last executing test programs:

14.686337235s ago: executing program 3 (id=714):
syz_open_dev$sg(0x0, 0x0, 0x401)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r0, 0xfffffffc)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x18, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0)

13.698018669s ago: executing program 3 (id=720):
r0 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r2)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r4, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}}, 0x0)
splice(r1, 0x0, r3, 0x0, 0x10d00, 0xf)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x10, 0x4470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r8, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x44080)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010003b1500"/20, @ANYRES32=r8, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x64055}, 0x0)
r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_buf(r11, 0x6, 0x23, &(0x7f0000003340)=""/4096, &(0x7f0000000080)=0x1000)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x38, r12, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x1, 0x5, 0xb, 0x4, 0x0, 0x0, 0x4]}}]}]}]}, 0x38}}, 0x0)
r14 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r14, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r14, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000180)=0x4)
ioctl$FIGETBSZ(r6, 0x2, &(0x7f0000000140))
r15 = dup(r9)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb34902, 0x1000006, 0x28011, r15, 0x0)

13.22004796s ago: executing program 4 (id=721):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056", 0x5, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6(0x10, 0x80000, 0x3)
r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_SELECTION(r4, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}})
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r8 = socket$kcm(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000000)=r7, 0x4)
r9 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r9, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast2}}}], 0x20}, 0x0)
unshare(0x42000000)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x7, 0x1, 0x9, 0x2, 0x4, 0x6}, {0x3, 0x2, 0xe, 0xb3b, 0x3, 0x6}, 0x9, 0x0, 0x2d}}, @TCA_TBF_PTAB={0x404, 0x3, [0xfb, 0x2, 0x101, 0x5, 0x2, 0xa28, 0x4, 0x9, 0xf, 0xffff6d77, 0xe4, 0x280, 0x107, 0x8001, 0x2, 0x0, 0x7, 0xff, 0x4, 0x401, 0x9, 0x5, 0x3, 0x1, 0xfffffff5, 0x5, 0xb8, 0x7, 0x3, 0x1, 0x157, 0x26553de0, 0x4, 0x3ff, 0x80, 0x4, 0x1, 0x5, 0x1, 0x4, 0xf, 0x1000, 0x9, 0x6, 0xfff, 0x42, 0x44, 0x9, 0x6, 0x1, 0x7f, 0x9, 0x9, 0x6, 0x40, 0xffff, 0x0, 0x3, 0x9, 0x3, 0x7, 0xd61a, 0x1, 0x4, 0x8000, 0x5400000, 0x8000, 0x6, 0x400, 0x8000, 0x401, 0x4, 0xffffffff, 0x5, 0x8000, 0x1000, 0xb5, 0x6, 0x7, 0x0, 0x800, 0x1, 0x7fff, 0x401, 0x0, 0x2, 0x6e9, 0x8, 0x6, 0x5, 0xfffffffa, 0xffffff83, 0x7f, 0x9, 0x5feecc8, 0xb, 0x1a48dadd, 0xa3b, 0xfffffffa, 0x4, 0xffff, 0xc5, 0xbfa, 0x80000001, 0x8, 0x6, 0xacc, 0x7, 0x9, 0x1, 0x8001, 0x9, 0xcd4d, 0x5, 0x0, 0x7ff, 0x5, 0x5fd, 0x8, 0x8001, 0x9, 0xfffffff7, 0x76, 0x400, 0x4, 0x5, 0x9, 0x6, 0x17, 0x6, 0x2, 0x4, 0x400000, 0x10001, 0xd17, 0x1, 0x89, 0x4, 0x4, 0x8, 0x8, 0x10000, 0x9, 0x1, 0xce3, 0x4, 0x9, 0x96, 0x4, 0x6, 0x9, 0x8001, 0xc, 0x3, 0x2, 0x8969, 0x100, 0x100, 0x101, 0x7, 0x10000, 0x0, 0xc, 0x9, 0xfffffff1, 0x1, 0x1, 0x6, 0x7, 0x34a00, 0x45, 0x800, 0x2, 0x2, 0x7, 0x3800, 0x8, 0x4, 0x4, 0xfffffffb, 0x4, 0xb, 0xc, 0x5, 0x2, 0x4, 0x2000000, 0x2, 0x2, 0x5, 0x5, 0xfffffff8, 0xda, 0x9, 0x8, 0x2, 0x1, 0x4, 0x8, 0x7, 0x36a3, 0x2, 0x5, 0xa1, 0x94, 0x4a9b, 0x9, 0x5, 0x0, 0x3, 0x3, 0x4, 0xe, 0xd, 0xfffffff2, 0x5, 0x8, 0x0, 0x200, 0x7d, 0x2, 0x4, 0x1, 0x7fff, 0x3, 0x6, 0x3ff, 0x10000, 0x10, 0x0, 0x6, 0x8, 0x6, 0x8, 0x8, 0xf, 0x81, 0x4, 0x400, 0x3, 0xc, 0x8, 0x3, 0x6, 0x2c, 0x8, 0x25, 0x0, 0xb9, 0x3, 0x330c, 0xfffffffe, 0xc, 0x3a8b, 0x9, 0x1]}]}}]}, 0x45c}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @mcast1}})

11.199390242s ago: executing program 3 (id=725):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = landlock_create_ruleset(&(0x7f0000000100)={0x30b}, 0x18, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0)
close(r0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="02000000000000100004000079efcc00000020000000000000000000000000000071faad8b5e1538cebdeeea438ebae74c9a5314d6ef47d1e9837c3dc98115a75ea802c997705125646d17a9066cb9a77e26d491bc3807a12b75faff9d6711dd3ac033d442627b5345ff622d238de7a4e0cf4f1da3f524788c20e73cb72ed8906f466aec0ac2c85ee05d890e1a530b71f1766ba4b95aff02d6076f79327dbbe08f5ae62491bf53a6f7368329f35d0f39f510caf35d13a0d14824ae45da780663edcbc76975cb0446e9050000000000000000"], 0x24, 0x2)

10.239116885s ago: executing program 3 (id=728):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0)
syz_open_dev$sndctrl(0x0, 0xfffffffffffffffc, 0x40000)
r5 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x10000, 0x200000)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r5, 0x80045530, &(0x7f0000000140)=""/18)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000001c0)={0x0, <r6=>0x0})
creat(&(0x7f0000000040)='./bus\x00', 0x0)
prlimit64(r6, 0xe, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000080)={'wg2\x00', <r9=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x320, 0x0, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x2d0, 0x8, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @dev, 0x1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x240, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xd8, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev}}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2767b524f45e9dfaf001c414581741c92349c3b6661d9864680582bd184ef1a6"}, @WGPEER_A_ALLOWEDIPS={0x140, 0x9, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xe}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r9}]}, 0x320}}, 0x0)

10.118771823s ago: executing program 4 (id=729):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = syz_io_uring_setup(0x3e00, &(0x7f0000000400)={0x0, 0x100002, 0x10300, 0x2, 0xffffffff}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456})
io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39)
socket(0x400000000010, 0x3, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00')
pread64(r4, &(0x7f0000000080)=""/237, 0xed, 0x3f000000)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r6, r5})
recvmsg$kcm(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)=""/119, 0x77}], 0x1}, 0x0)

9.028180708s ago: executing program 4 (id=733):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x208400, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0], 0x20)
r1 = gettid()
process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x200000000000011, 0x3, 0x0)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80800)
syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0xfad6, 0x0, 0x0, 0x80}, &(0x7f00000003c0)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r2, 0x0, 0x0, 0x0, 0x80000})
syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x282002, 0x0)
capset(&(0x7f0000000080)={0x20071026}, 0x0)
socket$netlink(0x10, 0x3, 0x10)
r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[<r6=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r6, <r7=>0x0})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r5, 0xc01864b0, &(0x7f0000000000)={r6, r7, 0x1, 0x0, 0x3})
close(0x3)
socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16)
socket$xdp(0x2c, 0x3, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_COPY(r8, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})

8.936712123s ago: executing program 0 (id=735):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x0, 0x0, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x0, 0xffe, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x60000002}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
pipe(&(0x7f00000002c0)={<r4=>0xffffffffffffffff})
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10)
setsockopt$SO_TIMESTAMP(r5, 0x1, 0x23, &(0x7f0000000100), 0x4)
vmsplice(r4, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0x1}], 0x1, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20)
setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', <r10=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
r11 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r12=>0x0, &(0x7f0000000280)=<r13=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r12, r13, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r11, 0x47f6, 0x0, 0x2, 0x0, 0x0)
bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r4, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x28, r6, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x800, 0x72}}}}, ["", "", "", ""]}, 0x28}}, 0x4855)

8.74719373s ago: executing program 1 (id=737):
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0x1, 0x4)
r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000100), 0x1c)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x8)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x4e23, @private=0xa010102}}, 0x0, 0x0, 0x1d, 0x0, "0c9e089c9b4a04000bde79090003c458187eb46c2d996aff287154e786455261c425a7519cc253d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19b22a369ae751de81c04d3b382d54d793e8d8219cad5ddfc1e4fe760ad7ad836fd96953e92a00fbff48eb96428300"}, 0xd8)
listen(r7, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r8, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r9, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)
r10 = fsmount(r1, 0x0, 0x1)
fchdir(r10)
r11 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0)
getdents64(r11, &(0x7f0000000040)=""/53, 0x2457a0be381e3a04)
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

8.587542461s ago: executing program 4 (id=738):
syz_open_procfs$pagemap(0x0, &(0x7f0000000140))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}})
add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff)
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x25}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffd, 0x0, 0x0, 0x2dcd}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r7, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r9 = accept(r6, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
recvfrom(r8, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
sendmsg(r8, &(0x7f00000014c0)={&(0x7f0000001040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r9, 0x1, 0x1, 0x4, 0x8004, {0xa, 0x4e23, 0x7, @remote, 0x5}}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001b80)="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", 0x1000}, {&(0x7f00000010c0)="4b561ee26e1ff16628c4be8aecc8c8cbc14b82214010d2", 0x17}, {&(0x7f0000001100)="bc9341b9f8ea2fa79d9ba29a048a0faaa520d20326a2a4954b967f7b56baaedc9fe5653d6c9adeda3825bbbe0273fca141fc2018e1b4a8bd1c437c7f869976f145b8c1fbdba7f5d643b0687c59654353cf344a75bc436cc3b4294bd69ba03b39bf59a1eea02013f04204e6bec26831fe172cab531fc632f7f9c235", 0x7b}, {&(0x7f00000011c0)="5f02eac11a1585981a2e5fa6ed9becfe91325c6692f72c14da23804864107706f18961b9032ad2d7ee589c5f55aca0ab51b15094be0d47b459cbf718287daca101adbf1feee5b5625fd45fa6139075004567ebbbc71883a16db68efa340a96d4ab25b8c40be6ea2c46da9e2b35a53454ec212d759f4622", 0x77}, {&(0x7f0000001240)="d7301b1e", 0x4}, {&(0x7f0000000100)="1337c070ecefb76d5938dbd4cba4ae0d27a3605a", 0x14}, {&(0x7f00000012c0)="79c23b68e7339a841c47c628574ee9aae21fa9c7b1cf71e406e8d47e22c6acd928a67ad450a9b6dc010d5737fdadfb70a774f043d8ef9cc54933a14b7de7fe2a67a6523c17930998a4b9b0661144aafacc1841d014d27b1895d1f2e9918e11d19201a9234e0f975e27377e1af5d714b6efaa224a926121d058c8f106edae22", 0x7f}, {&(0x7f0000001340)="d68bd8fcd2f9d41bd55f76744cd7b142b39b975699a9344ee889cc3582fea863b87b2f3db6c4ae3668ff0f81480ab236b67a9e60f149ba9cbd51ce8b476999a98538c7a5a158c2f6f6c794fcb039dccf745f15918b916e9d2fdae09ef5395fa44b1087db1ba6ff257d788f78abe8018b3204934f0e746884524b1350fb122e09655f630d17dcba91c366fcbca1b07396209f6ebe74462fd9915ab3db8cf224ae5878fdd8ead934f190ea13a5f82d26baa8b37a68f50cfbe47b772863c6c00f317546", 0xc2}], 0x8}, 0x80)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
mlock2(&(0x7f00002a2000/0x3000)=nil, 0x3000, 0x1)
mremap(&(0x7f00004fd000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f000015a000/0x2000)=nil)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)

8.278707582s ago: executing program 1 (id=740):
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0xbdce6000)
r2 = semget$private(0x0, 0x4, 0x40)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'erspan0\x00', <r3=>0x0, 0x20, 0x700, 0x6, 0x87, {{0x10, 0x4, 0x0, 0x2f, 0x40, 0x66, 0x0, 0x8, 0x4, 0x0, @private=0xa010102, @rand_addr=0x64010100, {[@generic={0x86, 0x7, "9b36303807"}, @ra={0x94, 0x4}, @rr={0x7, 0x1b, 0x65, [@multicast2, @private=0xa010101, @empty, @remote, @remote, @rand_addr=0x64010100]}, @ra={0x94, 0x4, 0x1}]}}}}})
sendmmsg$inet6(r1, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x9, @remote, 0xa998}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000000c0)="7d28a13037727f785500f2d064b44582bb7dfa614bda9e616ed8f6ca4a53d6e952d9940a4a32fbfec8b7eba03ee6923198db8cd8d3ce085d47f35c8ba35001fbbe7635a9eeca9bdfd1631b519b62072a8511a8772091cd7521daca7d31010d89579303502134a35b106edb19b499e5a61eef2a096175fe6fd24cd15582d04571f7fa15ab4742fb6dbcffcf976813a86a23377efd0dfffa144fbba541124ce7000c43123966f1f525e2f68c7e900923cac9b31309879e", 0xb6}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="140000000000ac87ee792e3a7357dff1ec9ca058363a0000290000006064000008000000000000002400000000000000290000003200000020010000000000000000000000000002", @ANYRES32=r3, @ANYBLOB="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"], 0x198}}, {{&(0x7f0000000440)={0xa, 0x4e20, 0xc, @loopback, 0x9}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000480)="74bb12a68a954b9489cc7822e045e6ac00b9d73270d0ec0f9233646ddb2db53b2f0edcc924724e57af7af91f5bc06a79d810002051bc189f0ec0c8c5ee5a867e5d71c7a7082de3a5", 0x48}, {&(0x7f0000000500)="bdb3f09404acfe1f9fd276d51b11443739173967b11b80caa911784faddd6df6cd454c37ff4655d01cb42ed53d94f3dc359961e33e4e197ef7b6af4b92d4d950963f22e53a0c90fb252d5c288d5dc7348cdbb2a4e4611827b7bcae51fa2ed241fe7d4ed71937afee0f7ef1ba7c028aa68fb09fca3da7bcbd2d9743c3623050756e0f07d8a61570d894a1754f64b53f2e129bdecc830c89d3aeb92d98b484425e788f47fb4f13aefee1eb512ac1027bdae03f2c7940c5f91590a68389f16ab491efacd7f3ffce08e50eaccc44eb47c031fb8a04a114f07e6fcf2e2e2d0d2657f4d01490b551726046e3ff2d49e5e7", 0xee}], 0x2, &(0x7f0000000640)=[@hopopts={{0x78, 0x29, 0x36, {0x3c, 0xb, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @pad1, @generic={0x6}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x18, {0x2, 0x4, 0x9, 0x0, [0xfffffffffffffffa, 0xe585927]}}, @hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x2}, @jumbo={0xc2, 0x4, 0xffffff6d}, @hao={0xc9, 0x10, @local}]}}}, @tclass={{0x14, 0x29, 0x43, 0x10000}}, @dstopts={{0x20, 0x29, 0x37, {0x2, 0x1, '\x00', [@pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @tclass={{0x14, 0x29, 0x43, 0x8}}, @dstopts={{0x30, 0x29, 0x37, {0x29, 0x2, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfff}}], 0x110}}, {{&(0x7f0000000780)={0xa, 0x4e24, 0x261, @loopback, 0x400}, 0x1c, &(0x7f0000000d40)=[{&(0x7f00000007c0)="690d1aa6fdf17e116fce1deaa7e4a5a5b7b1e44f114fa6aca16c06cca98668f260c31dd3b8852b95ef1f0470b3cb5b5db27186465eb358c84795ae5f924489eab37f22f20c405078ebca946ad629d96055f8c5956100a0d1b0d09b0119fc5fb837ad40da43f573876653593dc1553852a997d7f2dd17bc576a3bca4a113c225f93fe13b2420d94d11cda347aa6a154", 0x8f}, {&(0x7f0000000880)}, {&(0x7f00000008c0)="d81724cba999147681548aff6e329742178c7ab2b31f0e5bc4ab198067f29946caf0381591b7fe63f3e9edf1c887192c6e3cfe914a9b590b66611abef294f9bd738dbe7fd83f9e366d00d39bf91b9643f5ad9b12162fe44d6e5d552beb277f87cb7074849ee9bee7530ae0d454c50db939d97f724d94fe95221373824642b407e12fcc2aeec5d49af3767a7e08482472f689b33d9c913429d214c5b99550f9865d698dad16d6c01f05c68930f470049535cd907835a52d504cc08c74590ed391d67ef834a9f72cad998c09b0", 0xcc}, {&(0x7f00000009c0)="9d3aa7b64188653d77686015f866c0dbb90f7880103a02126b590abd95070f663ad967cf06691db69b3bfd24db6edf53debc4d5aca316adbfd3092bfd90c4ae0f9c0d8e52db1b845e1ba6d9b4a306abd9ce32c7df922824d3d89d2d17075380729fb1c62985c75b62cadd8d032a929a00f6532f7f5e106b8b243979bdb1b7873c86e8325b209b9755e379ff7e352f64c76bcee8987b0a10780d4bc60dae8043c338fd226625e908e5024cbd84993c0cad1e0ba23fa7a9be2c0a11f3d418daa2fc368ee4064c1f74f2fdd8681d7625aa9cd610a80", 0xd4}, {&(0x7f0000000ac0)="2b766dbac7b321e3b3b8df613ecd5a84db1d226d2482f86172dece524908c29df1032fdc2a998fff0cc40fe7eec652949f11533e43bb951a782444e7482247550fc4df5bc1d8153a7861e5a5679f15aab6dec6b7bc2e1c4e6d1a92a2ae65b5c8affb2526b0a3fd60eb932f3438245f9b4105", 0x72}, {&(0x7f0000000b40)="b79ea2ace19a9188b6c9b2d2424173a4498a0baeb2106b92d0526043a275dc7b694768151ee553879e63a686f34e0c6bcf465b6cada4364ed22a5bac59076813f60f3d454be0934fce4c1e2ff6b3c29e6516e938640236a03ca6befdcb2bed3cc8cd824a0724c7e8b81a5df4813a12bca1d1aded390dde4b6d96d3a64821bbde2fd58668a250276d19a45f2ebc2fb1217af2f89d9e7bfd1c977233c099d3c3e5b2dba06a7e2954e5ddb7186b2f2702427847061aabb84dc5969cc1321316a25e70dc4306edf3dc12dd8c262e9287cdbd4b03ba8c6fadf724e4b47b7ee2d9a41557280fc0d5cb7253", 0xe8}, {&(0x7f0000000c40)="c9bba550e8b09e20e4a3e7221ae30ae218fcbcb29b0ab2d0f2c2122869e11b8c49da91e041b31e733fe68850d2101c07293ba2566b0b0966c4be2b907cccd265cb9cac32728379aea2ef86b55af0bc1a42c2f073e7daaf993a29fafe00803d0659dcecc6412041ef370523c5c100879200e9634e0ccfd0d4861b91802fc3bef4fc879dfd5eb100d4ab46248760452dd089a2590a4465ca71bc526b05d42d744e86eae0bd97f9a8484fd62675da77d21abe665c269574703f6f598c0485cc397ab39456349eceb718d4f9514fb6446e456990fa004c", 0xd5}], 0x7, &(0x7f0000000dc0)=[@tclass={{0x14, 0x29, 0x43, 0x1ff}}], 0x18}}], 0x3, 0x91)
semop(r2, &(0x7f0000000080), 0x40)

7.881643744s ago: executing program 1 (id=742):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
r6 = socket(0x11, 0x3, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', <r8=>0x0})
bind$packet(r6, &(0x7f00000001c0)={0x11, 0x0, r8, 0x1, 0x2, 0x6, @broadcast}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r9=>0x0})
setsockopt$inet_mreqn(r6, 0x0, 0x42, &(0x7f0000000040)={@remote, @loopback, r9}, 0xc)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a0001002cbd7000fbdbdf251c1480000000fd000001000008000100000031"], 0x30}}, 0x0)

7.81410385s ago: executing program 3 (id=743):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000b4321f00000000000a0063201800", @ANYRES32, @ANYBLOB], 0x0, 0x2, 0x1000, &(0x7f0000001e40)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x100000, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0)

6.849516246s ago: executing program 3 (id=745):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009})
r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009})
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r2=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000780)={r2, 0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r2, <r4=>0x0, r3, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r4, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}})
r5 = socket$nl_route(0x10, 0x3, 0x0)
mkdir(0x0, 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0])
read$FUSE(r6, &(0x7f000000e280)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_INIT(r6, &(0x7f0000000100)={0x50, 0x0, r7}, 0x50)
syz_fuse_handle_req(r6, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x1, 0x0, {0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
stat(&(0x7f0000002e00)='./file0/file0\x00', &(0x7f0000002e40))
r8 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_connect$cdc_ncm(0xc, 0x132, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x120, 0x2, 0x1, 0x6, 0x90, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xff, 0xf, 0x31}, {0x6, 0x24, 0x1a, 0x8, 0x24}, [@network_terminal={0x7, 0x24, 0xa, 0x8, 0x9, 0x7f, 0x40}, @country_functional={0xe, 0x24, 0x7, 0x2, 0x1, [0x3, 0xad8, 0xfffb, 0x1]}, @mbim_extended={0x8, 0x24, 0x1c, 0x8000, 0x80, 0x6}, @mdlm_detail={0x9b, 0x24, 0x13, 0x7f, "d535b7ec378771401634dbf25285e20aea9729d2eec85a64905bd9f4e7812af378a3cd4883524cc21d21f8c40fdbbe52722e8e4a803050bf811ed1f69203f08bb90e7a3a7307becdd65289cdd39c380b2229950f21039b1cc8e2a8d2b869e7c673ebf2f547cffd415bf5d226cfeda98504115c88b488c209ee00c89257c1fb88dfa124b03c748bfe5423e5fc4f3031e68355a2317fa392"}, @mbim={0xc, 0x24, 0x1b, 0x3, 0x6, 0x12, 0x3, 0xe, 0xc}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x0, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3df, 0x3, 0x47, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x9, 0x2, 0x9f}}}}}}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x8, 0xfc, 0x4, 0xb7}, 0x55, &(0x7f0000000080)={0x5, 0xf, 0x55, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0xad, 0x2, 0x101, 0xf00f, 0x1, [0xff3f, 0xff]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x9, 0x2, 0x9}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x3, 0xf0f, 0x8000, [0xff3fcf, 0xfebfc0, 0xffff0f, 0x3fff, 0x3ff0]}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x9, 0xc, 0x4}, @wireless={0xb, 0x10, 0x1, 0x4, 0x60, 0x6, 0x8, 0x9, 0x7}]}, 0x2, [{0x9c, &(0x7f00000002c0)=@string={0x9c, 0x3, "6005dae7f0b5e49076884b1dd52a264586e8209e5a93287eb32780ed197a6f938c248ecd36ee6090a4a0bbaa3e4f92992d94fced15ac6d363928fca9ddfe1f1fa5d472da1f1b858bdfaec146a91b6d9a758746ec5b7d1dab437bf5d92276bcdb2bb118a13f7f909a14daf3a494f402514788ee9b37b5382809b6b56e43ec315c26e8f7749d5072e7c5f4a3251b7f448a53de32657110886380c1"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0xf4ff}}]})
syz_usb_control_io$hid(r8, 0x0, 0x0)
syz_usb_control_io$printer(r8, 0x0, &(0x7f0000000900)={0x34, &(0x7f00000006c0)=ANY=[@ANYBLOB='@\a('], 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000200)={<r9=>0x0})
ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000640)={r9, 0x2, &(0x7f0000000380)=[0x8, 0x3], &(0x7f0000000540)=[0x3, 0xb7d4], 0x11, 0x4, 0x1, &(0x7f0000000580)=[0x7, 0x6, 0x1, 0x7], &(0x7f0000000600)=[0x2eb, 0x6, 0x80000000]})
syz_usb_control_io(r8, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000240)={0x0, 0x7, 0x28, "22a855198e1f9e8f7f28b587692aff7f985dac765205aaf0ba511d2e5d8bc716e0530444003e4319"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r8, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r8, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000001c0)={0x20, 0x16, 0xd, "4335798a8d31740d8c71cdb144"}, 0x0, 0x0})
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x60, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5, 0xa90}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4e, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x8001}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x1}, @IFLA_BR_PRIORITY={0x6, 0x6, 0xe46}]}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}, @IFLA_LINKMODE={0x5, 0x11, 0x9}]}, 0x60}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)

6.096311224s ago: executing program 1 (id=747):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xa000000}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x8800)

5.959267139s ago: executing program 0 (id=748):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) (async)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) (async)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000140)={0x3, 0x4, 0x5, 0x2, @vifc_lcl_addr=@loopback, @remote}, 0x10) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x18, 0x0, 0x1, 0x801, 0x0, 0x0, {0x3}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8830}, 0xc0d0) (async)
setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4)

5.64764241s ago: executing program 1 (id=749):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10)
sendmmsg$inet(r0, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f00000012c0)=[{0x0, 0x6000}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e", 0x4f9}], 0x3}}], 0x1, 0x0)

5.368388661s ago: executing program 0 (id=750):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000140)={0x4, <r2=>0xffffffffffffffff})
ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000000)=@attr_other={0x0, 0x800004, 0x4, 0x0})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff)
gettid()
timer_create(0x7, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f0000000300)="6c40f17773e937dfe9109c9b0f013c9720622990efc3eee4568a7a2d31258e18a839e57e6c61fde1")
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
sendfile(r7, r6, &(0x7f00000000c0)=0x58, 0x5)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x9, @void}, 0xfffffffffffffc75)
socket(0x2, 0x80805, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x55af)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)={0x30, r5, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="28410000170009002abd7000fedbdf2520010000000000000000000000000001000004d53c0000007f00000126f100000000000000000000fc000000000000000000000000000001e00000020000000000000000000000004e23ffff4e210006020000003a000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000001fc0000000000000000000000000000014e2400004e220002020080002f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="070000000000000003000000000000000800000000000000f8060000000000000001000000000000080000000000000001f0ffffffffffff03000000000000000100000000000000ffff0000000000000600000000000000080000000000000001000000b06b6e000001000100000000450000008a0a00000800000025bd7000"], 0x128}}, 0x40000)

5.203432139s ago: executing program 1 (id=751):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0x2a382)
r1 = memfd_create(&(0x7f0000000180)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6*t\xc8\xf4>q%\xa4\x81\xe2\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\x1cf\xf0\xf2xW?\x8e\xd9\x06\xc7\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1\xf2Y<\xe2\x84g-V\x97\xc6^\xbbg}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9\x00\x00QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\x87\x9d\x1f\x1bA\xa5\x87\x11\x86_\x81\xda\xac\xc8\xdbT8\x04\x16a\xed\xce\xe8\xcc\xed\b^\xb4\x18\xe9$\xbb.\xef\x96\x06G\xf1(E\xdbd\x96\xfb\nC\xeb\b><+l\xfdG\x8e\t\x96rT|\xe3\x13\x19\xe3%g\xa7n\xa93\xf5>\x81R\xe7`\x83N\xf4\xa7\xc8:\x8eY\x0e@\x1b\x17Y>b\x85\xd3\x12I\xbf\xac\x9eM\x884Z\xaf\xf3\'\x8aj\"\xd1~k\x7f%\x96\xf95&\x84A%\x97\xb8\x18\xa7\x88\xe3w', 0x1)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000000)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x25, 0xd, "eeddb7c25540993ad642248c7b0157ce0dc9b4e500476312cd6cb416f686ce0058265f66cdddf2e9ce8bb87ae03e87a61fb648d5c6a3e9977956be87176a30a9", "a863a5170a11d26a730cb3d1e9fb18cb0e58986d58e881bbe5e4230de84eea7a", [0x3, 0x800]})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
semop(0xffffffffffffffff, &(0x7f0000000040)=[{0x2, 0x2}, {0x0, 0x60, 0x800}, {0x1, 0x7, 0x1800}, {0x1, 0x5}, {0x1, 0x6}, {0x2, 0x6, 0x1000}], 0xc0)
socket$igmp(0x2, 0x3, 0x2)
r2 = socket$inet6(0xa, 0x80001, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffb}, 0x1c)
r4 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000005c0)={r4, 0x63, 0xb7}, &(0x7f0000000600)={'enc=', 'oaep', ' hash=', {'sha3-256-ce\x00'}}, &(0x7f0000000680)="52ef51163ecb3485c386d4faeedf45aadee8546dbdb2d0e5cdfa4594cb3602d4eb844f49c2b3a4acb112cad03189f2e48497a65d27ecb099531c3c1acf5ddf2de6df6df599c08cd910cc2e1206ee57233251a7dcf00834b649c28847568f75a2efde5d", &(0x7f0000000800)=""/183)
listen(r3, 0x3)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x10009, 0x52}]}}}}}}}, 0x0)
syz_emit_ethernet(0x1ad, &(0x7f0000000a40)={@local, @link_local, @void, {@ipv4={0x800, @dccp={{0x2b, 0x4, 0x3, 0x5, 0x19f, 0x66, 0x0, 0x4, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0x44, 0x3, 0x3, [{@multicast1, 0x4fb7}, {@multicast1, 0x800}]}, @generic={0x83, 0x4, "a84b"}, @end, @lsrr={0x83, 0x23, 0x65, [@multicast2, @multicast2, @rand_addr=0x64010100, @rand_addr=0x64010102, @local, @multicast1, @empty, @local]}, @rr={0x7, 0x17, 0xa6, [@remote, @dev={0xac, 0x14, 0x14, 0x22}, @multicast2, @multicast2, @private=0xa010100]}, @timestamp_addr={0x44, 0x44, 0x8d, 0x1, 0xd, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7f}, {@multicast2, 0x10001}, {@multicast1, 0x9}, {@private=0xa010100, 0x10001}, {@empty, 0x7}, {@loopback}, {@local, 0x9}]}]}}, {{0x4e22, 0x4e24, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x5, "800aa6", 0x4, "ffb60f"}, "c3da28e6d129fda1d9b7b7e48fe9a461eead706ffd1c157258cda4639ca0af6ace04ac722a798ca0c57062175a3cb19fe59d1dff05390c72b8b0714912709cab2cc51cc196ec8da30d89024ca98f563b8ba021a557893ceaa2e42409461271349ae883fde2177d5d86bd3e5fbdc1d7d46a47b050faee3d12a98ce31f60c697da570d448d3d0f049afeda3476cb282235b2c00fc47a2e213accd2bd3df50a896ee483f4ce1673a83c35bedc509292a174f4d2d11672037630442700d442e6f9cf912c47792675580763cf38d0f8a38ef0e87f77706ce709c5448bfb53e5c8d7560d8449"}}}}}, 0x0)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$SEG6_CMD_DUMPHMAC(r7, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r8, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80000000}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x40}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x10}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xe}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x400}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5}]}, 0x5c}}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000140)={{0x3, 0x0, 0x21, 0x2, 0x7fff}})
setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000033741e295caa51ad00"/144], 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0)

4.596436142s ago: executing program 2 (id=753):
syz_usb_connect(0x2, 0x59, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109024700010000000009046900000e0100000824020102020505072401070903000924"], 0x0)

4.553473953s ago: executing program 4 (id=754):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0)
syz_open_dev$sndctrl(0x0, 0xfffffffffffffffc, 0x40000)
r5 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x10000, 0x200000)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r5, 0x80045530, &(0x7f0000000140)=""/18)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000001c0)={0x0, <r6=>0x0})
creat(&(0x7f0000000040)='./bus\x00', 0x0)
prlimit64(r6, 0xe, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000080)={'wg2\x00', <r9=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x320, 0x0, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x2d0, 0x8, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @dev, 0x1}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x240, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xd8, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev}}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2767b524f45e9dfaf001c414581741c92349c3b6661d9864680582bd184ef1a6"}, @WGPEER_A_ALLOWEDIPS={0x140, 0x9, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xe}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r9}]}, 0x320}}, 0x0)

3.908769075s ago: executing program 0 (id=755):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$inet6(r1, &(0x7f0000007680)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000003c0)="16fc", 0x2}], 0x1, 0x0, 0x0, 0x50000}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001bc0)="eaba", 0x2}], 0x1}}], 0x2, 0x24000802)

3.712167961s ago: executing program 0 (id=756):
bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0xf, 0x0, @val=@tracing}, 0x40)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010700000000fedbdf256700000008000300", @ANYRES32=0x0, @ANYBLOB="0800c300020a0000"], 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x40)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/msg\x00', 0x0, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x5, 0x0, 0x0)
ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f00000000c0))
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {0x0, 0x3, 0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e24, @remote}}}, 0xa0)

3.626916956s ago: executing program 0 (id=757):
syz_open_procfs$pagemap(0x0, &(0x7f0000000140))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}})
add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff)
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x25}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffd, 0x0, 0x0, 0x2dcd}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r7, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r9 = accept(r6, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
recvfrom(r8, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
sendmsg(r8, &(0x7f00000014c0)={&(0x7f0000001040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r9, 0x1, 0x1, 0x4, 0x8004, {0xa, 0x4e23, 0x7, @remote, 0x5}}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001b80)="322a84d436adc3f124551212948b3b8449a56829085fc5b97a1baa1676d5c9c1d7fc6480519649e39c4343c757a1ee0ef36b584d7fe2c5281ff7c24de3d4d880afdf4dd6ab476c30263d8c1dfe3f7d5cd2e050ea82f1e264061cbd741b3da18088754bffe581dc09e7b314a541e018f10859b7ce2977a4e47e485f5ed5439936c8d64cdda137ad5bdd3037970f4427bdeb6dc6b1bcaa7de9fba3609ece26276bc9cd25d693c2c6fb81d6b9d68ba1ee53f646375d4a8b0ef62392d05b5210fc84e683a5ae89e2379a039f214f0af3ec0c59fd74e365c2d25238eb7b2d4e8f3aebe1eb795ee1d8fb66eddac34e45d491d0d19d564eeb2db7aec18c02a72e5cee8154160edcef9196edfcf85c82a48ecc4aab6389504cf90bcabee60d59b717cbb16396c2b413ef8ee392974689b0541eae7d9c714ec605ea60f2322cf6f1e0b0a5e59a2f2d87e2a04cf78aef1b1c979635432bf82265c2e25ce1234fe67ed6672c712b36f9e74d6558495d6b395ca4ab30ffb12fb3f81667224bb8831392979d68ccf83aa3d7a961df64282017547eeb307a0051cc4dcf915c60ac1735984dc274d8508cbc1ce75afdc641c4604a4700df837a7ef80440d2f883952c9cf4dab5f57b6dbdf06385ea1f2adf9f858054749df1b5812bd2167a9697431d11357ef0d2215da30425ecfa6ca3323db819b4b318b4f72032c60dd8093e33af496dd265e8be520d97b26c850efca4da4faeb999646ee4b01a01d39e9516d2abad8c34d8bd321e0224f6009f4dbe43007fba610f97728c18ff39a5648816af94401bd59ad33c6a0e97cb0e54fda293d5e3d655386a82915ee40383892c77d6018ca714e5c860c8002ecf29b307b2f435e372b95ab0d2da543f58ad07df73f473e20e2566832d6331814941fa04658f80dab480a590d32545ba859dd180d6277504ec2dff9b0fc7d7fc13b900b799ecca157516aa9555293b0eadfe4c611984b5df9debc78955cf796479e14ab9ab983a6e7d0ccbbe4e333be767086a69678a3e74c91a8b3d743e9223637f7257c7cedb2c555c3cdc3fe70e5faea2d5f60f04d10cdf411f7de6d9ceb4f48c0859dff7093aea5c255b2ef6b05822c062a9a0ccff2d60aa3d80e8149239fc396da2343721b6a1784132baa60268e7c952d83939714e0ff44cf083ecebfad7340b5162d9fdd914ada56c7192b8f9c583bc1689a53a0440c5d78c81916e4e7599718525d458a61a745f902bea194c28dbf472edc04eecfb3e6bbe47958f682fe7909976ba7d23362dd4e3209fb1f78634a2ec36918671bb65268b2b0252cd9c26e9c90bc643929c826342c708e93cbff616e2dae8d349ecdc431bc08c23235c125796bf85be1184491cc63a8482717be00395722faccc051b7498b789d61390c9e7ce9288a193f3b54a053ec50ae0f3f4dcd203de04747a18d0142dcba42b4709a09c37d3641b53e021a3f765d1d2f5c7848cee0c94fd15a051a0c8ebe714dd0ddf8d8840528082d5482f35693f645076d004e651495634914b628f5eaa2754e135f50a77f28a02c20d01e8a41fb108b03d498412226bac799564be7e296a654a91b8ba64f4e9bdda29457031ab7021142e8758d081e5daf23291af2e0e0f4cc828b3b6ed3f084e0ad5de4b6095c80d936fa6480bfa99f9d100104d2e367c06da31457f0c755cc7f3cfa91c8ae655502652619f0c52eba7814bc40ac737b86573fdc9d610cc4603468d15f615cc7bd063f1cb8a3267cc37eacd4a296c05ccb375e56925f20a604dabab48bdfc435cb0624abef6088c8ec0f2505acd15c11e99f3ac75bfcef4798a24ad263e68da512a936bba21ecb302061b69767271c94bb43f803025297a110ae05fa0d404d34e1c47764717c7b51b9a0d12bc6dc78da2e4c3cd97d3c27e9eb3706e8a4a9ebd59ca2ad744f9dc83d1cb223ff3dab658143d100a1d418e4d0dc7d1d5c45b6ed74c2ac8f33185ba915493fa5a115a036ba7a98eb763bf7a87225e1b25ed38b196f6d99ea061ec273b4efd9afb58cb375a6cfd19e5d28046e50f469f3d72a20527fbffc2f1bbeaba10b6229e7f503a8ad85cefc2ac7735f8b36c60061276ae23135f935ae5eb8924fcc7846e05d4ab857efb6361fd688608569dfa0bcdede9db648b0155621cfbab64c5c67336d74b0fcadf829a2b55853a9a281024351762b6518015b0d5875e9317e055cd406eb2618b366382292a3fdffe374c23e2a4faf4e2452cb8d4f260d1f57f2c7f791629aa176318041608cfb95aa8d1e413508178a78097c096d175d736f8b683859b55eec904626ac70e185ef7d7b2edc53758ac894edbc29df929d58c63ae19729db04282b45909557c72d73a1329db2a8f7a9968bb1d79929db508d1bcb4a97db54be3d9ebd70e94abd8dfb23e110b9be3fceae8621d3b6369e5a2b19188dc04fbf1cc6f8d46917bab20dfa3cd904be4f081e5faf9711d490448b7de8d5f9298c2a5bd335f27bc0d9bd8c82d4bd1594d5034404e8b8ed208457381a14f6efa1b1b1b1f576a66339ae22870082bb8951d536131651b06d5fbcb62d72541aa5be840df996fb7f3127aac972ad91a27e2e336847edd5c9a554db35da6ac3521196d0c11ffc196bb1121fae46b32432ad8c736136c06c8c562c30d105c471b9b223ee06543964174433655a06a50c01d64aac3042f3ff497ce24e8fbcb61fef21c6337a822f83e8d5bf3c322a3e696440db946a283919ffccf506c4427f3d5213c989757083c4d7eeb10665f33a6842d2233c754083ca315af538d875bb17d6151ff769a55fe26732858a4f833af79625da05f6ac8189a5539c20066b23437c8ea5c3ef3ec8ca4882881097ed0da3da88480d0733bb30dfec71dfac314172be5ccb218888ead4ba573a5888c5890e8efab6dbe20431b572c57ee859c38262aca38e657dd3a8e54ddb24d31c415448548bdd29664f2f80311d9fe03d094f25d892cb68ebc027940bd97bdd4bcb343a641ef0656e7758bc2ec1e2e1ca54930f8b661af1245dd4c8962f1b74847ab85583fd13aa197b7c4abf249ca95e9b74aa58e5dd25c258f66a276c1f863c8f903ad22d5c05d2c8b6724f6624e549418231315bd23e2f0b9e6a9a313d820269fd0c5b9358c190fff88d30e14bd863d962c5d08b2be89b61d0d9f0eddbe6bec7f33636a2688572323a3d9e91121817984965e93d4fb50a2ed7c71a3aab635d8a1c65e12f27ad7d85ca8aa1d1bc63611508c8ee62639cbb34d278b1b9273f6d97553283681b0ae0271f1ca8608dd8a2a3ee919c5f3a75e8a90d061e8a7020e644006b775af28683dd834ff7227b796e8a2a2a318e0807753985220bf1f75d7ccfedfc3b7d67deace0a8e0812c5dd30555e03b2a15d0a22753fdff1f58700568dae74e98ed4b41144abf9525e5ebd1a1f6dec30b42711193a066eb7be6cf561bfc2d27187719457da02ec00f8c4755609742f25c78fe1d25dee212336175c33bfc75b4decddf3374ef781ac0c6620e87d6eba6be7f816f15ca641fc16446a5df18d574ac1b276c2b9f512a56d32c6ba374d7d257fce5e307a1b613035ddd44425601ada6b4d1a9dd4348c7941f417fa5ccb76e79aab8ad2df14a927962e81266ab8d4b9b11aed8dd4f0f03d3a6e20fa528af3b47a35f84a04009765f3dfacd6bedab84c7666531226a22b259baba869c19877cea1d2ee1c55c97cbc28f3303666c2df4b2798b0f3b307a551e8dd1938ebe429c59069ee05797b56337bb84d6989e646f25d0e1c2b6691970c48e40c9d8eb4d83f21742b914cd3ffd604ab8f813063f335ed87be750c33098091bd6fc6f6b1205b9e3e00505a5442a998b598310a4d1a7114cee5c847e8b00e416434027cf0bf12ae9cf039159b81e49ec4ae689402c6fa3c219aada820523346e0d954153b32e5a8940e9c522098886666968eb33afb9ffb402b8bbbe23f57928332695d487430978f2f0b57bbdd308c19153d992c90301d26c49ad168e7b73c53b5bebc9715dc6c6fa4a3abe28ffe1af9da0d7985ee5edb028d1b6ea7da81761560265a54384b2072b7f5ffa314cfd051e0800a87f68ac11caac678fd749ad7ee2a4186f351c67161646441da92c0e45bd3f2ad3f0c60464017f1766b46dd3c594378a873ff0ce5056ca6bc36f27fb34bf371dd946b4eee4adc686a80d371febc417824d2070b156dff120d5e53c99f06943cc4d575d8311b28cf5ae85c556f75e6ee8f0dffbcce1ff05b0826daa69541bac1b0f1d94ee662ae35e40eeddf425cdeced581327b224e3ad4b417d811a03b429916e7adba573cebe99e3e21904cdcbca003e35fc22fdc128979dd05756fefb6f130b996600e8ac67e03d967ea96ac0292ab53987829331821401365fefba7b1a64b13e2d68fe3325d99bd87fd31e1b3115af7ab6d2c3a320836cfd80f5f4a5a8687752ea4983b108b298c1c55c3e84b3d4b806f90354bee8ada21250ac9581495fa5bac02e15fef39543117cd2f0455257da0f487963e8b1bf10ed03abce82f015360bf767238179349e75c8d2b5bb4b40a54630d21dd663132e73cfb652ef2a83a041e2fa4c661b219b3b03ca6b93e8020ee9a06412021a24ab11cd80dbddf70d4d6005dcaea4a57ec9f32238aa2df49768830fbc312f4fa08e3e5f28bd1de0e32c8b62002e0c34708be976ace1002384b37424bf8578c453ee1e8b945e40dc7ed1e54749014a559722aeb46d9a4f132e2f0cc45fdfec4dc1984bd06ae45149694724ed499c3e1c0429347abdfd5fbc6e27ef98a6a9e7f847d3146ee63c770674c5596a6ae58c6eeea75276b9391b4b7cefba5c633c846674607bca86fd826e469dcb18cb7f9e6c0f3c2d8615e7e16d12d0f38197285039b1be43032c60912cfab6bfed0892359f9c3cc90474f1d0f89558cace0e82a2e16365db72dde0bdcbf3b01de2429cca3de2fa78113ea9070799b8ccb9090082aa38dac73949779abecbf2d4ee1475911970e918e5831513687e3d3e3e5633791078ddf1fe66e7e14bddee1d71f45a07b5f7adb55e3aecd4a02e139d4cb8e01f3d1a65b873770634cc70ec10f74672127e62e9a37572e2cd39dd4edda23938170ad804cd181889466a223bb3eb3a8ab33a8ea076300628c13e917c7ed7022d49895d81aa4e7e7216f12ae903950c656871ec29ec292ca2068734aac17c582c0e13fccefeb975a4a83e471645cb351fa474940aef15255716ad1380154dac0cf1a26d358c0d4080f2562e50fe5c7fda4e29d59a2e161137a1b6cc656d92a0abc2b90c99bdcef92a9a396ff8430451bf8b557a252b37a152a49283faa92137017567e0054b14a6cff256ad4488facef80417fd4a579a299ed9f298cb4b4e520d27503a6dfcb4a41615289e8a24a551e7acadaefea6c4a4223321e1241eff8fcabd2ae46b7d7ba11a176840700687891f0b40d8456972df1afe36cb5a8c7509488c472974a7244150e9ca873d44aa50eded85d4db36f5c2468dddc2b54b601c69da53c8cd0f9efd2409b45b2cde8f051e61ba053708473f7e95abb49f1dc32a8529bc5ffab580877d8e856929f21a8da281a536ab836c53b4c7c65d43daa59b215d761cefeb59f986908ff4486d6ee9da1905cba1b039faa03d608e1de9950657c2960cf9f91452983e267c25dfd8783d0aa1605f1066f8046617291a44b640d6260fc5f5ffb22533b0eb204f137490d56d84941d9b60fc983d0537a0c620131f31c5d6305d740ababbc4a948b843d087acc38cf36261b6850eba815948332804d9101", 0x1000}, {&(0x7f00000010c0)="4b561ee26e1ff16628c4be8aecc8c8cbc14b82214010d2", 0x17}, {&(0x7f0000001100)="bc9341b9f8ea2fa79d9ba29a048a0faaa520d20326a2a4954b967f7b56baaedc9fe5653d6c9adeda3825bbbe0273fca141fc2018e1b4a8bd1c437c7f869976f145b8c1fbdba7f5d643b0687c59654353cf344a75bc436cc3b4294bd69ba03b39bf59a1eea02013f04204e6bec26831fe172cab531fc632f7f9c235", 0x7b}, {&(0x7f00000011c0)="5f02eac11a1585981a2e5fa6ed9becfe91325c6692f72c14da23804864107706f18961b9032ad2d7ee589c5f55aca0ab51b15094be0d47b459cbf718287daca101adbf1feee5b5625fd45fa6139075004567ebbbc71883a16db68efa340a96d4ab25b8c40be6ea2c46da9e2b35a53454ec212d759f4622", 0x77}, {&(0x7f0000001240)="d7301b1e", 0x4}, {&(0x7f0000000100)="1337c070ecefb76d5938dbd4cba4ae0d27a3605a", 0x14}, {&(0x7f00000012c0)="79c23b68e7339a841c47c628574ee9aae21fa9c7b1cf71e406e8d47e22c6acd928a67ad450a9b6dc010d5737fdadfb70a774f043d8ef9cc54933a14b7de7fe2a67a6523c17930998a4b9b0661144aafacc1841d014d27b1895d1f2e9918e11d19201a9234e0f975e27377e1af5d714b6efaa224a926121d058c8f106edae22", 0x7f}, {&(0x7f0000001340)="d68bd8fcd2f9d41bd55f76744cd7b142b39b975699a9344ee889cc3582fea863b87b2f3db6c4ae3668ff0f81480ab236b67a9e60f149ba9cbd51ce8b476999a98538c7a5a158c2f6f6c794fcb039dccf745f15918b916e9d2fdae09ef5395fa44b1087db1ba6ff257d788f78abe8018b3204934f0e746884524b1350fb122e09655f630d17dcba91c366fcbca1b07396209f6ebe74462fd9915ab3db8cf224ae5878fdd8ead934f190ea13a5f82d26baa8b37a68f50cfbe47b772863c6c00f317546", 0xc2}], 0x8}, 0x80)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f00004fd000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f000015a000/0x2000)=nil)
socket$nl_generic(0x10, 0x3, 0x10)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

2.846311624s ago: executing program 4 (id=758):
syz_open_procfs$pagemap(0x0, &(0x7f0000000140))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}})
add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff)
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x25}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffd, 0x0, 0x0, 0x2dcd}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r7, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r9 = accept(r6, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
recvfrom(r8, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
sendmsg(r8, &(0x7f00000014c0)={&(0x7f0000001040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r9, 0x1, 0x1, 0x4, 0x8004, {0xa, 0x4e23, 0x7, @remote, 0x5}}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001b80)="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", 0x1000}, {&(0x7f00000010c0)="4b561ee26e1ff16628c4be8aecc8c8cbc14b82214010d2", 0x17}, {&(0x7f0000001100)="bc9341b9f8ea2fa79d9ba29a048a0faaa520d20326a2a4954b967f7b56baaedc9fe5653d6c9adeda3825bbbe0273fca141fc2018e1b4a8bd1c437c7f869976f145b8c1fbdba7f5d643b0687c59654353cf344a75bc436cc3b4294bd69ba03b39bf59a1eea02013f04204e6bec26831fe172cab531fc632f7f9c235", 0x7b}, {&(0x7f00000011c0)="5f02eac11a1585981a2e5fa6ed9becfe91325c6692f72c14da23804864107706f18961b9032ad2d7ee589c5f55aca0ab51b15094be0d47b459cbf718287daca101adbf1feee5b5625fd45fa6139075004567ebbbc71883a16db68efa340a96d4ab25b8c40be6ea2c46da9e2b35a53454ec212d759f4622", 0x77}, {&(0x7f0000001240)="d7301b1e", 0x4}, {&(0x7f0000000100)="1337c070ecefb76d5938dbd4cba4ae0d27a3605a", 0x14}, {&(0x7f00000012c0)="79c23b68e7339a841c47c628574ee9aae21fa9c7b1cf71e406e8d47e22c6acd928a67ad450a9b6dc010d5737fdadfb70a774f043d8ef9cc54933a14b7de7fe2a67a6523c17930998a4b9b0661144aafacc1841d014d27b1895d1f2e9918e11d19201a9234e0f975e27377e1af5d714b6efaa224a926121d058c8f106edae22", 0x7f}, {&(0x7f0000001340)="d68bd8fcd2f9d41bd55f76744cd7b142b39b975699a9344ee889cc3582fea863b87b2f3db6c4ae3668ff0f81480ab236b67a9e60f149ba9cbd51ce8b476999a98538c7a5a158c2f6f6c794fcb039dccf745f15918b916e9d2fdae09ef5395fa44b1087db1ba6ff257d788f78abe8018b3204934f0e746884524b1350fb122e09655f630d17dcba91c366fcbca1b07396209f6ebe74462fd9915ab3db8cf224ae5878fdd8ead934f190ea13a5f82d26baa8b37a68f50cfbe47b772863c6c00f317546", 0xc2}], 0x8}, 0x80)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f00004fd000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f000015a000/0x2000)=nil)
socket$nl_generic(0x10, 0x3, 0x10)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})

2.792065277s ago: executing program 2 (id=759):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0)
sendfile(r0, r0, 0x0, 0x1)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r2, r2}, &(0x7f00000001c0)=""/166, 0xa6, &(0x7f0000000140)={&(0x7f0000000300)={'crc32c\x00'}})
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_IOAS_MAP(r1, 0x3b85, &(0x7f0000000200)={0x28, 0x2, r3, 0x0, &(0x7f0000000e00)="4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c4c0c4c4c4cb132051e80cdcea9a6499e5cc009c1cb020e9136dfabbada14328d13da8ae144ef00046d6a05d514ef3c484626000000000000000000009259c5f86dfd22dd347dc58399bfaff88cb9eaba0fb39aa41948184804ede60765566a23ec35475eb9ca897332a87d439729a8a9708a959f7216e47e867c3c9a01b9423ccd8d8ea0e1a3af5f59da28155131397ac2c9e081904111c9206d9405c2b2", 0xffffffffffffffe5, 0x1c})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x9, 0x0, 0x8, 0xe02, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x24008010)
r5 = socket(0x11, 0x3, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
bind$packet(r5, &(0x7f0000000040)={0x11, 0x5, 0x0, 0x1, 0xfc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061a6a400000000001f010000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

2.378180084s ago: executing program 2 (id=760):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
write$UHID_INPUT(r1, &(0x7f0000002340)={0xc, {"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", 0x1000}}, 0x1006)

2.071840967s ago: executing program 2 (id=761):
r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[])
ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000080)=[0xfff])
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aac010000120a01020000000000000000020000000900020073797a300000000008000440000000000900010073797a3000000000080003400000"], 0x1d4}}, 0x4)

171.87983ms ago: executing program 2 (id=762):
sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000040)="6a1297aa9aa00050ecca54e47d3a9bf266a37518d7d450b1878cdf23f50641e7bf2a675a387aa2b9a0bf2ca822a0dff13d79457364deabfc439f8d8f98b34051de413ab12a79077302addfb79aa6e59ebbcf17c34615fccea1d24c4fbbf12c6daf996246fdd5fcc8461f9f79dc235e487747c5f31001ec734a0d03c9f45bb6c804d7a5dbf0be1ad8730bd0fccee0e3cbfc7cca01313962571257ffa967311d2f064be536a9d2a9c9e19c56107532592d075c47edec8df66cc98f85ab00f767efeee6268d9ccd9b55ee8837c477234bf8791da68d76c356e41ca97b42ee99cb13bc4b1d5b63787cd508c6a4e4b3f1e919572d2d9d8f8966e9bacf8a4914f63f5b4a44ce379d471c837becffe80e4752ca502182d95605bbdafdd6fc75910c467bedeb0d3f54705422564ded9c5aa3277f056926cae7e40362e9997ed62b2c7ce48ce1fac07cb10a4cd3f24cb66e16c914d70e980ebe798d50156ff1b2349cd9ff", 0x160, 0x1090, 0x0, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0xc061, 0x6, 0x5e8, 0x448, 0xd0, 0x0, 0xd0, 0x448, 0x518, 0x518, 0x518, 0x518, 0x518, 0x6, 0x0, {[{{@ipv6={@private1, @private1, [0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], 'ip_vti0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @remote, [], [0x0, 0x0, 0x0, 0xffffffff], 'pim6reg1\x00', 'hsr0\x00', {0xff}}, 0x0, 0x118, 0x148, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0xa31be25524e8eba3}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30}}, {{@ipv6={@mcast2, @mcast2, [], [], 'pimreg0\x00', 'lo\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@private, @ipv6=@dev}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, [], [], 'team0\x00', 'ip6gretap0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4, 'vlan0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x308}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x648) (async, rerun: 32)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000001"]) (rerun: 32)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) (async)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @pic={0x4, 0x7, 0x5, 0x11, 0x1c, 0x1, 0x4, 0x9, 0x3f, 0x2, 0xc, 0x0, 0x2, 0x5, 0x7, 0x6}}) (async)
ioctl$KVM_RUN(r2, 0x8004ae98, 0x20e10000)

0s ago: executing program 2 (id=763):
pipe2(&(0x7f0000000200)={<r0=>0x0, <r1=>0x0}, 0x0)
fanotify_init(0x200, 0x0)
prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) (async)
prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0)
prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) (async)
prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0)
r2 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil)
shmat(r2, &(0x7f0000ff6000/0x4000)=nil, 0x400c) (async)
shmat(r2, &(0x7f0000ff6000/0x4000)=nil, 0x400c)
mremap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ff9000/0x3000)=nil) (async)
mremap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ff9000/0x3000)=nil)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ff7000/0x2000)=nil) (async)
mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ff7000/0x2000)=nil)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000140)={0x1, 0x6, 0x2, 0x0})
r4 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
fcntl$setstatus(r4, 0x4, 0x44000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000280)={0x1})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7fff, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xf, 0x3, 0x1}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x20040000) (async)
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xf, 0x3, 0x1}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x20040000)
r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SG_IO(r7, 0x2285, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
write$sndseq(r8, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @time=@time={0x9, 0x1}}], 0x38) (async)
write$sndseq(r8, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @time=@time={0x9, 0x1}}], 0x38)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r8)
read$snapshot(r8, 0x0, 0xffffffbf)
read$watch_queue(r8, &(0x7f0000000080)=""/215, 0xd7)
read$snapshot(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

4242 with mce emulator interface version 1
[  179.174740][  T978] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  179.195476][  T978] usb 3-1: USB disconnect, device number 20
[  179.214005][ T5905] usb 2-1: Using ep0 maxpacket: 16
[  179.271002][ T5905] usb 2-1: config 0 has no interfaces?
[  179.283584][ T5905] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  179.328017][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.400362][ T5905] usb 2-1: config 0 descriptor??
[  179.496680][    T9] usb 1-1: new low-speed USB device number 17 using dummy_hcd
[  179.654085][    T9] usb 1-1: Invalid ep0 maxpacket: 64
[  179.803007][    T9] usb 1-1: new low-speed USB device number 18 using dummy_hcd
[  179.963585][    T9] usb 1-1: Invalid ep0 maxpacket: 64
[  179.986748][    T9] usb usb1-port1: unable to enumerate USB device
[  180.031293][ T7397] TCP: TCP_TX_DELAY enabled
[  180.654485][  T978] usb 2-1: USB disconnect, device number 18
[  180.975561][ T7408] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  181.103597][ T7408] netlink: 16 bytes leftover after parsing attributes in process `syz.2.308'.
[  182.293558][ T5840] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  182.431348][ T5905] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  182.572860][ T5840] usb 1-1: Using ep0 maxpacket: 16
[  182.595430][ T5905] usb 4-1: Using ep0 maxpacket: 32
[  182.602486][ T7450] netlink: 16 bytes leftover after parsing attributes in process `syz.2.314'.
[  182.711018][ T5840] usb 1-1: config 0 has no interfaces?
[  182.755418][ T7450] bond0: entered promiscuous mode
[  182.763054][ T7450] bond_slave_0: entered promiscuous mode
[  182.781149][ T5840] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  182.781466][ T7450] bond_slave_1: entered promiscuous mode
[  182.807110][ T5905] usb 4-1: config 0 has an invalid interface number: 151 but max is 0
[  182.833966][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.847348][ T5905] usb 4-1: config 0 has no interface number 0
[  182.850079][ T7450] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  182.860619][ T5905] usb 4-1: config 0 interface 151 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 528
[  182.882543][ T5840] usb 1-1: config 0 descriptor??
[  182.916331][ T5905] usb 4-1: New USB device found, idVendor=0403, idProduct=e548, bcdDevice=ad.d6
[  182.943977][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.968294][ T5905] usb 4-1: Product: syz
[  182.974173][ T7450] bond0: left promiscuous mode
[  182.990149][ T5905] usb 4-1: Manufacturer: syz
[  183.004085][ T5905] usb 4-1: SerialNumber: syz
[  183.035833][ T5905] usb 4-1: config 0 descriptor??
[  183.041514][ T7444] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  183.078716][ T5905] ftdi_sio 4-1:0.151: FTDI USB Serial Device converter detected
[  183.086142][ T7450] bond_slave_0: left promiscuous mode
[  183.105092][ T5905] ftdi_sio ttyUSB0: unknown device type: 0xadd6
[  183.118098][ T7450] bond_slave_1: left promiscuous mode
[  183.406201][ T5918] usb 1-1: USB disconnect, device number 19
[  183.831178][ T7477] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  185.668806][ T5905] usb 4-1: USB disconnect, device number 21
[  185.699279][ T5905] ftdi_sio 4-1:0.151: device disconnected
[  188.623300][ T7568] fuse: Unknown parameter 'no'
[  188.635977][ T7568] netlink: 68 bytes leftover after parsing attributes in process `syz.4.328'.
[  188.700371][   T30] audit: type=1800 audit(1749977197.104:10): pid=7569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.327" name="bus" dev="tmpfs" ino=393 res=0 errno=0
[  189.489626][   T30] audit: type=1326 audit(1749977197.894:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7588 comm="syz.1.331" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1bf98e929 code=0x0
[  189.622731][ T5905] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  189.791693][ T5905] usb 4-1: config 0 has no interfaces?
[  189.810443][ T5905] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  189.880850][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.924344][ T5905] usb 4-1: Product: syz
[  189.935316][ T5905] usb 4-1: Manufacturer: syz
[  189.994491][ T5905] usb 4-1: SerialNumber: syz
[  190.045070][ T5905] usb 4-1: config 0 descriptor??
[  190.290049][ T7583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  190.310927][ T7583] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  190.367684][ T7593] batadv_slave_1: entered promiscuous mode
[  190.459341][   T30] audit: type=1326 audit(1749977198.864:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.0.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0643f8e929 code=0x7ffc0000
[  190.529899][ T7614] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  190.623794][ T7593] batadv_slave_1: left promiscuous mode
[  190.650802][   T30] audit: type=1326 audit(1749977198.864:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7592 comm="syz.0.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0643f8e929 code=0x7ffc0000
[  190.672947][    C0] vkms_vblank_simulate: vblank timer overrun
[  192.198698][   T24] usb 4-1: USB disconnect, device number 22
[  192.893065][ T7664] netlink: 56 bytes leftover after parsing attributes in process `syz.2.345'.
[  193.415382][   T24] usb 4-1: new low-speed USB device number 23 using dummy_hcd
[  193.719448][   T24] usb 4-1: unable to read config index 0 descriptor/start: -61
[  193.732794][   T24] usb 4-1: can't read configurations, error -61
[  193.762859][  T917] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  193.895240][   T24] usb 4-1: new low-speed USB device number 24 using dummy_hcd
[  193.967580][  T917] usb 1-1: config 0 has no interfaces?
[  193.978292][  T917] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  193.990841][  T917] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.999813][  T917] usb 1-1: Product: syz
[  194.006478][  T917] usb 1-1: Manufacturer: syz
[  194.011779][  T917] usb 1-1: SerialNumber: syz
[  194.026401][  T917] usb 1-1: config 0 descriptor??
[  194.115088][   T24] usb 4-1: unable to read config index 0 descriptor/start: -61
[  194.128012][   T24] usb 4-1: can't read configurations, error -61
[  194.134728][   T24] usb usb4-port1: attempt power cycle
[  194.222716][ T5840] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  194.373474][ T5840] usb 2-1: Using ep0 maxpacket: 8
[  194.401932][ T7698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  194.411675][ T7698] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.423472][ T5840] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  194.438954][ T5840] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  194.479178][ T5840] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  194.491748][   T24] usb 4-1: new low-speed USB device number 25 using dummy_hcd
[  194.563969][   T24] usb 4-1: unable to read config index 0 descriptor/start: -61
[  194.571585][   T24] usb 4-1: can't read configurations, error -61
[  194.588128][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  194.594735][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  194.608088][ T5840] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  194.628279][ T5840] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  194.642054][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.752732][   T24] usb 4-1: new low-speed USB device number 26 using dummy_hcd
[  194.775954][   T24] usb 4-1: unable to read config index 0 descriptor/start: -61
[  194.784516][   T24] usb 4-1: can't read configurations, error -61
[  194.792497][   T24] usb usb4-port1: unable to enumerate USB device
[  194.892812][ T5840] usb 2-1: GET_CAPABILITIES returned 0
[  194.899083][ T5840] usbtmc 2-1:16.0: can't read capabilities
[  195.106850][ T5840] usb 2-1: USB disconnect, device number 19
[  195.895287][ T7751] netlink: 312 bytes leftover after parsing attributes in process `syz.1.357'.
[  195.911080][ T7751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.357'.
[  197.098525][  T978] usb 1-1: USB disconnect, device number 20
[  197.141111][ T7784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.359'.
[  197.166638][ T7784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.359'.
[  197.513775][  T978] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  197.672795][  T978] usb 1-1: Using ep0 maxpacket: 8
[  197.864493][  T978] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  197.902951][  T978] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  197.926824][  T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.327133][ T7786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.360'.
[  198.428344][  T978] usb 1-1: USB disconnect, device number 21
[  199.183898][ T7841] FAULT_INJECTION: forcing a failure.
[  199.183898][ T7841] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  199.225634][ T7841] CPU: 0 UID: 0 PID: 7841 Comm: syz.2.369 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) 
[  199.225656][ T7841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  199.225664][ T7841] Call Trace:
[  199.225669][ T7841]  <TASK>
[  199.225675][ T7841]  dump_stack_lvl+0x189/0x250
[  199.225699][ T7841]  ? __pfx____ratelimit+0x10/0x10
[  199.225719][ T7841]  ? __pfx_dump_stack_lvl+0x10/0x10
[  199.225738][ T7841]  ? __pfx__printk+0x10/0x10
[  199.225751][ T7841]  ? __might_fault+0xb0/0x130
[  199.225769][ T7841]  should_fail_ex+0x414/0x560
[  199.225788][ T7841]  _copy_from_iter+0x1db/0x16f0
[  199.225809][ T7841]  ? rcu_is_watching+0x15/0xb0
[  199.225829][ T7841]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  199.225842][ T7841]  ? __pfx__copy_from_iter+0x10/0x10
[  199.225861][ T7841]  ? __build_skb_around+0x257/0x3e0
[  199.225878][ T7841]  ? netlink_sendmsg+0x642/0xb30
[  199.225891][ T7841]  ? skb_put+0x11b/0x210
[  199.225908][ T7841]  netlink_sendmsg+0x6b2/0xb30
[  199.225927][ T7841]  ? __pfx_netlink_sendmsg+0x10/0x10
[  199.225944][ T7841]  ? aa_sock_msg_perm+0x94/0x160
[  199.225961][ T7841]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  199.225976][ T7841]  ? __pfx_netlink_sendmsg+0x10/0x10
[  199.225991][ T7841]  __sock_sendmsg+0x21c/0x270
[  199.226012][ T7841]  ____sys_sendmsg+0x505/0x830
[  199.226031][ T7841]  ? __pfx_____sys_sendmsg+0x10/0x10
[  199.226051][ T7841]  ? import_iovec+0x74/0xa0
[  199.226065][ T7841]  ___sys_sendmsg+0x21f/0x2a0
[  199.226082][ T7841]  ? __pfx____sys_sendmsg+0x10/0x10
[  199.226124][ T7841]  ? __fget_files+0x2a/0x420
[  199.226137][ T7841]  ? __fget_files+0x3a0/0x420
[  199.226156][ T7841]  __x64_sys_sendmsg+0x19b/0x260
[  199.226174][ T7841]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  199.226196][ T7841]  ? rcu_is_watching+0x15/0xb0
[  199.226217][ T7841]  ? do_syscall_64+0xbe/0x3b0
[  199.226230][ T7841]  do_syscall_64+0xfa/0x3b0
[  199.226240][ T7841]  ? lockdep_hardirqs_on+0x9c/0x150
[  199.226258][ T7841]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.226269][ T7841]  ? clear_bhb_loop+0x60/0xb0
[  199.226290][ T7841]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  199.226308][ T7841] RIP: 0033:0x7f0c9d18e929
[  199.226326][ T7841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  199.226343][ T7841] RSP: 002b:00007f0c9dfe9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  199.226364][ T7841] RAX: ffffffffffffffda RBX: 00007f0c9d3b5fa0 RCX: 00007f0c9d18e929
[  199.226377][ T7841] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003
[  199.226389][ T7841] RBP: 00007f0c9dfe9090 R08: 0000000000000000 R09: 0000000000000000
[  199.226402][ T7841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  199.226415][ T7841] R13: 0000000000000000 R14: 00007f0c9d3b5fa0 R15: 00007f0c9d4dfa28
[  199.226441][ T7841]  </TASK>
[  199.876963][  T978] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  200.083488][  T978] usb 1-1: Using ep0 maxpacket: 8
[  200.700518][  T978] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  200.725684][ T5840] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  200.725821][  T978] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  200.755953][  T978] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  200.780129][  T978] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  200.806431][  T978] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  200.843233][  T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.294025][  T978] usb 1-1: GET_CAPABILITIES returned 0
[  201.328835][  T978] usbtmc 1-1:16.0: can't read capabilities
[  201.481181][   T24] usb 1-1: USB disconnect, device number 22
[  201.604732][ T7881] netlink: 16 bytes leftover after parsing attributes in process `syz.3.374'.
[  201.620400][ T7881] bond0: entered promiscuous mode
[  201.631690][ T7881] bond_slave_0: entered promiscuous mode
[  201.640040][ T7881] bond_slave_1: entered promiscuous mode
[  201.653346][ T7881] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  201.661853][ T7881] bond0: left promiscuous mode
[  201.671799][ T7881] bond_slave_0: left promiscuous mode
[  201.678710][ T7881] bond_slave_1: left promiscuous mode
[  201.990609][ T7892] openvswitch: netlink: IP tunnel dst address not specified
[  202.278969][ T7895] netlink: 'syz.4.377': attribute type 1 has an invalid length.
[  202.401354][ T7910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.377'.
[  202.486820][ T7932] netlink: 28 bytes leftover after parsing attributes in process `syz.4.377'.
[  202.507267][ T7915] trusted_key: encrypted_key: master key parameter 'defaul�' is invalid
[  202.761378][ T7906] 8021q: adding VLAN 0 to HW filter on device bond2
[  202.805440][ T7906] bond1: (slave bond2): making interface the new active one
[  202.864063][ T7906] bond1: (slave bond2): Enslaving as an active interface with an up link
[  202.895375][ T7932] 8021q: adding VLAN 0 to HW filter on device bond1
[  204.728099][ T5923] usb 5-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[  204.779455][ T5923] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -110
[  204.801810][ T5923] usb 5-1: USB disconnect, device number 7
[  205.532885][ T5840] usb 3-1: device descriptor read/64, error -71
[  205.794808][ T5840] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  205.968085][ T5840] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  206.032804][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.064486][ T5840] usb 3-1: config 0 descriptor??
[  206.078040][ T5840] gspca_main: sunplus-2.14.0 probing 055f:c420
[  206.185433][ T5923] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  206.431860][ T5923] usb 2-1: Using ep0 maxpacket: 8
[  206.463762][ T5923] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  206.474526][ T5923] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  206.503199][ T5923] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  206.574760][ T5923] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  206.610919][ T5923] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  206.621637][ T8033] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  206.623240][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.806042][ T5845] Bluetooth: hci0: command 0x0406 tx timeout
[  206.812228][ T5845] Bluetooth: hci4: command 0x0406 tx timeout
[  206.818521][ T5845] Bluetooth: hci2: command 0x0406 tx timeout
[  206.822716][ T5836] Bluetooth: hci1: command 0x0406 tx timeout
[  206.825346][ T5845] Bluetooth: hci3: command 0x0406 tx timeout
[  206.913817][ T5923] usb 2-1: GET_CAPABILITIES returned 0
[  206.921950][ T5923] usbtmc 2-1:16.0: can't read capabilities
[  207.139636][ T8006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  207.204578][ T8006] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  207.214376][ T5923] usb 2-1: USB disconnect, device number 20
[  207.259120][ T8057] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  207.742916][ T5840] gspca_sunplus: reg_w_riv err -110
[  207.748233][ T5840] sunplus 3-1:0.0: probe with driver sunplus failed with error -110
[  207.993977][ T8076] netlink: 'syz.4.393': attribute type 1 has an invalid length.
[  208.035998][ T8076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  208.649472][ T5840] usb 3-1: USB disconnect, device number 22
[  209.505954][ T8109] FAULT_INJECTION: forcing a failure.
[  209.505954][ T8109] name failslab, interval 1, probability 0, space 0, times 0
[  209.543002][ T8109] CPU: 0 UID: 0 PID: 8109 Comm: syz.2.400 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) 
[  209.543034][ T8109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  209.543046][ T8109] Call Trace:
[  209.543054][ T8109]  <TASK>
[  209.543063][ T8109]  dump_stack_lvl+0x189/0x250
[  209.543099][ T8109]  ? __pfx____ratelimit+0x10/0x10
[  209.543128][ T8109]  ? __pfx_dump_stack_lvl+0x10/0x10
[  209.543156][ T8109]  ? __pfx__printk+0x10/0x10
[  209.543185][ T8109]  ? __pfx___might_resched+0x10/0x10
[  209.543213][ T8109]  ? fs_reclaim_acquire+0x7d/0x100
[  209.543242][ T8109]  should_fail_ex+0x414/0x560
[  209.543272][ T8109]  should_failslab+0xa8/0x100
[  209.543295][ T8109]  __kmalloc_noprof+0xcb/0x4f0
[  209.543314][ T8109]  ? snd_pcm_hw_refine+0x967/0x1640
[  209.543344][ T8109]  snd_pcm_hw_refine+0x967/0x1640
[  209.543390][ T8109]  ? __kasan_kmalloc+0x93/0xb0
[  209.543409][ T8109]  ? snd_pcm_oss_change_params_locked+0x1048/0x3e40
[  209.543440][ T8109]  ? snd_pcm_oss_set_trigger+0x95/0x740
[  209.543458][ T8109]  ? do_sys_poll+0x8c6/0x1070
[  209.543478][ T8109]  ? __se_sys_ppoll+0x1ff/0x260
[  209.543498][ T8109]  ? __pfx_snd_pcm_hw_refine+0x10/0x10
[  209.543575][ T8109]  snd_pcm_hw_param_first+0x3e9/0xaf0
[  209.543618][ T8109]  snd_pcm_hw_param_near+0x460/0x500
[  209.543647][ T8109]  ? snd_pcm_oss_change_params_locked+0xff9/0x3e40
[  209.543677][ T8109]  ? snd_pcm_hw_param_value+0x2b9/0x510
[  209.543714][ T8109]  snd_pcm_oss_change_params_locked+0x1048/0x3e40
[  209.543766][ T8109]  ? trace_contention_end+0x39/0x120
[  209.543802][ T8109]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  209.543832][ T8109]  ? snd_pcm_oss_make_ready+0xc0/0x340
[  209.543868][ T8109]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  209.543888][ T8109]  ? do_raw_spin_lock+0x121/0x290
[  209.543917][ T8109]  snd_pcm_oss_make_ready+0x11b/0x340
[  209.543943][ T8109]  snd_pcm_oss_set_trigger+0x95/0x740
[  209.543973][ T8109]  snd_pcm_oss_poll+0x659/0x8a0
[  209.544007][ T8109]  ? __pfx_snd_pcm_oss_poll+0x10/0x10
[  209.544046][ T8109]  ? __pfx_snd_pcm_oss_poll+0x10/0x10
[  209.544077][ T8109]  do_sys_poll+0x8c6/0x1070
[  209.544104][ T8109]  ? do_sys_poll+0x361/0x1070
[  209.544133][ T8109]  ? __pfx_do_sys_poll+0x10/0x10
[  209.544173][ T8109]  ? __pfx_pollwake+0x10/0x10
[  209.544198][ T8109]  ? __pfx_pollwake+0x10/0x10
[  209.544222][ T8109]  ? __pfx_pollwake+0x10/0x10
[  209.544247][ T8109]  ? __pfx_pollwake+0x10/0x10
[  209.544272][ T8109]  ? __pfx_pollwake+0x10/0x10
[  209.544297][ T8109]  ? __pfx_pollwake+0x10/0x10
[  209.544321][ T8109]  ? __pfx_pollwake+0x10/0x10
[  209.544346][ T8109]  ? __pfx_pollwake+0x10/0x10
[  209.544371][ T8109]  ? __pfx_pollwake+0x10/0x10
[  209.544403][ T8109]  ? rcu_read_lock_any_held+0xb3/0x120
[  209.544423][ T8109]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  209.544447][ T8109]  ? vfs_write+0x8d8/0xa90
[  209.544496][ T8109]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  209.544514][ T8109]  ? set_user_sigmask+0xc7/0x1b0
[  209.544543][ T8109]  ? __pfx_set_user_sigmask+0x10/0x10
[  209.544573][ T8109]  ? __fget_files+0x3a0/0x420
[  209.544605][ T8109]  __se_sys_ppoll+0x1ff/0x260
[  209.544629][ T8109]  ? __pfx___se_sys_ppoll+0x10/0x10
[  209.544651][ T8109]  ? __pfx_ksys_write+0x10/0x10
[  209.544667][ T8109]  ? rcu_is_watching+0x15/0xb0
[  209.544703][ T8109]  ? do_syscall_64+0xbe/0x3b0
[  209.544720][ T8109]  ? __x64_sys_ppoll+0x20/0xc0
[  209.544743][ T8109]  do_syscall_64+0xfa/0x3b0
[  209.544760][ T8109]  ? lockdep_hardirqs_on+0x9c/0x150
[  209.544789][ T8109]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.544810][ T8109]  ? clear_bhb_loop+0x60/0xb0
[  209.544835][ T8109]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  209.544854][ T8109] RIP: 0033:0x7f0c9d18e929
[  209.544873][ T8109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  209.544891][ T8109] RSP: 002b:00007f0c9dfa7038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f
[  209.544914][ T8109] RAX: ffffffffffffffda RBX: 00007f0c9d3b6160 RCX: 00007f0c9d18e929
[  209.544929][ T8109] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0
[  209.544943][ T8109] RBP: 00007f0c9dfa7090 R08: 0000000000000000 R09: 0000000000000000
[  209.544955][ T8109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  209.544967][ T8109] R13: 0000000000000000 R14: 00007f0c9d3b6160 R15: 00007f0c9d4dfa28
[  209.544999][ T8109]  </TASK>
[  209.602811][ T5840] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  210.763377][ T8117] QAT: failed to copy from user cfg_data.
[  210.992699][ T5840] usb 5-1: Using ep0 maxpacket: 8
[  211.002757][   T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  211.022139][ T5840] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  211.067959][ T5840] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  211.099679][ T5840] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  211.129466][ T5840] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  211.142910][  T978] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  211.172915][   T24] usb 2-1: Using ep0 maxpacket: 8
[  211.183126][ T5840] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  211.205911][   T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  211.231903][   T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  211.258740][ T5840] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  211.277903][   T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  211.288323][ T5840] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  211.310012][   T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  211.323309][ T5840] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  211.343038][   T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  211.381360][ T5840] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  211.446555][  T978] usb 1-1: Using ep0 maxpacket: 32
[  211.518187][  T978] usb 1-1: config 0 interface 0 has no altsetting 0
[  211.533747][  T978] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  211.543407][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.554209][  T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.568012][  T978] usb 1-1: Product: syz
[  211.568026][ T5840] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  211.580495][  T978] usb 1-1: Manufacturer: syz
[  211.599588][  T978] usb 1-1: SerialNumber: syz
[  211.653437][  T978] usb 1-1: config 0 descriptor??
[  211.675283][ T5840] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  211.695481][ T5840] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  211.752415][ T5840] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  211.791053][ T5840] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  211.845954][   T24] usb 2-1: GET_CAPABILITIES returned 0
[  211.864265][   T24] usbtmc 2-1:16.0: can't read capabilities
[  211.888492][ T5840] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  211.951242][ T5840] usb 5-1: string descriptor 0 read error: -22
[  211.958118][ T5840] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  211.994375][ T5840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.133049][  T978] gs_usb 1-1:0.0: Configuring for 1 interfaces
[  212.135496][   T45] usb 2-1: USB disconnect, device number 21
[  212.229501][ T5840] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  212.326301][ T5922] usb 5-1: USB disconnect, device number 8
[  212.481465][  T978] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPIPE)
[  212.723888][ T8126] netlink: 28 bytes leftover after parsing attributes in process `syz.0.403'.
[  212.774133][ T5840] usb 1-1: USB disconnect, device number 23
[  212.991736][ T8200] fuse: Bad value for 'fd'
[  213.648900][  T978] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  214.357103][  T978] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02
[  214.414006][  T978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.422072][  T978] usb 5-1: Product: syz
[  214.469566][  T978] usb 5-1: Manufacturer: syz
[  214.490564][  T978] usb 5-1: SerialNumber: syz
[  214.580345][  T978] usb 5-1: config 0 descriptor??
[  214.849747][ T8213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  214.860669][ T8213] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  214.987055][  T978] usb 5-1: USB disconnect, device number 9
[  215.152891][   T45] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  215.383120][ T8273] fuse: Bad value for 'fd'
[  215.632372][   T45] usb 3-1: Using ep0 maxpacket: 16
[  217.216545][  T978] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  217.492794][  T978] usb 1-1: Using ep0 maxpacket: 16
[  217.501874][  T978] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[  217.572750][  T978] usb 1-1: config 0 has no interface number 0
[  217.579780][  T978] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  217.596137][  T978] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  217.633278][  T978] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  217.644320][  T978] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  217.814530][   T45] usb 3-1: unable to get BOS descriptor or descriptor too short
[  217.866456][  T978] usb 1-1: Product: syz
[  217.871210][  T978] usb 1-1: SerialNumber: syz
[  217.872809][   T45] usb 3-1: unable to read config index 0 descriptor/start: -71
[  217.916403][   T45] usb 3-1: can't read configurations, error -71
[  217.929341][  T978] usb 1-1: config 0 descriptor??
[  217.956849][  T978] usbhid 1-1:0.8: couldn't find an input interrupt endpoint
[  218.265034][ T8310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  218.309044][ T8310] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  218.406940][ T8310] netlink: 8 bytes leftover after parsing attributes in process `syz.0.426'.
[  218.427690][ T8310] netlink: 84 bytes leftover after parsing attributes in process `syz.0.426'.
[  218.542803][ T8310] loop2: detected capacity change from 0 to 7
[  218.590350][ T5957] Dev loop2: unable to read RDB block 7
[  218.609712][ T5957]  loop2: unable to read partition table
[  218.678789][ T5957] loop2: partition table beyond EOD, truncated
[  218.727764][ T8310] Dev loop2: unable to read RDB block 7
[  218.733614][ T8310]  loop2: unable to read partition table
[  218.749555][ T8310] loop2: partition table beyond EOD, truncated
[  218.758245][ T8310] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  218.844025][ T5922] usb 1-1: USB disconnect, device number 24
[  219.541750][ T5922] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  219.615795][ T8376] fuse: Bad value for 'fd'
[  219.723180][ T5922] usb 5-1: Using ep0 maxpacket: 32
[  219.736893][ T5922] usb 5-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e
[  219.747280][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.764930][ T5922] usb 5-1: config 0 descriptor??
[  219.776064][ T5922] usb 5-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state
[  219.807013][ T5922] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  219.819258][ T5922] dvbdev: DVB: registering new adapter (HCW 126xxx)
[  219.827623][ T5922] usb 5-1: media controller created
[  219.856429][  T978] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  219.874299][ T5922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  220.017453][ T5922] usb 5-1: selecting invalid altsetting 1
[  220.023483][  T978] usb 4-1: device descriptor read/64, error -71
[  220.046635][ T5922] set interface failed
[  220.047084][ T5922] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  220.060441][ T5922] error writing reg: 0xff, val: 0x00
[  220.190576][ T5922] dvb_usb_mxl111sf 5-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[  220.256989][ T5922] usb 5-1: USB disconnect, device number 10
[  220.287126][  T978] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  220.443136][  T978] usb 4-1: device descriptor read/64, error -71
[  220.583152][  T978] usb usb4-port1: attempt power cycle
[  220.652730][   T45] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  220.802905][   T45] usb 1-1: Using ep0 maxpacket: 32
[  220.815793][   T45] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  220.830941][   T45] usb 1-1: config 0 interface 0 has no altsetting 0
[  220.840451][   T45] usb 1-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00
[  220.850497][   T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.866781][   T45] usb 1-1: config 0 descriptor??
[  220.932705][  T978] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  220.954469][  T978] usb 4-1: device descriptor read/8, error -71
[  221.192679][  T978] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  221.223446][  T978] usb 4-1: device descriptor read/8, error -71
[  221.298392][   T45] cypress 0003:04B4:BCA1.0006: item fetching failed at offset 0/3
[  221.346966][   T45] cypress 0003:04B4:BCA1.0006: parse failed
[  221.366046][   T45] cypress 0003:04B4:BCA1.0006: probe with driver cypress failed with error -22
[  221.369746][  T978] usb usb4-port1: unable to enumerate USB device
[  221.483235][ T8412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  221.494158][ T8412] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  221.516897][  T978] usb 1-1: USB disconnect, device number 25
[  221.954353][ T8466] vivid-000: disconnect
[  221.981140][ T8465] vivid-000: reconnect
[  222.044354][ T5923] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  222.266261][ T5923] usb 2-1: Using ep0 maxpacket: 16
[  222.315488][ T5923] usb 2-1: config 0 has no interfaces?
[  222.325137][ T5923] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  222.346495][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.373085][ T5923] usb 2-1: config 0 descriptor??
[  222.475848][ T8480] fuse: Bad value for 'fd'
[  222.482915][ T5840] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  222.672879][ T5840] usb 5-1: Using ep0 maxpacket: 16
[  222.682283][ T5840] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  222.742775][ T5840] usb 5-1: config 0 has no interface number 0
[  222.749068][ T5840] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  222.766124][ T5840] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  222.780191][ T8492] FAULT_INJECTION: forcing a failure.
[  222.780191][ T8492] name failslab, interval 1, probability 0, space 0, times 0
[  222.823749][   T45] usb 2-1: USB disconnect, device number 22
[  222.826284][ T8492] CPU: 0 UID: 0 PID: 8492 Comm: syz.3.448 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) 
[  222.826312][ T8492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  222.826323][ T8492] Call Trace:
[  222.826330][ T8492]  <TASK>
[  222.826337][ T8492]  dump_stack_lvl+0x189/0x250
[  222.826371][ T8492]  ? __pfx____ratelimit+0x10/0x10
[  222.826398][ T8492]  ? __pfx_dump_stack_lvl+0x10/0x10
[  222.826425][ T8492]  ? __pfx__printk+0x10/0x10
[  222.826451][ T8492]  ? ref_tracker_alloc+0x318/0x460
[  222.826479][ T8492]  should_fail_ex+0x414/0x560
[  222.826507][ T8492]  should_failslab+0xa8/0x100
[  222.826528][ T8492]  kmem_cache_alloc_noprof+0x73/0x3c0
[  222.826555][ T8492]  ? skb_clone+0x212/0x3a0
[  222.826584][ T8492]  skb_clone+0x212/0x3a0
[  222.826611][ T8492]  __netlink_deliver_tap+0x404/0x850
[  222.826645][ T8492]  ? netlink_deliver_tap+0x2e/0x1b0
[  222.826667][ T8492]  netlink_deliver_tap+0x19c/0x1b0
[  222.826690][ T8492]  netlink_unicast+0x72f/0x8d0
[  222.826720][ T8492]  netlink_sendmsg+0x805/0xb30
[  222.826751][ T8492]  ? __pfx_netlink_sendmsg+0x10/0x10
[  222.826776][ T8492]  ? aa_sock_msg_perm+0x94/0x160
[  222.826801][ T8492]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  222.826823][ T8492]  ? __pfx_netlink_sendmsg+0x10/0x10
[  222.826845][ T8492]  __sock_sendmsg+0x21c/0x270
[  222.826875][ T8492]  ____sys_sendmsg+0x505/0x830
[  222.826903][ T8492]  ? __pfx_____sys_sendmsg+0x10/0x10
[  222.826936][ T8492]  ? import_iovec+0x74/0xa0
[  222.826958][ T8492]  ___sys_sendmsg+0x21f/0x2a0
[  222.826982][ T8492]  ? __pfx____sys_sendmsg+0x10/0x10
[  222.827050][ T8492]  ? __fget_files+0x2a/0x420
[  222.827069][ T8492]  ? __fget_files+0x3a0/0x420
[  222.827099][ T8492]  __x64_sys_sendmsg+0x19b/0x260
[  222.827124][ T8492]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  222.827157][ T8492]  ? __pfx_ksys_write+0x10/0x10
[  222.827181][ T8492]  ? do_syscall_64+0xbe/0x3b0
[  222.827202][ T8492]  do_syscall_64+0xfa/0x3b0
[  222.827217][ T8492]  ? lockdep_hardirqs_on+0x9c/0x150
[  222.827242][ T8492]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.827260][ T8492]  ? clear_bhb_loop+0x60/0xb0
[  222.827282][ T8492]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.827299][ T8492] RIP: 0033:0x7f4fac98e929
[  222.827316][ T8492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  222.827332][ T8492] RSP: 002b:00007f4fad7ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  222.827352][ T8492] RAX: ffffffffffffffda RBX: 00007f4facbb5fa0 RCX: 00007f4fac98e929
[  222.827365][ T8492] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000003
[  222.827377][ T8492] RBP: 00007f4fad7ed090 R08: 0000000000000000 R09: 0000000000000000
[  222.827387][ T8492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  222.827398][ T8492] R13: 0000000000000000 R14: 00007f4facbb5fa0 R15: 00007f4faccdfa28
[  222.827427][ T8492]  </TASK>
[  223.120534][ T5840] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  223.129745][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  223.137949][ T5840] usb 5-1: Product: syz
[  223.142198][ T5840] usb 5-1: SerialNumber: syz
[  223.274835][ T5840] usb 5-1: config 0 descriptor??
[  223.297412][ T5840] usbhid 5-1:0.8: couldn't find an input interrupt endpoint
[  223.354559][  T917] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  223.376961][ T8505] trusted_key: syz.3.450 sent an empty control message without MSG_MORE.
[  223.490056][ T8469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  223.524956][ T8469] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  223.546692][ T5840] usb 5-1: USB disconnect, device number 11
[  223.622896][  T917] usb 3-1: config 0 has no interfaces?
[  223.640284][  T917] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  223.651658][  T917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.662726][  T917] usb 3-1: Product: syz
[  223.667010][  T917] usb 3-1: Manufacturer: syz
[  223.671856][  T917] usb 3-1: SerialNumber: syz
[  223.697270][  T917] usb 3-1: config 0 descriptor??
[  224.768455][ T8531] hsr0: entered promiscuous mode
[  225.478226][   T24] usb 1-1: new full-speed USB device number 26 using dummy_hcd
[  225.658130][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  225.695322][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  225.782340][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  225.876992][   T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  225.989817][ T5923] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  226.050429][  T978] usb 3-1: USB disconnect, device number 25
[  226.149182][   T24] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  226.165022][   T24] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  226.166746][ T5923] usb 5-1: device descriptor read/64, error -71
[  226.208024][   T24] usb 1-1: Manufacturer: syz
[  226.257798][   T24] usb 1-1: config 0 descriptor??
[  226.482975][ T5923] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  226.654948][ T5923] usb 5-1: device descriptor read/64, error -71
[  226.823030][ T5923] usb usb5-port1: attempt power cycle
[  226.923311][   T24] rc_core: IR keymap rc-hauppauge not found
[  226.929395][   T24] Registered IR keymap rc-empty
[  226.940003][   T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  226.963083][   T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  226.996061][   T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  227.039306][   T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input16
[  227.082386][ T8584] sg_write: data in/out 524252/17 bytes for SCSI command 0x1-- guessing data in;
[  227.082386][ T8584]    program syz.0.455 not setting count and/or reply_len properly
[  227.333814][   T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  227.372970][   T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  227.402712][ T5923] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  227.433638][ T5923] usb 5-1: device descriptor read/8, error -71
[  227.463728][   T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  227.505076][   T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  227.572929][   T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  227.623868][   T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  227.692999][ T5923] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  227.696934][   T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  227.733099][   T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  227.773717][ T5923] usb 5-1: device descriptor read/8, error -71
[  227.801563][   T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  227.871459][   T24] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  227.895528][   T24] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  227.919830][ T5923] usb usb5-port1: unable to enumerate USB device
[  227.920980][   T24] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  227.953873][ T8602] netlink: 'syz.1.462': attribute type 1 has an invalid length.
[  227.992896][   T24] usb 1-1: USB disconnect, device number 26
[  228.171493][ T8666] netlink: 60 bytes leftover after parsing attributes in process `syz.1.462'.
[  228.173961][ T8602] 8021q: adding VLAN 0 to HW filter on device bond4
[  228.261651][ T8683] netlink: 28 bytes leftover after parsing attributes in process `syz.1.462'.
[  228.317569][ T8602] bond3: (slave bond4): making interface the new active one
[  228.344318][ T8602] bond3: (slave bond4): Enslaving as an active interface with an up link
[  228.371599][ T8683] 8021q: adding VLAN 0 to HW filter on device bond3
[  229.453020][  T917] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  229.651433][  T917] usb 1-1: Using ep0 maxpacket: 16
[  229.913598][ T8727] netlink: 60 bytes leftover after parsing attributes in process `syz.1.469'.
[  229.985744][ T8727] unsupported nlmsg_type 40
[  230.006418][  T917] usb 1-1: config 0 has no interfaces?
[  230.034214][  T917] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  230.079544][  T917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.156922][  T917] usb 1-1: config 0 descriptor??
[  230.512943][ T5923] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  230.626098][ T5918] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  230.653174][ T5923] usb 4-1: device descriptor read/64, error -71
[  230.806347][  T917] usb 1-1: USB disconnect, device number 27
[  230.808285][ T5918] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  231.292678][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  231.329088][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  231.349423][ T5918] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  231.374653][ T5918] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  231.385809][ T5918] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  231.401653][ T5918] usb 5-1: Manufacturer: syz
[  231.423959][ T5918] usb 5-1: config 0 descriptor??
[  231.745087][ T5923] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  231.904176][ T5923] usb 4-1: device descriptor read/64, error -71
[  232.053393][ T5923] usb usb4-port1: attempt power cycle
[  232.262690][ T5918] rc_core: IR keymap rc-hauppauge not found
[  232.277722][ T5918] Registered IR keymap rc-empty
[  232.313360][ T5918] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  232.353140][ T5918] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  232.412948][ T5918] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  232.463903][ T5923] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  232.513786][ T5923] usb 4-1: device descriptor read/8, error -71
[  232.553781][ T5918] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input18
[  232.589041][ T8782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  232.627392][ T8782] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  232.647947][ T5918] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  232.702786][ T5918] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  232.733774][ T5918] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  232.773162][ T5918] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  232.812527][ T5923] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  232.835904][ T5918] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  232.863015][ T5918] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  232.870929][ T5923] usb 4-1: device descriptor read/8, error -71
[  232.887008][ T5918] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  232.923142][ T5918] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  232.953122][ T5918] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  232.983081][ T5918] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  232.993194][ T5923] usb usb4-port1: unable to enumerate USB device
[  233.007421][ T5918] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  233.018527][ T5918] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  233.041065][ T5918] usb 5-1: USB disconnect, device number 16
[  233.793491][  T917] usb 4-1: new full-speed USB device number 35 using dummy_hcd
[  234.085493][  T917] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  234.106780][  T917] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  234.125733][  T917] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  234.238918][  T917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.262696][  T917] usb 4-1: Product: syz
[  234.267612][  T917] usb 4-1: Manufacturer: syz
[  234.277658][  T917] usb 4-1: SerialNumber: syz
[  234.295101][ T8829] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  234.510228][ T8829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  234.564642][ T8829] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  234.931568][ T8873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.489'.
[  235.415474][  T917] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42
[  235.422016][  T917] cdc_ncm 4-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048
[  235.531861][  T917] cdc_ncm 4-1:1.0: setting rx_max = 2048
[  235.616718][  T917] cdc_ncm 4-1:1.0: setting tx_max = 36
[  235.916266][  T917] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  235.943005][  T917] usb 4-1: USB disconnect, device number 35
[  235.952066][  T917] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP)
[  236.749367][ T5923] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  236.915184][ T5923] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  236.969333][ T5923] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  237.061184][ T5923] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  237.080716][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.138010][ T8952] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  237.163792][ T5923] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  237.696480][ T5923] usb 1-1: USB disconnect, device number 28
[  239.704199][ T9063] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  241.968441][ T9129] netlink: 132 bytes leftover after parsing attributes in process `syz.3.510'.
[  242.232721][ T5923] usb 4-1: new full-speed USB device number 36 using dummy_hcd
[  242.384309][ T5923] usb 4-1: device descriptor read/64, error -71
[  242.675054][ T5923] usb 4-1: new full-speed USB device number 37 using dummy_hcd
[  242.816062][ T5923] usb 4-1: device descriptor read/64, error -71
[  242.941060][ T5923] usb usb4-port1: attempt power cycle
[  243.682734][ T5923] usb 4-1: new full-speed USB device number 38 using dummy_hcd
[  243.723760][ T5923] usb 4-1: device descriptor read/8, error -71
[  243.992814][ T5923] usb 4-1: new full-speed USB device number 39 using dummy_hcd
[  244.084638][ T5923] usb 4-1: device descriptor read/8, error -71
[  244.204943][ T5923] usb usb4-port1: unable to enumerate USB device
[  244.368168][ T9171] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  245.046805][ T9199] netlink: 'syz.0.518': attribute type 39 has an invalid length.
[  245.076584][ T9201] mmap: syz.4.520 (9201) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  245.123343][ T5923] usb 4-1: new full-speed USB device number 40 using dummy_hcd
[  245.136981][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.520'.
[  245.267921][   T30] audit: type=1400 audit(1749977253.674:14): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0CFFC58A8EB68C83C019485D pid=9203 comm="syz.2.521"
[  245.302985][ T5923] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  245.316352][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  245.329937][ T5923] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  245.340263][ T5923] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  245.356321][ T5923] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  245.370189][ T5923] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  245.382727][ T5923] usb 4-1: Manufacturer: syz
[  245.390638][ T5923] usb 4-1: config 0 descriptor??
[  245.620866][ T9225] input: syz0 as /devices/virtual/input/input19
[  245.913243][ T5923] rc_core: IR keymap rc-hauppauge not found
[  245.939599][ T5923] Registered IR keymap rc-empty
[  245.993243][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  246.060554][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  246.129059][ T5923] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  246.158573][ T9251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  246.183279][ T9251] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  246.221311][ T5923] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input20
[  246.328653][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  246.393593][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  246.432732][   T45] usb 3-1: new full-speed USB device number 26 using dummy_hcd
[  246.455157][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  246.507036][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  246.619861][ T9276] netlink: 16 bytes leftover after parsing attributes in process `syz.4.530'.
[  246.639981][   T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  246.656515][   T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  246.666147][   T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.671258][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  246.689531][   T45] usb 3-1: Product: syz
[  246.701149][   T45] usb 3-1: Manufacturer: syz
[  246.718751][   T45] usb 3-1: SerialNumber: syz
[  246.745704][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  246.783896][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  246.817015][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  246.859414][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  246.891064][ T5923] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  247.068795][ T5923] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  247.132140][ T5923] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  247.460464][ T5923] usb 4-1: USB disconnect, device number 40
[  247.590679][ T9296] netlink: 132 bytes leftover after parsing attributes in process `syz.3.531'.
[  247.670808][   T45] cdc_ncm 3-1:1.0: SET_CRC_MODE failed
[  247.695642][   T45] cdc_ncm 3-1:1.0: bind() failure
[  247.727788][   T45] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  247.878809][ T9314] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  247.881350][   T45] cdc_ncm 3-1:1.1: bind() failure
[  247.941176][   T45] usb 3-1: USB disconnect, device number 26
[  248.015302][ T5923] usb 4-1: new full-speed USB device number 41 using dummy_hcd
[  248.226575][ T5923] usb 4-1: device descriptor read/64, error -71
[  248.512699][ T5923] usb 4-1: new full-speed USB device number 42 using dummy_hcd
[  248.672674][ T5923] usb 4-1: device descriptor read/64, error -71
[  248.818433][ T5923] usb usb4-port1: attempt power cycle
[  248.897760][ T9338] FAULT_INJECTION: forcing a failure.
[  248.897760][ T9338] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  248.951115][ T9338] CPU: 0 UID: 0 PID: 9338 Comm: syz.1.536 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) 
[  248.951153][ T9338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  248.951166][ T9338] Call Trace:
[  248.951175][ T9338]  <TASK>
[  248.951183][ T9338]  dump_stack_lvl+0x189/0x250
[  248.951220][ T9338]  ? __pfx____ratelimit+0x10/0x10
[  248.951252][ T9338]  ? __pfx_dump_stack_lvl+0x10/0x10
[  248.951284][ T9338]  ? __pfx__printk+0x10/0x10
[  248.951309][ T9338]  ? fs_reclaim_acquire+0x7d/0x100
[  248.951344][ T9338]  should_fail_ex+0x414/0x560
[  248.951376][ T9338]  prepare_alloc_pages+0x213/0x610
[  248.951411][ T9338]  __alloc_frozen_pages_noprof+0x123/0x370
[  248.951442][ T9338]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  248.951473][ T9338]  ? __lock_acquire+0xab9/0xd20
[  248.951514][ T9338]  alloc_pages_mpol+0x232/0x4a0
[  248.951543][ T9338]  alloc_pages_noprof+0xa9/0x190
[  248.951567][ T9338]  pte_alloc_one+0x21/0x170
[  248.951599][ T9338]  __pte_alloc+0x25/0x1a0
[  248.951628][ T9338]  __handle_mm_fault+0x4b8a/0x5620
[  248.951682][ T9338]  ? __pfx___handle_mm_fault+0x10/0x10
[  248.951737][ T9338]  ? find_vma+0xe7/0x160
[  248.951756][ T9338]  ? __pfx_find_vma+0x10/0x10
[  248.951778][ T9338]  handle_mm_fault+0x40a/0x8e0
[  248.951817][ T9338]  do_user_addr_fault+0x764/0x1390
[  248.951865][ T9338]  exc_page_fault+0x76/0xf0
[  248.951895][ T9338]  asm_exc_page_fault+0x26/0x30
[  248.951913][ T9338] RIP: 0010:rep_movs_alternative+0x30/0x90
[  248.951937][ T9338] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 3d f7 03 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08
[  248.951953][ T9338] RSP: 0018:ffffc9001c687a18 EFLAGS: 00050206
[  248.951971][ T9338] RAX: 00007ffffffff001 RBX: 0000000000000038 RCX: 0000000000000038
[  248.951985][ T9338] RDX: 0000000000000001 RSI: 00002000000066c0 RDI: ffffc9001c687aa0
[  248.951997][ T9338] RBP: ffffc9001c687c30 R08: ffffc9001c687ad7 R09: 1ffff920038d0f5a
[  248.952010][ T9338] R10: dffffc0000000000 R11: fffff520038d0f5b R12: 0000000000000000
[  248.952023][ T9338] R13: dffffc0000000000 R14: ffffc9001c687aa0 R15: 00002000000066c0
[  248.952057][ T9338]  _copy_from_user+0x7a/0xb0
[  248.952079][ T9338]  ___sys_recvmsg+0x12e/0x510
[  248.952113][ T9338]  ? __pfx____sys_recvmsg+0x10/0x10
[  248.952165][ T9338]  ? __fget_files+0x3a0/0x420
[  248.952200][ T9338]  do_recvmmsg+0x307/0x770
[  248.952236][ T9338]  ? __pfx_do_recvmmsg+0x10/0x10
[  248.952277][ T9338]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  248.952318][ T9338]  __x64_sys_recvmmsg+0x190/0x240
[  248.952348][ T9338]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  248.952373][ T9338]  ? rcu_is_watching+0x15/0xb0
[  248.952407][ T9338]  ? do_syscall_64+0xbe/0x3b0
[  248.952429][ T9338]  do_syscall_64+0xfa/0x3b0
[  248.952446][ T9338]  ? lockdep_hardirqs_on+0x9c/0x150
[  248.952474][ T9338]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.952494][ T9338]  ? clear_bhb_loop+0x60/0xb0
[  248.952520][ T9338]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.952539][ T9338] RIP: 0033:0x7fd1bf98e929
[  248.952561][ T9338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  248.952576][ T9338] RSP: 002b:00007fd1c0896038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  248.952597][ T9338] RAX: ffffffffffffffda RBX: 00007fd1bfbb5fa0 RCX: 00007fd1bf98e929
[  248.952610][ T9338] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000003
[  248.952622][ T9338] RBP: 00007fd1c0896090 R08: 0000000000000000 R09: 0000000000000000
[  248.952633][ T9338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  248.952645][ T9338] R13: 0000000000000000 R14: 00007fd1bfbb5fa0 R15: 00007fd1bfcdfa28
[  248.952677][ T9338]  </TASK>
[  249.763073][ T5923] usb 4-1: new full-speed USB device number 43 using dummy_hcd
[  249.842761][ T5923] usb 4-1: device descriptor read/8, error -71
[  250.102778][ T5923] usb 4-1: new full-speed USB device number 44 using dummy_hcd
[  250.173601][ T5923] usb 4-1: device descriptor read/8, error -71
[  250.286849][ T5923] usb usb4-port1: unable to enumerate USB device
[  250.713633][  T917] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  250.775452][ T5923] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[  250.892788][  T917] usb 1-1: device descriptor read/64, error -71
[  250.938797][ T5923] usb 4-1: device descriptor read/64, error -71
[  251.174838][  T917] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  251.198213][ T5923] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[  251.346868][ T5923] usb 4-1: device descriptor read/64, error -71
[  251.373276][  T917] usb 1-1: device descriptor read/64, error -71
[  251.463168][ T5923] usb usb4-port1: attempt power cycle
[  251.493348][  T917] usb usb1-port1: attempt power cycle
[  251.840584][ T5923] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  251.892710][  T917] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  251.911506][ T5923] usb 4-1: device descriptor read/8, error -71
[  251.924655][  T917] usb 1-1: device descriptor read/8, error -71
[  252.162772][  T917] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  252.196511][ T5923] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  252.220464][  T917] usb 1-1: device descriptor read/8, error -71
[  252.236128][ T5923] usb 4-1: device descriptor read/8, error -71
[  252.343285][ T5923] usb usb4-port1: unable to enumerate USB device
[  252.370582][  T917] usb usb1-port1: unable to enumerate USB device
[  252.953304][ T9465] netlink: 'syz.4.550': attribute type 1 has an invalid length.
[  253.098769][ T9465] netlink: 60 bytes leftover after parsing attributes in process `syz.4.550'.
[  253.152890][ T5840] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  253.181290][ T9524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.550'.
[  253.224200][ T9487] 8021q: adding VLAN 0 to HW filter on device bond4
[  253.233708][ T9487] bond3: (slave bond4): making interface the new active one
[  253.241621][ T9487] bond3: (slave bond4): Enslaving as an active interface with an up link
[  253.253834][ T9524] 8021q: adding VLAN 0 to HW filter on device bond3
[  253.330434][ T9531] netlink: 132 bytes leftover after parsing attributes in process `syz.1.551'.
[  253.383225][ T5840] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  253.436854][ T5840] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  253.465277][ T5840] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  253.482665][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  253.495391][ T5840] usb 3-1: SerialNumber: syz
[  253.602991][ T5923] usb 2-1: new full-speed USB device number 23 using dummy_hcd
[  253.764987][ T5923] usb 2-1: device descriptor read/64, error -71
[  253.765235][ T5840] usb 3-1: 0:2 : does not exist
[  253.809369][ T5840] usb 3-1: unit 5: unexpected type 0x0a
[  253.901077][ T9571] input: syz0 as /devices/virtual/input/input21
[  253.969858][ T5840] usb 3-1: USB disconnect, device number 27
[  254.024871][ T5923] usb 2-1: new full-speed USB device number 24 using dummy_hcd
[  254.116542][ T5957] udevd[5957]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  254.192984][ T5923] usb 2-1: device descriptor read/64, error -71
[  254.217301][ T9598] netlink: 236 bytes leftover after parsing attributes in process `syz.3.558'.
[  254.314021][ T5923] usb usb2-port1: attempt power cycle
[  254.584682][    T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  254.682778][ T5923] usb 2-1: new full-speed USB device number 25 using dummy_hcd
[  254.724328][ T5923] usb 2-1: device descriptor read/8, error -71
[  254.782930][    T9] usb 5-1: Using ep0 maxpacket: 8
[  254.814355][    T9] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  254.845112][    T9] usb 5-1: config 179 has no interface number 0
[  254.853941][ T5840] usb 3-1: new full-speed USB device number 28 using dummy_hcd
[  254.871180][    T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  254.888897][    T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  254.919044][    T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10
[  254.947379][    T9] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024
[  254.988815][    T9] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  254.995597][ T9625] FAULT_INJECTION: forcing a failure.
[  254.995597][ T9625] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  255.002361][ T5923] usb 2-1: new full-speed USB device number 26 using dummy_hcd
[  255.024180][ T9625] CPU: 1 UID: 0 PID: 9625 Comm: syz.0.562 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) 
[  255.024208][ T9625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  255.024219][ T9625] Call Trace:
[  255.024228][ T9625]  <TASK>
[  255.024236][ T9625]  dump_stack_lvl+0x189/0x250
[  255.024270][ T9625]  ? __pfx____ratelimit+0x10/0x10
[  255.024301][ T9625]  ? __pfx_dump_stack_lvl+0x10/0x10
[  255.024332][ T9625]  ? __pfx__printk+0x10/0x10
[  255.024368][ T9625]  should_fail_ex+0x414/0x560
[  255.024400][ T9625]  _copy_to_user+0x31/0xb0
[  255.024424][ T9625]  simple_read_from_buffer+0xe1/0x170
[  255.024453][ T9625]  proc_fail_nth_read+0x1df/0x250
[  255.024481][ T9625]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  255.024508][ T9625]  ? rw_verify_area+0x258/0x650
[  255.024537][ T9625]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  255.024563][ T9625]  vfs_read+0x200/0x980
[  255.024600][ T9625]  ? __pfx___mutex_lock+0x10/0x10
[  255.024620][ T9625]  ? __pfx_vfs_read+0x10/0x10
[  255.024652][ T9625]  ? __fget_files+0x2a/0x420
[  255.024680][ T9625]  ? __fget_files+0x3a0/0x420
[  255.024700][ T9625]  ? __fget_files+0x2a/0x420
[  255.024741][ T9625]  ksys_read+0x145/0x250
[  255.024764][ T9625]  ? __pfx_ksys_read+0x10/0x10
[  255.024780][ T9625]  ? rcu_is_watching+0x15/0xb0
[  255.024817][ T9625]  ? do_syscall_64+0xbe/0x3b0
[  255.024840][ T9625]  do_syscall_64+0xfa/0x3b0
[  255.024858][ T9625]  ? lockdep_hardirqs_on+0x9c/0x150
[  255.024888][ T9625]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.024907][ T9625]  ? clear_bhb_loop+0x60/0xb0
[  255.024932][ T9625]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.024951][ T9625] RIP: 0033:0x7f0643f8d33c
[  255.024970][ T9625] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  255.024988][ T9625] RSP: 002b:00007f0644d25030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  255.025010][ T9625] RAX: ffffffffffffffda RBX: 00007f06441b5fa0 RCX: 00007f0643f8d33c
[  255.025024][ T9625] RDX: 000000000000000f RSI: 00007f0644d250a0 RDI: 0000000000000004
[  255.025037][ T9625] RBP: 00007f0644d25090 R08: 0000000000000000 R09: 0000000000000000
[  255.025049][ T9625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  255.025061][ T9625] R13: 0000000000000000 R14: 00007f06441b5fa0 R15: 00007f06442dfa28
[  255.025094][ T9625]  </TASK>
[  255.271134][    T9] usb 5-1: config 179 interface 65 has no altsetting 0
[  255.285505][ T5840] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  255.295955][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  255.305127][    T9] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  255.307042][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  255.325828][ T5840] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  255.327321][ T5923] usb 2-1: device descriptor read/8, error -71
[  255.496424][ T5840] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  255.510341][ T5840] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  255.530045][ T5840] usb 3-1: Manufacturer: syz
[  255.558573][ T5840] usb 3-1: config 0 descriptor??
[  255.591232][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.676425][    T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input22
[  255.726261][ T5923] usb usb2-port1: unable to enumerate USB device
[  255.803015][ T5191] input input22: unable to receive magic message: -110
[  255.880261][ T9600] syz_tun: entered allmulticast mode
[  255.894925][ T9600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.557'.
[  255.903925][  T978] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  255.921935][ T9600] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  255.929603][ T9600] IPv6: NLM_F_CREATE should be set when creating new route
[  255.943176][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[  255.950111][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  255.974835][ T9597] syz_tun: left allmulticast mode
[  255.996237][ T5191] input input22: unable to receive magic message: -32
[  256.035446][ T5840] rc_core: IR keymap rc-hauppauge not found
[  256.067512][ T5840] Registered IR keymap rc-empty
[  256.097776][ T5191] input input22: unable to receive magic message: -32
[  256.110371][ T5840] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  256.118613][  T978] usb 4-1: no configurations
[  256.136521][ T5191] input input22: unable to receive magic message: -71
[  256.163052][  T978] usb 4-1: can't read configurations, error -22
[  256.166560][ T5840] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  256.201991][    C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  256.211127][ T5923] usb 5-1: USB disconnect, device number 17
[  256.217102][    C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending?
[  256.227559][ T5840] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  256.252077][ T5923] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  256.322842][    T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  256.333032][ T9665] netlink: 376 bytes leftover after parsing attributes in process `syz.2.560'.
[  256.362864][  T978] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  256.367519][ T5840] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input23
[  256.431127][ T5840] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  256.466730][ T5840] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  256.505382][    T9] usb 1-1: Using ep0 maxpacket: 8
[  256.524168][  T978] usb 4-1: no configurations
[  256.529429][  T978] usb 4-1: can't read configurations, error -22
[  256.533970][ T5840] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  256.543018][    T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  256.543054][    T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  256.543080][    T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  256.575684][  T978] usb usb4-port1: attempt power cycle
[  256.578937][ T5840] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  256.582189][    T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  256.602062][    T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  256.611247][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.624318][ T5840] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  256.643125][ T5840] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  256.668168][ T5840] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  256.693643][ T5840] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  256.723101][ T5840] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  256.743570][ T5840] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  256.774738][ T5840] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  256.784350][ T5840] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  256.810895][ T5840] usb 3-1: USB disconnect, device number 28
[  256.840554][    T9] usb 1-1: usb_control_msg returned -32
[  256.862396][    T9] usbtmc 1-1:16.0: can't read capabilities
[  256.912782][  T978] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  256.959520][  T978] usb 4-1: no configurations
[  256.973338][  T978] usb 4-1: can't read configurations, error -22
[  257.142932][  T978] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  257.196492][  T978] usb 4-1: no configurations
[  257.201170][  T978] usb 4-1: can't read configurations, error -22
[  257.225951][  T978] usb usb4-port1: unable to enumerate USB device
[  257.432706][ T5840] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  257.672708][ T5840] usb 5-1: Using ep0 maxpacket: 16
[  257.724022][ T5840] usb 5-1: config 0 has no interfaces?
[  257.729782][ T5840] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  257.749713][ T5840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.783076][   T45] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  257.794054][ T5840] usb 5-1: config 0 descriptor??
[  257.986864][   T45] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  258.000426][   T45] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  258.021542][   T45] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  258.068062][   T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.324482][ T5923] usb 5-1: USB disconnect, device number 18
[  258.751385][ T9755] FAULT_INJECTION: forcing a failure.
[  258.751385][ T9755] name failslab, interval 1, probability 0, space 0, times 0
[  258.770729][ T9755] CPU: 0 UID: 0 PID: 9755 Comm: syz.3.574 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) 
[  258.770755][ T9755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  258.770763][ T9755] Call Trace:
[  258.770769][ T9755]  <TASK>
[  258.770775][ T9755]  dump_stack_lvl+0x189/0x250
[  258.770800][ T9755]  ? __pfx____ratelimit+0x10/0x10
[  258.770819][ T9755]  ? __pfx_dump_stack_lvl+0x10/0x10
[  258.770839][ T9755]  ? __pfx__printk+0x10/0x10
[  258.770854][ T9755]  ? __pfx___might_resched+0x10/0x10
[  258.770873][ T9755]  ? fs_reclaim_acquire+0x7d/0x100
[  258.770890][ T9755]  should_fail_ex+0x414/0x560
[  258.770910][ T9755]  should_failslab+0xa8/0x100
[  258.770924][ T9755]  __kmalloc_noprof+0xcb/0x4f0
[  258.770936][ T9755]  ? tomoyo_encode+0x28b/0x550
[  258.770956][ T9755]  tomoyo_encode+0x28b/0x550
[  258.770977][ T9755]  tomoyo_realpath_from_path+0x58d/0x5d0
[  258.770996][ T9755]  ? tomoyo_domain+0xd9/0x130
[  258.771018][ T9755]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  258.771037][ T9755]  tomoyo_path_number_perm+0x1e8/0x5a0
[  258.771053][ T9755]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  258.771078][ T9755]  ? __lock_acquire+0xab9/0xd20
[  258.771108][ T9755]  ? __fget_files+0x2a/0x420
[  258.771128][ T9755]  ? __fget_files+0x2a/0x420
[  258.771140][ T9755]  ? __fget_files+0x3a0/0x420
[  258.771153][ T9755]  ? __fget_files+0x2a/0x420
[  258.771169][ T9755]  security_file_ioctl+0xcb/0x2d0
[  258.771184][ T9755]  __se_sys_ioctl+0x47/0x170
[  258.771204][ T9755]  do_syscall_64+0xfa/0x3b0
[  258.771215][ T9755]  ? lockdep_hardirqs_on+0x9c/0x150
[  258.771233][ T9755]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.771245][ T9755]  ? clear_bhb_loop+0x60/0xb0
[  258.771259][ T9755]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  258.771271][ T9755] RIP: 0033:0x7f4fac98e929
[  258.771283][ T9755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  258.771294][ T9755] RSP: 002b:00007f4fad7ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  258.771308][ T9755] RAX: ffffffffffffffda RBX: 00007f4facbb5fa0 RCX: 00007f4fac98e929
[  258.771317][ T9755] RDX: 00002000000000c0 RSI: 00000000000089f3 RDI: 0000000000000003
[  258.771325][ T9755] RBP: 00007f4fad7ed090 R08: 0000000000000000 R09: 0000000000000000
[  258.771332][ T9755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  258.771339][ T9755] R13: 0000000000000000 R14: 00007f4facbb5fa0 R15: 00007f4faccdfa28
[  258.771358][ T9755]  </TASK>
[  258.771554][ T9755] ERROR: Out of memory at tomoyo_realpath_from_path.
[  259.183224][  T978] usb 1-1: USB disconnect, device number 33
[  259.673444][  T978] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  259.842665][  T978] usb 1-1: Using ep0 maxpacket: 16
[  259.861413][  T978] usb 1-1: too many configurations: 98, using maximum allowed: 8
[  259.890337][  T978] usb 1-1: config 6 has no interfaces?
[  259.897846][  T978] usb 1-1: config 6 has no interfaces?
[  259.907396][  T978] usb 1-1: config 6 has no interfaces?
[  259.921245][  T978] usb 1-1: config 6 has no interfaces?
[  259.929457][  T978] usb 1-1: config 6 has no interfaces?
[  259.939179][  T978] usb 1-1: config 6 has no interfaces?
[  259.954718][  T978] usb 1-1: config 6 has no interfaces?
[  259.963382][  T978] usb 1-1: config 6 has no interfaces?
[  259.972825][ T9770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  259.983613][ T9770] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  260.000205][  T978] usb 1-1: string descriptor 0 read error: -71
[  260.009798][  T978] usb 1-1: New USB device found, idVendor=09c0, idProduct=0200, bcdDevice=58.3c
[  260.019127][  T978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=154
[  260.151202][  T978] usb 1-1: rejected 8 configurations due to insufficient available bus power
[  260.181559][  T978] usb 1-1: no configuration chosen from 8 choices
[  260.201018][  T978] usb 1-1: USB disconnect, device number 34
[  260.386840][ T9793] netlink: 'syz.1.580': attribute type 1 has an invalid length.
[  260.495121][ T9793] netlink: 60 bytes leftover after parsing attributes in process `syz.1.580'.
[  260.655495][   T30] audit: type=1326 audit(1749977269.064:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9832 comm="syz.4.581" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd076d8e929 code=0x0
[  260.671102][ T9872] netlink: 28 bytes leftover after parsing attributes in process `syz.1.580'.
[  260.735607][ T9824] 8021q: adding VLAN 0 to HW filter on device bond6
[  260.783350][ T9824] bond5: (slave bond6): making interface the new active one
[  260.836446][ T9824] bond5: (slave bond6): Enslaving as an active interface with an up link
[  261.026375][ T9872] 8021q: adding VLAN 0 to HW filter on device bond5
[  261.069958][ T9879] syzkaller1: tun_chr_ioctl cmd 35111
[  261.141370][  T917] usb 3-1: USB disconnect, device number 29
[  261.149565][ T9725] delete_channel: no stack
[  261.563146][  T978] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  261.635655][ T9919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.586'.
[  261.783518][  T978] usb 2-1: no configurations
[  261.788197][  T978] usb 2-1: can't read configurations, error -22
[  261.923298][  T978] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  262.108498][  T978] usb 2-1: no configurations
[  262.116402][  T978] usb 2-1: can't read configurations, error -22
[  262.142231][  T978] usb usb2-port1: attempt power cycle
[  262.162207][ T9919] team0 (unregistering): Port device team_slave_0 removed
[  262.186201][ T9919] team0 (unregistering): Failed to send options change via netlink (err -105)
[  262.222541][ T9919] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105)
[  262.240985][ T9935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.590'.
[  262.251751][ T9935] netlink: 16 bytes leftover after parsing attributes in process `syz.4.590'.
[  262.272157][ T9919] team0 (unregistering): Port device team_slave_1 removed
[  262.386290][ T9935] team0: entered promiscuous mode
[  262.391529][ T9935] team_slave_0: entered promiscuous mode
[  262.399527][ T9935] team_slave_1: entered promiscuous mode
[  262.408527][ T9935] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  262.553043][  T978] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  262.593691][  T978] usb 2-1: no configurations
[  262.611853][  T978] usb 2-1: can't read configurations, error -22
[  262.767669][  T978] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  262.806081][  T978] usb 2-1: no configurations
[  262.810754][  T978] usb 2-1: can't read configurations, error -22
[  262.874134][  T978] usb usb2-port1: unable to enumerate USB device
[  263.091871][ T9990] netlink: 'syz.2.595': attribute type 1 has an invalid length.
[  263.213750][ T9990] netlink: 60 bytes leftover after parsing attributes in process `syz.2.595'.
[  263.268166][T10060] netlink: 28 bytes leftover after parsing attributes in process `syz.2.595'.
[  263.289884][ T9995] 8021q: adding VLAN 0 to HW filter on device bond2
[  263.302108][ T9995] bond1: (slave bond2): making interface the new active one
[  263.317494][ T9995] bond1: (slave bond2): Enslaving as an active interface with an up link
[  263.351849][T10060] 8021q: adding VLAN 0 to HW filter on device bond1
[  263.723174][ T5840] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  263.892728][ T5840] usb 1-1: Using ep0 maxpacket: 32
[  263.900681][ T5840] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[  263.914258][ T5840] usb 1-1: config 0 has no interface number 0
[  263.921506][ T5840] usb 1-1: config 0 interface 12 has no altsetting 0
[  263.934285][ T5840] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  263.960767][ T5840] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.969446][ T5840] usb 1-1: Product: syz
[  263.977251][ T5840] usb 1-1: Manufacturer: syz
[  263.983156][ T5840] usb 1-1: SerialNumber: syz
[  264.048079][ T5840] usb 1-1: config 0 descriptor??
[  264.093468][T10092] xt_NFQUEUE: number of total queues is 0
[  264.485017][T10101] netlink: 132 bytes leftover after parsing attributes in process `syz.3.604'.
[  264.753063][   T24] usb 4-1: new full-speed USB device number 53 using dummy_hcd
[  264.895999][   T24] usb 4-1: device descriptor read/64, error -71
[  265.073816][    T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  265.137719][   T24] usb 4-1: new full-speed USB device number 54 using dummy_hcd
[  265.235945][T10119] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  265.243282][T10119] IPv6: NLM_F_CREATE should be set when creating new route
[  265.250613][T10119] FAULT_INJECTION: forcing a failure.
[  265.250613][T10119] name failslab, interval 1, probability 0, space 0, times 0
[  265.263292][T10119] CPU: 0 UID: 0 PID: 10119 Comm: syz.2.608 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) 
[  265.263315][T10119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  265.263323][T10119] Call Trace:
[  265.263328][T10119]  <TASK>
[  265.263334][T10119]  dump_stack_lvl+0x189/0x250
[  265.263358][T10119]  ? __pfx____ratelimit+0x10/0x10
[  265.263384][T10119]  ? __pfx_dump_stack_lvl+0x10/0x10
[  265.263412][T10119]  ? __pfx__printk+0x10/0x10
[  265.263439][T10119]  ? __memcg_slab_post_alloc_hook+0x522/0x7f0
[  265.263473][T10119]  should_fail_ex+0x414/0x560
[  265.263492][T10119]  should_failslab+0xa8/0x100
[  265.263506][T10119]  kmem_cache_alloc_noprof+0x73/0x3c0
[  265.263530][T10119]  ? fib6_add_1+0xa3a/0x1460
[  265.263557][T10119]  fib6_add_1+0xa3a/0x1460
[  265.263591][T10119]  fib6_add+0x204/0x18a0
[  265.263622][T10119]  ? do_raw_spin_lock+0x121/0x290
[  265.263637][T10119]  ? __pfx_fib6_add+0x10/0x10
[  265.263661][T10119]  ? ip6_route_add+0xc9/0x1b0
[  265.263680][T10119]  ip6_route_add+0xde/0x1b0
[  265.263707][T10119]  inet6_rtm_newroute+0x1cf/0x18c0
[  265.263733][T10119]  ? nlmon_xmit+0xb0/0x100
[  265.263756][T10119]  ? kmem_cache_free+0x18f/0x400
[  265.263777][T10119]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[  265.263790][T10119]  ? __local_bh_enable_ip+0x12d/0x1c0
[  265.263809][T10119]  ? lockdep_hardirqs_on+0x9c/0x150
[  265.263828][T10119]  ? __local_bh_enable_ip+0x12d/0x1c0
[  265.263853][T10119]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  265.263884][T10119]  ? __dev_queue_xmit+0x27e/0x3a70
[  265.263940][T10119]  ? __pfx_inet6_rtm_newroute+0x10/0x10
[  265.263952][T10119]  rtnetlink_rcv_msg+0x7cf/0xb70
[  265.263967][T10119]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  265.263979][T10119]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  265.263992][T10119]  ? ref_tracker_free+0x63a/0x7d0
[  265.264015][T10119]  ? __copy_skb_header+0xa7/0x550
[  265.264041][T10119]  ? __pfx_ref_tracker_free+0x10/0x10
[  265.264065][T10119]  ? __skb_clone+0x63/0x7a0
[  265.264090][T10119]  netlink_rcv_skb+0x205/0x470
[  265.264105][T10119]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  265.264118][T10119]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  265.264138][T10119]  ? netlink_deliver_tap+0x2e/0x1b0
[  265.264159][T10119]  ? netlink_deliver_tap+0x2e/0x1b0
[  265.264187][T10119]  netlink_unicast+0x758/0x8d0
[  265.264216][T10119]  netlink_sendmsg+0x805/0xb30
[  265.264244][T10119]  ? __pfx_netlink_sendmsg+0x10/0x10
[  265.264260][T10119]  ? aa_sock_msg_perm+0x94/0x160
[  265.264277][T10119]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  265.264292][T10119]  ? __pfx_netlink_sendmsg+0x10/0x10
[  265.264314][T10119]  __sock_sendmsg+0x21c/0x270
[  265.264346][T10119]  ____sys_sendmsg+0x505/0x830
[  265.264375][T10119]  ? __pfx_____sys_sendmsg+0x10/0x10
[  265.264400][T10119]  ? import_iovec+0x74/0xa0
[  265.264417][T10119]  ___sys_sendmsg+0x21f/0x2a0
[  265.264434][T10119]  ? __pfx____sys_sendmsg+0x10/0x10
[  265.264485][T10119]  ? __fget_files+0x2a/0x420
[  265.264505][T10119]  ? __fget_files+0x3a0/0x420
[  265.264535][T10119]  __x64_sys_sendmsg+0x19b/0x260
[  265.264556][T10119]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  265.264577][T10119]  ? __pfx_ksys_write+0x10/0x10
[  265.264586][T10119]  ? rcu_is_watching+0x15/0xb0
[  265.264611][T10119]  ? do_syscall_64+0xbe/0x3b0
[  265.264632][T10119]  do_syscall_64+0xfa/0x3b0
[  265.264649][T10119]  ? lockdep_hardirqs_on+0x9c/0x150
[  265.264683][T10119]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.264700][T10119]  ? clear_bhb_loop+0x60/0xb0
[  265.264717][T10119]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  265.264728][T10119] RIP: 0033:0x7f0c9d18e929
[  265.264740][T10119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  265.264751][T10119] RSP: 002b:00007f0c9dfe9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  265.264767][T10119] RAX: ffffffffffffffda RBX: 00007f0c9d3b5fa0 RCX: 00007f0c9d18e929
[  265.264780][T10119] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  265.264793][T10119] RBP: 00007f0c9dfe9090 R08: 0000000000000000 R09: 0000000000000000
[  265.264805][T10119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  265.264816][T10119] R13: 0000000000000000 R14: 00007f0c9d3b5fa0 R15: 00007f0c9d4dfa28
[  265.264844][T10119]  </TASK>
[  265.268944][    T9] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  265.273062][   T24] usb 4-1: device descriptor read/64, error -71
[  265.286621][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.788643][    T9] usb 2-1: config 0 descriptor??
[  265.884860][T10125] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  265.903461][   T24] usb usb4-port1: attempt power cycle
[  266.322778][   T24] usb 4-1: new full-speed USB device number 55 using dummy_hcd
[  266.347169][   T24] usb 4-1: device descriptor read/8, error -71
[  266.357515][ T5840] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  266.365923][ T5840] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71
[  266.376838][ T5840] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  266.399054][ T5840] f81534 1-1:0.12: probe with driver f81534 failed with error -71
[  266.424396][ T5840] usb 1-1: USB disconnect, device number 35
[  266.592727][   T24] usb 4-1: new full-speed USB device number 56 using dummy_hcd
[  266.623495][   T24] usb 4-1: device descriptor read/8, error -71
[  266.732991][   T24] usb usb4-port1: unable to enumerate USB device
[  266.936462][   T30] audit: type=1400 audit(1749977275.314:16): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=10109 comm="syz.1.606"
[  267.683132][    T9] pegasus 2-1:0.0: probe with driver pegasus failed with error -110
[  267.949397][ T5840] usb 2-1: USB disconnect, device number 31
[  268.376087][ T5922] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  268.542418][ T5922] usb 2-1: no configurations
[  268.549808][ T5922] usb 2-1: can't read configurations, error -22
[  268.712944][ T5922] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  268.913904][ T5922] usb 2-1: no configurations
[  268.922175][ T5922] usb 2-1: can't read configurations, error -22
[  268.963895][ T5922] usb usb2-port1: attempt power cycle
[  269.034111][T10183] netlink: 'syz.2.618': attribute type 1 has an invalid length.
[  269.196936][T10244] netlink: 60 bytes leftover after parsing attributes in process `syz.2.618'.
[  269.227931][T10183] 8021q: adding VLAN 0 to HW filter on device bond4
[  269.246131][T10183] bond3: (slave bond4): making interface the new active one
[  269.263813][T10183] bond3: (slave bond4): Enslaving as an active interface with an up link
[  269.350172][T10183] netlink: 28 bytes leftover after parsing attributes in process `syz.2.618'.
[  269.359478][ T5922] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  269.370041][T10183] 8021q: adding VLAN 0 to HW filter on device bond3
[  269.384318][ T5922] usb 2-1: no configurations
[  269.389014][ T5922] usb 2-1: can't read configurations, error -22
[  269.512254][T10255] tipc: Can't bind to reserved service type 2
[  269.534500][ T5922] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  269.564645][ T5922] usb 2-1: no configurations
[  269.569431][ T5922] usb 2-1: can't read configurations, error -22
[  269.577164][ T5922] usb usb2-port1: unable to enumerate USB device
[  270.073037][ T5922] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  270.232827][ T5922] usb 1-1: Using ep0 maxpacket: 32
[  270.245911][ T5922] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  270.257435][ T5922] usb 1-1: config 0 has no interface number 0
[  270.266704][ T5922] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  270.278465][ T5922] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  270.288810][ T5922] usb 1-1: Product: syz
[  270.432256][ T5922] usb 1-1: Manufacturer: syz
[  270.441266][ T5922] usb 1-1: SerialNumber: syz
[  270.460331][ T5922] usb 1-1: config 0 descriptor??
[  270.480437][ T5922] smsc95xx v2.0.0
[  270.691903][ T5922] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  270.789932][ T5922] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  271.133921][ T5922] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  271.160666][ T5922] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[  271.227022][ T5922] usb 1-1: USB disconnect, device number 36
[  271.511962][T10297] netlink: 132 bytes leftover after parsing attributes in process `syz.1.623'.
[  271.962734][   T45] usb 2-1: new full-speed USB device number 36 using dummy_hcd
[  272.117970][   T45] usb 2-1: device descriptor read/64, error -71
[  272.406394][T10314] netlink: 'syz.4.627': attribute type 1 has an invalid length.
[  273.362748][   T45] usb 2-1: new full-speed USB device number 37 using dummy_hcd
[  273.503052][   T45] usb 2-1: device descriptor read/64, error -71
[  273.654728][   T45] usb usb2-port1: attempt power cycle
[  274.014357][T10360] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  274.052678][   T45] usb 2-1: new full-speed USB device number 38 using dummy_hcd
[  274.093922][   T45] usb 2-1: device descriptor read/8, error -71
[  274.344536][   T45] usb 2-1: new full-speed USB device number 39 using dummy_hcd
[  274.535013][ T5840] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  274.712891][ T5840] usb 4-1: Using ep0 maxpacket: 8
[  274.730497][ T5840] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  274.772009][ T5840] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  274.790983][ T5840] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  274.801662][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.831778][ T5840] usb 4-1: Product: syz
[  274.852142][ T5840] usb 4-1: Manufacturer: syz
[  274.872808][  T917] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  274.892800][ T5840] usb 4-1: SerialNumber: syz
[  274.898178][T10386] FAULT_INJECTION: forcing a failure.
[  274.898178][T10386] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  274.904357][ T5840] usb 4-1: config 0 descriptor??
[  274.958648][T10386] CPU: 0 UID: 0 PID: 10386 Comm: syz.4.634 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) 
[  274.958678][T10386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  274.958690][T10386] Call Trace:
[  274.958698][T10386]  <TASK>
[  274.958708][T10386]  dump_stack_lvl+0x189/0x250
[  274.958742][T10386]  ? __pfx____ratelimit+0x10/0x10
[  274.958771][T10386]  ? __pfx_dump_stack_lvl+0x10/0x10
[  274.958800][T10386]  ? __pfx__printk+0x10/0x10
[  274.958835][T10386]  should_fail_ex+0x414/0x560
[  274.958867][T10386]  _copy_to_user+0x31/0xb0
[  274.958891][T10386]  simple_read_from_buffer+0xe1/0x170
[  274.958919][T10386]  proc_fail_nth_read+0x1df/0x250
[  274.958946][T10386]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  274.958972][T10386]  ? rw_verify_area+0x258/0x650
[  274.958997][T10386]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  274.959021][T10386]  vfs_read+0x200/0x980
[  274.959056][T10386]  ? __pfx___mutex_lock+0x10/0x10
[  274.959095][T10386]  ? __pfx_vfs_read+0x10/0x10
[  274.959127][T10386]  ? __fget_files+0x2a/0x420
[  274.959150][T10386]  ? __fget_files+0x3a0/0x420
[  274.959169][T10386]  ? __fget_files+0x2a/0x420
[  274.959199][T10386]  ksys_read+0x145/0x250
[  274.959218][T10386]  ? __pfx_ksys_read+0x10/0x10
[  274.959230][T10386]  ? fput+0xa0/0xd0
[  274.959256][T10386]  ? do_syscall_64+0xbe/0x3b0
[  274.959279][T10386]  do_syscall_64+0xfa/0x3b0
[  274.959295][T10386]  ? lockdep_hardirqs_on+0x9c/0x150
[  274.959322][T10386]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.959339][T10386]  ? clear_bhb_loop+0x60/0xb0
[  274.959362][T10386]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.959381][T10386] RIP: 0033:0x7fd076d8d33c
[  274.959400][T10386] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  274.959416][T10386] RSP: 002b:00007fd074bf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  274.959438][T10386] RAX: ffffffffffffffda RBX: 00007fd076fb5fa0 RCX: 00007fd076d8d33c
[  274.959462][T10386] RDX: 000000000000000f RSI: 00007fd074bf60a0 RDI: 0000000000000004
[  274.959474][T10386] RBP: 00007fd074bf6090 R08: 0000000000000000 R09: 0000000000000000
[  274.959485][T10386] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  274.959498][T10386] R13: 0000000000000000 R14: 00007fd076fb5fa0 R15: 00007fd0770dfa28
[  274.959529][T10386]  </TASK>
[  275.214917][  T917] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  275.225952][  T917] usb 1-1: config 0 has no interfaces?
[  275.231516][  T917] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  275.245902][  T917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.261174][  T917] usb 1-1: config 0 descriptor??
[  275.479956][T10399] 8021q: VLANs not supported on ip6gre0
[  275.557497][   T45] usb 2-1: device descriptor read/8, error -71
[  275.669934][  T978] usb 1-1: USB disconnect, device number 37
[  275.683539][   T45] usb usb2-port1: unable to enumerate USB device
[  275.877667][T10422] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20001
[  276.611411][T10437] FAULT_INJECTION: forcing a failure.
[  276.611411][T10437] name failslab, interval 1, probability 0, space 0, times 0
[  276.660051][T10437] CPU: 1 UID: 0 PID: 10437 Comm: syz.4.643 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) 
[  276.660082][T10437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  276.660094][T10437] Call Trace:
[  276.660102][T10437]  <TASK>
[  276.660110][T10437]  dump_stack_lvl+0x189/0x250
[  276.660147][T10437]  ? __pfx____ratelimit+0x10/0x10
[  276.660177][T10437]  ? __pfx_dump_stack_lvl+0x10/0x10
[  276.660207][T10437]  ? __pfx__printk+0x10/0x10
[  276.660232][T10437]  ? __pfx___might_resched+0x10/0x10
[  276.660271][T10437]  ? fs_reclaim_acquire+0x7d/0x100
[  276.660302][T10437]  should_fail_ex+0x414/0x560
[  276.660334][T10437]  should_failslab+0xa8/0x100
[  276.660357][T10437]  kmem_cache_alloc_noprof+0x73/0x3c0
[  276.660386][T10437]  ? security_file_alloc+0x34/0x330
[  276.660413][T10437]  security_file_alloc+0x34/0x330
[  276.660437][T10437]  init_file+0x93/0x2f0
[  276.660466][T10437]  alloc_empty_file+0x6e/0x1d0
[  276.660491][T10437]  alloc_file_pseudo+0x13d/0x210
[  276.660519][T10437]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  276.660541][T10437]  ? do_raw_spin_unlock+0x122/0x240
[  276.660567][T10437]  ? _raw_spin_unlock+0x28/0x50
[  276.660602][T10437]  sock_alloc_file+0xb8/0x2e0
[  276.660635][T10437]  ? __sys_socket+0x12c/0x1b0
[  276.660657][T10437]  __sys_socket+0x13d/0x1b0
[  276.660681][T10437]  __x64_sys_socket+0x7a/0x90
[  276.660702][T10437]  do_syscall_64+0xfa/0x3b0
[  276.660720][T10437]  ? lockdep_hardirqs_on+0x9c/0x150
[  276.660749][T10437]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.660769][T10437]  ? clear_bhb_loop+0x60/0xb0
[  276.660794][T10437]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.660813][T10437] RIP: 0033:0x7fd076d90847
[  276.660831][T10437] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  276.660849][T10437] RSP: 002b:00007fd074bf4fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029
[  276.660872][T10437] RAX: ffffffffffffffda RBX: 00007fd076fb5fa0 RCX: 00007fd076d90847
[  276.660887][T10437] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  276.660900][T10437] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[  276.660913][T10437] R10: 0000200000000440 R11: 0000000000000286 R12: 0000000000000001
[  276.660925][T10437] R13: 0000000000000000 R14: 00007fd076fb5fa0 R15: 00007fd0770dfa28
[  276.660956][T10437]  </TASK>
[  277.023770][T10443] fuse: Bad value for 'rootmode'
[  277.193104][  T978] usb 2-1: new full-speed USB device number 40 using dummy_hcd
[  277.386586][  T978] usb 2-1: config index 0 descriptor too short (expected 36644, got 36)
[  277.411904][  T978] usb 2-1: config 26 has too many interfaces: 221, using maximum allowed: 32
[  277.730382][T10460] netlink: 132 bytes leftover after parsing attributes in process `syz.4.647'.
[  277.741811][  T978] usb 2-1: config 26 has an invalid descriptor of length 78, skipping remainder of the config
[  277.820357][T10464] FAULT_INJECTION: forcing a failure.
[  277.820357][T10464] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  277.855546][T10464] CPU: 0 UID: 0 PID: 10464 Comm: syz.2.648 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) 
[  277.855568][T10464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  277.855576][T10464] Call Trace:
[  277.855581][T10464]  <TASK>
[  277.855586][T10464]  dump_stack_lvl+0x189/0x250
[  277.855611][T10464]  ? __pfx____ratelimit+0x10/0x10
[  277.855631][T10464]  ? __pfx_dump_stack_lvl+0x10/0x10
[  277.855650][T10464]  ? __pfx__printk+0x10/0x10
[  277.855663][T10464]  ? __might_fault+0xb0/0x130
[  277.855680][T10464]  should_fail_ex+0x414/0x560
[  277.855699][T10464]  _copy_from_user+0x2d/0xb0
[  277.855712][T10464]  ___sys_recvmsg+0x12e/0x510
[  277.855732][T10464]  ? __pfx____sys_recvmsg+0x10/0x10
[  277.855762][T10464]  ? __fget_files+0x3a0/0x420
[  277.855781][T10464]  do_recvmmsg+0x307/0x770
[  277.855803][T10464]  ? __pfx_do_recvmmsg+0x10/0x10
[  277.855836][T10464]  __x64_sys_recvmmsg+0x190/0x240
[  277.855855][T10464]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  277.855875][T10464]  ? do_syscall_64+0xbe/0x3b0
[  277.855888][T10464]  do_syscall_64+0xfa/0x3b0
[  277.855897][T10464]  ? lockdep_hardirqs_on+0x9c/0x150
[  277.855916][T10464]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.855927][T10464]  ? clear_bhb_loop+0x60/0xb0
[  277.855942][T10464]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  277.855953][T10464] RIP: 0033:0x7f0c9d18e929
[  277.855964][T10464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  277.855975][T10464] RSP: 002b:00007f0c9dfc8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  277.855989][T10464] RAX: ffffffffffffffda RBX: 00007f0c9d3b6080 RCX: 00007f0c9d18e929
[  277.855998][T10464] RDX: 0000000000000001 RSI: 0000200000003d40 RDI: 0000000000000006
[  277.856006][T10464] RBP: 00007f0c9dfc8090 R08: 0000000000000000 R09: 0000000000000000
[  277.856014][T10464] R10: 0000000040010020 R11: 0000000000000246 R12: 0000000000000001
[  277.856021][T10464] R13: 0000000000000000 R14: 00007f0c9d3b6080 R15: 00007f0c9d4dfa28
[  277.856038][T10464]  </TASK>
[  277.858529][  T978] usb 2-1: config 26 has 0 interfaces, different from the descriptor's value: 221
[  278.312857][ T5923] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[  278.386277][  T917] usb 4-1: USB disconnect, device number 57
[  278.563705][ T5923] usb 5-1: device descriptor read/64, error -71
[  278.640203][  T978] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40
[  278.650642][  T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.671302][  T978] usb 2-1: Product: syz
[  278.675663][  T978] usb 2-1: Manufacturer: syz
[  278.682801][  T978] usb 2-1: SerialNumber: syz
[  278.815245][ T5923] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[  278.951792][  T978] usb 2-1: USB disconnect, device number 40
[  278.989131][ T5923] usb 5-1: device descriptor read/64, error -71
[  279.124315][ T5923] usb usb5-port1: attempt power cycle
[  279.182876][   T24] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  279.312732][   T24] usb 4-1: device descriptor read/64, error -71
[  279.492698][ T5923] usb 5-1: new full-speed USB device number 21 using dummy_hcd
[  279.514980][ T5923] usb 5-1: device descriptor read/8, error -71
[  279.603139][   T24] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  279.733389][   T24] usb 4-1: device descriptor read/64, error -71
[  279.788940][ T5923] usb 5-1: new full-speed USB device number 22 using dummy_hcd
[  279.823443][ T5923] usb 5-1: device descriptor read/8, error -71
[  279.845525][   T24] usb usb4-port1: attempt power cycle
[  279.943144][ T5923] usb usb5-port1: unable to enumerate USB device
[  280.203875][   T24] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  280.223647][   T24] usb 4-1: device descriptor read/8, error -71
[  280.382898][ T5923] usb 3-1: new full-speed USB device number 30 using dummy_hcd
[  280.462659][   T24] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  280.483525][   T24] usb 4-1: device descriptor read/8, error -71
[  280.559792][T10530] binder: 10527:10530 ioctl c0306201 0 returned -14
[  280.577635][ T5923] usb 3-1: config index 0 descriptor too short (expected 63186, got 210)
[  280.594970][   T24] usb usb4-port1: unable to enumerate USB device
[  280.601525][ T5923] usb 3-1: config 0 has an invalid interface number: 106 but max is 0
[  280.616954][ T5923] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  280.639872][ T5923] usb 3-1: config 0 has no interface number 0
[  280.660646][ T5923] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  280.699296][ T5923] usb 3-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6
[  280.731483][ T5923] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb
[  280.750775][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.772001][ T5923] usb 3-1: config 0 descriptor??
[  280.789086][ T5923] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  281.023751][  T978] usb 2-1: new full-speed USB device number 41 using dummy_hcd
[  281.192803][  T978] usb 2-1: device descriptor read/64, error -71
[  281.472711][  T978] usb 2-1: new full-speed USB device number 42 using dummy_hcd
[  281.505701][   T24] usb 3-1: USB disconnect, device number 30
[  281.521119][ T1157] usb 3-1: Failed to submit usb control message: -71
[  281.553050][ T1157] usb 3-1: unable to send the bmi data to the device: -71
[  281.620067][ T1157] usb 3-1: unable to get target info from device
[  281.643126][ T1157] usb 3-1: could not get target info (-71)
[  281.652839][  T978] usb 2-1: device descriptor read/64, error -71
[  281.656097][ T1157] usb 3-1: could not probe fw (-71)
[  281.823101][  T978] usb usb2-port1: attempt power cycle
[  282.182813][  T978] usb 2-1: new full-speed USB device number 43 using dummy_hcd
[  282.208679][  T978] usb 2-1: device descriptor read/8, error -71
[  282.452714][  T978] usb 2-1: new full-speed USB device number 44 using dummy_hcd
[  282.476280][  T978] usb 2-1: device descriptor read/8, error -71
[  282.643854][  T978] usb usb2-port1: unable to enumerate USB device
[  283.105648][T10585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.668'.
[  283.204826][T10586] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  284.277612][T10621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.674'.
[  284.563687][T10623] bridge0: port 3(macvlan2) entered blocking state
[  284.570541][T10623] bridge0: port 3(macvlan2) entered disabled state
[  284.592948][T10623] macvlan2: entered allmulticast mode
[  284.618798][T10623] dummy0: entered allmulticast mode
[  284.678884][T10623] macvlan2: entered promiscuous mode
[  284.721151][T10623] bridge0: port 3(macvlan2) entered blocking state
[  284.728223][T10623] bridge0: port 3(macvlan2) entered forwarding state
[  284.777974][T10627] geneve2: entered allmulticast mode
[  285.060044][   T30] audit: type=1326 audit(1749977293.464:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9d18e929 code=0x7fc00000
[  285.084784][   T30] audit: type=1326 audit(1749977293.464:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0c9d18e929 code=0x7fc00000
[  285.109619][   T30] audit: type=1326 audit(1749977293.464:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9d18e929 code=0x7fc00000
[  285.137974][   T30] audit: type=1326 audit(1749977293.464:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9d18e929 code=0x7fc00000
[  285.161294][  T978] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  285.169453][   T30] audit: type=1326 audit(1749977293.464:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9d18e929 code=0x7fc00000
[  285.193175][   T30] audit: type=1326 audit(1749977293.464:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9d18e929 code=0x7fc00000
[  285.241654][   T30] audit: type=1326 audit(1749977293.464:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9d18e929 code=0x7fc00000
[  285.272703][   T30] audit: type=1326 audit(1749977293.464:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9d18e929 code=0x7fc00000
[  285.297034][   T30] audit: type=1326 audit(1749977293.464:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9d18e929 code=0x7fc00000
[  285.326528][   T30] audit: type=1326 audit(1749977293.464:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10618 comm="syz.2.675" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9d18e929 code=0x7fc00000
[  285.352760][  T978] usb 2-1: Using ep0 maxpacket: 16
[  285.372293][  T978] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  285.385447][  T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.419496][  T978] usb 2-1: Product: syz
[  285.436441][  T978] usb 2-1: Manufacturer: syz
[  285.448266][T10662] netlink: 24 bytes leftover after parsing attributes in process `syz.4.681'.
[  285.457516][  T978] usb 2-1: SerialNumber: syz
[  285.487797][  T978] usb 2-1: config 0 descriptor??
[  285.534356][  T978] visor 2-1:0.0: Sony Clie 3.5 converter detected
[  285.555914][T10667] netlink: 16 bytes leftover after parsing attributes in process `syz.2.682'.
[  285.710905][  T978] usb 2-1: clie_3_5_startup: get config number failed: -71
[  285.758079][  T978] visor 2-1:0.0: probe with driver visor failed with error -71
[  286.035001][  T978] usb 2-1: USB disconnect, device number 45
[  287.115701][   T45] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  287.282767][   T45] usb 4-1: device descriptor read/64, error -71
[  287.552761][   T45] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  287.683132][ T5923] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  287.713135][   T45] usb 4-1: device descriptor read/64, error -71
[  287.908392][   T45] usb usb4-port1: attempt power cycle
[  287.917914][ T5923] usb 3-1: Using ep0 maxpacket: 16
[  288.032865][ T5923] usb 3-1: config 0 has no interfaces?
[  288.038383][ T5923] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  288.102677][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.152625][ T5923] usb 3-1: config 0 descriptor??
[  288.393773][T10753] netlink: 16 bytes leftover after parsing attributes in process `syz.0.694'.
[  288.449488][   T45] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  288.476658][T10753] team0: entered promiscuous mode
[  288.486910][T10753] team_slave_0: entered promiscuous mode
[  288.494443][   T45] usb 4-1: device descriptor read/8, error -71
[  288.501358][T10753] team_slave_1: entered promiscuous mode
[  288.539296][T10753] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  288.661726][T10761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.690'.
[  288.732770][   T45] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  288.769406][   T45] usb 4-1: device descriptor read/8, error -71
[  288.933458][   T45] usb usb4-port1: unable to enumerate USB device
[  290.083778][T10787] binder: 10786:10787 ioctl c0306201 200000000480 returned -14
[  290.306463][ T5923] usb 3-1: USB disconnect, device number 31
[  290.655299][ T5923] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  290.668175][T10811] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  290.821797][ T5923] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  290.851724][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  290.883111][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  290.929789][ T5923] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  290.997482][ T5923] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  291.027320][ T5923] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  291.037184][ T5923] usb 3-1: Manufacturer: syz
[  291.056800][ T5923] usb 3-1: config 0 descriptor??
[  291.203042][    T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  291.431681][    T9] usb 2-1: Using ep0 maxpacket: 32
[  291.441396][    T9] usb 2-1: config index 0 descriptor too short (expected 156, got 27)
[  291.451008][    T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  291.471625][ T5923] appleir 0003:05AC:8243.0007: unknown main item tag 0x0
[  291.482221][    T9] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  291.493750][ T5922] usb 5-1: new full-speed USB device number 23 using dummy_hcd
[  291.539613][ T5923] appleir 0003:05AC:8243.0007: No inputs registered, leaving
[  291.557045][    T9] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  291.740342][ T5922] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  291.754977][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  291.784080][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  291.799157][ T5923] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  291.835669][    T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  291.845494][ T5922] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  291.872634][    T9] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  291.938875][ T5922] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  291.962474][    T9] usb 2-1: Product: syz
[  291.987909][    T9] usb 2-1: Manufacturer: syz
[  291.993866][    T9] usb 2-1: SerialNumber: syz
[  292.008577][ T5922] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  292.024672][ T5922] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  292.034246][    T9] usb 2-1: config 0 descriptor??
[  292.074791][ T5922] usb 5-1: Manufacturer: syz
[  292.225193][    T9] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  292.255475][ T5922] usb 5-1: config 0 descriptor??
[  292.375175][    T9] ldusb 2-1:0.0: LD USB Device #1 now attached to major 180 minor 1
[  292.531115][   T24] usb 2-1: USB disconnect, device number 46
[  292.594161][   T24] ldusb 2-1:0.0: LD USB Device #1 now disconnected
[  292.943023][ T5922] rc_core: IR keymap rc-hauppauge not found
[  292.951407][ T5922] Registered IR keymap rc-empty
[  292.979292][ T5922] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  293.016419][ T5922] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  293.063619][ T5922] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  293.097590][ T5922] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input24
[  293.114579][ T5922] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  293.132798][ T5922] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  293.156031][ T5922] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  293.209680][ T5922] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  293.242809][ T5922] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  293.272810][ T5922] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  293.313115][    T9] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  293.354639][ T5922] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  293.384063][ T5922] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  293.432912][ T5922] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  293.451916][   T24] usb 3-1: USB disconnect, device number 32
[  293.463067][ T5922] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  293.511476][ T5922] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  293.534857][    T9] usb 2-1: config 1 interface 0 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 1024
[  293.567819][    T9] usb 2-1: config 1 interface 0 has no altsetting 0
[  293.582799][ T5922] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  293.608159][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  293.627777][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.645868][ T5922] usb 5-1: USB disconnect, device number 23
[  293.663423][    T9] usb 2-1: Product: 뾨᯦֛爲갘ﺄ벮쩕ૠ忇扫ḗ	碔䂛䪴꙼䝟☟⛰湩둦ꩃ旲㏦峣゘磲芝컘蝗ﺸ㫔瀗
[  293.726127][    T9] usb 2-1: Manufacturer: ࠧ
[  293.751136][    T9] usb 2-1: SerialNumber: ࡡ
[  293.805053][T10886] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  294.026333][T10931] netlink: 16 bytes leftover after parsing attributes in process `syz.2.713'.
[  294.389643][T10944] tipc: Started in network mode
[  294.421350][T10944] tipc: Node identity 620738f02a25, cluster identity 4711
[  294.454376][T10944] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  294.476529][T10944] fuse: Unknown parameter 'P�%��-��S�}ʻ�*��qs��'
[  294.534750][T10949] tipc: Resetting bearer <eth:syzkaller0>
[  294.621360][    T9] usb 2-1: USB disconnect, device number 47
[  294.632239][T10941] tipc: Disabling bearer <eth:syzkaller0>
[  295.172946][   T24] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  295.333578][   T24] usb 2-1: Using ep0 maxpacket: 8
[  295.341786][   T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  295.370356][   T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  295.549407][   T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  295.596683][   T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  295.692840][   T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  295.701963][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.717999][T10976] netlink: 'syz.3.720': attribute type 5 has an invalid length.
[  296.872392][   T24] usb 2-1: usb_control_msg returned -32
[  296.881854][   T24] usbtmc 2-1:16.0: can't read capabilities
[  297.506726][   T24] usb 2-1: USB disconnect, device number 48
[  299.236816][T11085] FAULT_INJECTION: forcing a failure.
[  299.236816][T11085] name failslab, interval 1, probability 0, space 0, times 0
[  299.251408][T11085] CPU: 1 UID: 0 PID: 11085 Comm: syz.2.732 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) 
[  299.251427][T11085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  299.251434][T11085] Call Trace:
[  299.251440][T11085]  <TASK>
[  299.251445][T11085]  dump_stack_lvl+0x189/0x250
[  299.251470][T11085]  ? __pfx____ratelimit+0x10/0x10
[  299.251489][T11085]  ? __pfx_dump_stack_lvl+0x10/0x10
[  299.251508][T11085]  ? __pfx__printk+0x10/0x10
[  299.251523][T11085]  ? __pfx___might_resched+0x10/0x10
[  299.251542][T11085]  ? fs_reclaim_acquire+0x7d/0x100
[  299.251560][T11085]  should_fail_ex+0x414/0x560
[  299.251579][T11085]  should_failslab+0xa8/0x100
[  299.251593][T11085]  __kmalloc_noprof+0xcb/0x4f0
[  299.251603][T11085]  ? tomoyo_encode+0x28b/0x550
[  299.251624][T11085]  tomoyo_encode+0x28b/0x550
[  299.251644][T11085]  tomoyo_realpath_from_path+0x58d/0x5d0
[  299.251668][T11085]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  299.251683][T11085]  tomoyo_path_number_perm+0x1e8/0x5a0
[  299.251699][T11085]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  299.251723][T11085]  ? __lock_acquire+0xab9/0xd20
[  299.251752][T11085]  ? __fget_files+0x2a/0x420
[  299.251767][T11085]  ? __fget_files+0x2a/0x420
[  299.251780][T11085]  ? __fget_files+0x3a0/0x420
[  299.251792][T11085]  ? __fget_files+0x2a/0x420
[  299.251807][T11085]  security_file_ioctl+0xcb/0x2d0
[  299.251822][T11085]  __se_sys_ioctl+0x47/0x170
[  299.251842][T11085]  do_syscall_64+0xfa/0x3b0
[  299.251853][T11085]  ? lockdep_hardirqs_on+0x9c/0x150
[  299.251871][T11085]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.251882][T11085]  ? clear_bhb_loop+0x60/0xb0
[  299.251897][T11085]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  299.251908][T11085] RIP: 0033:0x7f0c9d18e929
[  299.251920][T11085] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  299.251930][T11085] RSP: 002b:00007f0c9dfe9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  299.251945][T11085] RAX: ffffffffffffffda RBX: 00007f0c9d3b5fa0 RCX: 00007f0c9d18e929
[  299.251954][T11085] RDX: 00002000000003c0 RSI: 00000000c040565e RDI: 0000000000000003
[  299.251962][T11085] RBP: 00007f0c9dfe9090 R08: 0000000000000000 R09: 0000000000000000
[  299.251970][T11085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  299.251979][T11085] R13: 0000000000000000 R14: 00007f0c9d3b5fa0 R15: 00007f0c9d4dfa28
[  299.251997][T11085]  </TASK>
[  299.252013][T11085] ERROR: Out of memory at tomoyo_realpath_from_path.
[  300.004234][T11106] netlink: 16 bytes leftover after parsing attributes in process `syz.2.736'.
[  300.955201][T11146] netlink: 'syz.3.743': attribute type 39 has an invalid length.
[  301.509168][T11148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.742'.
[  301.654024][T11156] input: syz0 as /devices/virtual/input/input25
[  302.192661][  T978] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  302.332668][   T45] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  302.362817][  T978] usb 4-1: Using ep0 maxpacket: 32
[  302.381531][  T978] usb 4-1: config 0 interface 0 has no altsetting 0
[  302.420132][  T978] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  302.483360][  T978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.491442][  T978] usb 4-1: Product: syz
[  302.508348][  T978] usb 4-1: Manufacturer: syz
[  302.521304][  T978] usb 4-1: SerialNumber: syz
[  302.557292][   T45] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  302.578749][  T978] usb 4-1: config 0 descriptor??
[  302.602819][   T45] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  302.664825][   T45] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  302.705571][   T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  302.772692][   T45] usb 3-1: SerialNumber: syz
[  302.950093][T11188] lo: entered allmulticast mode
[  303.010261][T11189] pimreg: entered allmulticast mode
[  303.052844][  T978] gs_usb 4-1:0.0: Configuring for 1 interfaces
[  303.414038][   T45] usb 3-1: 0:2 : does not exist
[  303.446651][  T978] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPIPE)
[  303.553014][   T45] usb 3-1: USB disconnect, device number 33
[  303.637127][ T6174] udevd[6174]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  303.721617][T11216] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  303.765949][T11163] netlink: 28 bytes leftover after parsing attributes in process `syz.3.745'.
[  304.218015][T11203] trusted_key: encrypted_key: insufficient parameters specified
[  304.405512][   T45] usb 3-1: new full-speed USB device number 34 using dummy_hcd
[  304.575216][   T45] usb 3-1: config 0 has an invalid interface number: 105 but max is 0
[  304.598256][   T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  304.615983][   T45] usb 3-1: config 0 has no interface number 0
[  304.684922][   T45] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  304.704627][   T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  304.720846][   T45] usb 3-1: Product: syz
[  304.742456][   T45] usb 3-1: Manufacturer: syz
[  304.766804][   T45] usb 3-1: SerialNumber: syz
[  304.792848][   T45] usb 3-1: config 0 descriptor??
[  305.056907][   T45] usb 3-1: USB disconnect, device number 34
[  306.902708][  T978] usb 3-1: new full-speed USB device number 35 using dummy_hcd
[  307.065970][  T978] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  307.076528][  T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  307.087660][  T978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  307.097547][  T978] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  307.114682][  T978] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  307.125017][  T978] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  307.133483][  T978] usb 3-1: Manufacturer: syz
[  307.140706][  T978] usb 3-1: config 0 descriptor??
[  307.422716][  T978] rc_core: IR keymap rc-hauppauge not found
[  307.428714][  T978] Registered IR keymap rc-empty
[  307.435610][  T978] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  307.462966][  T978] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  307.484373][  T978] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  307.500457][  T978] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input26
[  307.515775][  T978] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  307.542805][  T978] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  307.562899][  T978] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  307.582811][  T978] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  307.602832][  T978] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  307.622761][  T978] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  307.642752][  T978] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  307.662805][  T978] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  307.682825][  T978] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  307.712934][  T978] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  307.737833][  T978] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  307.746979][  T978] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  307.860064][T11293] netlink: 368 bytes leftover after parsing attributes in process `syz.2.761'.
[  307.906724][T11293] netlink: 368 bytes leftover after parsing attributes in process `syz.2.761'.
[  307.920997][  T978] usb 3-1: USB disconnect, device number 35
[  308.625427][T11331] ==================================================================
[  308.633561][T11331] BUG: KASAN: slab-out-of-bounds in _raw_spin_lock+0x2e/0x40
[  308.640946][T11331] Read of size 1 at addr ffff888011fadee0 by task syz.2.763/11331
[  308.648769][T11331] 
[  308.651117][T11331] CPU: 0 UID: 0 PID: 11331 Comm: syz.2.763 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) 
[  308.651134][T11331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  308.651141][T11331] Call Trace:
[  308.651147][T11331]  <TASK>
[  308.651155][T11331]  dump_stack_lvl+0x189/0x250
[  308.651184][T11331]  ? __kasan_check_byte+0x12/0x40
[  308.651197][T11331]  ? __pfx_dump_stack_lvl+0x10/0x10
[  308.651215][T11331]  ? lock_release+0x4b/0x3e0
[  308.651234][T11331]  ? __virt_addr_valid+0x4a5/0x5c0
[  308.651246][T11331]  print_report+0xd2/0x2b0
[  308.651262][T11331]  ? _raw_spin_lock+0x2e/0x40
[  308.651278][T11331]  kasan_report+0x118/0x150
[  308.651291][T11331]  ? _raw_spin_lock+0x2e/0x40
[  308.651307][T11331]  ? __futex_pivot_hash+0x226/0x460
[  308.651320][T11331]  __kasan_check_byte+0x2a/0x40
[  308.651331][T11331]  lock_acquire+0x8d/0x360
[  308.651347][T11331]  ? futex_hash_allocate+0x7eb/0xba0
[  308.651362][T11331]  _raw_spin_lock+0x2e/0x40
[  308.651377][T11331]  ? __futex_pivot_hash+0x226/0x460
[  308.651389][T11331]  __futex_pivot_hash+0x226/0x460
[  308.651404][T11331]  futex_hash_allocate+0xa6b/0xba0
[  308.651418][T11331]  ? __pfx_futex_hash_allocate+0x10/0x10
[  308.651431][T11331]  ? cap_task_prctl+0x1de/0xaa0
[  308.651444][T11331]  ? static_key_count+0x41/0x70
[  308.651456][T11331]  ? security_task_prctl+0x163/0x190
[  308.651473][T11331]  __se_sys_prctl+0x9e8/0x1940
[  308.651489][T11331]  ? __pfx___se_sys_prctl+0x10/0x10
[  308.651505][T11331]  ? do_syscall_64+0xbe/0x3b0
[  308.651515][T11331]  ? __x64_sys_prctl+0x20/0xc0
[  308.651530][T11331]  do_syscall_64+0xfa/0x3b0
[  308.651540][T11331]  ? lockdep_hardirqs_on+0x9c/0x150
[  308.651558][T11331]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.651569][T11331]  ? clear_bhb_loop+0x60/0xb0
[  308.651582][T11331]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.651594][T11331] RIP: 0033:0x7f0c9d18e929
[  308.651606][T11331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  308.651616][T11331] RSP: 002b:00007f0c9dfc8038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[  308.651631][T11331] RAX: ffffffffffffffda RBX: 00007f0c9d3b6080 RCX: 00007f0c9d18e929
[  308.651640][T11331] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000004e
[  308.651647][T11331] RBP: 00007f0c9d210b39 R08: 0000000000000000 R09: 0000000000000000
[  308.651655][T11331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  308.651662][T11331] R13: 0000000000000001 R14: 00007f0c9d3b6080 R15: 00007f0c9d4dfa28
[  308.651674][T11331]  </TASK>
[  308.651678][T11331] 
[  308.907039][T11331] Allocated by task 11330:
[  308.911450][T11331]  kasan_save_track+0x3e/0x80
[  308.916132][T11331]  __kasan_kmalloc+0x93/0xb0
[  308.920715][T11331]  __kvmalloc_node_noprof+0x30d/0x5f0
[  308.926086][T11331]  futex_hash_allocate+0x3f4/0xba0
[  308.931193][T11331]  __se_sys_prctl+0x9e8/0x1940
[  308.935960][T11331]  do_syscall_64+0xfa/0x3b0
[  308.940459][T11331]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  308.946348][T11331] 
[  308.948670][T11331] The buggy address belongs to the object at ffff888011fade80
[  308.948670][T11331]  which belongs to the cache kmalloc-cg-64 of size 64
[  308.962820][T11331] The buggy address is located 32 bytes to the right of
[  308.962820][T11331]  allocated 64-byte region [ffff888011fade80, ffff888011fadec0)
[  308.977329][T11331] 
[  308.979653][T11331] The buggy address belongs to the physical page:
[  308.986080][T11331] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11fad
[  308.994844][T11331] memcg:ffff88807d663e01
[  308.999086][T11331] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  309.006201][T11331] page_type: f5(slab)
[  309.010189][T11331] raw: 00fff00000000000 ffff88801a449c80 ffffea0001b0d200 dead000000000004
[  309.018778][T11331] raw: 0000000000000000 0000000080200020 00000000f5000000 ffff88807d663e01
[  309.027364][T11331] page dumped because: kasan: bad access detected
[  309.033777][T11331] page_owner tracks the page as allocated
[  309.039494][T11331] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5852, tgid 5852 (syz-executor), ts 179836555887, free_ts 179836097421
[  309.058950][T11331]  post_alloc_hook+0x240/0x2a0
[  309.063813][T11331]  get_page_from_freelist+0x21e4/0x22c0
[  309.069365][T11331]  __alloc_frozen_pages_noprof+0x181/0x370
[  309.075177][T11331]  alloc_pages_mpol+0x232/0x4a0
[  309.080040][T11331]  allocate_slab+0x8a/0x3b0
[  309.084555][T11331]  ___slab_alloc+0xbfc/0x1480
[  309.089243][T11331]  __kmalloc_cache_noprof+0x296/0x3d0
[  309.094617][T11331]  alloc_fdtable+0xa7/0x2a0
[  309.099123][T11331]  dup_fd+0x86c/0xb60
[  309.103107][T11331]  copy_files+0xc9/0x120
[  309.107436][T11331]  copy_process+0x15b2/0x3c00
[  309.112112][T11331]  kernel_clone+0x21e/0x870
[  309.116622][T11331]  __x64_sys_clone+0x18b/0x1e0
[  309.121393][T11331]  do_syscall_64+0xfa/0x3b0
[  309.125900][T11331]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.131800][T11331] page last free pid 5852 tgid 5852 stack trace:
[  309.138127][T11331]  __free_frozen_pages+0xc71/0xe70
[  309.143244][T11331]  vfree+0x25a/0x400
[  309.147144][T11331]  do_ip6t_get_ctl+0xeb0/0x1180
[  309.152003][T11331]  nf_getsockopt+0x26b/0x290
[  309.156601][T11331]  ipv6_getsockopt+0x1ed/0x290
[  309.161376][T11331]  do_sock_getsockopt+0x360/0x650
[  309.166407][T11331]  __x64_sys_getsockopt+0x1a5/0x250
[  309.171614][T11331]  do_syscall_64+0xfa/0x3b0
[  309.176119][T11331]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.182016][T11331] 
[  309.184343][T11331] Memory state around the buggy address:
[  309.189977][T11331]  ffff888011fadd80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  309.198051][T11331]  ffff888011fade00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  309.206116][T11331] >ffff888011fade80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[  309.214179][T11331]                                                        ^
[  309.221372][T11331]  ffff888011fadf00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  309.229433][T11331]  ffff888011fadf80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  309.237668][T11331] ==================================================================
[  309.246835][T11331] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  309.254059][T11331] CPU: 0 UID: 0 PID: 11331 Comm: syz.2.763 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) 
[  309.266045][T11331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  309.276107][T11331] Call Trace:
[  309.279391][T11331]  <TASK>
[  309.282326][T11331]  dump_stack_lvl+0x99/0x250
[  309.286933][T11331]  ? __asan_memcpy+0x40/0x70
[  309.291539][T11331]  ? __pfx_dump_stack_lvl+0x10/0x10
[  309.296750][T11331]  ? __pfx__printk+0x10/0x10
[  309.301354][T11331]  panic+0x2db/0x790
[  309.305267][T11331]  ? lockdep_hardirqs_on+0x9c/0x150
[  309.310478][T11331]  ? __pfx_panic+0x10/0x10
[  309.314911][T11331]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  309.320905][T11331]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  309.326811][T11331]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  309.333149][T11331]  ? _raw_spin_lock+0x2e/0x40
[  309.337833][T11331]  check_panic_on_warn+0x89/0xb0
[  309.342783][T11331]  ? _raw_spin_lock+0x2e/0x40
[  309.347471][T11331]  end_report+0x78/0x160
[  309.351716][T11331]  kasan_report+0x129/0x150
[  309.356228][T11331]  ? _raw_spin_lock+0x2e/0x40
[  309.360918][T11331]  ? __futex_pivot_hash+0x226/0x460
[  309.366126][T11331]  __kasan_check_byte+0x2a/0x40
[  309.370990][T11331]  lock_acquire+0x8d/0x360
[  309.375416][T11331]  ? futex_hash_allocate+0x7eb/0xba0
[  309.380713][T11331]  _raw_spin_lock+0x2e/0x40
[  309.385228][T11331]  ? __futex_pivot_hash+0x226/0x460
[  309.390434][T11331]  __futex_pivot_hash+0x226/0x460
[  309.395469][T11331]  futex_hash_allocate+0xa6b/0xba0
[  309.400587][T11331]  ? __pfx_futex_hash_allocate+0x10/0x10
[  309.406224][T11331]  ? cap_task_prctl+0x1de/0xaa0
[  309.411085][T11331]  ? static_key_count+0x41/0x70
[  309.415941][T11331]  ? security_task_prctl+0x163/0x190
[  309.421241][T11331]  __se_sys_prctl+0x9e8/0x1940
[  309.426018][T11331]  ? __pfx___se_sys_prctl+0x10/0x10
[  309.431225][T11331]  ? do_syscall_64+0xbe/0x3b0
[  309.435905][T11331]  ? __x64_sys_prctl+0x20/0xc0
[  309.440678][T11331]  do_syscall_64+0xfa/0x3b0
[  309.445187][T11331]  ? lockdep_hardirqs_on+0x9c/0x150
[  309.450396][T11331]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.456471][T11331]  ? clear_bhb_loop+0x60/0xb0
[  309.461156][T11331]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  309.467065][T11331] RIP: 0033:0x7f0c9d18e929
[  309.471487][T11331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  309.491099][T11331] RSP: 002b:00007f0c9dfc8038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d
[  309.499528][T11331] RAX: ffffffffffffffda RBX: 00007f0c9d3b6080 RCX: 00007f0c9d18e929
[  309.507504][T11331] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000004e
[  309.515480][T11331] RBP: 00007f0c9d210b39 R08: 0000000000000000 R09: 0000000000000000
[  309.523458][T11331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  309.531431][T11331] R13: 0000000000000001 R14: 00007f0c9d3b6080 R15: 00007f0c9d4dfa28
[  309.539417][T11331]  </TASK>
[  309.542597][T11331] Kernel Offset: disabled
[  309.546916][T11331] Rebooting in 86400 seconds..