last executing test programs:

5.924948359s ago: executing program 1 (id=1240):
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0xf0}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15f4}]]}, 0x38}}, 0x0)
bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e21}, 0x10)
connect$inet(r2, &(0x7f0000000180), 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(camellia))\x00'}, 0x58)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
timer_create(0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
preadv(r7, &(0x7f00000007c0)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x80, 0xd, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x8050}, 0x20004084)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xb}, 0x1c)
ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f000001aa80)={{r7}, "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"})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x30000005}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff7a0af0fff8ffffff61a4f0ff000000001f040000000000003f000000000000005504000001ed0a0025000000170000000f030000000000007b0a00fe000000006e04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be3619184a0b139d8d4209c8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d8582755a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c8216feb1a69005bbe781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fc8706869ada11390d4dbcf840fa68e7d7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e224e67f1231bd236ed200073824d93c4e1a0f50a74bb4850486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd239e4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cafffe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f80893220800c523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe917d1767e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075f1488d22230592a79000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783f26d0a52aefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9f0284405e3127dde7e41285fbe0bdd370c06c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe9c3500800000087de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c796369f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed90000800847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d680000000000"], &(0x7f00000001c0)='GPL\x00'}, 0x48)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

4.926329778s ago: executing program 1 (id=1245):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0xb0)
connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0xc, &(0x7f0000001640), 0x4)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601100fe0f040b067c55a1bc0009001e0006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0d0300000000fdffffff04"], 0x14}}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
write$binfmt_script(r0, &(0x7f0000000580)={'#! ', './file0'}, 0xb)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)

4.734548253s ago: executing program 2 (id=1247):
openat$userio(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2)
r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={r1, 0x0, 0x0, 0x1000})
fcntl$dupfd(r2, 0x0, r2)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x300}, 0x0, 0x0, 0x0, 0x0)
r3 = gettid()
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}})
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f00000003c0)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="000010000093155fa8b22a08f3176f6ed1ad8700000057be595c85bfe9ac8122e7"], 0x0, 0x0, 0x0}, 0x0)
r6 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r6, 0xc018480b, &(0x7f0000000080)={0x2, 0xffffffff})
fchdir(0xffffffffffffffff)
syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0)
fchmodat(0xffffffffffffffff, 0x0, 0x0)
write$rfkill(r7, &(0x7f00000004c0)={0x0, 0x2, 0x3, 0x1}, 0x8)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, 0x0)
syz_emit_ethernet(0x4e, 0x0, 0x0)

4.705786928s ago: executing program 1 (id=1248):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x7b0, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x780, 0x2, [@TCA_CGROUP_ACT={0x77c, 0x1, [@m_ct={0x100, 0x1e, 0x0, 0x0, {{0x7}, {0x70, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfffffbc7, 0x4, 0x1, 0x81, 0x3}}, @TCA_CT_ACTION={0x6}, @TCA_CT_ACTION={0x6, 0x3, 0x5}, @TCA_CT_LABELS_MASK={0x14, 0x8, "1780707e6ab86e761f94c7eb1af30e10"}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_PARMS={0x18, 0x1, {0x6, 0x9, 0xffffffffffffffff, 0x7fffffff, 0x1a4c}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @empty}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}]}, {0x6c, 0x6, "cacbce8fcbc3293ee47c52e0b4f41efd19af032a043385b148d1c912f839cbab91e261bbb71383158f813cba1dee126185abc8f81748a7f700858b88c94548e465a82361061322502a853c5858e600aab1661b2cc9082dd3c3c6d8e0af7554224639f9310f1498ab"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0x84, 0xe, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x3f2, 0x5, 0xfffffff8, 0x4}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}]}, {0x33, 0x6, "37377a386fb848ea13d155d6297c12f28d9f643b2cace47a8cdf058196eb44cd1cc18fbcef0bde624bdd4e7876ccba"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x188, 0xf, 0x0, 0x0, {{0xd}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x195, 0x18251cbd, 0x6, 0x8, 0xbfd6}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfff, 0x5, 0x3, 0xa3f, 0x8}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xb1}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x9, 0x0, 0x5, 0x94ca}, 0xfffe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x20000000, 0x1, 0xfff}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x800, 0x4, 0x0, 0x6}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1000, 0x8, 0x4, 0xfffff952, 0x6}, 0x4d6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x23fb4195, 0x7, 0x0, 0xfffffff9, 0xe7}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x3, 0x60000001, 0x3, 0x8}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x5, 0x5, 0x400, 0x2}, 0xa}}]}, {0x3f, 0x6, "47d9de2590830fb3885425dfbd2e0a26ec384dd226cc2e9085361b92590bb6eb7a0ba535abf0f35879c43e01db0a01e9a401a1b51f2a7a183652b3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_mpls={0xe0, 0x5, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x586, 0x20000000, 0x1}, 0x3}}]}, {0x98, 0x6, "c7d84429d67525b3238abbd310f4f8f5ddd1d3bd94a021b2f32ed292c3f10da13935c623580fa46fa101352fbe8e02e1a1d14e8507faf53dffb74527a35cb09c2833f761201fcfc0ece534e9432785b46b3e8c026d2f573f188eec8fb76dc97b31b7d56e58d1bc6d0838d63fbb00ed2cac5d56b6faf052d974d713e7d3bdf79eb05098ce1304ab6ffb779580bb25789a661aa506"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x90, 0x1a, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x6}]}, {0x5a, 0x6, "197ef632b22bf3c79bc760424562828cf4742bac24f0ba816129124848d3593c1ca6894a4289332b138bc5e66fe806a5dbc366956ee85a36828ad6356502781523077445ce33ceb75a7cc7371409cf36123da5b00f62"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_simple={0xc8, 0xb, 0x0, 0x0, {{0xb}, {0x4}, {0x9a, 0x6, "390b8784d0f102663502cca303ffa29521cf094135e909cc3deffe04ec033a783a3e4c4dfc10e06f840a4a6f2e7eeba1002d94cd4f72320530e510e8de5ec84f3dd75e3265e1d00b0b330c997891784ffaf8ddd69475d61f416c7641e8d1887f6090ec25d601168f20cb464233d697137d1a8f76ed57e004935f874b859b01203959ac74d7e084c9567f143113ea3ec3be0717560967"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x124, 0x13, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x1000, 0x3, 0x2, 0x9}, 0x1d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xfffffbff, 0x5, 0x800, 0x9}, 0x33}}]}, {0xbf, 0x6, "2d81fafcd088bb2bd563c25335db37109556d1163168da1e37b80874090ecfb61e5670fb8f7c2589a54cc11c0121af02a6fd11121b885f60cc64f06559877cf617c76119a9a085f82e318b81b3f9c13db56759aa9de5b023c915252bc9a44789e5a1b21d0484d7ec93dfe606d12d8ad678c4fc8d3a62bf348b933fc7cc81880394c8aa0e1d911d4ed3b12391c93242fd19ab2648cd3db2d70394a98852126f47e80bcfd604dc08a457d63d1e256fcc7b3ce50b61a0d7aced65c574"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_simple={0xa8, 0x5, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x9, 0x3, 0x0, 0x492e}}, @TCA_DEF_DATA={0x6, 0x3, ',\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x0, 0x0, 0x0, 0x9d}}, @TCA_DEF_DATA={0x9, 0x3, 'flow\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffffc, 0x4000000, 0x20000000, 0x8000, 0x7}}]}, {0x1d, 0x6, "b2028bef72f08caa1223bcc609167ee84b1019879ef1721be2"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_csum={0x68, 0x0, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x7, 0x1}}}, @TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7b0}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

4.504310893s ago: executing program 1 (id=1249):
socket$kcm(0x10, 0x0, 0x10)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x90c20}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x78}, 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040))
bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r3}, 0x8)
ioctl$SIOCSIFHWADDR(r2, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100))
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, 0xffffffffffffffff, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000040)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f00000001c0)=[@enter_looper], 0x4, 0x0, &(0x7f0000000080)="ecfa2a69"})
write$binfmt_elf32(r4, 0x0, 0x58)
io_submit(0x0, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0}])
r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$6lowpan_control(r6, &(0x7f0000000080)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e)
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000001200)=ANY=[@ANYRESHEX=r0, @ANYRESHEX, @ANYRES8, @ANYBLOB="431213260baba9e836b435e63bc9fcdc589f226e69dc57b995b21e7e15fe31af606d6e5a96b58947819cabd7faed4ff9ad1498d5827337fcba4068ff03000000000000c4bc93df40ae3d465ee4a7f4f7f71512c0c66894", @ANYRES32=r6, @ANYRES64=0x0])

3.947793997s ago: executing program 3 (id=1252):
r0 = socket$packet(0x11, 0x2, 0x300)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e21, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ff}}, [0x6, 0x2, 0xd, 0x59f5, 0x0, 0x922, 0x6, 0x0, 0x78, 0x6, 0x0, 0x100000001, 0x4, 0x100, 0x3]}, &(0x7f00000000c0)=0x100)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000002c0), &(0x7f0000000100)=0x8)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'xfrm0\x00', <r1=>0x0})
sendto(r0, &(0x7f0000000140)="ca", 0x1, 0x0, &(0x7f0000000240)=@xdp={0x2c, 0x8, r1}, 0x80)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0x1d, 0x12, 0x26, 0x10, 0x18d1, 0x1eaf, 0x779, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe1, 0x15, 0x3d}}]}}]}}, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x4fa3, 0x4)
r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000))
syz_usb_control_io$printer(r2, 0x0, 0x0)
io_setup(0x9, &(0x7f0000000040))
r4 = mq_open(&(0x7f00000006c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8\x1b\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x93\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\xb7AR\xc8le\x91w\x83\x7fv\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf0H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\xa5\x8b\x81\x04\xaf\x03s\xdb@wT}~\x88\xa0\x880\xaf\t\xc7\x90\x85\x03\xe5\x86>\x0e\xd4\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8\x1cXVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2\xa9\xa2H|\xf2\x87\x8e\xbf\xce:@M\b/\rp\xa5\x00\x00\x00\x00SDB\x83\x9a\xa8H\x02F\x17\x13`@\x8b\x89\xe9I\x7fW|\xf7m\xe3\xed t\x19\xbc\xebv,\xac\'\xca\xf6\xe6\x03\x00\x95V\x9f\x7f\x11\x19\x87E}\xa1\xdc\xf1\xb3\x91\xc8\t\x8a\xe1\x06o\xef_ypM\xa8/\xaf\n\xe8\xbf\x1a\xeb\x81\xf8\xa9G\x83>\r\xa8\x8e\xd1\xe7]j\xc55', 0x62, 0x40, 0x0)
fcntl$setlease(r4, 0x400, 0x1)

3.725154748s ago: executing program 0 (id=1253):
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
add_key$user(&(0x7f0000000200), 0x0, &(0x7f0000000180)="03", 0x1, 0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="fc00"/147], 0xf0}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x1a1200, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r3, 0xc1004110, &(0x7f0000000000)={0x0, [0xc2, 0x40000000], [{}, {0x0, 0x6}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x4, 0x5}], 0x1})
socket(0x28, 0x3, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x0)
r4 = socket(0x2, 0x80000, 0x0)
close(r4)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x34}]}, &(0x7f0000002100)=0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
socket$netlink(0x10, 0x3, 0x0)
r6 = syz_open_dev$video4linux(&(0x7f0000000240), 0x0, 0x0)
ioctl$VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000080)={0x980900})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000380)={0x1, 0x0, 0x0, "d81163adf80b2af0a10b978ef6ded37c2b1e00", 0x3131354f})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="0f3800bbf540dceb260f015f009d0f6f140f20d86635080000000f22d867660f38022066b96c0800000f322e2e0f88070066b9800000c00f326635010000000f30", 0x41}], 0x1, 0xc, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
socket$inet(0x2, 0x0, 0x0)
mkdir(0x0, 0x0)

3.408560729s ago: executing program 4 (id=1254):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet(0x2, 0x6, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff89)
shutdown(r1, 0x0)
syz_open_dev$media(&(0x7f0000000140), 0x7fffffffffffffff, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x0, 0x30}, 0xc)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[], 0x2df)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, 0x0)
sendmmsg$inet6(r2, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)='4', 0x1}], 0x1}}], 0x1, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$uinput_user_dev(r3, &(0x7f0000001100)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x912b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8]}, 0x45c)
r4 = dup(r3)
r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00')
setns(r5, 0x0)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3)
ioctl$UI_DEV_CREATE(r4, 0x5501)
write$uinput_user_dev(r4, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})

2.924113732s ago: executing program 2 (id=1255):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0xb0)
connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0xc, &(0x7f0000001640), 0x4)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601100fe0f040b067c55a1bc0009001e0006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0d0300000000fdffffff04"], 0x14}}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
write$binfmt_script(r0, &(0x7f0000000580)={'#! ', './file0'}, 0xb)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)

2.753117888s ago: executing program 2 (id=1256):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
openat$hwrng(0xffffffffffffff9c, 0x0, 0x4000, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2d875e9671e8abcb31c134f3a9db8f52e1f54fe6e079f35ac63186c7244fc3b3801e79b8e5545b90f2dbec29f15cec2fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db"}, 0xd8)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="8000000000000000bbbbbb9b08004500003c0000000000109078ac1414bbffffffff00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ac3c0000907800001312b196e7f1e64e5277a4d3fee8899020ae0000"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x0, 0x3}, 0x10, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
landlock_restrict_self(r2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0xa, 0x9, 0x0, 0x1, 0x80ffffff}}, [], {{0x5, 0x1, 0xa, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bind$alg(r3, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_MIXER_WRITE_RECSRC(r5, 0xc0044dff, &(0x7f0000000080)=0x3ff)

2.476266448s ago: executing program 4 (id=1257):
r0 = socket$xdp(0x2c, 0x3, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x8012, r0, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0xff, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{}, {{0x9, 0x5, 0x3, 0x2, 0x400}}}}}}}]}}, &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0})

2.426814394s ago: executing program 3 (id=1258):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}, {&(0x7f0000000c80)=""/256, 0x100}, {&(0x7f0000001140)=""/4055, 0xfd7}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000007c0)=""/191, 0xbf}, {&(0x7f0000000500)=""/211, 0xd3}, {0x0}, {&(0x7f0000000940)=""/183, 0xb7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000340)=""/36, 0x24}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/4089, 0xff9}], 0xc}, 0x0)

2.242185637s ago: executing program 3 (id=1259):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x7b0, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x780, 0x2, [@TCA_CGROUP_ACT={0x77c, 0x1, [@m_ct={0x100, 0x1e, 0x0, 0x0, {{0x7}, {0x70, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfffffbc7, 0x4, 0x1, 0x81, 0x3}}, @TCA_CT_ACTION={0x6}, @TCA_CT_ACTION={0x6, 0x3, 0x5}, @TCA_CT_LABELS_MASK={0x14, 0x8, "1780707e6ab86e761f94c7eb1af30e10"}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_PARMS={0x18, 0x1, {0x6, 0x9, 0xffffffffffffffff, 0x7fffffff, 0x1a4c}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @empty}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}]}, {0x6c, 0x6, "cacbce8fcbc3293ee47c52e0b4f41efd19af032a043385b148d1c912f839cbab91e261bbb71383158f813cba1dee126185abc8f81748a7f700858b88c94548e465a82361061322502a853c5858e600aab1661b2cc9082dd3c3c6d8e0af7554224639f9310f1498ab"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0x84, 0xe, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x3f2, 0x5, 0xfffffff8, 0x4}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}]}, {0x33, 0x6, "37377a386fb848ea13d155d6297c12f28d9f643b2cace47a8cdf058196eb44cd1cc18fbcef0bde624bdd4e7876ccba"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x188, 0xf, 0x0, 0x0, {{0xd}, {0x11c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x195, 0x18251cbd, 0x6, 0x8, 0xbfd6}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfff, 0x5, 0x3, 0xa3f, 0x8}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xb1, 0x8}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x9, 0x0, 0x5, 0x94ca}, 0xfffe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x20000000, 0x1, 0xfff}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x800, 0x4, 0x0, 0x6}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1000, 0x8, 0x4, 0xfffff952, 0x6}, 0x4d6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x23fb4195, 0x7, 0x0, 0xfffffff9, 0xe7}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x3, 0x60000001, 0x3, 0x8}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x5, 0x5, 0x400, 0x2}, 0xa}}]}, {0x3f, 0x6, "47d9de2590830fb3885425dfbd2e0a26ec384dd226cc2e9085361b92590bb6eb7a0ba535abf0f35879c43e01db0a01e9a401a1b51f2a7a183652b3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_mpls={0xe0, 0x5, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x586, 0x20000000, 0x1}, 0x3}}]}, {0x98, 0x6, "c7d84429d67525b3238abbd310f4f8f5ddd1d3bd94a021b2f32ed292c3f10da13935c623580fa46fa101352fbe8e02e1a1d14e8507faf53dffb74527a35cb09c2833f761201fcfc0ece534e9432785b46b3e8c026d2f573f188eec8fb76dc97b31b7d56e58d1bc6d0838d63fbb00ed2cac5d56b6faf052d974d713e7d3bdf79eb05098ce1304ab6ffb779580bb25789a661aa506"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x90, 0x1a, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x6}]}, {0x5a, 0x6, "197ef632b22bf3c79bc760424562828cf4742bac24f0ba816129124848d3593c1ca6894a4289332b138bc5e66fe806a5dbc366956ee85a36828ad6356502781523077445ce33ceb75a7cc7371409cf36123da5b00f62"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_simple={0xc8, 0xb, 0x0, 0x0, {{0xb}, {0x4}, {0x9a, 0x6, "390b8784d0f102663502cca303ffa29521cf094135e909cc3deffe04ec033a783a3e4c4dfc10e06f840a4a6f2e7eeba1002d94cd4f72320530e510e8de5ec84f3dd75e3265e1d00b0b330c997891784ffaf8ddd69475d61f416c7641e8d1887f6090ec25d601168f20cb464233d697137d1a8f76ed57e004935f874b859b01203959ac74d7e084c9567f143113ea3ec3be0717560967"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_csum={0x124, 0x13, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x1000, 0x3, 0x2, 0x9}, 0x1d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xfffffbff, 0x5, 0x800, 0x9}, 0x33}}]}, {0xbf, 0x6, "2d81fafcd088bb2bd563c25335db37109556d1163168da1e37b80874090ecfb61e5670fb8f7c2589a54cc11c0121af02a6fd11121b885f60cc64f06559877cf617c76119a9a085f82e318b81b3f9c13db56759aa9de5b023c915252bc9a44789e5a1b21d0484d7ec93dfe606d12d8ad678c4fc8d3a62bf348b933fc7cc81880394c8aa0e1d911d4ed3b12391c93242fd19ab2648cd3db2d70394a98852126f47e80bcfd604dc08a457d63d1e256fcc7b3ce50b61a0d7aced65c574"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_simple={0xa8, 0x5, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x9, 0x3, 0x0, 0x492e}}, @TCA_DEF_DATA={0x6, 0x3, ',\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x0, 0x0, 0x0, 0x9d}}, @TCA_DEF_DATA={0x9, 0x3, 'flow\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xfffffffc, 0x4000000, 0x20000000, 0x8000, 0x7}}]}, {0x1d, 0x6, "b2028bef72f08caa1223bcc609167ee84b1019879ef1721be2"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_csum={0x68, 0x0, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x7, 0x1}}}, @TCA_CSUM_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7b0}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.172280018s ago: executing program 3 (id=1260):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@empty}, @in=@loopback}}, 0xf0}}, 0x0) (fail_nth: 3)

2.11616604s ago: executing program 0 (id=1261):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000c80), 0x0, 0x0, 0x0, 0x0)

2.044970967s ago: executing program 3 (id=1262):
socket$inet_tcp(0x2, 0x1, 0x0)
dup(0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
r1 = syz_io_uring_setup(0x0, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000001240)=<r2=>0x0, &(0x7f0000001340)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27})
io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x6}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2)

2.00543048s ago: executing program 0 (id=1263):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="82000000000000003a000000"])
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='memory.swap.events\x00', 0x0, 0x0)
r7 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r7, 0x1, 0x29, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000480)={&(0x7f00000000c0)=@hci={0x1f, 0x2, 0x3}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="3c59ea66b8fc0dab802eed88c11a00000000000000bf666569c1699a67b2526461962ec85571b09403aea11c3b23be6b2c89041e244a6a7f5c75736167bd06047cdea316f3770ecb0d2b409a21ba2b6ca8984f3bc51a15ada54ea1e1fe3cc56982a60006e1943f11032c5d87f573ed216e612db2ea3b5ac5da23adb047882c31ad6db66fd123617703bff6a9cd56c5446dcc132ef57eb75ec9f0750ca55de73747e3529f94b6", 0xa6}], 0x1, &(0x7f0000000240)=[{0xe0, 0x110, 0x5, "5a5cb4d01d352b436703092c17a5517e0422493e015ccac97cf93ece3a98d5bbec1a52df84b3f2565f6fed30e7218a50d21f60ba2dc764ab49d4e08b16a36890169b64e2a567e8395ecad46a30308d792bdf832a52368df4d6ab5e8dc8c4282c4c5e074a52eac0d93d928c77d074b70379ee639ff8fe0100ce1c5dda7354b2439892ee41bf19d3f924bfc6d7acf9e7c4414fb52bb03e74553f884db6a3e0f5be1a7e2e2895d1380d9f51eaf693b19d2502f5971110cb62ab90643e87d77ddb943186787e79aef4c9df"}, {0xe8, 0x110, 0xe5f, "39209d66ca19a1033f6da31923a08c520b4a8a648d741f4693b2f872eb65366a2460d3c869c7aa124bfffd19cfd7f408469a56b6697c1d74c50183b16d05c014b3c6e9ecafc95de93e313ce7187ad878030dab55f5220b78898941d9a6b7feaa39cbded710d1c22630c7b337cebf82cc40552bc3acd7d44a6e87d927086faf5249b00d6e17a7a06178add5d21e760bf43394c1b1f45fcc79c0a5a3f1fae29d24ed9d4843d1d383c4dcc3f48cce539ef3befca3bc87193dc3b0a8e1c40bb55e1dcb4b9e997a5cc2f311481a33807b12f2faa1e43b308a10"}, {0x70, 0x107, 0x3, "f9a096699be5c29823e5685a01d27a66ca5ee2c99f1d06453006e21a7b2d1acb30ec9d2ba6d69edc47456c9718515838a1dda36a46f8441a33e5b1e431cbcdec2d05b6d1350d6e8258cc0e2090b4d74c229d9831eb6daa192d"}], 0x238}, 0x4050)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0)
r8 = eventfd(0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0)
ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r8)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv6_newnexthop={0x30, 0x68, 0x20, 0x0, 0x0, {}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @NHA_BLACKHOLE={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008010}, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000001c0))
ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f00000005c0)={0x1, r8})
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/62, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/73, &(0x7f0000000880)=""/72})
ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$VHOST_SET_LOG_BASE(r5, 0x4008af04, &(0x7f0000000540)=&(0x7f00000002c0))
syz_usb_connect$hid(0x0, 0x151, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4)

1.793031796s ago: executing program 2 (id=1264):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x0)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='GPL\x00'}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x8d, 0x0)
r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x2040, 0x70, 0xe}, 0x18)
ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611)
fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000080)={{0x5, 0x1, 0x0, 0x8, 'syz1\x00', 0x200}, 0x1, 0x20, 0x9, 0x0, 0x1, 0xf2, 'syz0\x00', &(0x7f0000000000)=['[\x00'], 0x2})
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f00000007c0)={{0x9, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

1.516827682s ago: executing program 3 (id=1265):
openat$userio(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2)
r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={r1, 0x0, 0x0, 0x1000})
fcntl$dupfd(r2, 0x0, r2)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x300}, 0x0, 0x0, 0x0, 0x0)
r3 = gettid()
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}})
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f00000003c0)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="000010000093155fa8b22a08f3176f6ed1ad8700000057be595c85bfe9ac8122e7"], 0x0, 0x0, 0x0}, 0x0)
r6 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCSREPORT(r6, 0xc018480b, &(0x7f0000000080)={0x2, 0xffffffff})
fchdir(0xffffffffffffffff)
syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0)
fchmodat(0xffffffffffffffff, 0x0, 0x0)
write$rfkill(r7, &(0x7f00000004c0)={0x0, 0x2, 0x3, 0x1}, 0x8)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, 0x0)
syz_emit_ethernet(0x4e, 0x0, 0x0)

1.384033148s ago: executing program 1 (id=1266):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc}]}], {0x14}}, 0x48}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003c80)={'team0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
dup3(r4, r5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {}, [], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x10}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'virt_wifi0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0)

1.215535182s ago: executing program 0 (id=1267):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet(0x2, 0x6, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff89)
shutdown(r1, 0x0)
syz_open_dev$media(&(0x7f0000000140), 0x7fffffffffffffff, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x0, 0x30}, 0xc)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[], 0x2df)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, 0x0, 0x0)
sendmmsg$inet6(r2, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)='4', 0x1}], 0x1}}], 0x1, 0x0)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$uinput_user_dev(r3, &(0x7f0000001100)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x912b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8]}, 0x45c)
r4 = dup(r3)
r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00')
setns(r5, 0x0)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x3)
ioctl$UI_DEV_CREATE(r4, 0x5501)
write$uinput_user_dev(r4, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'})

1.128803601s ago: executing program 4 (id=1268):
r0 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_proto_private(r0, 0x89e0, &(0x7f0000000440))
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x385, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @empty}]}, 0x20}}, 0x0)

1.076305435s ago: executing program 4 (id=1269):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}, {&(0x7f0000000c80)=""/256, 0x100}, {&(0x7f0000001140)=""/4055, 0xfd7}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000007c0)=""/191, 0xbf}, {&(0x7f0000000500)=""/211, 0xd3}, {0x0}, {&(0x7f0000000940)=""/183, 0xb7}, {&(0x7f0000000c00)=""/110, 0x6e}, {&(0x7f0000000340)=""/36, 0x24}, {&(0x7f0000002140)=""/4096, 0x1000}, {&(0x7f0000003140)=""/4089, 0xff9}], 0xc}, 0x0)

1.067624041s ago: executing program 1 (id=1270):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000140)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0xb0)
connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x3c, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x3c}}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0xc, &(0x7f0000001640), 0x4)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601100fe0f040b067c55a1bc0009001e0006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0d0300000000fdffffff04"], 0x14}}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
write$binfmt_script(r0, &(0x7f0000000580)={'#! ', './file0'}, 0xb)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0)

674.642906ms ago: executing program 2 (id=1272):
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000100)=ANY=[@ANYBLOB="18080000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc090000000a0000350901000000000095000000000000006f4400000000000056080000000000008500000000000000b700000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0x7, &(0x7f0000000040)={@in, 0x0, 0x0, 0x0, 0x0, "f55f817bc06c88f47480ab5a58b45baf660401c8bc69351dac1f1747678b1958be4f737c06ed8b91cfcb18062bc5832e880319bf07279cd8bb654dd3911a359dbee08f634402630b53fa8ce128836865"}, 0xd8)
getsockopt$inet6_tcp_int(r2, 0x6, 0x7, 0x0, &(0x7f0000000080))
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20009f075cdf7634c4a24396b6c2b498830000000a01040000000000000000010000000900010073797a30000000002c000000030a01060000000000000000010000000900010073797a30000000000900030073797a31000000006c000000060a010400000000000000000100000008000b400000000044000480140001800c0001006e6f747261636b00040002802c0001800c00010062697477697365001c0002800800034000000004080002400000000008000140000000000900010073797a30000000001400000011"], 0xe0}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0x9c}], 0x1}}], 0x1, 0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
timer_create(0x1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xf, {"a2e3ad21ed0d09f91b3d090987f70906d038e7ff7fc6e5539b0d3d0e8b089b3f31006c090890e0878f0e1ac6e7049b334a959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006)
socket$unix(0x1, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0], &(0x7f0000000200), 0x1})
syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "546792"}}}, 0xd)
r4 = syz_open_dev$sg(&(0x7f0000001b40), 0x0, 0x0)
ioctl$SG_SET_COMMAND_Q(r4, 0x2276, 0xfffffffffffffffe)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="042c1100"/20], 0x14)
syz_emit_vhci(0x0, 0x0)
syz_emit_vhci(0x0, 0xac)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)

674.309087ms ago: executing program 4 (id=1273):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000c80), 0x0, 0x0, 0x0, 0x0)

492.434317ms ago: executing program 4 (id=1274):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x0, &(0x7f0000000100)})
openat$hwrng(0xffffffffffffff9c, 0x0, 0x4000, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2d875e9671e8abcb31c134f3a9db8f52e1f54fe6e079f35ac63186c7244fc3b3801e79b8e5545b90f2dbec29f15cec2fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db"}, 0xd8)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000400)=ANY=[@ANYBLOB="8000000000000000bbbbbb9b08004500003c0000000000109078ac1414bbffffffff00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ac3c0000907800001312b196e7f1e64e5277a4d3fee8899020ae0000"], 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x0, 0x3}, 0x10, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
landlock_restrict_self(r2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$vbi(0x0, 0x1, 0x2)
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0xa, 0x9, 0x0, 0x1, 0x80ffffff}}, [], {{0x5, 0x1, 0xa, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bind$alg(r3, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58)
r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_MIXER_WRITE_RECSRC(r5, 0xc0044dff, &(0x7f0000000080)=0x3ff)

492.214236ms ago: executing program 2 (id=1275):
socket$inet_tcp(0x2, 0x1, 0x0)
dup(0xffffffffffffffff)
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
r1 = syz_io_uring_setup(0x416f, 0x0, &(0x7f0000001240)=<r2=>0x0, &(0x7f0000001340)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27})
io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x6}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2)

322.322925ms ago: executing program 0 (id=1276):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendto$packet(r0, &(0x7f00000003c0)="02030e00d3fc02000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc3528c13e245075073feaebad2ba4189b5fb06f42a5354f9aadf6970f543a4b56e61b4b8", 0xfdef, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000002780)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=ANY=[@ANYRES64=<r4=>r0, @ANYRESHEX=r0, @ANYRES32=r1], 0x34}}, 0x0)
r5 = socket(0x28, 0x3, 0x2)
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000008c0)=""/150, 0x0})
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000800)=""/96, 0x0})
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x20000)
ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af04, &(0x7f0000000300))
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x0, 0x11c001})
r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8, 0x181000)
r7 = add_key(&(0x7f0000000240)='big_key\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000340)="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", 0x33b, 0x0)
keyctl$read(0xb, r7, &(0x7f0000000d80)=""/4096, 0x1000)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8982, &(0x7f0000000180)={0x6, 'macvlan1\x00', {0x5}, 0x4})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_RESET(r10, 0xc01064c4, &(0x7f0000000640)={0x0})
sendmmsg$unix(r9, &(0x7f0000004200)=[{{&(0x7f0000000740)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000980)="e6b20cbf608e22ce57d94b7c364391ff6aa63a94b290f3a08dae6a0498424fdfd49a6a8f906cc0ad6f693702791ea90a324c82f82a76755db1f58e4d9fd2b7593de12d7e7f1099b3f88567e9f54d7379992907e498968c40aa0ae78fb8e9f86905a247caafef5ee9d9b93780b9d06a8fa58a25", 0x73}, {&(0x7f0000000a00)="ef3cf0fc2e5c4d8f167f76c3576c9669e3600f69097137e1005206e14abfd5da9f73e958a1b10b166edc7602b15a8d9dde18b46331882f72b5142eb365e5f9f162c0ffd8e74414ad59b28196a13e160f6286594ff8d636a7411caec99140f3c86343489d6ed08073d1c53e5af9dfdb97d85def7a890f0dce665ed2c3f9377af1060be60a7bf045e61dc5778431d7589ecbf9e71d0c81c8f537e5314524d1d5daae6111cfdd236617b630f9067d0946040051a4947a43ec552386d98a88bf0b1cfbae1433c61a56118ba1c37706cb4a2c683f679361c4", 0xd6}], 0x2, &(0x7f0000000b80)=ANY=[@ANYBLOB="24000000000000000100000001000000", @ANYRES32=r8, @ANYRES32, @ANYRES32, @ANYRES32=r9, @ANYRES32=r9, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r5, @ANYRESDEC=r4, @ANYRES32, @ANYBLOB="00c8257138ad1b59836afb2854376338c43b0cc1157e1842a595"], 0x48, 0x800}}, {{&(0x7f0000000c00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001f40)=[{&(0x7f0000000c80)="ad264fb014749c7e859b1203c916898d64c23a1486d5592b327f6eb89ab75dbcabe27058e20c8ffcd875d1e3a41e1c3e66aa0f16a296773c2d23fb08d4f9f0e58d150747386f2e0c6c2972b24b1b5c076117c6d0a2ba0e771755e2ad416f27242e25d8d52b46893d57085dc0f20e69b3e7749d1b61cd0031d356c91bbaa1fd139bbecb850b3a8f52a340c2b64621f7c3095576aba884c3b10cc9a4", 0x9b}, {&(0x7f0000000d40)="f8db9c524f0af5deb996c45e73b72b964dcf8fdc5f6ded5b496b36cad946711b510945ca6cbf1f825aea", 0x2a}, {&(0x7f0000000b00)="b143e988c4cd6aed9cca65eac41674f4b80264352756f2ca433a83a1b4e0e57f1c887f22985826fc1b9077912793d67463e4992e8a1049a86019c843bcb92c7abfe7abe7f6719c623fac42d0ea0e9c1b89c720831ff748234a7d8f47910c32", 0x5f}, {&(0x7f0000001e00)="e47633964a5559b183bd9b12475147e55578a9db44c2c37ad41fa7afe23729bc39deead6f0d607201fb442b9c6dbf449ec5a7316c49e20209a90441e59719176d2b01bec92682072991609b128ce9c1aebee444bc0d28c96ebdc0eff39b49cdfb4d97704a2c9b28f862bd438c1053a3a78f85062d54f5dc9b4058ca743aed691c5fbcdb54bb461dad2021fae7b8f6dbda99f93d3902e0401679e", 0x9a}, {&(0x7f0000001ec0)="50b3d0face5d25417980f3e59cb1fbe2a4222949b5d3f135a954302b2afff57c6312f17d7365a80a0e5d8099046e292d6bdbd5a67d0c573865ec60636b0c2106ae25245e72394960fff3b88a019d123823e14f8101dc865c71", 0x59}], 0x5, &(0x7f0000002040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [r9, 0xffffffffffffffff, r1, r6, 0xffffffffffffffff, r3, r0, r10, r6, r10]}}, @cred={{0x1c}}], 0x70, 0x24000000}}], 0x2, 0x40010)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r12 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r11, &(0x7f0000000040)=ANY=[@ANYBLOB="0000080000000200088b2f01000046"], 0xfdef)

0s ago: executing program 0 (id=1277):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="82000000000000003a000000"])
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='memory.swap.events\x00', 0x0, 0x0)
r7 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r7, 0x1, 0x29, 0x0, 0x0)
sendmsg$kcm(r7, &(0x7f0000000480)={&(0x7f00000000c0)=@hci={0x1f, 0x2, 0x3}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="3c59ea66b8fc0dab802eed88c11a00000000000000bf666569c1699a67b2526461962ec85571b09403aea11c3b23be6b2c89041e244a6a7f5c75736167bd06047cdea316f3770ecb0d2b409a21ba2b6ca8984f3bc51a15ada54ea1e1fe3cc56982a60006e1943f11032c5d87f573ed216e612db2ea3b5ac5da23adb047882c31ad6db66fd123617703bff6a9cd56c5446dcc132ef57eb75ec9f0750ca55de73747e3529f94b6", 0xa6}], 0x1, &(0x7f0000000240)=[{0xe0, 0x110, 0x5, "5a5cb4d01d352b436703092c17a5517e0422493e015ccac97cf93ece3a98d5bbec1a52df84b3f2565f6fed30e7218a50d21f60ba2dc764ab49d4e08b16a36890169b64e2a567e8395ecad46a30308d792bdf832a52368df4d6ab5e8dc8c4282c4c5e074a52eac0d93d928c77d074b70379ee639ff8fe0100ce1c5dda7354b2439892ee41bf19d3f924bfc6d7acf9e7c4414fb52bb03e74553f884db6a3e0f5be1a7e2e2895d1380d9f51eaf693b19d2502f5971110cb62ab90643e87d77ddb943186787e79aef4c9df"}, {0xe8, 0x110, 0xe5f, "39209d66ca19a1033f6da31923a08c520b4a8a648d741f4693b2f872eb65366a2460d3c869c7aa124bfffd19cfd7f408469a56b6697c1d74c50183b16d05c014b3c6e9ecafc95de93e313ce7187ad878030dab55f5220b78898941d9a6b7feaa39cbded710d1c22630c7b337cebf82cc40552bc3acd7d44a6e87d927086faf5249b00d6e17a7a06178add5d21e760bf43394c1b1f45fcc79c0a5a3f1fae29d24ed9d4843d1d383c4dcc3f48cce539ef3befca3bc87193dc3b0a8e1c40bb55e1dcb4b9e997a5cc2f311481a33807b12f2faa1e43b308a10"}, {0x70, 0x107, 0x3, "f9a096699be5c29823e5685a01d27a66ca5ee2c99f1d06453006e21a7b2d1acb30ec9d2ba6d69edc47456c9718515838a1dda36a46f8441a33e5b1e431cbcdec2d05b6d1350d6e8258cc0e2090b4d74c229d9831eb6daa192d"}], 0x238}, 0x4050)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0)
r8 = eventfd(0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0)
ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r8)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv6_newnexthop={0x30, 0x68, 0x20, 0x0, 0x0, {}, [@NHA_GATEWAY={0x14, 0x6, @ip4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @NHA_BLACKHOLE={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008010}, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f00000001c0))
ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f00000005c0)={0x1, r8})
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/62, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/73, &(0x7f0000000880)=""/72})
ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$VHOST_SET_LOG_BASE(r5, 0x4008af04, &(0x7f0000000540)=&(0x7f00000002c0))
syz_usb_connect$hid(0x0, 0x151, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4)

kernel console output (not intermixed with test programs):

y 0 port 6081 - 0
[  275.621394][ T9002] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  275.632535][    T9] usb 5-1: Using ep0 maxpacket: 8
[  275.634854][ T9002] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  275.644518][    T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  275.714423][    T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  275.739857][ T5146] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  275.755387][ T5146] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  275.771662][    T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  275.795840][ T5146] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  275.809781][    T9] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  275.829617][ T5146] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.844273][    T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  275.861613][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.874489][ T5146] usb 1-1: config 0 descriptor??
[  275.881836][ T5146] hub 1-1:0.0: USB hub found
[  275.901790][    T9] usb 5-1: Product: syz
[  275.911542][    T9] usb 5-1: Manufacturer: syz
[  275.913607][ T5141] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  275.921666][    T9] usb 5-1: SerialNumber: syz
[  275.942883][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  275.950735][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  276.049707][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  276.072330][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  276.083102][ T5146] hub 1-1:0.0: 1 port detected
[  276.155544][ T5141] usb 3-1: too many configurations: 18, using maximum allowed: 8
[  276.196337][ T5141] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a
[  276.222421][ T5141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.251848][ T5141] usb 3-1: config 0 descriptor??
[  276.279328][ T5141] gspca_main: 0c45:8001 too many config
[  276.522469][ T5146] usb 1-1: USB disconnect, device number 53
[  276.583705][ T5141] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  276.687845][ T5144] usb 3-1: USB disconnect, device number 34
[  276.792391][ T5141] usb 2-1: Using ep0 maxpacket: 16
[  276.817737][ T5141] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=33.d2
[  276.828788][ T5141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.838688][ T5141] usb 2-1: Product: syz
[  276.860760][ T5141] usb 2-1: Manufacturer: syz
[  276.882264][ T5141] usb 2-1: SerialNumber: syz
[  276.894650][ T5141] usb 2-1: config 0 descriptor??
[  276.929465][ T5141] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  277.175556][ T5141] gspca_sunplus: reg_r err -71
[  277.200841][ T5141] usb 2-1: USB disconnect, device number 32
[  277.316496][    T9] cdc_ncm 5-1:1.0: bind() failure
[  277.335207][    T9] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71
[  277.359040][    T9] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71
[  277.391931][    T9] usbtest 5-1:1.1: probe with driver usbtest failed with error -71
[  277.433179][    T9] usb 5-1: USB disconnect, device number 29
[  277.681868][ T9197] IPv6: Can't replace route, no match found
[  277.841236][ T9202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  277.881337][ T9202] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  278.368374][ T9216] netlink: 'syz.3.861': attribute type 10 has an invalid length.
[  278.390156][ T9216] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  278.429574][ T9216] batman_adv: batadv0: Removing interface: batadv_slave_0
[  278.492368][  T786] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  278.500786][ T9216] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  278.744632][  T786] usb 5-1: Using ep0 maxpacket: 32
[  278.771588][  T786] usb 5-1: config 0 has an invalid descriptor of length 64, skipping remainder of the config
[  278.805088][  T786] usb 5-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=5b.13
[  278.821239][  T786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.832301][  T786] usb 5-1: Product: syz
[  278.839671][  T786] usb 5-1: Manufacturer: syz
[  278.853143][  T786] usb 5-1: SerialNumber: syz
[  278.866214][  T786] usb 5-1: config 0 descriptor??
[  278.886350][  T786] rndis_host 5-1:0.0: skipping garbage
[  278.897629][  T786] rndis_host 5-1:0.0: skipping garbage
[  278.913776][  T786] usb 5-1: bad CDC descriptors
[  278.942634][ T5146] usb 3-1: new full-speed USB device number 35 using dummy_hcd
[  279.090323][ T5147] usb 5-1: USB disconnect, device number 30
[  279.154202][ T5146] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  279.198017][ T5146] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  279.220425][ T5146] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  279.234333][ T5146] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.272749][ T5146] usb 3-1: config 0 descriptor??
[  279.283710][ T5146] hub 3-1:0.0: USB hub found
[  279.515095][ T5146] hub 3-1:0.0: 1 port detected
[  279.898091][ T9238] IPv6: Can't replace route, no match found
[  279.975442][ T5146] usb 3-1: USB disconnect, device number 35
[  280.132547][ T5142] usb 5-1: new full-speed USB device number 31 using dummy_hcd
[  280.172347][ T5147] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  280.327881][ T5142] usb 5-1: not running at top speed; connect to a high speed hub
[  280.343745][ T5142] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  280.358828][ T5142] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[  280.377080][ T5142] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  280.380265][ T5147] usb 1-1: config 164 has an invalid descriptor of length 0, skipping remainder of the config
[  280.389056][ T5142] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.421087][ T5147] usb 1-1: New USB device found, idVendor=048d, idProduct=9005, bcdDevice=40.3d
[  280.422013][ T5142] usb 5-1: Product: syz
[  280.440207][ T5142] usb 5-1: Manufacturer: 《
[  280.450280][ T5147] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.450297][ T5142] usb 5-1: SerialNumber: syz
[  280.463122][ T5147] usb 1-1: Product: syz
[  280.467414][ T5147] usb 1-1: Manufacturer: syz
[  280.472345][ T5147] usb 1-1: SerialNumber: syz
[  280.512350][ T5144] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  280.526524][ T9239] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  280.756714][ T5144] usb 2-1: Using ep0 maxpacket: 32
[  280.767945][ T5147] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  280.771077][ T5144] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  280.798187][ T5144] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.801372][ T5147] dvb_usb_af9035 1-1:164.0: probe with driver dvb_usb_af9035 failed with error -22
[  280.830767][ T5147] usb 1-1: USB disconnect, device number 54
[  280.844647][ T5144] usb 2-1: config 0 descriptor??
[  280.875998][ T5144] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  280.949358][ T9261] IPv6: Can't replace route, no match found
[  280.966930][ T5142] cdc_ncm 5-1:1.0: bind() failure
[  280.997500][ T5142] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  281.030563][ T5142] cdc_ncm 5-1:1.1: bind() failure
[  281.040216][ T5142] usb 5-1: USB disconnect, device number 31
[  281.297109][ T9269] IPv6: Can't replace route, no match found
[  281.479831][ T5144] gspca_vc032x: reg_w err -71
[  281.488341][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  281.494116][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  281.509711][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  281.529431][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  281.541163][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  281.552719][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  281.593433][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  281.622407][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  281.634222][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  281.656992][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  281.680836][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  281.697534][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  281.755142][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  281.824786][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  281.830393][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  281.839518][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  281.848052][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  281.854339][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  281.861704][ T5144] gspca_vc032x: Unknown sensor...
[  281.871812][ T5144] vc032x 2-1:0.0: probe with driver vc032x failed with error -22
[  281.906889][ T5144] usb 2-1: USB disconnect, device number 33
[  282.462044][ T9300] IPv6: Can't replace route, no match found
[  282.553444][ T9303] team0: Port device virt_wifi0 added
[  282.569080][ T9304] FAULT_INJECTION: forcing a failure.
[  282.569080][ T9304] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  282.592539][ T9304] CPU: 1 PID: 9304 Comm: syz.4.892 Not tainted 6.10.0-syzkaller #0
[  282.600483][ T9304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  282.610641][ T9304] Call Trace:
[  282.613944][ T9304]  <TASK>
[  282.616894][ T9304]  dump_stack_lvl+0x241/0x360
[  282.621600][ T9304]  ? __pfx_dump_stack_lvl+0x10/0x10
[  282.626839][ T9304]  ? __pfx__printk+0x10/0x10
[  282.631446][ T9304]  ? __pfx_lock_release+0x10/0x10
[  282.636469][ T9304]  should_fail_ex+0x3b0/0x4e0
[  282.641148][ T9304]  _copy_from_user+0x2f/0xe0
[  282.645736][ T9304]  copy_msghdr_from_user+0xae/0x680
[  282.650926][ T9304]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  282.656748][ T9304]  __sys_sendmsg+0x23d/0x3a0
[  282.661354][ T9304]  ? __pfx___sys_sendmsg+0x10/0x10
[  282.666456][ T9304]  ? vfs_write+0x7c4/0xc90
[  282.670880][ T9304]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  282.677196][ T9304]  ? do_syscall_64+0x100/0x230
[  282.682058][ T9304]  ? do_syscall_64+0xb6/0x230
[  282.686745][ T9304]  do_syscall_64+0xf3/0x230
[  282.691245][ T9304]  ? clear_bhb_loop+0x35/0x90
[  282.695914][ T9304]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.701807][ T9304] RIP: 0033:0x7fdc0ff75bd9
[  282.706220][ T9304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  282.726098][ T9304] RSP: 002b:00007fdc10d23048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  282.734506][ T9304] RAX: ffffffffffffffda RBX: 00007fdc10103f60 RCX: 00007fdc0ff75bd9
[  282.742471][ T9304] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003
[  282.750459][ T9304] RBP: 00007fdc10d230a0 R08: 0000000000000000 R09: 0000000000000000
[  282.758449][ T9304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  282.766438][ T9304] R13: 000000000000000b R14: 00007fdc10103f60 R15: 00007fdc1022fa78
[  282.774420][ T9304]  </TASK>
[  282.854898][ T9314] PKCS7: Unknown OID: [5] 0.0
[  282.866158][ T9314] PKCS7: Only support pkcs7_signedData type
[  283.400186][ T9322] netlink: 'syz.3.897': attribute type 3 has an invalid length.
[  283.821640][ T9331] netlink: 'syz.2.900': attribute type 10 has an invalid length.
[  283.839418][ T9331] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  283.948044][ T9331] batman_adv: batadv0: Removing interface: batadv_slave_0
[  284.022677][ T5144] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  284.065132][ T9331] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  284.120641][ T9346] IPv6: Can't replace route, no match found
[  284.212754][ T5144] usb 5-1: Using ep0 maxpacket: 8
[  284.231938][ T5144] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  284.255325][ T5144] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  284.267039][ T5144] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  284.294483][ T5144] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  284.310122][ T5144] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.324626][ T5144] usb 5-1: Product: syz
[  284.328831][ T5144] usb 5-1: Manufacturer: syz
[  284.338834][ T5144] usb 5-1: SerialNumber: syz
[  284.358816][ T5144] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[  284.379056][ T5144] cdc_ncm 5-1:1.0: bind() failure
[  284.897261][ T9373] netlink: 76 bytes leftover after parsing attributes in process `syz.0.912'.
[  285.522393][ T5146] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  285.729308][ T9383] netlink: 'syz.2.915': attribute type 3 has an invalid length.
[  285.730904][ T5146] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  285.755081][ T5146] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.776246][ T5146] usb 2-1: config 0 descriptor??
[  285.788601][ T5146] cp210x 2-1:0.0: cp210x converter detected
[  285.968290][ T9389] netlink: 'syz.0.916': attribute type 3 has an invalid length.
[  285.988773][ T5146] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121
[  285.996622][ T5146] cp210x 2-1:0.0: querying part number failed
[  286.018370][ T5146] usb 2-1: cp210x converter now attached to ttyUSB0
[  286.511664][ T9396] IPv6: Can't replace route, no match found
[  286.583122][ T9399] fuse: Bad value for 'fd'
[  286.884192][ T9403] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  287.032292][   T45] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  287.191590][   T29] audit: type=1326 audit(1721037245.552:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9405 comm="syz.3.920" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff96d775bd9 code=0x0
[  287.212281][   T45] usb 1-1: Using ep0 maxpacket: 32
[  287.228267][   T45] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  287.237530][   T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.251232][   T45] usb 1-1: config 0 descriptor??
[  287.263195][   T45] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  287.480635][ T5142] usb 5-1: USB disconnect, device number 32
[  287.499183][   T45] gspca_vc032x: reg_r err -71
[  287.524078][   T45] gspca_vc032x: I2c Bus Busy Wait 00
[  287.529449][   T45] gspca_vc032x: I2c Bus Busy Wait 00
[  287.554176][   T45] gspca_vc032x: I2c Bus Busy Wait 00
[  287.559530][   T45] gspca_vc032x: I2c Bus Busy Wait 00
[  287.565288][   T45] gspca_vc032x: I2c Bus Busy Wait 00
[  287.570623][   T45] gspca_vc032x: I2c Bus Busy Wait 00
[  287.580321][   T45] gspca_vc032x: I2c Bus Busy Wait 00
[  287.588220][   T45] gspca_vc032x: I2c Bus Busy Wait 00
[  287.600249][   T45] gspca_vc032x: I2c Bus Busy Wait 00
[  287.606503][   T45] gspca_vc032x: I2c Bus Busy Wait 00
[  287.627183][   T45] gspca_vc032x: I2c Bus Busy Wait 00
[  287.637621][   T45] gspca_vc032x: I2c Bus Busy Wait 00
[  287.648489][   T45] gspca_vc032x: I2c Bus Busy Wait 00
[  287.667901][   T45] gspca_vc032x: I2c Bus Busy Wait 00
[  287.680996][   T45] gspca_vc032x: I2c Bus Busy Wait 00
[  287.699246][   T45] gspca_vc032x: I2c Bus Busy Wait 00
[  287.706722][   T45] gspca_vc032x: I2c Bus Busy Wait 00
[  287.712527][   T45] gspca_vc032x: I2c Bus Busy Wait 00
[  287.712916][ T9417] netlink: 48 bytes leftover after parsing attributes in process `syz.2.923'.
[  287.717925][   T45] gspca_vc032x: Unknown sensor...
[  287.733541][   T45] vc032x 1-1:0.0: probe with driver vc032x failed with error -22
[  287.762430][   T45] usb 1-1: USB disconnect, device number 55
[  288.053434][ T5146] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  288.156786][ T9420] futex_wake_op: syz.0.924 tries to shift op by -1; fix this program
[  288.302870][ T5146] usb 3-1: Using ep0 maxpacket: 32
[  288.328018][ T5146] usb 3-1: config 128 has an invalid interface number: 45 but max is 0
[  288.356809][ T5146] usb 3-1: config 128 contains an unexpected descriptor of type 0x2, skipping
[  288.371884][  T786] usb 2-1: USB disconnect, device number 34
[  288.388154][ T5146] usb 3-1: config 128 has no interface number 0
[  288.407583][  T786] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  288.417848][ T5146] usb 3-1: config 128 interface 45 has no altsetting 0
[  288.434874][  T786] cp210x 2-1:0.0: device disconnected
[  288.453701][ T9428] netlink: 'syz.3.925': attribute type 3 has an invalid length.
[  288.481482][ T5146] usb 3-1: Dual-Role OTG device on HNP port
[  288.502336][ T5146] usb 3-1: New USB device found, idVendor=0c52, idProduct=2833, bcdDevice=5b.e1
[  288.514805][ T5146] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.526577][ T5146] usb 3-1: Product: syz
[  288.533250][   T45] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  288.544573][ T5146] usb 3-1: Manufacturer: syz
[  288.558402][ T5146] usb 3-1: SerialNumber: syz
[  288.726748][   T45] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  288.759489][   T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.773463][ T9437] netlink: 'syz.4.927': attribute type 3 has an invalid length.
[  288.781874][ T5146] ftdi_sio 3-1:128.45: FTDI USB Serial Device converter detected
[  288.789966][   T45] usb 1-1: config 0 descriptor??
[  288.800200][   T45] cp210x 1-1:0.0: cp210x converter detected
[  288.828450][ T5146] ftdi_sio ttyUSB0: unknown device type: 0x5be1
[  288.853137][ T5146] usb 3-1: USB disconnect, device number 36
[  288.873202][ T5146] ftdi_sio 3-1:128.45: device disconnected
[  289.009426][   T45] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121
[  289.022311][  T786] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  289.031969][   T45] cp210x 1-1:0.0: querying part number failed
[  289.049750][   T45] usb 1-1: cp210x converter now attached to ttyUSB0
[  289.186680][ T9440] IPv6: Can't replace route, no match found
[  289.262328][  T786] usb 2-1: Using ep0 maxpacket: 16
[  289.275255][  T786] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=33.d2
[  289.289374][  T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.308510][  T786] usb 2-1: Product: syz
[  289.328747][  T786] usb 2-1: Manufacturer: syz
[  289.334040][  T786] usb 2-1: SerialNumber: syz
[  289.359775][  T786] usb 2-1: config 0 descriptor??
[  289.380447][  T786] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  289.474500][ T9446] PKCS7: Unknown OID: [5] 0.0
[  289.502819][ T9446] PKCS7: Only support pkcs7_signedData type
[  289.594767][  T786] gspca_sunplus: reg_r err -71
[  289.642708][  T786] usb 2-1: USB disconnect, device number 35
[  289.847960][ T9449] netlink: 'syz.4.931': attribute type 3 has an invalid length.
[  290.002369][  T933] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  290.212445][  T933] usb 3-1: Using ep0 maxpacket: 16
[  290.229916][  T933] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79
[  290.244422][  T933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.259440][  T933] usb 3-1: Product: syz
[  290.267320][  T933] usb 3-1: Manufacturer: syz
[  290.282058][  T933] usb 3-1: SerialNumber: syz
[  290.309633][  T933] usb 3-1: config 0 descriptor??
[  290.547979][  T933] usb 3-1: Limiting number of CPorts to U8_MAX
[  290.565625][  T933] usb 3-1: Not enough endpoints found in device, aborting!
[  290.699242][   T29] audit: type=1326 audit(1721037249.062:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9460 comm="syz.1.935" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb86e375bd9 code=0x0
[  290.849333][ T9474] IPv6: Can't replace route, no match found
[  290.874899][ T5142] usb 3-1: USB disconnect, device number 37
[  291.086415][ T5141] usb 1-1: USB disconnect, device number 56
[  291.143055][ T5141] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  291.151321][ T5141] cp210x 1-1:0.0: device disconnected
[  291.194400][ T9481] netlink: 'syz.4.941': attribute type 3 has an invalid length.
[  291.950305][ T1976] pvrusb2: request_firmware fatal error with code=-110
[  292.005773][ T1976] pvrusb2: Failure uploading firmware1
[  292.011920][ T1976] pvrusb2: Device initialization was not successful.
[  292.020713][ T1976] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  292.038964][ T1976] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  292.079467][ T5148] pvrusb2: Device being rendered inoperable
[  292.178387][ T9500] team0: Port device virt_wifi0 added
[  292.194136][ T9510] IPv6: Can't replace route, no match found
[  292.378379][ T9507] netlink: 'syz.1.948': attribute type 3 has an invalid length.
[  292.410800][ T9516] FAULT_INJECTION: forcing a failure.
[  292.410800][ T9516] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  292.425872][ T9516] CPU: 1 PID: 9516 Comm: syz.2.952 Not tainted 6.10.0-syzkaller #0
[  292.433886][ T9516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  292.443949][ T9516] Call Trace:
[  292.447216][ T9516]  <TASK>
[  292.450129][ T9516]  dump_stack_lvl+0x241/0x360
[  292.454806][ T9516]  ? __pfx_dump_stack_lvl+0x10/0x10
[  292.459989][ T9516]  ? __pfx__printk+0x10/0x10
[  292.464627][ T9516]  ? __pfx_lock_release+0x10/0x10
[  292.469668][ T9516]  should_fail_ex+0x3b0/0x4e0
[  292.474353][ T9516]  _copy_from_user+0x2f/0xe0
[  292.478951][ T9516]  copy_msghdr_from_user+0xae/0x680
[  292.484191][ T9516]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  292.490011][ T9516]  __sys_sendmsg+0x23d/0x3a0
[  292.494615][ T9516]  ? __pfx___sys_sendmsg+0x10/0x10
[  292.499746][ T9516]  ? vfs_write+0x7c4/0xc90
[  292.504243][ T9516]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  292.510584][ T9516]  ? do_syscall_64+0x100/0x230
[  292.515364][ T9516]  ? do_syscall_64+0xb6/0x230
[  292.520046][ T9516]  do_syscall_64+0xf3/0x230
[  292.524552][ T9516]  ? clear_bhb_loop+0x35/0x90
[  292.529232][ T9516]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  292.535159][ T9516] RIP: 0033:0x7f1ca1975bd9
[  292.539576][ T9516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  292.559200][ T9516] RSP: 002b:00007f1ca26c0048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  292.567628][ T9516] RAX: ffffffffffffffda RBX: 00007f1ca1b03f60 RCX: 00007f1ca1975bd9
[  292.575617][ T9516] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003
[  292.583604][ T9516] RBP: 00007f1ca26c00a0 R08: 0000000000000000 R09: 0000000000000000
[  292.591575][ T9516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  292.599575][ T9516] R13: 000000000000000b R14: 00007f1ca1b03f60 R15: 00007f1ca1c2fa78
[  292.607558][ T9516]  </TASK>
[  292.611463][ T5148] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  292.695841][   T53] Bluetooth: hci4: ISO packet for unknown connection handle 1792
[  292.794050][ T9524] netlink: 'syz.2.955': attribute type 29 has an invalid length.
[  292.840359][ T9524] netlink: 'syz.2.955': attribute type 29 has an invalid length.
[  292.861380][ T5148] usb 4-1: unable to read config index 0 descriptor/start: -61
[  292.876172][ T5148] usb 4-1: can't read configurations, error -61
[  292.889535][ T9527] netlink: 'syz.2.955': attribute type 29 has an invalid length.
[  292.905953][   T29] audit: type=1326 audit(1721037251.272:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9519 comm="syz.0.954" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b93775bd9 code=0x0
[  293.023734][ T9531] FAULT_INJECTION: forcing a failure.
[  293.023734][ T9531] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  293.041246][ T9531] CPU: 1 PID: 9531 Comm: syz.2.957 Not tainted 6.10.0-syzkaller #0
[  293.049173][ T9531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  293.059403][ T9531] Call Trace:
[  293.062686][ T9531]  <TASK>
[  293.065610][ T9531]  dump_stack_lvl+0x241/0x360
[  293.070290][ T9531]  ? __pfx_dump_stack_lvl+0x10/0x10
[  293.075496][ T9531]  ? __pfx__printk+0x10/0x10
[  293.080090][ T9531]  ? __pfx_lock_release+0x10/0x10
[  293.085128][ T9531]  should_fail_ex+0x3b0/0x4e0
[  293.089822][ T9531]  _copy_from_user+0x2f/0xe0
[  293.092578][ T5148] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  293.094409][ T9531]  get_timespec64+0x97/0x280
[  293.106566][ T9531]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  293.112583][ T9531]  ? __pfx_get_timespec64+0x10/0x10
[  293.117800][ T9531]  ? __fget_files+0x3f6/0x470
[  293.122512][ T9531]  __se_sys_ppoll+0xd1/0x330
[  293.127121][ T9531]  ? __pfx___se_sys_ppoll+0x10/0x10
[  293.132412][ T9531]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  293.138751][ T9531]  ? do_syscall_64+0x100/0x230
[  293.143522][ T9531]  ? __x64_sys_ppoll+0x20/0xc0
[  293.148285][ T9531]  do_syscall_64+0xf3/0x230
[  293.152788][ T9531]  ? clear_bhb_loop+0x35/0x90
[  293.157487][ T9531]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.163393][ T9531] RIP: 0033:0x7f1ca1975bd9
[  293.167806][ T9531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  293.187408][ T9531] RSP: 002b:00007f1ca26c0048 EFLAGS: 00000246 ORIG_RAX: 000000000000010f
[  293.195835][ T9531] RAX: ffffffffffffffda RBX: 00007f1ca1b03f60 RCX: 00007f1ca1975bd9
[  293.203907][ T9531] RDX: 0000000020000140 RSI: 0000000000000001 RDI: 0000000020000080
[  293.211887][ T9531] RBP: 00007f1ca26c00a0 R08: 0000000000000000 R09: 0000000000000000
[  293.219899][ T9531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  293.227873][ T9531] R13: 000000000000000b R14: 00007f1ca1b03f60 R15: 00007f1ca1c2fa78
[  293.235871][ T9531]  </TASK>
[  293.474877][ T5148] usb 4-1: unable to read config index 0 descriptor/start: -61
[  293.484040][ T5148] usb 4-1: can't read configurations, error -61
[  293.490756][ T5148] usb usb4-port1: attempt power cycle
[  293.669457][ T9543] netlink: 'syz.2.961': attribute type 29 has an invalid length.
[  293.708201][ T9543] netlink: 'syz.2.961': attribute type 29 has an invalid length.
[  293.722932][ T9542] netlink: 'syz.1.959': attribute type 3 has an invalid length.
[  293.746162][ T9547] IPv6: Can't replace route, no match found
[  293.769824][ T9546] netlink: 'syz.2.961': attribute type 29 has an invalid length.
[  293.928750][ T5148] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  293.985213][ T5148] usb 4-1: unable to read config index 0 descriptor/start: -61
[  293.996662][ T9550] IPv6: Can't replace route, no match found
[  294.008978][ T5148] usb 4-1: can't read configurations, error -61
[  294.182784][ T5148] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  294.226461][ T9556] input: syz0 as /devices/virtual/input/input65
[  294.246732][ T5148] usb 4-1: unable to read config index 0 descriptor/start: -61
[  294.252066][ T9556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.965'.
[  294.303361][ T5148] usb 4-1: can't read configurations, error -61
[  294.330274][ T5148] usb usb4-port1: unable to enumerate USB device
[  294.494799][ T5103] Bluetooth: hci1: ISO packet for unknown connection handle 1792
[  294.759938][ T9567] batadv0: entered promiscuous mode
[  294.779487][ T9567] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  294.795677][ T9567] batadv0: left promiscuous mode
[  294.885011][ T9561] netlink: 'syz.0.967': attribute type 14 has an invalid length.
[  294.969544][ T9564] netlink: 80 bytes leftover after parsing attributes in process `syz.4.968'.
[  295.013575][ T9572] capability: warning: `syz.1.970' uses deprecated v2 capabilities in a way that may be insecure
[  295.189369][ T9579] IPv6: Can't replace route, no match found
[  295.228726][   T29] audit: type=1326 audit(1721037253.592:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9575 comm="syz.3.972" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff96d775bd9 code=0x0
[  295.311377][ T9583] IPv6: Can't replace route, no match found
[  295.489233][ T9592] netlink: 'syz.1.976': attribute type 3 has an invalid length.
[  295.653091][  T786] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  295.702500][ T5148] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  295.872423][ T5148] usb 3-1: device descriptor read/64, error -71
[  295.878917][  T786] usb 1-1: Using ep0 maxpacket: 8
[  295.899472][  T786] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  295.914664][  T786] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  295.926886][  T786] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  295.998815][  T786] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  296.017285][  T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.043966][  T786] usb 1-1: Product: syz
[  296.065082][  T786] usb 1-1: Manufacturer: syz
[  296.072808][  T786] usb 1-1: SerialNumber: syz
[  296.100968][  T786] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[  296.137953][  T786] cdc_ncm 1-1:1.0: bind() failure
[  296.162281][ T5148] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[  296.352388][ T5148] usb 3-1: device descriptor read/64, error -71
[  296.426810][ T9604] TCP: MD5 Hash not found for 172.20.20.187.0->172.20.20.170.20002 [FS] L3 index 0
[  296.463313][ T9604] vxcan1: entered allmulticast mode
[  296.496970][ T5148] usb usb3-port1: attempt power cycle
[  296.692433][   T45] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  296.912475][   T45] usb 2-1: unable to read config index 0 descriptor/start: -61
[  296.930428][   T45] usb 2-1: can't read configurations, error -61
[  296.942519][ T5148] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  297.001000][   T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  297.009595][ T5148] usb 3-1: device descriptor read/8, error -71
[  297.011172][   T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  297.026811][   T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  297.037730][   T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  297.047427][   T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  297.056392][   T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  297.092336][   T45] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  297.172690][ T5142] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  297.219715][ T9616] chnl_net:caif_netlink_parms(): no params data found
[  297.284840][ T9616] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.292074][ T9616] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.300038][ T9616] bridge_slave_0: entered allmulticast mode
[  297.310336][ T9616] bridge_slave_0: entered promiscuous mode
[  297.313083][ T5148] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  297.319980][ T9616] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.331136][ T9616] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.338584][ T9616] bridge_slave_1: entered allmulticast mode
[  297.344829][   T45] usb 2-1: unable to read config index 0 descriptor/start: -61
[  297.352755][   T45] usb 2-1: can't read configurations, error -61
[  297.354015][ T9616] bridge_slave_1: entered promiscuous mode
[  297.359447][   T45] usb usb2-port1: attempt power cycle
[  297.371128][ T5148] usb 3-1: device descriptor read/8, error -71
[  297.383352][ T5142] usb 5-1: Using ep0 maxpacket: 32
[  297.393051][ T5142] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  297.412250][ T5142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.423292][ T5142] usb 5-1: config 0 descriptor??
[  297.431449][ T5142] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  297.434007][ T9616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  297.450536][ T9616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  297.488769][ T9616] team0: Port device team_slave_0 added
[  297.500225][ T9616] team0: Port device team_slave_1 added
[  297.512776][ T5148] usb usb3-port1: unable to enumerate USB device
[  297.535525][ T9616] batman_adv: batadv0: Adding interface: batadv_slave_0
[  297.542875][ T9616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  297.569471][ T9616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  297.589739][ T9616] batman_adv: batadv0: Adding interface: batadv_slave_1
[  297.597025][ T9616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  297.627829][ T9616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  297.641736][ T5142] gspca_vc032x: reg_r err -71
[  297.646957][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[  297.653243][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[  297.658524][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[  297.678404][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[  297.684147][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[  297.690030][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[  297.695465][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[  297.702736][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[  297.708051][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[  297.720933][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[  297.726767][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[  297.737243][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[  297.746335][ T9616] hsr_slave_0: entered promiscuous mode
[  297.752946][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[  297.758925][ T9616] hsr_slave_1: entered promiscuous mode
[  297.765363][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[  297.772611][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[  297.777937][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[  297.784330][   T45] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  297.802342][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[  297.807662][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[  297.816773][ T5142] gspca_vc032x: Unknown sensor...
[  297.822666][ T5142] vc032x 5-1:0.0: probe with driver vc032x failed with error -22
[  297.846903][ T5142] usb 5-1: USB disconnect, device number 33
[  297.864612][   T45] usb 2-1: unable to read config index 0 descriptor/start: -61
[  297.872641][   T45] usb 2-1: can't read configurations, error -61
[  298.024444][ T9616] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.053115][   T45] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  298.085814][   T45] usb 2-1: unable to read config index 0 descriptor/start: -61
[  298.095027][   T45] usb 2-1: can't read configurations, error -61
[  298.103143][   T45] usb usb2-port1: unable to enumerate USB device
[  298.117008][ T9616] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.197527][ T9616] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.246451][ T9629] IPv6: Can't replace route, no match found
[  298.310617][ T9616] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  298.540601][ T9616] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  298.553037][ T9632] netlink: 'syz.4.987': attribute type 3 has an invalid length.
[  298.574265][ T9616] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  298.589490][ T9616] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  298.607723][ T9616] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  298.789908][ T9616] 8021q: adding VLAN 0 to HW filter on device bond0
[  298.818914][ T9616] 8021q: adding VLAN 0 to HW filter on device team0
[  298.859828][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.867386][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[  298.909365][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.916623][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state
[  299.000170][ T9638] netlink: 80 bytes leftover after parsing attributes in process `syz.2.988'.
[  299.130927][ T5146] usb 1-1: USB disconnect, device number 57
[  299.142461][   T53] Bluetooth: hci2: command tx timeout
[  299.270056][ T9616] 8021q: adding VLAN 0 to HW filter on device batadv0
[  299.382199][ T9616] veth0_vlan: entered promiscuous mode
[  299.397991][   T29] audit: type=1326 audit(1721037257.762:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9642 comm="syz.0.989" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b93775bd9 code=0x0
[  299.409271][ T9616] veth1_vlan: entered promiscuous mode
[  299.516366][ T9616] veth0_macvtap: entered promiscuous mode
[  299.534696][ T9616] veth1_macvtap: entered promiscuous mode
[  299.574906][ T9616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  299.598190][ T9616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.614360][ T9616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  299.627313][ T9616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.641061][ T9616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  299.674524][ T9616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.688907][ T9616] batman_adv: batadv0: Interface activated: batadv_slave_0
[  299.698055][ T9653] netlink: 'syz.1.991': attribute type 3 has an invalid length.
[  299.701172][ T9616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  299.720614][ T9616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.731604][ T9616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  299.752512][ T9616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.769439][ T9616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  299.789501][ T9616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.812326][ T9616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  299.836188][ T9616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.849309][ T9616] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  299.882862][ T9616] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  299.909112][ T9616] batman_adv: batadv0: Interface activated: batadv_slave_1
[  300.001555][ T9616] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  300.034972][ T9616] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  300.063277][ T9616] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  300.117002][ T9616] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  300.381936][ T1275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  300.411133][ T1275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  300.494785][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  300.521053][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  300.595660][ T9677] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  300.694135][ T5146] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  300.904828][  T933] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  300.922477][ T5146] usb 1-1: Using ep0 maxpacket: 32
[  300.933043][ T5146] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  300.944367][ T5146] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.965453][ T5146] usb 1-1: config 0 descriptor??
[  300.975967][ T5146] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  301.132973][  T933] usb 2-1: Using ep0 maxpacket: 8
[  301.172440][  T933] usb 2-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=7f.01
[  301.194829][ T5146] gspca_vc032x: reg_r err -71
[  301.203234][ T5146] gspca_vc032x: I2c Bus Busy Wait 00
[  301.210524][  T933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.221991][ T5146] gspca_vc032x: I2c Bus Busy Wait 00
[  301.222800][   T53] Bluetooth: hci2: command tx timeout
[  301.241465][ T5146] gspca_vc032x: I2c Bus Busy Wait 00
[  301.249995][  T933] usb 2-1: config 0 descriptor??
[  301.255957][ T9687] netlink: 'syz.3.1000': attribute type 3 has an invalid length.
[  301.258488][ T5146] gspca_vc032x: I2c Bus Busy Wait 00
[  301.285114][  T933] usb 2-1: unknown interface protocol 0x3f, assuming v1
[  301.294230][ T5146] gspca_vc032x: I2c Bus Busy Wait 00
[  301.321212][  T933] usb 2-1: cannot find UAC_HEADER
[  301.336476][ T5146] gspca_vc032x: I2c Bus Busy Wait 00
[  301.348891][ T5146] gspca_vc032x: I2c Bus Busy Wait 00
[  301.364204][ T5146] gspca_vc032x: I2c Bus Busy Wait 00
[  301.370723][ T5146] gspca_vc032x: I2c Bus Busy Wait 00
[  301.427237][ T5146] gspca_vc032x: I2c Bus Busy Wait 00
[  301.456307][ T5146] gspca_vc032x: I2c Bus Busy Wait 00
[  301.486842][ T5146] gspca_vc032x: I2c Bus Busy Wait 00
[  301.515105][ T5146] gspca_vc032x: I2c Bus Busy Wait 00
[  301.543114][ T5146] gspca_vc032x: I2c Bus Busy Wait 00
[  301.553187][  T933] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22
[  301.569711][ T5146] gspca_vc032x: I2c Bus Busy Wait 00
[  301.591258][ T5146] gspca_vc032x: I2c Bus Busy Wait 00
[  301.618857][  T933] usb 2-1: USB disconnect, device number 40
[  301.629845][ T5146] gspca_vc032x: I2c Bus Busy Wait 00
[  301.642319][ T5146] gspca_vc032x: I2c Bus Busy Wait 00
[  301.652682][ T5146] gspca_vc032x: Unknown sensor...
[  301.664129][ T5146] vc032x 1-1:0.0: probe with driver vc032x failed with error -22
[  301.672703][ T5144] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[  301.745796][ T5146] usb 1-1: USB disconnect, device number 58
[  301.882395][ T5144] usb 3-1: Using ep0 maxpacket: 32
[  301.884457][ T5088] udevd[5088]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  301.900437][ T5144] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  301.923753][ T5144] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  301.978026][ T5144] usb 3-1: config 0 descriptor??
[  301.993156][ T5144] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  302.125095][   T29] audit: type=1326 audit(1721037260.492:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9700 comm="syz.3.1005" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8050975bd9 code=0x0
[  302.198383][ T5144] gspca_vc032x: reg_r err -71
[  302.231562][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  302.266282][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  302.288629][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  302.299584][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  302.311961][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  302.333312][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  302.337846][ T9713] FAULT_INJECTION: forcing a failure.
[  302.337846][ T9713] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  302.351951][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  302.351970][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  302.351979][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  302.351988][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  302.351998][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  302.352006][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  302.352016][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  302.352024][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  302.352034][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  302.352043][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  302.352052][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  302.352060][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  302.352070][ T5144] gspca_vc032x: Unknown sensor...
[  302.352473][ T5144] vc032x 3-1:0.0: probe with driver vc032x failed with error -22
[  302.354448][ T5144] usb 3-1: USB disconnect, device number 42
[  302.462384][ T9713] CPU: 1 PID: 9713 Comm: syz.0.1009 Not tainted 6.10.0-syzkaller #0
[  302.470413][ T9713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  302.480495][ T9713] Call Trace:
[  302.483768][ T9713]  <TASK>
[  302.486692][ T9713]  dump_stack_lvl+0x241/0x360
[  302.491373][ T9713]  ? __pfx_dump_stack_lvl+0x10/0x10
[  302.496562][ T9713]  ? __pfx__printk+0x10/0x10
[  302.500848][ T9717] netlink: 'syz.4.1008': attribute type 3 has an invalid length.
[  302.501154][ T9713]  ? snprintf+0xda/0x120
[  302.513109][ T9713]  should_fail_ex+0x3b0/0x4e0
[  302.517789][ T9713]  _copy_to_user+0x2f/0xb0
[  302.522209][ T9713]  simple_read_from_buffer+0xca/0x150
[  302.527609][ T9713]  proc_fail_nth_read+0x1e9/0x250
[  302.532631][ T9713]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  302.538168][ T9713]  ? rw_verify_area+0x520/0x6b0
[  302.543007][ T9713]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  302.548546][ T9713]  vfs_read+0x204/0xbc0
[  302.552711][ T9713]  ? __pfx_lock_release+0x10/0x10
[  302.557756][ T9713]  ? __pfx_vfs_read+0x10/0x10
[  302.562452][ T9713]  ? __fget_files+0x29/0x470
[  302.567219][ T9713]  ? __fget_files+0x3f6/0x470
[  302.571901][ T9713]  ksys_read+0x1a0/0x2c0
[  302.576152][ T9713]  ? __pfx_ksys_read+0x10/0x10
[  302.580918][ T9713]  ? do_syscall_64+0x100/0x230
[  302.585676][ T9713]  ? do_syscall_64+0xb6/0x230
[  302.590349][ T9713]  do_syscall_64+0xf3/0x230
[  302.594857][ T9713]  ? clear_bhb_loop+0x35/0x90
[  302.599531][ T9713]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  302.605439][ T9713] RIP: 0033:0x7f3b937746bc
[  302.609850][ T9713] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48
[  302.629487][ T9713] RSP: 002b:00007f3b944bf040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  302.637897][ T9713] RAX: ffffffffffffffda RBX: 00007f3b93903f60 RCX: 00007f3b937746bc
[  302.645860][ T9713] RDX: 000000000000000f RSI: 00007f3b944bf0b0 RDI: 0000000000000004
[  302.653817][ T9713] RBP: 00007f3b944bf0a0 R08: 0000000000000000 R09: 0000000000000031
[  302.661780][ T9713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  302.669737][ T9713] R13: 000000000000000b R14: 00007f3b93903f60 R15: 00007f3b93a2fa78
[  302.677793][ T9713]  </TASK>
[  303.302496][   T53] Bluetooth: hci2: command tx timeout
[  303.343498][ T5144] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  303.552857][ T5144] usb 3-1: Using ep0 maxpacket: 32
[  303.566258][ T5144] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  303.578899][ T5144] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.587449][ T5141] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  303.599380][ T5144] usb 3-1: config 0 descriptor??
[  303.617115][ T5144] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  303.785281][ T5141] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  303.818387][ T5144] gspca_vc032x: reg_r err -71
[  303.826923][ T5141] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  303.846655][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  303.883719][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  303.894731][ T5141] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  303.915481][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  303.927877][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  303.936465][ T5141] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  303.948534][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  303.965678][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  303.972423][ T5141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.988549][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  304.000926][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  304.010253][ T5141] usb 2-1: config 0 descriptor??
[  304.015631][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  304.021263][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  304.030561][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  304.036281][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  304.041698][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  304.048215][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  304.053726][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  304.059071][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  304.067118][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  304.073149][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  304.078889][ T5144] gspca_vc032x: Unknown sensor...
[  304.084299][ T5144] vc032x 3-1:0.0: probe with driver vc032x failed with error -22
[  304.095219][ T5144] usb 3-1: USB disconnect, device number 43
[  304.135385][ T5146] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  304.282648][ T5143] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  304.357459][ T5146] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  304.380976][ T5146] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  304.399854][ T5146] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  304.412093][ T5146] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  304.468025][ T5146] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  304.478190][ T5143] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  304.489726][ T5146] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.496586][ T5143] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  304.517184][ T5143] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  304.517813][ T5146] usb 1-1: config 0 descriptor??
[  304.538928][   T29] audit: type=1326 audit(1721037262.902:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9748 comm="syz.4.1023" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc0ff75bd9 code=0x0
[  304.541575][ T9742] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  304.561471][ T5143] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  304.597249][ T5143] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.616329][ T5143] usb 4-1: config 0 descriptor??
[  304.748069][ T5144] usb 3-1: new high-speed USB device number 44 using dummy_hcd
[  304.932727][ T5144] usb 3-1: Using ep0 maxpacket: 32
[  304.946192][ T5144] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  304.964450][ T5144] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.993597][ T5144] usb 3-1: config 0 descriptor??
[  305.023609][ T5144] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  305.046675][ T5143] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  305.063760][ T5141] usbhid 2-1:0.0: can't add hid device: -71
[  305.071374][ T5141] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  305.081775][ T5143] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  305.105676][ T5141] usb 2-1: USB disconnect, device number 41
[  305.118795][ T5143] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  305.141597][ T5143] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  305.156797][ T5143] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  305.178090][ T5143] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  305.198497][ T5146] usbhid 1-1:0.0: can't add hid device: -71
[  305.225552][ T5146] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  305.236729][ T5143] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[  305.244590][ T5146] usb 1-1: USB disconnect, device number 59
[  305.274894][ T5143] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  305.324856][ T9759] netlink: 'syz.4.1026': attribute type 3 has an invalid length.
[  305.393669][   T53] Bluetooth: hci2: command tx timeout
[  305.628700][ T5144] gspca_vc032x: reg_w err -71
[  305.639916][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  305.655524][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  305.661182][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  305.667008][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  305.677072][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  305.691154][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  305.697220][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  305.706832][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  305.712455][ T5141] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  305.721903][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  305.728081][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  305.737555][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  305.748252][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  305.754046][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  305.766410][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  305.809050][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  305.835137][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  305.876371][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  305.881688][ T5144] gspca_vc032x: I2c Bus Busy Wait 00
[  305.922365][ T5141] usb 2-1: Using ep0 maxpacket: 16
[  305.944036][ T5141] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 90, changing to 10
[  305.958171][ T5144] gspca_vc032x: Unknown sensor...
[  305.968384][ T5144] vc032x 3-1:0.0: probe with driver vc032x failed with error -22
[  306.009394][   T45] usb 4-1: USB disconnect, device number 18
[  306.019465][ T5141] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  306.040287][ T5141] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  306.056551][ T5144] usb 3-1: USB disconnect, device number 44
[  306.066048][ T5141] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16
[  306.107542][ T5141] usb 2-1: string descriptor 0 read error: -22
[  306.123861][ T5141] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  306.164040][ T5141] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.406859][ T9764] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  306.597763][ T9787] warning: `syz.0.1034' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  306.629391][ T9764] FAULT_INJECTION: forcing a failure.
[  306.629391][ T9764] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  306.642804][ T9764] CPU: 1 PID: 9764 Comm: syz.1.1027 Not tainted 6.10.0-syzkaller #0
[  306.650829][ T9764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  306.660911][ T9764] Call Trace:
[  306.664214][ T9764]  <TASK>
[  306.667166][ T9764]  dump_stack_lvl+0x241/0x360
[  306.671889][ T9764]  ? __pfx_dump_stack_lvl+0x10/0x10
[  306.677123][ T9764]  ? __pfx__printk+0x10/0x10
[  306.681743][ T9764]  ? __pfx_lock_release+0x10/0x10
[  306.686797][ T9764]  should_fail_ex+0x3b0/0x4e0
[  306.691514][ T9764]  strncpy_from_user+0x36/0x2f0
[  306.696402][ T9764]  ? kmem_cache_alloc_noprof+0x185/0x2a0
[  306.702127][ T9764]  getname_flags+0xfa/0x4f0
[  306.706758][ T9764]  do_sys_openat2+0xd2/0x1d0
[  306.711372][ T9764]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  306.717388][ T9764]  ? __pfx_do_sys_openat2+0x10/0x10
[  306.722628][ T9764]  ? ksys_write+0x101/0x2c0
[  306.727167][ T9764]  __x64_sys_openat+0x247/0x2a0
[  306.732047][ T9764]  ? __pfx___x64_sys_openat+0x10/0x10
[  306.737449][ T9764]  ? do_syscall_64+0x100/0x230
[  306.742251][ T9764]  ? do_syscall_64+0xb6/0x230
[  306.746947][ T9764]  do_syscall_64+0xf3/0x230
[  306.751454][ T9764]  ? clear_bhb_loop+0x35/0x90
[  306.756152][ T9764]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.762093][ T9764] RIP: 0033:0x7fb86e375bd9
[  306.766512][ T9764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  306.786122][ T9764] RSP: 002b:00007fb86f1c9048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  306.794534][ T9764] RAX: ffffffffffffffda RBX: 00007fb86e504038 RCX: 00007fb86e375bd9
[  306.802496][ T9764] RDX: 0000000000006081 RSI: 0000000020000000 RDI: ffffffffffffff9c
[  306.810456][ T9764] RBP: 00007fb86f1c90a0 R08: 0000000000000000 R09: 0000000000000000
[  306.818415][ T9764] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001
[  306.826393][ T9764] R13: 000000000000006e R14: 00007fb86e504038 R15: 00007fb86e62fa78
[  306.834383][ T9764]  </TASK>
[  307.080925][   T29] audit: type=1326 audit(1721037265.442:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9789 comm="syz.0.1035" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b93775bd9 code=0x0
[  307.568454][ T9805] fuse: Bad value for 'fd'
[  307.702415][ T5144] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  307.803153][ T5143] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  307.862295][ T5146] usb 1-1: new full-speed USB device number 60 using dummy_hcd
[  307.905487][ T5144] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  307.931479][ T5144] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  307.941672][ T5144] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  307.982435][ T5144] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  307.992768][   T45] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[  308.003958][ T5143] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  308.016173][ T5144] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.025229][ T5143] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  308.051191][ T5144] usb 4-1: config 0 descriptor??
[  308.060264][ T5143] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  308.077361][ T5146] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  308.091487][ T5143] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  308.105787][ T5143] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  308.106156][ T5146] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  308.135336][ T5146] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64
[  308.142363][ T5143] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.146825][ T5146] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  308.173486][ T5146] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  308.183127][ T5146] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  308.195927][ T5146] usb 1-1: SerialNumber: syz
[  308.198900][ T5141] cdc_ncm 2-1:1.0: bind() failure
[  308.216681][ T5143] usb 5-1: config 0 descriptor??
[  308.223079][   T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  308.223173][ T9803] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  308.244596][ T9805] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  308.247905][   T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  308.260278][ T9805] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22
[  308.272403][ T5141] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71
[  308.281401][ T5146] cdc_acm 1-1:1.0: Control and data interfaces are not separated!
[  308.291803][ T5141] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71
[  308.307504][   T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  308.334510][ T5141] usbtest 2-1:1.1: probe with driver usbtest failed with error -71
[  308.343040][   T45] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  308.357379][ T5141] usb 2-1: USB disconnect, device number 42
[  308.365838][   T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.391542][   T45] usb 3-1: config 0 descriptor??
[  308.502201][    C1] hrtimer: interrupt took 56285 ns
[  308.567495][ T5146] cdc_acm 1-1:1.0: ttyACM0: USB ACM device
[  308.579227][ T5146] usb 1-1: USB disconnect, device number 60
[  308.733304][ T5141] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[  308.819401][   T45] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  308.829525][   T45] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  308.839209][   T45] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  308.847104][   T45] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  308.856660][   T45] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  308.865025][   T45] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0
[  308.877547][   T45] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving
[  308.888733][   T45] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  308.922376][ T5141] usb 2-1: Using ep0 maxpacket: 32
[  308.933934][ T5141] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  308.944546][ T5141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.958300][ T5141] usb 2-1: config 0 descriptor??
[  308.972054][ T5141] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  309.046830][ T5143] usbhid 5-1:0.0: can't add hid device: -71
[  309.064673][ T5143] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  309.096778][ T5144] usbhid 4-1:0.0: can't add hid device: -71
[  309.114433][ T5144] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  309.123513][ T5143] usb 5-1: USB disconnect, device number 34
[  309.210411][ T5144] usb 4-1: USB disconnect, device number 19
[  309.588922][ T5141] gspca_vc032x: reg_w err -71
[  309.639808][ T5141] gspca_vc032x: I2c Bus Busy Wait 00
[  309.650977][ T5141] gspca_vc032x: I2c Bus Busy Wait 00
[  309.662330][ T5141] gspca_vc032x: I2c Bus Busy Wait 00
[  309.667658][ T5141] gspca_vc032x: I2c Bus Busy Wait 00
[  309.676434][ T9823] netlink: 'syz.0.1043': attribute type 3 has an invalid length.
[  309.684710][ T5141] gspca_vc032x: I2c Bus Busy Wait 00
[  309.691953][ T5141] gspca_vc032x: I2c Bus Busy Wait 00
[  309.716270][ T5141] gspca_vc032x: I2c Bus Busy Wait 00
[  309.742468][ T5141] gspca_vc032x: I2c Bus Busy Wait 00
[  309.747793][ T5141] gspca_vc032x: I2c Bus Busy Wait 00
[  309.783546][ T5141] gspca_vc032x: I2c Bus Busy Wait 00
[  309.797401][ T5141] gspca_vc032x: I2c Bus Busy Wait 00
[  309.803458][ T5141] gspca_vc032x: I2c Bus Busy Wait 00
[  309.810561][ T5141] gspca_vc032x: I2c Bus Busy Wait 00
[  309.816732][ T5141] gspca_vc032x: I2c Bus Busy Wait 00
[  309.824096][ T5141] gspca_vc032x: I2c Bus Busy Wait 00
[  309.844390][ T5141] gspca_vc032x: I2c Bus Busy Wait 00
[  309.855066][ T5141] gspca_vc032x: I2c Bus Busy Wait 00
[  309.864472][ T5141] gspca_vc032x: I2c Bus Busy Wait 00
[  309.875971][ T5141] gspca_vc032x: Unknown sensor...
[  309.886998][ T5141] vc032x 2-1:0.0: probe with driver vc032x failed with error -22
[  309.903180][ T5141] usb 2-1: USB disconnect, device number 43
[  310.230435][ T9832] FAULT_INJECTION: forcing a failure.
[  310.230435][ T9832] name failslab, interval 1, probability 0, space 0, times 0
[  310.250952][ T9832] CPU: 1 PID: 9832 Comm: syz.1.1047 Not tainted 6.10.0-syzkaller #0
[  310.258969][ T9832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  310.269063][ T9832] Call Trace:
[  310.272526][ T9832]  <TASK>
[  310.275460][ T9832]  dump_stack_lvl+0x241/0x360
[  310.280141][ T9832]  ? __pfx_dump_stack_lvl+0x10/0x10
[  310.285336][ T9832]  ? __pfx__printk+0x10/0x10
[  310.289926][ T9832]  ? ref_tracker_alloc+0x332/0x490
[  310.295046][ T9832]  should_fail_ex+0x3b0/0x4e0
[  310.299847][ T9832]  ? skb_clone+0x20c/0x390
[  310.304366][ T9832]  should_failslab+0x9/0x20
[  310.308899][ T9832]  kmem_cache_alloc_noprof+0x6c/0x2a0
[  310.314286][ T9832]  skb_clone+0x20c/0x390
[  310.318522][ T9832]  __netlink_deliver_tap+0x3cc/0x7c0
[  310.323805][ T9832]  ? netlink_deliver_tap+0x2e/0x1b0
[  310.328990][ T9832]  netlink_deliver_tap+0x19d/0x1b0
[  310.334090][ T9832]  netlink_unicast+0x7b8/0x980
[  310.338846][ T9832]  ? __pfx_netlink_unicast+0x10/0x10
[  310.344120][ T9832]  ? __virt_addr_valid+0x183/0x530
[  310.349238][ T9832]  ? __check_object_size+0x49c/0x900
[  310.354533][ T9832]  ? bpf_lsm_netlink_send+0x9/0x10
[  310.359655][ T9832]  netlink_sendmsg+0x8db/0xcb0
[  310.364427][ T9832]  ? __pfx_netlink_sendmsg+0x10/0x10
[  310.369711][ T9832]  ? aa_sock_msg_perm+0x91/0x160
[  310.374994][ T9832]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  310.380269][ T9832]  ? security_socket_sendmsg+0x87/0xb0
[  310.385721][ T9832]  ? __pfx_netlink_sendmsg+0x10/0x10
[  310.390999][ T9832]  __sock_sendmsg+0x221/0x270
[  310.395668][ T9832]  sock_write_iter+0x2dd/0x400
[  310.400428][ T9832]  ? __pfx_sock_write_iter+0x10/0x10
[  310.405724][ T9832]  do_iter_readv_writev+0x5a4/0x800
[  310.410921][ T9832]  ? __pfx_do_iter_readv_writev+0x10/0x10
[  310.416641][ T9832]  ? bpf_lsm_file_permission+0x9/0x10
[  310.422005][ T9832]  ? security_file_permission+0x7f/0xa0
[  310.427548][ T9832]  ? rw_verify_area+0x1d2/0x6b0
[  310.432391][ T9832]  vfs_writev+0x37c/0xbb0
[  310.436722][ T9832]  ? __pfx_lock_acquire+0x10/0x10
[  310.441736][ T9832]  ? __pfx_vfs_writev+0x10/0x10
[  310.446574][ T9832]  ? vfs_write+0x7c4/0xc90
[  310.450991][ T9832]  ? __fget_files+0x29/0x470
[  310.455598][ T9832]  do_writev+0x1b1/0x350
[  310.459842][ T9832]  ? __pfx_do_writev+0x10/0x10
[  310.464618][ T9832]  ? do_syscall_64+0x100/0x230
[  310.469377][ T9832]  ? do_syscall_64+0xb6/0x230
[  310.474223][ T9832]  do_syscall_64+0xf3/0x230
[  310.478722][ T9832]  ? clear_bhb_loop+0x35/0x90
[  310.483392][ T9832]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.489279][ T9832] RIP: 0033:0x7fb86e375bd9
[  310.493683][ T9832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  310.513292][ T9832] RSP: 002b:00007fb86f1ea048 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[  310.521702][ T9832] RAX: ffffffffffffffda RBX: 00007fb86e503f60 RCX: 00007fb86e375bd9
[  310.529662][ T9832] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000003
[  310.537626][ T9832] RBP: 00007fb86f1ea0a0 R08: 0000000000000000 R09: 0000000000000000
[  310.545674][ T9832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  310.553637][ T9832] R13: 000000000000000b R14: 00007fb86e503f60 R15: 00007fb86e62fa78
[  310.561611][ T9832]  </TASK>
[  310.567361][ T9832] netlink: 'syz.1.1047': attribute type 10 has an invalid length.
[  310.619814][ T5141] usb 3-1: USB disconnect, device number 45
[  310.746564][ T9832] team0: Device hsr_slave_1 failed to register rx_handler
[  310.773277][ T9834] FAULT_INJECTION: forcing a failure.
[  310.773277][ T9834] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  310.815701][ T9834] CPU: 1 PID: 9834 Comm: syz.2.1048 Not tainted 6.10.0-syzkaller #0
[  310.823733][ T9834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  310.833810][ T9834] Call Trace:
[  310.837113][ T9834]  <TASK>
[  310.840067][ T9834]  dump_stack_lvl+0x241/0x360
[  310.844780][ T9834]  ? __pfx_dump_stack_lvl+0x10/0x10
[  310.849994][ T9834]  ? __pfx__printk+0x10/0x10
[  310.854603][ T9834]  should_fail_ex+0x3b0/0x4e0
[  310.859308][ T9834]  _copy_from_user+0x2f/0xe0
[  310.863916][ T9834]  sctp_setsockopt+0xcc/0x11c0
[  310.868695][ T9834]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  310.874934][ T9834]  do_sock_setsockopt+0x3af/0x720
[  310.879962][ T9834]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  310.885502][ T9834]  ? __fget_files+0x29/0x470
[  310.890089][ T9834]  ? __fget_files+0x3f6/0x470
[  310.894768][ T9834]  __sys_setsockopt+0x1ae/0x250
[  310.899615][ T9834]  __x64_sys_setsockopt+0xb5/0xd0
[  310.904633][ T9834]  do_syscall_64+0xf3/0x230
[  310.909129][ T9834]  ? clear_bhb_loop+0x35/0x90
[  310.913803][ T9834]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.919693][ T9834] RIP: 0033:0x7f1ca1975bd9
[  310.924124][ T9834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  310.943765][ T9834] RSP: 002b:00007f1ca26c0048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  310.952185][ T9834] RAX: ffffffffffffffda RBX: 00007f1ca1b03f60 RCX: 00007f1ca1975bd9
[  310.960151][ T9834] RDX: 0000000000000076 RSI: 0000000000000084 RDI: 0000000000000003
[  310.968113][ T9834] RBP: 00007f1ca26c00a0 R08: 0000000000000008 R09: 0000000000000000
[  310.976072][ T9834] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001
[  310.984032][ T9834] R13: 000000000000000b R14: 00007f1ca1b03f60 R15: 00007f1ca1c2fa78
[  310.992003][ T9834]  </TASK>
[  311.108825][   T29] audit: type=1326 audit(1721037269.462:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9835 comm="syz.3.1049" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8050975bd9 code=0x0
[  311.442257][ T5141] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[  311.552997][ T5144] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  311.641769][ T5141] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  311.656754][ T5146] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  311.657528][ T5141] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  311.679643][ T5141] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  311.696412][ T5141] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  311.705895][ T5141] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.721594][ T5141] usb 3-1: config 0 descriptor??
[  311.754953][ T5144] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  311.767800][ T5144] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  311.804272][ T5144] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  311.816574][ T5144] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  311.832057][ T5144] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  311.842554][ T5144] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  311.871334][ T5144] usb 1-1: config 0 descriptor??
[  311.881425][ T9855] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  311.892896][ T5146] usb 5-1: Using ep0 maxpacket: 16
[  311.910678][ T5146] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79
[  311.940052][ T5146] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.959095][ T5146] usb 5-1: Product: syz
[  311.966637][ T5146] usb 5-1: Manufacturer: syz
[  311.971613][ T5146] usb 5-1: SerialNumber: syz
[  311.978012][ T9861] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  312.022544][ T5146] usb 5-1: config 0 descriptor??
[  312.239694][ T5146] usb 5-1: Limiting number of CPorts to U8_MAX
[  312.254587][ T5146] usb 5-1: Not enough endpoints found in device, aborting!
[  312.322529][  T933] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  312.488343][ T5143] usb 5-1: USB disconnect, device number 35
[  312.513333][  T933] usb 4-1: Using ep0 maxpacket: 8
[  312.522058][ T5144] usbhid 1-1:0.0: can't add hid device: -71
[  312.524313][  T933] usb 4-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=7f.01
[  312.557891][ T5144] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  312.582687][  T933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.597266][  T933] usb 4-1: config 0 descriptor??
[  312.621947][  T933] usb 4-1: unknown interface protocol 0x3f, assuming v1
[  312.633491][ T5144] usb 1-1: USB disconnect, device number 61
[  312.643262][  T933] usb 4-1: cannot find UAC_HEADER
[  312.748266][  T933] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22
[  312.801560][ T5141] usbhid 3-1:0.0: can't add hid device: -71
[  312.826213][   T25] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  312.839288][ T5088] udevd[5088]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  312.869771][ T5141] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  312.912115][ T5141] usb 3-1: USB disconnect, device number 46
[  313.018897][ T5143] usb 4-1: USB disconnect, device number 20
[  313.087534][   T25] usb 2-1: too many configurations: 18, using maximum allowed: 8
[  313.139651][   T25] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a
[  313.149405][   T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.173394][   T25] usb 2-1: config 0 descriptor??
[  313.199042][   T25] gspca_main: 0c45:8001 too many config
[  313.255190][ T9871] netlink: 'syz.0.1061': attribute type 29 has an invalid length.
[  313.280974][ T9871] netlink: 'syz.0.1061': attribute type 29 has an invalid length.
[  313.316086][ T9871] netlink: 'syz.0.1061': attribute type 29 has an invalid length.
[  313.523530][ T9881] PKCS7: Unknown OID: [4] 2.19.0.2.86.14.43(bad)
[  313.551531][ T9881] PKCS7: Only support pkcs7_signedData type
[  313.575006][ T9879] netlink: 'syz.0.1063': attribute type 10 has an invalid length.
[  313.602854][ T9879] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  313.653775][ T9879] batman_adv: batadv0: Removing interface: batadv_slave_0
[  313.676388][ T5141] usb 2-1: USB disconnect, device number 44
[  313.814065][ T9879] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  314.378754][   T29] audit: type=1326 audit(1721037272.742:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9893 comm="syz.3.1067" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8050975bd9 code=0x0
[  314.862392][ T5143] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[  315.064371][ T5143] usb 3-1: config 164 has an invalid descriptor of length 0, skipping remainder of the config
[  315.091507][ T5143] usb 3-1: New USB device found, idVendor=048d, idProduct=9005, bcdDevice=40.3d
[  315.122017][ T5143] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  315.140580][ T5143] usb 3-1: Product: syz
[  315.146341][ T5143] usb 3-1: Manufacturer: syz
[  315.151562][ T5143] usb 3-1: SerialNumber: syz
[  315.292299][ T5141] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  315.475811][ T5143] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  315.497912][ T5141] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  315.512543][ T5143] dvb_usb_af9035 3-1:164.0: probe with driver dvb_usb_af9035 failed with error -22
[  315.533994][ T5141] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  315.555309][ T5143] usb 3-1: USB disconnect, device number 47
[  315.561586][ T5141] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  315.581167][ T5141] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  315.618961][ T5141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  315.641855][ T5141] usb 1-1: config 0 descriptor??
[  315.852306][  T933] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  315.990982][ T9912] netlink: 'syz.4.1072': attribute type 3 has an invalid length.
[  316.054271][  T933] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  316.070663][  T933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  316.084171][  T933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  316.096099][  T933] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  316.148358][  T933] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  316.200395][  T933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.234994][  T933] usb 2-1: config 0 descriptor??
[  316.250724][ T9909] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  316.366722][ T9916] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1073'.
[  316.550849][ T9920] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  316.705789][ T5141] usbhid 1-1:0.0: can't add hid device: -71
[  316.728653][ T5141] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  316.762536][ T5141] usb 1-1: USB disconnect, device number 62
[  316.853524][ T5143] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[  316.921959][ T9929] netlink: 'syz.4.1079': attribute type 10 has an invalid length.
[  316.933261][ T9929] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  316.955604][ T9929] batman_adv: batadv0: Removing interface: batadv_slave_0
[  316.964710][ T9909] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  316.982311][ T9909] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  317.030262][ T9929] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  317.054215][ T5143] usb 3-1: Using ep0 maxpacket: 8
[  317.054916][ T9909] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  317.075701][ T5143] usb 3-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=7f.01
[  317.080388][ T9909] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  317.098281][ T5143] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.124963][ T9909] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  317.140786][ T5143] usb 3-1: config 0 descriptor??
[  317.141179][ T9909] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  317.154897][ T5143] usb 3-1: unknown interface protocol 0x3f, assuming v1
[  317.164120][ T5143] usb 3-1: cannot find UAC_HEADER
[  317.190813][   T29] audit: type=1326 audit(1721037275.552:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9934 comm="syz.3.1080" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8050975bd9 code=0x0
[  317.224065][ T9909] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  317.226154][ T5141] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  317.232514][ T9909] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  317.256165][ T5143] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22
[  317.291468][  T933] usbhid 2-1:0.0: can't add hid device: -71
[  317.309780][  T933] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  317.333381][ T5382] udevd[5382]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  317.335713][  T933] usb 2-1: USB disconnect, device number 45
[  317.459622][ T5148] usb 3-1: USB disconnect, device number 48
[  317.462658][ T5141] usb 1-1: Using ep0 maxpacket: 32
[  317.497712][ T5141] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  317.523162][ T5141] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.533118][ T5141] usb 1-1: config 0 descriptor??
[  317.547926][ T1247] ieee802154 phy0 wpan0: encryption failed: -22
[  317.554345][ T1247] ieee802154 phy1 wpan1: encryption failed: -22
[  317.563558][ T5141] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  318.000356][ T9941] PKCS7: Unknown OID: [4] 2.19.0.2.86.14.43(bad)
[  318.024409][ T9941] PKCS7: Only support pkcs7_signedData type
[  318.145657][ T5141] gspca_vc032x: reg_w err -71
[  318.150376][ T5141] gspca_vc032x: I2c Bus Busy Wait 00
[  318.160405][ T5141] gspca_vc032x: I2c Bus Busy Wait 00
[  318.176325][ T5141] gspca_vc032x: I2c Bus Busy Wait 00
[  318.197236][ T5141] gspca_vc032x: I2c Bus Busy Wait 00
[  318.241293][ T5141] gspca_vc032x: I2c Bus Busy Wait 00
[  318.258757][ T5141] gspca_vc032x: I2c Bus Busy Wait 00
[  318.282972][ T5141] gspca_vc032x: I2c Bus Busy Wait 00
[  318.307129][ T5141] gspca_vc032x: I2c Bus Busy Wait 00
[  318.316973][ T9951] netlink: 'syz.4.1086': attribute type 29 has an invalid length.
[  318.324628][ T5141] gspca_vc032x: I2c Bus Busy Wait 00
[  318.345356][ T5141] gspca_vc032x: I2c Bus Busy Wait 00
[  318.352407][ T9951] netlink: 'syz.4.1086': attribute type 29 has an invalid length.
[  318.377644][ T9951] netlink: 'syz.4.1086': attribute type 29 has an invalid length.
[  318.380752][ T5141] gspca_vc032x: I2c Bus Busy Wait 00
[  318.404188][ T5141] gspca_vc032x: I2c Bus Busy Wait 00
[  318.409570][ T5141] gspca_vc032x: I2c Bus Busy Wait 00
[  318.421681][ T5141] gspca_vc032x: I2c Bus Busy Wait 00
[  318.438451][ T5141] gspca_vc032x: I2c Bus Busy Wait 00
[  318.448870][ T5141] gspca_vc032x: I2c Bus Busy Wait 00
[  318.455998][ T5141] gspca_vc032x: I2c Bus Busy Wait 00
[  318.462941][ T5141] gspca_vc032x: I2c Bus Busy Wait 00
[  318.468479][ T5141] gspca_vc032x: Unknown sensor...
[  318.477437][ T5141] vc032x 1-1:0.0: probe with driver vc032x failed with error -22
[  318.493485][ T5141] usb 1-1: USB disconnect, device number 63
[  318.832517][ T5142] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  319.034182][ T5142] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  319.060577][ T5142] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  319.081171][ T5142] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  319.100146][ T5142] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  319.115448][ T5142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.124282][ T5141] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  319.143577][ T5142] usb 5-1: config 0 descriptor??
[  319.263867][   T29] audit: type=1326 audit(1721037277.632:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9969 comm="syz.1.1093" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb86e375bd9 code=0x0
[  319.282784][ T9968] netlink: 'syz.3.1092': attribute type 14 has an invalid length.
[  319.326452][ T5141] usb 1-1: Using ep0 maxpacket: 8
[  319.338578][ T5141] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  319.392456][ T5141] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  319.423021][ T5141] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  319.442625][ T9976] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1095'.
[  319.451824][ T5141] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  319.476139][ T5141] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  319.485994][ T5141] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.495158][ T5141] usb 1-1: Product: syz
[  319.499583][ T5141] usb 1-1: Manufacturer: syz
[  319.514577][ T5141] usb 1-1: SerialNumber: syz
[  319.724847][ T9981] netlink: 'syz.3.1097': attribute type 3 has an invalid length.
[  319.743234][ T5143] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[  319.932375][ T5143] usb 3-1: Using ep0 maxpacket: 32
[  319.951469][ T5143] usb 3-1: config 128 has an invalid interface number: 45 but max is 0
[  319.961603][ T5143] usb 3-1: config 128 contains an unexpected descriptor of type 0x2, skipping
[  319.971919][ T5143] usb 3-1: config 128 has no interface number 0
[  319.979519][ T5143] usb 3-1: config 128 interface 45 has no altsetting 0
[  319.990616][ T5143] usb 3-1: Dual-Role OTG device on HNP port
[  319.998175][ T5143] usb 3-1: New USB device found, idVendor=0c52, idProduct=2833, bcdDevice=5b.e1
[  320.008949][ T5143] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  320.019811][ T5143] usb 3-1: Product: syz
[  320.025671][ T5143] usb 3-1: Manufacturer: syz
[  320.033130][ T5143] usb 3-1: SerialNumber: syz
[  320.141937][ T5142] usbhid 5-1:0.0: can't add hid device: -71
[  320.156241][ T5142] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  320.199985][ T5142] usb 5-1: USB disconnect, device number 36
[  320.260958][ T5143] ftdi_sio 3-1:128.45: FTDI USB Serial Device converter detected
[  320.275616][ T5143] ftdi_sio ttyUSB0: unknown device type: 0x5be1
[  320.285468][ T5143] usb 3-1: USB disconnect, device number 49
[  320.294564][ T5143] ftdi_sio 3-1:128.45: device disconnected
[  320.442463][ T5148] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  320.565085][ T5141] cdc_ncm 1-1:1.0: bind() failure
[  320.580579][ T5141] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71
[  320.589442][ T5141] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71
[  320.598547][ T5141] usbtest 1-1:1.1: probe with driver usbtest failed with error -71
[  320.609945][ T5141] usb 1-1: USB disconnect, device number 64
[  320.632416][ T5142] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  320.643216][ T5148] usb 2-1: Using ep0 maxpacket: 8
[  320.650934][ T5148] usb 2-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=7f.01
[  320.660244][ T5148] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.676565][ T5148] usb 2-1: config 0 descriptor??
[  320.685127][ T5148] usb 2-1: unknown interface protocol 0x3f, assuming v1
[  320.692096][ T5148] usb 2-1: cannot find UAC_HEADER
[  320.708759][ T5148] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22
[  320.739188][ T5382] udevd[5382]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  320.773563][    T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  320.812277][ T5142] usb 5-1: Using ep0 maxpacket: 32
[  320.819270][ T5142] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  320.829063][ T5142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.840446][ T5142] usb 5-1: config 0 descriptor??
[  320.850009][ T5142] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  320.963336][ T5148] usb 2-1: USB disconnect, device number 46
[  320.975795][    T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  320.995995][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  321.013675][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  321.026437][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  321.028378][ T9995] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1101'.
[  321.040943][    T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  321.058890][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.074491][    T9] usb 4-1: config 0 descriptor??
[  321.082954][ T9991] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  321.458384][ T5142] gspca_vc032x: reg_w err -71
[  321.463813][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[  321.478182][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[  321.484821][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[  321.490133][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[  321.500986][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[  321.506503][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[  321.511811][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[  321.522317][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[  321.530612][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[  321.541063][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[  321.557234][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[  321.567080][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[  321.580945][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[  321.587746][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[  321.598668][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[  321.605167][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[  321.611082][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[  321.631324][ T5142] gspca_vc032x: I2c Bus Busy Wait 00
[  321.641044][ T5142] gspca_vc032x: Unknown sensor...
[  321.648782][ T5142] vc032x 5-1:0.0: probe with driver vc032x failed with error -22
[  321.665783][ T5142] usb 5-1: USB disconnect, device number 37
[  321.746140][    T9] usbhid 4-1:0.0: can't add hid device: -71
[  321.766089][    T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  321.790180][    T9] usb 4-1: USB disconnect, device number 21
[  322.106928][T10007] netlink: 'syz.1.1106': attribute type 14 has an invalid length.
[  322.379947][T10018] netlink: 'syz.1.1110': attribute type 3 has an invalid length.
[  322.388054][   T29] audit: type=1326 audit(1721037280.752:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10011 comm="syz.4.1108" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc0ff75bd9 code=0x0
[  322.582445][ T5142] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[  322.784083][ T5142] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  322.834314][ T5142] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  322.854751][ T5142] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  322.901229][ T5142] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  322.944804][ T5142] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.986640][ T5142] usb 3-1: config 0 descriptor??
[  323.409871][T10033] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  323.762402][ T5148] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  323.962339][    T9] usb 2-1: new full-speed USB device number 47 using dummy_hcd
[  323.970115][ T5148] usb 5-1: Using ep0 maxpacket: 8
[  323.977437][ T5148] usb 5-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice=7f.01
[  323.993610][ T5148] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.002378][ T5143] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  324.009039][ T5148] usb 5-1: config 0 descriptor??
[  324.020388][ T5148] usb 5-1: unknown interface protocol 0x3f, assuming v1
[  324.038410][ T5148] usb 5-1: cannot find UAC_HEADER
[  324.047727][ T5142] usbhid 3-1:0.0: can't add hid device: -71
[  324.075766][ T5142] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  324.111294][ T5142] usb 3-1: USB disconnect, device number 50
[  324.175883][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  324.188104][ T5148] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22
[  324.192966][ T5143] usb 1-1: Using ep0 maxpacket: 32
[  324.205158][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  324.234297][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  324.243600][ T5143] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  324.252281][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.272650][ T5143] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.285802][ T5382] udevd[5382]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  324.291959][    T9] usb 2-1: config 0 descriptor??
[  324.323348][ T5143] usb 1-1: config 0 descriptor??
[  324.333398][ T5143] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  324.345767][    T9] hub 2-1:0.0: USB hub found
[  324.403932][ T5142] usb 5-1: USB disconnect, device number 38
[  324.456962][T10045] netlink: 'syz.3.1120': attribute type 14 has an invalid length.
[  324.558919][    T9] hub 2-1:0.0: 1 port detected
[  324.863593][ T5148] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  324.961046][ T5143] gspca_vc032x: reg_w err -71
[  324.981033][    T9] usb 2-1: USB disconnect, device number 47
[  324.981481][ T5143] gspca_vc032x: I2c Bus Busy Wait 00
[  325.014196][ T5143] gspca_vc032x: I2c Bus Busy Wait 00
[  325.019967][ T5143] gspca_vc032x: I2c Bus Busy Wait 00
[  325.040237][ T5143] gspca_vc032x: I2c Bus Busy Wait 00
[  325.065022][ T5148] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  325.067748][ T5143] gspca_vc032x: I2c Bus Busy Wait 00
[  325.088376][ T5148] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  325.103089][ T5143] gspca_vc032x: I2c Bus Busy Wait 00
[  325.117490][ T5143] gspca_vc032x: I2c Bus Busy Wait 00
[  325.134430][ T5143] gspca_vc032x: I2c Bus Busy Wait 00
[  325.137609][ T5148] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  325.139880][ T5143] gspca_vc032x: I2c Bus Busy Wait 00
[  325.170975][ T5148] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  325.192384][ T5143] gspca_vc032x: I2c Bus Busy Wait 00
[  325.200230][ T5143] gspca_vc032x: I2c Bus Busy Wait 00
[  325.206799][ T5143] gspca_vc032x: I2c Bus Busy Wait 00
[  325.210984][ T5148] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  325.213019][ T5143] gspca_vc032x: I2c Bus Busy Wait 00
[  325.236162][ T5148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.238853][ T5143] gspca_vc032x: I2c Bus Busy Wait 00
[  325.247717][ T5148] usb 4-1: config 0 descriptor??
[  325.254773][ T5143] gspca_vc032x: I2c Bus Busy Wait 00
[  325.254790][ T5143] gspca_vc032x: I2c Bus Busy Wait 00
[  325.254801][ T5143] gspca_vc032x: I2c Bus Busy Wait 00
[  325.254810][ T5143] gspca_vc032x: I2c Bus Busy Wait 00
[  325.254820][ T5143] gspca_vc032x: Unknown sensor...
[  325.269616][T10051] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  325.297077][ T5143] vc032x 1-1:0.0: probe with driver vc032x failed with error -22
[  325.309710][ T5143] usb 1-1: USB disconnect, device number 65
[  325.340266][   T29] audit: type=1326 audit(1721037283.702:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10056 comm="syz.2.1125" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1ca1975bd9 code=0x0
[  325.715199][T10062] netlink: 'syz.1.1126': attribute type 3 has an invalid length.
[  325.949775][ T5148] usbhid 4-1:0.0: can't add hid device: -71
[  325.974034][ T5148] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  326.015223][ T5148] usb 4-1: USB disconnect, device number 22
[  326.653179][T10079] netlink: 'syz.2.1132': attribute type 14 has an invalid length.
[  326.814217][T10087] FAULT_INJECTION: forcing a failure.
[  326.814217][T10087] name failslab, interval 1, probability 0, space 0, times 0
[  326.842454][T10087] CPU: 0 PID: 10087 Comm: syz.0.1135 Not tainted 6.10.0-syzkaller #0
[  326.850585][T10087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  326.860641][T10087] Call Trace:
[  326.863915][T10087]  <TASK>
[  326.866859][T10087]  dump_stack_lvl+0x241/0x360
[  326.871560][T10087]  ? __pfx_dump_stack_lvl+0x10/0x10
[  326.876767][T10087]  ? __pfx__printk+0x10/0x10
[  326.881370][T10087]  ? __pfx___might_resched+0x10/0x10
[  326.886666][T10087]  should_fail_ex+0x3b0/0x4e0
[  326.891351][T10087]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[  326.897092][T10087]  should_failslab+0x9/0x20
[  326.901616][T10087]  __kmalloc_noprof+0xd8/0x400
[  326.906401][T10087]  ? kfree+0x4e/0x360
[  326.910412][T10087]  tomoyo_realpath_from_path+0xcf/0x5e0
[  326.915969][T10087]  tomoyo_path_number_perm+0x23a/0x880
[  326.921467][T10087]  ? tomoyo_path_number_perm+0x208/0x880
[  326.927096][T10087]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  326.933194][T10087]  ? __fget_files+0x29/0x470
[  326.937796][T10087]  ? __fget_files+0x3f6/0x470
[  326.942473][T10087]  ? __fget_files+0x29/0x470
[  326.947078][T10087]  security_file_ioctl+0x75/0xb0
[  326.952024][T10087]  __se_sys_ioctl+0x47/0x170
[  326.956645][T10087]  do_syscall_64+0xf3/0x230
[  326.961168][T10087]  ? clear_bhb_loop+0x35/0x90
[  326.965856][T10087]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  326.971758][T10087] RIP: 0033:0x7f3b93775bd9
[  326.976175][T10087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  326.996206][T10087] RSP: 002b:00007f3b944bf048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  327.004622][T10087] RAX: ffffffffffffffda RBX: 00007f3b93903f60 RCX: 00007f3b93775bd9
[  327.012587][T10087] RDX: 0000000020000000 RSI: 0000000080045505 RDI: 0000000000000003
[  327.020555][T10087] RBP: 00007f3b944bf0a0 R08: 0000000000000000 R09: 0000000000000000
[  327.028596][T10087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  327.036562][T10087] R13: 000000000000000b R14: 00007f3b93903f60 R15: 00007f3b93a2fa78
[  327.044575][T10087]  </TASK>
[  327.078073][T10087] ERROR: Out of memory at tomoyo_realpath_from_path.
[  327.085132][T10087] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.1135' sets config #0
[  327.132586][    T9] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  327.333908][    T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  327.345697][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  327.367956][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  327.385743][ T5143] usb 3-1: new full-speed USB device number 51 using dummy_hcd
[  327.400285][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  327.415000][    T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  327.426147][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.443046][    T9] usb 2-1: config 0 descriptor??
[  327.448774][T10081] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  327.563994][ T5148] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  327.574681][ T5143] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  327.596365][ T5143] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  327.611450][ T5143] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  327.636588][ T5143] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.662414][ T5143] usb 3-1: config 0 descriptor??
[  327.675323][ T5143] hub 3-1:0.0: USB hub found
[  327.762267][ T5148] usb 1-1: Using ep0 maxpacket: 32
[  327.769619][ T5148] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  327.780225][ T5148] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.805549][ T5148] usb 1-1: config 0 descriptor??
[  327.837252][ T5148] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  327.882453][ T5143] hub 3-1:0.0: 1 port detected
[  327.901682][   T29] audit: type=1326 audit(1721037286.262:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10103 comm="syz.4.1142" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc0ff75bd9 code=0x0
[  328.104455][    T9] usbhid 2-1:0.0: can't add hid device: -71
[  328.112604][    T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  328.135057][    T9] usb 2-1: USB disconnect, device number 48
[  328.232287][ T5146] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  328.310601][ T5143] usb 3-1: USB disconnect, device number 51
[  328.436028][ T5146] usb 4-1: too many configurations: 18, using maximum allowed: 8
[  328.457491][ T5148] gspca_vc032x: reg_w err -71
[  328.473806][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[  328.481786][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[  328.489089][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[  328.497186][ T5146] usb 4-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a
[  328.513293][ T5146] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.522066][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[  328.527556][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[  328.554910][ T5146] usb 4-1: config 0 descriptor??
[  328.561229][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[  328.577596][ T5146] gspca_main: 0c45:8001 too many config
[  328.583549][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[  328.588852][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[  328.608913][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[  328.615698][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[  328.621961][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[  328.630117][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[  328.635887][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[  328.672490][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[  328.679022][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[  328.685012][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[  328.693892][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[  328.700041][ T5148] gspca_vc032x: I2c Bus Busy Wait 00
[  328.706519][ T5148] gspca_vc032x: Unknown sensor...
[  328.714270][ T5148] vc032x 1-1:0.0: probe with driver vc032x failed with error -22
[  328.744232][ T5148] usb 1-1: USB disconnect, device number 66
[  328.821458][ T5141] usb 4-1: USB disconnect, device number 23
[  328.962089][T10116] netlink: 'syz.2.1146': attribute type 1 has an invalid length.
[  328.981048][T10116] bond1: entered promiscuous mode
[  329.009772][T10116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1146'.
[  329.027118][T10116] bond1: left promiscuous mode
[  329.035574][T10116] 8021q: adding VLAN 0 to HW filter on device bond1
[  329.081200][   T45] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  329.303312][   T45] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  329.327709][   T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  329.340321][   T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  329.356581][   T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  329.374977][   T45] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  329.388336][   T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.443666][   T45] usb 2-1: config 0 descriptor??
[  329.476312][T10112] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  329.686661][T10127] input: syz1 as /devices/virtual/input/input68
[  330.219955][   T45] usbhid 2-1:0.0: can't add hid device: -71
[  330.238544][   T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  330.272701][   T45] usb 2-1: USB disconnect, device number 49
[  330.804596][T10137] fuse: Bad value for 'fd'
[  330.989076][   T29] audit: type=1326 audit(1721037289.352:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10140 comm="syz.3.1155" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8050975bd9 code=0x0
[  331.202657][   T45] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  331.389282][   T45] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  331.408920][   T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  331.421763][   T45] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  331.437618][   T45] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  331.455317][   T45] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  331.465130][   T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  331.480243][   T45] usb 2-1: config 0 descriptor??
[  331.486606][T10143] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  331.789695][T10161] input: syz1 as /devices/virtual/input/input69
[  332.098201][T10173] netlink: 'syz.2.1166': attribute type 3 has an invalid length.
[  332.120331][   T45] usbhid 2-1:0.0: can't add hid device: -71
[  332.172544][   T45] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  332.205713][   T45] usb 2-1: USB disconnect, device number 50
[  332.423262][ T5142] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  332.633006][ T5142] usb 4-1: too many configurations: 18, using maximum allowed: 8
[  332.729683][ T5142] usb 4-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a
[  332.749273][ T5142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.783210][ T5142] usb 4-1: config 0 descriptor??
[  332.818231][ T5142] gspca_main: 0c45:8001 too many config
[  333.195041][T10193] fuse: Bad value for 'fd'
[  333.231653][ T5142] usb 4-1: USB disconnect, device number 24
[  334.215307][T10210] netlink: 'syz.0.1180': attribute type 3 has an invalid length.
[  334.228604][T10211] input: syz1 as /devices/virtual/input/input70
[  334.372497][ T5141] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  334.566378][ T5141] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  334.586630][ T5141] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  334.601426][ T5141] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  334.617752][ T5141] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  334.633468][ T5141] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  334.642950][ T5141] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.654250][ T5141] usb 2-1: config 0 descriptor??
[  334.665690][T10206] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  335.302318][ T5141] usbhid 2-1:0.0: can't add hid device: -71
[  335.344630][ T5141] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  335.370083][ T5141] usb 2-1: USB disconnect, device number 51
[  335.571208][T10233] netlink: 'syz.0.1186': attribute type 3 has an invalid length.
[  335.726220][T10241] fuse: Bad value for 'fd'
[  336.256411][   T29] audit: type=1326 audit(1721037294.622:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10244 comm="syz.1.1191" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb86e375bd9 code=0x0
[  336.462102][T10254] netlink: 'syz.4.1194': attribute type 3 has an invalid length.
[  336.474029][T10253] input: syz1 as /devices/virtual/input/input71
[  337.390580][   T29] audit: type=1326 audit(1721037295.752:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10263 comm="syz.1.1197" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb86e375bd9 code=0x0
[  337.558277][T10274] PKCS7: Unknown OID: [5] 0.0
[  337.572198][T10274] PKCS7: Only support pkcs7_signedData type
[  337.732480][    T9] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  337.772279][  T933] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  337.915428][    T9] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  337.939786][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  337.960791][    T9] usb 1-1: config 0 descriptor??
[  337.967990][  T933] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  337.992730][  T933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  338.012279][  T933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  338.056644][  T933] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  338.071924][ T2490] bridge_slave_1: left allmulticast mode
[  338.108145][ T2490] bridge_slave_1: left promiscuous mode
[  338.108168][  T933] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  338.126167][  T933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.155358][ T2490] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.184431][ T2490] bridge_slave_0: left allmulticast mode
[  338.197992][  T933] usb 5-1: config 0 descriptor??
[  338.205042][ T2490] bridge_slave_0: left promiscuous mode
[  338.218231][T10272] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  338.237317][ T2490] bridge0: port 1(bridge_slave_0) entered disabled state
[  338.705163][T10292] FAULT_INJECTION: forcing a failure.
[  338.705163][T10292] name failslab, interval 1, probability 0, space 0, times 0
[  338.780933][T10292] CPU: 0 PID: 10292 Comm: syz.3.1206 Not tainted 6.10.0-syzkaller #0
[  338.789063][T10292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  338.799116][T10292] Call Trace:
[  338.802395][T10292]  <TASK>
[  338.805315][T10292]  dump_stack_lvl+0x241/0x360
[  338.809995][T10292]  ? __pfx_dump_stack_lvl+0x10/0x10
[  338.815211][T10292]  ? __pfx__printk+0x10/0x10
[  338.819830][T10292]  ? __pfx___might_resched+0x10/0x10
[  338.825112][T10292]  ? prepend_path+0x2f/0xbe0
[  338.829696][T10292]  should_fail_ex+0x3b0/0x4e0
[  338.834383][T10292]  ? tomoyo_encode+0x26f/0x540
[  338.839134][T10292]  should_failslab+0x9/0x20
[  338.843643][T10292]  __kmalloc_noprof+0xd8/0x400
[  338.848408][T10292]  tomoyo_encode+0x26f/0x540
[  338.853015][T10292]  tomoyo_realpath_from_path+0x59e/0x5e0
[  338.858744][T10292]  tomoyo_path_number_perm+0x23a/0x880
[  338.864210][T10292]  ? tomoyo_path_number_perm+0x208/0x880
[  338.869835][T10292]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  338.875824][T10292]  ? __fget_files+0x29/0x470
[  338.880406][T10292]  ? __fget_files+0x3f6/0x470
[  338.885154][T10292]  ? __fget_files+0x29/0x470
[  338.889736][T10292]  security_file_ioctl+0x75/0xb0
[  338.894672][T10292]  __se_sys_ioctl+0x47/0x170
[  338.899251][T10292]  do_syscall_64+0xf3/0x230
[  338.903759][T10292]  ? clear_bhb_loop+0x35/0x90
[  338.908433][T10292]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  338.914324][T10292] RIP: 0033:0x7f8050975bd9
[  338.918737][T10292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  338.938333][T10292] RSP: 002b:00007f805180a048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  338.946734][T10292] RAX: ffffffffffffffda RBX: 00007f8050b03f60 RCX: 00007f8050975bd9
[  338.954692][T10292] RDX: 0000000000000000 RSI: 0000000000007002 RDI: 0000000000000006
[  338.962672][T10292] RBP: 00007f805180a0a0 R08: 0000000000000000 R09: 0000000000000000
[  338.970661][T10292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  338.978651][T10292] R13: 000000000000000b R14: 00007f8050b03f60 R15: 00007f8050c2fa78
[  338.986637][T10292]  </TASK>
[  339.042721][T10292] ERROR: Out of memory at tomoyo_realpath_from_path.
[  339.135860][    T9] usb 1-1: string descriptor 0 read error: -71
[  339.169915][    T9] gspca_main: cpia1-2.14.0 probing 0813:0001
[  339.192548][    T9] gspca_cpia1: usb_control_msg 05, error -71
[  339.199139][    T9] gspca_cpia1: usb_control_msg 01, error -71
[  339.214123][    T9] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0)
[  339.228109][ T2490] bond1 (unregistering): (slave bridge1): Releasing backup interface
[  339.240328][    T9] usb 1-1: USB disconnect, device number 67
[  339.274012][ T2490] bridge1 (unregistering): left promiscuous mode
[  339.536979][T10302] input: syz1 as /devices/virtual/input/input72
[  339.625791][ T2490] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  339.655696][ T2490] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  339.678746][ T2490] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  339.708629][ T2490] bond0 (unregistering): Released all slaves
[  339.748826][ T2490] bond1 (unregistering): Released all slaves
[  339.866981][  T933] usbhid 5-1:0.0: can't add hid device: -71
[  339.898104][  T933] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  339.949552][  T933] usb 5-1: USB disconnect, device number 39
[  340.244975][T10305] netlink: 'syz.0.1210': attribute type 3 has an invalid length.
[  340.307530][T10308] team0: Port device virt_wifi0 removed
[  340.358567][ T2490] hsr_slave_0: left promiscuous mode
[  340.367338][ T2490] hsr_slave_1: left promiscuous mode
[  340.376031][ T2490] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  340.388852][ T2490] batman_adv: batadv0: Removing interface: batadv_slave_1
[  340.435868][ T2490] veth1_macvtap: left promiscuous mode
[  340.463881][ T2490] veth0_macvtap: left promiscuous mode
[  340.498093][ T2490] veth1_vlan: left promiscuous mode
[  340.525879][ T2490] veth0_vlan: left promiscuous mode
[  340.720546][T10321] input: syz1 as /devices/virtual/input/input73
[  341.571594][ T2490] team0 (unregistering): Port device virt_wifi0 removed
[  341.582357][  T786] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  341.821607][  T786] usb 1-1: too many configurations: 18, using maximum allowed: 8
[  341.878396][  T786] usb 1-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a
[  341.892029][  T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.907667][  T786] usb 1-1: config 0 descriptor??
[  341.920938][  T786] gspca_main: 0c45:8001 too many config
[  341.938748][ T2490] team0 (unregistering): Port device team_slave_1 removed
[  341.992578][   T45] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  342.020828][ T2490] team0 (unregistering): Port device team_slave_0 removed
[  342.196118][   T45] usb 2-1: too many configurations: 18, using maximum allowed: 8
[  342.228303][   T45] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a
[  342.240281][   T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  342.265458][   T45] usb 2-1: config 0 descriptor??
[  342.301466][   T45] gspca_main: 0c45:8001 too many config
[  342.363805][ T5143] usb 1-1: USB disconnect, device number 68
[  342.519433][  T786] usb 2-1: USB disconnect, device number 52
[  342.838707][T10331] netlink: 'syz.3.1218': attribute type 1 has an invalid length.
[  342.851619][T10331] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  342.863784][T10332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1218'.
[  343.554960][T10352] input: syz1 as /devices/virtual/input/input74
[  344.322568][   T25] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[  344.392113][T10361] netlink: 'syz.0.1226': attribute type 3 has an invalid length.
[  344.524156][   T25] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  344.554709][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  344.568293][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  344.590408][   T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  344.632058][   T25] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  344.667003][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.708781][   T25] usb 3-1: config 0 descriptor??
[  344.723956][T10356] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  344.945009][T10369] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  345.173814][T10377] netlink: 'syz.4.1232': attribute type 1 has an invalid length.
[  345.249470][T10377] bond1: entered promiscuous mode
[  345.254903][T10379] IPv6: Can't replace route, no match found
[  345.312284][ T5141] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  345.349213][   T25] usbhid 3-1:0.0: can't add hid device: -71
[  345.357359][   T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  345.371712][T10377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1232'.
[  345.372107][   T25] usb 3-1: USB disconnect, device number 52
[  345.502361][ T5141] usb 4-1: Using ep0 maxpacket: 32
[  345.520643][ T5141] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  345.533119][ T5141] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22
[  345.570488][ T5141] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  345.581015][ T5141] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  345.589501][ T5141] usb 4-1: SerialNumber: syz
[  345.604186][ T5141] cdc_acm 4-1:1.0: Control and data interfaces are not separated!
[  345.617923][ T5141] cdc_acm 4-1:1.0: This needs exactly 3 endpoints
[  345.624611][ T5141] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22
[  346.297173][T10401] input: syz1 as /devices/virtual/input/input75
[  347.207998][T10431] netlink: 'syz.2.1244': attribute type 29 has an invalid length.
[  347.230476][T10431] netlink: 'syz.2.1244': attribute type 29 has an invalid length.
[  347.242708][T10421] netlink: 'syz.4.1243': attribute type 3 has an invalid length.
[  347.264176][T10433] netlink: 'syz.2.1244': attribute type 29 has an invalid length.
[  347.321096][T10435] IPv6: Can't replace route, no match found
[  347.508462][ T5141] usb 4-1: USB disconnect, device number 25
[  347.654212][T10440] netlink: 'syz.0.1246': attribute type 10 has an invalid length.
[  347.772610][   T25] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  347.793389][T10447] fuse: Unknown parameter '0x00000000000000050xffffffffffffffff�C&���6�5�;���X�"ni�W���~�1�`mnZ���G������O���Ղs7��@h�'
[  347.965102][   T25] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  347.977575][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  347.990570][   T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  348.002365][   T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  348.017012][   T25] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  348.027154][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.043286][   T25] usb 3-1: config 0 descriptor??
[  348.052763][T10438] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  348.524724][   T45] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  348.681939][   T25] usbhid 3-1:0.0: can't add hid device: -71
[  348.698439][   T25] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  348.713107][   T45] usb 4-1: Using ep0 maxpacket: 16
[  348.737021][   T45] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79
[  348.753276][   T25] usb 3-1: USB disconnect, device number 53
[  348.770672][   T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.796272][   T45] usb 4-1: Product: syz
[  348.806024][   T45] usb 4-1: Manufacturer: syz
[  348.811148][   T45] usb 4-1: SerialNumber: syz
[  348.824657][   T45] usb 4-1: config 0 descriptor??
[  348.865666][T10460] input: syz1 as /devices/virtual/input/input77
[  349.047229][   T45] usb 4-1: Cannot retrieve CPort count: -32
[  349.053710][   T45] usb 4-1: Cannot retrieve CPort count: -32
[  349.069880][   T45] es2_ap_driver 4-1:0.0: probe with driver es2_ap_driver failed with error -32
[  349.089311][   T45] usb 4-1: USB disconnect, device number 26
[  349.319686][T10463] IPv6: Can't replace route, no match found
[  349.799841][T10476] netlink: 'syz.3.1258': attribute type 29 has an invalid length.
[  349.825935][T10476] netlink: 'syz.3.1258': attribute type 29 has an invalid length.
[  349.844092][T10476] netlink: 'syz.3.1258': attribute type 29 has an invalid length.
[  350.073255][  T786] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  350.168450][T10486] netlink: 'syz.0.1263': attribute type 10 has an invalid length.
[  350.300000][  T786] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  350.319262][  T786] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  350.338668][  T786] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  350.363118][  T786] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  350.373743][  T786] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[  350.395257][  T786] usb 5-1: string descriptor 0 read error: -71
[  350.401670][  T786] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  350.413064][  T786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.424977][  T786] usb 5-1: rejected 1 configuration due to insufficient available bus power
[  350.434380][  T786] usb 5-1: no configuration chosen from 1 choice
[  350.444081][  T786] usb 5-1: USB disconnect, device number 40
[  350.982394][ T5144] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  351.035574][T10498] input: syz1 as /devices/virtual/input/input79
[  351.136774][T10501] netlink: 'syz.4.1269': attribute type 29 has an invalid length.
[  351.184889][ T5144] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  351.217658][ T2490] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.229096][ T5144] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  351.259652][ T5144] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  351.284227][ T5144] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  351.322738][ T5144] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  351.332074][ T5144] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.366726][ T5144] usb 4-1: config 0 descriptor??
[  351.382088][T10493] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  351.395153][ T2490] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.558292][ T2490] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.966796][ T5103] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  351.986938][ T5103] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  351.995728][ T5103] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  352.006607][ T5103] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  352.015270][ T5103] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  352.023789][ T5103] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  352.046174][ T2490] bridge_slave_1: left allmulticast mode
[  352.052127][   T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  352.061066][   T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  352.073242][   T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  352.081557][   T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  352.094479][   T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  352.097771][ T2490] bridge_slave_1: left promiscuous mode
[  352.108867][   T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  352.111826][ T2490] bridge0: port 2(bridge_slave_1) entered disabled state
[  352.133628][T10503] ------------[ cut here ]------------
[  352.139129][T10503] WARNING: CPU: 0 PID: 10503 at kernel/workqueue.c:2282 __queue_work+0xc5e/0xee0
[  352.148275][T10503] Modules linked in:
[  352.152196][T10503] CPU: 0 PID: 10503 Comm: syz-executor Not tainted 6.10.0-syzkaller #0
[  352.160552][T10503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  352.170650][T10503] RIP: 0010:__queue_work+0xc5e/0xee0
[  352.175965][T10503] Code: ff e8 06 85 36 00 90 0f 0b 90 e9 20 fd ff ff e8 f8 84 36 00 eb 13 e8 f1 84 36 00 eb 0c e8 ea 84 36 00 eb 05 e8 e3 84 36 00 90 <0f> 0b 90 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc
[  352.195601][T10503] RSP: 0018:ffffc9000d3e7810 EFLAGS: 00010002
[  352.201701][T10503] RAX: ffffffff815fa4af RBX: ffff88806aa79e00 RCX: ffff88806aa79e00
[  352.209788][T10503] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000
[  352.217788][T10503] RBP: 0000000000000000 R08: ffffffff815f9983 R09: 0000000000000000
[  352.225793][T10503] R10: ffffc9000d3e78e0 R11: fffff52001a7cf1d R12: ffff88807d5d51c0
[  352.233798][T10503] R13: dffffc0000000000 R14: ffff88807d5d5000 R15: 0000000000000008
[  352.241808][T10503] FS:  000055556710b500(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
[  352.250793][T10503] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  352.257412][T10503] CR2: 0000000020051000 CR3: 0000000012018000 CR4: 00000000003506f0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  352.265414][T10503] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  352.273415][T10503] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  352.281413][T10503] Call Trace:
[  352.284723][T10503]  <TASK>
[  352.287672][T10503]  ? __warn+0x163/0x4e0
[  352.291869][T10503]  ? __queue_work+0xc5e/0xee0
[  352.296576][T10503]  ? report_bug+0x2b3/0x500
[  352.301098][T10503]  ? __queue_work+0xc5e/0xee0
[  352.305801][T10503]  ? handle_bug+0x3e/0x70
[  352.310149][T10503]  ? exc_invalid_op+0x1a/0x50
[  352.312277][ T5144] usbhid 4-1:0.0: can't add hid device: -71
[  352.314823][T10503]  ? asm_exc_invalid_op+0x1a/0x20
[  352.325743][T10503]  ? __queue_work+0x123/0xee0
[  352.330438][T10503]  ? __queue_work+0xc4f/0xee0
[  352.335133][T10503]  ? __queue_work+0xc5e/0xee0
[  352.339841][T10503]  queue_work_on+0x1c2/0x380
[  352.344459][T10503]  ? __pfx_queue_work_on+0x10/0x10
[  352.349592][T10503]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  352.355497][T10503]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  352.362031][T10503]  ? skb_queue_tail+0x36/0x120
[  352.365056][ T5144] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  352.366793][T10503]  __hci_cmd_sync_sk+0x7b1/0x1130
[  352.379530][T10503]  ? __pfx___hci_cmd_sync_sk+0x10/0x10
[  352.385028][T10503]  ? __pfx_lock_release+0x10/0x10
[  352.390069][T10503]  ? aa_get_newest_label+0xff/0x6f0
[  352.395313][T10503]  __hci_cmd_sync_status+0x37/0x130
[  352.400537][T10503]  hci_dev_cmd+0x51c/0xa50
[  352.404977][T10503]  ? __pfx_hci_dev_cmd+0x10/0x10
[  352.406564][ T5144] usb 4-1: USB disconnect, device number 27
[  352.409913][T10503]  ? proc_do_large_bitmap+0xb0/0x13c0
[  352.421178][T10503]  ? hci_sock_ioctl+0x6c4/0xa40
[  352.426141][T10503]  sock_do_ioctl+0x158/0x460
[  352.430762][T10503]  ? __pfx_sock_do_ioctl+0x10/0x10
[  352.435927][T10503]  sock_ioctl+0x629/0x8e0
[  352.440275][T10503]  ? __pfx_sock_ioctl+0x10/0x10
[  352.445152][T10503]  ? __fget_files+0x29/0x470
[  352.449755][T10503]  ? __fget_files+0x3f6/0x470
[  352.454445][T10503]  ? __fget_files+0x29/0x470
[  352.459054][T10503]  ? bpf_lsm_file_ioctl+0x9/0x10
[  352.464010][T10503]  ? security_file_ioctl+0x87/0xb0
[  352.469226][T10503]  ? __pfx_sock_ioctl+0x10/0x10
[  352.474091][T10503]  __se_sys_ioctl+0xfc/0x170
[  352.478711][T10503]  do_syscall_64+0xf3/0x230
[  352.483215][T10503]  ? clear_bhb_loop+0x35/0x90
[  352.487894][T10503]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.493791][T10503] RIP: 0033:0x7fc9ddf757db
[  352.498215][T10503] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  352.517819][T10503] RSP: 002b:00007ffc7d9eee10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  352.526222][T10503] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc9ddf757db
[  352.534182][T10503] RDX: 00007ffc7d9eee88 RSI: 00000000400448dd RDI: 0000000000000003
[  352.542259][T10503] RBP: 000055556710b4a8 R08: 0000000000000000 R09: 0000000000000000
[  352.550240][T10503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  352.558241][T10503] R13: 0000000000000001 R14: 0000000000000005 R15: 0000000000000009
[  352.566226][T10503]  </TASK>
[  352.569246][T10503] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  352.576511][T10503] CPU: 0 PID: 10503 Comm: syz-executor Not tainted 6.10.0-syzkaller #0
[  352.584740][T10503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  352.594893][T10503] Call Trace:
[  352.598161][T10503]  <TASK>
[  352.601074][T10503]  dump_stack_lvl+0x241/0x360
[  352.605751][T10503]  ? __pfx_dump_stack_lvl+0x10/0x10
[  352.610940][T10503]  ? __pfx__printk+0x10/0x10
[  352.615519][T10503]  ? _printk+0xd5/0x120
[  352.619662][T10503]  ? vscnprintf+0x5d/0x90
[  352.623975][T10503]  panic+0x349/0x860
[  352.627858][T10503]  ? __warn+0x172/0x4e0
[  352.631997][T10503]  ? __pfx_panic+0x10/0x10
[  352.636396][T10503]  ? show_trace_log_lvl+0x4e6/0x520
[  352.641644][T10503]  __warn+0x346/0x4e0
[  352.645639][T10503]  ? __queue_work+0xc5e/0xee0
[  352.650301][T10503]  report_bug+0x2b3/0x500
[  352.654623][T10503]  ? __queue_work+0xc5e/0xee0
[  352.659316][T10503]  handle_bug+0x3e/0x70
[  352.663480][T10503]  exc_invalid_op+0x1a/0x50
[  352.667977][T10503]  asm_exc_invalid_op+0x1a/0x20
[  352.672845][T10503] RIP: 0010:__queue_work+0xc5e/0xee0
[  352.678127][T10503] Code: ff e8 06 85 36 00 90 0f 0b 90 e9 20 fd ff ff e8 f8 84 36 00 eb 13 e8 f1 84 36 00 eb 0c e8 ea 84 36 00 eb 05 e8 e3 84 36 00 90 <0f> 0b 90 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc
[  352.697732][T10503] RSP: 0018:ffffc9000d3e7810 EFLAGS: 00010002
[  352.703799][T10503] RAX: ffffffff815fa4af RBX: ffff88806aa79e00 RCX: ffff88806aa79e00
[  352.711764][T10503] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000
[  352.719748][T10503] RBP: 0000000000000000 R08: ffffffff815f9983 R09: 0000000000000000
[  352.727713][T10503] R10: ffffc9000d3e78e0 R11: fffff52001a7cf1d R12: ffff88807d5d51c0
[  352.735697][T10503] R13: dffffc0000000000 R14: ffff88807d5d5000 R15: 0000000000000008
[  352.743748][T10503]  ? __queue_work+0x123/0xee0
[  352.748412][T10503]  ? __queue_work+0xc4f/0xee0
[  352.753096][T10503]  queue_work_on+0x1c2/0x380
[  352.757687][T10503]  ? __pfx_queue_work_on+0x10/0x10
[  352.762790][T10503]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  352.768675][T10503]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  352.774989][T10503]  ? skb_queue_tail+0x36/0x120
[  352.779740][T10503]  __hci_cmd_sync_sk+0x7b1/0x1130
[  352.784754][T10503]  ? __pfx___hci_cmd_sync_sk+0x10/0x10
[  352.790207][T10503]  ? __pfx_lock_release+0x10/0x10
[  352.795215][T10503]  ? aa_get_newest_label+0xff/0x6f0
[  352.800430][T10503]  __hci_cmd_sync_status+0x37/0x130
[  352.805639][T10503]  hci_dev_cmd+0x51c/0xa50
[  352.810067][T10503]  ? __pfx_hci_dev_cmd+0x10/0x10
[  352.815007][T10503]  ? proc_do_large_bitmap+0xb0/0x13c0
[  352.820376][T10503]  ? hci_sock_ioctl+0x6c4/0xa40
[  352.825217][T10503]  sock_do_ioctl+0x158/0x460
[  352.829804][T10503]  ? __pfx_sock_do_ioctl+0x10/0x10
[  352.834913][T10503]  sock_ioctl+0x629/0x8e0
[  352.839227][T10503]  ? __pfx_sock_ioctl+0x10/0x10
[  352.844062][T10503]  ? __fget_files+0x29/0x470
[  352.848637][T10503]  ? __fget_files+0x3f6/0x470
[  352.853310][T10503]  ? __fget_files+0x29/0x470
[  352.857893][T10503]  ? bpf_lsm_file_ioctl+0x9/0x10
[  352.862820][T10503]  ? security_file_ioctl+0x87/0xb0
[  352.867946][T10503]  ? __pfx_sock_ioctl+0x10/0x10
[  352.872789][T10503]  __se_sys_ioctl+0xfc/0x170
[  352.877367][T10503]  do_syscall_64+0xf3/0x230
[  352.881864][T10503]  ? clear_bhb_loop+0x35/0x90
[  352.886527][T10503]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  352.892412][T10503] RIP: 0033:0x7fc9ddf757db
[  352.896806][T10503] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00
[  352.916574][T10503] RSP: 002b:00007ffc7d9eee10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  352.924975][T10503] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fc9ddf757db
[  352.932953][T10503] RDX: 00007ffc7d9eee88 RSI: 00000000400448dd RDI: 0000000000000003
[  352.940906][T10503] RBP: 000055556710b4a8 R08: 0000000000000000 R09: 0000000000000000
[  352.948862][T10503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  352.956827][T10503] R13: 0000000000000001 R14: 0000000000000005 R15: 0000000000000009
[  352.964794][T10503]  </TASK>
[  352.968032][T10503] Kernel Offset: disabled
[  352.972344][T10503] Rebooting in 86400 seconds..