last executing test programs:

16.361523183s ago: executing program 4 (id=3106):
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x2000, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
preadv(r0, &(0x7f0000000180)=[{&(0x7f0000001a80)=""/102400, 0x19000}, {0x0}], 0x2, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
epoll_create(0x3f)
syz_emit_ethernet(0x52, &(0x7f0000000200)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x7, 0x14, 0xf, 0x3, 0x0, [{@dev}, {@empty}]}]}}, @redirect={0x8, 0x0, 0x0, @local, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @remote}}}}}}, 0x0)
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3)
ftruncate(0xffffffffffffffff, 0xffff)
fcntl$addseals(r2, 0x409, 0x7)
r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, 0x0)
r4 = fcntl$dupfd(r3, 0x0, 0xffffffffffffffff)
ppoll(&(0x7f00000000c0)=[{}, {r4, 0x1004}], 0x2, 0x0, 0x0, 0x0)
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000240)={0x18, 0x0, {0x3, @dev, 'syz_tun\x00'}}, 0x1e)
r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0)
ioctl$SNDCTL_TMR_START(r6, 0x5402)
write$sequencer(r6, &(0x7f0000000000)=[@t={0x81, 0x6, 0x0, 0x0, @generic}], 0x8)
r7 = socket$pppl2tp(0x18, 0x1, 0x1)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x2, 0xfffffffd}}, 0x2e)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)

15.426619465s ago: executing program 4 (id=3142):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000380))
ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x11})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

15.15523026s ago: executing program 4 (id=3144):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000380))
r2 = socket$inet6_dccp(0xa, 0x6, 0x0)
accept4(r2, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @private2}, &(0x7f0000000000)=0x80, 0x80000)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', <r3=>0x0, 0x0, 0x0, 0x0, 0x0, {{0x1f, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @private=0xa010101, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x9, [0x401, 0x1000, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@private=0xa010100}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x26e1, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xde, 0xc0000000, 0x70463561, 0x802, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x4}, 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x183442, 0x0)
ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000100))
ioctl$PPPIOCSFLAGS1(r9, 0x40047459, 0x0)
ioctl$PPPIOCSMAXCID(r9, 0x40047451, &(0x7f00000002c0))
write$ppp(r9, &(0x7f00000003c0)='\x00!', 0x100000)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r10, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r10, 0x0)
r11 = dup(r6)
r12 = memfd_create(&(0x7f0000000fc0)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d  \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\x1c#\x1c\xc9\x006U\xf8\x14D\b\x0f\xfd\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-:\xb6\xbc\x00\xa5\xa8\xe58\x00\x9fM\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8\x00\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.ooZ+)\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8\xdbQ\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xa0\xef\xccUxhg\xffY\xe6\x83\xa6r\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\xa0\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.}\x89\xac\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93\x02\xab\t*\xbf\x89\xea\xaf\xd4\xe7)G\xc7\xd2\x81\xccT\xfa\"\xb3\xbe\xa1r\x9a \xd9\tb\xf1\x9aa\xdb\xffp\xc3\x9dFx\x18}\xb0/M\x12\x1a\xc1\xe8\n\x06\xac\xd2\xf1\x00\xcf!\x9274\x18\xc5U\xf7>\x12qsH\xbd\x1f|\x82\xb9\xcb\xe7H_\x95\x9f\xc1P\x16\x8a\xc4nxh\xde)x\xaa8\xe8\x8d\xe3pr\xba\xfeA\x89op\xde\xd4\xe1=\x8b\x9d\x1b\x9c\xe2F\xd0\xe1>\xd2\xe7\r;\x8fcq\xf1\xc0\fWG\xfb\xae\xe9\xa4\x0fAR{\xec\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x96\xa4/\xc6-\x1e\xd9)\xab\xfe\v\rt\xd4p\xe3}\x87\xa7\x9cm2*\x8c\x02\xf3\xc2aJ\x1cQ\xe7]\xc1I\x8d\xc5;\x12k=\xab\xd8i(/\x05\xac\x9f\x13\xb9\x13\x8a\x87C&V\xdb\xc0\x11\xf1Y_\xfcc\xf8\x94D\xefV\xf7\xb6\xfaY4Q\xb6\xbe\xe8\x92\xa8U4\x8d\xf2<-\x05', 0x7)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r12, 0x0)
ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0)
add_key$fscrypt_v1(0x0, 0x0, &(0x7f00000000c0)={0x0, "4a8d480f65491adf0fbc0b54d9391fec4647e0a1c2934cfde8e80d7f6e591f6a320847487bfbe55e35015fcc1824cd27189b63760775c5831a0866ee64818b40"}, 0x48, 0xfffffffffffffffd)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000500)={0x1, 0x2, 0x1000, 0xb0, &(0x7f0000000380)="a2ff06c52a0958d2eea4004f0de4f03368a08756e199838ffdd39a009f7acef49a18759c83f525716719b31b2771982617d5f7a4780c577aef1d0cbceff1c72ff1bc585ca78c43984b02a954def82fd787845c1b60159b9990a01aa9c8faa1c065e13ab83044f4c56274ab6be43381778681a4bc946d98b237cbee882389d226ff36e6a35a1f7ee898a46cf991ea815bf6daefcb3715eb35663ff6582aa737237c6e1416529639f6c1327dd66f0b29b1", 0x8a, 0x0, &(0x7f0000000440)="f2394df68df40a9e03e9d7f6c16d2e9e89ac46cec062df19cb4bb3bf70fa82e1a21c720861ecf4b0080ce86a24de65143d2043c8ea82e60d3ef0518b5fbb8d941b93a9aa675db591b73db699c44dc67ca5bc921d0847df35394bc4a8842ed93c060fefa2dd563e3609cb9c292bbf934a17bcd89f71616ce6b2bd05c6ab78bb226d3958df408f9da8d28e"})
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000180), 0x1, 0x1)
ioctl$KVM_REGISTER_COALESCED_MMIO(r6, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})

14.425028761s ago: executing program 4 (id=3147):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, <r1=>0x0, 0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
ioctl$VHOST_VDPA_SET_CONFIG(r4, 0x4008af74, 0xffffffffffffffff)
r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000300)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r3, @ANYRES32=r5, @ANYRESOCT=r2, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r5, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x1, 0x803, 0x0)
getsockopt$IP_SET_OP_VERSION(r7, 0x1, 0x53, &(0x7f0000000200), &(0x7f0000000280)=0x8)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5ffad8800000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0)

11.868541913s ago: executing program 4 (id=3158):
r0 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$netlink(r0, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000040)={0x10, 0x3}, 0x10}, {&(0x7f0000000300)={0x10, 0x1029}, 0x10}], 0x2}, 0x0)
r1 = socket(0x0, 0x3, 0x3a)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x10001)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xf)
readv(r3, 0x0, 0x0)
writev(r3, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100a20035000000560000022500000019000a00100000ad07fd17e5ffff080c38005100000000000a", 0x39}], 0xc)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pipe(0x0)
dup(r1)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x2)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYRES16=r2], 0x94}, 0x1, 0x0, 0x0, 0x20008844}, 0x20040814)
syz_emit_vhci(0x0, 0x1d)
socket$packet(0x11, 0x2, 0x300)
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x0)
ioctl$USBDEVFS_CONTROL(r4, 0x8004550f, &(0x7f0000000140)={0x60, 0x9, 0x0, 0x7d, 0x0, 0x0, 0x0})
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map, 0xffffffffffffffff, 0x7}, 0x10)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x0, 0x30}, 0xc)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write$binfmt_elf64(r5, &(0x7f0000000380)=ANY=[], 0x2df)
sendto$inet6(r5, &(0x7f0000000c80)="7cffa9061b2f8b082b6f69ae50430c8a8b6aa3162ba083c4a52e1ab0ac50ed4a19b1a69988000d5bed4433daaa4932dbb1cb3550dee8b23579d76ce37d574b43fca1eed8ebd38d1303240ed0d84517692128dd5aef5c4d60a6659952a1437c6f0ac3ed75806011ccbaa504f41a7e0abcf8823bc4a71ef8c52c2b297b539eaf752c56ebfe9b0542543069257dafcbf76c958d4cbf4eaaa67c5c2bd9e6518be34b56add7613ab83d389724b664e62c154e1a5aac073a53a0e8cadcf51ef495ebbcc77d5e36ff24c3f282289cc077374b714e08fbfecbdc8f14ef3fd409af4caf6fcb7d663beab335f239a1e93b399c93d7c036e1b39a7c477945f82b6dde53b1c21b590a58ba688ac4fb530d2c5b1195a127d2eaec840ab59f090d7047c278611e080cebe7b28588c11a44be99fe6f88c73441bf625b70565669997f4c3cda5afe1d6429908a69a459d35ba8c2f28076d8711f2667de749a783fac94ebd02680f20fb723c35c287a1f45064846385750665ffa74579083fbb1b1d6b7c90168252b1c5313544569203e7adb8e271a94f7413e5cfd6aa3157c4fc29bddba3683fcd032aecb513b2f27530fbefa0000000000000003c058e812d8db87de5e3eceae268b91f7d59daf77646fa4df99877dd5a9540934c7af91b96486eea62897be6acbe1bae8e46b112f1385e7cea9e4daccc6f1b98ce3b4322af8299a45ddcb5be8d3e469fdde9896ca324a2f3c88c616a7dccde331698ce2d39f96220251011b4dfbec953b5c30e94adb5586cec0af234859805bb7df1101ae80318ff127e913178d79cfa918d54585b6184255e872e2dc33a5c7c30a756bbd63c32a3e6a22863781747d185acb64583976c4289394d642b07d18e2932d0a78bd2ccf92b3e94e82f1e9239fa272402f4c9efcf068709a44d6f652a4f23df89f9a15e6bf0c7e65d8f3e32c35e83d30298074d16cb5ff4ded1df81009bbae888fceb9a8109ba319605e1776e52d2069b5cd7de07cf8dc488ba6a9c7559ff49674a490991f323736f302004007d0ccf2e5eaceac6b56f48f2b00592d7a378f118d8b3e5ecd2035c8252374c91bc79cf26ac11ddffe2c09e1aa032da0713732387f950e3f4e301eb1d26e5a2b19318e50d555c832e279894d8c9b03e8940738c0fe391b29907d0d5f9214d6e697a19247f4e8221aca2ac47debd7c45b8344941cbecbaf44af343b24a4f88caf207d72002fb8b7d156997cb7275f535e6a9d6480046246e60bea0cf6f54abc69ff9418b6cb9301eb6890227215b633a886fb13c89698e51e482c42ca99613b20e22e5ce15272f5bda8b18cf53d49130a94135dd8a9692c", 0x34000, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)

11.59709504s ago: executing program 4 (id=3159):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x62, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8}, @TCA_HHF_QUANTUM={0x8}, @TCA_HHF_EVICT_TIMEOUT={0xfffffffffffffc52}, @TCA_HHF_EVICT_TIMEOUT={0x8}, @TCA_HHF_NON_HH_WEIGHT={0x8}, @TCA_HHF_HH_FLOWS_LIMIT={0x8}]}}]}, 0x60}}, 0x0)

8.698660959s ago: executing program 2 (id=3172):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet6(0xa, 0x2, 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000010902240001000000000904000000ff0100000724", @ANYRES16=r1], 0x0)
personality(0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x4)
r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100))
r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, 0x0)
r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65)
write$snddsp(r7, &(0x7f0000000200)="a38d", 0x2)
ioctl$SNDRV_PCM_IOCTL_DRAIN(r7, 0x4144, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(r7, 0x40084149, &(0x7f0000000180)=0x4)
r8 = socket$packet(0x11, 0x3, 0x300)
getsockopt(r3, 0x100, 0x6, &(0x7f0000001280)=""/4096, &(0x7f0000000140)=0x1000)
setsockopt$packet_int(r8, 0x107, 0xe, &(0x7f0000000080)=0xf1b, 0x4)
write(r4, &(0x7f0000000240)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff00eddc690000008a151f75", 0x27)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a8010000400"/28], 0x34}}, 0x0)
fsetxattr(r0, &(0x7f00000000c0)=@random={'trusted.', 'bridge_slave_0\x00'}, &(0x7f0000000100)='bridge_slave_0\x00', 0xf, 0x0)

5.772753356s ago: executing program 0 (id=3182):
memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0x4018480c, &(0x7f00000000c0)={0x2})
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201010000000010580100010000000000010902"], 0x0)
syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
listen(r4, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10)
accept$inet6(r4, 0x0, 0x0)
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x4cd)
close_range(r3, 0xffffffffffffffff, 0x0)
sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYRESOCT], 0x14}}, 0x0)
r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
writev(r6, &(0x7f00000000c0), 0x1)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
sendto$inet(r2, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10)
sendmsg$inet_sctp(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)='\x00', 0x1}, {0x0}], 0x2, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x41}}], 0x20}, 0x0)
socket(0x2, 0x3, 0x100)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='freezer.state\x00', 0x275a, 0x0)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x111}}, 0x20)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r7})

5.644203003s ago: executing program 2 (id=3184):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x40901, 0x0)
write$FUSE_DIRENT(r1, &(0x7f00000002c0)=ANY=[@ANYRESOCT], 0x200001d0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8}]}, 0x3c}}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x6c, r7, 0x1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x4d, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {}, @device_a, @device_a, @random="a5fcc8639e98"}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3, {0x8}}, @void, @val={0x3c, 0x4, {0x0, 0x5}}, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x32}}, 0x0)
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r9, &(0x7f0000000240), 0x3af4701e)
sendfile(0xffffffffffffffff, r4, 0x0, 0x10000a007)
r10 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10)
syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x30, 0x0, @wg=@data}}}}}, 0x0)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)

5.249980758s ago: executing program 2 (id=3186):
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x2000, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
preadv(r0, &(0x7f0000000180)=[{&(0x7f0000001a80)=""/102400, 0x19000}, {0x0}], 0x2, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
epoll_create(0x3f)
syz_emit_ethernet(0x52, &(0x7f0000000200)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x7, 0x14, 0xf, 0x3, 0x0, [{@dev}, {@empty}]}]}}, @redirect={0x8, 0x0, 0x0, @local, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @remote}}}}}}, 0x0)
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3)
ftruncate(r2, 0xffff)
fcntl$addseals(r2, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x1000})
ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x1004}], 0x2, 0x0, 0x0, 0x0)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000240)={0x18, 0x0, {0x3, @dev, 'syz_tun\x00'}}, 0x1e)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0)
ioctl$SNDCTL_TMR_START(r4, 0x5402)
write$sequencer(r4, &(0x7f0000000000)=[@t={0x81, 0x6, 0x0, 0x0, @generic}], 0x8)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x2, 0xfffffffd}}, 0x2e)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90)

4.371225014s ago: executing program 1 (id=3187):
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x2000, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
preadv(r0, &(0x7f0000000180)=[{&(0x7f0000001a80)=""/102400, 0x19000}, {0x0}], 0x2, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
epoll_create(0x3f)
syz_emit_ethernet(0x52, &(0x7f0000000200)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x7, 0x14, 0xf, 0x3, 0x0, [{@dev}, {@empty}]}]}}, @redirect={0x8, 0x0, 0x0, @local, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @remote}}}}}}, 0x0)
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3)
ftruncate(r2, 0xffff)
fcntl$addseals(r2, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x4000, 0x1000})
ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x1004}], 0x2, 0x0, 0x0, 0x0)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000240)={0x18, 0x0, {0x3, @dev, 'syz_tun\x00'}}, 0x1e)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0)
ioctl$SNDCTL_TMR_START(r4, 0x5402)
write$sequencer(r4, &(0x7f0000000000)=[@t={0x81, 0x6, 0x0, 0x0, @generic}], 0x8)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x2, 0xfffffffd}}, 0x2e)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90)

4.125117945s ago: executing program 2 (id=3188):
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@typed={0x8, 0x17, 0x0, 0x0, @fd=r2}]}, 0x1c}, 0x1, 0x3000000}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
socket$inet6_mptcp(0xa, 0x1, 0x106)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r4, @ANYRES32, @ANYRES32=r3], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4], 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='jbd2_handle_stats\x00', r5}, 0x10)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x0, 0x3}, 0x48)
r7 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102})
ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000080)={'nicvf0\x00', 0x400})
ioctl$TUNSETTXFILTER(r7, 0x401054d5, &(0x7f0000001e80)=ANY=[@ANYBLOB="05091484ea5d5812b30cd2403f6a81"])
r8 = openat$tun(0xffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000002280)={'pim6reg0\x00', 0x2102})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYRESDEC=r5], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4d, '\x00', 0x0, 0x11, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r9}, 0x10)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_writepages_result\x00', r10}, 0x10)

3.92389267s ago: executing program 3 (id=3189):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
close(r1)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r3, 0x0, 0x6, 0x7fffffffffffffff})
ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000040)={0x28, 0x0, r3, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000})
ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f00000000c0)={0x28, 0x0, r3, 0x0, &(0x7f0000000500)="d3", 0x1})
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000001c0)={0x28, 0x0, r3, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000040))
socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x5c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x34, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x4f}]}]}, 0x5c}}, 0x0)

3.777750145s ago: executing program 3 (id=3190):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000500)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0)

3.705413495s ago: executing program 2 (id=3191):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001d0"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="b4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0)
ftruncate(r1, 0x3f)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x12, r1, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001700)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="000004"], 0x0, 0x0, 0x0, 0x0})

3.608470236s ago: executing program 3 (id=3192):
set_mempolicy(0x4005, &(0x7f0000000040)=0x9, 0x4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
socket$inet6(0xa, 0x0, 0x0)
r2 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0)
writev(r2, 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
sendmsg$key(r3, 0x0, 0x0)
sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x10}}, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x68}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x70}}, 0x0)
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043e110b0700ffffffffffff00ffffff14000001b9bcb0710452166112b69ee7b0488764e8f32716e4485aea592c2a3246f5c23207ad3fab0168d8bf5f6997a3ca39ea4468b5930e949cacd99100cf99d02b0e816d4eb4eaee48114a1ac7a7e452318583e2be9e"], 0xfc)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)

3.331563529s ago: executing program 1 (id=3193):
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000000)={0x1, 0x83, 0x202000, 0x6d74, 0xe166, 0x427})
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={<r1=>0x0, 0x4}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={r1, @in6={{0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6}}, 0x4, 0xd0a, 0x1, 0x5, 0x6, 0x5, 0x8}, 0x9c)
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='attr/fscreate\x00')
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000200)={0x2, <r3=>0x0})
ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000240)={0x0, r3})
r4 = signalfd4(r0, &(0x7f0000000280)={[0x5]}, 0x8, 0x80000)
ioctl$PTP_PIN_SETFUNC2(r4, 0x40603d10, &(0x7f00000002c0)={'\x00', 0x7f73c54d, 0x3, 0x6})
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000340)={{0x1, 0x1, 0x18, <r5=>r2, {0x3}}, './file0\x00'})
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x10, r5, 0xec069000)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000000380)={{<r6=>0x0, 0x29f, 0xfffffffffffffffb, 0x9, 0x400, 0x800, 0x3, 0x0, 0x0, 0xae, 0x9, 0x30, 0x6, 0x61}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000440)={r6})
r7 = dup(r2)
syz_clone3(&(0x7f0000001680)={0x200000000, &(0x7f0000001440), &(0x7f0000001480), &(0x7f00000014c0)=<r8=>0x0, {0xd}, &(0x7f0000001500)=""/63, 0x3f, &(0x7f0000001540)=""/208, &(0x7f0000001640)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r7}}, 0x58)
syz_open_procfs$pagemap(r8, &(0x7f0000001700))
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001740), 0x200000, 0x0)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000017c0), r4)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000001880)={'ip6tnl0\x00', &(0x7f0000001800)={'ip6gre0\x00', <r11=>0x0, 0x2f, 0x1f, 0x3, 0x40, 0x10, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x8, 0xb352, 0x4}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001900)={'gretap0\x00', &(0x7f00000018c0)={'gre0\x00', <r12=>0x0, 0x80, 0x8, 0x10001, 0x8001, {{0x7, 0x4, 0x3, 0xa, 0x1c, 0x65, 0x0, 0x7, 0x29, 0x0, @private=0xa010100, @broadcast, {[@timestamp={0x44, 0x8, 0xd7, 0x0, 0x6, [0x9]}]}}}}})
getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000001940)={@private0, <r13=>0x0}, &(0x7f0000001980)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f00000019c0)={'team0\x00', <r14=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001a80)={'syztnl0\x00', &(0x7f0000001a00)={'syztnl1\x00', <r15=>0x0, 0x4, 0xe6, 0xff, 0x64b, 0x18, @dev={0xfe, 0x80, '\x00', 0x11}, @remote, 0x700, 0x7800, 0xfffffffb, 0x3}})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001b40)={'sit0\x00', &(0x7f0000001ac0)={'gretap0\x00', <r16=>0x0, 0x10, 0x8, 0x9, 0x5, {{0x17, 0x4, 0x0, 0xb, 0x5c, 0x68, 0x0, 0x7, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@lsrr={0x83, 0xb, 0xc7, [@empty, @broadcast]}, @end, @cipso={0x86, 0x28, 0x0, [{0x0, 0x8, "4e79ad924ab4"}, {0x7, 0xe, "6b4d0062f9559ee5122d3947"}, {0x5, 0xc, "eb5ca55c11fa11c2460d"}]}, @timestamp_addr={0x44, 0x14, 0xf3, 0x1, 0xf, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x9}]}]}}}}})
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000001d00)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001b80)={0x110, r10, 0x100, 0x70bd2b, 0x63, {}, [@HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x40000}, 0x44041)
setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000001d40)={r1, 0x80, 0xc000}, 0x10)
r17 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000001d80)=@req={0x0, 0x2, 0x8, 0x8}, 0x10)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r17, 0x400c6615, &(0x7f0000001dc0)={0x0, @aes128, 0x0, @desc4})

3.096686802s ago: executing program 3 (id=3194):
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080), 0x111, 0x3}}, 0x20)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r2 = socket$l2tp(0x2, 0x2, 0x73)
socket$inet_sctp(0x2, 0x0, 0x84)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r1, 0x923, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r2}]}, 0x3c}}, 0x0)

3.023924193s ago: executing program 1 (id=3195):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x40901, 0x0)
write$FUSE_DIRENT(r1, &(0x7f00000002c0)=ANY=[@ANYRESOCT], 0x200001d0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8}]}, 0x3c}}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x6c, r7, 0x1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x4d, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {}, @device_a, @device_a, @random="a5fcc8639e98"}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3, {0x8}}, @void, @val={0x3c, 0x4, {0x0, 0x5}}, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x32}}, 0x0)
write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0)
preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r9, &(0x7f0000000240), 0x3af4701e)
sendfile(0xffffffffffffffff, r4, 0x0, 0x10000a007)
r10 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10)
syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x30, 0x0, @wg=@data}}}}}, 0x0)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)

2.654682081s ago: executing program 0 (id=3196):
socket$netlink(0x10, 0x3, 0x0)
socket$caif_stream(0x25, 0x1, 0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00')
r1 = gettid()
sigaltstack(&(0x7f0000000000)={0x0, 0x180000001, 0xffffffffffffff73}, 0x0)
tkill(r1, 0x21)
semget$private(0x0, 0x5, 0x0)
semop(0x0, &(0x7f00000002c0)=[{0x0, 0xede0}], 0x1)
semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xf000}], 0x1, 0x0)
semctl$GETNCNT(0x0, 0x0, 0xe, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019000100"/18, @ANYRES32], 0xb8}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000014000100"/20], 0xb8}}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0)
sendfile(0xffffffffffffffff, r4, 0x0, 0x6)

2.62372396s ago: executing program 1 (id=3197):
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x2000, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5)
preadv(r0, &(0x7f0000000180)=[{&(0x7f0000001a80)=""/102400, 0x19000}, {0x0}], 0x2, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
epoll_create(0x3f)
syz_emit_ethernet(0x52, &(0x7f0000000200)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0xa, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x7, 0x14, 0xf, 0x3, 0x0, [{@dev}, {@empty}]}]}}, @redirect={0x8, 0x0, 0x0, @local, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @remote}}}}}}, 0x0)
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
socket$inet_udplite(0x2, 0x2, 0x88)
r2 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3)
ftruncate(r2, 0xffff)
fcntl$addseals(r2, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x1000})
ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x1004}], 0x2, 0x0, 0x0, 0x0)
r3 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r3, &(0x7f0000000240)={0x18, 0x0, {0x3, @dev, 'syz_tun\x00'}}, 0x1e)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0)
ioctl$SNDCTL_TMR_START(r4, 0x5402)
write$sequencer(r4, &(0x7f0000000000)=[@t={0x81, 0x6, 0x0, 0x0, @generic}], 0x8)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e)
write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, {0x0, 0x0, 0x0}}, 0x48)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x2, 0xfffffffd}}, 0x2e)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90)

2.55458862s ago: executing program 3 (id=3198):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000000c0)=0x7, 0x4)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902120001000000000904"], 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_procs(r4, &(0x7f0000000840)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_int(r5, &(0x7f0000000100)=0x80000795e, 0x12)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r6}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00')
r7 = landlock_create_ruleset(&(0x7f0000000240)={0x2046}, 0x10, 0x0)
landlock_restrict_self(r7, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file6\x00', 0x2)
syz_usb_control_io(r2, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20281, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="000020000000005e69311a6696979bffffffffffffffffb6d49fc63d26277045be0a71d256c869fce04fb7064e738c65fd98003c77e288de35"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r8, 0x8948, &(0x7f0000000000)={'vlan0\x00', @local})
syz_usb_control_io(r2, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000480)={0x0, 0x0, 0x6, "127f93846b27"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.644428365s ago: executing program 0 (id=3199):
r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$assume_authority(0x10, r0)
r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
r2 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0505510, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f0000000000)=""/41)
add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, r1)
add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, r1)
r3 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1)
add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="fb9c", 0xfffff, r3)
r4 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="fb9c", 0xfffff, r4)
r5 = add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000180)="fb98", 0x2, 0xfffffffffffffffb)
keyctl$read(0xb, r5, &(0x7f0000000300)=""/51, 0xfffffffffffffc2f)
keyctl$link(0x8, r4, r5)
add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "52584a0dd465b5254432dd59bcb640901942e943f7b76a5c0100000000000090d9d47a4b6a1e03fb8888d9f595f4804bd3aea5f971309976f14b00", 0x13}, 0x48, r5)
r6 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
r7 = add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="fb9c", 0xfffff, r6)
keyctl$read(0xb, r7, &(0x7f0000000300)=""/51, 0xfffffffffffffc2f)
keyctl$restrict_keyring(0x1d, r7, 0x0, &(0x7f0000000200)='keyring\x00')
keyctl$dh_compute(0x17, &(0x7f0000000000)={r5, 0x0, r7}, &(0x7f0000000100)=""/107, 0x6b, &(0x7f00000001c0)={&(0x7f0000000040)={'sha256-arm64-neon\x00'}, &(0x7f0000000180)="12824e122e2dbf5a154e6bf7e4a3f5e3a642b5b488b69adb2ce4797d726ecf0b9a6ddfb7f0f9a5ed9b45f047dc8de91f719b754d4969aa", 0x37})
keyctl$read(0xb, r7, &(0x7f00000010c0)=""/4102, 0x1006)

1.623657567s ago: executing program 1 (id=3200):
io_uring_setup(0x497c, &(0x7f00000003c0)={0x0, 0x6, 0x200})
openat$vimc1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
creat(0x0, 0x1de)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd607f00ef00072c00fe8000000000000000"], 0x0)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0)
ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x2}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xff5f, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@base={0x1a, 0x77cbd800, 0xffffff23, 0x7, 0x2000, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2}, 0xfffffcd0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x74, 0x2}, @ramp})
syz_open_dev$evdev(0x0, 0x0, 0x0)
write$char_usb(0xffffffffffffffff, &(0x7f0000000040), 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r2, 0x211, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast1}]}, 0x24}}, 0x0)

735.099056ms ago: executing program 0 (id=3201):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000500)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0)

587.724837ms ago: executing program 1 (id=3202):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$KVM_TRANSLATE(r3, 0x4138ae84, &(0x7f0000000000))
r5 = fsopen(&(0x7f00000002c0)='romfs\x00', 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000130000,us', @ANYRESDEC=0xee01, @ANYBLOB=',group_id=', @ANYRESDEC, @ANYBLOB="2c64656661756c745f7065726d698273696f6e732c626c6b73697a653d3078303030303030303030303030303430302c6f746865722c616c6c6f775f6f746865722c626c6b73697a653d3078303030303030303030303030313030302c62"], 0x0, 0x0, 0x0)
r6 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x9c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56}, @TCA_TAPRIO_ATTR_FLAGS={0x8}, @TCA_TAPRIO_ATTR_FLAGS={0xffffffffffffff42}]}}]}, 0x9c}}, 0x0)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x22042, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151)
connect$inet6(r10, &(0x7f0000000080), 0x1c)
r11 = dup2(r10, r10)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r11, 0x6, 0x16, &(0x7f0000000440), 0x131f64)
ioctl$KDSETKEYCODE(r11, 0x541b, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r11)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x797, 0x1, 0x3f, 0x60, r11, 0x7, '\x00', r7, r1, 0x4, 0x4, 0x3}, 0x48)
write$tun(r9, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRES64=r9, @ANYRES32=r4, @ANYRES16=r1, @ANYRES16=r9, @ANYRES8=r3, @ANYRES64=r9, @ANYRES64=r5, @ANYRES16=r2], 0x15)
openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2000, 0x71)

553.302682ms ago: executing program 2 (id=3203):
syz_genetlink_get_family_id$batadv(&(0x7f0000002680), 0xffffffffffffffff)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x101001, 0x0)
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x441, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_INPUT(r4, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0)
r5 = getpgrp(0x0)
sched_setscheduler(r5, 0x3, &(0x7f0000000080)=0x2)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

518.046581ms ago: executing program 0 (id=3204):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@multicast2}, {@private=0xa010101}, {}]}, @noop, @noop]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

6.264137ms ago: executing program 3 (id=3205):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
r0 = fsopen(&(0x7f00000000c0)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x3d, 0x4, 0x0, 0x0, 0xf4, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x54, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x3}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}, {@remote, 0x3}, {@local, 0x7fff}]}, @timestamp_prespec={0x44, 0x3c, 0xff, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010100}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0x0, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x23, 0x0, [@remote, @remote, @dev, @multicast1, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x33}, @local, @multicast1]}]}}}}})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
quotactl$Q_QUOTAON(0xffffffff80000102, 0x0, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@map=r1, 0xa, 0x0, 0x8, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r2=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@cgroup=r1, r1, 0x1d, 0x20, 0x0, @link_fd=r1, r2}, 0x20)
write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_ABS_SETUP(r3, 0x40045565, &(0x7f0000000000)={0x0, {0x0, 0xfffffffc}})
syz_emit_vhci(0x0, 0x0)
ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0)
syz_emit_vhci(&(0x7f00000057c0)=ANY=[@ANYBLOB="02c8201c0018000100110002000000030008000000000000000002000000000000"], 0x21)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
keyctl$chown(0x4, 0x0, 0x0, 0xffffffffffffffff)
r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c0001000004000904000001c6cbea00090587033b"], 0x0)
syz_usb_ep_read(r4, 0x47, 0x77, &(0x7f00000002c0)=""/119)
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x2000000)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)
finit_module(r1, &(0x7f00000000c0)='#! ', 0x0)
sendmmsg$inet6(r7, &(0x7f0000001ec0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000100)="b3", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x4}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000001c0)="a9", 0x1}], 0x1}}], 0x2, 0x0)

0s ago: executing program 0 (id=3206):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_print_times', 0x40901, 0x0)
write$FUSE_DIRENT(r1, &(0x7f00000002c0)=ANY=[@ANYRESOCT], 0x200001d0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8}]}, 0x3c}}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_256={{0x304}, '\x00', "376a31a11e8e279cec092f071cc80f218d360356a936a7e3971a8c35c47e5804", '\x00', "fffffffffffffffd"}, 0x38)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x6c, r6, 0x1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x4d, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {}, @device_a, @device_a, @random="a5fcc8639e98"}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3, {0x8}}, @void, @val={0x3c, 0x4, {0x0, 0x5}}, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x32}}, 0x0)
write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r9, &(0x7f0000000240), 0x3af4701e)
sendfile(r8, 0xffffffffffffffff, 0x0, 0x10000a007)
r10 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10)
syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x30, 0x0, @wg=@data}}}}}, 0x0)
writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)

kernel console output (not intermixed with test programs):

 Mfr=16, Product=0, SerialNumber=0
[  714.497044][  T784] usb 5-1: Manufacturer: syz
[  714.517176][  T784] usb 5-1: config 0 descriptor??
[  714.524971][  T784] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  714.535254][  T784] ftdi_sio ttyUSB0: unknown device type: 0xc698
[  714.705621][T11705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  714.718368][T11705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  714.734468][T16992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  714.734542][T11705] bond0 (unregistering): Released all slaves
[  714.743281][T16992] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  714.805335][ T5099] Bluetooth: hci0: command tx timeout
[  714.923761][T11705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  714.936134][T11705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  714.949741][T11705] bond0 (unregistering): Released all slaves
[  715.036647][T16992] netlink: 'syz.4.2974': attribute type 4 has an invalid length.
[  715.062438][T16992] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2974'.
[  715.144953][ T5150] usb 5-1: USB disconnect, device number 114
[  715.169492][ T5150] ftdi_sio 5-1:0.0: device disconnected
[  715.274703][T16988] ipvlan2: entered promiscuous mode
[  715.282139][T16988] ipvlan2: entered allmulticast mode
[  715.287572][T16988] mac80211_hwsim hwsim58 wlan0: entered allmulticast mode
[  715.411310][   T25] gspca_vc032x: reg_r err -71
[  715.416317][   T25] vc032x 3-1:0.0: probe with driver vc032x failed with error -71
[  715.427589][   T25] usb 3-1: USB disconnect, device number 98
[  715.771778][T16860] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  715.799775][T16860] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  715.975879][T16860] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  716.031150][T11705] hsr_slave_0: left promiscuous mode
[  716.043830][T11705] hsr_slave_1: left promiscuous mode
[  716.063194][T11705] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  716.087110][T11705] batman_adv: batadv0: Removing interface: batadv_slave_0
[  716.096378][T11705] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  716.104848][T11705] batman_adv: batadv0: Removing interface: batadv_slave_1
[  716.131369][T11705] hsr_slave_0: left promiscuous mode
[  716.140230][T11705] hsr_slave_1: left promiscuous mode
[  716.159840][T11705] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  716.167333][T11705] batman_adv: batadv0: Removing interface: batadv_slave_0
[  716.198514][T11705] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  716.206166][T11705] batman_adv: batadv0: Removing interface: batadv_slave_1
[  716.266548][T11705] veth0_macvtap: left promiscuous mode
[  716.273567][T11705] veth1_vlan: left promiscuous mode
[  716.279675][T11705] veth0_vlan: left promiscuous mode
[  716.287177][T11705] veth1_macvtap: left promiscuous mode
[  716.293054][T11705] veth0_macvtap: left promiscuous mode
[  716.307644][T11705] veth1_vlan: left promiscuous mode
[  716.313191][T11705] veth0_vlan: left promiscuous mode
[  717.039920][T11705] team0 (unregistering): Port device team_slave_1 removed
[  717.090009][T11705] team0 (unregistering): Port device team_slave_0 removed
[  718.071060][T11705] team0 (unregistering): Port device team_slave_1 removed
[  718.124100][T11705] team0 (unregistering): Port device team_slave_0 removed
[  718.641121][T16860] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  719.543347][T16860] 8021q: adding VLAN 0 to HW filter on device bond0
[  719.864439][T16865] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  719.876910][T16865] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  719.919534][T16860] 8021q: adding VLAN 0 to HW filter on device team0
[  719.958558][T16865] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  719.986810][T16865] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  720.058636][  T784] bridge0: port 1(bridge_slave_0) entered blocking state
[  720.065838][  T784] bridge0: port 1(bridge_slave_0) entered forwarding state
[  720.079285][ T5099] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  720.088508][ T5099] Bluetooth: hci3: Injecting HCI hardware error event
[  720.097407][  T784] bridge0: port 2(bridge_slave_1) entered blocking state
[  720.099719][ T5098] Bluetooth: hci3: hardware error 0x00
[  720.104644][  T784] bridge0: port 2(bridge_slave_1) entered forwarding state
[  720.194060][T14393] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  720.204939][T14393] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260
[  720.227178][T17028] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  720.243772][T17028] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  720.253692][T17028] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  720.263849][T17028] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  720.271512][T17028] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  720.414427][T11705] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  720.462429][T16860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  720.585024][T11705] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  720.664855][T11705] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  720.735116][T16860] 8021q: adding VLAN 0 to HW filter on device batadv0
[  720.792281][T11705] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  720.855598][T16872] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  720.903259][T16872] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  720.922407][T16872] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  720.933568][T16872] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  721.083794][T16865] 8021q: adding VLAN 0 to HW filter on device bond0
[  721.187457][T16860] veth0_vlan: entered promiscuous mode
[  721.227591][T16865] 8021q: adding VLAN 0 to HW filter on device team0
[  721.235162][T11705] bridge_slave_1: left allmulticast mode
[  721.242460][T11705] bridge_slave_1: left promiscuous mode
[  721.249720][T11705] bridge0: port 2(bridge_slave_1) entered disabled state
[  721.260485][T11705] bridge_slave_0: left allmulticast mode
[  721.266141][T11705] bridge_slave_0: left promiscuous mode
[  721.272737][T11705] bridge0: port 1(bridge_slave_0) entered disabled state
[  721.348476][ T5151] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[  721.531232][ T5151] usb 5-1: Using ep0 maxpacket: 8
[  721.554294][ T5151] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  721.567331][ T5151] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  721.576871][ T5151] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  721.594019][ T5151] usb 5-1: config 0 descriptor??
[  721.603510][ T5151] gspca_main: vc032x-2.14.0 probing 046d:0892
[  721.726111][T11705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  721.742143][T11705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  721.754447][T11705] bond0 (unregistering): Released all slaves
[  721.784985][T17029] chnl_net:caif_netlink_parms(): no params data found
[  721.879297][T16860] veth1_vlan: entered promiscuous mode
[  721.891155][T13528] bridge0: port 1(bridge_slave_0) entered blocking state
[  721.898468][T13528] bridge0: port 1(bridge_slave_0) entered forwarding state
[  721.910126][T13528] bridge0: port 2(bridge_slave_1) entered blocking state
[  721.917441][T13528] bridge0: port 2(bridge_slave_1) entered forwarding state
[  722.226687][T17029] bridge0: port 1(bridge_slave_0) entered blocking state
[  722.234143][T17029] bridge0: port 1(bridge_slave_0) entered disabled state
[  722.242998][T17029] bridge_slave_0: entered allmulticast mode
[  722.250967][ T5098] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  722.260196][T17029] bridge_slave_0: entered promiscuous mode
[  722.286041][T17029] bridge0: port 2(bridge_slave_1) entered blocking state
[  722.294633][T17029] bridge0: port 2(bridge_slave_1) entered disabled state
[  722.302721][T17029] bridge_slave_1: entered allmulticast mode
[  722.313668][T17029] bridge_slave_1: entered promiscuous mode
[  722.328051][ T5098] Bluetooth: hci0: command tx timeout
[  722.381612][T11705] hsr_slave_0: left promiscuous mode
[  722.390366][T11705] hsr_slave_1: left promiscuous mode
[  722.396792][T11705] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  722.406116][T11705] batman_adv: batadv0: Removing interface: batadv_slave_0
[  722.419872][T11705] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  722.427332][T11705] batman_adv: batadv0: Removing interface: batadv_slave_1
[  722.456534][T11705] veth0_macvtap: left promiscuous mode
[  722.462532][T11705] veth1_vlan: left promiscuous mode
[  722.468185][T11705] veth0_vlan: left promiscuous mode
[  722.928284][ T5151] gspca_vc032x: reg_r err -110
[  722.935515][ T5151] vc032x 5-1:0.0: probe with driver vc032x failed with error -110
[  723.106475][T11705] team0 (unregistering): Port device team_slave_1 removed
[  723.162225][T11705] team0 (unregistering): Port device team_slave_0 removed
[  723.680513][T16860] veth0_macvtap: entered promiscuous mode
[  723.695175][T16860] veth1_macvtap: entered promiscuous mode
[  723.729185][T17029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  723.756001][T17029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  723.781634][T17032] team_slave_1: Device is already in use.
[  723.793939][    T9] usb 5-1: USB disconnect, device number 115
[  723.810876][T16872] 8021q: adding VLAN 0 to HW filter on device bond0
[  723.912919][T17029] team0: Port device team_slave_0 added
[  723.925793][T17029] team0: Port device team_slave_1 added
[  723.964663][T16872] 8021q: adding VLAN 0 to HW filter on device team0
[  724.019619][T17029] batman_adv: batadv0: Adding interface: batadv_slave_0
[  724.029976][T17029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  724.056974][T17029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  724.077454][ T5151] bridge0: port 1(bridge_slave_0) entered blocking state
[  724.084686][ T5151] bridge0: port 1(bridge_slave_0) entered forwarding state
[  724.149317][T16860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  724.165221][T16860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  724.185933][T16860] batman_adv: batadv0: Interface activated: batadv_slave_0
[  724.202414][T17029] batman_adv: batadv0: Adding interface: batadv_slave_1
[  724.212459][T17029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  724.239764][T17029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  724.255221][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state
[  724.262489][ T5151] bridge0: port 2(bridge_slave_1) entered forwarding state
[  724.320956][T16860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  724.337041][T16860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  724.349576][T16860] batman_adv: batadv0: Interface activated: batadv_slave_1
[  724.392412][T17029] hsr_slave_0: entered promiscuous mode
[  724.406850][T17029] hsr_slave_1: entered promiscuous mode
[  724.412614][ T5098] Bluetooth: hci0: command tx timeout
[  724.423939][T17029] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  724.432476][T17029] Cannot create hsr debugfs directory
[  724.481158][T16860] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  724.490203][T16860] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  724.499572][T16860] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  724.508866][T16860] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  724.570420][T16865] 8021q: adding VLAN 0 to HW filter on device batadv0
[  724.827187][T16865] veth0_vlan: entered promiscuous mode
[  724.881503][T11705] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  724.943982][T16872] 8021q: adding VLAN 0 to HW filter on device batadv0
[  725.013716][T16865] veth1_vlan: entered promiscuous mode
[  725.026617][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  725.056129][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  725.098457][T11705] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  725.261003][T11705] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  725.336787][ T1054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  725.364171][ T1054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  725.392182][T11705] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  725.542570][T16865] veth0_macvtap: entered promiscuous mode
[  725.605402][T17028] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  725.616913][T17028] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  725.626932][T17028] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  725.640891][T17028] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  725.659325][T17028] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  725.666899][T17028] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  725.733146][T16865] veth1_macvtap: entered promiscuous mode
[  725.775166][T16865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  725.786509][T16865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  725.796837][T16865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  725.807456][T16865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  725.820049][T16865] batman_adv: batadv0: Interface activated: batadv_slave_0
[  725.963394][T16865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  725.982085][T16865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  725.988300][  T784] usb 1-1: new high-speed USB device number 105 using dummy_hcd
[  725.994869][T16865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  726.017288][T16865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  726.035512][T16865] batman_adv: batadv0: Interface activated: batadv_slave_1
[  726.046590][T16872] veth0_vlan: entered promiscuous mode
[  726.112312][T16865] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  726.126110][T16865] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  726.135450][T16865] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  726.144696][T16865] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  726.160886][T11705] bridge_slave_1: left allmulticast mode
[  726.166582][T11705] bridge_slave_1: left promiscuous mode
[  726.177896][T11705] bridge0: port 2(bridge_slave_1) entered disabled state
[  726.188551][  T784] usb 1-1: too many configurations: 9, using maximum allowed: 8
[  726.197225][T11705] bridge_slave_0: left allmulticast mode
[  726.206815][T11705] bridge_slave_0: left promiscuous mode
[  726.209291][  T784] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  726.216962][T11705] bridge0: port 1(bridge_slave_0) entered disabled state
[  726.227828][  T784] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  726.239954][  T784] usb 1-1: config 0 interface 0 has no altsetting 0
[  726.248476][  T784] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  726.257520][  T784] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  726.289214][  T784] usb 1-1: config 0 interface 0 has no altsetting 0
[  726.302414][  T784] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  726.321298][  T784] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  726.338092][  T784] usb 1-1: config 0 interface 0 has no altsetting 0
[  726.356179][  T784] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  726.373771][  T784] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  726.408281][  T784] usb 1-1: config 0 interface 0 has no altsetting 0
[  726.426711][  T784] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  726.444188][  T784] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  726.476495][  T784] usb 1-1: config 0 interface 0 has no altsetting 0
[  726.483830][T17028] Bluetooth: hci0: command tx timeout
[  726.504497][  T784] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  726.534806][  T784] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  726.546137][  T784] usb 1-1: config 0 interface 0 has no altsetting 0
[  726.578763][  T784] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  726.605217][  T784] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  726.620435][  T784] usb 1-1: config 0 interface 0 has no altsetting 0
[  726.628774][  T784] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  726.652135][  T784] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  726.663434][  T784] usb 1-1: config 0 interface 0 has no altsetting 0
[  726.690007][  T784] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  726.700907][  T784] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  726.711043][  T784] usb 1-1: Product: syz
[  726.715269][  T784] usb 1-1: Manufacturer: syz
[  726.720590][  T784] usb 1-1: SerialNumber: syz
[  726.747003][  T784] usb 1-1: config 0 descriptor??
[  726.761402][  T784] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0
[  726.977783][  T784] usb 1-1: USB disconnect, device number 105
[  727.003076][  T784] yurex 1-1:0.0: USB YUREX #0 now disconnected
[  727.164926][T11705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  727.186624][T11705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  727.203109][T11705] bond0 (unregistering): Released all slaves
[  727.221682][T11705] bond1 (unregistering): Released all slaves
[  727.289756][T16872] veth1_vlan: entered promiscuous mode
[  727.570589][T17029] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  727.577536][T17091] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2986'.
[  727.597375][T17029] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  727.734926][T17029] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  727.757968][T17028] Bluetooth: hci3: command tx timeout
[  727.785804][T17029] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  727.824606][T16872] veth0_macvtap: entered promiscuous mode
[  727.876625][T16872] veth1_macvtap: entered promiscuous mode
[  727.898497][  T784] usb 1-1: new high-speed USB device number 106 using dummy_hcd
[  727.956070][T11705] hsr_slave_0: left promiscuous mode
[  727.962822][T11705] hsr_slave_1: left promiscuous mode
[  727.976329][T11705] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  727.984240][T11705] batman_adv: batadv0: Removing interface: batadv_slave_0
[  727.996262][T11705] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  728.005135][T11705] batman_adv: batadv0: Removing interface: batadv_slave_1
[  728.036642][T11705] veth1_macvtap: left promiscuous mode
[  728.044111][T11705] veth0_macvtap: left promiscuous mode
[  728.054406][T11705] veth1_vlan: left promiscuous mode
[  728.063373][T11705] veth0_vlan: left promiscuous mode
[  728.105786][  T784] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  728.131010][  T784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  728.174225][  T784] usb 1-1: config 0 descriptor??
[  728.561374][T17028] Bluetooth: hci0: command tx timeout
[  728.606972][T17091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  728.616315][T17091] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  728.646592][  T784] hackrf 1-1:0.0: Board ID: 00
[  728.652052][  T784] hackrf 1-1:0.0: Firmware version: 
[  728.660736][  T784] hackrf 1-1:0.0: Registered as swradio16
[  728.675977][  T784] hackrf 1-1:0.0: Registered as swradio17
[  728.681934][  T784] hackrf 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  729.237918][T11705] team0 (unregistering): Port device team_slave_1 removed
[  729.310018][T11705] team0 (unregistering): Port device team_slave_0 removed
[  729.404772][  T784] usb 1-1: USB disconnect, device number 106
[  729.472546][ T5140] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0
[  729.505469][ T5140] hid-generic 0000:0000:0000.001A: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  729.837980][T17028] Bluetooth: hci3: command tx timeout
[  730.234439][T16872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  730.254040][T16872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  730.265131][T16872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  730.276224][T16872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  730.291200][T16872] batman_adv: batadv0: Interface activated: batadv_slave_0
[  730.333210][  T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  730.352241][  T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  730.367198][T16872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  730.384838][T16872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  730.396486][T16872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  730.409379][T16872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  730.421803][T16872] batman_adv: batadv0: Interface activated: batadv_slave_1
[  730.496288][T17050] chnl_net:caif_netlink_parms(): no params data found
[  730.512063][T16872] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  730.524205][T16872] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  730.533722][T16872] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  730.543347][T16872] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  730.567765][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  730.583316][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  730.981809][T17170] netlink: 'syz.0.2991': attribute type 12 has an invalid length.
[  731.086259][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  731.110480][T17050] bridge0: port 1(bridge_slave_0) entered blocking state
[  731.136864][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  731.145062][T17050] bridge0: port 1(bridge_slave_0) entered disabled state
[  731.168729][T17050] bridge_slave_0: entered allmulticast mode
[  731.187278][T17050] bridge_slave_0: entered promiscuous mode
[  731.231317][ T5145] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0
[  731.304513][ T5145] hid-generic 0000:0000:0000.001B: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  731.327426][T17050] bridge0: port 2(bridge_slave_1) entered blocking state
[  731.348377][T17050] bridge0: port 2(bridge_slave_1) entered disabled state
[  731.377199][T17050] bridge_slave_1: entered allmulticast mode
[  731.402711][T17050] bridge_slave_1: entered promiscuous mode
[  731.506489][ T1054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  731.522101][T17050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  731.534575][ T1054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  731.584035][T17050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  731.588407][  T784] usb 1-1: new high-speed USB device number 107 using dummy_hcd
[  731.745775][T17050] team0: Port device team_slave_0 added
[  731.772855][T17050] team0: Port device team_slave_1 added
[  731.798138][  T784] usb 1-1: Using ep0 maxpacket: 32
[  731.821942][  T784] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  731.857694][  T784] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  731.884536][  T784] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  731.910595][T17050] batman_adv: batadv0: Adding interface: batadv_slave_0
[  731.917305][  T784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  731.917565][T17050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  731.925637][T17050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  731.947818][T17050] batman_adv: batadv0: Adding interface: batadv_slave_1
[  731.952022][T17028] Bluetooth: hci3: command tx timeout
[  732.005526][T17050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  732.026061][  T784] usb 1-1: config 0 descriptor??
[  732.075801][T17050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  732.079407][  T784] hub 1-1:0.0: USB hub found
[  732.124800][T17029] 8021q: adding VLAN 0 to HW filter on device bond0
[  732.290921][  T784] hub 1-1:0.0: config failed, can't read hub descriptor (err -22)
[  732.327864][  T784] usbhid 1-1:0.0: can't add hid device: -71
[  732.343586][T17050] hsr_slave_0: entered promiscuous mode
[  732.347756][  T784] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  732.357515][T17050] hsr_slave_1: entered promiscuous mode
[  732.364987][T17050] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  732.404436][  T784] usb 1-1: USB disconnect, device number 107
[  732.405149][T17050] Cannot create hsr debugfs directory
[  732.444567][T17216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  732.471792][T17216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  732.493985][T17216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  732.520727][T17216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  732.544410][T17216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  732.566384][T17216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  732.614143][T17029] 8021q: adding VLAN 0 to HW filter on device team0
[  732.708740][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state
[  732.715969][ T5146] bridge0: port 1(bridge_slave_0) entered forwarding state
[  732.779447][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state
[  732.786643][ T5146] bridge0: port 2(bridge_slave_1) entered forwarding state
[  732.958038][  T784] usb 4-1: new high-speed USB device number 111 using dummy_hcd
[  733.182469][  T784] usb 4-1: Using ep0 maxpacket: 8
[  733.200276][  T784] usb 4-1: New USB device found, idVendor=050d, idProduct=0109, bcdDevice=a6.da
[  733.224171][  T784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  733.229431][T17029] 8021q: adding VLAN 0 to HW filter on device batadv0
[  733.287725][ T5145] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[  733.298022][  T784] usb 4-1: config 0 descriptor??
[  733.325733][  T784] mct_u232 4-1:0.0: MCT U232 converter detected
[  733.345557][  T784] mct_u232 ttyUSB0: expected endpoint missing
[  733.510515][ T5145] usb 2-1: Using ep0 maxpacket: 16
[  733.528064][ T5145] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[  733.544584][   T25] usb 4-1: USB disconnect, device number 111
[  733.561831][   T25] mct_u232 4-1:0.0: device disconnected
[  733.569569][ T5145] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  733.587747][ T5140] usb 1-1: new high-speed USB device number 108 using dummy_hcd
[  733.627505][ T5145] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  733.676874][ T5145] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  733.717572][ T5145] usb 2-1: config 0 descriptor??
[  733.844754][ T5140] usb 1-1: config 0 has no interfaces?
[  733.871080][ T5140] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  733.873732][T17029] veth0_vlan: entered promiscuous mode
[  733.924551][ T5140] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  733.949495][ T5140] usb 1-1: config 0 descriptor??
[  733.998610][T17028] Bluetooth: hci3: command tx timeout
[  734.111627][T17029] veth1_vlan: entered promiscuous mode
[  734.136223][T17230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  734.172066][T17230] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  734.201507][  T784] usb 1-1: USB disconnect, device number 108
[  734.257934][ T5145] hid-generic 0003:0158:0100.001C: unknown main item tag 0x0
[  734.273688][ T5140] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0
[  734.299011][ T5145] hid-generic 0003:0158:0100.001C: unknown main item tag 0x0
[  734.309160][ T5140] hid-generic 0000:0000:0000.001D: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  734.321994][ T5145] hid-generic 0003:0158:0100.001C: unexpected long global item
[  734.332693][ T5145] hid-generic 0003:0158:0100.001C: probe with driver hid-generic failed with error -22
[  734.417579][T17050] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  734.443524][T17029] veth0_macvtap: entered promiscuous mode
[  734.477092][T17029] veth1_macvtap: entered promiscuous mode
[  734.524307][T17050] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  734.568449][  T784] usb 2-1: USB disconnect, device number 90
[  734.593530][T17050] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  734.652433][T17050] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  734.706728][T17029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  734.733713][T17029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  734.744526][T17029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  734.756707][T17029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  734.773055][T17029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  734.784056][T17029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  734.796485][T17029] batman_adv: batadv0: Interface activated: batadv_slave_0
[  734.826378][T17029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  734.837133][T17029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  734.849863][T17029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  734.860465][T17029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  734.891161][T17029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  734.912606][T17029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  734.935169][T17029] batman_adv: batadv0: Interface activated: batadv_slave_1
[  734.956657][T17029] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  734.973081][T17029] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  734.996269][T17029] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  735.016060][T17029] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  735.307857][ T5140] usb 1-1: new high-speed USB device number 109 using dummy_hcd
[  735.336639][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  735.368226][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  735.435751][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  735.465099][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  735.480328][T17050] 8021q: adding VLAN 0 to HW filter on device bond0
[  735.530200][ T5140] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  735.549396][ T5140] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  735.594538][ T5140] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  735.620726][ T5140] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  735.637982][ T5140] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  735.652627][ T5140] usb 1-1: Product: syz
[  735.656966][ T5140] usb 1-1: SerialNumber: syz
[  735.704370][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  735.802329][T17050] 8021q: adding VLAN 0 to HW filter on device team0
[  735.860914][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  735.978608][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state
[  735.985923][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state
[  736.040864][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state
[  736.048236][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state
[  736.107802][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  736.253262][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  736.304100][T17050] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  736.317031][T17050] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  736.347142][T17269] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  736.432845][T17028] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  736.443635][T17028] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  736.453890][T17028] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  736.470651][T17028] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  736.480535][T17028] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  736.488569][T17028] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  736.538646][T17050] 8021q: adding VLAN 0 to HW filter on device batadv0
[  736.751830][T17284] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3011'.
[  736.784605][  T784] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0
[  736.808186][   T11] bridge_slave_1: left allmulticast mode
[  736.821042][  T784] hid-generic 0000:0000:0000.001E: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  736.827664][   T11] bridge_slave_1: left promiscuous mode
[  736.836477][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  736.888278][   T11] bridge_slave_0: left allmulticast mode
[  736.897107][   T11] bridge_slave_0: left promiscuous mode
[  736.910143][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  737.311356][T17292] binder: 17290:17292 ioctl c0306201 0 returned -14
[  737.742760][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  737.780551][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  737.803556][   T11] bond0 (unregistering): Released all slaves
[  738.005066][  T784] usb 3-1: new high-speed USB device number 99 using dummy_hcd
[  738.041601][T17050] veth0_vlan: entered promiscuous mode
[  738.098718][ T5140] usb 1-1: 0:2 : does not exist
[  738.153725][   T25] usb 4-1: new high-speed USB device number 112 using dummy_hcd
[  738.187152][ T5140] usb 1-1: USB disconnect, device number 109
[  738.239971][ T5098] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection
[  738.263111][  T784] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[  738.297755][  T784] usb 3-1: config 9 has 0 interfaces, different from the descriptor's value: 1
[  738.317206][  T784] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  738.356918][  T784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  738.365825][ T5098] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260
[  738.377769][   T25] usb 4-1: Using ep0 maxpacket: 32
[  738.398016][ T5098] Bluetooth: hci1: command tx timeout
[  738.415806][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  738.440505][T17050] veth1_vlan: entered promiscuous mode
[  738.449974][ T5163] udevd[5163]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  738.482526][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  738.506474][   T25] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  738.533107][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  738.569385][ T5098] Bluetooth: hci2: command tx timeout
[  738.624083][   T25] usb 4-1: config 0 descriptor??
[  738.684610][   T25] hub 4-1:0.0: USB hub found
[  738.945136][   T11] hsr_slave_0: left promiscuous mode
[  738.972539][   T11] hsr_slave_1: left promiscuous mode
[  738.992083][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  739.011289][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  739.022304][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  739.032517][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  739.091238][   T25] hub 4-1:0.0: config failed, can't read hub descriptor (err -22)
[  739.099614][   T11] veth1_macvtap: left promiscuous mode
[  739.118107][   T11] veth0_macvtap: left promiscuous mode
[  739.134638][   T11] veth1_vlan: left promiscuous mode
[  739.157984][   T11] veth0_vlan: left promiscuous mode
[  739.350446][   T25] usbhid 4-1:0.0: can't add hid device: -71
[  739.384128][   T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  739.543625][   T25] usb 4-1: USB disconnect, device number 112
[  740.637785][ T5098] Bluetooth: hci2: command tx timeout
[  740.670910][  T784] usb 3-1: string descriptor 0 read error: -71
[  740.693175][  T784] usb 3-1: USB disconnect, device number 99
[  740.832542][   T11] team0 (unregistering): Port device team_slave_1 removed
[  740.895434][   T11] team0 (unregistering): Port device team_slave_0 removed
[  741.684803][T17313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  741.696374][T17313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  741.706658][T17313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  741.717495][T17313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  741.732423][T17313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  741.743250][T17313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  741.779656][T17321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3018'.
[  741.913933][T17050] veth0_macvtap: entered promiscuous mode
[  741.926440][T17280] chnl_net:caif_netlink_parms(): no params data found
[  741.941178][ T5140] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0
[  741.976800][T17050] veth1_macvtap: entered promiscuous mode
[  741.978611][ T5140] hid-generic 0000:0000:0000.001F: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  742.234358][T17050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  742.264745][T17343] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3022'.
[  742.288072][T17050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  742.299776][T17050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  742.310288][T17050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  742.320264][T17050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  742.331276][T17050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  742.344069][T17050] batman_adv: batadv0: Interface activated: batadv_slave_0
[  742.390828][T17050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  742.416137][T17050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  742.426326][T17050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  742.455248][T17050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  742.495389][T17050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  742.541194][T17050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  742.602955][T17050] batman_adv: batadv0: Interface activated: batadv_slave_1
[  742.682345][T17352] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3024'.
[  742.718831][ T5098] Bluetooth: hci2: command tx timeout
[  742.749711][   T25] usb 3-1: new high-speed USB device number 100 using dummy_hcd
[  742.758402][T17280] bridge0: port 1(bridge_slave_0) entered blocking state
[  742.775148][T17280] bridge0: port 1(bridge_slave_0) entered disabled state
[  742.800216][T17280] bridge_slave_0: entered allmulticast mode
[  742.818129][T17280] bridge_slave_0: entered promiscuous mode
[  742.830953][T17280] bridge0: port 2(bridge_slave_1) entered blocking state
[  742.848734][T17280] bridge0: port 2(bridge_slave_1) entered disabled state
[  742.871876][T17280] bridge_slave_1: entered allmulticast mode
[  742.886569][T17280] bridge_slave_1: entered promiscuous mode
[  742.895942][T17050] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  742.927665][T17050] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  742.936433][T17050] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  742.980762][T17050] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  743.028554][   T25] usb 3-1: string descriptor 0 read error: -22
[  743.053840][   T25] usb 3-1: New USB device found, idVendor=30c9, idProduct=0093, bcdDevice=18.c6
[  743.124426][   T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  743.162126][   T25] usb 3-1: config 0 descriptor??
[  743.193487][   T25] usb 3-1: Found UVC 0.00 device <unnamed> (30c9:0093)
[  743.223729][T17280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  743.237998][   T25] usb 3-1: No valid video chain found.
[  743.258673][ T5145] usb 1-1: new high-speed USB device number 110 using dummy_hcd
[  743.304187][T17280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  743.397865][ T5140] usb 4-1: new high-speed USB device number 113 using dummy_hcd
[  743.466665][T17280] team0: Port device team_slave_0 added
[  743.478092][ T5145] usb 1-1: Using ep0 maxpacket: 8
[  743.484571][T17280] team0: Port device team_slave_1 added
[  743.501788][ T5145] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  743.529092][ T5145] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  743.529400][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  743.548644][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  743.573962][T17280] batman_adv: batadv0: Adding interface: batadv_slave_0
[  743.593421][T17280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  743.607810][ T5140] usb 4-1: Using ep0 maxpacket: 32
[  743.634853][T17280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  743.636061][ T5145] usb 1-1: config 0 descriptor??
[  743.683285][ T5140] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  743.683326][T17280] batman_adv: batadv0: Adding interface: batadv_slave_1
[  743.708716][ T5140] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  743.737759][ T5140] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  743.747750][T17280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  743.770706][ T5140] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  743.809869][ T5140] usb 4-1: config 0 descriptor??
[  743.832395][ T5140] hub 4-1:0.0: USB hub found
[  743.857504][T17280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  743.932427][ T5145] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  743.953400][T17347] fuse: Bad value for 'fd'
[  743.968150][ T5145] asix 1-1:0.0: probe with driver asix failed with error -32
[  744.118361][ T5140] hub 4-1:0.0: config failed, can't read hub descriptor (err -22)
[  744.211511][T11705] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  744.234655][T11705] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  744.252568][T17280] hsr_slave_0: entered promiscuous mode
[  744.298144][T17280] hsr_slave_1: entered promiscuous mode
[  744.336874][T17280] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  744.373340][T17280] Cannot create hsr debugfs directory
[  744.377773][ T5140] usbhid 4-1:0.0: can't add hid device: -71
[  744.398406][ T5140] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  744.464571][ T5140] usb 4-1: USB disconnect, device number 113
[  744.487764][T17381] netlink: 'syz.0.3025': attribute type 10 has an invalid length.
[  744.679511][T17381] team0: Device veth1_macvtap failed to register rx_handler
[  744.798108][ T5098] Bluetooth: hci2: command tx timeout
[  745.036828][T17347] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3023'.
[  745.159754][T17394] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  745.889499][T17405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  745.915039][T17405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  745.944031][T17405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  745.969558][T17405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  745.991661][T17405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  746.014995][T17405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  746.046643][T17405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  746.063052][T17405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  746.221427][   T25] usb 3-1: USB disconnect, device number 100
[  746.395092][ T5145] usb 1-1: USB disconnect, device number 110
[  746.497959][ T5140] usb 4-1: new high-speed USB device number 114 using dummy_hcd
[  746.606749][T17280] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  746.641701][T17280] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  746.667357][T17280] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  746.687094][T17280] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  746.700240][ T5140] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  746.730087][ T5140] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  746.765584][ T5140] usb 4-1: New USB device found, idVendor=1751, idProduct=0032, bcdDevice= 0.00
[  746.792208][ T5140] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  746.815480][ T5140] usb 4-1: config 0 descriptor??
[  746.835997][ T5140] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  746.897734][ T5145] usb 1-1: new high-speed USB device number 111 using dummy_hcd
[  746.982845][T17280] 8021q: adding VLAN 0 to HW filter on device bond0
[  747.040796][T17280] 8021q: adding VLAN 0 to HW filter on device team0
[  747.070841][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state
[  747.078120][ T5146] bridge0: port 1(bridge_slave_0) entered forwarding state
[  747.098812][ T5145] usb 1-1: too many configurations: 65, using maximum allowed: 8
[  747.134508][ T5145] usb 1-1: config 255 has too many interfaces: 248, using maximum allowed: 32
[  747.170052][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state
[  747.177246][ T5146] bridge0: port 2(bridge_slave_1) entered forwarding state
[  747.184770][ T5145] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  747.227157][ T5145] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 248
[  747.268049][ T5145] usb 1-1: config 255 has too many interfaces: 248, using maximum allowed: 32
[  747.287427][ T5145] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  747.326166][ T5145] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 248
[  747.354084][ T5145] usb 1-1: config 255 has too many interfaces: 248, using maximum allowed: 32
[  747.361250][T17280] 8021q: adding VLAN 0 to HW filter on device batadv0
[  747.387006][ T5145] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  747.440855][ T5145] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 248
[  747.466164][ T5145] usb 1-1: config 255 has too many interfaces: 248, using maximum allowed: 32
[  747.475877][ T5145] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  747.487152][T17443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3035'.
[  747.502869][ T5145] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 248
[  747.524301][ T5145] usb 1-1: config 255 has too many interfaces: 248, using maximum allowed: 32
[  747.534564][ T5145] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  747.553300][ T5145] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 248
[  747.570734][ T5145] usb 1-1: config 255 has too many interfaces: 248, using maximum allowed: 32
[  747.584480][ T5145] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  747.602327][ T1251] ieee802154 phy0 wpan0: encryption failed: -22
[  747.609390][ T1251] ieee802154 phy1 wpan1: encryption failed: -22
[  747.630651][ T5145] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 248
[  747.632192][T17280] veth0_vlan: entered promiscuous mode
[  747.650077][ T5145] usb 1-1: config 255 has too many interfaces: 248, using maximum allowed: 32
[  747.689495][ T5145] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  747.697206][T17280] veth1_vlan: entered promiscuous mode
[  747.700207][T16797] usb 3-1: new high-speed USB device number 101 using dummy_hcd
[  747.727252][ T5145] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 248
[  747.749856][ T5145] usb 1-1: config 255 has too many interfaces: 248, using maximum allowed: 32
[  747.764818][ T5145] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  747.794466][ T5145] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 248
[  747.827350][ T5145] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  747.832199][T17280] veth0_macvtap: entered promiscuous mode
[  747.844278][ T5145] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  747.866876][T17280] veth1_macvtap: entered promiscuous mode
[  747.917943][T16797] usb 3-1: Using ep0 maxpacket: 32
[  747.925679][T16797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  747.949471][T16797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  747.951606][T17280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  747.972995][T16797] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  747.987382][T16797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  747.989265][T17280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  748.019242][T16797] usb 3-1: config 0 descriptor??
[  748.030093][T16797] hub 3-1:0.0: USB hub found
[  748.033600][T17280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  748.047771][T17280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  748.058655][T17280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  748.070018][T17280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  748.082963][T17280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  748.103471][T17280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  748.164008][T17280] batman_adv: batadv0: Interface activated: batadv_slave_0
[  748.221202][T17280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  748.257650][T17280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  748.267528][T17280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  748.269629][T16797] hub 3-1:0.0: config failed, can't read hub descriptor (err -22)
[  748.298119][T17280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  748.309103][T17280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  748.320788][T17280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  748.331340][T17280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  748.355813][T17280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  748.373204][T17280] batman_adv: batadv0: Interface activated: batadv_slave_1
[  748.390131][T17280] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  748.409010][T17280] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  748.421959][T17280] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  748.431755][T17280] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  748.513466][T16797] usbhid 3-1:0.0: can't add hid device: -71
[  748.532451][T16797] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  748.564085][ T5140] usb 1-1: USB disconnect, device number 111
[  748.611261][T16797] usb 3-1: USB disconnect, device number 101
[  748.735924][T11711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  748.766034][T11711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  748.840856][  T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  748.856072][  T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  748.953716][T16797] usb 4-1: USB disconnect, device number 114
[  749.177944][ T5098] Bluetooth: hci4: unexpected event 0x04 length: 14 > 10
[  749.471738][T16797] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  749.559417][ T5140] usb 1-1: new high-speed USB device number 112 using dummy_hcd
[  749.638459][T17496] fuse: Bad value for 'group_id'
[  749.697847][T16797] usb 2-1: Using ep0 maxpacket: 8
[  749.707871][T16797] usb 2-1: config 6 has an invalid interface number: 3 but max is 2
[  749.726602][T16797] usb 2-1: config 6 has an invalid interface number: 243 but max is 2
[  749.752194][T16797] usb 2-1: config 6 has an invalid interface number: 251 but max is 2
[  749.777726][ T5140] usb 1-1: Using ep0 maxpacket: 8
[  749.790036][T16797] usb 2-1: config 6 has no interface number 0
[  749.802350][ T5140] usb 1-1: config 6 has an invalid interface number: 203 but max is 0
[  749.818383][T16797] usb 2-1: config 6 has no interface number 1
[  749.830455][ T5140] usb 1-1: config 6 has no interface number 0
[  749.838538][T16797] usb 2-1: config 6 has no interface number 2
[  749.845301][ T5140] usb 1-1: config 6 interface 203 altsetting 1 endpoint 0xF has invalid maxpacket 512, setting to 64
[  749.857200][T16797] usb 2-1: config 6 interface 243 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1024
[  749.882229][ T5140] usb 1-1: config 6 interface 203 altsetting 1 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[  749.893989][T16797] usb 2-1: config 6 interface 243 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 16
[  749.905259][T16797] usb 2-1: config 6 interface 243 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  749.919303][ T5140] usb 1-1: config 6 interface 203 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  749.931050][ T5140] usb 1-1: config 6 interface 203 altsetting 1 endpoint 0x4 has invalid wMaxPacketSize 0
[  749.948029][T16797] usb 2-1: config 6 interface 243 altsetting 0 has a duplicate endpoint with address 0x7, skipping
[  749.967742][T16797] usb 2-1: config 6 interface 243 altsetting 0 endpoint 0xB8 has an invalid bInterval 247, changing to 7
[  749.984888][ T5140] usb 1-1: config 6 interface 203 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  750.007584][ T5140] usb 1-1: config 6 interface 203 altsetting 1 has a duplicate endpoint with address 0xF, skipping
[  750.027752][T16797] usb 2-1: config 6 interface 243 altsetting 0 endpoint 0xB8 has invalid maxpacket 8638, setting to 1024
[  750.047705][ T5140] usb 1-1: config 6 interface 203 has no altsetting 0
[  750.054802][T16797] usb 2-1: config 6 interface 243 altsetting 0 has a duplicate endpoint with address 0x7, skipping
[  750.075429][ T5140] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee
[  750.100066][T16797] usb 2-1: config 6 interface 243 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[  750.112484][ T5140] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  750.134953][ T5140] usb 1-1: Manufacturer: ᥩ㎻㰊㋿䴻䖔ﵰ傗橗쓷썛࠻또⍻䬋袺♳궠吊辺揦玃䉰᭏좈쌔ڏꓹ㌭ⴣ틗绦旅뮻ﻤ˱胗厸耧蒙ᖷ㫴ⴂ堑﷉䶘䄼ꗐ഼⳿䕤ॳ쁕䊑뼔敭ﺎ갮⊽쪶泳嗮⸮̀録悹ࡏ모嗱ꁵ郼碅蛘⿠ඨퟄ乲达Ꮇ楸땜陃㹻솑
[  750.165181][T16797] usb 2-1: config 6 interface 243 altsetting 0 has a duplicate endpoint with address 0x64, skipping
[  750.176593][ T5098] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  750.187194][ T5098] Bluetooth: hci4: Injecting HCI hardware error event
[  750.200266][T17028] Bluetooth: hci4: hardware error 0x00
[  750.216459][T16797] usb 2-1: config 6 interface 243 altsetting 0 has 13 endpoint descriptors, different from the interface descriptor's value: 11
[  750.242671][T16797] usb 2-1: config 6 interface 251 altsetting 147 has an invalid descriptor for endpoint zero, skipping
[  750.258656][ T5140] usb 1-1: SerialNumber: 、
[  750.277828][T16797] usb 2-1: config 6 interface 251 altsetting 147 endpoint 0x6 has an invalid bInterval 31, changing to 7
[  750.303910][T16797] usb 2-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0x6, skipping
[  750.338515][T16797] usb 2-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0x9, skipping
[  750.365581][T16797] usb 2-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0x4, skipping
[  750.412194][T16797] usb 2-1: config 6 interface 251 altsetting 147 has an invalid descriptor for endpoint zero, skipping
[  750.447424][T16797] usb 2-1: config 6 interface 251 altsetting 147 has an invalid descriptor for endpoint zero, skipping
[  750.475732][T16797] usb 2-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0xD, skipping
[  750.523312][T16797] usb 2-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0x3, skipping
[  750.545293][ T5140] usb 1-1: USB disconnect, device number 112
[  750.567992][T16797] usb 2-1: config 6 interface 251 altsetting 147 endpoint 0x8A has an invalid bInterval 128, changing to 7
[  750.593127][T16797] usb 2-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0xF, skipping
[  750.631419][T16797] usb 2-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0xE, skipping
[  750.662498][T16797] usb 2-1: config 6 interface 3 has no altsetting 0
[  750.677727][T16797] usb 2-1: config 6 interface 251 has no altsetting 0
[  750.687752][   T25] usb 3-1: new high-speed USB device number 102 using dummy_hcd
[  750.710439][T16797] usb 2-1: New USB device found, idVendor=19d2, idProduct=0176, bcdDevice=dc.28
[  750.725897][T16797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  750.744386][T16797] usb 2-1: Product: ࠌ
[  750.744416][T16797] usb 2-1: Manufacturer: 〉
[  750.744435][T16797] usb 2-1: SerialNumber: 屉쿮峭Ⳇ옜타撅ꨱ鹒驹끤⌒꘤팽뗌嗝㕰㮚撫⤸쨵袉잹鴂樓牧쎸럜ቍ閹ധ乸愊뭘皔㪯㹖✸켮䠈웧
[  750.890972][   T25] usb 3-1: too many configurations: 65, using maximum allowed: 8
[  750.914528][   T25] usb 3-1: config 255 has too many interfaces: 248, using maximum allowed: 32
[  750.942993][   T25] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  750.995104][   T25] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 248
[  751.032347][   T25] usb 3-1: config 255 has too many interfaces: 248, using maximum allowed: 32
[  751.065185][T16797] usb 2-1: USB disconnect, device number 91
[  751.078501][   T25] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  751.112242][   T25] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 248
[  751.190253][   T25] usb 3-1: config 255 has too many interfaces: 248, using maximum allowed: 32
[  751.214235][   T25] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  751.236073][T17552] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3058'.
[  751.254797][   T25] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 248
[  751.285473][   T25] usb 3-1: config 255 has too many interfaces: 248, using maximum allowed: 32
[  751.304969][   T25] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  751.336416][   T25] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 248
[  751.358135][   T25] usb 3-1: config 255 has too many interfaces: 248, using maximum allowed: 32
[  751.387683][   T25] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  751.411493][   T25] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 248
[  751.454911][   T25] usb 3-1: config 255 has too many interfaces: 248, using maximum allowed: 32
[  751.464465][   T25] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  751.485545][   T25] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 248
[  751.506148][   T25] usb 3-1: config 255 has too many interfaces: 248, using maximum allowed: 32
[  751.536763][   T25] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  751.567882][   T25] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 248
[  751.577369][  T784] usb 1-1: new high-speed USB device number 113 using dummy_hcd
[  751.593832][   T25] usb 3-1: config 255 has too many interfaces: 248, using maximum allowed: 32
[  751.605927][   T25] usb 3-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  751.618402][T17570] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3062'.
[  751.627995][   T25] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 248
[  751.637374][   T25] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  751.637820][T17570] openvswitch: netlink: Message has 3074 unknown bytes.
[  751.655163][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  751.718184][T16797] usb 4-1: new full-speed USB device number 115 using dummy_hcd
[  751.782180][  T784] usb 1-1: Using ep0 maxpacket: 8
[  751.801870][  T784] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  751.823484][  T784] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  751.844709][  T784] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  751.875342][  T784] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  751.916176][  T784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  751.930767][T16797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64
[  751.961055][  T784] hub 1-1:1.0: bad descriptor, ignoring hub
[  751.969600][T16797] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  751.992522][  T784] hub 1-1:1.0: probe with driver hub failed with error -5
[  752.012375][ T5098] Bluetooth: hci2: unexpected event 0x04 length: 14 > 10
[  752.027065][T16797] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  752.044238][  T784] cdc_wdm 1-1:1.0: skipping garbage
[  752.055825][  T784] cdc_wdm 1-1:1.0: skipping garbage
[  752.065273][  T784] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[  752.084472][T16797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  752.122837][T16797] usb 4-1: config 0 descriptor??
[  752.143536][T17560] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  752.231595][   T25] usb 3-1: USB disconnect, device number 102
[  752.289971][  T784] usb 1-1: USB disconnect, device number 113
[  752.331003][T17028] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  752.550506][T17597] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns
[  752.580885][T17560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  752.602309][T17560] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  752.620879][T16797] usbhid 4-1:0.0: can't add hid device: -71
[  752.632112][T16797] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  752.657965][T16797] usb 4-1: USB disconnect, device number 115
[  752.757824][   T25] usb 1-1: new high-speed USB device number 114 using dummy_hcd
[  752.918531][   T25] usb 1-1: device descriptor read/64, error -71
[  752.985140][T17028] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260
[  752.990023][  T784] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[  753.137839][ T5145] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[  753.188659][   T25] usb 1-1: new high-speed USB device number 115 using dummy_hcd
[  753.204154][  T784] usb 5-1: Using ep0 maxpacket: 16
[  753.215287][  T784] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  753.240992][  T784] usb 5-1: config 0 interface 0 altsetting 8 has 6 endpoint descriptors, different from the interface descriptor's value: 12
[  753.267851][  T784] usb 5-1: config 0 interface 0 has no altsetting 0
[  753.288169][  T784] usb 5-1: New USB device found, idVendor=1199, idProduct=0027, bcdDevice=1e.57
[  753.305934][  T784] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  753.323337][  T784] usb 5-1: Product: syz
[  753.332252][  T784] usb 5-1: Manufacturer: syz
[  753.338878][ T5145] usb 3-1: Using ep0 maxpacket: 8
[  753.345551][ T5145] usb 3-1: config 6 has an invalid interface number: 203 but max is 0
[  753.355523][ T5145] usb 3-1: config 6 has no interface number 0
[  753.369946][   T25] usb 1-1: device descriptor read/64, error -71
[  753.386564][  T784] usb 5-1: SerialNumber: syz
[  753.391456][ T5145] usb 3-1: config 6 interface 203 altsetting 1 endpoint 0xF has invalid maxpacket 512, setting to 64
[  753.406685][  T784] usb 5-1: config 0 descriptor??
[  753.419328][ T5145] usb 3-1: config 6 interface 203 altsetting 1 endpoint 0x9 has invalid maxpacket 1023, setting to 64
[  753.440467][  T784] sierra 5-1:0.0: Sierra USB modem converter detected
[  753.457847][ T5145] usb 3-1: config 6 interface 203 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  753.478959][ T5145] usb 3-1: config 6 interface 203 altsetting 1 endpoint 0x4 has invalid wMaxPacketSize 0
[  753.502858][ T5145] usb 3-1: config 6 interface 203 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  753.519515][   T25] usb usb1-port1: attempt power cycle
[  753.535042][ T5145] usb 3-1: config 6 interface 203 altsetting 1 has a duplicate endpoint with address 0xF, skipping
[  753.559189][ T5145] usb 3-1: config 6 interface 203 has no altsetting 0
[  753.571037][ T5145] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee
[  753.583341][ T5145] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  753.591741][ T5145] usb 3-1: Manufacturer: ᥩ㎻㰊㋿䴻䖔ﵰ傗橗쓷썛࠻또⍻䬋袺♳궠吊辺揦玃䉰᭏좈쌔ڏꓹ㌭ⴣ틗绦旅뮻ﻤ˱胗厸耧蒙ᖷ㫴ⴂ堑﷉䶘䄼ꗐ഼⳿䕤ॳ쁕䊑뼔敭ﺎ갮⊽쪶泳嗮⸮̀録悹ࡏ모嗱ꁵ郼碅蛘⿠ඨퟄ乲达Ꮇ楸땜陃㹻솑
[  753.629094][ T5145] usb 3-1: SerialNumber: 、
[  753.745564][   T29] audit: type=1326 audit(1719492705.208:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17601 comm="syz.4.3067" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd254d75ae9 code=0x0
[  753.819191][ T5140] usb 4-1: new high-speed USB device number 116 using dummy_hcd
[  753.877507][ T5145] usb 3-1: USB disconnect, device number 103
[  753.937784][   T25] usb 1-1: new high-speed USB device number 116 using dummy_hcd
[  753.978983][   T25] usb 1-1: device descriptor read/8, error -71
[  754.011398][ T5140] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98
[  754.035979][ T5140] usb 4-1: New USB device strings: Mfr=16, Product=0, SerialNumber=0
[  754.049608][T17630] input: syz1 as /devices/virtual/input/input25
[  754.067763][ T5140] usb 4-1: Manufacturer: syz
[  754.077947][T17028] Bluetooth: hci2: command tx timeout
[  754.100349][ T5140] usb 4-1: config 0 descriptor??
[  754.130403][ T5140] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  754.156014][ T5140] ftdi_sio ttyUSB0: unknown device type: 0xc698
[  754.258024][   T25] usb 1-1: new high-speed USB device number 117 using dummy_hcd
[  754.342787][T17634] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.3073'.
[  754.353232][T17621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  754.391898][T17621] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  754.400115][T17634] openvswitch: netlink: Message has 3074 unknown bytes.
[  754.468571][T17621] netlink: 'syz.3.3070': attribute type 4 has an invalid length.
[  754.512310][   T25] usb 1-1: device not accepting address 117, error -71
[  754.540805][T17621] netlink: 17 bytes leftover after parsing attributes in process `syz.3.3070'.
[  754.564851][   T25] usb usb1-port1: unable to enumerate USB device
[  754.860943][   T25] usb 4-1: USB disconnect, device number 116
[  754.885838][   T25] ftdi_sio 4-1:0.0: device disconnected
[  755.087228][T16797] usb 3-1: new high-speed USB device number 104 using dummy_hcd
[  755.279508][T16797] usb 3-1: Using ep0 maxpacket: 8
[  755.304230][T16797] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  755.346589][T16797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  755.384880][T16797] usb 3-1: config 0 descriptor??
[  755.887753][   T25] usb 1-1: new high-speed USB device number 118 using dummy_hcd
[  755.919731][  T784] usb 5-1: Sierra USB modem converter now attached to ttyUSB0
[  755.961648][  T784] usb 5-1: Sierra USB modem converter now attached to ttyUSB1
[  756.005888][  T784] usb 5-1: USB disconnect, device number 116
[  756.015175][T17644] netlink: 'syz.2.3076': attribute type 10 has an invalid length.
[  756.096885][  T784] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  756.126766][T17644] team0: Device veth1_macvtap failed to register rx_handler
[  756.157896][T17028] Bluetooth: hci2: command tx timeout
[  756.158298][   T25] usb 1-1: too many configurations: 65, using maximum allowed: 8
[  756.183708][  T784] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1
[  756.198864][T17028] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260
[  756.226935][   T25] usb 1-1: config 255 has too many interfaces: 248, using maximum allowed: 32
[  756.243524][ T5140] usb 4-1: new full-speed USB device number 117 using dummy_hcd
[  756.252624][  T784] sierra 5-1:0.0: device disconnected
[  756.293328][   T25] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  756.304142][   T25] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 248
[  756.315978][   T25] usb 1-1: config 255 has too many interfaces: 248, using maximum allowed: 32
[  756.333213][   T25] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  756.353980][   T25] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 248
[  756.380360][   T25] usb 1-1: config 255 has too many interfaces: 248, using maximum allowed: 32
[  756.397976][   T25] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  756.415178][   T25] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 248
[  756.443993][   T25] usb 1-1: config 255 has too many interfaces: 248, using maximum allowed: 32
[  756.455541][ T5140] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64
[  756.482671][   T25] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  756.502276][ T5140] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  756.553102][   T25] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 248
[  756.569668][ T5140] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  756.583877][   T29] audit: type=1326 audit(1719492708.048:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17666 comm="syz.1.3083" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a83575ae9 code=0x0
[  756.599523][   T25] usb 1-1: config 255 has too many interfaces: 248, using maximum allowed: 32
[  756.624998][ T5140] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  756.639704][   T25] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  756.652714][ T5140] usb 4-1: config 0 descriptor??
[  756.683138][T17656] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[  756.694922][   T25] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 248
[  756.732848][   T25] usb 1-1: config 255 has too many interfaces: 248, using maximum allowed: 32
[  756.742114][   T25] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  756.774589][   T25] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 248
[  756.807489][   T25] usb 1-1: config 255 has too many interfaces: 248, using maximum allowed: 32
[  756.836805][   T25] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  756.870160][   T25] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 248
[  756.904205][   T25] usb 1-1: config 255 has too many interfaces: 248, using maximum allowed: 32
[  756.922589][   T25] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  756.951110][   T25] usb 1-1: config 255 has 0 interfaces, different from the descriptor's value: 248
[  756.970157][   T25] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  756.991858][   T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  756.999909][T17674] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.3085'.
[  756.999943][T17674] openvswitch: netlink: Message has 3074 unknown bytes.
[  757.120233][T17656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  757.140061][T17656] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  757.172471][ T5140] usbhid 4-1:0.0: can't add hid device: -71
[  757.185516][ T5140] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  757.226657][ T5140] usb 4-1: USB disconnect, device number 117
[  757.355385][T17684] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3088'.
[  757.437203][T17685] sg_write: data in/out 43603/42 bytes for SCSI command 0x0-- guessing data in;
[  757.437203][T17685]    program syz.1.3088 not setting count and/or reply_len properly
[  757.473083][ T5140] usb 1-1: USB disconnect, device number 118
[  757.578021][T16672] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[  757.757956][T16672] usb 5-1: Using ep0 maxpacket: 8
[  757.783388][T16672] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  757.824621][T16672] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  757.865434][T16672] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  757.916762][T16672] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  757.987779][T16672] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  758.004830][T16672] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  758.061501][T16672] hub 5-1:1.0: bad descriptor, ignoring hub
[  758.088217][T16672] hub 5-1:1.0: probe with driver hub failed with error -5
[  758.118315][T16672] cdc_wdm 5-1:1.0: skipping garbage
[  758.138643][T16672] cdc_wdm 5-1:1.0: skipping garbage
[  758.158013][T17028] Bluetooth: hci3: command tx timeout
[  758.172246][T16672] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  758.193177][T16797] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  758.197674][T16672] cdc_wdm 5-1:1.0: Unknown control protocol
[  758.262095][T16672] usb 5-1: USB disconnect, device number 117
[  758.340936][T16797] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9
[  758.397518][T16797] asix 3-1:0.0: probe with driver asix failed with error -71
[  758.490317][T16797] usb 3-1: USB disconnect, device number 104
[  758.708606][T17699] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3091'.
[  758.837826][T16672] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[  759.027838][T16672] usb 5-1: Using ep0 maxpacket: 8
[  759.039829][T16672] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  759.055764][T16672] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  759.065377][T16672] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  759.092470][T16672] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  759.110979][T16672] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  759.140463][T16672] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  759.164566][T16672] hub 5-1:1.0: bad descriptor, ignoring hub
[  759.182846][T16672] hub 5-1:1.0: probe with driver hub failed with error -5
[  759.195062][T16672] cdc_wdm 5-1:1.0: skipping garbage
[  759.201019][T16672] cdc_wdm 5-1:1.0: skipping garbage
[  759.215069][T16672] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  759.221723][T16672] cdc_wdm 5-1:1.0: Unknown control protocol
[  759.369876][T16797] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[  759.499209][T16672] usb 5-1: USB disconnect, device number 118
[  759.577682][T16797] usb 3-1: Using ep0 maxpacket: 32
[  759.593129][T16797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  759.615494][T16797] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  759.635568][T16797] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  759.656258][T16797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  759.675688][T16797] usb 3-1: config 0 descriptor??
[  759.681208][ T5140] usb 1-1: new high-speed USB device number 119 using dummy_hcd
[  759.695927][T16797] hub 3-1:0.0: USB hub found
[  759.868773][ T5140] usb 1-1: too many configurations: 9, using maximum allowed: 8
[  759.888303][ T5140] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  759.907851][ T5140] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  759.932020][T16797] hub 3-1:0.0: config failed, can't read hub descriptor (err -22)
[  759.959959][ T5140] usb 1-1: config 0 interface 0 has no altsetting 0
[  759.978548][ T5140] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  759.998614][ T5140] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  760.017655][ T5140] usb 1-1: config 0 interface 0 has no altsetting 0
[  760.037154][ T5140] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  760.056625][ T5140] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  760.082955][ T5140] usb 1-1: config 0 interface 0 has no altsetting 0
[  760.098845][ T5140] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  760.108574][   T45] usb 4-1: new full-speed USB device number 118 using dummy_hcd
[  760.117106][T17719] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns
[  760.118421][ T5140] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  760.164467][T16797] usbhid 3-1:0.0: can't add hid device: -71
[  760.182198][ T5140] usb 1-1: config 0 interface 0 has no altsetting 0
[  760.189129][T16797] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  760.198644][ T5140] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  760.219849][ T5140] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  760.241885][ T5140] usb 1-1: config 0 interface 0 has no altsetting 0
[  760.249688][T16797] usb 3-1: USB disconnect, device number 105
[  760.268062][ T5140] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  760.287775][ T5140] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  760.315599][ T5140] usb 1-1: config 0 interface 0 has no altsetting 0
[  760.338364][   T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64
[  760.350564][ T5140] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  760.369554][   T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  760.382755][ T5140] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  760.407673][   T45] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  760.417001][ T5140] usb 1-1: config 0 interface 0 has no altsetting 0
[  760.437354][   T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  760.456186][ T5140] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  760.473089][   T45] usb 4-1: config 0 descriptor??
[  760.487686][ T5140] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  760.508163][T17716] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  760.515562][ T5140] usb 1-1: config 0 interface 0 has no altsetting 0
[  760.534555][ T5140] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  760.557822][ T5140] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  760.575052][ T5140] usb 1-1: Product: syz
[  760.587665][ T5140] usb 1-1: Manufacturer: syz
[  760.597742][ T5140] usb 1-1: SerialNumber: syz
[  760.614075][ T5140] usb 1-1: config 0 descriptor??
[  760.634305][ T5140] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0
[  760.973747][T17716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  761.037265][T17716] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  761.132504][   T45] usbhid 4-1:0.0: can't add hid device: -71
[  761.154414][   T45] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  761.229409][   T45] usb 4-1: USB disconnect, device number 118
[  761.801575][T11705] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  761.960565][T11705] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  762.210444][T11705] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  762.407460][T11705] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  762.478028][   T45] usb 1-1: USB disconnect, device number 119
[  762.528374][   T45] yurex 1-1:0.0: USB YUREX #0 now disconnected
[  762.650961][ T5098] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  762.662882][ T5098] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260
[  762.663750][ T5099] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  762.690073][ T5099] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  762.705195][ T5099] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  762.715607][ T5099] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  762.725092][ T5099] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  763.018364][T11705] bridge_slave_1: left allmulticast mode
[  763.034400][T11705] bridge_slave_1: left promiscuous mode
[  763.041959][T11705] bridge0: port 2(bridge_slave_1) entered disabled state
[  763.068811][T11705] bridge_slave_0: left allmulticast mode
[  763.077251][T11705] bridge_slave_0: left promiscuous mode
[  763.092093][T11705] bridge0: port 1(bridge_slave_0) entered disabled state
[  763.832034][ T5140] usb 4-1: new high-speed USB device number 119 using dummy_hcd
[  764.073604][T17765] input: syz1 as /devices/virtual/input/input26
[  764.080182][ T5140] usb 4-1: Using ep0 maxpacket: 32
[  764.092715][ T5140] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  764.140822][ T5140] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  764.153714][T11705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  764.181976][ T5140] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  764.191376][   T45] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[  764.235079][ T5140] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  764.256674][T11705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  764.292462][T11705] bond0 (unregistering): Released all slaves
[  764.327428][ T5140] usb 4-1: config 0 descriptor??
[  764.389399][ T5140] hub 4-1:0.0: USB hub found
[  764.481737][   T45] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  764.544257][   T45] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  764.639303][ T5099] Bluetooth: hci0: command tx timeout
[  764.644676][   T45] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  764.665428][T17748] chnl_net:caif_netlink_parms(): no params data found
[  764.760077][   T45] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  764.801762][ T5099] Bluetooth: hci3: command tx timeout
[  764.833163][   T45] usb 3-1: Manufacturer: syz
[  764.864673][ T5140] hub 4-1:0.0: config failed, can't read hub descriptor (err -22)
[  764.890591][   T45] usb 3-1: config 0 descriptor??
[  764.927509][   T45] igorplugusb 3-1:0.0: incorrect number of endpoints
[  765.123815][    C1] raw-gadget.0 gadget.3: ignoring, device is not running
[  765.160292][ T5140] usbhid 4-1:0.0: can't add hid device: -71
[  765.166407][ T5140] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  765.288911][ T5140] usb 4-1: USB disconnect, device number 119
[  765.518591][ T5099] Bluetooth: hci2: command tx timeout
[  765.617933][T17748] bridge0: port 1(bridge_slave_0) entered blocking state
[  765.651535][T17748] bridge0: port 1(bridge_slave_0) entered disabled state
[  765.668286][T17748] bridge_slave_0: entered allmulticast mode
[  765.708053][T17748] bridge_slave_0: entered promiscuous mode
[  765.782932][T17748] bridge0: port 2(bridge_slave_1) entered blocking state
[  765.827858][T17748] bridge0: port 2(bridge_slave_1) entered disabled state
[  765.858035][T17748] bridge_slave_1: entered allmulticast mode
[  765.877091][T17748] bridge_slave_1: entered promiscuous mode
[  765.933880][T17792] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app
[  765.946440][T11705] hsr_slave_0: left promiscuous mode
[  765.978075][T11705] hsr_slave_1: left promiscuous mode
[  765.999302][T11705] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  766.008109][T11705] batman_adv: batadv0: Removing interface: batadv_slave_0
[  766.057561][T11705] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  766.075204][T11705] batman_adv: batadv0: Removing interface: batadv_slave_1
[  766.194308][T11705] veth1_macvtap: left promiscuous mode
[  766.213827][T11705] veth0_macvtap: left promiscuous mode
[  766.223035][T11705] veth1_vlan: left promiscuous mode
[  766.231620][T11705] veth0_vlan: left promiscuous mode
[  766.878083][ T5099] Bluetooth: hci3: command tx timeout
[  767.315242][T11705] team0 (unregistering): Port device team_slave_1 removed
[  767.391446][T11705] team0 (unregistering): Port device team_slave_0 removed
[  768.296284][T17748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  768.331352][T17748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  768.433904][T17811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  768.488538][T17811] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  768.524713][T17805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  768.554650][T17805] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  768.594314][T17748] team0: Port device team_slave_0 added
[  768.648712][T17748] team0: Port device team_slave_1 added
[  768.711072][   T45] usb 2-1: new high-speed USB device number 92 using dummy_hcd
[  768.763346][T17748] batman_adv: batadv0: Adding interface: batadv_slave_0
[  768.802425][T17748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  768.837413][T17748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  768.876346][T17748] batman_adv: batadv0: Adding interface: batadv_slave_1
[  768.897798][T17748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  768.937463][ T5140] usb 1-1: new high-speed USB device number 120 using dummy_hcd
[  768.958279][ T5099] Bluetooth: hci3: command tx timeout
[  768.965460][T17748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  769.029535][T16797] usb 3-1: USB disconnect, device number 106
[  769.175592][T17748] hsr_slave_0: entered promiscuous mode
[  769.179814][ T5140] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7
[  769.198567][T17748] hsr_slave_1: entered promiscuous mode
[  769.212836][T17748] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  769.215091][ T5140] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0
[  769.237790][T17748] Cannot create hsr debugfs directory
[  769.265908][ T5140] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  769.299291][ T5140] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  769.330794][ T5140] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  769.360663][ T5140] usb 1-1: config 0 descriptor??
[  769.450136][ T5099] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection
[  769.629056][T16797] usb 3-1: new high-speed USB device number 107 using dummy_hcd
[  769.869075][T16797] usb 3-1: Using ep0 maxpacket: 16
[  769.889547][ T5140] plantronics 0003:047F:FFFF.0020: item fetching failed at offset 14/15
[  769.910497][T16797] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  769.931673][ T5140] plantronics 0003:047F:FFFF.0020: parse failed
[  769.947673][T16797] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  769.964300][ T5140] plantronics 0003:047F:FFFF.0020: probe with driver plantronics failed with error -22
[  769.988189][T16797] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  770.043712][T16797] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  770.075048][T16797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  770.125860][T16797] usb 3-1: SerialNumber: syz
[  770.158811][T16797] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12
[  770.268307][T16797] usb 1-1: USB disconnect, device number 120
[  770.412462][ T5140] usb 3-1: USB disconnect, device number 107
[  770.762893][T17748] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  770.809059][T17748] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  770.870626][T17748] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  770.915958][T17748] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  771.038242][ T5099] Bluetooth: hci3: command tx timeout
[  771.193776][T17748] 8021q: adding VLAN 0 to HW filter on device bond0
[  771.275909][T17748] 8021q: adding VLAN 0 to HW filter on device team0
[  771.301247][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state
[  771.308853][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state
[  771.350599][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state
[  771.357962][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state
[  771.480355][T17748] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  771.514046][T17748] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  771.659730][T17748] 8021q: adding VLAN 0 to HW filter on device batadv0
[  771.845272][T17748] veth0_vlan: entered promiscuous mode
[  771.900878][T17748] veth1_vlan: entered promiscuous mode
[  772.021822][T17748] veth0_macvtap: entered promiscuous mode
[  772.064989][T17748] veth1_macvtap: entered promiscuous mode
[  772.166211][T17748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  772.196503][T17748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  772.227932][T17748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  772.284264][T17748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  772.308268][T17748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  772.332541][T17748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  772.374312][T17748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  772.427447][T17748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  772.477412][T17748] batman_adv: batadv0: Interface activated: batadv_slave_0
[  772.510736][T17899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3137'.
[  772.521378][   T45] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[  772.619619][T17748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  772.647733][T16797] usb 1-1: new high-speed USB device number 121 using dummy_hcd
[  772.655454][T17748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  772.655478][T17748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  772.655498][T17748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  772.655523][T17748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  772.655540][T17748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  772.655561][T17748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  772.655578][T17748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  772.661082][T17748] batman_adv: batadv0: Interface activated: batadv_slave_1
[  772.861939][   T45] usb 2-1: Using ep0 maxpacket: 8
[  772.884615][T17748] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  772.901068][T17748] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  772.924280][   T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  772.930265][T17748] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  772.975279][   T45] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  772.977821][T17748] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  773.046349][   T45] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  773.057939][T16797] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7
[  773.106355][   T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  773.122005][T16797] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 1280, setting to 1024
[  773.196195][   T45] usb 2-1: config 0 descriptor??
[  773.212780][T16797] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  773.277842][T16797] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  773.287384][T16797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  773.388818][T16797] usb 1-1: config 0 descriptor??
[  773.395647][T17902] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  773.463976][  T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  773.503738][  T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  773.597214][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  773.617442][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  773.627902][T16797] usbhid 1-1:0.0: can't add hid device: -71
[  773.645592][T16797] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  773.678915][T16797] usb 1-1: USB disconnect, device number 121
[  773.818900][  T784] usb 3-1: new high-speed USB device number 108 using dummy_hcd
[  774.027832][  T784] usb 3-1: Using ep0 maxpacket: 16
[  774.047397][  T784] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  774.068133][  T784] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  774.099545][  T784] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  774.132899][  T784] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  774.164178][  T784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  774.187835][T17931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  774.211534][  T784] usb 3-1: SerialNumber: syz
[  774.220854][T17931] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  774.251810][  T784] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12
[  774.333787][T17935] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  774.497334][  T784] usb 3-1: USB disconnect, device number 108
[  774.796833][T17949] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3143'.
[  775.108103][  T784] usb 1-1: new high-speed USB device number 122 using dummy_hcd
[  775.330913][  T784] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  775.388895][  T784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  775.470456][  T784] usb 1-1: config 0 descriptor??
[  775.520258][   T45] usb 2-1: USB disconnect, device number 93
[  775.891831][T17949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  775.961170][T17949] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  776.006410][T17986] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3148'.
[  776.027998][  T784] hackrf 1-1:0.0: Board ID: 00
[  776.042734][  T784] hackrf 1-1:0.0: Firmware version: 
[  776.108771][  T784] hackrf 1-1:0.0: Registered as swradio16
[  776.156489][  T784] hackrf 1-1:0.0: Registered as swradio17
[  776.208956][  T784] hackrf 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  776.238056][ T5146] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[  776.387772][T16797] usb 4-1: new high-speed USB device number 120 using dummy_hcd
[  776.439277][ T5146] usb 5-1: Using ep0 maxpacket: 8
[  776.450976][ T5146] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  776.491914][ T5146] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  776.525047][ T5146] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  776.581108][ T5146] usb 5-1: config 0 descriptor??
[  776.616894][ T5146] gspca_main: vc032x-2.14.0 probing 046d:0892
[  776.630507][T16797] usb 4-1: Using ep0 maxpacket: 16
[  776.672860][T16797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  776.693665][T16797] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  776.714056][T16797] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[  776.755437][  T784] usb 1-1: USB disconnect, device number 122
[  776.772024][T16797] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  776.853394][T16797] usb 4-1: config 0 descriptor??
[  777.285019][T16797] logitech 0003:046D:C29C.0021: unknown main item tag 0x0
[  777.295434][T16797] logitech 0003:046D:C29C.0021: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.3-1/input0
[  777.411543][  T784] usb 1-1: new high-speed USB device number 123 using dummy_hcd
[  777.493776][T17992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  777.530930][T17992] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  777.585171][T16797] logitech 0003:046D:C29C.0021: no inputs found
[  777.591923][  T784] usb 1-1: Using ep0 maxpacket: 8
[  777.610157][  T784] usb 1-1: config 6 has an invalid interface number: 3 but max is 2
[  777.624236][T17984] ip6tnl0: Master is either lo or non-ether device
[  777.630516][  T784] usb 1-1: config 6 has an invalid interface number: 243 but max is 2
[  777.641684][ T5146] gspca_vc032x: reg_r err -71
[  777.646488][ T5146] vc032x 5-1:0.0: probe with driver vc032x failed with error -71
[  777.661460][T16797] usb 4-1: USB disconnect, device number 120
[  777.682110][  T784] usb 1-1: config 6 has an invalid interface number: 251 but max is 2
[  777.692526][ T5146] usb 5-1: USB disconnect, device number 119
[  777.723349][  T784] usb 1-1: config 6 has no interface number 0
[  777.752461][  T784] usb 1-1: config 6 has no interface number 1
[  777.773851][  T784] usb 1-1: config 6 has no interface number 2
[  777.788886][  T784] usb 1-1: config 6 interface 243 altsetting 0 bulk endpoint 0xD has invalid maxpacket 1024
[  777.809384][  T784] usb 1-1: config 6 interface 243 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 16
[  777.841129][  T784] usb 1-1: config 6 interface 243 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64
[  777.878317][  T784] usb 1-1: config 6 interface 243 altsetting 0 has a duplicate endpoint with address 0x7, skipping
[  777.917206][  T784] usb 1-1: config 6 interface 243 altsetting 0 endpoint 0xB8 has an invalid bInterval 247, changing to 7
[  777.970729][  T784] usb 1-1: config 6 interface 243 altsetting 0 endpoint 0xB8 has invalid maxpacket 8638, setting to 1024
[  778.025331][  T784] usb 1-1: config 6 interface 243 altsetting 0 has a duplicate endpoint with address 0x7, skipping
[  778.059194][   T29] audit: type=1326 audit(1719492729.528:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18040 comm="syz.2.3157" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb685175ae9 code=0x0
[  778.067698][  T784] usb 1-1: config 6 interface 243 altsetting 0 has a duplicate endpoint with address 0x1, skipping
[  778.144575][  T784] usb 1-1: config 6 interface 243 altsetting 0 has a duplicate endpoint with address 0x64, skipping
[  778.196147][  T784] usb 1-1: config 6 interface 243 altsetting 0 has 13 endpoint descriptors, different from the interface descriptor's value: 11
[  778.252044][  T784] usb 1-1: config 6 interface 251 altsetting 147 has an invalid descriptor for endpoint zero, skipping
[  778.291559][  T784] usb 1-1: config 6 interface 251 altsetting 147 endpoint 0x6 has an invalid bInterval 31, changing to 7
[  778.341845][  T784] usb 1-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0x6, skipping
[  778.387111][  T784] usb 1-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0x9, skipping
[  778.420044][  T784] usb 1-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0x4, skipping
[  778.468730][  T784] usb 1-1: config 6 interface 251 altsetting 147 has an invalid descriptor for endpoint zero, skipping
[  778.522984][  T784] usb 1-1: config 6 interface 251 altsetting 147 has an invalid descriptor for endpoint zero, skipping
[  778.575652][  T784] usb 1-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0xD, skipping
[  778.613331][  T784] usb 1-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0x3, skipping
[  778.652114][  T784] usb 1-1: config 6 interface 251 altsetting 147 endpoint 0x8A has an invalid bInterval 128, changing to 7
[  778.691915][  T784] usb 1-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0xF, skipping
[  778.706919][T11705] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  778.727820][  T784] usb 1-1: config 6 interface 251 altsetting 147 has a duplicate endpoint with address 0xE, skipping
[  778.762225][  T784] usb 1-1: config 6 interface 3 has no altsetting 0
[  778.782397][  T784] usb 1-1: config 6 interface 251 has no altsetting 0
[  778.820815][  T784] usb 1-1: New USB device found, idVendor=19d2, idProduct=0176, bcdDevice=dc.28
[  778.833672][  T784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  778.889737][  T784] usb 1-1: Product: ࠌ
[  778.894023][  T784] usb 1-1: Manufacturer: 〉
[  778.927948][  T784] usb 1-1: SerialNumber: 屉쿮峭Ⳇ옜타撅ꨱ鹒驹끤⌒꘤팽뗌嗝㕰㮚撫⤸쨵袉잹鴂樓牧쎸럜ቍ閹ധ乸愊뭘皔㪯㹖✸켮䠈웧
[  778.986023][T11705] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  779.150663][T11705] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  779.281693][  T784] usb 1-1: USB disconnect, device number 123
[  779.301264][T18049] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3162'.
[  779.323414][T11705] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  779.369056][T18051] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3163'.
[  779.503083][T17028] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  779.516309][T17028] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  779.527255][T17028] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  779.546064][T17028] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  779.558341][T17028] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  779.565791][T17028] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  779.637904][T11705] bridge_slave_1: left allmulticast mode
[  779.643634][T11705] bridge_slave_1: left promiscuous mode
[  779.649980][T11705] bridge0: port 2(bridge_slave_1) entered disabled state
[  779.669475][T11705] bridge_slave_0: left allmulticast mode
[  779.675200][T11705] bridge_slave_0: left promiscuous mode
[  779.677771][   T45] usb 3-1: new high-speed USB device number 109 using dummy_hcd
[  779.681303][T11705] bridge0: port 1(bridge_slave_0) entered disabled state
[  779.909936][   T45] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  779.942565][   T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  779.995968][   T45] usb 3-1: config 0 descriptor??
[  780.321153][T11705] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  780.337288][T11705] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  780.342474][  T784] usb 4-1: new high-speed USB device number 121 using dummy_hcd
[  780.361126][T11705] bond0 (unregistering): Released all slaves
[  780.421640][T18051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  780.465093][T18051] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  780.530222][   T45] hackrf 3-1:0.0: Board ID: 00
[  780.550018][   T45] hackrf 3-1:0.0: Firmware version: 
[  780.560669][  T784] usb 4-1: Using ep0 maxpacket: 8
[  780.580624][   T45] hackrf 3-1:0.0: Registered as swradio16
[  780.598394][  T784] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  780.617523][   T45] hackrf 3-1:0.0: Registered as swradio17
[  780.633989][  T784] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  780.650250][   T45] hackrf 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  780.677798][  T784] usb 4-1: config 0 descriptor??
[  781.376184][   T25] usb 3-1: USB disconnect, device number 109
[  781.494015][T18059] netlink: 'syz.3.3165': attribute type 10 has an invalid length.
[  781.598991][T17028] Bluetooth: hci3: command tx timeout
[  781.600896][T18059] team0: Device veth1_macvtap failed to register rx_handler
[  781.789361][T11705] hsr_slave_0: left promiscuous mode
[  781.825019][T11705] hsr_slave_1: left promiscuous mode
[  781.831691][T11705] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  781.853317][T11705] batman_adv: batadv0: Removing interface: batadv_slave_0
[  781.870720][T18108] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3173'.
[  781.870997][T11705] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  781.917873][T11705] batman_adv: batadv0: Removing interface: batadv_slave_1
[  781.977842][   T25] usb 3-1: new high-speed USB device number 110 using dummy_hcd
[  781.994011][T11705] veth1_macvtap: left promiscuous mode
[  782.000208][T11705] veth0_macvtap: left promiscuous mode
[  782.005910][T11705] veth1_vlan: left promiscuous mode
[  782.012335][T11705] veth0_vlan: left promiscuous mode
[  782.210268][   T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  782.228690][   T25] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  782.252906][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  782.278943][   T25] usb 3-1: config 0 descriptor??
[  782.295276][   T25] usb 3-1: Found UVC 0.00 device <unnamed> (046d:08c1)
[  782.311386][   T25] usb 3-1: No valid video chain found.
[  782.983286][   T45] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[  783.006238][T11705] team0 (unregistering): Port device team_slave_1 removed
[  783.064131][T11705] team0 (unregistering): Port device team_slave_0 removed
[  783.187824][   T45] usb 2-1: Using ep0 maxpacket: 16
[  783.208814][   T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  783.219227][   T45] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  783.230164][   T45] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  783.245259][   T45] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  783.255680][   T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  783.264079][   T45] usb 2-1: SerialNumber: syz
[  783.284760][   T45] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12
[  783.457119][  T784] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  783.473100][  T784] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9
[  783.497293][  T784] asix 4-1:0.0: probe with driver asix failed with error -71
[  783.525108][ T5140] usb 2-1: USB disconnect, device number 94
[  783.550153][  T784] usb 4-1: USB disconnect, device number 121
[  783.682071][T17028] Bluetooth: hci3: command tx timeout
[  783.863003][  T784] usb 3-1: USB disconnect, device number 110
[  783.919194][T18054] chnl_net:caif_netlink_parms(): no params data found
[  784.212961][T18054] bridge0: port 1(bridge_slave_0) entered blocking state
[  784.222926][T18054] bridge0: port 1(bridge_slave_0) entered disabled state
[  784.241331][T18054] bridge_slave_0: entered allmulticast mode
[  784.264679][T18054] bridge_slave_0: entered promiscuous mode
[  784.290450][T18054] bridge0: port 2(bridge_slave_1) entered blocking state
[  784.308471][T18054] bridge0: port 2(bridge_slave_1) entered disabled state
[  784.315771][T18054] bridge_slave_1: entered allmulticast mode
[  784.339437][T18054] bridge_slave_1: entered promiscuous mode
[  784.495900][T18054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  784.520924][T18054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  784.627827][   T45] usb 4-1: new high-speed USB device number 122 using dummy_hcd
[  784.648835][T18054] team0: Port device team_slave_0 added
[  784.676088][T18054] team0: Port device team_slave_1 added
[  784.727766][  T784] usb 1-1: new high-speed USB device number 124 using dummy_hcd
[  784.782304][T18054] batman_adv: batadv0: Adding interface: batadv_slave_0
[  784.791808][T18054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  784.868108][T18054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  784.872611][   T45] usb 4-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice=65.5a
[  784.898146][T18054] batman_adv: batadv0: Adding interface: batadv_slave_1
[  784.905149][T18054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  784.911291][   T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  784.945384][T18054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  784.984614][  T784] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  785.012553][  T784] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  785.047857][  T784] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  785.058322][   T45] usb 4-1: config 0 descriptor??
[  785.079173][   T45] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input27
[  785.089145][T18167] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3185'.
[  785.098302][  T784] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  785.152761][  T784] usb 1-1: config 0 descriptor??
[  785.189572][T18054] hsr_slave_0: entered promiscuous mode
[  785.199154][T18054] hsr_slave_1: entered promiscuous mode
[  785.227371][T18054] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  785.241270][T18054] Cannot create hsr debugfs directory
[  785.279925][T18145] netlink: 'syz.3.3181': attribute type 10 has an invalid length.
[  785.357201][T18172] Cannot find add_set index 0 as target
[  785.455157][T18145] bond0: (slave macvlan0): Enslaving as an active interface with an up link
[  785.544641][ T4530] bcm5974 4-1:0.0: could not read from device
[  785.583921][ T4530] bcm5974 4-1:0.0: could not read from device
[  785.594480][   T45] usb 4-1: USB disconnect, device number 122
[  785.609041][ T4530] bcm5974 4-1:0.0: could not read from device
[  785.622116][ T4530] bcm5974 4-1:0.0: could not read from device
[  785.687054][  T784] cm6533_jd 0003:0D8C:0022.0022: unknown main item tag 0x0
[  785.705080][  T784] cm6533_jd 0003:0D8C:0022.0022: unknown main item tag 0x0
[  785.731980][  T784] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0022/input/input28
[  785.767613][T17028] Bluetooth: hci3: command tx timeout
[  785.809269][  T784] cm6533_jd 0003:0D8C:0022.0022: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0
[  786.005786][T18147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  786.056532][T18147] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  786.176692][T18147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  786.191835][T18147] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  786.539394][    C1] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:172.20.20.170]:2. Sending cookies.
[  786.768563][   T25] usb 3-1: new high-speed USB device number 111 using dummy_hcd
[  786.976873][   T25] usb 3-1: Using ep0 maxpacket: 32
[  786.997829][  T784] usb 1-1: reset high-speed USB device number 124 using dummy_hcd
[  787.016111][   T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  787.057146][   T25] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  787.101849][   T25] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  787.137476][   T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  787.183165][   T25] usb 3-1: config 0 descriptor??
[  787.523900][T18054] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  787.562743][T18054] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  787.603418][T18054] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  787.635705][T18054] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  787.786932][T18238] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3196'.
[  787.847801][T17028] Bluetooth: hci3: command tx timeout
[  787.947740][ T5140] usb 4-1: new high-speed USB device number 123 using dummy_hcd
[  788.024817][T18054] 8021q: adding VLAN 0 to HW filter on device bond0
[  788.079822][T18054] 8021q: adding VLAN 0 to HW filter on device team0
[  788.102163][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state
[  788.109428][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state
[  788.137381][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state
[  788.144605][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state
[  788.158721][ T5140] usb 4-1: Using ep0 maxpacket: 32
[  788.194763][ T5140] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[  788.223855][ T5140] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  788.252001][ T5140] usb 4-1: Product: syz
[  788.260475][T16797] usb 1-1: USB disconnect, device number 124
[  788.271845][ T5140] usb 4-1: Manufacturer: syz
[  788.290532][ T5140] usb 4-1: SerialNumber: syz
[  788.318007][ T5140] usb 4-1: config 0 descriptor??
[  788.406940][T18054] 8021q: adding VLAN 0 to HW filter on device batadv0
[  788.557356][T18054] veth0_vlan: entered promiscuous mode
[  788.619572][T18054] veth1_vlan: entered promiscuous mode
[  788.804150][T18054] veth0_macvtap: entered promiscuous mode
[  788.857389][T18054] veth1_macvtap: entered promiscuous mode
[  788.936157][T18054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  788.964650][T18054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  789.003274][T18054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  789.031626][T18054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  789.049084][T18054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  789.092649][T18054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  789.123551][T18054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  789.160380][T18054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  789.188460][T18245] could not allocate digest TFM handle sha256-arm64-neon
[  789.197267][T18054] batman_adv: batadv0: Interface activated: batadv_slave_0
[  789.312451][ T5140] rtl8150 4-1:0.0: eth1: rtl8150 is detected
[  789.331412][T18054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  789.379531][ T5140] usb 4-1: USB disconnect, device number 123
[  789.386866][T18054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  789.434753][T18054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  789.488930][T18054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  789.514218][T18054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  789.540866][T16797] usb 3-1: USB disconnect, device number 111
[  789.565337][T18054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  789.588115][T18054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  789.629232][T18054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  789.672132][T18054] batman_adv: batadv0: Interface activated: batadv_slave_1
[  789.694847][T18054] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  789.725815][T18054] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  789.747983][T18054] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  789.766747][T18054] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  789.847551][T18270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3202'.
[  790.069125][T18288] kernel profiling enabled (shift: 4)
[  790.147688][    C0] ==================================================================
[  790.155821][    C0] BUG: KASAN: stack-out-of-bounds in profile_pc+0xd2/0x170
[  790.163076][    C0] Read of size 8 at addr ffffc900043277e0 by task kworker/0:6/5148
[  790.171010][    C0] 
[  790.173452][    C0] CPU: 0 PID: 5148 Comm: kworker/0:6 Not tainted 6.10.0-rc5-syzkaller-00021-g24ca36a562d6 #0
[  790.183642][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  790.193733][    C0] Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker
[  790.200982][    C0] Call Trace:
[  790.204289][    C0]  <IRQ>
[  790.207250][    C0]  dump_stack_lvl+0x241/0x360
[  790.211982][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  790.217229][    C0]  ? __pfx__printk+0x10/0x10
[  790.221865][    C0]  ? _printk+0xd5/0x120
[  790.226071][    C0]  print_report+0x169/0x550
[  790.230623][    C0]  ? __virt_addr_valid+0xbd/0x520
[  790.235707][    C0]  ? profile_pc+0xd2/0x170
[  790.240168][    C0]  kasan_report+0x143/0x180
[  790.244724][    C0]  ? profile_pc+0xd2/0x170
[  790.249184][    C0]  ? _raw_spin_unlock_irqrestore+0xd8/0x140
[  790.255132][    C0]  profile_pc+0xd2/0x170
[  790.259427][    C0]  profile_tick+0xd7/0x150
[  790.263904][    C0]  tick_nohz_handler+0x386/0x500
[  790.268886][    C0]  ? __pfx_tick_nohz_handler+0x10/0x10
[  790.274397][    C0]  __hrtimer_run_queues+0x551/0xd50
[  790.279645][    C0]  ? ktime_get_update_offsets_now+0x3c/0x250
[  790.285693][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  790.291461][    C0]  ? ktime_get_update_offsets_now+0x22d/0x250
[  790.297575][    C0]  hrtimer_interrupt+0x396/0x990
[  790.302569][    C0]  __sysvec_apic_timer_interrupt+0x110/0x3f0
[  790.308601][    C0]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  790.314280][    C0]  </IRQ>
[  790.317248][    C0]  <TASK>
[  790.320211][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  790.326246][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140
[  790.332803][    C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 fe 22 6b f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> b3 eb d4 f5 65 8b 05 44 23 73 74 85 c0 74 43 48 c7 04 24 0e 36
[  790.352453][    C0] RSP: 0018:ffffc900043277e0 EFLAGS: 00000206
[  790.358575][    C0] RAX: 864358049155e100 RBX: 1ffff92000864f00 RCX: ffffffff8172d9ea
[  790.366593][    C0] RDX: dffffc0000000000 RSI: ffffffff8bcabb40 RDI: 0000000000000001
[  790.374606][    C0] RBP: ffffc90004327870 R08: ffffffff92fa7677 R09: 1ffffffff25f4ece
[  790.382621][    C0] R10: dffffc0000000000 R11: fffffbfff25f4ecf R12: dffffc0000000000
[  790.390643][    C0] R13: 1ffff92000864efc R14: ffffc90004327800 R15: 0000000000000246
[  790.398663][    C0]  ? mark_lock+0x9a/0x350
[  790.403058][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  790.409573][    C0]  ? rcu_is_watching+0x15/0xb0
[  790.414396][    C0]  ? detach_timer+0x16c/0x320
[  790.418600][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  790.419088][    C0]  __timer_delete+0x2e0/0x380
[  790.427069][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  790.431540][    C0]  ? __local_bh_enable_ip+0x168/0x200
[  790.431571][    C0]  ? __pfx___timer_delete+0x10/0x10
[  790.431593][    C0]  ? mod_peer_timer+0x21/0x260
[  790.454280][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  790.460046][    C0]  ? mod_peer_timer+0x21/0x260
[  790.464868][    C0]  wg_timers_handshake_complete+0x25/0xa0
[  790.470643][    C0]  wg_packet_handshake_receive_worker+0x64b/0xf50
[  790.477119][    C0]  ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10
[  790.484116][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  790.489189][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  790.495215][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  790.501593][    C0]  ? process_scheduled_works+0x945/0x1830
[  790.507357][    C0]  process_scheduled_works+0xa2c/0x1830
[  790.512966][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  790.518998][    C0]  ? assign_work+0x364/0x3d0
[  790.523631][    C0]  worker_thread+0x86d/0xd50
[  790.528263][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  790.534292][    C0]  ? __kthread_parkme+0x169/0x1d0
[  790.539355][    C0]  ? __pfx_worker_thread+0x10/0x10
[  790.544515][    C0]  kthread+0x2f0/0x390
[  790.548625][    C0]  ? __pfx_worker_thread+0x10/0x10
[  790.553770][    C0]  ? __pfx_kthread+0x10/0x10
[  790.558399][    C0]  ret_from_fork+0x4b/0x80
[  790.562862][    C0]  ? __pfx_kthread+0x10/0x10
[  790.567491][    C0]  ret_from_fork_asm+0x1a/0x30
[  790.572309][    C0]  </TASK>
[  790.575356][    C0] 
[  790.577748][    C0] The buggy address belongs to stack of task kworker/0:6/5148
[  790.585227][    C0]  and is located at offset 0 in frame:
[  790.590788][    C0]  _raw_spin_unlock_irqrestore+0x0/0x140
[  790.596466][    C0] 
[  790.598807][    C0] This frame has 1 object:
[  790.603244][    C0]  [32, 40) 'flags.i.i.i.i'
[  790.603263][    C0] 
[  790.610173][    C0] The buggy address belongs to the virtual mapping at
[  790.610173][    C0]  [ffffc90004320000, ffffc90004329000) created by:
[  790.610173][    C0]  copy_process+0x5d1/0x3dc0
[  790.627930][    C0] 
[  790.630287][    C0] The buggy address belongs to the physical page:
[  790.636734][    C0] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802503af00 pfn:0x2503a
[  790.646846][    C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  790.654005][    C0] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[  790.662632][    C0] raw: ffff88802503af00 0000000000000000 00000001ffffffff 0000000000000000
[  790.671242][    C0] page dumped because: kasan: bad access detected
[  790.677698][    C0] page_owner tracks the page as allocated
[  790.683439][    C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), pid 2, tgid 2 (kthreadd), ts 71460810650, free_ts 71148537934
[  790.701810][    C0]  post_alloc_hook+0x1f3/0x230
[  790.706619][    C0]  get_page_from_freelist+0x2e43/0x2f00
[  790.712209][    C0]  __alloc_pages_noprof+0x256/0x6c0
[  790.717450][    C0]  __vmalloc_node_range_noprof+0x98e/0x1460
[  790.723378][    C0]  dup_task_struct+0x444/0x8c0
[  790.728216][    C0]  copy_process+0x5d1/0x3dc0
[  790.732839][    C0]  kernel_clone+0x226/0x8f0
[  790.737379][    C0]  kernel_thread+0x1bc/0x240
[  790.741997][    C0]  kthreadd+0x60d/0x810
[  790.746180][    C0]  ret_from_fork+0x4b/0x80
[  790.750635][    C0]  ret_from_fork_asm+0x1a/0x30
[  790.755437][    C0] page last free pid 5109 tgid 5109 stack trace:
[  790.761791][    C0]  free_unref_page+0xd22/0xea0
[  790.766605][    C0]  rcu_core+0xafd/0x1830
[  790.770968][    C0]  handle_softirqs+0x2c4/0x970
[  790.775767][    C0]  __irq_exit_rcu+0xf4/0x1c0
[  790.780388][    C0]  irq_exit_rcu+0x9/0x30
[  790.784743][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  790.790416][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  790.796439][    C0] 
[  790.798787][    C0] Memory state around the buggy address:
[  790.804446][    C0]  ffffc90004327680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  790.812538][    C0]  ffffc90004327700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  790.820643][    C0] >ffffc90004327780: 00 00 00 00 00 00 00 00 00 00 00 00 f1 f1 f1 f1
[  790.828730][    C0]                                                        ^
[  790.835956][    C0]  ffffc90004327800: 00 f3 f3 f3 00 00 00 00 00 00 00 00 00 00 00 00
[  790.844048][    C0]  ffffc90004327880: 00 00 00 00 00 00 00 00 f1 f1 f1 f1 00 f3 f3 f3
[  790.852130][    C0] ==================================================================
[  790.860214][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  790.867433][    C0] CPU: 0 PID: 5148 Comm: kworker/0:6 Not tainted 6.10.0-rc5-syzkaller-00021-g24ca36a562d6 #0
[  790.877614][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  790.887705][    C0] Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker
[  790.894960][    C0] Call Trace:
[  790.898265][    C0]  <IRQ>
[  790.901135][    C0]  dump_stack_lvl+0x241/0x360
[  790.905859][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  790.911104][    C0]  ? __pfx__printk+0x10/0x10
[  790.915735][    C0]  ? rcu_is_watching+0x15/0xb0
[  790.920540][    C0]  ? vscnprintf+0x5d/0x90
[  790.925086][    C0]  panic+0x349/0x860
[  790.929015][    C0]  ? __pfx_lock_release+0x10/0x10
[  790.934077][    C0]  ? check_panic_on_warn+0x21/0xb0
[  790.939244][    C0]  ? __pfx_panic+0x10/0x10
[  790.943799][    C0]  ? do_raw_spin_unlock+0x13c/0x8b0
[  790.949046][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  790.954990][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  790.961459][    C0]  check_panic_on_warn+0x86/0xb0
[  790.966445][    C0]  ? profile_pc+0xd2/0x170
[  790.970912][    C0]  end_report+0x77/0x160
[  790.975208][    C0]  kasan_report+0x154/0x180
[  790.979756][    C0]  ? profile_pc+0xd2/0x170
[  790.984221][    C0]  ? _raw_spin_unlock_irqrestore+0xd8/0x140
[  790.990166][    C0]  profile_pc+0xd2/0x170
[  790.994458][    C0]  profile_tick+0xd7/0x150
[  790.998922][    C0]  tick_nohz_handler+0x386/0x500
[  791.003899][    C0]  ? __pfx_tick_nohz_handler+0x10/0x10
[  791.009414][    C0]  __hrtimer_run_queues+0x551/0xd50
[  791.014662][    C0]  ? ktime_get_update_offsets_now+0x3c/0x250
[  791.020694][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  791.026465][    C0]  ? ktime_get_update_offsets_now+0x22d/0x250
[  791.032592][    C0]  hrtimer_interrupt+0x396/0x990
[  791.037666][    C0]  __sysvec_apic_timer_interrupt+0x110/0x3f0
[  791.043720][    C0]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  791.049397][    C0]  </IRQ>
[  791.052359][    C0]  <TASK>
[  791.055342][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  791.061375][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140
[  791.067937][    C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 fe 22 6b f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> b3 eb d4 f5 65 8b 05 44 23 73 74 85 c0 74 43 48 c7 04 24 0e 36
[  791.087583][    C0] RSP: 0018:ffffc900043277e0 EFLAGS: 00000206
[  791.093701][    C0] RAX: 864358049155e100 RBX: 1ffff92000864f00 RCX: ffffffff8172d9ea
[  791.101807][    C0] RDX: dffffc0000000000 RSI: ffffffff8bcabb40 RDI: 0000000000000001
[  791.109822][    C0] RBP: ffffc90004327870 R08: ffffffff92fa7677 R09: 1ffffffff25f4ece
[  791.117833][    C0] R10: dffffc0000000000 R11: fffffbfff25f4ecf R12: dffffc0000000000
[  791.125845][    C0] R13: 1ffff92000864efc R14: ffffc90004327800 R15: 0000000000000246
[  791.133859][    C0]  ? mark_lock+0x9a/0x350
[  791.138242][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  791.144625][    C0]  ? rcu_is_watching+0x15/0xb0
[  791.149435][    C0]  ? detach_timer+0x16c/0x320
[  791.154157][    C0]  __timer_delete+0x2e0/0x380
[  791.158870][    C0]  ? __local_bh_enable_ip+0x168/0x200
[  791.164280][    C0]  ? __pfx___timer_delete+0x10/0x10
[  791.169521][    C0]  ? mod_peer_timer+0x21/0x260
[  791.174343][    C0]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  791.180117][    C0]  ? mod_peer_timer+0x21/0x260
[  791.184927][    C0]  wg_timers_handshake_complete+0x25/0xa0
[  791.190695][    C0]  wg_packet_handshake_receive_worker+0x64b/0xf50
[  791.197171][    C0]  ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10
[  791.204254][    C0]  ? __pfx_lock_acquire+0x10/0x10
[  791.209318][    C0]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  791.215352][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  791.221905][    C0]  ? process_scheduled_works+0x945/0x1830
[  791.227667][    C0]  process_scheduled_works+0xa2c/0x1830
[  791.233274][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  791.239303][    C0]  ? assign_work+0x364/0x3d0
[  791.243939][    C0]  worker_thread+0x86d/0xd50
[  791.248575][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  791.254521][    C0]  ? __kthread_parkme+0x169/0x1d0
[  791.259585][    C0]  ? __pfx_worker_thread+0x10/0x10
[  791.264739][    C0]  kthread+0x2f0/0x390
[  791.268853][    C0]  ? __pfx_worker_thread+0x10/0x10
[  791.274104][    C0]  ? __pfx_kthread+0x10/0x10
[  791.278737][    C0]  ret_from_fork+0x4b/0x80
[  791.283213][    C0]  ? __pfx_kthread+0x10/0x10
[  791.287850][    C0]  ret_from_fork_asm+0x1a/0x30
[  791.292678][    C0]  </TASK>
[  791.296048][    C0] Kernel Offset: disabled
[  791.300385][    C0] Rebooting in 86400 seconds..