][   T24] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input110
[ 1069.183514][ T5202] bcm5974 5-1:0.0: could not read from device
[ 1069.199675][   T24] usb 5-1: USB disconnect, device number 43
[ 1069.713455][ T5851] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[ 1069.974296][T14670] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[ 1070.043494][ T5851] usb 4-1: device descriptor read/64, error -71
[ 1070.335083][ T5851] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[ 1070.461250][T14676] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1070.523592][ T5851] usb 4-1: device descriptor read/64, error -71
[ 1070.549235][T14678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1503'.
[ 1070.558403][T14678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1503'.
[ 1070.635412][ T5851] usb usb4-port1: attempt power cycle
[ 1070.693389][ T5919] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[ 1070.780388][T14680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1504'.
[ 1070.864946][ T5919] usb 2-1: Using ep0 maxpacket: 32
[ 1070.870505][ T5919] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[ 1070.870541][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[ 1070.870559][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[ 1070.870588][ T5919] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 1070.870604][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1070.875090][ T5919] usb 2-1: config 0 descriptor??
[ 1070.875770][T14676] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1070.881576][ T5919] hub 2-1:0.0: USB hub found
[ 1070.984034][ T5851] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[ 1071.075484][ T5851] usb 4-1: device descriptor read/8, error -71
[ 1071.204552][ T5919] hub 2-1:0.0: config failed, can't read hub descriptor (err -22)
[ 1071.277633][T14687] netlink: 'syz.4.1505': attribute type 1 has an invalid length.
[ 1071.569414][T14687] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1071.605913][ T5851] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[ 1071.875399][ T5851] usb 4-1: device descriptor read/8, error -71
[ 1071.998058][ T5919] usbhid 2-1:0.0: can't add hid device: -71
[ 1072.014000][ T5919] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1072.053679][ T5851] usb usb4-port1: unable to enumerate USB device
[ 1072.082346][ T5919] usb 2-1: USB disconnect, device number 44
[ 1072.777582][   T30] audit: type=1400 audit(1751810349.523:67): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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
[ 1073.019765][T14695] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1508'.
[ 1073.067028][T14705] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1511'.
[ 1073.111005][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1073.153808][T14705] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1511'.
[ 1073.172274][T14705] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1511'.
[ 1073.187009][T14705] netlink: 'syz.1.1511': attribute type 2 has an invalid length.
[ 1073.201345][T14705] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1511'.
[ 1073.685613][T14720] sctp: [Deprecated]: syz.0.1515 (pid 14720) Use of int in maxseg socket option.
[ 1073.685613][T14720] Use struct sctp_assoc_value instead
[ 1073.703463][ T5919] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[ 1073.735842][T14720] netlink: 'syz.0.1515': attribute type 10 has an invalid length.
[ 1073.747126][T14720] veth0_vlan: left promiscuous mode
[ 1073.775708][T14720] veth0_vlan: entered promiscuous mode
[ 1073.802639][T14720] team0: Device veth0_vlan failed to register rx_handler
[ 1073.853459][ T5919] usb 2-1: Using ep0 maxpacket: 32
[ 1073.872672][ T5919] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[ 1074.132116][ T5919] usb 2-1: config 0 interface 0 has no altsetting 1
[ 1074.148885][ T5919] usb 2-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00
[ 1074.166165][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1074.184841][ T5919] usb 2-1: SerialNumber: syz
[ 1074.198131][ T5919] usb 2-1: config 0 descriptor??
[ 1074.229680][ T5919] usb-storage 2-1:0.0: USB Mass Storage device detected
[ 1074.274584][ T5919] usb-storage 2-1:0.0: Quirks match for vid 152d pid 0539: 4000000
[ 1074.373067][T14733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1518'.
[ 1074.389461][T14733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1518'.
[ 1074.470269][T14712] netlink: 'syz.1.1514': attribute type 1 has an invalid length.
[ 1074.586032][T14740] FAULT_INJECTION: forcing a failure.
[ 1074.586032][T14740] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1074.600503][T14740] CPU: 1 UID: 0 PID: 14740 Comm: syz.2.1520 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) 
[ 1074.600532][T14740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1074.600546][T14740] Call Trace:
[ 1074.600554][T14740]  <TASK>
[ 1074.600562][T14740]  dump_stack_lvl+0x189/0x250
[ 1074.600600][T14740]  ? __pfx____ratelimit+0x10/0x10
[ 1074.600633][T14740]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1074.600658][T14740]  ? __pfx__printk+0x10/0x10
[ 1074.600699][T14740]  should_fail_ex+0x414/0x560
[ 1074.600735][T14740]  _copy_to_user+0x31/0xb0
[ 1074.600762][T14740]  simple_read_from_buffer+0xe1/0x170
[ 1074.600792][T14740]  proc_fail_nth_read+0x1df/0x250
[ 1074.600825][T14740]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1074.600857][T14740]  ? rw_verify_area+0x258/0x650
[ 1074.600877][T14740]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1074.600907][T14740]  vfs_read+0x200/0x980
[ 1074.600934][T14740]  ? __pfx___mutex_lock+0x10/0x10
[ 1074.600955][T14740]  ? __pfx_vfs_read+0x10/0x10
[ 1074.600978][T14740]  ? __fget_files+0x2a/0x420
[ 1074.601009][T14740]  ? __fget_files+0x3a0/0x420
[ 1074.601034][T14740]  ? __fget_files+0x2a/0x420
[ 1074.601070][T14740]  ksys_read+0x145/0x250
[ 1074.601097][T14740]  ? __pfx_ksys_read+0x10/0x10
[ 1074.601126][T14740]  ? do_syscall_64+0xbe/0x3b0
[ 1074.601151][T14740]  do_syscall_64+0xfa/0x3b0
[ 1074.601170][T14740]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1074.601189][T14740]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1074.601209][T14740]  ? clear_bhb_loop+0x60/0xb0
[ 1074.601234][T14740]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1074.601253][T14740] RIP: 0033:0x7f2aa978d33c
[ 1074.601272][T14740] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1074.601290][T14740] RSP: 002b:00007f2aaa545030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1074.601311][T14740] RAX: ffffffffffffffda RBX: 00007f2aa99b5fa0 RCX: 00007f2aa978d33c
[ 1074.601324][T14740] RDX: 000000000000000f RSI: 00007f2aaa5450a0 RDI: 0000000000000003
[ 1074.601337][T14740] RBP: 00007f2aaa545090 R08: 0000000000000000 R09: 0000000000000000
[ 1074.601349][T14740] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001
[ 1074.601360][T14740] R13: 0000000000000001 R14: 00007f2aa99b5fa0 R15: 00007f2aa9adfa28
[ 1074.601391][T14740]  </TASK>
[ 1075.073849][ T5941] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[ 1075.141246][ T5895] usb 2-1: USB disconnect, device number 45
[ 1075.213374][ T5941] usb 5-1: device descriptor read/64, error -71
[ 1075.444683][T14745] loop6: detected capacity change from 0 to 524287999
[ 1075.483367][ T5941] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[ 1075.623742][ T5941] usb 5-1: device descriptor read/64, error -71
[ 1075.753746][ T5941] usb usb5-port1: attempt power cycle
[ 1076.103384][ T5941] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[ 1076.135649][ T5941] usb 5-1: device descriptor read/8, error -71
[ 1076.162743][T14749] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[ 1076.413552][ T5941] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[ 1076.531349][ T5941] usb 5-1: device descriptor read/8, error -71
[ 1076.556719][T14752] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1523'.
[ 1076.648828][ T5941] usb usb5-port1: unable to enumerate USB device
[ 1077.187703][T14762] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1524'.
[ 1077.328493][T14765] Unknown options in mask 5
[ 1077.335354][T14765] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.1525'.
[ 1078.728976][T14769] __nla_validate_parse: 2 callbacks suppressed
[ 1078.728993][T14769] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1526'.
[ 1078.787934][T14776] netlink: 'syz.3.1529': attribute type 1 has an invalid length.
[ 1078.863606][T14778] FAULT_INJECTION: forcing a failure.
[ 1078.863606][T14778] name failslab, interval 1, probability 0, space 0, times 0
[ 1078.876680][T14778] CPU: 0 UID: 0 PID: 14778 Comm: syz.3.1529 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) 
[ 1078.876710][T14778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1078.876723][T14778] Call Trace:
[ 1078.876732][T14778]  <TASK>
[ 1078.876741][T14778]  dump_stack_lvl+0x189/0x250
[ 1078.876773][T14778]  ? __pfx____ratelimit+0x10/0x10
[ 1078.876804][T14778]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1078.876826][T14778]  ? __pfx__printk+0x10/0x10
[ 1078.876856][T14778]  ? ref_tracker_alloc+0x318/0x460
[ 1078.876877][T14778]  should_fail_ex+0x414/0x560
[ 1078.876909][T14778]  should_failslab+0xa8/0x100
[ 1078.876935][T14778]  kmem_cache_alloc_noprof+0x73/0x3c0
[ 1078.876959][T14778]  ? skb_clone+0x212/0x3a0
[ 1078.876988][T14778]  skb_clone+0x212/0x3a0
[ 1078.877017][T14778]  __netlink_deliver_tap+0x404/0x850
[ 1078.877052][T14778]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1078.877075][T14778]  netlink_deliver_tap+0x19c/0x1b0
[ 1078.877099][T14778]  netlink_unicast+0x72f/0x8d0
[ 1078.877130][T14778]  netlink_sendmsg+0x805/0xb30
[ 1078.877161][T14778]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1078.877187][T14778]  ? aa_sock_msg_perm+0x94/0x160
[ 1078.877224][T14778]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1078.877240][T14778]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1078.877264][T14778]  __sock_sendmsg+0x21c/0x270
[ 1078.877286][T14778]  ____sys_sendmsg+0x505/0x830
[ 1078.877316][T14778]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1078.877348][T14778]  ? import_iovec+0x74/0xa0
[ 1078.877374][T14778]  ___sys_sendmsg+0x21f/0x2a0
[ 1078.877400][T14778]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1078.877459][T14778]  ? __fget_files+0x2a/0x420
[ 1078.877482][T14778]  ? __fget_files+0x3a0/0x420
[ 1078.877517][T14778]  __x64_sys_sendmsg+0x19b/0x260
[ 1078.877544][T14778]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1078.877578][T14778]  ? __pfx_ksys_write+0x10/0x10
[ 1078.877605][T14778]  ? do_syscall_64+0xbe/0x3b0
[ 1078.877628][T14778]  do_syscall_64+0xfa/0x3b0
[ 1078.877645][T14778]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1078.877661][T14778]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1078.877679][T14778]  ? clear_bhb_loop+0x60/0xb0
[ 1078.877700][T14778]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1078.877718][T14778] RIP: 0033:0x7f93ab38e929
[ 1078.877736][T14778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1078.877752][T14778] RSP: 002b:00007f93ac2ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1078.877772][T14778] RAX: ffffffffffffffda RBX: 00007f93ab5b6080 RCX: 00007f93ab38e929
[ 1078.877786][T14778] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1078.877798][T14778] RBP: 00007f93ac2ad090 R08: 0000000000000000 R09: 0000000000000000
[ 1078.877810][T14778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1078.877822][T14778] R13: 0000000000000001 R14: 00007f93ab5b6080 R15: 00007f93ab6dfa28
[ 1078.877853][T14778]  </TASK>
[ 1079.165686][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1079.581277][T14780] FAULT_INJECTION: forcing a failure.
[ 1079.581277][T14780] name failslab, interval 1, probability 0, space 0, times 0
[ 1079.595293][T14778] bond1: (slave gretap1): making interface the new active one
[ 1079.625460][   T30] audit: type=1326 audit(1751810356.373:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14773 comm="syz.2.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2aa972ab19 code=0x7ffc0000
[ 1079.625768][T14778] bond1: (slave gretap1): Enslaving as an active interface with an up link
[ 1079.673438][T14780] CPU: 1 UID: 0 PID: 14780 Comm: syz.4.1530 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) 
[ 1079.673466][T14780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1079.673478][T14780] Call Trace:
[ 1079.673486][T14780]  <TASK>
[ 1079.673494][T14780]  dump_stack_lvl+0x189/0x250
[ 1079.673523][T14780]  ? __pfx____ratelimit+0x10/0x10
[ 1079.673555][T14780]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1079.673578][T14780]  ? __pfx__printk+0x10/0x10
[ 1079.673611][T14780]  ? ref_tracker_alloc+0x318/0x460
[ 1079.673651][T14780]  should_fail_ex+0x414/0x560
[ 1079.673685][T14780]  should_failslab+0xa8/0x100
[ 1079.673715][T14780]  kmem_cache_alloc_noprof+0x73/0x3c0
[ 1079.673739][T14780]  ? skb_clone+0x212/0x3a0
[ 1079.673786][T14780]  skb_clone+0x212/0x3a0
[ 1079.673816][T14780]  __netlink_deliver_tap+0x404/0x850
[ 1079.673889][T14780]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1079.673916][T14780]  netlink_deliver_tap+0x19c/0x1b0
[ 1079.673944][T14780]  netlink_unicast+0x72f/0x8d0
[ 1079.673978][T14780]  netlink_sendmsg+0x805/0xb30
[ 1079.674014][T14780]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1079.674043][T14780]  ? aa_sock_msg_perm+0x94/0x160
[ 1079.674076][T14780]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1079.674105][T14780]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1079.674133][T14780]  __sock_sendmsg+0x21c/0x270
[ 1079.674155][T14780]  ____sys_sendmsg+0x505/0x830
[ 1079.674188][T14780]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1079.674225][T14780]  ? import_iovec+0x74/0xa0
[ 1079.674254][T14780]  ___sys_sendmsg+0x21f/0x2a0
[ 1079.674284][T14780]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1079.674351][T14780]  ? __fget_files+0x2a/0x420
[ 1079.674378][T14780]  ? __fget_files+0x3a0/0x420
[ 1079.674417][T14780]  __x64_sys_sendmsg+0x19b/0x260
[ 1079.674448][T14780]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1079.674486][T14780]  ? __pfx_ksys_write+0x10/0x10
[ 1079.674508][T14780]  ? rcu_is_watching+0x15/0xb0
[ 1079.674538][T14780]  ? do_syscall_64+0xbe/0x3b0
[ 1079.674563][T14780]  do_syscall_64+0xfa/0x3b0
[ 1079.674583][T14780]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1079.674603][T14780]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1079.674623][T14780]  ? clear_bhb_loop+0x60/0xb0
[ 1079.674646][T14780]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1079.674664][T14780] RIP: 0033:0x7f59cef8e929
[ 1079.674682][T14780] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1079.674699][T14780] RSP: 002b:00007f59cfe9b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1079.674722][T14780] RAX: ffffffffffffffda RBX: 00007f59cf1b5fa0 RCX: 00007f59cef8e929
[ 1079.674737][T14780] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[ 1079.674748][T14780] RBP: 00007f59cfe9b090 R08: 0000000000000000 R09: 0000000000000000
[ 1079.674761][T14780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1079.674773][T14780] R13: 0000000000000000 R14: 00007f59cf1b5fa0 R15: 00007f59cf2dfa28
[ 1079.674804][T14780]  </TASK>
[ 1079.991668][   T30] audit: type=1326 audit(1751810356.403:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14773 comm="syz.2.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa978e929 code=0x7ffc0000
[ 1080.125444][   T30] audit: type=1326 audit(1751810356.403:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14773 comm="syz.2.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2aa972ab19 code=0x7ffc0000
[ 1080.158795][   T30] audit: type=1326 audit(1751810356.403:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14773 comm="syz.2.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2aa972ab19 code=0x7ffc0000
[ 1080.181378][   T30] audit: type=1326 audit(1751810356.403:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14773 comm="syz.2.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa978e929 code=0x7ffc0000
[ 1080.206939][   T30] audit: type=1326 audit(1751810356.403:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14773 comm="syz.2.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2aa972ab19 code=0x7ffc0000
[ 1080.231723][   T30] audit: type=1326 audit(1751810356.403:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14773 comm="syz.2.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa978e929 code=0x7ffc0000
[ 1080.254675][   T30] audit: type=1326 audit(1751810356.403:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14773 comm="syz.2.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2aa978e929 code=0x7ffc0000
[ 1080.283402][   T30] audit: type=1326 audit(1751810356.403:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14773 comm="syz.2.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2aa972ab19 code=0x7ffc0000
[ 1080.305970][   T30] audit: type=1326 audit(1751810356.403:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14773 comm="syz.2.1528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2aa972ab19 code=0x7ffc0000
[ 1080.630087][T14793] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1534'.
[ 1081.052955][T14810] input: syz0 as /devices/virtual/input/input113
[ 1081.250493][T14785] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1081.257440][T14785] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[ 1081.282556][T14785] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1081.337788][T14785] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[ 1081.378187][T14816] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[ 1081.404409][T14785] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1081.421075][T14785] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[ 1081.447475][T14785] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1081.454125][T14785] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[ 1081.541078][T14785] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1081.567639][T14785] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[ 1081.828737][T14819] kernel read not supported for file /eth0 (pid: 14819 comm: syz.0.1542)
[ 1082.363337][ T6003] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[ 1082.383349][ T5941] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[ 1082.515650][ T6003] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1082.533454][ T5941] usb 1-1: Using ep0 maxpacket: 16
[ 1082.545202][ T6003] usb 2-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=9e.06
[ 1082.567310][ T5941] usb 1-1: config 0 has an invalid interface number: 41 but max is 0
[ 1082.582802][ T6003] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1082.595274][ T5941] usb 1-1: config 0 has no interface number 0
[ 1082.606919][ T5941] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 1082.619585][ T6003] usb 2-1: config 0 descriptor??
[ 1082.643530][ T5941] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 1082.660329][ T6003] gspca_main: kinect-2.14.0 probing 045e:02bf
[ 1082.686262][ T5941] usb 1-1: config 0 interface 41 has no altsetting 0
[ 1082.726009][ T5941] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[ 1082.743280][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1082.753362][ T5941] usb 1-1: Product: syz
[ 1082.757589][ T5941] usb 1-1: Manufacturer: syz
[ 1082.778474][ T5941] usb 1-1: SerialNumber: syz
[ 1082.814332][ T5941] usb 1-1: config 0 descriptor??
[ 1082.843132][T14832] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1082.899650][T14832] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1083.097685][T14850] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[ 1083.186845][T14832] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1083.200091][T14832] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 1083.830417][T14860] FAULT_INJECTION: forcing a failure.
[ 1083.830417][T14860] name failslab, interval 1, probability 0, space 0, times 0
[ 1083.879969][T14860] CPU: 0 UID: 0 PID: 14860 Comm: syz.2.1555 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) 
[ 1083.880002][T14860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1083.880015][T14860] Call Trace:
[ 1083.880022][T14860]  <TASK>
[ 1083.880030][T14860]  dump_stack_lvl+0x189/0x250
[ 1083.880061][T14860]  ? __pfx____ratelimit+0x10/0x10
[ 1083.880095][T14860]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1083.880119][T14860]  ? __pfx__printk+0x10/0x10
[ 1083.880150][T14860]  ? __pfx___might_resched+0x10/0x10
[ 1083.880174][T14860]  ? fs_reclaim_acquire+0x7d/0x100
[ 1083.880210][T14860]  should_fail_ex+0x414/0x560
[ 1083.880246][T14860]  should_failslab+0xa8/0x100
[ 1083.880275][T14860]  __kmalloc_cache_noprof+0x70/0x3d0
[ 1083.880299][T14860]  ? rtnl_newlink+0xed/0x1c70
[ 1083.880319][T14860]  ? kasan_save_free_info+0x46/0x50
[ 1083.880341][T14860]  rtnl_newlink+0xed/0x1c70
[ 1083.880362][T14860]  ? netlink_sendmsg+0x805/0xb30
[ 1083.880386][T14860]  ? __sock_sendmsg+0x21c/0x270
[ 1083.880402][T14860]  ? ____sys_sendmsg+0x505/0x830
[ 1083.880426][T14860]  ? ___sys_sendmsg+0x21f/0x2a0
[ 1083.880449][T14860]  ? __x64_sys_sendmsg+0x19b/0x260
[ 1083.880474][T14860]  ? do_syscall_64+0xfa/0x3b0
[ 1083.880495][T14860]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1083.880524][T14860]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1083.880571][T14860]  ? kasan_quarantine_put+0xdd/0x220
[ 1083.880593][T14860]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1083.880620][T14860]  ? nlmon_xmit+0xb0/0x100
[ 1083.880641][T14860]  ? kmem_cache_free+0x18f/0x400
[ 1083.880673][T14860]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1083.880696][T14860]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1083.880723][T14860]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1083.880746][T14860]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1083.880774][T14860]  ? __dev_queue_xmit+0x27e/0x3a70
[ 1083.880817][T14860]  ? __lock_acquire+0xab9/0xd20
[ 1083.880865][T14860]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1083.880888][T14860]  rtnetlink_rcv_msg+0x7cf/0xb70
[ 1083.880916][T14860]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[ 1083.880938][T14860]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1083.880959][T14860]  ? ref_tracker_free+0x63a/0x7d0
[ 1083.880977][T14860]  ? __copy_skb_header+0xa7/0x550
[ 1083.881008][T14860]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1083.881027][T14860]  ? __skb_clone+0x63/0x7a0
[ 1083.881062][T14860]  netlink_rcv_skb+0x208/0x470
[ 1083.881089][T14860]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1083.881114][T14860]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1083.881152][T14860]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1083.881178][T14860]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1083.881209][T14860]  netlink_unicast+0x75b/0x8d0
[ 1083.881245][T14860]  netlink_sendmsg+0x805/0xb30
[ 1083.881281][T14860]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1083.881310][T14860]  ? aa_sock_msg_perm+0x94/0x160
[ 1083.881345][T14860]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1083.881364][T14860]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1083.881391][T14860]  __sock_sendmsg+0x21c/0x270
[ 1083.881415][T14860]  ____sys_sendmsg+0x505/0x830
[ 1083.881449][T14860]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1083.881487][T14860]  ? import_iovec+0x74/0xa0
[ 1083.881517][T14860]  ___sys_sendmsg+0x21f/0x2a0
[ 1083.881549][T14860]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1083.881615][T14860]  ? __fget_files+0x2a/0x420
[ 1083.881655][T14860]  ? __fget_files+0x3a0/0x420
[ 1083.881693][T14860]  __x64_sys_sendmsg+0x19b/0x260
[ 1083.881733][T14860]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1083.881770][T14860]  ? __pfx_ksys_write+0x10/0x10
[ 1083.881791][T14860]  ? rcu_is_watching+0x15/0xb0
[ 1083.881820][T14860]  ? do_syscall_64+0xbe/0x3b0
[ 1083.881844][T14860]  do_syscall_64+0xfa/0x3b0
[ 1083.881861][T14860]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1083.881879][T14860]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1083.881899][T14860]  ? clear_bhb_loop+0x60/0xb0
[ 1083.881923][T14860]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1083.881942][T14860] RIP: 0033:0x7f2aa978e929
[ 1083.881959][T14860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1083.881976][T14860] RSP: 002b:00007f2aaa545038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1083.881996][T14860] RAX: ffffffffffffffda RBX: 00007f2aa99b5fa0 RCX: 00007f2aa978e929
[ 1083.882010][T14860] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[ 1083.882023][T14860] RBP: 00007f2aaa545090 R08: 0000000000000000 R09: 0000000000000000
[ 1083.882035][T14860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1083.882047][T14860] R13: 0000000000000000 R14: 00007f2aa99b5fa0 R15: 00007f2aa9adfa28
[ 1083.882076][T14860]  </TASK>
[ 1084.382558][   T24] usb 2-1: USB disconnect, device number 46
[ 1085.188374][ T5941] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71
[ 1085.211502][ T5941] usb 1-1: USB disconnect, device number 57
[ 1085.273439][ T5895] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[ 1085.501203][T14884] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[ 1085.687365][ T5895] usb 5-1: device descriptor read/64, error -71
[ 1085.933414][ T5895] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[ 1086.083437][ T5895] usb 5-1: device descriptor read/64, error -71
[ 1086.193864][ T5895] usb usb5-port1: attempt power cycle
[ 1086.353363][ T5941] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[ 1086.532112][ T5941] usb 2-1: config 0 has an invalid interface number: 3 but max is 0
[ 1086.562106][ T5941] usb 2-1: config 0 has no interface number 0
[ 1086.574103][ T5895] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[ 1086.618446][ T5895] usb 5-1: device descriptor read/8, error -71
[ 1086.620794][ T5941] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0xD has an invalid bInterval 104, changing to 10
[ 1086.746702][ T5941] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[ 1086.806084][ T5941] usb 2-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=1f.84
[ 1086.889633][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1086.924274][T14905] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[ 1086.974574][ T5895] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[ 1087.080931][ T5895] usb 5-1: device descriptor read/8, error -71
[ 1087.113486][ T5941] usb 2-1: Product: syz
[ 1087.119267][ T5941] usb 2-1: Manufacturer: syz
[ 1087.124357][ T5941] usb 2-1: SerialNumber: syz
[ 1087.188285][ T5941] usb 2-1: config 0 descriptor??
[ 1087.336351][ T5895] usb usb5-port1: unable to enumerate USB device
[ 1087.535861][ T5941] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in warm state.
[ 1087.543470][   T24] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[ 1087.559013][ T5941] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1087.570037][ T5941] dvbdev: DVB: registering new adapter (Medion CTX1921 DVB-T USB)
[ 1087.579165][ T5941] usb 2-1: media controller created
[ 1087.605979][ T5941] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1087.705587][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1087.717575][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1087.743576][   T24] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[ 1087.759389][ T5941] DVB: Unable to find symbol dib7000p_attach()
[ 1087.774145][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1087.783648][ T5941] dvb-usb: no frontend was attached by 'Medion CTX1921 DVB-T USB'
[ 1087.886158][   T24] usb 1-1: config 0 descriptor??
[ 1088.084791][ T5941] rc_core: IR keymap rc-dib0700-rc5 not found
[ 1088.112195][ T5941] Registered IR keymap rc-empty
[ 1088.126413][ T5941] dvb-usb: could not initialize remote control.
[ 1088.153346][ T5941] dvb-usb: Medion CTX1921 DVB-T USB successfully initialized and connected.
[ 1088.321613][   T24] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[ 1088.381727][ T5941] usb 2-1: USB disconnect, device number 47
[ 1088.410749][   T24] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[ 1088.530828][ T5941] dvb-usb: Medion CTX1921 DVB-T USB successfully deinitialized and disconnected.
[ 1088.549391][   T24] cp2112 0003:10C4:EA90.0002: Part Number: 0x82 Device Version: 0xFE
[ 1088.752007][   T24] cp2112 0003:10C4:EA90.0002: error requesting SMBus config
[ 1088.761366][   T24] cp2112 0003:10C4:EA90.0002: probe with driver cp2112 failed with error -32
[ 1088.891669][   T24] usb 1-1: USB disconnect, device number 58
[ 1089.098585][T14920] FAULT_INJECTION: forcing a failure.
[ 1089.098585][T14920] name failslab, interval 1, probability 0, space 0, times 0
[ 1089.136242][T14920] CPU: 1 UID: 0 PID: 14920 Comm: syz.2.1568 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) 
[ 1089.136270][T14920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1089.136281][T14920] Call Trace:
[ 1089.136289][T14920]  <TASK>
[ 1089.136298][T14920]  dump_stack_lvl+0x189/0x250
[ 1089.136328][T14920]  ? __pfx____ratelimit+0x10/0x10
[ 1089.136359][T14920]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1089.136381][T14920]  ? __pfx__printk+0x10/0x10
[ 1089.136413][T14920]  ? __pfx___might_resched+0x10/0x10
[ 1089.136440][T14920]  should_fail_ex+0x414/0x560
[ 1089.136485][T14920]  should_failslab+0xa8/0x100
[ 1089.136511][T14920]  __kmalloc_noprof+0xcb/0x4f0
[ 1089.136533][T14920]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1089.136553][T14920]  ? sk_prot_alloc+0xe7/0x220
[ 1089.136580][T14920]  sk_prot_alloc+0xe7/0x220
[ 1089.136596][T14920]  ? sk_alloc+0x24/0x370
[ 1089.136614][T14920]  sk_alloc+0x3a/0x370
[ 1089.136633][T14920]  af_alg_accept+0xaf/0x520
[ 1089.136654][T14920]  ? do_raw_spin_unlock+0x122/0x240
[ 1089.136677][T14920]  hash_accept+0x169/0x280
[ 1089.136700][T14920]  do_accept+0x48f/0x680
[ 1089.136719][T14920]  ? __pfx_do_accept+0x10/0x10
[ 1089.136749][T14920]  __sys_accept4+0x11c/0x1c0
[ 1089.136766][T14920]  ? __pfx___sys_accept4+0x10/0x10
[ 1089.136781][T14920]  ? __pfx_ksys_write+0x10/0x10
[ 1089.136796][T14920]  ? rcu_is_watching+0x15/0xb0
[ 1089.136817][T14920]  __x64_sys_accept4+0x9a/0xb0
[ 1089.136833][T14920]  do_syscall_64+0xfa/0x3b0
[ 1089.136847][T14920]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1089.136859][T14920]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1089.136873][T14920]  ? clear_bhb_loop+0x60/0xb0
[ 1089.136888][T14920]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1089.136900][T14920] RIP: 0033:0x7f2aa978e929
[ 1089.136913][T14920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1089.136925][T14920] RSP: 002b:00007f2aaa545038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120
[ 1089.136939][T14920] RAX: ffffffffffffffda RBX: 00007f2aa99b5fa0 RCX: 00007f2aa978e929
[ 1089.136948][T14920] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 1089.136956][T14920] RBP: 00007f2aaa545090 R08: 0000000000000000 R09: 0000000000000000
[ 1089.136964][T14920] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001
[ 1089.136971][T14920] R13: 0000000000000000 R14: 00007f2aa99b5fa0 R15: 00007f2aa9adfa28
[ 1089.136997][T14920]  </TASK>
[ 1089.414571][T14926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1571'.
[ 1089.445297][T14926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1571'.
[ 1089.460126][T14928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1572'.
[ 1089.630126][T14938] FAULT_INJECTION: forcing a failure.
[ 1089.630126][T14938] name failslab, interval 1, probability 0, space 0, times 0
[ 1089.662419][T14938] CPU: 1 UID: 0 PID: 14938 Comm: syz.3.1575 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) 
[ 1089.662448][T14938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1089.662459][T14938] Call Trace:
[ 1089.662467][T14938]  <TASK>
[ 1089.662475][T14938]  dump_stack_lvl+0x189/0x250
[ 1089.662504][T14938]  ? __pfx____ratelimit+0x10/0x10
[ 1089.662536][T14938]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1089.662558][T14938]  ? __pfx__printk+0x10/0x10
[ 1089.662596][T14938]  should_fail_ex+0x414/0x560
[ 1089.662631][T14938]  should_failslab+0xa8/0x100
[ 1089.662658][T14938]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[ 1089.662682][T14938]  ? rtnl_prop_list_size+0x1ba/0x1e0
[ 1089.662700][T14938]  ? __alloc_skb+0x112/0x2d0
[ 1089.662727][T14938]  __alloc_skb+0x112/0x2d0
[ 1089.662755][T14938]  rtmsg_ifinfo_build_skb+0x84/0x260
[ 1089.662795][T14938]  rtmsg_ifinfo+0x8c/0x1a0
[ 1089.662819][T14938]  __dev_notify_flags+0xf4/0x2e0
[ 1089.662848][T14938]  ? __pfx___dev_notify_flags+0x10/0x10
[ 1089.662870][T14938]  ? __dev_change_flags+0x4cc/0x6d0
[ 1089.662901][T14938]  ? __pfx___dev_change_flags+0x10/0x10
[ 1089.662939][T14938]  netif_change_flags+0xe8/0x1a0
[ 1089.662970][T14938]  do_setlink+0xc55/0x41c0
[ 1089.662997][T14938]  ? __kernel_text_address+0xd/0x40
[ 1089.663019][T14938]  ? arch_stack_walk+0xfc/0x150
[ 1089.663048][T14938]  ? __pfx_do_setlink+0x10/0x10
[ 1089.663091][T14938]  ? __lock_acquire+0xab9/0xd20
[ 1089.663120][T14938]  ? __mutex_trylock_common+0x153/0x260
[ 1089.663150][T14938]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1089.663179][T14938]  ? rcu_is_watching+0x15/0xb0
[ 1089.663202][T14938]  ? trace_contention_end+0x39/0x120
[ 1089.663238][T14938]  ? __mutex_lock+0x330/0xe80
[ 1089.663261][T14938]  ? __pfx_aa_get_newest_label+0x10/0x10
[ 1089.663295][T14938]  ? rtnl_newlink+0x8db/0x1c70
[ 1089.663316][T14938]  ? rcu_is_watching+0x15/0xb0
[ 1089.663339][T14938]  ? __pfx___mutex_lock+0x10/0x10
[ 1089.663366][T14938]  ? full_name_hash+0x92/0xe0
[ 1089.663401][T14938]  ? netdev_name_node_lookup+0xdf/0x120
[ 1089.663435][T14938]  rtnl_newlink+0x160b/0x1c70
[ 1089.663456][T14938]  ? netlink_sendmsg+0x805/0xb30
[ 1089.663494][T14938]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1089.663540][T14938]  ? kasan_quarantine_put+0xdd/0x220
[ 1089.663562][T14938]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1089.663586][T14938]  ? nlmon_xmit+0xb0/0x100
[ 1089.663606][T14938]  ? kmem_cache_free+0x18f/0x400
[ 1089.663637][T14938]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1089.663660][T14938]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1089.663679][T14938]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1089.663699][T14938]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1089.663725][T14938]  ? __dev_queue_xmit+0x27e/0x3a70
[ 1089.663763][T14938]  ? __lock_acquire+0xab9/0xd20
[ 1089.663807][T14938]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1089.663827][T14938]  rtnetlink_rcv_msg+0x7cf/0xb70
[ 1089.663851][T14938]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[ 1089.663871][T14938]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1089.663890][T14938]  ? ref_tracker_free+0x63a/0x7d0
[ 1089.663907][T14938]  ? __copy_skb_header+0xa7/0x550
[ 1089.663935][T14938]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1089.663951][T14938]  ? __skb_clone+0x63/0x7a0
[ 1089.663985][T14938]  netlink_rcv_skb+0x208/0x470
[ 1089.664012][T14938]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1089.664036][T14938]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1089.664073][T14938]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1089.664097][T14938]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1089.664126][T14938]  netlink_unicast+0x75b/0x8d0
[ 1089.664160][T14938]  netlink_sendmsg+0x805/0xb30
[ 1089.664196][T14938]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1089.664234][T14938]  ? aa_sock_msg_perm+0x94/0x160
[ 1089.664266][T14938]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1089.664284][T14938]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1089.664311][T14938]  __sock_sendmsg+0x21c/0x270
[ 1089.664334][T14938]  ____sys_sendmsg+0x505/0x830
[ 1089.664366][T14938]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1089.664402][T14938]  ? import_iovec+0x74/0xa0
[ 1089.664431][T14938]  ___sys_sendmsg+0x21f/0x2a0
[ 1089.664460][T14938]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1089.664525][T14938]  ? __fget_files+0x2a/0x420
[ 1089.664552][T14938]  ? __fget_files+0x3a0/0x420
[ 1089.664590][T14938]  __x64_sys_sendmsg+0x19b/0x260
[ 1089.664620][T14938]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1089.664658][T14938]  ? __pfx_ksys_write+0x10/0x10
[ 1089.664680][T14938]  ? rcu_is_watching+0x15/0xb0
[ 1089.664707][T14938]  ? do_syscall_64+0xbe/0x3b0
[ 1089.664732][T14938]  do_syscall_64+0xfa/0x3b0
[ 1089.664751][T14938]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1089.664769][T14938]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1089.664787][T14938]  ? clear_bhb_loop+0x60/0xb0
[ 1089.664811][T14938]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1089.664830][T14938] RIP: 0033:0x7f93ab38e929
[ 1089.664848][T14938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1089.664864][T14938] RSP: 002b:00007f93ac2ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1089.664885][T14938] RAX: ffffffffffffffda RBX: 00007f93ab5b5fa0 RCX: 00007f93ab38e929
[ 1089.664899][T14938] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[ 1089.664910][T14938] RBP: 00007f93ac2ce090 R08: 0000000000000000 R09: 0000000000000000
[ 1089.664921][T14938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1089.664931][T14938] R13: 0000000000000000 R14: 00007f93ab5b5fa0 R15: 00007f93ab6dfa28
[ 1089.664961][T14938]  </TASK>
[ 1090.773051][T14942] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[ 1090.845273][T14960] Unknown options in mask 5
[ 1091.033653][   T24] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[ 1091.176947][   T24] usb 3-1: device descriptor read/64, error -71
[ 1091.423401][   T24] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[ 1091.439903][T14986] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[ 1091.453470][T14986] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1592'.
[ 1091.553794][   T24] usb 3-1: device descriptor read/64, error -71
[ 1091.683613][   T24] usb usb3-port1: attempt power cycle
[ 1091.882573][   T30] kauditd_printk_skb: 188 callbacks suppressed
[ 1091.882588][   T30] audit: type=1326 audit(1751810368.623:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15002 comm="syz.3.1596" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93ab38e929 code=0x0
[ 1092.043340][   T24] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[ 1092.064262][   T24] usb 3-1: device descriptor read/8, error -71
[ 1092.093487][ T5941] usb 1-1: new full-speed USB device number 59 using dummy_hcd
[ 1092.246403][ T5941] usb 1-1: not running at top speed; connect to a high speed hub
[ 1092.256012][ T5941] usb 1-1: config 4 has an invalid interface number: 68 but max is 2
[ 1092.264437][ T5895] usb 5-1: new full-speed USB device number 52 using dummy_hcd
[ 1092.265298][ T5941] usb 1-1: config 4 has an invalid interface number: 156 but max is 2
[ 1092.302280][ T5941] usb 1-1: config 4 has an invalid interface number: 155 but max is 2
[ 1092.310689][   T24] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[ 1092.334612][ T5941] usb 1-1: config 4 has no interface number 0
[ 1092.341819][ T5941] usb 1-1: config 4 has no interface number 1
[ 1092.358227][   T24] usb 3-1: device descriptor read/8, error -71
[ 1092.366945][ T5941] usb 1-1: config 4 has no interface number 2
[ 1092.373137][ T5941] usb 1-1: config 4 interface 68 altsetting 12 has a duplicate endpoint with address 0xD, skipping
[ 1092.422807][ T5941] usb 1-1: config 4 interface 156 altsetting 9 endpoint 0xB has invalid maxpacket 512, setting to 64
[ 1092.429465][ T5895] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1092.446457][ T5895] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1092.460115][ T5941] usb 1-1: config 4 interface 156 altsetting 9 endpoint 0x7 has invalid maxpacket 512, setting to 64
[ 1092.460246][ T5895] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1092.506054][   T24] usb usb3-port1: unable to enumerate USB device
[ 1092.506113][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1092.516091][ T5941] usb 1-1: config 4 interface 156 altsetting 9 has a duplicate endpoint with address 0x7, skipping
[ 1092.531829][ T5941] usb 1-1: config 4 interface 156 altsetting 9 has a duplicate endpoint with address 0x4, skipping
[ 1092.553006][ T5941] usb 1-1: config 4 interface 156 altsetting 9 has a duplicate endpoint with address 0x3, skipping
[ 1092.568777][ T5941] usb 1-1: config 4 interface 156 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[ 1092.580208][ T5941] usb 1-1: config 4 interface 155 altsetting 3 has a duplicate endpoint with address 0xD, skipping
[ 1092.591472][ T5941] usb 1-1: config 4 interface 155 altsetting 3 has a duplicate endpoint with address 0xB, skipping
[ 1092.623336][ T5941] usb 1-1: config 4 interface 155 altsetting 3 endpoint 0x2 has invalid maxpacket 1495, setting to 64
[ 1092.644045][ T5941] usb 1-1: config 4 interface 155 altsetting 3 endpoint 0x6 has invalid maxpacket 1040, setting to 64
[ 1092.663398][ T5941] usb 1-1: config 4 interface 68 has no altsetting 0
[ 1092.670186][ T5941] usb 1-1: config 4 interface 156 has no altsetting 0
[ 1092.677194][ T5941] usb 1-1: config 4 interface 155 has no altsetting 0
[ 1092.746712][ T5895] usb 5-1: usb_control_msg returned -32
[ 1092.762798][ T5895] usbtmc 5-1:16.0: can't read capabilities
[ 1093.106534][T15019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1601'.
[ 1094.278068][T15030] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[ 1095.044249][ T5895] usb 5-1: USB disconnect, device number 52
[ 1095.105358][T15033] Cannot find del_set index 0 as target
[ 1095.315291][ T5941] usb 1-1: string descriptor 0 read error: -71
[ 1095.334530][ T5941] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0123, bcdDevice=4a.73
[ 1095.344766][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1095.407182][ T5941] usb 1-1: can't set config #4, error -71
[ 1095.438730][ T5941] usb 1-1: USB disconnect, device number 59
[ 1095.444219][T15039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1095.525402][T15039] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1095.738456][T15050] netlink: 'syz.3.1611': attribute type 1 has an invalid length.
[ 1095.751378][T15050] FAULT_INJECTION: forcing a failure.
[ 1095.751378][T15050] name failslab, interval 1, probability 0, space 0, times 0
[ 1095.773524][T15050] CPU: 1 UID: 0 PID: 15050 Comm: syz.3.1611 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) 
[ 1095.773554][T15050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1095.773566][T15050] Call Trace:
[ 1095.773573][T15050]  <TASK>
[ 1095.773590][T15050]  dump_stack_lvl+0x189/0x250
[ 1095.773616][T15050]  ? __pfx____ratelimit+0x10/0x10
[ 1095.773644][T15050]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1095.773664][T15050]  ? __pfx__printk+0x10/0x10
[ 1095.773690][T15050]  ? __mutex_trylock_common+0x153/0x260
[ 1095.773719][T15050]  should_fail_ex+0x414/0x560
[ 1095.773749][T15050]  should_failslab+0xa8/0x100
[ 1095.773778][T15050]  __kmalloc_cache_noprof+0x70/0x3d0
[ 1095.773800][T15050]  ? __hw_addr_add_ex+0x1f4/0x770
[ 1095.773830][T15050]  __hw_addr_add_ex+0x1f4/0x770
[ 1095.773864][T15050]  dev_addr_init+0x14f/0x230
[ 1095.773894][T15050]  ? __pfx_dev_addr_init+0x10/0x10
[ 1095.773916][T15050]  ? alloc_netdev_mqs+0xa6/0x11e0
[ 1095.773957][T15050]  alloc_netdev_mqs+0x2f3/0x11e0
[ 1095.773984][T15050]  ? __pfx_bond_setup+0x10/0x10
[ 1095.774010][T15050]  rtnl_create_link+0x31f/0xd10
[ 1095.774046][T15050]  rtnl_newlink_create+0x25c/0xb00
[ 1095.774077][T15050]  ? __pfx_aa_get_newest_label+0x10/0x10
[ 1095.774112][T15050]  ? __pfx_rtnl_newlink_create+0x10/0x10
[ 1095.774135][T15050]  ? rtnl_newlink+0x8db/0x1c70
[ 1095.774158][T15050]  ? __pfx___mutex_lock+0x10/0x10
[ 1095.774188][T15050]  ? ns_capable+0x8a/0xf0
[ 1095.774214][T15050]  rtnl_newlink+0x16d6/0x1c70
[ 1095.774236][T15050]  ? netlink_sendmsg+0x805/0xb30
[ 1095.774273][T15050]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1095.774318][T15050]  ? kasan_quarantine_put+0xdd/0x220
[ 1095.774340][T15050]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1095.774365][T15050]  ? nlmon_xmit+0xb0/0x100
[ 1095.774385][T15050]  ? kmem_cache_free+0x18f/0x400
[ 1095.774417][T15050]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1095.774441][T15050]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1095.774465][T15050]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1095.774488][T15050]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1095.774513][T15050]  ? __dev_queue_xmit+0x27e/0x3a70
[ 1095.774556][T15050]  ? __lock_acquire+0xab9/0xd20
[ 1095.774609][T15050]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1095.774630][T15050]  rtnetlink_rcv_msg+0x7cf/0xb70
[ 1095.774657][T15050]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[ 1095.774678][T15050]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1095.774698][T15050]  ? ref_tracker_free+0x63a/0x7d0
[ 1095.774714][T15050]  ? __copy_skb_header+0xa7/0x550
[ 1095.774743][T15050]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1095.774761][T15050]  ? __skb_clone+0x63/0x7a0
[ 1095.774796][T15050]  netlink_rcv_skb+0x208/0x470
[ 1095.774822][T15050]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1095.774847][T15050]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1095.774885][T15050]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1095.774909][T15050]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1095.774940][T15050]  netlink_unicast+0x75b/0x8d0
[ 1095.774974][T15050]  netlink_sendmsg+0x805/0xb30
[ 1095.775010][T15050]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1095.775038][T15050]  ? aa_sock_msg_perm+0x94/0x160
[ 1095.775068][T15050]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1095.775086][T15050]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1095.775110][T15050]  __sock_sendmsg+0x21c/0x270
[ 1095.775132][T15050]  ____sys_sendmsg+0x505/0x830
[ 1095.775161][T15050]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1095.775192][T15050]  ? import_iovec+0x74/0xa0
[ 1095.775216][T15050]  ___sys_sendmsg+0x21f/0x2a0
[ 1095.775242][T15050]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1095.775297][T15050]  ? __fget_files+0x2a/0x420
[ 1095.775320][T15050]  ? __fget_files+0x3a0/0x420
[ 1095.775354][T15050]  __x64_sys_sendmsg+0x19b/0x260
[ 1095.775380][T15050]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1095.775412][T15050]  ? __pfx_ksys_write+0x10/0x10
[ 1095.775431][T15050]  ? rcu_is_watching+0x15/0xb0
[ 1095.775456][T15050]  ? do_syscall_64+0xbe/0x3b0
[ 1095.775477][T15050]  do_syscall_64+0xfa/0x3b0
[ 1095.775493][T15050]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1095.775508][T15050]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1095.775525][T15050]  ? clear_bhb_loop+0x60/0xb0
[ 1095.775545][T15050]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1095.775562][T15050] RIP: 0033:0x7f93ab38e929
[ 1095.775583][T15050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1095.775597][T15050] RSP: 002b:00007f93ac2ce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1095.775616][T15050] RAX: ffffffffffffffda RBX: 00007f93ab5b5fa0 RCX: 00007f93ab38e929
[ 1095.775633][T15050] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004
[ 1095.775643][T15050] RBP: 00007f93ac2ce090 R08: 0000000000000000 R09: 0000000000000000
[ 1095.775653][T15050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1095.775664][T15050] R13: 0000000000000000 R14: 00007f93ab5b5fa0 R15: 00007f93ab6dfa28
[ 1095.775690][T15050]  </TASK>
[ 1096.248328][ T5895] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[ 1096.267902][ T5941] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[ 1096.420121][ T5941] usb 1-1: device descriptor read/64, error -71
[ 1096.454974][ T5895] usb 3-1: Using ep0 maxpacket: 8
[ 1096.477813][ T5895] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[ 1096.487377][T15062] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1613'.
[ 1096.495504][ T5895] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1096.531665][ T5895] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1096.549015][ T5895] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1096.559678][ T5895] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1096.723562][ T5941] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[ 1096.766518][ T5895] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1096.799602][ T5895] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1096.863916][ T5941] usb 1-1: device descriptor read/64, error -71
[ 1096.973633][ T5941] usb usb1-port1: attempt power cycle
[ 1097.046875][ T5895] usb 3-1: GET_CAPABILITIES returned 0
[ 1097.058990][ T5895] usbtmc 3-1:16.0: can't read capabilities
[ 1097.266351][ T5895] usb 3-1: USB disconnect, device number 52
[ 1097.324066][ T5941] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[ 1097.364847][ T5941] usb 1-1: device descriptor read/8, error -71
[ 1097.603475][ T5941] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[ 1097.626962][ T5941] usb 1-1: device descriptor read/8, error -71
[ 1097.743580][ T5941] usb usb1-port1: unable to enumerate USB device
[ 1098.273411][ T5941] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[ 1098.321383][T15086] loop8: detected capacity change from 0 to 1
[ 1098.345766][ T6674] Dev loop8: unable to read RDB block 1
[ 1098.356154][ T6674]  loop8: unable to read partition table
[ 1098.371447][ T6674] loop8: partition table beyond EOD, truncated
[ 1098.395156][T15086] Dev loop8: unable to read RDB block 1
[ 1098.400982][T15086]  loop8: unable to read partition table
[ 1098.417341][T15086] loop8: partition table beyond EOD, truncated
[ 1098.439790][ T5941] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1098.458144][T15086] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[ 1098.468089][ T5941] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1098.514393][ T5941] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00
[ 1098.560215][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1098.593740][ T5941] usb 5-1: config 0 descriptor??
[ 1099.353405][ T5941] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[ 1099.513389][ T5941] usb 2-1: Using ep0 maxpacket: 32
[ 1099.537479][ T5941] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[ 1099.550841][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1099.576982][ T5941] usb 2-1: Product: syz
[ 1099.637067][T15116] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1627'.
[ 1099.678046][ T5941] usb 2-1: Manufacturer: syz
[ 1099.690580][ T5941] usb 2-1: SerialNumber: syz
[ 1099.731390][ T5941] usb 2-1: config 0 descriptor??
[ 1099.794251][T15118] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1632'.
[ 1099.967910][ T5941] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 048
[ 1100.167337][ T5941] usb 2-1: USB disconnect, device number 48
[ 1100.246290][T15129] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1100.558595][   T30] audit: type=1326 audit(1751810377.303:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15137 comm="syz.3.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ab38e929 code=0x7ffc0000
[ 1100.581024][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1100.588255][   T30] audit: type=1326 audit(1751810377.303:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15137 comm="syz.3.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ab38e929 code=0x7ffc0000
[ 1100.612849][   T30] audit: type=1326 audit(1751810377.333:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15137 comm="syz.3.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f93ab38e929 code=0x7ffc0000
[ 1100.676722][   T30] audit: type=1326 audit(1751810377.423:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15137 comm="syz.3.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ab38e929 code=0x7ffc0000
[ 1100.699153][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1100.705779][   T30] audit: type=1326 audit(1751810377.423:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15137 comm="syz.3.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93ab38e929 code=0x7ffc0000
[ 1100.766806][T15143] netlink: 'syz.3.1638': attribute type 1 has an invalid length.
[ 1101.045031][ T6003] usb 5-1: USB disconnect, device number 53
[ 1101.167120][T15157] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1644'.
[ 1101.196507][T15157] netlink: 'syz.1.1644': attribute type 8 has an invalid length.
[ 1101.214797][T15157] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check.
[ 1101.503352][ T6003] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[ 1101.671322][T15169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1101.681323][ T6003] usb 1-1: Using ep0 maxpacket: 16
[ 1101.688419][ T6003] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[ 1101.698001][ T6003] usb 1-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config
[ 1101.708481][ T6003] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1101.718371][T15169] syz_tun: entered allmulticast mode
[ 1101.720558][ T6003] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1101.734379][ T6003] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1101.742415][ T6003] usb 1-1: Product: syz
[ 1101.746677][ T6003] usb 1-1: Manufacturer: syz
[ 1101.751311][ T6003] usb 1-1: SerialNumber: syz
[ 1101.793661][T15169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1101.865534][T15168] syz_tun: left allmulticast mode
[ 1101.899324][T15174] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1651'.
[ 1102.168836][ T6003] usb 1-1: 0:2 : does not exist
[ 1102.193337][ T5941] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[ 1102.344056][ T5941] usb 4-1: too many configurations: 22, using maximum allowed: 8
[ 1102.364150][ T5941] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1102.375456][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1102.383876][ T5941] usb 4-1: Product: syz
[ 1102.388196][ T5941] usb 4-1: Manufacturer: syz
[ 1102.392853][ T5941] usb 4-1: SerialNumber: syz
[ 1102.434762][ T5941] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1102.529288][T15113] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1102.541239][T15188] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[ 1102.575956][T15159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1102.642861][T15159] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1102.846681][   T24] usb 4-1: USB disconnect, device number 63
[ 1103.643913][T15198] sctp: [Deprecated]: syz.2.1656 (pid 15198) Use of int in maxseg socket option.
[ 1103.643913][T15198] Use struct sctp_assoc_value instead
[ 1103.700625][T15198] netlink: 'syz.2.1656': attribute type 10 has an invalid length.
[ 1103.708966][T15198] veth0_vlan: left promiscuous mode
[ 1103.716475][T15198] veth0_vlan: entered promiscuous mode
[ 1103.725867][T15198] team0: Device veth0_vlan failed to register rx_handler
[ 1103.796166][T15113] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[ 1103.923862][T15113] ath9k_htc: Failed to initialize the device
[ 1104.105972][   T24] usb 4-1: ath9k_htc: USB layer deinitialized
[ 1104.167584][ T6003] usb 1-1: 1:0: failed to get current value for ch 0 (-22)
[ 1104.168669][T15202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1657'.
[ 1104.231434][ T6003] usb 1-1: USB disconnect, device number 64
[ 1104.315584][T15202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1657'.
[ 1104.853579][ T5895] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[ 1105.026192][ T5895] usb 2-1: Using ep0 maxpacket: 8
[ 1105.079960][ T5895] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x73, changing to 0x3
[ 1105.092178][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1105.103803][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1105.118326][ T5895] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[ 1105.128195][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1105.137915][ T5895] usb 2-1: Product: syz
[ 1105.142215][ T5895] usb 2-1: Manufacturer: syz
[ 1105.147244][ T5895] usb 2-1: SerialNumber: syz
[ 1105.166607][ T5895] usb 2-1: config 0 descriptor??
[ 1105.175353][ T5895] streamzap 2-1:0.0: streamzap_probe: endpoint doesn't match input device 0203
[ 1105.707885][ T6003] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[ 1105.746989][T15233] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[ 1105.988976][ T6003] usb 1-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30
[ 1106.010169][ T6003] usb 1-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1
[ 1106.035288][ T6003] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1106.113401][ T6003] usb 1-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101
[ 1106.156582][ T6003] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1106.178230][ T6003] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1106.443829][ T6003] ath6kl: Failed to submit usb control message: -71
[ 1106.450528][ T6003] ath6kl: unable to send the bmi data to the device: -71
[ 1106.463718][ T6003] ath6kl: Unable to send get target info: -71
[ 1106.482319][ T6003] ath6kl: Failed to init ath6kl core: -71
[ 1106.559615][ T6003] ath6kl_usb 1-1:4.0: probe with driver ath6kl_usb failed with error -71
[ 1106.610893][ T6003] usb 1-1: USB disconnect, device number 65
[ 1106.767224][T15238] netlink: 'syz.2.1667': attribute type 9 has an invalid length.
[ 1106.802266][T15238] netlink: 'syz.2.1667': attribute type 7 has an invalid length.
[ 1106.832618][T15238] netlink: 'syz.2.1667': attribute type 8 has an invalid length.
[ 1107.523353][ T5851] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[ 1107.697009][ T5851] usb 5-1: config 0 has an invalid interface number: 98 but max is 0
[ 1107.705385][ T5851] usb 5-1: config 0 has no interface number 0
[ 1107.721195][ T5851] usb 5-1: config 0 interface 98 has no altsetting 0
[ 1107.745498][ T5851] usb 5-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24
[ 1107.762093][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1107.785287][T15258] vlan2: entered allmulticast mode
[ 1107.790776][T15258] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[ 1107.862383][ T5851] usb 5-1: Product: syz
[ 1107.884707][ T5851] usb 5-1: Manufacturer: syz
[ 1107.895367][ T5851] usb 5-1: SerialNumber: syz
[ 1107.920632][ T5851] usb 5-1: config 0 descriptor??
[ 1107.935878][ T5941] usb 2-1: USB disconnect, device number 49
[ 1108.101490][T15266] netlink: 'syz.1.1676': attribute type 11 has an invalid length.
[ 1108.152103][ T5851] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II
[ 1108.185508][T15271] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1678'.
[ 1108.195523][T15271] netlink: 'syz.0.1678': attribute type 7 has an invalid length.
[ 1108.203652][T15271] netlink: 'syz.0.1678': attribute type 8 has an invalid length.
[ 1108.211650][T15271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1678'.
[ 1108.390367][T15277] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1677'.
[ 1108.483368][ T5941] usb 2-1: new full-speed USB device number 50 using dummy_hcd
[ 1108.553541][   T24] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[ 1108.654675][ T5941] usb 2-1: not running at top speed; connect to a high speed hub
[ 1108.665254][ T5941] usb 2-1: config 5 has an invalid interface number: 99 but max is 0
[ 1108.673916][ T5941] usb 2-1: config 5 has no interface number 0
[ 1108.680367][ T5941] usb 2-1: config 5 interface 99 altsetting 129 endpoint 0x2 has invalid maxpacket 1023, setting to 64
[ 1108.692610][ T5941] usb 2-1: config 5 interface 99 altsetting 129 endpoint 0xB has invalid maxpacket 1024, setting to 64
[ 1108.705212][ T5941] usb 2-1: config 5 interface 99 altsetting 129 has an invalid descriptor for endpoint zero, skipping
[ 1108.716943][ T5941] usb 2-1: config 5 interface 99 altsetting 129 has an endpoint descriptor with address 0x5F, changing to 0xF
[ 1108.729686][ T5941] usb 2-1: config 5 interface 99 altsetting 129 endpoint 0xF has invalid maxpacket 61911, setting to 64
[ 1108.741571][ T5941] usb 2-1: config 5 interface 99 altsetting 129 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 1108.756265][ T5941] usb 2-1: config 5 interface 99 has no altsetting 0
[ 1108.766843][ T5941] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a0d, bcdDevice=65.15
[ 1108.776896][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1108.785760][ T5941] usb 2-1: Product: syz
[ 1108.791264][ T5941] usb 2-1: Manufacturer: ᖍ処㏀琛꒜軻롿쟘柒ꌘ㤱Ⲳ坈Ӂ쵻푭艜톥堞Ẕ地湰麸鈯ㆾྲ큽ଁ鰨蓻눭㠀犴ﮡ줡㎜픧嚱礬䤈쀺嚇䵲⾘㦟脖怪쨲䇉㠻
[ 1108.813531][   T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 1108.823518][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1108.831576][   T24] usb 1-1: Product: syz
[ 1108.834836][ T5851] usb 5-1: reset high-speed USB device number 54 using dummy_hcd
[ 1108.836499][ T5941] usb 2-1: SerialNumber: syz
[ 1108.848958][   T24] usb 1-1: Manufacturer: syz
[ 1108.865879][   T24] usb 1-1: SerialNumber: syz
[ 1108.871883][T15266] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1108.881575][ T5895] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[ 1108.904681][   T24] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 1108.936540][ T6003] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 1109.120659][T15281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1681'.
[ 1109.124430][ T5895] usb 3-1: Using ep0 maxpacket: 8
[ 1109.130577][ T5941] usb 2-1: USB disconnect, device number 50
[ 1109.158720][ T5895] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[ 1109.172299][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1109.180837][ T5895] usb 3-1: Product: syz
[ 1109.185614][ T5895] usb 3-1: Manufacturer: syz
[ 1109.190288][ T5895] usb 3-1: SerialNumber: syz
[ 1109.201524][T15282] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1681'.
[ 1109.221875][T15282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1681'.
[ 1109.238033][ T5895] usb 3-1: config 0 descriptor??
[ 1109.238179][T15282] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1681'.
[ 1109.267861][ T5895] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244)
[ 1109.362395][ T5851] usb 5-1: failed to restore interface 98 altsetting 4 (error=-71)
[ 1109.375613][ T5851] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware
[ 1109.383812][ T5851] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw
[ 1109.393200][    T9] usb 5-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2
[ 1109.407544][ T5851] usb 5-1: USB disconnect, device number 54
[ 1109.421832][    T9] usb 5-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw
[ 1109.442242][T15276] sctp: [Deprecated]: syz.0.1679 (pid 15276) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1109.442242][T15276] Use struct sctp_sack_info instead
[ 1109.456729][    T9] ------------[ cut here ]------------
[ 1109.465248][    T9] WARNING: CPU: 0 PID: 9 at fs/kernfs/dir.c:537 kernfs_get+0x72/0x90
[ 1109.473481][    T9] Modules linked in:
[ 1109.477741][    T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) 
[ 1109.489682][    T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1109.499869][    T9] Workqueue: events request_firmware_work_func
[ 1109.506141][    T9] RIP: 0010:kernfs_get+0x72/0x90
[ 1109.511188][    T9] Code: e8 33 cf 62 ff 48 89 df be 04 00 00 00 e8 96 54 c6 ff f0 ff 03 eb 05 e8 1c cf 62 ff 5b 5d c3 cc cc cc cc cc e8 0f cf 62 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 95
[ 1109.531640][    T9] RSP: 0018:ffffc900000e75e0 EFLAGS: 00010293
[ 1109.538165][    T9] RAX: ffffffff825d8f81 RBX: ffff888024570870 RCX: ffff88801d2a0000
[ 1109.546615][    T9] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1109.554998][    T9] RBP: 0000000000000000 R08: ffff888024570873 R09: 1ffff110048ae10e
[ 1109.563025][    T9] R10: dffffc0000000000 R11: ffffed10048ae10f R12: ffff88807f7e4428
[ 1109.571442][    T9] R13: 1ffff1100fefc886 R14: ffff88807f7e4430 R15: 1ffff1100fefc885
[ 1109.580003][    T9] FS:  0000000000000000(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000
[ 1109.589022][    T9] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1109.595699][    T9] CR2: 0000001b31112ff8 CR3: 00000000308bc000 CR4: 00000000003526f0
[ 1109.603765][    T9] Call Trace:
[ 1109.607102][    T9]  <TASK>
[ 1109.610175][    T9]  kobject_add_internal+0x632/0xb40
[ 1109.615600][    T9]  kobject_add+0x155/0x220
[ 1109.620093][    T9]  ? __pfx_kobject_add+0x10/0x10
[ 1109.625145][    T9]  ? kobject_init+0x83/0x1e0
[ 1109.629806][    T9]  get_device_parent+0x316/0x3a0
[ 1109.634875][    T9]  device_add+0x2e1/0xb50
[ 1109.639277][    T9]  firmware_fallback_sysfs+0x2e4/0x9b0
[ 1109.644855][    T9]  _request_firmware+0xf83/0x15b0
[ 1109.649980][    T9]  ? __pfx__request_firmware+0x10/0x10
[ 1109.655713][    T9]  ? process_scheduled_works+0x9ef/0x17b0
[ 1109.661592][    T9]  request_firmware_work_func+0xaf/0x1c0
[ 1109.667409][    T9]  ? process_scheduled_works+0x9ef/0x17b0
[ 1109.673246][    T9]  process_scheduled_works+0xade/0x17b0
[ 1109.678892][    T9]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1109.684976][    T9]  worker_thread+0x8a0/0xda0
[ 1109.689810][    T9]  kthread+0x70e/0x8a0
[ 1109.694102][    T9]  ? __pfx_worker_thread+0x10/0x10
[ 1109.699305][    T9]  ? __pfx_kthread+0x10/0x10
[ 1109.704024][    T9]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1109.709324][    T9]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1109.714669][    T9]  ? __pfx_kthread+0x10/0x10
[ 1109.719432][    T9]  ret_from_fork+0x3fc/0x770
[ 1109.724219][    T9]  ? __pfx_ret_from_fork+0x10/0x10
[ 1109.729504][    T9]  ? __switch_to_asm+0x39/0x70
[ 1109.734541][    T9]  ? __switch_to_asm+0x33/0x70
[ 1109.739392][    T9]  ? __pfx_kthread+0x10/0x10
[ 1109.744083][    T9]  ret_from_fork_asm+0x1a/0x30
[ 1109.748936][    T9]  </TASK>
[ 1109.752061][    T9] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1109.759429][    T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) 
[ 1109.771441][    T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1109.781897][    T9] Workqueue: events request_firmware_work_func
[ 1109.788106][    T9] Call Trace:
[ 1109.791409][    T9]  <TASK>
[ 1109.794394][    T9]  dump_stack_lvl+0x99/0x250
[ 1109.799031][    T9]  ? __asan_memcpy+0x40/0x70
[ 1109.803670][    T9]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1109.808919][    T9]  ? __pfx__printk+0x10/0x10
[ 1109.813570][    T9]  panic+0x2db/0x790
[ 1109.817511][    T9]  ? __pfx_panic+0x10/0x10
[ 1109.821966][    T9]  ? show_trace_log_lvl+0x4fb/0x550
[ 1109.827211][    T9]  ? ret_from_fork_asm+0x1a/0x30
[ 1109.832222][    T9]  __warn+0x31b/0x4b0
[ 1109.836237][    T9]  ? kernfs_get+0x72/0x90
[ 1109.840621][    T9]  ? kernfs_get+0x72/0x90
[ 1109.844993][    T9]  report_bug+0x2be/0x4f0
[ 1109.849380][    T9]  ? kernfs_get+0x72/0x90
[ 1109.853754][    T9]  ? kernfs_get+0x72/0x90
[ 1109.858124][    T9]  ? kernfs_get+0x74/0x90
[ 1109.862487][    T9]  handle_bug+0x84/0x160
[ 1109.866766][    T9]  exc_invalid_op+0x1a/0x50
[ 1109.871311][    T9]  asm_exc_invalid_op+0x1a/0x20
[ 1109.876194][    T9] RIP: 0010:kernfs_get+0x72/0x90
[ 1109.881186][    T9] Code: e8 33 cf 62 ff 48 89 df be 04 00 00 00 e8 96 54 c6 ff f0 ff 03 eb 05 e8 1c cf 62 ff 5b 5d c3 cc cc cc cc cc e8 0f cf 62 ff 90 <0f> 0b 90 eb d6 89 d9 80 e1 07 80 c1 03 38 c1 7c b6 48 89 df e8 95
[ 1109.900831][    T9] RSP: 0018:ffffc900000e75e0 EFLAGS: 00010293
[ 1109.906952][    T9] RAX: ffffffff825d8f81 RBX: ffff888024570870 RCX: ffff88801d2a0000
[ 1109.914965][    T9] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1109.922975][    T9] RBP: 0000000000000000 R08: ffff888024570873 R09: 1ffff110048ae10e
[ 1109.931006][    T9] R10: dffffc0000000000 R11: ffffed10048ae10f R12: ffff88807f7e4428
[ 1109.939013][    T9] R13: 1ffff1100fefc886 R14: ffff88807f7e4430 R15: 1ffff1100fefc885
[ 1109.947027][    T9]  ? kernfs_get+0x71/0x90
[ 1109.951420][    T9]  kobject_add_internal+0x632/0xb40
[ 1109.956667][    T9]  kobject_add+0x155/0x220
[ 1109.961139][    T9]  ? __pfx_kobject_add+0x10/0x10
[ 1109.966125][    T9]  ? kobject_init+0x83/0x1e0
[ 1109.970763][    T9]  get_device_parent+0x316/0x3a0
[ 1109.975815][    T9]  device_add+0x2e1/0xb50
[ 1109.980186][    T9]  firmware_fallback_sysfs+0x2e4/0x9b0
[ 1109.985711][    T9]  _request_firmware+0xf83/0x15b0
[ 1109.990792][    T9]  ? __pfx__request_firmware+0x10/0x10
[ 1109.996309][    T9]  ? process_scheduled_works+0x9ef/0x17b0
[ 1110.002078][    T9]  request_firmware_work_func+0xaf/0x1c0
[ 1110.007752][    T9]  ? process_scheduled_works+0x9ef/0x17b0
[ 1110.013513][    T9]  process_scheduled_works+0xade/0x17b0
[ 1110.019134][    T9]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1110.025174][    T9]  worker_thread+0x8a0/0xda0
[ 1110.029834][    T9]  kthread+0x70e/0x8a0
[ 1110.033973][    T9]  ? __pfx_worker_thread+0x10/0x10
[ 1110.039124][    T9]  ? __pfx_kthread+0x10/0x10
[ 1110.043780][    T9]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1110.049134][    T9]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1110.054360][    T9]  ? __pfx_kthread+0x10/0x10
[ 1110.059000][    T9]  ret_from_fork+0x3fc/0x770
[ 1110.063633][    T9]  ? __pfx_ret_from_fork+0x10/0x10
[ 1110.068785][    T9]  ? __switch_to_asm+0x39/0x70
[ 1110.073590][    T9]  ? __switch_to_asm+0x33/0x70
[ 1110.078392][    T9]  ? __pfx_kthread+0x10/0x10
[ 1110.083029][    T9]  ret_from_fork_asm+0x1a/0x30
[ 1110.087851][    T9]  </TASK>
[ 1110.093328][    T9] Kernel Offset: disabled
[ 1110.097689][    T9] Rebooting in 86400 seconds..