last executing test programs:

10.07276824s ago: executing program 4 (id=2142):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
accept4$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f00000000c0)=0x10, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51ffa", 0xda}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a6590", 0x38}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33", 0x7a}], 0x5}}], 0x1, 0xc0)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00')
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000005c0)={{0x2, 0x4e20, @multicast2}, {0x1, @local}, 0x44, {0x2, 0x4e23, @rand_addr=0x64010101}, 'virt_wifi0\x00'})
syz_open_dev$evdev(&(0x7f0000000180), 0x5, 0x145000)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_buf(r2, 0x0, 0x2c, &(0x7f0000000240), 0x0)
connect$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000300)={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c)
listen(r3, 0x0)
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10)
sendmmsg(r5, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000480)="ed", 0x1}], 0x2}}], 0x1, 0x4008)
mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)

9.487935964s ago: executing program 3 (id=2146):
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0)
syz_emit_ethernet(0x1e, &(0x7f0000000180)=ANY=[@ANYBLOB="1f1e523a53ae8324c2000003000c0017dd0200002c952f0000000000"], &(0x7f00000001c0)={0x0, 0x4, [0x4de, 0x532, 0xf63, 0x2e4]})
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x204400, 0x0)
write$sysctl(r2, &(0x7f0000000040)='6\x00', 0xffffff62)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff})
bind$unix(r3, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r3, &(0x7f0000004d00)=@file={0x1, './file0\x00'}, 0x6e)
syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="02c90004000002"], 0x9)
socket$kcm(0xa, 0x5, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'broute\x00', 0x0, 0x0, 0x0, [0xffffffffffffffff, 0x3, 0x401, 0x2, 0x8, 0x6]}, &(0x7f0000000080)=0x78)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080))
bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xc)
ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6)
write$cgroup_type(r5, &(0x7f0000000280), 0xfffffeed)

9.173041208s ago: executing program 4 (id=2148):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r0, &(0x7f0000000740)='|', 0x1, 0x0, &(0x7f00000007c0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c)
shutdown(r0, 0x1)
setsockopt(r0, 0x84, 0x80, &(0x7f0000000080)="1a4f30d089f5bd5b", 0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x1, @mcast2, 0x235}}}, 0x84)
r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x79a8, 0x8, 0x1, 0x5000032f}, &(0x7f00000006c0), &(0x7f0000000140))
io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0)
syz_io_uring_setup(0x52c4, &(0x7f0000000480)={0x0, 0x43bd, 0x1000, 0x1, 0x2a9, 0x0, r1}, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$packet(0x11, 0x3, 0x300)
socketpair(0x29, 0x4, 0x0, &(0x7f0000000380))
r3 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
mkdirat(r3, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'wg2\x00'})
unlinkat(r3, &(0x7f0000000140)='./control\x00', 0x200)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34feff00", @ANYRES16=r5, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="0800a000d608000008009f000d000000080026006c090000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r4)
getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000100))
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

9.115656145s ago: executing program 3 (id=2149):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010660504300000000000010902240001000040030904000404030002000921000000012203000905810340"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0) (async)
syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000001080)=ANY=[@ANYBLOB="000004"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x0, 0x2, 0x6}}}}]}, 0x44}}, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@newtfilter={0x44, 0x2c, 0x200, 0x70bd24, 0x25dbdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff5c}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}}, 0x4804) (async)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, 0x0)
r7 = openat$cgroup_ro(r0, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) (async)
r8 = socket$netlink(0x10, 0x3, 0x14)
sendfile(r8, r7, 0x0, 0x17) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180)="edb627368908bd3c9d67430a83d778de1a20a56934cd0a836abf656e37673bb85f8148a435e175b9b0c6673849e72611a53c0490075676436e4a8d916919393ec5b92a90f3c003ba1b64295f3850970933318d5a54182f8c40a7a70cc1666f28825b1c671ff24bcda9ae10c1ccb86ffd7becf17335e20d4cc9185ad20716e61a1f49c4aab0ee056565844e569b1292c9a3b8dd3ed3cfc475a82d2810fe4aa93c5b63b108b5172fb003462f276e1919af4bdf711aa673ee7eabfde3648b8ee4115314952bc915307300"/211, 0xd3, r7}, 0x68) (async)
syz_80211_inject_frame(&(0x7f0000000280)=@broadcast, &(0x7f0000000340)=@ctrl_frame=@pspoll={{}, @random=0x4, @from_mac=@device_b, @device_b}, 0x10) (async)
ioctl$sock_SIOCINQ(r9, 0x541b, &(0x7f0000000140))

9.015322444s ago: executing program 4 (id=2151):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000002214000000110001"], 0xd8}, 0x1, 0x3000000}, 0x0)

8.833769085s ago: executing program 0 (id=2153):
r0 = socket$kcm(0xa, 0x3, 0x73)
r1 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000002040)=0x4, 0x4)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote, 0x0, 0x10}, 0x80, 0x0, 0x0, &(0x7f0000000600)=[{0x10, 0x29, 0x8}], 0x10}, 0x0)

8.828455619s ago: executing program 4 (id=2154):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000304fc0400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b00010062726964676500001400028005001900060000000500180001000000"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={<r5=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={r5})
r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r8 = dup(r7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
open_by_handle_at(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="280000004e000010cc000000000000000180e127d6fb000000822d0cfc0000000000000000000000ff7fffffffffd70e8cb3974479ee000000000636b6428b85551445fd5b3dc47e68ade701be286e7aa4613038a31f386ac23e87fadc61a6160a14a500"], 0x10000)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4220}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r9, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8892}, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)

8.623804376s ago: executing program 0 (id=2156):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
r1 = socket(0x1e, 0x2, 0x0)
r2 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000100)={'erspan0\x00', &(0x7f00000002c0)={'syztnl1\x00', <r5=>0x0, 0x80, 0x1, 0xb, 0x1, {{0x13, 0x4, 0x0, 0xf, 0x4c, 0x68, 0x0, 0xd1, 0x4, 0x0, @multicast2, @multicast1, {[@cipso={0x86, 0x2b, 0x1, [{0x7, 0x3, '\''}, {0x1, 0xa, "9a3f8b236144ce7e"}, {0x6, 0x7, "3422c53364"}, {0x1, 0xa, "63fc17decafdb366"}, {0x2, 0x7, "6fe1d4e349"}]}, @lsrr={0x83, 0xb, 0x75, [@local, @loopback]}]}}}}})
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x2, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x5, 0xffe0}, {0x2, 0xfff3}, {0xb, 0xfff2}}, ["", "", "", "", "", ""]}, 0x24}}, 0x24004010)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, 0x0)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0)
syz_usb_connect(0x6, 0x3b, &(0x7f0000000100)=ANY=[], 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000400), 0x20840, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r8=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000004f000000360000000000000027000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f)
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0)

7.855814796s ago: executing program 1 (id=2158):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000080000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c"], 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="cc000000210001000000000004000000fc010000000000000000000000000000fc02000000000000000000000000000000000000000000000a00000005000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ff0200000000000000000000000000010a010100000000000000000000000000fcd10000000000000000000000000001000000060000000000000000000000003c000000000000000a000a002c0013"], 0xcc}}, 0x0)

7.42201594s ago: executing program 1 (id=2159):
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0)
syz_emit_ethernet(0x1e, &(0x7f0000000180)=ANY=[@ANYBLOB="1f1e523a53ae8324c2000003000c0017dd0200002c952f0000000000"], &(0x7f00000001c0)={0x0, 0x4, [0x4de, 0x532, 0xf63, 0x2e4]})
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x204400, 0x0)
write$sysctl(r2, &(0x7f0000000040)='6\x00', 0xffffff62)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff})
bind$unix(r3, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r3, &(0x7f0000004d00)=@file={0x1, './file0\x00'}, 0x6e)
syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="02c90004000002"], 0x9)
socket$kcm(0xa, 0x5, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'broute\x00', 0x0, 0x0, 0x0, [0xffffffffffffffff, 0x3, 0x401, 0x2, 0x8, 0x6]}, &(0x7f0000000080)=0x78)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080))
bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xc)
ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6)
write$cgroup_type(r5, &(0x7f0000000280), 0xfffffeed)

6.056951864s ago: executing program 3 (id=2161):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = dup(r0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x21511}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @broadcast}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}}], {0x14, 0x10}}, 0x5c}}, 0x4)
syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)={{0x12, 0x1, 0x110, 0x25, 0xbc, 0x86, 0x20, 0x4e8, 0xff30, 0x34ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x40, 0x0, 0x14, [{{0x9, 0x4, 0xe9, 0xfa, 0x1, 0xf7, 0xef, 0xb4, 0x5, [], [{{0x9, 0x5, 0x1, 0x6e8b2aa4490576db, 0x3ff, 0x3, 0x9, 0x2}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000a40)={0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="8e93e469000000d9"], 0x0}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe)
r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14)
fcntl$setsig(r6, 0xa, 0x13)
fcntl$setlease(r6, 0x400, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x3938700}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000600)="ecac6c56dfac8ee97fc10992100268ff58529da0870e87bfcb97c05b0b3a9fa417809b964538fdf375ad8be530a30becb17e7810051035febf8684936b1da2a1a03ff73481f79dc904712838694199d78c6460acf72fedb40819956977efc53fff6ce3ab234abb5458127b372c3678e302af8ebe95f2eb49f6db9b324c49c2eef42f7850a4d814e3cbdf5ad99b7a681cac86c39ca3f01fcb4e0f5aff6c12be1d6b62cf251a127eacfddd3514898c9a90d3b6483b3948bb5fb7fc3026ead71222b11e839108de25eed102", 0xca}, {&(0x7f0000000400)="0bb6a38a9caeb32be734b73e164e8ad6790885a6aec3a4560d9811529ec7739d338cca240da5289709a28cd9344a4f4693e8a460319aabca5be495f9beddbc5354ee5fbecf600848eef1b7a4dbd79918be04e4365967e37393ac0f321d4700ba11fcac5fc327999f7f5a462913ff28d371b6b9c9aa15d6709fa6c531fc1fcc3bffb2fcda", 0x84}], 0x2, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r4, r5, 0xffffffffffffffff, r2]}}, @cred={{0x1c}}], 0xc0, 0x40}}], 0x1, 0x24000015)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff7000/0x7000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000000f000/0x3000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x12, 0x3}]})
fstat(0xffffffffffffffff, 0x0)
r8 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000000c0)={0x80000000})

6.027829743s ago: executing program 1 (id=2162):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
madvise(&(0x7f0000376000/0x2000)=nil, 0x2000, 0x1)
write$cgroup_devices(r3, &(0x7f0000000000)=ANY=[], 0xfdef)
setsockopt$sock_int(r2, 0x1, 0x200000010, &(0x7f0000000000)=0x7, 0x4)
sendto$unix(r1, &(0x7f00000004c0)="a0a3", 0x2, 0x200080d1, 0x0, 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x10102, 0x0, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2200, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000280)='net/wireless\x00')
pread64(r6, &(0x7f0000000180)=""/246, 0xf6, 0x20d5)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000740)={0x0, @in={{0x2, 0x3ffc, @dev={0xac, 0x14, 0x14, 0x2a}}}, 0x4, 0x0, 0x0, 0x0, 0x5a1, 0x8, 0x4}, 0x9c)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f00000003c0)=0x9c)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c)
r7 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0xfffffffc, 0x0, 0x21, 0x181, 0x0, r6}, &(0x7f0000000140)=<r8=>0x0, &(0x7f0000000280)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x10c, &(0x7f0000000080)=0x3ff, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffffffffd55, 0x0})
io_uring_enter(r7, 0x47f9, 0x0, 0x0, 0x0, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf34)
recvfrom$inet6(r0, &(0x7f00000004c0)=""/209, 0xd1, 0x100, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0)
connect$unix(r6, &(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)

4.676100407s ago: executing program 2 (id=2163):
syz_io_uring_setup(0x1a89, &(0x7f0000000080)={0x0, 0xd67c, 0x200, 0x1, 0x336}, &(0x7f0000000000), &(0x7f0000000100)) (async)
r0 = syz_io_uring_setup(0x1a89, &(0x7f0000000080)={0x0, 0xd67c, 0x200, 0x1, 0x336}, &(0x7f0000000000), &(0x7f0000000100))
r1 = syz_io_uring_setup(0xb32, &(0x7f0000000600)={0x0, 0x10086f3, 0x2, 0x1, 0x2de, 0x0, r0}, &(0x7f0000000040), &(0x7f0000000280))
io_uring_enter(r1, 0x0, 0x0, 0x9, 0x0, 0x0)

4.453041734s ago: executing program 2 (id=2164):
r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x100)
write$binfmt_elf32(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c46000000800000000000000000030006000000000000000000380000000000000000191bda000020002126"], 0x69)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x110)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0xd01, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xa001, 0x45001}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040))
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)={'#! ', './file0', [{0x20, '\xe2.{'}], 0xa, "3390a7cc65a4ea59673aed88b64a927f421cd365b10f3f48c143c5ac6726691f4c6bd2809bcb5cd326bfc32085ffd01372a77744b674ba71a2d9d3b6b1bd84fdfaeeb2280ffb23e482fcec463b"}, 0x5c)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r7, {0xc, 0x4}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd0}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008081}, 0x20040054)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RENAMEAT={0x23, 0x30, 0x0, 0xffffffffffffffff, 0x0, 0x0})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$video4linux(&(0x7f0000000ac0), 0x2, 0x0)
close(r0)
execve(&(0x7f0000000800)='./file0\x00', 0x0, 0x0)

4.307453373s ago: executing program 0 (id=2165):
sendmmsg(0xffffffffffffffff, &(0x7f0000009100)=[{{&(0x7f00000001c0)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000240)="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", 0xff0}, {0x0}], 0x2}}], 0x1, 0x8040)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})

3.947910224s ago: executing program 0 (id=2166):
io_uring_setup(0xb92, &(0x7f0000001fc0)={0x0, 0x88f7, 0x1000, 0x40000002, 0x90})
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x209d, 0x9, 0x2008, 0x7ffffff9}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
socket$kcm(0x29, 0x2, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901)
syz_io_uring_setup(0x13ca, &(0x7f0000000140)={0x0, 0x2d42, 0x32, 0x2, 0x143, 0x0, r3}, 0x0, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000280)={0x0, 0x45885, 0x80, 0x0, 0x8, 0x0, r3}, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00')
syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
r4 = syz_usb_connect(0x3, 0x36, &(0x7f00000002c0)=ANY=[], 0x0)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x8, &(0x7f0000000080)=ANY=[])
syz_open_dev$evdev(&(0x7f0000000880), 0x200000000000002, 0x862b01)
socket$nl_generic(0x10, 0x3, 0x10)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001cc0), 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r5], 0x20)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = landlock_create_ruleset(&(0x7f0000000080)={0x8601, 0x2}, 0x18, 0x0)
landlock_restrict_self(r6, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_io_uring_setup(0x1237, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0x2b9}, &(0x7f0000000040), &(0x7f0000000200))

3.77462411s ago: executing program 4 (id=2167):
syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000080000000fdffffffffffffff00000000000000dee7a67bde0d3a2092e1241723bbc1325dec57416663d9aaadcdb83d5e83e4ff0b455fa7c350d56340b58a5e1c1a3693d3a4a3152c5001498bdaddad05fc21ea56cd74cb181e5c1839b55775e43d478dd8da5da29573744e46be"], 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xdde6, r0, 0x1000000}, 0x38)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000200)=ANY=[@ANYBLOB="080000000401000007000000"])
r1 = socket$key(0xf, 0x3, 0x2)
r2 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000100)={{0x2, 0x4e24, @empty}, {0x306, @random="60319951dd0d"}, 0x4, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'macsec0\x00'})
connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f000000bbc0)=[{{&(0x7f0000000600)=@caif=@dgm, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000480)=""/12, 0xc}, {&(0x7f0000000680)=""/210, 0xd2}, {&(0x7f0000000780)=""/91, 0x5b}, {&(0x7f0000000800)=""/34, 0x22}, {&(0x7f0000000940)=""/69, 0x45}, {&(0x7f00000009c0)=""/233, 0xe9}, {&(0x7f0000000ac0)=""/141, 0x8d}, {&(0x7f0000000b80)=""/213, 0xd5}, {&(0x7f00000008c0)=""/21, 0x15}, {&(0x7f0000003040)=""/4096, 0x1000}], 0xa, &(0x7f0000000d40)=""/234, 0xea}, 0x36}, {{&(0x7f0000000e40), 0x80, &(0x7f0000000fc0)=[{&(0x7f0000004040)=""/4096, 0x1000}, {&(0x7f0000000ec0)=""/132, 0x84}, {&(0x7f0000000f80)=""/22, 0x16}], 0x3}, 0x1}, {{&(0x7f0000001000)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001380)=[{&(0x7f0000005040)=""/4096, 0x1000}, {&(0x7f0000001080)=""/130, 0x82}, {&(0x7f0000001140)=""/94, 0x5e}, {&(0x7f00000011c0)=""/60, 0x3c}, {&(0x7f0000001200)=""/74, 0x4a}, {&(0x7f0000001280)=""/236, 0xec}, {&(0x7f0000006040)=""/4096, 0x1000}], 0x7, &(0x7f0000001400)=""/18, 0x12}, 0x5}, {{&(0x7f0000001500)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001440)=""/33, 0x21}, {&(0x7f0000001580)=""/251, 0xfb}, {&(0x7f0000001680)=""/165, 0xa5}, {&(0x7f0000001740)=""/137, 0x89}, {&(0x7f0000001800)=""/93, 0x5d}, {&(0x7f0000001880)=""/207, 0xcf}, {&(0x7f0000001980)=""/181, 0xb5}, {&(0x7f0000001a40)=""/36, 0x24}], 0x8, &(0x7f0000007040)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000001b00)=@xdp, 0x80, &(0x7f0000001e80), 0x0, &(0x7f0000001ec0)=""/200, 0xc8}, 0x5}, {{&(0x7f0000001fc0)=@qipcrtr, 0x80, &(0x7f0000002200)=[{&(0x7f0000008040)=""/4096, 0x1000}, {&(0x7f0000002040)=""/80, 0x50}, {&(0x7f00000020c0)=""/39, 0x27}, {&(0x7f0000002100)=""/163, 0xa3}, {&(0x7f00000021c0)=""/52, 0x34}], 0x5, &(0x7f0000009040)=""/106, 0x6a}, 0x9}, {{&(0x7f00000090c0)=@nl, 0x80, &(0x7f0000009280)=[{&(0x7f0000009140)}, {&(0x7f0000009180)=""/151, 0x97}, {&(0x7f0000009240)=""/1, 0x1}], 0x3, &(0x7f00000092c0)=""/249, 0xf9}, 0x3}, {{0x0, 0x0, &(0x7f000000b800)=[{&(0x7f00000093c0)=""/103, 0x5b}, {&(0x7f0000009440)=""/53, 0x35}, {&(0x7f0000009480)=""/237, 0xed}, {&(0x7f0000009580)=""/94, 0x5e}, {&(0x7f0000009600)=""/4096, 0x1000}, {&(0x7f000000a600)=""/29, 0x1d}, {&(0x7f000000a640)=""/186, 0xba}, {&(0x7f000000a700)=""/4096, 0x1000}, {&(0x7f000000b700)=""/242, 0xf2}], 0x9, &(0x7f000000b8c0)=""/153, 0x99}, 0x100}, {{&(0x7f000000b980)=@ieee802154={0x24, @long}, 0x80, &(0x7f000000bb00)=[{&(0x7f000000ba00)=""/195, 0xc3}], 0x1, &(0x7f000000bb40)=""/98, 0x62}, 0x8}], 0x9, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r8 = accept4(r7, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched_retired(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002280)=@delchain={0xd88, 0x65, 0x208, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xb}, {0x4, 0xfff1}, {0x9, 0xfff1}}, [@f_rsvp6={{0xa}, {0x38, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0xfffffffe, 0x5, 0xfffffff9}, {0x4c, 0x9, 0x2}, 0x0, 0x3, 0xa}}, @TCA_RSVP_SRC={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}, @f_rsvp6={{0xa}, {0xcc4, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x80, 0x0, 0x1}, {0x0, 0x4f6, 0x80}, 0xc, 0xe, 0xf7}}, @TCA_RSVP_POLICE={0x884, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x5, 0x16, 0x6240, 0x3ff, 0x9, 0x400, 0x3, 0x3, 0xffffffb2, 0xa, 0x6, 0x1, 0x7fffffff, 0x6, 0x10, 0x80000001, 0x7, 0x2, 0x401, 0x746, 0x6, 0x1, 0x3ff, 0x5, 0x1ff, 0x5, 0xffff, 0xd5, 0x70e5f5c0, 0x5, 0x7ff, 0x6, 0x5, 0xffffffff, 0x1059f7fb, 0x3, 0x6, 0x8, 0x1238, 0x5c, 0x3, 0x4, 0x8, 0x4, 0x7f, 0x1, 0x4, 0x7ab, 0x5, 0x9, 0x9, 0x1, 0x1969a3e9, 0x6, 0xfe, 0x4, 0x966, 0xffffff80, 0x2, 0x8, 0x6, 0x8, 0x31, 0x8, 0x8, 0x3, 0x0, 0x9, 0x8, 0x0, 0x1, 0x0, 0x166a, 0x1, 0x8, 0x8, 0x3, 0xffffff7f, 0x6, 0x8, 0x8, 0xc0c, 0xffffffff, 0x5, 0x0, 0x1, 0x2, 0x3ff, 0x7fff, 0x7, 0x2, 0x6, 0x40, 0xfffffffa, 0x1, 0x5, 0x80, 0x5, 0x3, 0x7, 0x790, 0xff, 0x7fff, 0x0, 0x0, 0x2, 0xfffffff9, 0x4, 0x0, 0x40, 0x5, 0x0, 0x0, 0x40, 0x401, 0x8001, 0x200, 0x372, 0xfffffffb, 0x80000001, 0x1, 0x3, 0x5, 0x2, 0x40, 0x7fff, 0x6, 0x5, 0x2, 0x7, 0xd, 0x7, 0x2, 0x69, 0x1e5, 0xc0e1, 0x80000001, 0xd, 0xffff, 0x4, 0x400, 0x1, 0x401, 0x8, 0x8, 0x1, 0x0, 0x6, 0xff, 0x5814, 0x0, 0x5, 0x1, 0xff, 0x7ee3, 0x2, 0xa, 0x0, 0x4, 0x6, 0x7fff, 0x40000013, 0x3, 0x7, 0x7, 0x2, 0x7, 0x0, 0x18, 0x1ff, 0xfff, 0x80, 0x10001, 0x4, 0x8000, 0x5, 0x1000, 0x2, 0xffffffff, 0x8, 0x1, 0x2088, 0x9, 0x10, 0xfffffffd, 0x2, 0x6, 0x9, 0x0, 0x7dd, 0xb5c, 0x1, 0x1, 0x2, 0x72, 0x0, 0x74a6d563, 0x6, 0x0, 0x8, 0x8001, 0xa0, 0x9, 0xc, 0x10001, 0xc51, 0x6, 0x3, 0x8000, 0x7ff, 0xa, 0x0, 0x2, 0x7, 0xb9b, 0x9, 0x6, 0xe9, 0x0, 0x3ff, 0x1, 0xa, 0x5, 0x9, 0x2, 0xf, 0x4, 0x5, 0x0, 0x3ea6, 0xc3c, 0x3, 0x9, 0xcb3, 0x6, 0x43e, 0xfffffff8, 0xf9, 0xedc5, 0x80000001, 0x0, 0x8001, 0x8, 0x8, 0x1, 0xffffffff, 0xfa820856, 0x3, 0x5d9, 0x6, 0x7ff, 0xe61, 0x10001, 0x100, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x7, 0x101, 0xc, 0x7fffffff, {0x9, 0x0, 0x5, 0x4, 0x0, 0x200}, {0x6e, 0x1, 0x50, 0x4, 0x3, 0x3}, 0x10000, 0x865, 0x7fff}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7ff, 0x9, 0x6, 0x3, 0x4, 0x0, 0xd, 0x7, 0x9, 0x3, 0x7, 0x6, 0x8e06, 0x93, 0xfffffff7, 0x10000, 0x6, 0xedc, 0x3, 0x3, 0xe, 0x4, 0x8, 0x8d, 0x2, 0x710, 0x0, 0x2, 0x3, 0x400, 0x6, 0x4, 0x0, 0x7, 0x80000000, 0x9, 0x3, 0x8, 0x5, 0x2, 0x0, 0x1, 0xffff, 0xfffff0fe, 0x1, 0x0, 0x4, 0x400, 0x4, 0x3, 0x0, 0xffffffff, 0x9, 0x5, 0x9, 0x5, 0x81, 0x6, 0xfff80000, 0x5, 0x401, 0x4, 0x8, 0x9, 0x7ff, 0x7, 0x5, 0x0, 0xc5, 0x6, 0x80000001, 0x77c, 0x0, 0x2, 0x7, 0x7f, 0x9, 0x9, 0x10, 0x0, 0x80000001, 0x0, 0xffffffff, 0x9, 0x101, 0x5, 0x1, 0x7, 0xa, 0x3, 0x8, 0x17, 0xffffffff, 0x272c, 0x8001, 0xe3, 0x100, 0x5, 0x2, 0x9, 0xffffff2f, 0xe, 0x35, 0x6, 0x3, 0x80000001, 0xab, 0xa, 0xffffffff, 0x81, 0x1, 0x3, 0xfff, 0xbc3, 0x0, 0x8, 0x5, 0x7f, 0x1, 0x9, 0x10001, 0x0, 0xc2, 0x10, 0xffff988e, 0x4, 0x9, 0xc3, 0x9, 0x1ff, 0x8, 0x9, 0xfd61, 0x1, 0x2, 0x4, 0x10001, 0xfff, 0x8, 0x7, 0x9, 0x80000000, 0x42, 0x6, 0x0, 0x0, 0x8, 0x7, 0x1000, 0x200, 0x7, 0xff, 0x7, 0x2c, 0x0, 0x8, 0x5, 0x6a, 0x5, 0x5, 0x6, 0x7, 0x5, 0x6, 0x6, 0x2891, 0x0, 0x100, 0x2671, 0xd731, 0x3ff, 0x3, 0x200, 0x9, 0x9, 0x7, 0x0, 0x7, 0x9, 0x4, 0x3, 0x9, 0x7, 0x8, 0x400c, 0x6, 0x7fffffff, 0x7, 0x17, 0x3, 0x0, 0x54, 0x4, 0xa, 0x8, 0x9, 0x1, 0x1, 0xffffffff, 0x4, 0xfffffff7, 0x4, 0x2, 0x8acf, 0x6, 0x300, 0x1, 0x6, 0x3, 0x2, 0x6, 0x3ff, 0x352, 0x9, 0x8000, 0x8, 0x6, 0xe, 0x1, 0x1, 0x9ca, 0x2, 0x9, 0x401, 0xf, 0xffffffff, 0x9, 0x1, 0x0, 0x5064, 0xfffffff0, 0x187b, 0x5, 0x7e4, 0x79, 0x8, 0x4, 0x7, 0x70000, 0x8, 0x7f, 0x8, 0x3, 0x100, 0xb6, 0x6, 0x7, 0x4, 0x8, 0x2, 0x1000, 0x3, 0xc, 0x401, 0x3, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7ff, 0x20000000, 0x3, 0xa, 0x1, {0x8, 0x1, 0x1000, 0x7ff, 0xfffc, 0x3}, {0x7, 0x0, 0x0, 0x0, 0x87, 0x4}, 0xfffffffc, 0x3, 0x9}}]}, @TCA_RSVP_POLICE={0x41c, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x5, 0x1dd5, 0x1ff, 0x4c4, 0x40, 0x40, 0xb, 0x0, 0x0, 0xb, 0x5, 0x3, 0x9, 0x0, 0x80000000, 0x359, 0x4, 0x0, 0x9, 0x2, 0x4, 0x2, 0x1, 0x6, 0xc3, 0x200, 0xc0, 0x4, 0x2, 0x0, 0x7, 0xffff, 0x2, 0x9, 0x2, 0x37, 0x3, 0x8, 0x4, 0x80, 0x80000000, 0x920f, 0x88, 0x2, 0x40, 0xfff, 0x2, 0x7, 0x3, 0x6e2, 0x7, 0xf028, 0x3, 0x101, 0x51ab700, 0x8, 0xe0, 0x5d84, 0x8, 0x9, 0x4, 0x6, 0x3, 0x7, 0xe, 0x0, 0x1, 0x40f9, 0x7, 0x2, 0xffff777a, 0xfffffff7, 0xff000000, 0x0, 0x1, 0x556a, 0x4, 0x40, 0xffff, 0x5c, 0xf, 0x80000001, 0xfffffc00, 0x3, 0x0, 0x8, 0x7, 0x800, 0x7, 0xe, 0xfffffffa, 0x9, 0x0, 0x7, 0x7, 0x10000, 0xffffffff, 0x8, 0x4, 0x4000000, 0x8, 0x10000, 0x2, 0x8, 0xffffff36, 0x0, 0x4, 0x0, 0x7d2d, 0x2, 0x76, 0x0, 0x4, 0x5, 0x2, 0x7, 0x7fffffff, 0x6, 0xb16, 0x7, 0x7f, 0x4, 0x7ff, 0x200, 0x0, 0x7, 0x5, 0x2, 0x5, 0x4, 0x4, 0x7, 0x81, 0x9, 0x1, 0x9, 0x800, 0x9, 0x3d7, 0xc, 0x1, 0x0, 0x9, 0x7f, 0x0, 0x6, 0x5, 0x1, 0xfff, 0x80000001, 0xfffffff9, 0x401, 0x4, 0x7, 0x3, 0xb3, 0x0, 0x5, 0x10000, 0x0, 0xe, 0x2, 0x2, 0x7, 0xfff, 0x401, 0x9, 0x0, 0x7fffffff, 0xf, 0x2bb1, 0x200, 0x81, 0x6, 0x8, 0x4, 0x3ff, 0x7, 0x7, 0x9, 0x9, 0xa, 0x5, 0x2, 0x2, 0x0, 0x0, 0x4, 0x1, 0xed6, 0x6, 0x3, 0x8000, 0x4, 0x6, 0x4, 0x6, 0x9, 0xffffd0d4, 0x7, 0x1, 0xe, 0x3, 0x9, 0x1, 0x7f, 0x5df98301, 0x3, 0x9, 0x4, 0x5, 0x3, 0x7, 0xffff0000, 0x5, 0x7ff, 0x5, 0x3, 0xffffffff, 0x6, 0x3, 0x100, 0x5, 0x8923, 0x9, 0x9, 0x1, 0x3, 0x7, 0x24e, 0x401, 0x2, 0x9, 0x5, 0x800, 0x80000000, 0x0, 0x0, 0x3, 0xffff0000, 0x8000, 0x8000, 0x1, 0xc36, 0xffffffff, 0x4010, 0x4, 0x7, 0x9120, 0x9, 0x0, 0xa, 0x80000001, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffd}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}]}]}}, @f_rsvp={{0x9}, {0x44, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x4, 0x401, 0x98}, {0x7, 0x8, 0xff}, 0xc, 0x4, 0x2}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x83b, 0x2a40ed8a, 0x3ff}, {0x1, 0x9, 0x6}, 0x5c, 0xf, 0xe}}]}}]}, 0xd88}}, 0x0)
recvmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000840)=""/127, 0x7f}, {&(0x7f0000001480)=""/127, 0x7f}, {&(0x7f00000000c0)=""/21, 0x15}, {&(0x7f00000004c0)=""/21, 0x15}], 0x11, 0x0, 0xfffffffffffffebc}, 0x4}], 0x2, 0x60, 0x0)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
r9 = socket$netlink(0x10, 0x3, 0x5)
sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0)
sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000000000000000030005000000000002000000ac1414aa000000000000000001001500000000000100140000000000010016000000000062ad0ca650af8e0cf5dd875e16e7d330cf59fed3455d495c2214d7313cf2c5c7b78efbb5cf0bd1762736cd0a76f2ea7ca230fd5831c59b9397d3c94b9d47c4a387ce5cbfdc74da4b2b21d9dbb786e44b642e960ba1cbe2918594fe96f26f7c1e27dc63937ff0924bc0060a8d6db9ff504a"], 0x68}, 0x1, 0x7}, 0x0)

3.275973333s ago: executing program 2 (id=2168):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) (async)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async)
sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}], 0x1}}], 0x1, 0x40488c1) (async)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004944) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010000080000200000004600003f0014aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0007009078001409c400050200000000000000000002d58838068b91000000"], 0x4e) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={<r5=>r1})
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={<r6=>r5})
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080))
close(r6)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000001000))
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug', 0x0, 0x0)
fcntl$notify(r7, 0x402, 0x8)
ioctl$TUNSETNOCSUM(r7, 0x400454c8, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r10 = socket(0x400000000010, 0x3, 0x0) (async)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)

3.123984414s ago: executing program 2 (id=2169):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6fc6ad42f4b1b0e9692ea54c7b6ef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, 0x0, 0x0)
r3 = syz_io_uring_setup(0x9f, &(0x7f0000000440)={0x0, 0xc394, 0x0, 0x0, 0x207}, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
recvmsg$unix(r1, &(0x7f00000002c0)={&(0x7f0000000340)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000540)=""/207, 0xcf}, {&(0x7f00000000c0)}], 0x3, &(0x7f00000001c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000080)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0)

2.814302224s ago: executing program 3 (id=2170):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000400)=[{0x2, 0x3, {0x1, 0x1, 0x8a52765649440692}, {0x0, 0xff, 0x1}, 0x0, 0xfe}, {0x3, 0x2, {0x1, 0x0, 0x1}, {0x2, 0xff, 0x3}, 0xfe, 0xfd}, {0x2, 0x2, {}, {0x2, 0xff}, 0x2, 0x1}, {0x2, 0x1, {0x0, 0xff, 0x1}, {0x1, 0xff, 0x2}}, {0x3, 0x2, {0x0, 0x2bf4cc24a9afe802, 0x3}, {0x0, 0x1, 0x4}, 0xff, 0xfd}, {0x3, 0x0, {0x3, 0x0, 0x3}, {0x0, 0x1, 0x1}}], 0xc0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x7}, 0x8)
r4 = socket(0x10, 0x803, 0x0)
lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280))
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x40082)
ioctl$USBDEVFS_CLAIM_PORT(r5, 0x80045518, &(0x7f0000000000)=0x1)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x19, 0x0, &(0x7f00000008c0))
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)

2.553952514s ago: executing program 3 (id=2171):
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x20040600)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x8, 0x4)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x0, 0x0, 0x3}, 0x10)
recvmmsg(r0, &(0x7f0000001640)=[{{0x0, 0x52, &(0x7f0000001500)=[{&(0x7f00000014c0)=""/22, 0x16}], 0x50}, 0x7}], 0x1, 0x40000003, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0)
r2 = userfaultfd(0x80c00)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4})
r3 = socket$isdn(0x22, 0x2, 0x26)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x80044944, &(0x7f00000002c0)={'wlan0\x00'})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000a80)={'syztnl0\x00', &(0x7f0000000a00)={'syztnl1\x00', <r6=>0x0, 0x20, 0x20, 0xa, 0x1, {{0xa, 0x4, 0x3, 0x34, 0x28, 0x68, 0x0, 0xfc, 0x2f, 0x0, @private=0xa010102, @loopback, {[@timestamp_prespec={0x44, 0x14, 0xfc, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x2a}, 0x2}, {@broadcast, 0xe48}]}]}}}}})
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r5, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8001}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x800}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000b80)=ANY=[@ANYBLOB="4000000007060101000000000002000002000005050001000700000005000100070000000900020073797a32000000000800064000000002050001000700000046efed4fd295662a22347cea762f3c76963bd616ca5de1b917a10190af75bdb612c370f3345a947bcfbe7eb248c88b22ef5e018c8a1ea6b6f7f9c4"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r7 = creat(&(0x7f0000000040)='./file0\x00', 0x101)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x900, &(0x7f0000000140)=[{&(0x7f0000000300)="d80000001e0081054e81f782db4cb904021d080006007c09e8fe08a10a000e800a00142603600e1208000fc00e000406a80016c008000e400400027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000180)={<r9=>0x0, 0x2, 0x1, [0x8, 0x9, 0x100000001, 0x10001, 0xffffffffffffffff], [0x10000, 0x9, 0xae, 0x10, 0x40, 0x5, 0x25f6, 0x1000, 0x7, 0x10001, 0x200, 0x2, 0xfffffffffffffff7, 0x5, 0x9, 0x7, 0x8, 0x1, 0x5, 0x355d, 0x2f, 0x8, 0xffffffffffffffff, 0x200, 0x9, 0x8, 0x6, 0x2, 0x5, 0x26, 0x2, 0x1, 0x0, 0x5a0, 0x3, 0x6, 0x80000001, 0xd, 0x8, 0x400, 0x4, 0x101, 0x8, 0xfffffffffffffffa, 0x5, 0x5, 0x828, 0x0, 0x7, 0x1, 0xb, 0xffff, 0x4, 0x9, 0x8, 0x7, 0x2, 0x80, 0x6daf, 0x7fffffffffffffff, 0x5, 0x5, 0x8001, 0x10, 0x7, 0x4af, 0x1000, 0x4, 0x3d7b, 0x6, 0x10, 0x1, 0xd6, 0x80, 0x5, 0x1, 0x6, 0x7, 0x4, 0x6, 0x2, 0x6, 0x3, 0x400, 0x81, 0x8, 0x400, 0x40000000000, 0x6, 0x6ec, 0x7b, 0x3, 0x5, 0x3, 0x8000000000000001, 0x6, 0x7fffffffffffffff, 0x2, 0x1e90000000, 0x9, 0x3, 0x8364, 0x0, 0x100, 0xb, 0x100000001, 0x1, 0x100000000, 0x9, 0x1d8, 0xfff, 0x8, 0x0, 0x0, 0x2, 0x5, 0x4, 0x6, 0x4, 0x9, 0x8000000000000001]})
ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f00000005c0)={r9, 0x4, 0x7abc8fc697c7593c, [0xffffffffffffffff, 0x81, 0x4, 0x3, 0x4], [0x6, 0x0, 0x7fff, 0xffff, 0x6, 0x101, 0x5, 0x6, 0x6, 0x8e2, 0x8, 0x10, 0x8001, 0x0, 0x3, 0x5, 0xeed5, 0x4, 0x1c, 0x1ceb, 0x2, 0x5, 0xfffffffffffffff8, 0x6a4, 0x7, 0x84, 0x2, 0x2, 0xc25, 0x6, 0x4, 0x37b0, 0x9a, 0xf, 0xfffffffffffffff8, 0x6, 0x8, 0x6, 0x2, 0x8, 0x6, 0x2, 0x1a1093c4, 0x2, 0x76877688, 0xffff, 0x6, 0x7f, 0x0, 0xeffd, 0x1, 0x1f9, 0x4, 0x3, 0x2, 0x7fffffffffffffff, 0x6, 0x6, 0x8000, 0x6, 0x3, 0x7fffffff, 0xa1c2, 0x9, 0x10, 0x0, 0x7, 0xa7e, 0x0, 0xfffffffffffffff9, 0x6, 0x5, 0x2, 0x6, 0x7, 0x80000000, 0x80f, 0x6, 0x3ff, 0x8, 0xffffffffffff8001, 0xd, 0x2, 0x2, 0x101, 0x4, 0x100000000, 0x6, 0x1, 0x0, 0x9, 0x3, 0x1, 0x6, 0x4, 0xf66, 0x449da26d, 0x0, 0x200, 0x10000, 0x7fff, 0x7f, 0x2, 0x80000001, 0x6, 0x1, 0x101, 0x6, 0x1, 0x100, 0x7, 0x3, 0xa4e, 0x1, 0x8000000000000001, 0x8359, 0x3, 0x6, 0x5, 0x6, 0x7]})
syz_clone(0x1080000, 0x0, 0xffffffffffffff8c, 0x0, 0x0, 0x0)

2.491991505s ago: executing program 1 (id=2172):
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4d014}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x1f, 0x7fffffff}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x0)
syz_emit_ethernet(0x1e, &(0x7f0000000180)=ANY=[@ANYBLOB="1f1e523a53ae8324c2000003000c0017dd0200002c952f0000000000"], &(0x7f00000001c0)={0x0, 0x4, [0x4de, 0x532, 0xf63, 0x2e4]})
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x204400, 0x0)
write$sysctl(r2, &(0x7f0000000040)='6\x00', 0xffffff62)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={<r3=>0xffffffffffffffff})
bind$unix(r3, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e)
connect$unix(r3, &(0x7f0000004d00)=@file={0x1, './file0\x00'}, 0x6e)
syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="02c90004000002"], 0x9)
socket$kcm(0xa, 0x5, 0x0)
r4 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0)
getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000000)={'broute\x00', 0x0, 0x0, 0x0, [0xffffffffffffffff, 0x3, 0x401, 0x2, 0x8, 0x6]}, &(0x7f0000000080)=0x78)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080))
bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xc)
ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6)
write$cgroup_type(r5, &(0x7f0000000280), 0xfffffeed)

2.392191004s ago: executing program 3 (id=2173):
socket(0x2, 0x80805, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r4 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r5, 0x0, 0x0)
r6 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0)
fcntl$setlease(r6, 0x400, 0x0)
mq_unlink(&(0x7f0000000340)='eth0\x00')
close(r6)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x40}}, 0x0)
write$uinput_user_dev(r1, &(0x7f00000005c0)={'syz0\x00', {0x0, 0x0, 0x3}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x1, 0x0, 0x0, 0x1, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x2, 0xb16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffd, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4002, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0xfffffffd, 0x0, 0x8, 0x9], [0x88000001, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0xffffffff, 0x0, 0x0, 0x100000, 0x2, 0x2, 0xe, 0x100001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffb, 0x4], [0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4, 0x0, 0xff, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x5]}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
syz_open_procfs(0x0, &(0x7f0000000440)='net/route\x00')
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)

2.341118641s ago: executing program 1 (id=2174):
syz_emit_ethernet(0x7a, &(0x7f0000000180)=ANY=[], 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000001c0)=0x3f0f)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"})
r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x3, 0xbfdffffc}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x75fa, 0xe475, 0x0, 0x0, 0x0)
r4 = syz_open_pts(r0, 0x0)
ioctl$TCSETS(r4, 0x5402, &(0x7f00000000c0)={0x3, 0x80000000, 0x401, 0xfffffffb, 0x5, "1faf3ef3fd5addcdd1254004268e153765c9c7"})
ioctl$TCFLSH(r4, 0x540b, 0x2)

2.255061544s ago: executing program 1 (id=2175):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000540)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x2, 0x4e23, @empty}, 0x2c4, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1, 0x7fffffffffffffff, 0xc})
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff, 0x94d5320913ca47c9}, 0x10)
ioctl$TIOCMGET(r2, 0x541e, &(0x7f0000000040))
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x40041)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r4, 0xfffffe83, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e, 0x8, 0x0, 0x0}}, 0x10)
r5 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000600)={0x2, @pix={0x1, 0xa, 0x34325852, 0x7, 0x0, 0x3, 0x7, 0x3ff, 0x0, 0x2, 0x2, 0x1}})
r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0)
sendfile(0xffffffffffffffff, r6, &(0x7f00000002c0)=0xffffffffffffff01, 0x8)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000})
r7 = epoll_create(0x101)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000080)={0x40000014})
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRESDEC=0x0])
fsopen(&(0x7f0000000000)='autofs\x00', 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, 0x0, 0x0)

1.924048787s ago: executing program 2 (id=2176):
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2) (async)
socket$inet6(0xa, 0x80002, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
close(r0)
socket(0x2b, 0x1, 0x1) (async)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x6c)
getpid() (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000190001091800000000fd010000000008000100ac141400080005000a0101020c00168008000300e0000002060015000600"/64], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/vlan0\x00') (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) (async)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x4)
write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) (async)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) (async)
syz_emit_ethernet(0x42, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00080600018688364ed9edc28bf44d3967191351dd0610000abbbbbbbbbbbbfe8000000000000000000000000000bbbbbbbbbbbbbb200100000000000000000000000000018a1619172cfe366f7f87fef268a1319710e03f9a3c4452615819a7180c78db12f4de020143776fefc1402443a8787d78cbec39216797bf407a1b77eab52afaa44335412f1dcc7a53dbe1542143d32dd145"], 0x0) (async)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)

586.414609ms ago: executing program 4 (id=2177):
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket(0x21, 0x2, 0x2)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
openat$fb0(0xffffff9c, &(0x7f00000002c0), 0x8000, 0x0)
r3 = socket(0x11, 0x3, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006ef0200010000001ffe0200000000ff08000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n'], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010)

584.338918ms ago: executing program 0 (id=2178):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0xff04}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x901}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000900)=""/196, 0xc4}, {&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000100)=""/85, 0x55}, {&(0x7f00000028c0)=""/4092, 0xffc}, {&(0x7f0000000a00)=""/249, 0xf9}], 0x5}, 0x80000000}], 0x4, 0x20, 0x0)
socket$netlink(0x10, 0x3, 0x12)

276.067187ms ago: executing program 2 (id=2179):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r1 = socket$inet6(0xa, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r2, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f"], 0x6c}}, 0x840)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
timer_create(0x0, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r6=>0x0})
r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r7, 0x402, 0x8000003d)
fcntl$setsig(r7, 0xa, 0x21)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x1, <r8=>0x0}, 0x8)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x416000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x10, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="186700000b000000000000000500000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b503000000000000850000000c000008b700000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x19, &(0x7f0000000080)=""/25, 0x41000, 0x53, '\x00', r6, @fallback=0x17, r7, 0x8, &(0x7f0000000200)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xe, 0x8, 0x40}, 0x10, r8, r9, 0x1, &(0x7f0000000340)=[r5, r4, r5, r5], &(0x7f0000000380)=[{0x2, 0x1, 0x3, 0x1}], 0x10, 0x7fffffff, @void, @value}, 0x94)
close(0x3)
getpgid(0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r11=>0x0})
sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

0s ago: executing program 0 (id=2180):
syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6003000000142f00fe8000000000000008000000000000bbfe8000000000000000120000000000aa000022eb", @ANYRES32=0x41424344], 0x0)

kernel console output (not intermixed with test programs):

uous mode
[  478.476267][T11506] team_slave_0: entered promiscuous mode
[  478.482247][ T1221] usb 3-1: new full-speed USB device number 73 using dummy_hcd
[  478.488497][T11506] team_slave_1: entered promiscuous mode
[  478.497200][T11506] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  478.507277][T11506] team0: left promiscuous mode
[  478.508693][ T1221] usb 3-1: device descriptor read/8, error -71
[  478.513859][T11506] team_slave_0: left promiscuous mode
[  478.525321][T11506] team_slave_1: left promiscuous mode
[  478.649067][ T1221] usb usb3-port1: unable to enumerate USB device
[  479.083623][T11517] sit0: entered promiscuous mode
[  479.095698][T11517] netlink: 'syz.4.1644': attribute type 1 has an invalid length.
[  479.106224][T11517] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1644'.
[  480.526110][T11542] binder: 11541:11542 ioctl c018620c 200000000380 returned -22
[  480.680694][T11544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1654'.
[  480.698162][   T24] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  480.716860][T11544] vlan2: entered promiscuous mode
[  480.899431][   T24] usb 1-1: Using ep0 maxpacket: 32
[  480.922931][   T24] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  480.949365][   T24] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  480.964213][   T24] usb 1-1: config 0 interface 0 has no altsetting 0
[  480.971880][   T24] usb 1-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00
[  480.994133][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  481.097331][   T24] usb 1-1: config 0 descriptor??
[  481.434481][T11553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  481.452754][T11553] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  481.519599][   T24] input: HID 28bd:0933 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:28BD:0933.000E/input/input37
[  481.528075][T11551] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  481.604852][   T24] uclogic 0003:28BD:0933.000E: input,hidraw0: USB HID v0.03 Mouse [HID 28bd:0933] on usb-dummy_hcd.0-1/input0
[  481.808878][   T24] usb 1-1: USB disconnect, device number 57
[  482.206453][T11565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1657'.
[  482.262267][T11565] bridge_slave_1: left allmulticast mode
[  482.268345][T11565] bridge_slave_1: left promiscuous mode
[  482.274399][T11565] bridge0: port 2(bridge_slave_1) entered disabled state
[  482.717698][T11565] bridge_slave_0: left allmulticast mode
[  482.724243][T11565] bridge_slave_0: left promiscuous mode
[  482.731013][T11565] bridge0: port 1(bridge_slave_0) entered disabled state
[  482.738489][ T5971] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  482.907972][ T5971] usb 4-1: Using ep0 maxpacket: 16
[  482.916421][ T5971] usb 4-1: config 209 has an invalid descriptor of length 92, skipping remainder of the config
[  482.927509][ T5971] usb 4-1: config 209 has 0 interfaces, different from the descriptor's value: 1
[  482.943567][ T5971] usb 4-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00
[  482.967328][ T5971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  483.357918][   T30] audit: type=1326 audit(1749994333.198:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11578 comm="syz.0.1664" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac1e18e929 code=0x0
[  483.541750][T11582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  483.553513][T11582] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  484.633902][ T5906] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  485.318021][   T24] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[  485.511274][T11609] netlink: 'syz.4.1671': attribute type 1 has an invalid length.
[  485.548296][ T5971] usb 4-1: USB disconnect, device number 65
[  485.602281][   T24] usb 3-1: Using ep0 maxpacket: 16
[  485.728863][   T24] usb 3-1: config index 0 descriptor too short (expected 1828, got 36)
[  485.737240][   T24] usb 3-1: config 0 has an invalid interface number: 0 but max is -1
[  485.768886][   T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  485.779392][   T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0
[  485.789167][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  485.809748][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  485.876217][T11609] 8021q: adding VLAN 0 to HW filter on device bond3
[  485.964973][   T24] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e
[  486.042570][T11613] bond3: (slave ip6erspan0): making interface the new active one
[  486.084551][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  486.121986][T11613] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link
[  486.168230][   T24] usb 3-1: Product: syz
[  486.203628][   T24] usb 3-1: Manufacturer: syz
[  486.238961][   T24] usb 3-1: SerialNumber: syz
[  486.286367][   T24] usb 3-1: config 0 descriptor??
[  486.441397][   T24] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected
[  486.477929][ T5971] usb 2-1: new high-speed USB device number 76 using dummy_hcd
[  486.523415][   T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87
[  486.549092][   T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7
[  486.649298][ T5971] usb 2-1: Using ep0 maxpacket: 16
[  486.663164][   T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81
[  486.682777][ T5971] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  486.752244][ T5971] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  486.782794][ T5971] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  486.813718][ T5971] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  486.824590][ T5971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  486.836020][ T5971] usb 2-1: Product: syz
[  486.841733][   T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1
[  486.853385][ T5971] usb 2-1: Manufacturer: syz
[  486.898737][ T5971] usb 2-1: SerialNumber: syz
[  486.907924][   T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2
[  487.038310][   T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85
[  487.047438][   T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5
[  487.059216][   T24] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  487.071652][   T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83
[  487.079824][   T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3
[  487.087686][   T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4
[  487.095992][   T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86
[  487.106384][   T24] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6
[  487.145053][   T24] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  487.402877][ T5971] usb 2-1: 0:2 : does not exist
[  487.404984][T11624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1676'.
[  487.447265][T11624] vlan2: entered promiscuous mode
[  487.455894][T11624] batadv0: entered promiscuous mode
[  487.548176][ T5971] usb 2-1: USB disconnect, device number 76
[  487.651636][ T8362] udevd[8362]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  488.443760][T11631] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  488.468253][ T1221] usb 3-1: USB disconnect, device number 74
[  488.488752][ T1221] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  488.628936][ T1221] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  488.683348][ T1221] keyspan 3-1:0.0: device disconnected
[  489.453270][   T30] audit: type=1326 audit(1749994339.298:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11656 comm="syz.3.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb27b8e929 code=0x7ffc0000
[  489.635919][ T1221] usb 2-1: new high-speed USB device number 77 using dummy_hcd
[  489.653132][   T30] audit: type=1326 audit(1749994339.298:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11656 comm="syz.3.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb27b8e929 code=0x7ffc0000
[  489.758140][ T5906] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  489.780171][T11659] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1687'.
[  489.791602][   T30] audit: type=1326 audit(1749994339.298:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11656 comm="syz.3.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb27b8d290 code=0x7ffc0000
[  489.840993][ T1221] usb 2-1: config 0 has no interfaces?
[  489.851552][ T1221] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  489.893327][ T1221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  489.894328][   T30] audit: type=1326 audit(1749994339.298:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11656 comm="syz.3.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb27b8e929 code=0x7ffc0000
[  489.923971][    C1] vkms_vblank_simulate: vblank timer overrun
[  489.954271][ T1221] usb 2-1: Product: syz
[  489.954289][ T5906] usb 4-1: config 0 has an invalid interface number: 255 but max is 0
[  489.971435][ T5906] usb 4-1: config 0 has no interface number 0
[  489.984967][ T5906] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  490.001993][   T30] audit: type=1326 audit(1749994339.298:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11656 comm="syz.3.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcb27b8e929 code=0x7ffc0000
[  490.024251][    C1] vkms_vblank_simulate: vblank timer overrun
[  490.040617][ T5906] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  490.058006][ T1221] usb 2-1: Manufacturer: syz
[  490.068060][T11661] xfrm0: entered promiscuous mode
[  490.078052][ T1221] usb 2-1: SerialNumber: syz
[  490.091191][ T5906] usb 4-1: config 0 interface 255 has no altsetting 0
[  490.096380][T11661] xfrm0: entered allmulticast mode
[  490.114737][ T5906] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  490.115686][ T1221] usb 2-1: config 0 descriptor??
[  490.148112][   T30] audit: type=1326 audit(1749994339.298:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11656 comm="syz.3.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb27b8e929 code=0x7ffc0000
[  490.186121][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  490.210782][ T5906] usb 4-1: config 0 descriptor??
[  490.223790][   T30] audit: type=1326 audit(1749994339.298:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11656 comm="syz.3.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb27b8e929 code=0x7ffc0000
[  490.279082][ T5906] ums-realtek 4-1:0.255: USB Mass Storage device detected
[  490.326046][   T30] audit: type=1326 audit(1749994339.298:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11656 comm="syz.3.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb27b8e929 code=0x7ffc0000
[  490.526310][   T30] audit: type=1326 audit(1749994339.308:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11656 comm="syz.3.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb27b8e929 code=0x7ffc0000
[  490.557993][   T30] audit: type=1326 audit(1749994339.308:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11656 comm="syz.3.1686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb27b8e929 code=0x7ffc0000
[  490.591425][ T5907] usb 2-1: USB disconnect, device number 77
[  490.862736][T11675] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  490.891784][ T5907] usb 4-1: USB disconnect, device number 66
[  490.917418][T11680] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1691'.
[  491.321776][T11693] syzkaller1: tun_chr_ioctl cmd 1074025681
[  491.408095][ T5907] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  491.495581][T11701] input: syz0 as /devices/virtual/input/input38
[  491.660874][ T5907] usb 4-1: Using ep0 maxpacket: 8
[  491.671990][ T5907] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  491.682600][ T5907] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  491.715630][ T5907] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  491.756625][ T5907] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  491.793159][ T5907] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  491.830060][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  492.386882][T11710] netlink: zone id is out of range
[  492.404459][T11710] netlink: zone id is out of range
[  492.519246][ T5907] usb 4-1: GET_CAPABILITIES returned 0
[  492.607902][ T5907] usbtmc 4-1:16.0: can't read capabilities
[  492.821038][ T5907] usb 4-1: USB disconnect, device number 67
[  494.117998][ T5906] usb 3-1: new full-speed USB device number 75 using dummy_hcd
[  494.338195][ T5847] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  494.342822][ T5906] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15
[  494.377681][ T5906] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  494.421955][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  494.453514][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  494.480488][ T5906] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  494.499027][T11749] input: syz0 as /devices/virtual/input/input39
[  494.507208][ T5847] usb 4-1: Using ep0 maxpacket: 16
[  494.562920][ T5847] usb 4-1: config 0 has an invalid interface number: 125 but max is 0
[  494.614468][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  494.637037][ T5906] usb 3-1: Product: syz
[  494.645001][ T5847] usb 4-1: config 0 has no interface number 0
[  494.647845][ T5906] usb 3-1: Manufacturer: syz
[  494.693511][ T5847] usb 4-1: New USB device found, idVendor=27c6, idProduct=5395, bcdDevice=86.f0
[  494.696564][ T5906] usb 3-1: SerialNumber: syz
[  494.710833][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  494.719520][ T5847] usb 4-1: Product: syz
[  494.723784][ T5847] usb 4-1: Manufacturer: syz
[  494.739538][ T5847] usb 4-1: SerialNumber: syz
[  494.763066][ T5847] usb 4-1: config 0 descriptor??
[  494.831240][ T5906] usb 3-1: config 0 descriptor??
[  494.897545][T11728] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  494.973859][T11731] netlink: 268 bytes leftover after parsing attributes in process `syz.3.1707'.
[  494.985852][T11731] unsupported nla_type 65024
[  495.444181][T11756] netlink: 'syz.2.1706': attribute type 10 has an invalid length.
[  495.630619][ T5906] powermate: Expected payload of 3--6 bytes, found 64 bytes!
[  495.633432][ T5906] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input40
[  496.154615][    C1] powermate: config urb returned -71
[  496.160164][    C1] powermate: config urb returned -71
[  496.165775][    C1] powermate: config urb returned -71
[  496.171747][ T5859] usb 3-1: USB disconnect, device number 75
[  496.177835][    C1] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  496.498266][ T5906] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  496.640376][ T5906] usb 1-1: device descriptor read/64, error -71
[  496.674540][ T5847] usb 2-1: new high-speed USB device number 78 using dummy_hcd
[  496.901317][ T5847] usb 2-1: Using ep0 maxpacket: 8
[  496.908798][ T5847] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  496.942218][ T5847] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  496.957894][ T5906] usb 1-1: new high-speed USB device number 60 using dummy_hcd
[  496.970170][ T5847] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  496.989279][ T5847] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  497.006418][ T5847] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  497.015729][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  497.078494][ T5971] usb 4-1: USB disconnect, device number 68
[  497.134957][ T5847] usbtmc 2-1:16.0: bulk endpoints not found
[  497.181464][ T5906] usb 1-1: device descriptor read/64, error -71
[  497.308350][ T5906] usb usb1-port1: attempt power cycle
[  497.356338][ T5859] usb 2-1: USB disconnect, device number 78
[  497.688120][ T5906] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  497.745997][ T5906] usb 1-1: device descriptor read/8, error -71
[  498.008008][ T5906] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  498.228907][ T5906] usb 1-1: device not accepting address 62, error -71
[  498.247342][ T5906] usb usb1-port1: unable to enumerate USB device
[  498.476858][T11797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1728'.
[  498.556737][T11797] vlan2: entered promiscuous mode
[  501.738086][T11840] netlink: 'syz.2.1741': attribute type 1 has an invalid length.
[  501.753008][T11841] Cannot find add_set index 3 as target
[  501.957579][T11841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1738'.
[  502.086427][T11840] 8021q: adding VLAN 0 to HW filter on device bond5
[  502.708283][ T5847] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[  502.859697][ T5847] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  502.869464][ T5847] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  502.963622][ T5847] usb 3-1: config 0 descriptor??
[  503.032966][T11860] netlink: 'syz.4.1746': attribute type 10 has an invalid length.
[  503.065418][T11859] netlink: 'syz.4.1746': attribute type 10 has an invalid length.
[  503.077919][T11859] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1746'.
[  503.087300][T11859] dummy0: entered promiscuous mode
[  503.118040][T11859] batman_adv: batadv0: Interface deactivated: dummy0
[  503.127699][T11860] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1746'.
[  503.157317][T11859] batman_adv: batadv0: Removing interface: dummy0
[  503.190794][ T5847] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  503.209578][ T5847] [drm:udl_init] *ERROR* Selecting channel failed
[  503.244397][T11859] bridge0: port 4(dummy0) entered blocking state
[  503.285636][T11859] bridge0: port 4(dummy0) entered disabled state
[  503.300485][ T5847] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2
[  503.330990][ T5847] [drm] Initialized udl on minor 2
[  503.343384][T11859] dummy0: entered allmulticast mode
[  503.369268][ T5847] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  503.387493][T11859] bridge0: port 4(dummy0) entered blocking state
[  503.394018][T11859] bridge0: port 4(dummy0) entered forwarding state
[  503.436033][ T5847] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  503.478782][ T1221] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  503.513077][ T5847] usb 3-1: USB disconnect, device number 76
[  503.520807][ T1221] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  504.900041][T11888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1754'.
[  504.917893][ T1221] usb 5-1: new full-speed USB device number 60 using dummy_hcd
[  504.928428][T11888] vlan2: entered promiscuous mode
[  505.104573][ T1221] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  505.126034][ T1221] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  505.161337][ T1221] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  505.235728][ T1221] usb 5-1: New USB device found, idVendor=1b96, idProduct=0009, bcdDevice= 0.00
[  505.255715][ T1221] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  505.287069][ T1221] usb 5-1: config 0 descriptor??
[  505.799106][ T1221] usbhid 5-1:0.0: can't add hid device: -71
[  505.825093][ T1221] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  505.848864][ T1221] usb 5-1: USB disconnect, device number 60
[  506.032175][T11917] netlink: 'syz.3.1761': attribute type 1 has an invalid length.
[  506.121333][T11917] 8021q: adding VLAN 0 to HW filter on device bond4
[  506.744042][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  506.758002][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  506.768914][ T5906] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  506.950527][ T5906] usb 4-1: Using ep0 maxpacket: 8
[  506.984595][ T5906] usb 4-1: config 3 has an invalid interface number: 80 but max is 0
[  507.006849][ T5906] usb 4-1: config 3 has an invalid interface number: 210 but max is 0
[  507.036805][ T5906] usb 4-1: config 3 contains an unexpected descriptor of type 0x2, skipping
[  507.077891][ T5906] usb 4-1: config 3 has 2 interfaces, different from the descriptor's value: 1
[  507.087682][ T5906] usb 4-1: config 3 has no interface number 0
[  507.117853][ T5906] usb 4-1: config 3 has no interface number 1
[  507.124106][ T5906] usb 4-1: config 3 interface 80 altsetting 64 bulk endpoint 0x7 has invalid maxpacket 64
[  507.157311][ T5906] usb 4-1: config 3 interface 80 altsetting 64 has a duplicate endpoint with address 0x6, skipping
[  507.168541][ T5907] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[  507.183198][T11942] netlink: 'syz.1.1769': attribute type 1 has an invalid length.
[  507.192919][ T5906] usb 4-1: config 3 interface 80 altsetting 64 has an invalid descriptor for endpoint zero, skipping
[  507.207185][ T5906] usb 4-1: config 3 interface 80 altsetting 64 has 5 endpoint descriptors, different from the interface descriptor's value: 13
[  507.232206][ T5906] usb 4-1: config 3 interface 210 altsetting 37 has an invalid descriptor for endpoint zero, skipping
[  507.249628][ T5906] usb 4-1: config 3 interface 210 altsetting 37 endpoint 0xF has invalid maxpacket 512, setting to 64
[  507.263178][T11945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1769'.
[  507.263178][T11948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1769'.
[  507.285286][T11942] bond4: entered promiscuous mode
[  507.291642][T11942] bond4: entered allmulticast mode
[  507.297180][ T5906] usb 4-1: config 3 interface 210 altsetting 37 has a duplicate endpoint with address 0x7, skipping
[  507.320042][ T5906] usb 4-1: config 3 interface 210 altsetting 37 has an invalid descriptor for endpoint zero, skipping
[  507.348070][ T5907] usb 3-1: device descriptor read/64, error -71
[  507.354625][ T5906] usb 4-1: config 3 interface 210 altsetting 37 has 8 endpoint descriptors, different from the interface descriptor's value: 9
[  507.380053][ T5906] usb 4-1: config 3 interface 80 has no altsetting 0
[  507.386923][ T5906] usb 4-1: config 3 interface 210 has no altsetting 0
[  507.424126][ T5906] usb 4-1: New USB device found, idVendor=1e2d, idProduct=0082, bcdDevice=33.fe
[  507.438478][ T1221] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  507.447829][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  507.455933][ T5906] usb 4-1: Product: syz
[  507.462281][ T5906] usb 4-1: Manufacturer: syz
[  507.466968][ T5906] usb 4-1: SerialNumber: syz
[  507.468180][ T5847] usb 5-1: new low-speed USB device number 61 using dummy_hcd
[  507.483491][T11924] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  507.597925][ T5907] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[  507.607993][ T1221] usb 1-1: Using ep0 maxpacket: 8
[  507.613334][ T5847] usb 5-1: device descriptor read/64, error -71
[  507.630238][ T1221] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  507.647751][ T1221] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  507.658499][ T1221] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  507.674952][ T1221] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  507.689130][ T1221] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  507.701802][ T1221] usb 1-1: Manufacturer: ೵侻ਙȯﺨ╹沛�
[  507.705912][ T5906] option 4-1:3.80: GSM modem (1-port) converter detected
[  507.729564][ T5907] usb 3-1: device descriptor read/64, error -71
[  507.791990][ T5906] usb 4-1: USB disconnect, device number 69
[  507.812667][ T5906] option 4-1:3.80: device disconnected
[  507.841065][ T5907] usb usb3-port1: attempt power cycle
[  507.868490][ T5847] usb 5-1: new low-speed USB device number 62 using dummy_hcd
[  507.926362][ T1221] usb 1-1: 0:2 : does not exist
[  507.959529][ T1221] usb 1-1: USB disconnect, device number 63
[  508.021074][ T5847] usb 5-1: device descriptor read/64, error -71
[  508.129410][ T5847] usb usb5-port1: attempt power cycle
[  508.189294][ T5907] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[  508.213384][ T5907] usb 3-1: device descriptor read/8, error -71
[  508.293679][T11961] netlink: 'syz.1.1774': attribute type 1 has an invalid length.
[  508.332106][T11961] 8021q: adding VLAN 0 to HW filter on device bond5
[  508.457906][ T5907] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[  508.468049][ T5847] usb 5-1: new low-speed USB device number 63 using dummy_hcd
[  508.479694][ T5907] usb 3-1: device descriptor read/8, error -71
[  508.499443][ T5847] usb 5-1: device descriptor read/8, error -71
[  508.603293][ T5907] usb usb3-port1: unable to enumerate USB device
[  508.667955][ T1221] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  508.745364][ T5847] usb 5-1: new low-speed USB device number 64 using dummy_hcd
[  508.785984][ T5847] usb 5-1: device descriptor read/8, error -71
[  508.878591][ T1221] usb 4-1: device descriptor read/64, error -71
[  508.909754][ T5847] usb usb5-port1: unable to enumerate USB device
[  509.127878][ T1221] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  509.268047][ T1221] usb 4-1: device descriptor read/64, error -71
[  509.396708][ T1221] usb usb4-port1: attempt power cycle
[  509.748219][ T1221] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  509.778624][ T1221] usb 4-1: device descriptor read/8, error -71
[  509.983378][T11984] xt_HMARK: proto mask must be zero with L3 mode
[  510.017965][ T1221] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  510.038545][T11985] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1781'.
[  510.049676][T11985] netlink: 'syz.2.1781': attribute type 1 has an invalid length.
[  510.059079][ T1221] usb 4-1: device descriptor read/8, error -71
[  510.178486][ T1221] usb usb4-port1: unable to enumerate USB device
[  510.627981][ T1221] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  510.788061][ T1221] usb 5-1: Using ep0 maxpacket: 32
[  510.804226][ T1221] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  510.824081][ T1221] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  510.849268][ T1221] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83
[  510.868100][ T1221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  510.887407][ T1221] usb 5-1: Product: syz
[  510.892030][ T1221] usb 5-1: Manufacturer: syz
[  510.896688][ T1221] usb 5-1: SerialNumber: syz
[  510.917069][ T1221] usb 5-1: config 0 descriptor??
[  511.040794][T11997] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1785'.
[  511.055905][T11997] tipc: New replicast peer: 0.0.0.0
[  511.064401][T11997] tipc: Enabled bearer <udp:syz0>, priority 10
[  511.088149][T12001] netlink: 'syz.0.1786': attribute type 11 has an invalid length.
[  511.147096][ T1221] snd-usb-6fire 5-1:0.0: unknown device firmware state received from device:
[  511.179470][ T1221] f6 f2 2c fa 89 99 d8 d7 
[  511.185649][ T1221] snd-usb-6fire 5-1:0.0: probe with driver snd-usb-6fire failed with error -5
[  511.347079][T12010] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1791'.
[  511.347920][ T5859] usb 5-1: USB disconnect, device number 65
[  511.361485][T12010] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1791'.
[  511.486774][T12017] syz.0.1794 (12017): /proc/12016/oom_adj is deprecated, please use /proc/12016/oom_score_adj instead.
[  511.617188][ T5907] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[  511.797861][ T5907] usb 3-1: Using ep0 maxpacket: 16
[  511.809095][ T5907] usb 3-1: config 0 has an invalid interface number: 194 but max is 0
[  511.828859][ T5907] usb 3-1: config 0 has no interface number 0
[  511.846523][ T5907] usb 3-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=b4.25
[  511.876350][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  511.907903][ T5859] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  512.044477][ T5907] usb 3-1: Product: syz
[  512.065842][ T5907] usb 3-1: Manufacturer: syz
[  512.085708][ T5907] usb 3-1: SerialNumber: syz
[  512.165483][ T5907] usb 3-1: config 0 descriptor??
[  512.181149][ T5847] tipc: Node number set to 2886997058
[  512.218648][ T5907] cypress_cy7c63 3-1:0.194: Cypress CY7C63xxx device now attached
[  512.314659][ T5859] usb 1-1: config 0 has no interfaces?
[  512.368901][ T5859] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  512.386943][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  512.387008][ T1221] usb 5-1: new low-speed USB device number 66 using dummy_hcd
[  512.417827][ T5859] usb 1-1: Product: syz
[  512.430183][ T5859] usb 1-1: Manufacturer: syz
[  512.447197][ T5907] usb 3-1: USB disconnect, device number 81
[  512.470376][ T5907] cypress_cy7c63 3-1:0.194: Cypress CY7C63xxx device now disconnected
[  512.483752][ T5859] usb 1-1: SerialNumber: syz
[  512.529959][ T5859] usb 1-1: config 0 descriptor??
[  512.599625][ T1221] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  512.607740][ T1221] usb 5-1: config 0 has no interface number 0
[  512.637132][ T1221] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  512.662204][ T1221] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  512.686783][ T1221] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  512.709078][ T1221] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  512.740289][ T1221] usb 5-1: config 0 descriptor??
[  512.756181][T12027] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  512.786765][ T1221] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  513.125346][ T1221] usb 5-1: USB disconnect, device number 66
[  513.446521][T12038] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1799'.
[  513.456303][T12038] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  513.488058][ T5859] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[  513.668134][ T5859] usb 3-1: Using ep0 maxpacket: 16
[  513.681945][ T5859] usb 3-1: config 1 has an invalid descriptor of length 188, skipping remainder of the config
[  513.700531][ T5859] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  513.714600][ T5859] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  513.727040][ T5859] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  513.736583][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  513.765827][ T5859] usb 3-1: Product: syz
[  513.775972][ T5859] usb 3-1: Manufacturer: syz
[  513.787618][ T5859] usb 3-1: SerialNumber: syz
[  514.031005][ T5859] usb 3-1: unit 1 not found!
[  514.252111][ T5907] usb 2-1: new high-speed USB device number 79 using dummy_hcd
[  514.294255][ T5859] usb 3-1: USB disconnect, device number 82
[  514.483162][ T8362] udevd[8362]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  514.499639][ T5907] usb 2-1: Using ep0 maxpacket: 16
[  514.524459][ T5907] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  514.628929][ T5907] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  514.679845][ T5907] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  514.749198][ T5907] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  514.758550][ T5907] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.767102][ T5907] usb 2-1: Product: syz
[  514.773694][ T5907] usb 2-1: Manufacturer: syz
[  514.782793][ T5907] usb 2-1: SerialNumber: syz
[  515.156969][ T5847] usb 1-1: USB disconnect, device number 64
[  515.329677][T12067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1809'.
[  515.549945][ T5907] usb 2-1: 0:2 : does not exist
[  515.669791][T12067] vlan2: entered promiscuous mode
[  515.951688][T12069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  515.960923][T12069] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  517.037899][ T5906] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  517.198230][ T5906] usb 1-1: Using ep0 maxpacket: 8
[  517.222884][ T5906] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  517.257654][ T5906] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  517.307559][ T5906] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  517.322589][ T5906] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  517.337180][ T5906] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  517.361516][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  517.607177][ T5906] usb 1-1: GET_CAPABILITIES returned 0
[  517.608103][ T1221] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[  517.621805][ T5906] usbtmc 1-1:16.0: can't read capabilities
[  517.778211][ T1221] usb 5-1: Using ep0 maxpacket: 16
[  517.803436][ T1221] usb 5-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  517.823070][T12090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  517.858312][ T1221] usb 5-1: config 0 interface 0 has no altsetting 0
[  517.865118][ T1221] usb 5-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.00
[  517.895246][T12090] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  517.947544][T12090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  517.988886][ T1221] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  518.000365][T12090] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  518.030588][ T1221] usb 5-1: config 0 descriptor??
[  518.173682][ T5907] usb 2-1: 1:0: failed to get current value for ch 0 (-22)
[  518.222980][   T24] usb 1-1: USB disconnect, device number 65
[  518.244899][T12101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  518.303648][T12101] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  518.351197][T12101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  518.353385][ T5907] usb 2-1: USB disconnect, device number 79
[  518.402353][T12101] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  518.421827][T12121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  518.485531][ T8362] udevd[8362]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  518.506768][T12121] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  518.551359][ T1221] usb 5-1: string descriptor 0 read error: -71
[  518.586345][ T1221] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input41
[  518.664341][ T5192] bcm5974 5-1:0.0: could not read from device
[  518.791675][ T1221] usb 5-1: USB disconnect, device number 67
[  518.798028][ T5192] bcm5974 5-1:0.0: could not read from device
[  518.815678][ T5192] bcm5974 5-1:0.0: could not read from device
[  519.028363][ T5847] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  519.058474][  T977] usb 2-1: new high-speed USB device number 80 using dummy_hcd
[  519.187960][ T5971] usb 3-1: new low-speed USB device number 83 using dummy_hcd
[  519.223057][ T5847] usb 4-1: Using ep0 maxpacket: 8
[  519.241464][ T5847] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  519.252690][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11
[  519.265413][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024
[  519.279181][  T977] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  519.288061][  T977] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
[  519.298698][  T977] usb 2-1: config 0 has no interface number 0
[  519.304935][  T977] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  519.326619][ T5847] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  519.337517][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  519.346200][  T977] usb 2-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00
[  519.356503][ T5847] usb 4-1: Product: syz
[  519.361106][ T5971] usb 3-1: No LPM exit latency info found, disabling LPM.
[  519.368784][ T5847] usb 4-1: Manufacturer: syz
[  519.373466][ T5847] usb 4-1: SerialNumber: syz
[  519.379317][  T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  519.388499][ T5971] usb 3-1: config 1 interface 0 altsetting 60 endpoint 0x81 has invalid maxpacket 64, setting to 8
[  519.398577][ T5907] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[  519.403265][ T5971] usb 3-1: config 1 interface 0 altsetting 60 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  519.421664][  T977] usb 2-1: config 0 descriptor??
[  519.428427][ T5847] usb 4-1: config 0 descriptor??
[  519.434586][T12131] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  519.445722][ T5971] usb 3-1: config 1 interface 0 has no altsetting 0
[  519.568081][ T5907] usb 5-1: Using ep0 maxpacket: 16
[  519.580865][ T5907] usb 5-1: config 0 has an invalid interface number: 126 but max is 0
[  519.593034][ T5907] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  519.609075][ T5907] usb 5-1: config 0 has no interface number 0
[  519.617391][ T5907] usb 5-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  519.634722][ T5907] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024
[  519.652372][ T5907] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  519.655415][T12131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  519.673782][ T5907] usb 5-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 147
[  519.695086][T12131] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  519.738367][ T5907] usb 5-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  519.761826][   T24] usb 4-1: USB disconnect, device number 74
[  519.774812][ T5907] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88
[  519.801439][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  519.801987][  T977] usb 2-1: USB disconnect, device number 80
[  519.817232][ T5907] usb 5-1: config 0 descriptor??
[  519.823568][T12143] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  519.836151][T12143] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  519.911450][ T5907] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  520.161835][ T5907] usb 5-1: USB disconnect, device number 68
[  520.361298][T12171] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1829'.
[  520.454264][T12173] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  520.567648][T12171] bond2: entered promiscuous mode
[  520.572936][T12171] bond2: entered allmulticast mode
[  520.579691][T12171] 8021q: adding VLAN 0 to HW filter on device bond2
[  520.747421][   T30] kauditd_printk_skb: 36 callbacks suppressed
[  520.747442][   T30] audit: type=1326 audit(1749994370.588:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12174 comm="syz.3.1831" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb27b8e929 code=0x0
[  520.775878][    C1] vkms_vblank_simulate: vblank timer overrun
[  520.958097][ T5907] usb 2-1: new high-speed USB device number 81 using dummy_hcd
[  520.998579][T12185] netlink: 'syz.4.1832': attribute type 1 has an invalid length.
[  521.097875][ T5907] usb 2-1: device descriptor read/64, error -71
[  521.142583][T12185] 8021q: adding VLAN 0 to HW filter on device bond4
[  521.347912][ T5907] usb 2-1: new high-speed USB device number 82 using dummy_hcd
[  521.518078][ T5907] usb 2-1: device descriptor read/64, error -71
[  521.667205][ T5907] usb usb2-port1: attempt power cycle
[  521.708581][ T5906] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[  521.869669][ T5906] usb 5-1: Using ep0 maxpacket: 32
[  521.886016][ T5906] usb 5-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 1024
[  521.906226][ T5971] usb 3-1: New USB device found, idVendor=062a, idProduct=5110, bcdDevice= 0.40
[  521.906286][ T5906] usb 5-1: config 1 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 16
[  521.926576][ T5971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  521.936727][ T5906] usb 5-1: config 1 interface 0 has no altsetting 0
[  521.939511][ T5971] usb 3-1: Product: а
[  521.947648][ T5971] usb 3-1: Manufacturer: á°Š
[  521.948547][   T24] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[  521.993184][ T5906] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  522.031076][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  522.036758][ T5971] usb 3-1: can't set config #1, error -71
[  522.039640][ T5907] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  522.060630][ T5971] usb 3-1: USB disconnect, device number 83
[  522.066799][ T5906] usb 5-1: Product: 囩�趼㹓
[  522.081529][ T5906] usb 5-1: Manufacturer: ⛳⓸唆"ⱙ窪舌蒺빿䜂✷錽�鳬�ꠊ�ં㬘튲�㭗ퟻꯒ峧ǜᎳ൑뱱鑋㛈�䥃櫷鰯���ٟ侌錤�䂲ꂩꎪ銢ദ猃�䵯훑矩�﹫줃⫂
[  522.129198][ T5906] usb 5-1: SerialNumber: Æ윮��駤뚫Ɬ剗ꘋ呠ᵴ㪯왡䬵�侟쇊諸﫩템ᨢ�ﵬ앖ꇯ蛞週滅喇�箤㉾㊸찿浉�
[  522.146658][ T5907] usb 2-1: device descriptor read/8, error -71
[  522.207941][   T24] usb 4-1: Using ep0 maxpacket: 32
[  522.229221][   T24] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  522.241472][T12194] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  522.249984][   T24] usb 4-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config
[  522.262096][T12194] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  522.275030][   T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  522.293839][   T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  522.306455][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  522.315620][   T24] usb 4-1: Product: ៧ॱ舠��㆕뒆스ร㖞璋�䰿⎓Ŕ뀑�◵郃壾羳㌷兒샋㵱궗刷豅몟緎ﲕ붪薋ಸ廩�䠃�紮⯋ꖞ㼰ㆯ�扳ꙇ믇窕볊牨柸䙭簧괾
[  522.338315][   T24] usb 4-1: Manufacturer: ంꞱꯟ⯌弙ꀇ�⯑㟹嘟꿮���ᨚ徔ꉫ履難垆⌈鯗눢┳紅䰛嚧᫋ꄪ湕�쨑ꕸ桜犲퓨⩜��﨟扎៟⺑࿤敂鵻���㥆쒭쨊�囿渌ힶ羑㒲籿��꾥�沪�輿絃㈔蜼垰橧�Èꓥ疫樹骊䳳䅴铰⚹��Ϟ렷
[  522.368989][   T24] usb 4-1: SerialNumber: syz
[  522.387926][ T5907] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[  522.410073][ T5907] usb 2-1: device descriptor read/8, error -71
[  522.507897][ T2156] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[  522.528447][ T5907] usb usb2-port1: unable to enumerate USB device
[  522.546095][ T5906] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71
[  522.592392][T12212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  522.607058][ T5906] usb 5-1: USB disconnect, device number 69
[  522.618624][T12212] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  522.666161][T12212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  522.675921][ T2156] usb 3-1: Using ep0 maxpacket: 8
[  522.719522][T12212] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  522.731856][ T2156] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  522.759982][ T2156] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  522.778086][ T2156] usb 3-1: Product: syz
[  522.782451][ T2156] usb 3-1: Manufacturer: syz
[  522.787134][ T2156] usb 3-1: SerialNumber: syz
[  522.837960][ T2156] usb 3-1: config 0 descriptor??
[  522.853915][   T24] usb 4-1: 0:2 : does not exist
[  522.932901][   T24] usb 4-1: USB disconnect, device number 75
[  523.069167][ T2156] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  523.106839][ T8362] udevd[8362]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  524.054470][T12242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1841'.
[  524.171505][T12242] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  524.180515][T12242] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  524.189388][T12242] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  524.198177][T12242] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  524.209388][T12242] vxlan1: entered promiscuous mode
[  524.465019][T12247] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  524.494199][T12247] team0: Device macvlan2 is already an upper device of the team interface
[  525.258548][T12275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1850'.
[  525.773006][T12279] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  526.188672][ T2156] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110
[  526.607461][ T2156] usb 3-1: USB disconnect, device number 84
[  526.801092][T12289] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  526.978325][ T5907] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[  527.153915][ T5907] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  527.163892][ T2156] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[  527.182194][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  527.191846][ T5907] usb 5-1: Product: syz
[  527.197047][ T5907] usb 5-1: Manufacturer: syz
[  527.208377][T12301] netlink: 'syz.1.1856': attribute type 1 has an invalid length.
[  527.221376][ T5907] usb 5-1: SerialNumber: syz
[  527.238146][ T5907] usb 5-1: config 0 descriptor??
[  527.347368][T12301] 8021q: adding VLAN 0 to HW filter on device bond6
[  527.367981][ T2156] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  527.404887][ T2156] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  527.436217][ T2156] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  527.466267][ T2156] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  527.503397][ T2156] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  527.542498][ T2156] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  527.562519][ T2156] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  527.590127][ T2156] usb 3-1: Product: syz
[  527.603433][ T2156] usb 3-1: Manufacturer: syz
[  527.636216][ T2156] cdc_wdm 3-1:1.0: skipping garbage
[  527.657834][ T2156] cdc_wdm 3-1:1.0: skipping garbage
[  527.658018][T12313] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1857'.
[  527.666776][ T2156] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  527.711041][ T2156] cdc_wdm 3-1:1.0: Unknown control protocol
[  527.712204][T12313] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  528.197993][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -EPIPE
[  528.398748][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  528.405432][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  528.411876][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  528.418534][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  528.427963][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  528.434716][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  528.446231][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  528.452921][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  528.460060][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  528.466731][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  528.473453][ T2156] usb 3-1: USB disconnect, device number 85
[  528.479507][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  528.479538][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  528.479556][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  528.530081][   T24] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  528.711937][ T5907] usb 5-1: f81604_read: reg: 200f failed: -EPROTO
[  528.723654][   T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  528.736231][ T5907] usb 5-1: USB disconnect, device number 70
[  528.755086][   T24] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  528.755124][T12331] netlink: 'syz.3.1863': attribute type 12 has an invalid length.
[  528.812719][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  528.961528][ T5907] usb 5-1: f81604_read: reg: 100f failed: -ENODEV
[  528.977703][   T24] usb 2-1: config 0 descriptor??
[  529.014005][   T24] pwc: Askey VC010 type 2 USB webcam detected.
[  529.085316][ T5502] usb 5-1: f81604_read: reg: 200f failed: -ENODEV
[  529.103232][ T5907] usb 5-1: f81604_read: reg: 200f failed: -ENODEV
[  529.418505][   T24] pwc: recv_control_msg error -32 req 02 val 2b00
[  529.451915][   T24] pwc: recv_control_msg error -32 req 02 val 2700
[  529.497448][   T24] pwc: recv_control_msg error -32 req 02 val 2c00
[  529.535355][   T24] pwc: recv_control_msg error -32 req 04 val 1000
[  529.558025][   T24] pwc: recv_control_msg error -32 req 04 val 1300
[  529.572730][   T24] pwc: recv_control_msg error -32 req 04 val 1400
[  529.592872][   T24] pwc: recv_control_msg error -32 req 02 val 2000
[  529.607065][   T24] pwc: recv_control_msg error -32 req 02 val 2100
[  529.618451][   T24] pwc: recv_control_msg error -32 req 04 val 1500
[  529.630827][   T24] pwc: recv_control_msg error -32 req 02 val 2500
[  529.638530][   T24] pwc: recv_control_msg error -32 req 02 val 2400
[  529.646065][   T24] pwc: recv_control_msg error -32 req 02 val 2600
[  529.654179][   T24] pwc: recv_control_msg error -32 req 02 val 2900
[  529.662078][   T24] pwc: recv_control_msg error -32 req 02 val 2800
[  529.880928][   T24] pwc: recv_control_msg error -71 req 04 val 1200
[  529.951697][   T24] pwc: Registered as video103.
[  529.998774][   T24] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input42
[  530.050945][   T24] usb 2-1: USB disconnect, device number 85
[  531.528057][   T24] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[  531.787853][ T5847] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  531.950680][ T5847] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  531.961170][ T5847] usb 4-1: config 0 has no interfaces?
[  531.981655][ T5847] usb 4-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[  531.991733][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  532.012016][ T5847] usb 4-1: Product: syz
[  532.032280][ T5847] usb 4-1: Manufacturer: syz
[  532.036960][ T5847] usb 4-1: SerialNumber: syz
[  532.055179][ T5847] usb 4-1: config 0 descriptor??
[  532.274455][   T24] usb 2-1: config 0 has no interfaces?
[  532.446774][   T24] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  532.491560][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  532.527339][   T24] usb 2-1: Product: syz
[  532.556565][   T24] usb 2-1: Manufacturer: syz
[  532.568626][   T24] usb 2-1: SerialNumber: syz
[  532.633953][   T24] usb 2-1: config 0 descriptor??
[  533.610432][T12371] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1871'.
[  534.011580][T12390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  534.051081][T12390] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  534.561621][ T5907] usb 4-1: USB disconnect, device number 76
[  534.814062][T12394] input: syz1 as /devices/virtual/input/input43
[  535.071800][ T5907] usb 2-1: USB disconnect, device number 86
[  535.078154][ T5971] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[  535.248309][ T5971] usb 4-1: Using ep0 maxpacket: 16
[  535.304530][ T5971] usb 4-1: config 0 has an invalid interface number: 80 but max is 0
[  535.321860][ T5971] usb 4-1: config 0 has no interface number 0
[  535.338281][ T5971] usb 4-1: config 0 interface 80 has no altsetting 0
[  535.356624][ T5971] usb 4-1: New USB device found, idVendor=0403, idProduct=dafd, bcdDevice=fe.be
[  535.373915][ T5971] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.415113][ T5971] usb 4-1: Product: syz
[  535.420641][ T5971] usb 4-1: Manufacturer: syz
[  535.425311][ T5971] usb 4-1: SerialNumber: syz
[  535.500505][ T5971] usb 4-1: config 0 descriptor??
[  535.731904][ T5971] ftdi_sio 4-1:0.80: FTDI USB Serial Device converter detected
[  535.741288][ T5971] ftdi_sio ttyUSB0: unknown device type: 0xfebe
[  535.760867][ T5971] usb 4-1: USB disconnect, device number 77
[  535.800157][ T5971] ftdi_sio 4-1:0.80: device disconnected
[  535.945222][ T5907] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[  536.148132][ T5907] usb 3-1: Using ep0 maxpacket: 8
[  536.176088][ T5907] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  536.191726][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  536.259036][ T5907] usb 3-1: config 0 descriptor??
[  536.341453][T12432] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1888'.
[  536.488506][ T5907] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  536.784571][T12447] dummy0: entered promiscuous mode
[  536.820083][T12447] dummy0: left promiscuous mode
[  536.887973][ T5971] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  536.987891][  T977] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  537.049397][ T5971] usb 5-1: Using ep0 maxpacket: 8
[  537.062221][ T5971] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  537.081732][ T5971] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  537.118544][T12419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  537.127374][T12419] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  537.140526][  T977] usb 1-1: device descriptor read/64, error -71
[  537.150808][ T5971] usb 5-1: config 0 descriptor??
[  537.400236][T12419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  537.408998][  T977] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  537.418647][T12419] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  537.678224][  T977] usb 1-1: device descriptor read/64, error -71
[  537.788549][  T977] usb usb1-port1: attempt power cycle
[  538.057952][ T5907] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  538.535883][ T5907] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  538.578666][ T5907] asix 3-1:0.0: probe with driver asix failed with error -71
[  538.588082][  T977] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  538.621401][ T5907] usb 3-1: USB disconnect, device number 86
[  538.621405][  T977] usb 1-1: device descriptor read/8, error -71
[  538.732437][T12441] lo: entered allmulticast mode
[  538.753845][ T5971] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  538.765627][T12440] lo: left allmulticast mode
[  538.781161][ T5971] asix 5-1:0.0: probe with driver asix failed with error -71
[  538.802318][ T5971] usb 5-1: USB disconnect, device number 71
[  538.889019][  T977] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  538.918660][  T977] usb 1-1: device descriptor read/8, error -71
[  539.029070][  T977] usb usb1-port1: unable to enumerate USB device
[  539.218212][ T1221] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  539.378056][ T1221] usb 2-1: Using ep0 maxpacket: 16
[  539.398794][ T1221] usb 2-1: config 0 has an invalid interface number: 251 but max is 0
[  539.407053][ T1221] usb 2-1: config 0 has no interface number 0
[  539.444696][ T1221] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  539.497873][ T1221] usb 2-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  539.535181][ T1221] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  539.559947][ T1221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  539.589342][ T1221] usb 2-1: Product: syz
[  539.593600][ T1221] usb 2-1: Manufacturer: syz
[  539.631483][ T1221] usb 2-1: SerialNumber: syz
[  539.657595][ T1221] usb 2-1: config 0 descriptor??
[  539.668739][T12471] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  539.677115][T12471] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  539.820847][T12480] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1905'.
[  539.928528][T12471] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  539.935925][T12471] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  539.988675][T12480] team0: entered promiscuous mode
[  539.995929][T12480] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  540.108941][T12480] team0: left promiscuous mode
[  540.268309][ T5907] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  540.284291][T12486] netlink: 'syz.3.1907': attribute type 7 has an invalid length.
[  540.344550][T12486] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1907'.
[  540.433825][ T5907] usb 1-1: Using ep0 maxpacket: 16
[  540.452437][ T5907] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  540.497320][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.530638][ T5907] usb 1-1: Product: syz
[  540.534886][ T5907] usb 1-1: Manufacturer: syz
[  540.569866][ T5907] usb 1-1: SerialNumber: syz
[  540.615265][ T5907] r8152-cfgselector 1-1: Unknown version 0x0000
[  540.634519][ T5907] r8152-cfgselector 1-1: config 0 descriptor??
[  540.691041][T12497] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  541.233851][ T5907] r8152-cfgselector 1-1: USB disconnect, device number 70
[  541.411983][T12502] cgroup: fork rejected by pids controller in /syz4
[  542.368280][T12566] FAULT_INJECTION: forcing a failure.
[  542.368280][T12566] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  542.897213][ T1221] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -71
[  542.915046][ T1221] asix 2-1:0.251 (unnamed net_device) (uninitialized): Could not register MDIO bus
[  542.933100][ T1221] asix 2-1:0.251: probe with driver asix failed with error -5
[  542.948004][T12566] CPU: 0 UID: 0 PID: 12566 Comm: syz.3.1923 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) 
[  542.948044][T12566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  542.948062][T12566] Call Trace:
[  542.948071][T12566]  <TASK>
[  542.948080][T12566]  dump_stack_lvl+0x189/0x250
[  542.948120][T12566]  ? __pfx____ratelimit+0x10/0x10
[  542.948153][T12566]  ? __pfx_dump_stack_lvl+0x10/0x10
[  542.948186][T12566]  ? __pfx__printk+0x10/0x10
[  542.948224][T12566]  should_fail_ex+0x414/0x560
[  542.948257][T12566]  _copy_to_user+0x31/0xb0
[  542.948282][T12566]  simple_read_from_buffer+0xe1/0x170
[  542.948310][T12566]  proc_fail_nth_read+0x1df/0x250
[  542.948339][T12566]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  542.948369][T12566]  ? rw_verify_area+0x258/0x650
[  542.948402][T12566]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  542.948429][T12566]  vfs_read+0x200/0x980
[  542.948469][T12566]  ? __pfx___mutex_lock+0x10/0x10
[  542.948490][T12566]  ? __pfx_vfs_read+0x10/0x10
[  542.948525][T12566]  ? __fget_files+0x2a/0x420
[  542.948554][T12566]  ? __fget_files+0x3a0/0x420
[  542.948577][T12566]  ? __fget_files+0x2a/0x420
[  542.948611][T12566]  ksys_read+0x145/0x250
[  542.948629][T12566]  ? __fget_files+0x3a0/0x420
[  542.948654][T12566]  ? __pfx_ksys_read+0x10/0x10
[  542.948680][T12566]  ? do_syscall_64+0xbe/0x3b0
[  542.948704][T12566]  do_syscall_64+0xfa/0x3b0
[  542.948726][T12566]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.948746][T12566]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  542.948766][T12566]  ? clear_bhb_loop+0x60/0xb0
[  542.948793][T12566]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.948819][T12566] RIP: 0033:0x7fcb27b8d33c
[  542.948839][T12566] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  542.948859][T12566] RSP: 002b:00007fcb259f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  542.948880][T12566] RAX: ffffffffffffffda RBX: 00007fcb27db5fa0 RCX: 00007fcb27b8d33c
[  542.948896][T12566] RDX: 000000000000000f RSI: 00007fcb259f60a0 RDI: 0000000000000005
[  542.948909][T12566] RBP: 00007fcb259f6090 R08: 0000000000000000 R09: 0000000000000000
[  542.948922][T12566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  542.948936][T12566] R13: 0000000000000000 R14: 00007fcb27db5fa0 R15: 00007fcb27edfa28
[  542.948969][T12566]  </TASK>
[  543.248074][ T1221] usb 2-1: USB disconnect, device number 87
[  543.656722][T12572] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  543.959712][T12585] FAULT_INJECTION: forcing a failure.
[  543.959712][T12585] name failslab, interval 1, probability 0, space 0, times 0
[  543.984461][T12585] CPU: 0 UID: 0 PID: 12585 Comm: syz.2.1929 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) 
[  543.984493][T12585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  543.984507][T12585] Call Trace:
[  543.984515][T12585]  <TASK>
[  543.984525][T12585]  dump_stack_lvl+0x189/0x250
[  543.984565][T12585]  ? __pfx____ratelimit+0x10/0x10
[  543.984600][T12585]  ? __pfx_dump_stack_lvl+0x10/0x10
[  543.984635][T12585]  ? __pfx__printk+0x10/0x10
[  543.984670][T12585]  ? __nla_validate_parse+0x2400/0x2d40
[  543.984713][T12585]  should_fail_ex+0x414/0x560
[  543.984746][T12585]  should_failslab+0xa8/0x100
[  543.984773][T12585]  kmem_cache_alloc_noprof+0x73/0x3c0
[  543.984808][T12585]  ? xfrm_state_alloc+0x24/0x2f0
[  543.984846][T12585]  xfrm_state_alloc+0x24/0x2f0
[  543.984882][T12585]  xfrm_add_sa+0x17d1/0x4050
[  543.984919][T12585]  ? __pfx_xfrm_add_sa+0x10/0x10
[  543.984943][T12585]  ? apparmor_capable+0x137/0x1b0
[  543.984970][T12585]  ? __nla_parse+0x40/0x60
[  543.985005][T12585]  xfrm_user_rcv_msg+0x7a0/0xab0
[  543.985039][T12585]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  543.985097][T12585]  ? __mutex_trylock_common+0x153/0x260
[  543.985123][T12585]  ? __pfx___mutex_trylock_common+0x10/0x10
[  543.985150][T12585]  ? rcu_is_watching+0x15/0xb0
[  543.985184][T12585]  ? trace_contention_end+0x39/0x120
[  543.985213][T12585]  netlink_rcv_skb+0x205/0x470
[  543.985241][T12585]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  543.985269][T12585]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  543.985313][T12585]  ? netlink_deliver_tap+0x2e/0x1b0
[  543.985338][T12585]  ? netlink_deliver_tap+0x2e/0x1b0
[  543.985365][T12585]  xfrm_netlink_rcv+0x79/0x90
[  543.985390][T12585]  netlink_unicast+0x758/0x8d0
[  543.985425][T12585]  netlink_sendmsg+0x805/0xb30
[  543.985462][T12585]  ? __pfx_netlink_sendmsg+0x10/0x10
[  543.985496][T12585]  ? aa_sock_msg_perm+0x94/0x160
[  543.985527][T12585]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  543.985555][T12585]  ? __pfx_netlink_sendmsg+0x10/0x10
[  543.985582][T12585]  __sock_sendmsg+0x21c/0x270
[  543.985620][T12585]  ____sys_sendmsg+0x505/0x830
[  543.985652][T12585]  ? __pfx_____sys_sendmsg+0x10/0x10
[  543.985696][T12585]  ? import_iovec+0x74/0xa0
[  543.985722][T12585]  ___sys_sendmsg+0x21f/0x2a0
[  543.985753][T12585]  ? __pfx____sys_sendmsg+0x10/0x10
[  543.985819][T12585]  ? __fget_files+0x2a/0x420
[  543.985843][T12585]  ? __fget_files+0x3a0/0x420
[  543.985878][T12585]  __x64_sys_sendmsg+0x19b/0x260
[  543.985908][T12585]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  543.985947][T12585]  ? __pfx_ksys_write+0x10/0x10
[  543.985965][T12585]  ? rcu_is_watching+0x15/0xb0
[  543.986003][T12585]  ? do_syscall_64+0xbe/0x3b0
[  543.986028][T12585]  do_syscall_64+0xfa/0x3b0
[  543.986046][T12585]  ? lockdep_hardirqs_on+0x9c/0x150
[  543.986078][T12585]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  543.986100][T12585]  ? clear_bhb_loop+0x60/0xb0
[  543.986125][T12585]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  543.986146][T12585] RIP: 0033:0x7f26b958e929
[  543.986166][T12585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  543.986185][T12585] RSP: 002b:00007f26ba4c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  543.986209][T12585] RAX: ffffffffffffffda RBX: 00007f26b97b5fa0 RCX: 00007f26b958e929
[  543.986225][T12585] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003
[  543.986238][T12585] RBP: 00007f26ba4c8090 R08: 0000000000000000 R09: 0000000000000000
[  543.986252][T12585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  543.986265][T12585] R13: 0000000000000000 R14: 00007f26b97b5fa0 R15: 00007f26b98dfa28
[  543.986297][T12585]  </TASK>
[  544.148048][ T5907] usb 4-1: new full-speed USB device number 78 using dummy_hcd
[  544.153889][ T1221] usb 1-1: new full-speed USB device number 71 using dummy_hcd
[  544.310129][ T5907] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  544.431853][ T5907] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  544.450819][ T5907] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  544.470524][ T5907] usb 4-1: config 1 has no interface number 0
[  544.471179][ T1221] usb 1-1: too many configurations: 231, using maximum allowed: 8
[  544.481089][ T5907] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  544.510945][ T1221] usb 1-1: unable to read config index 0 descriptor/start: -61
[  544.524427][ T1221] usb 1-1: can't read configurations, error -61
[  544.545388][ T5907] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  544.560529][ T5907] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  544.569770][ T5907] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  544.586953][ T5907] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  544.677917][ T1221] usb 1-1: new full-speed USB device number 72 using dummy_hcd
[  544.790240][T12583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  544.802068][T12583] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  544.829616][T12597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1934'.
[  544.868623][ T1221] usb 1-1: too many configurations: 231, using maximum allowed: 8
[  544.882384][ T1221] usb 1-1: unable to read config index 0 descriptor/start: -61
[  544.890484][ T1221] usb 1-1: can't read configurations, error -61
[  544.897389][ T1221] usb usb1-port1: attempt power cycle
[  544.937992][ T5906] usb 5-1: new full-speed USB device number 72 using dummy_hcd
[  545.149781][ T5906] usb 5-1: unable to get BOS descriptor or descriptor too short
[  545.161523][ T5906] usb 5-1: not running at top speed; connect to a high speed hub
[  545.171087][   T24] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[  545.192794][ T5906] usb 5-1: config 7 has an invalid interface number: 178 but max is 0
[  545.217865][ T5906] usb 5-1: config 7 has no interface number 0
[  545.247835][ T5906] usb 5-1: config 7 interface 178 has no altsetting 0
[  545.247952][ T1221] usb 1-1: new full-speed USB device number 73 using dummy_hcd
[  545.293687][ T5906] usb 5-1: New USB device found, idVendor=0846, idProduct=5f00, bcdDevice=50.c2
[  545.332839][   T24] usb 2-1: Using ep0 maxpacket: 16
[  545.339337][ T1221] usb 1-1: too many configurations: 231, using maximum allowed: 8
[  545.349872][ T1221] usb 1-1: unable to read config index 0 descriptor/start: -61
[  545.371321][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  545.388138][ T1221] usb 1-1: can't read configurations, error -61
[  545.388988][   T24] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  545.412858][ T5906] usb 5-1: Product: syz
[  545.427375][ T5906] usb 5-1: Manufacturer: syz
[  545.436849][   T24] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  545.454553][ T5906] usb 5-1: SerialNumber: syz
[  545.475155][   T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  545.503052][   T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  545.512629][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  545.545582][   T24] usb 2-1: Product: syz
[  545.548127][ T1221] usb 1-1: new full-speed USB device number 74 using dummy_hcd
[  545.563331][   T24] usb 2-1: Manufacturer: syz
[  545.585106][   T24] usb 2-1: SerialNumber: syz
[  545.602426][ T1221] usb 1-1: too many configurations: 231, using maximum allowed: 8
[  545.639362][ T1221] usb 1-1: unable to read config index 0 descriptor/start: -61
[  545.662408][ T1221] usb 1-1: can't read configurations, error -61
[  545.702143][ T1221] usb usb1-port1: unable to enumerate USB device
[  545.736141][ T5906] usb 5-1: Could not find all expected endpoints
[  545.767523][ T5906] usb 5-1: USB disconnect, device number 72
[  545.918051][ T1221] usb 1-1: new full-speed USB device number 75 using dummy_hcd
[  546.025902][ T5906] usb 2-1: USB disconnect, device number 88
[  546.088947][ T1221] usb 1-1: too many configurations: 231, using maximum allowed: 8
[  546.167073][ T1221] usb 1-1: unable to read config index 0 descriptor/start: -61
[  546.202238][ T1221] usb 1-1: can't read configurations, error -61
[  546.350867][ T1221] usb 1-1: new full-speed USB device number 76 using dummy_hcd
[  546.553685][ T1221] usb 1-1: too many configurations: 231, using maximum allowed: 8
[  546.578157][   T24] usb 3-1: new full-speed USB device number 87 using dummy_hcd
[  546.607838][ T1221] usb 1-1: unable to read config index 0 descriptor/start: -61
[  546.621175][T12610] fuse: Bad value for 'group_id'
[  546.621620][ T1221] usb 1-1: can't read configurations, error -61
[  546.634258][T12610] fuse: Bad value for 'group_id'
[  546.656054][ T1221] usb usb1-port1: attempt power cycle
[  546.760601][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  546.780718][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  546.818954][   T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  546.834011][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  546.865914][   T24] usb 3-1: config 0 descriptor??
[  546.899286][   T24] hub 3-1:0.0: USB hub found
[  547.093088][T12605] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5)
[  547.099689][T12605] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  547.112990][T12605] vhci_hcd vhci_hcd.0: Device attached
[  547.132154][T12605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  547.151209][T12605] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  547.167623][T12614] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0
[  547.179147][   T56] vhci_hcd: stop threads
[  547.183637][   T56] vhci_hcd: release socket
[  547.189306][   T56] vhci_hcd: disconnect device
[  547.235838][T12617] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  547.359469][T12624] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1940'.
[  547.533066][ T5907] snd_usb_pod 4-1:1.1: set_interface failed
[  547.557204][ T5907] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  547.605479][ T5907] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71
[  547.635884][ T5907] usb 4-1: USB disconnect, device number 78
[  547.798123][T12629] netlink: 'syz.3.1942': attribute type 1 has an invalid length.
[  547.882922][T12629] 8021q: adding VLAN 0 to HW filter on device bond5
[  548.572046][   T30] audit: type=1326 audit(1749994398.358:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12638 comm="syz.1.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451e38e929 code=0x7ffc0000
[  548.615113][   T30] audit: type=1326 audit(1749994398.358:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12638 comm="syz.1.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f451e38e929 code=0x7ffc0000
[  548.651153][   T30] audit: type=1326 audit(1749994398.358:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12638 comm="syz.1.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451e38e929 code=0x7ffc0000
[  548.705505][   T30] audit: type=1326 audit(1749994398.358:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12638 comm="syz.1.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f451e38e929 code=0x7ffc0000
[  548.728850][   T30] audit: type=1326 audit(1749994398.368:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12638 comm="syz.1.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451e38e929 code=0x7ffc0000
[  548.752987][   T30] audit: type=1326 audit(1749994398.368:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12638 comm="syz.1.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f451e38e929 code=0x7ffc0000
[  548.908007][ T1221] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  549.092477][ T1221] usb 5-1: Using ep0 maxpacket: 8
[  549.131756][ T1221] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  549.201823][ T1221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  549.275610][ T1221] usb 5-1: Product: syz
[  549.283757][ T1221] usb 5-1: Manufacturer: syz
[  549.293729][T12657] fuse: Bad value for 'group_id'
[  549.307884][T12657] fuse: Bad value for 'group_id'
[  549.417110][ T1221] usb 5-1: SerialNumber: syz
[  549.428111][   T24] hub 3-1:0.0: config failed, can't read hub descriptor (err -22)
[  549.486696][   T30] audit: type=1326 audit(1749994399.328:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12638 comm="syz.1.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451e38e929 code=0x7ffc0000
[  549.550320][   T24] usbhid 3-1:0.0: can't add hid device: -71
[  549.552596][ T1221] usb 5-1: config 0 descriptor??
[  549.556458][   T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  549.602971][   T30] audit: type=1326 audit(1749994399.328:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12638 comm="syz.1.1945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f451e38e929 code=0x7ffc0000
[  549.639932][ T1221] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  549.694503][   T24] usb 3-1: USB disconnect, device number 87
[  549.716507][T12662] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  550.384849][T12677] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1957'.
[  550.427622][T12677] team0: entered promiscuous mode
[  550.436177][ T1221] gspca_sonixj: reg_r err -71
[  550.441185][ T1221] sonixj 5-1:0.0: probe with driver sonixj failed with error -71
[  550.461202][T12677] team_slave_0: entered promiscuous mode
[  550.482196][ T1221] usb 5-1: USB disconnect, device number 73
[  550.528325][T12677] team_slave_1: entered promiscuous mode
[  550.548695][T12677] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  550.587391][T12677] team0: left promiscuous mode
[  550.594772][T12677] team_slave_0: left promiscuous mode
[  550.616058][T12677] team_slave_1: left promiscuous mode
[  550.700677][T12680] fuse: Bad value for 'group_id'
[  550.763064][T12680] fuse: Bad value for 'group_id'
[  550.988326][T12687] delete_channel: no stack
[  551.148100][T12696] lo: entered allmulticast mode
[  551.227376][T12685] lo: left allmulticast mode
[  551.243792][T12698] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  551.454636][T12708] fuse: Bad value for 'group_id'
[  551.473930][T12708] fuse: Bad value for 'group_id'
[  552.307962][ T5971] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[  552.592405][ T5971] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  552.604342][ T5971] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  552.647507][ T5971] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  552.665391][ T5971] usb 2-1: config 220 has no interface number 2
[  552.675195][T12744] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  552.728909][ T5971] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  552.763589][ T5971] usb 2-1: config 220 interface 0 has no altsetting 0
[  552.780806][ T5971] usb 2-1: config 220 interface 76 has no altsetting 0
[  552.830093][ T5971] usb 2-1: config 220 interface 1 has no altsetting 0
[  552.849258][ T5971] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  552.858751][ T5971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  552.870258][ T5971] usb 2-1: Product: syz
[  552.878237][ T5971] usb 2-1: Manufacturer: syz
[  552.886351][ T5971] usb 2-1: SerialNumber: syz
[  552.901048][   T24] usb 4-1: new high-speed USB device number 79 using dummy_hcd
[  552.954712][T12751] netlink: 'syz.4.1980': attribute type 1 has an invalid length.
[  553.024651][T12751] 8021q: adding VLAN 0 to HW filter on device bond6
[  553.071627][   T24] usb 4-1: Using ep0 maxpacket: 16
[  553.092480][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  553.198703][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  553.242923][T12720] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  553.284237][T12720] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  553.358202][   T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  553.425511][   T24] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  553.442523][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  553.482659][   T24] usb 4-1: config 0 descriptor??
[  553.532571][T12760] netlink: 'syz.4.1982': attribute type 8 has an invalid length.
[  553.808519][ T5906] usb 1-1: new low-speed USB device number 78 using dummy_hcd
[  553.990694][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  554.010820][ T5906] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  554.031310][   T24] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000F/input/input44
[  554.076167][ T5906] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  554.122041][   T24] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  554.171630][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  554.204555][ T5906] usb 1-1: config 0 descriptor??
[  554.211425][   T24] usb 4-1: USB disconnect, device number 79
[  554.841308][ T5906] usb 1-1: string descriptor 0 read error: -71
[  554.928823][ T5906] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input45
[  554.929086][T12770] fido_id[12770]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  555.057255][ T5192] bcm5974 1-1:0.0: could not read from device
[  555.162123][ T5971] usb 2-1: selecting invalid altsetting 0
[  555.183510][ T5192] bcm5974 1-1:0.0: could not read from device
[  555.183724][ T5906] usb 1-1: USB disconnect, device number 78
[  555.200048][ T5971] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  555.206743][ T5971] usb 2-1: No valid video chain found.
[  555.241813][ T5892] bcm5974 1-1:0.0: could not read from device
[  555.304022][ T5971] usb 2-1: selecting invalid altsetting 0
[  555.313468][ T5971] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[  555.333748][ T5971] usb 2-1: USB disconnect, device number 89
[  555.480916][T12782] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  556.447397][T12810] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  557.359649][T12816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1998'.
[  557.621267][T12816] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  558.254778][T12833] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  558.398037][ T5906] usb 2-1: new full-speed USB device number 90 using dummy_hcd
[  558.562659][ T5906] usb 2-1: config 0 has an invalid interface number: 158 but max is 0
[  558.589504][ T5906] usb 2-1: config 0 has an invalid descriptor of length 21, skipping remainder of the config
[  558.617822][ T5906] usb 2-1: config 0 has no interface number 0
[  558.633356][ T5906] usb 2-1: config 0 interface 158 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  558.657908][ T5906] usb 2-1: config 0 interface 158 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  558.686963][T12854] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2009'.
[  558.704241][ T5906] usb 2-1: New USB device found, idVendor=3790, idProduct=425b, bcdDevice=a2.10
[  558.705090][T12854] team0: entered promiscuous mode
[  558.729286][T12854] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  558.733246][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  558.746049][T12854] team0: left promiscuous mode
[  558.763620][ T5906] usb 2-1: Product: syz
[  558.768215][ T5906] usb 2-1: Manufacturer: syz
[  558.772875][ T5906] usb 2-1: SerialNumber: syz
[  558.794638][ T5906] usb 2-1: config 0 descriptor??
[  558.798072][ T5971] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[  558.805369][T12830] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  558.898133][  T977] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[  558.938142][ T5971] usb 5-1: device descriptor read/64, error -71
[  559.078495][  T977] usb 1-1: Using ep0 maxpacket: 8
[  559.478830][  T977] usb 1-1: config 0 has an invalid interface number: 155 but max is 1
[  559.507408][T12860] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  559.518502][ T5971] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[  559.647565][  T977] usb 1-1: config 0 has an invalid interface number: 245 but max is 1
[  559.669425][  T977] usb 1-1: config 0 has no interface number 0
[  559.704505][  T977] usb 1-1: config 0 has no interface number 1
[  559.712700][  T977] usb 1-1: config 0 interface 155 has no altsetting 0
[  559.801415][ T5971] usb 5-1: device descriptor read/64, error -71
[  559.808501][  T977] usb 1-1: config 0 interface 245 has no altsetting 0
[  559.815376][  T977] usb 1-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=b8.b6
[  559.824800][  T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  559.839936][  T977] usb 1-1: config 0 descriptor??
[  559.918793][ T5971] usb usb5-port1: attempt power cycle
[  559.992187][T12867] fuse: Invalid uid '00000000000000000003'
[  560.065106][  T977] usb 1-1: string descriptor 0 read error: -71
[  560.103313][  T977] usb 1-1: USB disconnect, device number 79
[  560.258146][ T5906] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[  560.258925][ T5971] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[  560.315143][ T1221] usb 2-1: USB disconnect, device number 90
[  560.322244][ T5971] usb 5-1: device descriptor read/8, error -71
[  560.429876][ T5906] usb 4-1: Using ep0 maxpacket: 32
[  560.474548][ T5906] usb 4-1: config 0 has an invalid interface number: 89 but max is 0
[  560.483163][ T5906] usb 4-1: config 0 has no interface number 0
[  560.493509][ T5906] usb 4-1: New USB device found, idVendor=12d1, idProduct=7ef3, bcdDevice=54.68
[  560.503560][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  560.511750][ T5906] usb 4-1: Product: syz
[  560.516168][ T5906] usb 4-1: Manufacturer: syz
[  560.520917][ T5906] usb 4-1: SerialNumber: syz
[  560.530369][ T5906] usb 4-1: config 0 descriptor??
[  560.592277][ T5971] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[  560.625918][ T5906] hub 4-1:0.89: bad descriptor, ignoring hub
[  560.663385][ T5971] usb 5-1: device descriptor read/8, error -71
[  560.673861][ T5906] hub 4-1:0.89: probe with driver hub failed with error -5
[  560.682918][ T5906] option 4-1:0.89: GSM modem (1-port) converter detected
[  560.695576][ T5906] usb 4-1: GSM modem (1-port) converter now attached to ttyUSB0
[  560.871378][ T5971] usb usb5-port1: unable to enumerate USB device
[  561.142791][T12879] netlink: 'syz.2.2015': attribute type 2 has an invalid length.
[  561.179536][T12879] netlink: 'syz.2.2015': attribute type 8 has an invalid length.
[  561.220225][T12879] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2015'.
[  561.229482][T12880] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  561.580192][T12889] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2020'.
[  561.624133][T12889] team0: entered promiscuous mode
[  561.641788][T12889] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  561.653772][T12889] team0: left promiscuous mode
[  561.677847][ T5906] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  561.847962][ T5971] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[  561.881590][ T5906] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  561.904345][ T5906] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  561.935275][ T5906] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  561.956402][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  561.988297][ T5906] usb 2-1: Product: syz
[  561.992513][ T5906] usb 2-1: Manufacturer: syz
[  561.997375][ T5906] usb 2-1: SerialNumber: syz
[  561.998489][ T5971] usb 1-1: Using ep0 maxpacket: 32
[  562.009716][ T5971] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  562.020392][ T5971] usb 1-1: config 0 has no interface number 0
[  562.022424][ T5906] cdc_mbim 2-1:1.0: skipping garbage
[  562.026564][ T5971] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  562.043454][  T977] usb 5-1: new full-speed USB device number 78 using dummy_hcd
[  562.051257][ T1221] usb 4-1: USB disconnect, device number 80
[  562.061993][ T5971] usb 1-1: config 0 interface 1 has no altsetting 0
[  562.070856][ T1221] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0
[  562.090789][ T5971] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  562.103352][ T1221] option 4-1:0.89: device disconnected
[  562.109744][ T5971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  562.121506][ T5971] usb 1-1: Product: syz
[  562.130036][ T5971] usb 1-1: Manufacturer: syz
[  562.134718][ T5971] usb 1-1: SerialNumber: syz
[  562.143822][ T5971] usb 1-1: config 0 descriptor??
[  562.231280][T12887] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  562.233345][  T977] usb 5-1: config 0 has no interfaces?
[  562.248552][  T977] usb 5-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e
[  562.258263][  T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  562.266343][  T977] usb 5-1: Product: syz
[  562.271304][  T977] usb 5-1: Manufacturer: syz
[  562.281111][  T977] usb 5-1: SerialNumber: syz
[  562.302314][  T977] usb 5-1: config 0 descriptor??
[  562.383746][ T5971] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  562.403452][ T5971] cx231xx 1-1:0.1: Failed to read PCB config
[  562.410531][ T5971] cx231xx 1-1:0.1: probe with driver cx231xx failed with error -71
[  562.436291][ T5971] usb 1-1: USB disconnect, device number 80
[  562.529894][  T977] usb 5-1: USB disconnect, device number 78
[  562.666826][T12914] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2028'.
[  562.898619][ T5971] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[  562.917322][T12887] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  562.924745][ T1221] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[  562.927278][ T5906] cdc_mbim 2-1:1.0: setting tx_max = 184
[  562.945723][ T5906] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device
[  562.968423][ T5906] wwan wwan0: port wwan0mbim0 attached
[  562.996248][ T5906] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 0e:ee:5d:d1:ec:6a
[  563.028008][ T5971] usb 1-1: device descriptor read/64, error -71
[  563.062040][ T1221] usb 4-1: device descriptor read/64, error -71
[  563.194517][T12887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  563.220060][T12887] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  563.268066][ T2156] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[  563.269284][ T5971] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[  563.276503][    C1] cdc_mbim 2-1:1.0: nonzero urb status received: -71
[  563.289988][    C1] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes
[  563.296545][    C1] cdc_mbim 2-1:1.0: nonzero urb status received: -71
[  563.303252][    C1] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes
[  563.309641][    C1] cdc_mbim 2-1:1.0: nonzero urb status received: -71
[  563.316359][    C1] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes
[  563.322856][    C1] cdc_mbim 2-1:1.0: nonzero urb status received: -71
[  563.329557][    C1] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes
[  563.335960][    C1] cdc_mbim 2-1:1.0: nonzero urb status received: -71
[  563.337921][ T1221] usb 4-1: new high-speed USB device number 82 using dummy_hcd
[  563.342659][    C1] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes
[  563.357845][    C1] cdc_mbim 2-1:1.0: nonzero urb status received: -71
[  563.364683][    C1] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes
[  563.371180][    C1] cdc_mbim 2-1:1.0: nonzero urb status received: -71
[  563.377930][    C1] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes
[  563.384348][    C1] cdc_mbim 2-1:1.0: nonzero urb status received: -71
[  563.391069][    C1] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes
[  563.397315][    C1] cdc_mbim 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1
[  563.441327][   T24] usb 2-1: USB disconnect, device number 91
[  563.448745][   T24] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM
[  563.530838][ T5971] usb 1-1: device descriptor read/64, error -71
[  563.608507][ T1221] usb 4-1: device descriptor read/64, error -71
[  563.618187][ T2156] usb 3-1: Using ep0 maxpacket: 16
[  563.631850][ T2156] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  563.648550][ T2156] usb 3-1: config 0 has no interfaces?
[  563.663565][ T5971] usb usb1-port1: attempt power cycle
[  563.687853][ T2156] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  563.698358][   T24] wwan wwan0: port wwan0mbim0 disconnected
[  563.748305][ T1221] usb usb4-port1: attempt power cycle
[  563.771652][ T2156] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  563.830226][ T2156] usb 3-1: config 0 descriptor??
[  564.083920][T12921] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2030'.
[  564.117437][ T5971] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[  564.168022][ T5971] usb 1-1: device descriptor read/8, error -71
[  564.198001][ T1221] usb 4-1: new high-speed USB device number 83 using dummy_hcd
[  564.252649][ T1221] usb 4-1: device descriptor read/8, error -71
[  564.418827][ T5971] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[  564.448698][ T5971] usb 1-1: device descriptor read/8, error -71
[  564.470125][   T30] audit: type=1400 audit(1749994414.318:315): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=BA pid=12942 comm="syz.4.2037"
[  564.498342][ T1221] usb 4-1: new high-speed USB device number 84 using dummy_hcd
[  564.528560][ T1221] usb 4-1: device descriptor read/8, error -71
[  564.578396][ T5971] usb usb1-port1: unable to enumerate USB device
[  564.648176][ T1221] usb usb4-port1: unable to enumerate USB device
[  564.669238][T12948] FAULT_INJECTION: forcing a failure.
[  564.669238][T12948] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  564.683277][T12948] CPU: 1 UID: 0 PID: 12948 Comm: syz.0.2039 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) 
[  564.683308][T12948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  564.683321][T12948] Call Trace:
[  564.683329][T12948]  <TASK>
[  564.683338][T12948]  dump_stack_lvl+0x189/0x250
[  564.683378][T12948]  ? __pfx____ratelimit+0x10/0x10
[  564.683410][T12948]  ? __pfx_dump_stack_lvl+0x10/0x10
[  564.683444][T12948]  ? __pfx__printk+0x10/0x10
[  564.683468][T12948]  ? __might_fault+0xb0/0x130
[  564.683501][T12948]  should_fail_ex+0x414/0x560
[  564.683534][T12948]  _copy_from_user+0x2d/0xb0
[  564.683557][T12948]  ___sys_sendmsg+0x158/0x2a0
[  564.683588][T12948]  ? __pfx____sys_sendmsg+0x10/0x10
[  564.683664][T12948]  ? __fget_files+0x2a/0x420
[  564.683688][T12948]  ? __fget_files+0x3a0/0x420
[  564.683723][T12948]  __x64_sys_sendmsg+0x19b/0x260
[  564.683754][T12948]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  564.683792][T12948]  ? __pfx_ksys_write+0x10/0x10
[  564.683817][T12948]  ? rcu_is_watching+0x15/0xb0
[  564.683856][T12948]  ? do_syscall_64+0xbe/0x3b0
[  564.683880][T12948]  do_syscall_64+0xfa/0x3b0
[  564.683900][T12948]  ? lockdep_hardirqs_on+0x9c/0x150
[  564.683932][T12948]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.683953][T12948]  ? clear_bhb_loop+0x60/0xb0
[  564.683980][T12948]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.684001][T12948] RIP: 0033:0x7fac1e18e929
[  564.684020][T12948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  564.684039][T12948] RSP: 002b:00007fac1ef2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  564.684062][T12948] RAX: ffffffffffffffda RBX: 00007fac1e3b5fa0 RCX: 00007fac1e18e929
[  564.684078][T12948] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003
[  564.684092][T12948] RBP: 00007fac1ef2f090 R08: 0000000000000000 R09: 0000000000000000
[  564.684106][T12948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  564.684118][T12948] R13: 0000000000000000 R14: 00007fac1e3b5fa0 R15: 00007fac1e4dfa28
[  564.684151][T12948]  </TASK>
[  564.897022][   T24] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[  565.057884][   T24] usb 2-1: Using ep0 maxpacket: 16
[  565.064949][   T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  565.075459][   T24] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[  565.088530][   T24] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  565.099397][   T24] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  565.109190][   T24] usb 2-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x1A, changing to 0xA
[  565.121050][   T24] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0xA has invalid maxpacket 239, setting to 64
[  565.134888][   T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  565.148141][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  565.156280][   T24] usb 2-1: Product: syz
[  565.163368][   T24] usb 2-1: Manufacturer: syz
[  565.168435][   T24] usb 2-1: SerialNumber: syz
[  565.267864][ T2156] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[  565.379129][T12941] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2038'.
[  565.424321][   T24] usb 2-1: USB disconnect, device number 92
[  565.430696][ T2156] usb 1-1: Using ep0 maxpacket: 8
[  565.456264][ T2156] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  565.474091][ T2156] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  565.485193][ T2156] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  565.515749][ T2156] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  565.532907][ T2156] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  565.545002][ T2156] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  565.582057][ T2156] hub 1-1:1.0: bad descriptor, ignoring hub
[  565.595095][ T2156] hub 1-1:1.0: probe with driver hub failed with error -5
[  565.603677][ T2156] cdc_wdm 1-1:1.0: skipping garbage
[  565.614957][ T2156] cdc_wdm 1-1:1.0: skipping garbage
[  565.627656][ T2156] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  565.638272][ T2156] cdc_wdm 1-1:1.0: Unknown control protocol
[  565.732338][T12963] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  565.866078][ T5971] usb 3-1: USB disconnect, device number 88
[  566.040588][T12950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  566.055013][T12950] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  566.198308][ T2156] usb 1-1: USB disconnect, device number 85
[  566.699109][T12992] _ÐZ`Ô€@ÿÃ: entered promiscuous mode
[  567.337968][   T24] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[  567.508158][   T24] usb 3-1: Using ep0 maxpacket: 16
[  567.523670][   T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  567.555927][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  567.587209][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  567.661814][   T24] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  567.701630][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  567.747951][   T24] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  567.777901][   T24] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  567.796367][   T24] usb 3-1: Manufacturer: syz
[  567.818957][   T24] usb 3-1: config 0 descriptor??
[  568.191820][ T1306] ieee802154 phy0 wpan0: encryption failed: -22
[  568.198449][ T1306] ieee802154 phy1 wpan1: encryption failed: -22
[  568.238104][   T24] rc_core: IR keymap rc-hauppauge not found
[  568.247231][   T24] Registered IR keymap rc-empty
[  568.254039][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  568.292734][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  568.329985][   T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  568.367519][   T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input46
[  568.470941][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  568.628024][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  568.788137][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  568.830874][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  568.888152][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  568.928356][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  568.943155][T12929] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[  568.967899][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  569.053597][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  569.129670][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  569.163755][   T24] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  569.256921][T12929] usb 5-1: Using ep0 maxpacket: 8
[  569.272322][T12929] usb 5-1: config 0 has an invalid interface number: 176 but max is 2
[  569.273599][   T24] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[  569.291205][T12929] usb 5-1: config 0 has an invalid interface number: 49 but max is 2
[  569.327927][T12929] usb 5-1: config 0 has no interface number 1
[  569.332175][   T24] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  569.343503][T12929] usb 5-1: config 0 has no interface number 2
[  569.364494][T12929] usb 5-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  569.397938][T12929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  569.426707][   T24] usb 3-1: USB disconnect, device number 89
[  569.433870][T12929] usb 5-1: config 0 descriptor??
[  569.473984][T12929] qmi_wwan 5-1:0.0: probe with driver qmi_wwan failed with error -22
[  569.663092][T13044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  569.685194][T13044] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  569.818890][T12929] usb 5-1: Could not set interface, error -71
[  569.861243][T12929] usb 5-1: USB disconnect, device number 79
[  569.992075][T13058] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2079'.
[  570.199678][T13062] fuse: Bad value for 'group_id'
[  570.204711][T13062] fuse: Bad value for 'group_id'
[  570.537893][ T5906] usb 4-1: new high-speed USB device number 85 using dummy_hcd
[  570.700426][ T5906] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  570.727892][ T5906] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  570.748630][ T5906] usb 4-1: config 0 interface 0 has no altsetting 0
[  570.765602][ T5906] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  570.826009][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  570.857545][ T5906] usb 4-1: config 0 descriptor??
[  571.371503][   T30] audit: type=1326 audit(1749994421.178:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13083 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b3f8e929 code=0x7ffc0000
[  571.380114][ T5906] corsair-psu 0003:1B1C:1C09.0010: unknown main item tag 0x0
[  571.409296][   T30] audit: type=1326 audit(1749994421.178:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13083 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7fc2b3f8e929 code=0x7ffc0000
[  571.453599][   T30] audit: type=1326 audit(1749994421.178:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13083 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b3f8e929 code=0x7ffc0000
[  571.550092][ T5906] corsair-psu 0003:1B1C:1C09.0010: item fetching failed at offset 6/7
[  571.583224][   T30] audit: type=1326 audit(1749994421.178:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13083 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc2b3f8e929 code=0x7ffc0000
[  571.663285][ T5906] corsair-psu 0003:1B1C:1C09.0010: probe with driver corsair-psu failed with error -22
[  571.693534][   T30] audit: type=1326 audit(1749994421.178:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13083 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b3f8e929 code=0x7ffc0000
[  571.777577][   T30] audit: type=1326 audit(1749994421.178:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13083 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fc2b3f8e929 code=0x7ffc0000
[  571.808249][ T2156] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[  571.866152][   T30] audit: type=1326 audit(1749994421.178:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13083 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b3f8e929 code=0x7ffc0000
[  572.071748][ T2156] usb 2-1: config 0 has no interfaces?
[  572.077639][   T30] audit: type=1326 audit(1749994421.178:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13083 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc2b3f8e929 code=0x7ffc0000
[  572.081663][ T2156] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  572.100007][    C1] vkms_vblank_simulate: vblank timer overrun
[  572.170520][ T2156] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  572.183432][ T2156] usb 2-1: Product: syz
[  572.193546][   T30] audit: type=1326 audit(1749994421.188:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13083 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2b3f8e929 code=0x7ffc0000
[  572.197801][ T2156] usb 2-1: Manufacturer: syz
[  572.215977][    C1] vkms_vblank_simulate: vblank timer overrun
[  572.267375][ T2156] usb 2-1: SerialNumber: syz
[  572.311712][ T2156] usb 2-1: config 0 descriptor??
[  572.406290][   T30] audit: type=1326 audit(1749994421.188:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13083 comm="syz.4.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc2b3f8e929 code=0x7ffc0000
[  573.329189][ T5971] usb 4-1: USB disconnect, device number 85
[  574.368219][ T2156] usb 4-1: new high-speed USB device number 86 using dummy_hcd
[  574.423457][ T5971] usb 2-1: USB disconnect, device number 93
[  574.571622][ T2156] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  574.590716][ T2156] usb 4-1: config 0 has no interface number 0
[  574.623675][ T2156] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  574.654003][ T2156] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  574.687843][ T2156] usb 4-1: Product: syz
[  574.697832][ T2156] usb 4-1: Manufacturer: syz
[  574.712991][ T2156] usb 4-1: SerialNumber: syz
[  574.730015][T13133] fuse: Bad value for 'user_id'
[  574.735138][T13133] fuse: Bad value for 'user_id'
[  574.741101][ T2156] usb 4-1: config 0 descriptor??
[  574.927869][ T5907] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[  574.960322][ T2156] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  574.983599][ T2156] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  574.998936][ T2156] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  575.007109][ T2156] usb 4-1: media controller created
[  575.033537][ T2156] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  575.033634][ T5971] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[  575.087861][ T5907] usb 3-1: Using ep0 maxpacket: 32
[  575.095341][ T5907] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  575.104198][ T5907] usb 3-1: config 0 has no interface number 0
[  575.113553][ T5907] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  575.123114][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  575.131512][ T5907] usb 3-1: Product: syz
[  575.136308][ T5907] usb 3-1: Manufacturer: syz
[  575.141505][ T5907] usb 3-1: SerialNumber: syz
[  575.151679][ T5907] usb 3-1: config 0 descriptor??
[  575.155606][T13145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2106'.
[  575.169127][ T5907] smsc95xx v2.0.0
[  575.232067][ T5971] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  575.244919][ T5971] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  575.267104][ T5971] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  575.286568][ T5971] usb 1-1: Manufacturer: syz
[  575.292105][ T5971] usb 1-1: SerialNumber: syz
[  575.354886][T13145] macsec1: entered allmulticast mode
[  575.364916][T13145] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  575.429692][T13145] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  575.606239][ T5907] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  575.621429][ T5907] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  575.767910][ T1221] usb 5-1: new full-speed USB device number 80 using dummy_hcd
[  575.920941][ T1221] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  575.934774][ T1221] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  575.948293][ T1221] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  575.958745][ T1221] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  575.976326][ T1221] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  575.986029][ T1221] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  575.995019][ T1221] usb 5-1: Product: syz
[  576.003808][ T1221] usb 5-1: Manufacturer: syz
[  576.009226][ T1221] usb 5-1: SerialNumber: syz
[  576.017484][ T1221] usb 5-1: config 0 descriptor??
[  576.103040][ T2156] i2c i2c-1: ec100: i2c rd failed=-110 reg=33
[  576.103127][T13120] usb 4-1: dvb_usb_ec168: I2C read not implemented
[  576.177658][ T2156] usb 4-1: USB disconnect, device number 86
[  576.240765][T13148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  576.262614][T13148] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  576.275568][T13148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  576.286933][T13148] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  576.296976][   T24] usb 5-1: USB disconnect, device number 80
[  576.672990][T13153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2108'.
[  577.281643][ T5907] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32
[  577.326296][ T5907] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32
[  577.360510][ T5907] usb 3-1: USB disconnect, device number 90
[  577.513084][ T5971] usbhid 1-1:36.0: couldn't find an input interrupt endpoint
[  577.644301][ T5971] usb 1-1: USB disconnect, device number 86
[  578.319383][T13186] ptrace attach of "./syz-executor exec"[5855] was attempted by "./syz-executor exec"[13186]
[  579.247010][ T1221] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[  579.441540][ T1221] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  579.465932][ T1221] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  579.517271][ T1221] usb 1-1: Product: syz
[  579.543718][ T1221] usb 1-1: Manufacturer: syz
[  579.567055][ T1221] usb 1-1: SerialNumber: syz
[  579.619397][ T1221] usb 1-1: config 0 descriptor??
[  579.647430][ T1221] ch341 1-1:0.0: ch341-uart converter detected
[  580.308057][ T5971] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[  580.478408][ T5971] usb 2-1: Using ep0 maxpacket: 32
[  580.492932][ T5971] usb 2-1: config 1 has an invalid interface number: 242 but max is 0
[  580.523140][ T5971] usb 2-1: config 1 has no interface number 0
[  580.533316][ T5971] usb 2-1: config 1 interface 242 has no altsetting 0
[  580.551556][ T5971] usb 2-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df
[  580.573514][ T5971] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  580.586341][ T5971] usb 2-1: Product: syz
[  580.597354][ T5971] usb 2-1: Manufacturer: syz
[  580.605228][ T5971] usb 2-1: SerialNumber: syz
[  580.661126][ T1221] ch341-uart ttyUSB0: break control not supported, using simulated break
[  580.684536][ T1221] usb 1-1: ch341-uart converter now attached to ttyUSB0
[  580.709841][ T1221] usb 1-1: USB disconnect, device number 87
[  580.730968][ T1221] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0
[  580.744442][ T1221] ch341 1-1:0.0: device disconnected
[  581.177895][ T1221] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[  581.248493][ T2156] usb 4-1: new high-speed USB device number 87 using dummy_hcd
[  581.338160][ T1221] usb 3-1: Using ep0 maxpacket: 8
[  581.352874][ T1221] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  581.365961][ T1221] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  581.372346][T13225] loop2: detected capacity change from 0 to 7
[  581.377474][ T1221] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  581.395231][ T1221] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  581.395320][T13225] Dev loop2: unable to read RDB block 7
[  581.405491][ T1221] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  581.427362][ T1221] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  581.428754][T13225]  loop2: unable to read partition table
[  581.437393][ T1221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  581.455259][ T2156] usb 4-1: Using ep0 maxpacket: 32
[  581.462536][ T2156] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[  581.471549][T13225] loop2: partition table beyond EOD, truncated
[  581.478302][ T2156] usb 4-1: config 0 has no interface number 0
[  581.484819][T13225] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  581.498060][ T2156] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  581.528269][ T2156] usb 4-1: config 0 interface 85 has no altsetting 0
[  581.540062][ T2156] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  581.551587][ T2156] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  581.573854][ T2156] usb 4-1: Product: syz
[  581.578220][ T2156] usb 4-1: Manufacturer: syz
[  581.589050][ T2156] usb 4-1: SerialNumber: syz
[  581.602738][ T2156] usb 4-1: config 0 descriptor??
[  581.656577][T13207] lo: entered allmulticast mode
[  581.671024][ T1221] usb 3-1: usb_control_msg returned -32
[  581.676758][ T1221] usbtmc 3-1:16.0: can't read capabilities
[  581.864365][T13206] lo: left allmulticast mode
[  581.870716][ T5971] aqc111 2-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  581.883154][ T5971] aqc111 2-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  581.910984][ T5971] aqc111 2-1:1.242 eth1: register 'aqc111' at usb-dummy_hcd.1-1, Aquantia AQtion USB to 5GbE Controller, f6:e2:1c:0e:8d:ed
[  581.927542][ T5971] usb 2-1: USB disconnect, device number 94
[  581.936367][ T5971] aqc111 2-1:1.242 eth1: unregister 'aqc111' usb-dummy_hcd.1-1, Aquantia AQtion USB to 5GbE Controller
[  582.038868][ T5971] aqc111 2-1:1.242 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  582.062855][ T5971] aqc111 2-1:1.242 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  582.077576][ T5971] aqc111 2-1:1.242 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  582.109374][T13230] vlan0: entered promiscuous mode
[  582.114703][T13230] vlan0: entered allmulticast mode
[  582.133363][T13227] usbtmc 3-1:16.0: control status returned 0
[  582.136651][T13230] hsr_slave_1: entered allmulticast mode
[  582.218549][ T2156] appletouch 4-1:0.85: Geyser mode initialized.
[  582.235763][ T2156] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input47
[  582.527617][T13245] xt_CT: You must specify a L4 protocol and not use inversions on it
[  582.553885][T13246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  582.566786][ T5971] usb 1-1: new low-speed USB device number 88 using dummy_hcd
[  582.588580][T13246] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  582.750903][ T5971] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  582.762149][ T5971] usb 1-1: config 0 has no interface number 0
[  582.768829][ T5971] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  582.781014][ T5971] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  582.792566][ T5971] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  582.804525][ T5971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  582.815885][ T5971] usb 1-1: config 0 descriptor??
[  582.829579][T13237] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  582.846318][ T5971] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1
[  582.926627][ T2156] usb 4-1: USB disconnect, device number 87
[  582.966892][ T2156] appletouch 4-1:0.85: input: appletouch disconnected
[  583.118186][T13266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  583.128168][T13266] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  583.155130][T13237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  583.164201][T13237] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  583.188796][T13266] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2143'.
[  583.271024][ T5971] usb 1-1: USB disconnect, device number 88
[  584.047965][ T5971] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[  584.207857][ T5971] usb 4-1: Using ep0 maxpacket: 16
[  584.209550][T13299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2157'.
[  584.229828][ T5971] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  584.246572][ T5971] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  584.294795][T13299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2157'.
[  584.304326][T13299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2157'.
[  584.323766][T13299] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  584.332772][T13299] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  584.333520][ T5971] usb 4-1: config 0 interface 0 has no altsetting 0
[  584.341753][T13299] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  584.357117][T13299] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  584.396741][T13305] bridge1: entered promiscuous mode
[  584.517573][T13306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2156'.
[  584.552481][ T5971] usb 4-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00
[  584.561687][ T5971] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  584.770924][ T5971] usb 4-1: config 0 descriptor??
[  586.541793][ T5971] usbhid 4-1:0.0: can't add hid device: -71
[  586.548185][ T5971] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  586.599093][ T5971] usb 4-1: USB disconnect, device number 88
[  587.107962][ T2156] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[  587.298051][ T2156] usb 4-1: Using ep0 maxpacket: 32
[  587.328645][ T2156] usb 4-1: config 1 has an invalid interface number: 233 but max is 0
[  587.357433][ T2156] usb 4-1: config 1 has no interface number 0
[  587.372189][ T2156] usb 4-1: config 1 interface 233 has no altsetting 0
[  587.390300][ T2156] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=34.ac
[  587.411936][ T2156] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  587.430067][ T2156] usb 4-1: Product: syz
[  587.451706][ T2156] usb 4-1: Manufacturer: syz
[  587.473358][ T2156] usb 4-1: SerialNumber: syz
[  587.911974][   T30] kauditd_printk_skb: 14 callbacks suppressed
[  587.911996][   T30] audit: type=1326 audit(1749994437.758:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13321 comm="syz.3.2161" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb27b8e929 code=0x0
[  588.957146][T13324] warning: `syz.1.2162' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  589.252793][ T5907] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[  589.405518][ T5907] usb 1-1: device descriptor read/64, error -71
[  589.667853][ T5907] usb 1-1: new high-speed USB device number 90 using dummy_hcd
[  589.796781][T13324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2162'.
[  589.806016][T13324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2162'.
[  589.816321][ T5907] usb 1-1: device descriptor read/64, error -71
[  589.928175][ T5907] usb usb1-port1: attempt power cycle
[  590.019052][ T2156] imon_raw 4-1:1.233: IR endpoint missing
[  590.048345][ T2156] usb 4-1: USB disconnect, device number 89
[  590.247572][T13359] cgroup: fork rejected by pids controller in /syz2
[  590.317885][ T5907] usb 1-1: new high-speed USB device number 91 using dummy_hcd
[  590.338674][ T5907] usb 1-1: device descriptor read/8, error -71
[  590.807941][ T5907] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[  590.851221][ T5907] usb 1-1: device descriptor read/8, error -71
[  590.934514][T13406] input: syz0 as /devices/virtual/input/input48
[  591.012529][ T5907] usb usb1-port1: unable to enumerate USB device
[  591.693199][T13416] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000'
[  592.266836][T13421] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2177'.
[  592.281332][T13421] team0: entered promiscuous mode
[  592.286693][T13421] team_slave_0: entered promiscuous mode
[  592.296936][T13421] team_slave_1: entered promiscuous mode
[  592.347617][T13421] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  592.418605][T13421] team0: left promiscuous mode
[  592.470669][T13421] team_slave_0: left promiscuous mode
[  592.544443][T13421] team_slave_1: left promiscuous mode
[  592.626584][T13426] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2179'.
[  592.657618][T13426] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2179'.
[  592.685868][T13427] netlink: 'syz.2.2179': attribute type 10 has an invalid length.
[  592.729129][T13427] bridge0: port 1(team0) entered blocking state
[  592.788010][T13427] bridge0: port 1(team0) entered disabled state
[  592.865771][T13427] team0: entered allmulticast mode
[  592.973278][T13426] bridge0: entered promiscuous mode
[  592.979041][T13426] team0: entered promiscuous mode
[  592.984145][T13426] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:579
[  592.993605][T13426] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 13426, name: syz.2.2179
[  593.002791][T13426] preempt_count: 201, expected: 0
[  593.007930][T13426] RCU nest depth: 0, expected: 0
[  593.012924][T13426] 3 locks held by syz.2.2179/13426:
[  593.018172][T13426]  #0: ffffffff8ec80cc0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  593.027826][T13426]  #1: ffffffff8f5101c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  593.036995][T13426]  #2: ffff88805a394368 (&dev_addr_list_lock_key#6/1){+...}-{3:3}, at: dev_uc_add+0x67/0x120
[  593.047273][T13426] Preemption disabled at:
[  593.047286][T13426] [<ffffffff8951b716>] dev_uc_add+0x56/0x120
[  593.057660][T13426] CPU: 0 UID: 0 PID: 13426 Comm: syz.2.2179 Not tainted 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) 
[  593.057690][T13426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  593.057701][T13426] Call Trace:
[  593.057710][T13426]  <TASK>
[  593.057725][T13426]  dump_stack_lvl+0x189/0x250
[  593.057770][T13426]  ? __pfx_dump_stack_lvl+0x10/0x10
[  593.057805][T13426]  ? __pfx__printk+0x10/0x10
[  593.057833][T13426]  ? print_lock_name+0xde/0x100
[  593.057852][T13426]  ? dev_uc_add+0x56/0x120
[  593.057890][T13426]  __might_resched+0x495/0x610
[  593.057932][T13426]  ? dev_uc_add+0x56/0x120
[  593.057959][T13426]  ? __pfx___might_resched+0x10/0x10
[  593.057992][T13426]  ? console_unlock+0x21b/0x270
[  593.058016][T13426]  ? __pfx_console_unlock+0x10/0x10
[  593.058051][T13426]  __mutex_lock+0x106/0xe80
[  593.058077][T13426]  ? __pfx__printk+0x10/0x10
[  593.058105][T13426]  ? team_change_rx_flags+0x38/0x220
[  593.058141][T13426]  ? __netdev_printk+0x365/0x4d0
[  593.058175][T13426]  ? __pfx___mutex_lock+0x10/0x10
[  593.058197][T13426]  ? netdev_info+0x10a/0x160
[  593.058233][T13426]  ? __pfx_netdev_info+0x10/0x10
[  593.058260][T13426]  team_change_rx_flags+0x38/0x220
[  593.058290][T13426]  ? __pfx_team_change_rx_flags+0x10/0x10
[  593.058314][T13426]  __dev_set_promiscuity+0x531/0x740
[  593.058336][T13426]  ? netdev_info+0x10a/0x160
[  593.058359][T13426]  netif_set_promiscuity+0x50/0xe0
[  593.058381][T13426]  dev_set_promiscuity+0x126/0x260
[  593.058404][T13426]  br_manage_promisc+0x180/0x560
[  593.058427][T13426]  ? __pfx_br_dev_change_rx_flags+0x10/0x10
[  593.058449][T13426]  __dev_set_promiscuity+0x531/0x740
[  593.058471][T13426]  ? __hw_addr_add_ex+0x3c5/0x770
[  593.058493][T13426]  __dev_set_rx_mode+0x17c/0x260
[  593.058516][T13426]  dev_uc_add+0xc8/0x120
[  593.058538][T13426]  macvlan_open+0x446/0x8e0
[  593.058563][T13426]  __dev_open+0x46d/0x880
[  593.058583][T13426]  ? __pfx___dev_open+0x10/0x10
[  593.058607][T13426]  __dev_change_flags+0x1ea/0x6d0
[  593.058632][T13426]  ? __pfx___dev_change_flags+0x10/0x10
[  593.058660][T13426]  rtnl_newlink_create+0x555/0xb00
[  593.058691][T13426]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  593.058714][T13426]  ? rtnl_newlink+0x8db/0x1c70
[  593.058741][T13426]  ? __pfx___mutex_lock+0x10/0x10
[  593.058772][T13426]  ? ns_capable+0x8a/0xf0
[  593.058813][T13426]  rtnl_newlink+0x16d6/0x1c70
[  593.058860][T13426]  ? __pfx_rtnl_newlink+0x10/0x10
[  593.058881][T13426]  ? is_bpf_text_address+0x26/0x2b0
[  593.058911][T13426]  ? __lock_acquire+0xab9/0xd20
[  593.058945][T13426]  ? __lock_acquire+0xab9/0xd20
[  593.058984][T13426]  ? is_bpf_text_address+0x26/0x2b0
[  593.059012][T13426]  ? is_bpf_text_address+0x292/0x2b0
[  593.059037][T13426]  ? is_bpf_text_address+0x26/0x2b0
[  593.059063][T13426]  ? kernel_text_address+0xa5/0xe0
[  593.059095][T13426]  ? __lock_acquire+0xab9/0xd20
[  593.059138][T13426]  ? __pfx_rtnl_newlink+0x10/0x10
[  593.059154][T13426]  rtnetlink_rcv_msg+0x7cf/0xb70
[  593.059175][T13426]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  593.059191][T13426]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  593.059221][T13426]  netlink_rcv_skb+0x205/0x470
[  593.059242][T13426]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  593.059260][T13426]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  593.059289][T13426]  ? netlink_deliver_tap+0x2e/0x1b0
[  593.059308][T13426]  ? netlink_deliver_tap+0x2e/0x1b0
[  593.059331][T13426]  netlink_unicast+0x758/0x8d0
[  593.059357][T13426]  netlink_sendmsg+0x805/0xb30
[  593.059384][T13426]  ? __pfx_netlink_sendmsg+0x10/0x10
[  593.059407][T13426]  ? aa_sock_msg_perm+0x94/0x160
[  593.059430][T13426]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  593.059450][T13426]  ? __pfx_netlink_sendmsg+0x10/0x10
[  593.059470][T13426]  __sock_sendmsg+0x21c/0x270
[  593.059498][T13426]  ____sys_sendmsg+0x505/0x830
[  593.059524][T13426]  ? __pfx_____sys_sendmsg+0x10/0x10
[  593.059552][T13426]  ? import_iovec+0x74/0xa0
[  593.059572][T13426]  ___sys_sendmsg+0x21f/0x2a0
[  593.059594][T13426]  ? __pfx____sys_sendmsg+0x10/0x10
[  593.059643][T13426]  ? __fget_files+0x2a/0x420
[  593.059661][T13426]  ? __fget_files+0x3a0/0x420
[  593.059687][T13426]  __x64_sys_sendmsg+0x19b/0x260
[  593.059710][T13426]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  593.059740][T13426]  ? rcu_is_watching+0x15/0xb0
[  593.059769][T13426]  ? do_syscall_64+0xbe/0x3b0
[  593.059788][T13426]  do_syscall_64+0xfa/0x3b0
[  593.059802][T13426]  ? lockdep_hardirqs_on+0x9c/0x150
[  593.059828][T13426]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  593.059851][T13426]  ? clear_bhb_loop+0x60/0xb0
[  593.059886][T13426]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  593.059910][T13426] RIP: 0033:0x7f26b958e929
[  593.059932][T13426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  593.059951][T13426] RSP: 002b:00007f26ba4c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  593.059969][T13426] RAX: ffffffffffffffda RBX: 00007f26b97b5fa0 RCX: 00007f26b958e929
[  593.059981][T13426] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[  593.059993][T13426] RBP: 00007f26b9610b39 R08: 0000000000000000 R09: 0000000000000000
[  593.060003][T13426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  593.060013][T13426] R13: 0000000000000000 R14: 00007f26b97b5fa0 R15: 00007f26b98dfa28
[  593.060037][T13426]  </TASK>
[  593.566934][T13426] 
[  593.569267][T13426] =============================
[  593.574110][T13426] [ BUG: Invalid wait context ]
[  593.578960][T13426] 6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 Tainted: G        W          
[  593.587633][T13426] -----------------------------
[  593.592479][T13426] syz.2.2179/13426 is trying to lock:
[  593.597858][T13426] ffff888034b44e00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_change_rx_flags+0x38/0x220
[  593.608005][T13426] other info that might help us debug this:
[  593.613891][T13426] context-{5:5}
[  593.617344][T13426] 3 locks held by syz.2.2179/13426:
[  593.622543][T13426]  #0: ffffffff8ec80cc0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  593.632057][T13426]  #1: ffffffff8f5101c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70
[  593.641129][T13426]  #2: ffff88805a394368 (&dev_addr_list_lock_key#6/1){+...}-{3:3}, at: dev_uc_add+0x67/0x120
[  593.651372][T13426] stack backtrace:
[  593.655104][T13426] CPU: 0 UID: 0 PID: 13426 Comm: syz.2.2179 Tainted: G        W           6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) 
[  593.655130][T13426] Tainted: [W]=WARN
[  593.655136][T13426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  593.655146][T13426] Call Trace:
[  593.655156][T13426]  <TASK>
[  593.655163][T13426]  dump_stack_lvl+0x189/0x250
[  593.655192][T13426]  ? __pfx_dump_stack_lvl+0x10/0x10
[  593.655217][T13426]  ? __pfx__printk+0x10/0x10
[  593.655235][T13426]  ? print_lock_name+0xde/0x100
[  593.655252][T13426]  __lock_acquire+0xbcb/0xd20
[  593.655290][T13426]  ? team_change_rx_flags+0x38/0x220
[  593.655314][T13426]  lock_acquire+0x120/0x360
[  593.655334][T13426]  ? team_change_rx_flags+0x38/0x220
[  593.655362][T13426]  __mutex_lock+0x182/0xe80
[  593.655376][T13426]  ? team_change_rx_flags+0x38/0x220
[  593.655401][T13426]  ? __pfx__printk+0x10/0x10
[  593.655417][T13426]  ? team_change_rx_flags+0x38/0x220
[  593.655441][T13426]  ? __netdev_printk+0x365/0x4d0
[  593.655465][T13426]  ? __pfx___mutex_lock+0x10/0x10
[  593.655479][T13426]  ? netdev_info+0x10a/0x160
[  593.655499][T13426]  ? __pfx_netdev_info+0x10/0x10
[  593.655521][T13426]  team_change_rx_flags+0x38/0x220
[  593.655546][T13426]  ? __pfx_team_change_rx_flags+0x10/0x10
[  593.655570][T13426]  __dev_set_promiscuity+0x531/0x740
[  593.655589][T13426]  ? netdev_info+0x10a/0x160
[  593.655608][T13426]  netif_set_promiscuity+0x50/0xe0
[  593.655627][T13426]  dev_set_promiscuity+0x126/0x260
[  593.655646][T13426]  br_manage_promisc+0x180/0x560
[  593.655664][T13426]  ? __pfx_br_dev_change_rx_flags+0x10/0x10
[  593.655685][T13426]  __dev_set_promiscuity+0x531/0x740
[  593.655704][T13426]  ? __hw_addr_add_ex+0x3c5/0x770
[  593.655724][T13426]  __dev_set_rx_mode+0x17c/0x260
[  593.655744][T13426]  dev_uc_add+0xc8/0x120
[  593.655769][T13426]  macvlan_open+0x446/0x8e0
[  593.655789][T13426]  __dev_open+0x46d/0x880
[  593.655806][T13426]  ? __pfx___dev_open+0x10/0x10
[  593.655824][T13426]  __dev_change_flags+0x1ea/0x6d0
[  593.655845][T13426]  ? __pfx___dev_change_flags+0x10/0x10
[  593.655867][T13426]  rtnl_newlink_create+0x555/0xb00
[  593.655891][T13426]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  593.655909][T13426]  ? rtnl_newlink+0x8db/0x1c70
[  593.655925][T13426]  ? __pfx___mutex_lock+0x10/0x10
[  593.655942][T13426]  ? ns_capable+0x8a/0xf0
[  593.655965][T13426]  rtnl_newlink+0x16d6/0x1c70
[  593.655986][T13426]  ? __pfx_rtnl_newlink+0x10/0x10
[  593.656001][T13426]  ? is_bpf_text_address+0x26/0x2b0
[  593.656027][T13426]  ? __lock_acquire+0xab9/0xd20
[  593.656052][T13426]  ? __lock_acquire+0xab9/0xd20
[  593.656079][T13426]  ? is_bpf_text_address+0x26/0x2b0
[  593.656103][T13426]  ? is_bpf_text_address+0x292/0x2b0
[  593.656126][T13426]  ? is_bpf_text_address+0x26/0x2b0
[  593.656150][T13426]  ? kernel_text_address+0xa5/0xe0
[  593.656174][T13426]  ? __lock_acquire+0xab9/0xd20
[  593.656203][T13426]  ? __pfx_rtnl_newlink+0x10/0x10
[  593.656218][T13426]  rtnetlink_rcv_msg+0x7cf/0xb70
[  593.656236][T13426]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  593.656251][T13426]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  593.656291][T13426]  netlink_rcv_skb+0x205/0x470
[  593.656309][T13426]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  593.656326][T13426]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  593.656348][T13426]  ? netlink_deliver_tap+0x2e/0x1b0
[  593.656366][T13426]  ? netlink_deliver_tap+0x2e/0x1b0
[  593.656386][T13426]  netlink_unicast+0x758/0x8d0
[  593.656405][T13426]  netlink_sendmsg+0x805/0xb30
[  593.656427][T13426]  ? __pfx_netlink_sendmsg+0x10/0x10
[  593.656448][T13426]  ? aa_sock_msg_perm+0x94/0x160
[  593.656468][T13426]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  593.656489][T13426]  ? __pfx_netlink_sendmsg+0x10/0x10
[  593.656508][T13426]  __sock_sendmsg+0x21c/0x270
[  593.656534][T13426]  ____sys_sendmsg+0x505/0x830
[  593.656556][T13426]  ? __pfx_____sys_sendmsg+0x10/0x10
[  593.656579][T13426]  ? import_iovec+0x74/0xa0
[  593.656596][T13426]  ___sys_sendmsg+0x21f/0x2a0
[  593.656616][T13426]  ? __pfx____sys_sendmsg+0x10/0x10
[  593.656648][T13426]  ? __fget_files+0x2a/0x420
[  593.656666][T13426]  ? __fget_files+0x3a0/0x420
[  593.656687][T13426]  __x64_sys_sendmsg+0x19b/0x260
[  593.656707][T13426]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  593.656731][T13426]  ? rcu_is_watching+0x15/0xb0
[  593.656758][T13426]  ? do_syscall_64+0xbe/0x3b0
[  593.656782][T13426]  do_syscall_64+0xfa/0x3b0
[  593.656795][T13426]  ? lockdep_hardirqs_on+0x9c/0x150
[  593.656819][T13426]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  593.656836][T13426]  ? clear_bhb_loop+0x60/0xb0
[  593.656854][T13426]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  593.656870][T13426] RIP: 0033:0x7f26b958e929
[  593.656887][T13426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  593.656902][T13426] RSP: 002b:00007f26ba4c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  593.656920][T13426] RAX: ffffffffffffffda RBX: 00007f26b97b5fa0 RCX: 00007f26b958e929
[  593.656932][T13426] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[  593.656944][T13426] RBP: 00007f26b9610b39 R08: 0000000000000000 R09: 0000000000000000
[  593.656954][T13426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  593.656964][T13426] R13: 0000000000000000 R14: 00007f26b97b5fa0 R15: 00007f26b98dfa28
[  593.656982][T13426]  </TASK>
[  594.217916][T13426] macvlan2: entered promiscuous mode
[  594.238480][T13426] bridge0: port 2(macvlan2) entered blocking state
[  594.250682][T13426] bridge0: port 2(macvlan2) entered disabled state
[  594.272994][T13426] macvlan2: entered allmulticast mode
[  594.287567][T13426] bridge0: entered allmulticast mode
[  594.321985][T13426] macvlan2: left allmulticast mode
[  594.354867][T13426] bridge0: left allmulticast mode
[  594.366611][T13426] bridge0: left promiscuous mode
[  594.371902][T13426] team0: left promiscuous mode
[  594.376755][T13426] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:579
[  594.386132][T13426] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 13426, name: syz.2.2179
[  594.395343][T13426] preempt_count: 201, expected: 0
[  594.400447][T13426] RCU nest depth: 0, expected: 0
[  594.405417][T13426] INFO: lockdep is turned off.
[  594.410256][T13426] Preemption disabled at:
[  594.410272][T13426] [<ffffffff8951b846>] dev_uc_del+0x56/0x110
[  594.420709][T13426] CPU: 1 UID: 0 PID: 13426 Comm: syz.2.2179 Tainted: G        W           6.16.0-rc1-syzkaller-00236-g8c6bc74c7f89 #0 PREEMPT(full) 
[  594.420748][T13426] Tainted: [W]=WARN
[  594.420757][T13426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  594.420772][T13426] Call Trace:
[  594.420781][T13426]  <TASK>
[  594.420792][T13426]  dump_stack_lvl+0x189/0x250
[  594.420833][T13426]  ? __pfx_dump_stack_lvl+0x10/0x10
[  594.420869][T13426]  ? __pfx__printk+0x10/0x10
[  594.420894][T13426]  ? is_printk_cpu_sync_owner+0x32/0x40
[  594.420924][T13426]  ? dev_uc_del+0x56/0x110
[  594.420955][T13426]  __might_resched+0x495/0x610
[  594.421000][T13426]  ? dev_uc_del+0x56/0x110
[  594.421027][T13426]  ? __pfx___might_resched+0x10/0x10
[  594.421062][T13426]  ? kasan_save_track+0x4f/0x80
[  594.421096][T13426]  ? __kasan_kmalloc+0x93/0xb0
[  594.421115][T13426]  ? __kmalloc_cache_noprof+0x230/0x3d0
[  594.421137][T13426]  ? __hw_addr_add_ex+0x1f4/0x770
[  594.421166][T13426]  ? br_fdb_sync_static+0x1bf/0x3f0
[  594.421201][T13426]  ? br_manage_promisc+0x38a/0x560
[  594.421223][T13426]  ? __dev_set_promiscuity+0x531/0x740
[  594.421255][T13426]  __mutex_lock+0x106/0xe80
[  594.421277][T13426]  ? __pfx__printk+0x10/0x10
[  594.421302][T13426]  ? team_change_rx_flags+0x38/0x220
[  594.421339][T13426]  ? __netdev_printk+0x365/0x4d0
[  594.421372][T13426]  ? __pfx___mutex_lock+0x10/0x10
[  594.421393][T13426]  ? netdev_info+0x10a/0x160
[  594.421423][T13426]  ? __pfx_netdev_info+0x10/0x10
[  594.421455][T13426]  team_change_rx_flags+0x38/0x220
[  594.421492][T13426]  ? __pfx_team_change_rx_flags+0x10/0x10
[  594.421527][T13426]  __dev_set_promiscuity+0x531/0x740
[  594.421556][T13426]  ? lock_release+0x4b/0x3e0
[  594.421600][T13426]  netif_set_promiscuity+0x50/0xe0
[  594.421627][T13426]  dev_set_promiscuity+0x126/0x260
[  594.421674][T13426]  br_manage_promisc+0x4db/0x560
[  594.421701][T13426]  ? __pfx_br_dev_change_rx_flags+0x10/0x10
[  594.421732][T13426]  __dev_set_promiscuity+0x531/0x740
[  594.421763][T13426]  __dev_set_rx_mode+0x17c/0x260
[  594.421791][T13426]  dev_uc_del+0xc0/0x110
[  594.421822][T13426]  macvlan_stop+0x259/0x3e0
[  594.421847][T13426]  ? __pfx_macvlan_stop+0x10/0x10
[  594.421873][T13426]  __dev_close_many+0x361/0x6f0
[  594.421898][T13426]  ? __pfx___dev_close_many+0x10/0x10
[  594.421923][T13426]  ? __pfx___netdev_walk_all_upper_dev+0x10/0x10
[  594.421952][T13426]  ? hsr_netdev_notify+0x29e/0xcf0
[  594.421986][T13426]  dev_close_many+0x225/0x410
[  594.422011][T13426]  ? __pfx_dev_close_many+0x10/0x10
[  594.422040][T13426]  unregister_netdevice_many_notify+0x834/0x2320
[  594.422083][T13426]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  594.422119][T13426]  ? unregister_netdevice_queue+0x1b3/0x380
[  594.422153][T13426]  ? netdev_upper_dev_unlink+0x83/0xd0
[  594.422181][T13426]  ? netdev_upper_dev_unlink+0x91/0xd0
[  594.422207][T13426]  ? macvlan_dellink+0x3d1/0x460
[  594.422233][T13426]  rtnl_newlink_create+0x802/0xb00
[  594.422268][T13426]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  594.422295][T13426]  ? rtnl_newlink+0x8db/0x1c70
[  594.422319][T13426]  ? __pfx___mutex_lock+0x10/0x10
[  594.422344][T13426]  ? ns_capable+0x8a/0xf0
[  594.422380][T13426]  rtnl_newlink+0x16d6/0x1c70
[  594.422412][T13426]  ? __pfx_rtnl_newlink+0x10/0x10
[  594.422434][T13426]  ? is_bpf_text_address+0x26/0x2b0
[  594.422472][T13426]  ? __lock_acquire+0xab9/0xd20
[  594.422508][T13426]  ? __lock_acquire+0xab9/0xd20
[  594.422548][T13426]  ? is_bpf_text_address+0x26/0x2b0
[  594.422584][T13426]  ? is_bpf_text_address+0x292/0x2b0
[  594.422619][T13426]  ? is_bpf_text_address+0x26/0x2b0
[  594.422654][T13426]  ? kernel_text_address+0xa5/0xe0
[  594.422689][T13426]  ? __lock_acquire+0xab9/0xd20
[  594.422732][T13426]  ? __pfx_rtnl_newlink+0x10/0x10
[  594.422756][T13426]  rtnetlink_rcv_msg+0x7cf/0xb70
[  594.422781][T13426]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  594.422804][T13426]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  594.422836][T13426]  netlink_rcv_skb+0x205/0x470
[  594.422863][T13426]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  594.422888][T13426]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  594.422921][T13426]  ? netlink_deliver_tap+0x2e/0x1b0
[  594.422947][T13426]  ? netlink_deliver_tap+0x2e/0x1b0
[  594.422983][T13426]  netlink_unicast+0x758/0x8d0
[  594.423011][T13426]  netlink_sendmsg+0x805/0xb30
[  594.423043][T13426]  ? __pfx_netlink_sendmsg+0x10/0x10
[  594.423073][T13426]  ? aa_sock_msg_perm+0x94/0x160
[  594.423103][T13426]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  594.423134][T13426]  ? __pfx_netlink_sendmsg+0x10/0x10
[  594.423162][T13426]  __sock_sendmsg+0x21c/0x270
[  594.423198][T13426]  ____sys_sendmsg+0x505/0x830
[  594.423230][T13426]  ? __pfx_____sys_sendmsg+0x10/0x10
[  594.423263][T13426]  ? import_iovec+0x74/0xa0
[  594.423287][T13426]  ___sys_sendmsg+0x21f/0x2a0
[  594.423317][T13426]  ? __pfx____sys_sendmsg+0x10/0x10
[  594.423363][T13426]  ? __fget_files+0x2a/0x420
[  594.423388][T13426]  ? __fget_files+0x3a0/0x420
[  594.423419][T13426]  __x64_sys_sendmsg+0x19b/0x260
[  594.423449][T13426]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  594.423483][T13426]  ? rcu_is_watching+0x15/0xb0
[  594.423522][T13426]  ? do_syscall_64+0xbe/0x3b0
[  594.423545][T13426]  do_syscall_64+0xfa/0x3b0
[  594.423565][T13426]  ? lockdep_hardirqs_on+0x9c/0x150
[  594.423599][T13426]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  594.423622][T13426]  ? clear_bhb_loop+0x60/0xb0
[  594.423648][T13426]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  594.423671][T13426] RIP: 0033:0x7f26b958e929
[  594.423692][T13426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  594.423713][T13426] RSP: 002b:00007f26ba4c8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  594.423737][T13426] RAX: ffffffffffffffda RBX: 00007f26b97b5fa0 RCX: 00007f26b958e929
[  594.423756][T13426] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[  594.423771][T13426] RBP: 00007f26b9610b39 R08: 0000000000000000 R09: 0000000000000000
[  594.423786][T13426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  594.423801][T13426] R13: 0000000000000000 R14: 00007f26b97b5fa0 R15: 00007f26b98dfa28
[  594.423825][T13426]  </TASK>
[  595.075159][T13398] delete_channel: no stack