last executing test programs:

30.998328509s ago: executing program 1 (id=2829):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
sendmsg$inet(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}, 0x811)
r2 = timerfd_create(0x7, 0x0)
timerfd_settime(r2, 0x3, &(0x7f0000001000)={{0x0, 0x989680}, {0x77359400}}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000180)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0)

30.099497439s ago: executing program 1 (id=2834):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000840)='/sys/power/wakeup_count', 0x42, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000000)={0xd, 0x8, [0x24, 0x7]})
io_setup(0x20, &(0x7f0000001140))
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0xb8, &(0x7f0000000300)=@string={0xb8, 0x3, "3def79ac17134ed6e541213cb3039a710ae02cca18a2ffe1f8b8ae20299f5fe475d130f2060249097e19589e4a3c5ab25e804ae96c43248b643c1f0898331b69a6c3040000000000000030401db7b3345f0f5bd14e3c2b5bf53e870a5a9d04b23e74e140d334e96cb452e3dd5c9740176c6e7b8412336db5864c1ae94c2546fad34715bf4eca5868946dfee722de28e7b3ed1a19efb420c3ecacf5669449003a2bc243c1def17d4a57134bb8af0c6998b1e06d4e2119"}}]})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r2 = fcntl$dupfd(r1, 0x0, r1)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x200000d0}, 0x20044004)
sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000a00)=ANY=[], 0x2b08}, 0x1, 0x0, 0x0, 0x4090}, 0x4048856)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0)
syz_usb_control_io$printer(r3, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000240)={0x20, 0x14, 0x11, "023b48312025c04b028dcb170b2f0547cd"}, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000001980)={0x0, 0x2710}, 0x10)
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x208, &(0x7f0000000580)={[{0x40, 0x4e00, "5149d17f644e0b36c7b261a31af2c1b34d1f538c2c397a69ec1a5a2f6c5e2c37068911e14de78d6d4272644bb069229ec3534170c529fb948a136cf168432983"}, {0xf4, 0x4e00, "edb96fbf0b3cb6f1e662e34262f598c36ad1601c71ff8f966b0ff25c269f5019d23647ceb750f0ca969ebb437e15154e0b8094efa97a03e170b7f9324a379e0407f1db31e0b4c7adb1494f1a24a40151dffc7b275811b9c9b0ac35f5627a45ae0850890d616b4cb32ea13fc4e4f3c314383d0e705d7f2039f4ee616f6dc33f4febf470e5567e6614ae0e7ad7f80373ab8bae0edf88d4350682aa1c4b2419082d336c247bc4156b3c57a1cb2ce6214885d6e0ab7139e894743d6c9007de17db2b14f1e7c67eaf39503c0291574e73847df19409fb8240f1a0387aa99a90a088894c167e4367b8215ca2fbf6e6e492bcc1cae8604f"}, {0x16, 0x4e00, "967c359735ddf28020bc9fc35ca81830c52f95bc5109"}, {0xaa, 0x4e00, "9cb1c62f68637e5d88c92931cab1efffb40b07e1ef3cd6fa56350ec79a72e0a62f3c6acba6f1cde96c038bc238577a33c9ead7dbb6a9e9cdd4e1cba5423028eeefa227800c30b8899eaf4f2a5290b4567f7bc52a88d4b77f533ed8fc41f41ce515eb975a3063fc4f8251f8dc45d697a65a13b41191b1bf615027f74aff1f7447b1be3137b8fd18c09cd8c9d87ec204f7c580c890697bc3d62047c95a2d6b27a48b717639924424e0ec54"}]})
syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x0)
io_setup(0x8, &(0x7f0000004200)=<r5=>0x0)
r6 = syz_open_procfs(0x0, 0xfffffffffffffffc)
io_submit(r5, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}])
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "68c4502393926b50", "09f600000015ccba7f514728b11b8d00", "e2f5cde0"}, 0x28)
recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000007c0)=""/106, 0x6a}], 0x1}, 0x4}], 0x1, 0x40018022, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r2)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50}, {0x6, 0x1, 0x8}]}, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'team_slave_0\x00'})

28.173518094s ago: executing program 1 (id=2836):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, 0x0)
io_uring_setup(0x5297, &(0x7f0000000340)={0x0, 0x4ad6, 0x1, 0x2, 0x206})
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x2000000000000080, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x200008, 0x8, 0x20000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32], 0x4c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2b4}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)

27.014803549s ago: executing program 1 (id=2838):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) (async)
mount$fuseblk(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x1151000, 0x0) (async)
stat(&(0x7f00000043c0)='./file0\x00', &(0x7f0000004400)) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000340)={0x40, 0xf, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (rerun: 64)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async, rerun: 32)
syz_usb_connect(0x2, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="1201000026ab0720e80430ff37d30102030109022400010000000009045e00027b2da80009050d0000000000ff0905fc0100"], 0x0) (rerun: 32)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async)
syz_usb_control_io$uac1(r0, 0x0, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x17\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @pid}]}, 0x24}}, 0x0) (async, rerun: 32)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (rerun: 32)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000080)}, 0x10) (async, rerun: 64)
mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x800002, 0x3ff, 0x2) (async, rerun: 64)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$printer(r0, &(0x7f0000000100)={0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="40055e0000005e212e8d77141ee8d998f6d38c11c7fa137529c644323b899e316aeb5db4881a78b19ac61be989a163e43966cec82b5be5ad7c0778146ede40b8b6efcec2a0e435f4446e9e4b031e33ed71dc19132e76f13d31779ed5843c1c4431b9ae449291a365346957b4fd4a49a19b8eb9e3c61bfc85cf45e526aaa6712e0255896f35d54a1d2e55afda8ef54f749ddc68aa2697d21bc31fa9e6204ab882f94491c6cd1732c60da6c4ad23b70dcaae6a12c2e7b2fe"], &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x33}}}, &(0x7f0000000380)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="2015f50000000b842329f7d30bb95b893153af19198899654f6e5b25c29221e86db4da6f8e76d398f9b7235c00f2d0bb0df58239327a727aea24f9aa21a4bf4f5f300606a44c2049468da8d8478d8ffd14b45bcb3ed846d062adb81183af72e0ccb4bcd611abcae69e9b1d9e93b7c1247e7bce2491bf3fea7649a58cc7614e02c00cdc9eefff07000000000000463a175345a90b2e9bc3ba91e92f5a120634dde68a71392641e0daa9c5f00dc3232cdf3ef9cdfd0fd736b354488f99c14fc6c4ede23e030956713f1a94a6861c276167bc9b07f305f4ea7c5e1cef4c46cd9aa75e8bbb99c99595a328882949fca8137c09aa863a8b42cd3c7e1427"], &(0x7f0000000280)={0x0, 0xa, 0x1, 0xfc}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000480)={0x20, 0x0, 0xa8, {0xa6, "acf5e92cf04245e6d604b5172ab826b8283a4a35d4f50ecc66b9781287c7cf50a056d9bfb764d770c26102c1c355de9e44274dac5e689c493dde6ad8e541b2e6320ffc344467b44555c5be2946e8cb14a7456845f6b3ade6f6e4213684b9b0449153596159753df24e9a7b1af7f75fa69d07d6b29e679f59d36c9eb8b8221ce156770993de44d0461d5e63bf7be834eb00ab013473694e1532c19cc671d961b0d48ef64d9900"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x36}}) (async)
syz_usb_control_io$printer(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001500)={0x1c, &(0x7f00000013c0)={0x40, 0x31}, 0x0, 0x0}) (async, rerun: 64)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64)

25.445527584s ago: executing program 1 (id=2844):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4)
sendmsg$inet(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1}, 0x811)
r2 = timerfd_create(0x7, 0x0)
timerfd_settime(r2, 0x3, &(0x7f0000001000)={{0x0, 0x989680}, {0x77359400}}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x300, &(0x7f0000000180)=[{&(0x7f0000000340)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140090c0c00bdad446b9bbc7a46e39882a5dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0)

23.089452727s ago: executing program 1 (id=2852):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
unshare(0x400)
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_UNLINKAT={0x24, 0x44, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200})
io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)
openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128\x00'}, 0x58)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000280)={0x2, 0x9, 0x2})
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000200)={0x7, 0xd, 0x3, 0x87, 0x3, 0x80, 0x4, 0x7, 0x7, 0x1, 0x8, 0x2, 0x7, 0x4}, 0xe)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000240)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r10, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r9, 0x0, <r11=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r11, 0x0, 0x10000, 0x0, 0xa, 0x261663, 0x249801})
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r8, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r12, 0x0, 0x0, 0x0, 0x5, 0x80})

21.813436131s ago: executing program 32 (id=2852):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
unshare(0x400)
socket$vsock_stream(0x28, 0x1, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_UNLINKAT={0x24, 0x44, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200})
io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)
openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'rmd128\x00'}, 0x58)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000280)={0x2, 0x9, 0x2})
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000200)={0x7, 0xd, 0x3, 0x87, 0x3, 0x80, 0x4, 0x7, 0x7, 0x1, 0x8, 0x2, 0x7, 0x4}, 0xe)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r9=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000240)={0xc, 0x0, <r10=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000280)={0x28, 0x7, r10, 0x0, &(0x7f00007ff000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r7, 0x3ba0, &(0x7f0000000400)={0x48, 0x5, r9, 0x0, <r11=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r11, 0x0, 0x10000, 0x0, 0xa, 0x261663, 0x249801})
r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r8, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r12, 0x0, 0x0, 0x0, 0x5, 0x80})

14.232127655s ago: executing program 3 (id=2873):
r0 = userfaultfd(0x801)
syz_open_dev$usbmon(&(0x7f0000000200), 0x0, 0x101402)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
read$usbmon(0xffffffffffffffff, &(0x7f0000000400), 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async)
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close(0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, r0, 0x57c68000) (async)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, r0, 0x57c68000)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {0x0}}, 0x18)
connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) (async)
connect$inet(r3, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) (async)
writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
shutdown(r3, 0x1)
syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="7c94b2764547a1d06b0a33876939e27886aa98da050173b823e59fc738918510b7c78c8931f1b7c039ef0def57d38fac714e76ca8f59bebb552d0cf2a31ee744ea94f793a3a47997887fdca52b66e91093e9856a3113bc4498bdc39322a9bd6f86081848bed7dcb8ddfd758ccc56e98740"], 0x0) (async)
syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="7c94b2764547a1d06b0a33876939e27886aa98da050173b823e59fc738918510b7c78c8931f1b7c039ef0def57d38fac714e76ca8f59bebb552d0cf2a31ee744ea94f793a3a47997887fdca52b66e91093e9856a3113bc4498bdc39322a9bd6f86081848bed7dcb8ddfd758ccc56e98740"], 0x0)
fsopen(&(0x7f0000000000)='cifs\x00', 0x0) (async)
r4 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000280)='\x00\x00\x00\x00\x1b\x1b\x99\x10Td \xc2R\x9e\xfc\xffXk\xb1\xc6\x92\x92\x80\x1e\xc8\xf0\xd57\xea,\'\x1f\xc9b\xea\x8e\xe7I\xc1\xd4\x1f\x97G\xfc`\xa0;\xccm\xfe\xaa\xad\xcd\a\xee\xa5\x9c2\xecg(B\x8c\x85\'p\xd2\x1117\xb9\x1b&\xc0z9kpg\x1f\x1b\xab\xc3Y\xa7\xb2c\x9f4\x8d=\x8b\x81iqaI\x91\xc1K\xd4s\xc7k\x96(N[\xfe\xd8Yz^p\x85\xf1\xe4\xd1\xcfT\x8b\xcb[i5\xbb\"`$\xad\xe5\xa1\xbc\xf5\x0eC*\xeaY\xb8\x04ty\xc5\x9es\xd9\xf4\xa8\x16|\xfcLtf\x98.N\x90Z\x11H6\xd9\xa9\x004.y\x86dW\x1b\x03\xd4u\xde\xfd\x1f\x96\xd0g\x87nS\n\x8e\xe0\xa1\xed\x95\x9e%\x99\fz[0\x161\xb1\xe5\xaa\xb5Tcm\xd6\x93\aC\xfe\xd1\xe9TL\x82j\xa26w)n\xb7\xad\x90\x17!\xca\x12\xc0g\x8eL\xe2\ag|\xf8\xfddp\xee\xfdA\x82*\xda\x81\x8c\xa6\x1ep\x85\xed\x00$\\ui\x04\x90R\xf8@\xb7\x974-=\\\xd1~\x92%^\'\xbc]\xce\x1a\xc9\x1fO\xf2\xa6\x97\xdey\x02_\x8a;\x91\x1c\x88\xe6.\xf4@|zU0\x12\x81J\xe8\xb9\x10\xdc>\xe3', &(0x7f00000006c0)='//\xf2/\x06\b///o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x282982, 0x0)
close(r5)
sendmmsg$inet(r2, 0x0, 0x0, 0x4020fc0) (async)
sendmmsg$inet(r2, 0x0, 0x0, 0x4020fc0)
syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100006e392b08cd061901d0e601fd00e0000904bc0200ba70c3080000000000000000"], 0x0)
mmap(&(0x7f0000902000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x3a8bc000) (async)
mmap(&(0x7f0000902000/0x4000)=nil, 0x4000, 0x2, 0x10, 0xffffffffffffffff, 0x3a8bc000)

11.336423205s ago: executing program 5 (id=2878):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050003000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900c70e00003600000031000e0048000200ff88dfffffff0802110000008bffa08c9f010000fcffffffffffffff640020007107"], 0x5c}, 0x1, 0x0, 0x0, 0x20000090}, 0x0)

11.16881165s ago: executing program 5 (id=2879):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000140))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x8, 0x3, 0x99, 0x8, 0x1b1c, 0x1c00, 0xb482, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x19, 0x6, 0x1, 0xef, 0x1, 0x1, 0x9, [], [{{0x9, 0x5, 0x8, 0x10, 0x220, 0x1, 0x6, 0x2}}]}}]}}]}}, 0x0)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, 0x0, 0x2, 0xc4ffffff, 0x0, 0x0)

11.150205654s ago: executing program 3 (id=2880):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
lsm_set_self_attr(0x68, &(0x7f0000000800)={0x68, 0x4b, 0x20}, 0x20, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
pipe(0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000006000080008000000b00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ff0f00000091e00000000000000000000200000000000000"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
memfd_create(&(0x7f0000000080), 0x0)
r1 = getpid()
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x24020000)
syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x0)
fchdir(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001800dd8d000020000000000002000000000000060000060006001500010000001800168014000100000000000000010000001000000011", @ANYRES8=r5], 0x3c}}, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x26)
semctl$SETALL(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)=[0xe, 0x800, 0xfff7, 0x1, 0x0, 0x9])
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r6, 0x2, 0x0)
getdents64(r6, 0x0, 0x22)
rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file2\x00')
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES16=r0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006ef0200010000001ffe02000000000008000500", @ANYRES16=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010)
read$FUSE(0xffffffffffffffff, &(0x7f0000000a40)={0x2020}, 0x2020)

10.572238361s ago: executing program 3 (id=2882):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead)
fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, <r3=>0x0})
sched_setattr(r3, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000040)={0xa04, 0x4002, 0x0, 0x15, 0xa, 0x20000050, 0x0, 0x0, 0xffffffffffffffff})
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4)
r7 = dup2(r6, r6)
setsockopt$inet6_int(r7, 0x29, 0x4a, &(0x7f0000000580)=0x7ff, 0x4)
write$tun(r7, &(0x7f0000000040)=ANY=[], 0x46)
recvmmsg(r7, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x2000, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r8, 0xc010640c, &(0x7f0000000300)={0x15})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005440)=[{{&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000240)="4e3feb45b0ee88c7ac657aad12aff40392b672435d4ad78fca15afe8", 0x1c}, {&(0x7f00000003c0)="9e38b7245e7364d5d8baa1aa3b8e2ce5ed15f500e542b4ba07ca221cfe4ecd27664bc29f00b471009745666ac05be18376b914ba2fcee5913c0e59a4c28e10b999ff4cc398ffba95bcc00279ad11aaca2e4d8639abcc67a2b176d04764f0df23cdf5d8b0db0c22b5ea8e7222313affbc142719d0cb501416ef2ca5f2e2c044f3c7b6e16ba4f62dc226d391f283acfad112948383a0cc2558c0ad9c4137b957c41f94a379929fc59aece8573b0f02e9bdd47ab195f4fa923aedb627e0d0f6c9c0e58fa738c233a400bda8584437cfa43cf74b4c42d859ea9de9ed4a92a83b2734e8a7c4db359cf8f7b91cdf775b032dc6477c2fe3306c34e372eff465f812693083087dc424efd031fad8171639915f9d3a7446a3c6985a0daba66dd2bd239c7a5fa31c3bfd0d33411d07f881538715d0c6c181cb39fc54233e3e5e61eaa50bc0a087d4160a3ed450ace6002e979eabdc0cf16bbbf63f0e639f4e463226aa6c5a34284404ddb9da9a81b882b9878c525b16a9f1cdae77c885724ad2df79c0418e26275a6cb900cdfa3102a5c61d6efaebe396c2b8a6bc8aaf5f27b906267bd35041fc34bd6e214a9fd59ee54ea9e6b1b75bc9bd66a1cb94f3f35945202c88d402ea1cd2c3365ff1b5bc4d6020ed21d47802daf83f57233118e1786e30b2b2a39335d637620b11523d1a7cd4fa9d9548b74d8cb8e3dc390eb2393a3926c2f4f4623879901e14157cdf2db1f67c7e26659f36e673fdc1a6a2708441ff80962bf72baba7b52a684d3ef4fa888d123a60fa25f22e19458a3df979f20c8fc02db902c3e375b5845ef06e98808916ee2bff54f327659de99cee0bfd2bf9be4f5ea7ed4a14c415ca2e5b15e71d41f882c1528f596f29282a479274e264a4d4810854b3b8a7d849f2811f7760cbd9b4923a5a43b7483be28a3b9e9109098aa667542e2794ea2f5a5ab86152477061a16617d145029dc836e089d5c3fb16a5e6493e880a7fad347a9873c3817f81657b765b2c44e82a04ed9d144a75e0e2614042e131159c2fe4459d3585e557ec736bf1dcac84b527b95ad72f306913eab7bd0bb4f55a684bf1054a82a2d4fb9b91764928acb2c8ddea0f8419a64f6a965592c67248e64b2edd1e353166a76019dd8537503a67ee76f7ea8d8453ea28e2451a364e6295e2ccb60a4fe28235b295d284eac45b7f4a3f1259e6f193d3e18875ef0e009430d8fca529c1d96d2006d64210f7e1bd4527be5a67dc628869c08d8a13b6a55dcdeffc8c6426387ad492e95d2627091e247a7a28a483eed643b69f293a9e37451be33f1d51ecc810ee3df009b83e05000a348656eb519ac6c4f295b694c810832c7a2ae2cd1399647045b3995f6dd590e421289f01280f3b49f3ca5344f4369cbb6b108471a69de145a6e287285db0dc1cf832f29cec5ac035457ea579926cb0fcc5b25c77c8f87ad03eb1d00567f165acb6310857a7161795c854e0b2a3d1fdae9ce5afae45e30b5c0cb8f6767fe846c1e925271d7658627e88d9870e37e9f3ce9dc5ae5af59fd69005a4b640b8cc9619e36f849ae689f0356fedcff947dfb8beb8c3d0316dfb6e7301937ef16e34663366be6fa2eb687bdda547d5c3a622d9e8f0cf7485cf2aa17d64491b9d4e169f83bf1d16d1ef6431f3c69e791e54e00be108ef2fad03735d6ec440b517669e8c394349dc06eddbd30e1a37ae5816e6f24a1ff89c2119acafaee2338e38551a9fdd9ca3530d14a60e47d5e9871b68c189498bfa71918248879c14cd7ee67f4f7a5303a6f20ead452fea4e3189ee7d8cd87007288d4c544dac07a5a6200c9063b2b29a8ee83c019ebc76e6e4971944effce459eaaba1ca6a9797162ed0560dcf15e5d9a1d24cc29059ec3e6ef83957b1fee2f1cd6bc452fc3eba6bfc4479eae46ea9f6561f85892508e97bbd62c2f4ad26fe65d474cf1c895eecd000631822f391809ba2d2554b144bd90956254563b61bb26143dda4d45110dcf782cd0c14e189c85fe7b902092315c95fa96351ebb1ac814f762866b37199e389992264e2af6055211b48159f96473ef6392fc418face6435e8739edf5bfbdae45c47a63ad42b19097a607883a216703b6c4744deb3e88fda28087a458f7aa0313310af2486e603c3b49ef47f598b3e3b3e071d1ec46a5e9220f7dfd6be336ddb57e9c8f37e960df75e13dee71b129f9d5c3ae81c14902cdd7d5bfcd6660e012a804404efd5d41d0df9ecd3b106b48b616a73c58da98b80f65d1378eaa3d500cfc69656ea34cdf615e36a571f123183381075d6e69ae0345c52cee77e04f6479b4bc2c9b4595add306e2c1ce5341e2641b0b306e91fa22e664a5018395670589100cda42daa7804d7896153fd37d098b57e9104f608af268d0d41aea1e0b31b6e16e91c1d82cb8ff1d4100fefa4a609d0599269439a6e1819f14cb6110d0a48d1752b9ef87f2e3423a58b5e075b38a021ba20eec813bc1ce97dff30a325207ab9570a965b7d36a8adf1f9f7df7782413faa5164902f67eef3f362a268dcc74f7ef1566ebcaafeada76f27e5baaacd4ea589b000afe6c9b606937f2d8b96c9f4d32b959003bcf22cd0318a70a2e4ade3ebb19bacc6781e5f177e8a6f1b39a3c858e050f21408fd8e27e96cc0be198e243158b413e2c3a5d51fa230bea5cb19d72a591c063a994d7bc2448ecf863b7add2c336407b9b03eb3c8db0ff7867ccb35551107c0d6ff057bd0389713a99242afc6893924552c8c69d2434eb3503cf13b95f9f87be864b1a67dac93cbd4aaca2ed8d0d9ddca4481306365a32d984d9177093471b45dd51b09bbec4698ca5de6149ff7ba8f5514319078004a5fb017372f23efc734cf52db1c03a27f0853b8ef80241da8f54707ff861ed557ad69795a0cda610f3314f08588093c090138af1bbe89aeb56e688a0f34951a0d0740b584b2abed30ebd4db00d230660c03d0a10605611a707344eb4bcd54d8abd0ff1c85df17fc61bf32ac7ce213b6730ac8a778df0760fe6eb77f6690af1ec8427ef287697c1b21a89179d09c33328017dab86bb7346542391bcac52bf81e416536953ca45d703754dc8dcd4badb4afc1fd3a072d9fc8d6956a6180fbd9e3b181b67f9311755ce023592323a24c3c9a6dc681bf2a4c0acfdf16c9980ef84b9412cfcaf265799b998d372422b19e90828862b774d228bd3b5bd4ff0481540c057fee3bb578146c9be839cd180919d954479681b0edaeb4f3be3c7f79682a445121e906d45d970d39c6781297f05a2fe447510f822b656dcb53cd82099f7a56f31b0f43f7ed33b54daeed96bf32d9207914627956a66ccbdbf8fe91f7e94f2f96af28f01bbf5c6bb0cbf17a93f8be4ecf8a47815ec4896860f1ef999a70d67658dbe790f6f7d05dceba18b52d0dffd60483ed4c402cf32d1bd18e5a30d62fb2600cada3ad3ee2c9f545f60df6965c838ee34ae3792856f91cfecdfbece5ca3724cafaa103600defbaeb9d68f0a7e445a36f9b45a3c46a2970c3e6fef842457cfb4039e059e98369100a7864455b53871b1a4d4aa81e98dea2533d75d8ea8cae8708052eecc9e32f7d115bd97bd4baeb1fae1231ea7c014e91f014c636eb4c678da48387bd45e6a72fdc22ee25f614be1026ccb335ac2e70eb030bf943fb56fe5c7c95e3878b60d7222828e98cc48bc1eebe79f55797e4ee44a2c31f27373323802a2c9aa979953400aa4bd9aefa8ccf38ea6817703fdd0561f8d3f001b2ce16fb3804a28e3826999b75e27522a4ade077918b034e80a586cb374528e9c3280dde443972feeb192318f0ac8f2d603d3bb530adb4a90f58523d393141da4b6e08538d00cfc39024b8b84eaa49de009b3e41ec7172800ac00c5d726b03f8a0c6ad88226123af20df8cd2023db79a2c75c594d5f9a4978d4ec5a22cd43e8f3d7994ed51af8aef058ed0327fe00ac1859f3b6f85430d5b8c92bac4e873dcd454b76c6dd62da5435fd8e271ea1437688327e7d5532643b10a4fb68646a6bbfd1e42a9d0e0f1be18af47c8fd23282daae28bd886bf3309b5af499b32f6272d6ae0d09041ddf92f6d6b0380d67d6fdb284011886b17acdc87572d89f23d29c442d83fddf122f13c75074d16cbd90b6ae15be1b25d4d4886cef3a6f1ec69f7ec149cfba0fb87d483f08235f335b9cd045bc3e3a22141bd8f196ab6f41c1681a3797d90d4ebde20c974057a091e2eb4c43a99993e939a0f5e944df885aaa8e745bab476f319287c686951688ec776279811f777ca30756ea14fa24dfb5d615d6d8ecadfd5d24279a6e37a57440b9839cad4ecc00778373528b246feabce007acdef8bbcc3066926476d697c4da661506483b9995bdb081bd16aae8949a558e80d79ad0023280e33802d357360c0ffaaeb1650a65ec31d2a99dcb18eea1b3a990017379012e18ced20d399dec6ac8ecfa30124ccf03f540fe4ab6fb99571eb44a6c774a89e2dee9e69216eff5d66152c4fbb57965003bdd526e8a377391ad7d34e66375a3e2ef230cf122ecac819145284b09f5dea5e757d2b1ad5707995f8d8f53c8ee764cd4edb6708ae9fb79f67f02f9e054dc9be53f59108510adc01f21fb57608af9576973c9d97bae694fa8c1d09e96794ee84a52bcbe80fd733c50c9e115b3a04550f69e76c8d69c666eb09f08bcdcb0595057ff622b53bcc957e3cda141642f414957806f8b9d7feb7f9794958cd8bc9feaf78dca6522d75dabf116548044a66227e3d2ccaf14a3b5c4ce2108339ef7394f821b2cb0e7cfb158d943d3a2990e493b073a71a9e6b82c169fb455a86b672ff97259948ad6553a3ae206aa4f7b99139c66cfa534484522b808522ad29ee5b7df253325073712485a40cd1296dfe006730f47beed6306b745c43047d30f110e0fd62fbe67e5bc9fdbe4142bd6481309ec858a4eb971e5547f704d400354e17527b792a63bf363892f4c92b3308dde23eebb08f6a985667d6b60c5d001158ba0ce3bf1d0a903dacd2fdf27831a6e508907559281c4d1e020ced9311fad43fdd2696cdf800d7435ee27d6dad69085da0f17326486b283045ebc4320015adaf8087aea4d69b45b15da85fe1be040d447ee3272ce045f8babc3c50e7a9763f7c159697eddf7b6d3f4698bdaa4f9e4d19c445d772c8954566c006aec65f1126ea975dcae59c5a609d1651c1e3c834e643797869be6c06b229b2fa05ff84ee5d91156c42e23e6402cecdf88468929c5b2912838b26d35f85e7d2e4844ff8e779135cc4845b8e589f641a86aef6431cb4c003f16dea83cf7f5d21768c8ee444e231726ff2d73c4f5a51b3c7323bab9b75deec44411ae34cd1be949ea72018e78b9f2de6fbc0d7780e108f82ad895bc3386b96e9ff148f2f385b05c5e7507629d003cf6705f28442f2be989705c6884d88bba3aa74723401af77fbfd4a6e9d4b6f55275e4469b751bc330d47dee3e8771d5c44f71eeb416e562b4557357ceaa76ca133038853f7c954cfee8249eff805b044d224007f596ce533a532a2ae351d6a53aecac5cd947dd112fb3f4289db75541afe2cd5d1de55325e5510ca0b3c96c0af4129f04565bf342703710b6a478938c4b393aa6ead2faf3d2a1ada94eccc8bcfbe0aa43ef1e1db80fd5f79c28921785ea60c382c752cc322268482f450c9d227c09b1706323034d300d097f632dcfe736b38dcec2b81d3ad7d334c54e9d48ad05cdf98736a57bef64439ab794a86e58b06", 0xfe0}, {&(0x7f00000013c0)="dd1c6148058f9cd9c6be9b9f0e1f249fd5f338e809efc776a1a6295293120fd4d450a72409c3543be4f9d0d86928b73cf5d2ab02fe434aaead918d7432a95cb17045e757dcdb165ae9cd448d6a68f1f97f31b04316229f4f183d7b0a4422f10d38bcae17fdbf71439e8825d5a2acd1ac6c24078f07b4f1880f49db3e936956d18a5d79f1645458b5e087064d5b4b808aea1a6ff5d5e7c42a333ae65014957c6dd436489b86ab26d9d4", 0xa9}], 0x3, 0x0, 0x0, 0x8000}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001680)="9d88e44f3908eca7b1cd86b110df5d2c4657388fd3e64ce36037a6b74daffe1c6466c2693c466b2e2eb1c8e593c0d87e955cdb389ce1f362037fef", 0x3b}, {&(0x7f00000016c0)}, {0x0}, {&(0x7f0000001880)}, {&(0x7f0000001980)="ece629b1a1a7e657151c8a4f7ab45354c6c8056336c965105c43b54691be551c22a6", 0x22}], 0x5, &(0x7f0000002000)=ANY=[@ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32=0x0], 0x58, 0x4}}, {{&(0x7f0000001c40)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001480), 0x0, 0x40004}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f00000047c0)="19cbb4bc94f54ec7ed056051c3109de9dc57f38a61cdf7a29864b4744b88cdb2ad86a08ff6b425b12e7b65033850af61dbeb0bfb1480adcac2422e3dd9109ceb024b0f66d1993f196e82f524663cd89d987ea252e2500df5c748d3523c2bcb5d951e680e305b912865ec3ea97ff3e3e29e067fb9fea2cc4d6065c5822c0106291d7eec38df92f24cb8e38601e95f94a833cf", 0x92}], 0x1, &(0x7f0000001480)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [r4, 0xffffffffffffffff, r9, 0xffffffffffffffff, r7, 0xffffffffffffffff, r8, r8]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x30, 0x1, 0x1, [r0, r2, r4, r4, r8, 0xffffffffffffffff, r9, r2]}}], 0x100, 0xc45}}], 0x4, 0x4000040)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r10, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r10, 0x5)
setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)

10.497974175s ago: executing program 5 (id=2883):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000040), 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060002000000040004800900010073797a30000000000900020073797a3200000000050007400c000000140000001100010000000000000000000000000a00"/96], 0x60}}, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x74d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xff, 0x1, 0x1, {0x22, 0xbb0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xba, 0x7}}}}}]}}]}}, 0x0)
mlock2(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="d1b611be9eb2b024000000200001032abd7000ffdbdf8cd3275025020000000000000800"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local})
write$tun(r6, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef)
ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@multiplanar_userptr={0x4, 0x4, 0x4, 0x100, 0x3, {0x0, 0x2710}, {0x5, 0x8, 0x5, 0x9, 0x8, 0xe, "dfffffff"}, 0x472, 0x2, {0x0}, 0x2872a000})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000280), 0x0)

7.956497763s ago: executing program 0 (id=2890):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) (async)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) (async)
setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00')
preadv(r3, 0x0, 0x0, 0x8, 0x0) (async)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40}) (async)
close(0xffffffffffffffff)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async)
r4 = socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff}) (async)
open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) (async)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async)
read$FUSE(r6, &(0x7f000000c3c0)={0x2020, 0x0, <r7=>0x0, <r8=>0x0, <r9=>0x0}, 0x2020)
write$FUSE_INIT(r6, &(0x7f0000000500)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0xfc1b2d1c5df07dbb, 0x0, 0x441, 0x100, 0x400008, 0x0, 0x0, 0x2}}, 0x50) (async)
syz_fuse_handle_req(r6, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x0, {0xfffffffffffffffd, 0x200, 0x0, {0x0, 0x0, 0x0, 0x5, 0x0, 0x6, 0x200, 0xbaa4, 0x5, 0x8000, 0x0, r8, r9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x3, 0x9}) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x6}}]}}]}, 0x48}}, 0x44080)

6.34994733s ago: executing program 2 (id=2893):
r0 = socket$inet6(0xa, 0x80002, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast1, @local}, 0xc)
setsockopt$inet_mreqn(r1, 0x0, 0x28, &(0x7f0000000040)={@multicast1, @local}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4)
sendmsg$nl_generic(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001a00)={0x14, 0x52, 0x1, 0x0, 0x0, {0x2, 0x3}}, 0x14}}, 0x20040010)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0\x00'})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x8, '\x00', 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @void, @value, @void, @value}, 0x50)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x6d}, 0x8)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8}, 0x10)
socket$packet(0x11, 0x2, 0x300)
r4 = socket$kcm(0x10, 0x2, 0x4)
r5 = socket$kcm(0x2, 0x6, 0x0)
sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000130081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c1f01400b080c00bdad01409bbc7a46e3988285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0)
sendmmsg$inet6(r0, 0x0, 0x0, 0x4004000)

6.304783327s ago: executing program 5 (id=2894):
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
userfaultfd(0x801)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000340), 0x1, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f00000002c0)=0x10000)
ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0xf7c, 0x3, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0xf0, 0x81, '\x00', 0xf5}, {0xe9, 0x4, 0x9, '\x00', 0x11}, {0x7, 0x8, 0x3, '\x00', 0x8f}, {0xfe, 0x80, 0xb1, '\x00', 0xa}, {0xf, 0x2, 0x8, '\x00', 0xaa}, {0x7, 0x8, 0x4, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0xa, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x80}, {0xf, 0x8, 0x4, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x7, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5e, 0x4, '\x00', 0x3}, {0x5, 0xa0, 0x47, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0xb, '\x00', 0x3}, {0x7f, 0x6, 0x7, '\x00', 0x4}, {0x93, 0x40, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0xfc}, {0x6, 0xc, 0x92, '\x00', 0x8}]}})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20024090)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB, @ANYRESDEC], 0x0)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write(r2, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000")
syz_usb_control_io(r2, 0x0, 0x0)
read$char_usb(r3, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})

5.937543495s ago: executing program 2 (id=2895):
syz_emit_ethernet(0x4e, &(0x7f0000002940)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0xce, '\x00', @loopback}}}}}}, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x18, 0x1411, 0x1, 0x0, 0x3, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}}, 0x0)

5.865547162s ago: executing program 4 (id=2896):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448)
r1 = socket$inet6(0xa, 0x3, 0x2f)
socket$pppl2tp(0x18, 0x1, 0x1)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0xff, @mcast1, 0x5}, 0x1c)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r2, &(0x7f00000005c0)="f5", 0x1, 0x80c0, &(0x7f0000000240)={0xa, 0x4e20, 0xffbffffc, @rand_addr=' \x01\x00'}, 0x1c)
connect$inet6(r2, &(0x7f0000001880)={0xa, 0x0, 0x9, @private0, 0x1}, 0x1c)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSIGACCEPT(r3, 0x5607, 0x2)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x1, 0xffc}, 0x8)
ioctl$VIDIOC_S_AUDOUT(0xffffffffffffffff, 0x40345632, &(0x7f0000000080)={0xc0000000, "6ab0532235d91dcbb5357462e1ab739792469e2912ed44bcb0b299e62a878591"})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CAP_HALT_POLL(r5, 0x4068aea3, &(0x7f00000000c0)={0xb6, 0x0, 0x80000000})
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
r9 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_XRUN(r9, 0x4148, 0x0)
socket(0x10, 0x80002, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r10 = syz_open_dev$sndpcmc(&(0x7f0000000340), 0x0, 0x80000)
ioctl$SNDRV_PCM_IOCTL_REWIND(r10, 0x40084146, 0x0)

5.842189828s ago: executing program 2 (id=2897):
r0 = socket(0x2b, 0x1, 0x1)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @local, 0x3}, 0x1c)
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x5}, 0x40000)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=<r1=>0x0)
timer_settime(r1, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0)

5.692604165s ago: executing program 3 (id=2898):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x0, 0x0, 0x20363159}})
ioctl$PPPIOCSMRU(r0, 0x40047452, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r5, 0x10d, 0xf, 0x0, 0x0)
r6 = eventfd(0x1)
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f00000002c0)={0x0, 0x0, 0x4, r6, 0xb})
r7 = dup(r4)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r8, 0xae80, 0x0)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
r10 = accept4(r9, 0x0, 0x0, 0x800)
io_setup(0x7, &(0x7f0000000000)=<r11=>0x0)
io_submit(r11, 0x1, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r10, 0x0}])
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa0020000000080800490000380000000000069078ac1e0001ac14140d8307d7e0000002860600"/54, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRESOCT=r2], 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r14=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES16=r12, @ANYBLOB="010028bd700000dcdf254400000008000300", @ANYRES32=r14, @ANYBLOB="2000700005000600000000f50400010000fdff00b200080000000000040007000a001800", @ANYRES32, @ANYRES16=r10, @ANYRES16=r2, @ANYRES16=r0, @ANYRES8=r9], 0x48}}, 0x4000)

5.573075905s ago: executing program 2 (id=2899):
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x6c, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x200000a9, 0x8, 0x8, &(0x7f0000000540)}}, 0x10)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'syztnl0\x00', &(0x7f00000006c0)={'tunl0\x00', <r2=>r1, 0x80, 0x8000, 0x0, 0x5c8cff7d, {{0x5, 0x4, 0x3, 0x7, 0x14, 0x67, 0x0, 0x4, 0x29, 0x0, @private=0xa010102, @private=0xa010100}}}})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'syztnl1\x00', &(0x7f00000000c0)={'gretap0\x00', r2, 0x20, 0x700, 0xe, 0x889c, {{0x5, 0x4, 0x1, 0x1f, 0x14, 0x68, 0x0, 0xfa, 0x29, 0x0, @multicast1, @broadcast}}}})
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000180)={0x8, 0xffffffffffffffff, 0x1})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e00)=ANY=[], 0x50)
r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r3, &(0x7f0000000040)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xe65, 0x3a, 'E', 0x3a, 'syz1', 0x3a, './file0', 0x3a, [0x0]}, 0x2d)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_script(r7, &(0x7f0000000940)={'#! ', './file1/../file0'}, 0x14)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1c, "feab78fc5e3ed1e00d96072000001ea89de2b7fbeaba2b1880b8785d96000100000000009867e49dd2119a980000030000000000000041de88eebfb845b500", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000004000", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x5]}})
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000000}, 0x44008)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="2400000076001f03000000000000005108000000ffffffff0c000d80"], 0x24}], 0x1}, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000800))
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
syz_clone(0x4001100, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)

5.545315594s ago: executing program 0 (id=2900):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000600)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
r2 = fsopen(&(0x7f0000000200)='mqueue\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
prlimit64(0x0, 0xc, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
mknodat(r3, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

5.390469706s ago: executing program 0 (id=2901):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xffffffff, 0x5, 0xffff, 0xffffbfff, 'syz0\x00', 0x4000}, 0x2, 0x4, 0x3, 0x0, 0x0, 0xff, 'syz1\x00', 0x0})

5.221502152s ago: executing program 0 (id=2902):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="74000000100001000000000000000000", @ANYRES32], 0x74}, 0x1, 0x0, 0x0, 0x24008880}, 0x4048000)
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c)
syz_emit_ethernet(0x3a, &(0x7f0000000040)={@link_local, @broadcast, @val={@void, {0x8100, 0x5, 0x1, 0x2}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe004, 0x2, 0x2, 0x1000000}}}}}, 0x0)

5.215322476s ago: executing program 3 (id=2903):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead)
fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, <r3=>0x0})
sched_setattr(r3, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000040)={0xa04, 0x4002, 0x0, 0x15, 0xa, 0x20000050, 0x0, 0x0, 0xffffffffffffffff})
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4)
r7 = dup2(r6, r6)
setsockopt$inet6_int(r7, 0x29, 0x4a, &(0x7f0000000580)=0x7ff, 0x4)
write$tun(r7, &(0x7f0000000040)=ANY=[], 0x46)
recvmmsg(r7, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x2000, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r8, 0xc010640c, &(0x7f0000000300)={0x15})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005440)=[{{&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000240)="4e3feb45b0ee88c7ac657aad12aff40392b672435d4ad78fca15afe8", 0x1c}, {&(0x7f00000003c0)="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", 0xfe0}, {&(0x7f00000013c0)="dd1c6148058f9cd9c6be9b9f0e1f249fd5f338e809efc776a1a6295293120fd4d450a72409c3543be4f9d0d86928b73cf5d2ab02fe434aaead918d7432a95cb17045e757dcdb165ae9cd448d6a68f1f97f31b04316229f4f183d7b0a4422f10d38bcae17fdbf71439e8825d5a2acd1ac6c24078f07b4f1880f49db3e936956d18a5d79f1645458b5e087064d5b4b808aea1a6ff5d5e7c42a333ae65014957c6dd436489b86ab26d9d4", 0xa9}], 0x3, 0x0, 0x0, 0x8000}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001680)="9d88e44f3908eca7b1cd86b110df5d2c4657388fd3e64ce36037a6b74daffe1c6466c2693c466b2e2eb1c8e593c0d87e955cdb389ce1f362037fef", 0x3b}, {&(0x7f00000016c0)}, {0x0}, {&(0x7f0000001880)}, {&(0x7f0000001980)="ece629b1a1a7e657151c8a4f7ab45354c6c8056336c965105c43b54691be551c22a6a6c78f6f", 0x26}], 0x5, &(0x7f0000002000)=ANY=[@ANYRES32=r1, @ANYBLOB="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", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32=0x0], 0x58, 0x4}}, {{&(0x7f0000001c40)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001480), 0x0, 0x40004}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r2, r4]}}, @rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [r4, 0xffffffffffffffff, r9, 0xffffffffffffffff, r7, 0xffffffffffffffff, r8, r8]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x30, 0x1, 0x1, [r0, r2, r4, r4, r8, 0xffffffffffffffff, r9, r2]}}], 0x110, 0xc45}}], 0x4, 0x4000040)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r10, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r10, 0x5)
setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)

5.11317286s ago: executing program 0 (id=2904):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, <r2=>0x0})
move_pages(r2, 0x0, 0x0, &(0x7f0000000480)=[0x0, 0x81, 0x100, 0x7ff, 0xa8b, 0x4, 0x400, 0x3, 0xff], &(0x7f00000004c0)=[0x0, 0x0], 0x4)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000600))
ioctl$GIO_CMAP(r3, 0x4b70, 0x0)
pwrite64(r3, &(0x7f0000000500)="d6ea0f900898b50c917f972fc9ca70589353a7e53a5363fa644ea169eb6a1c1e328be2c11a15490c1aed7229c4298a4d2699a401cc7746ce4fec6c9fca189d44398ccb77f02a55e2909d68d3296bef1d21b0de81c0fbba5e35afe06b51d6a1adaa61c0f9329d7c09701ebee26d693fb8ae67ef1ae1f7f202c99402b236312fb705e62628ebc907814973dbacd241f5e7385bab28a13f45e6fa", 0x99, 0xffffffffffffffff)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil)
sendmsg$sock(r1, &(0x7f00000003c0)={&(0x7f0000000000)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x80, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000180)="ae64c69ab574cc83f4febfa23854101c35b75f6ea2f6d0547f39e29840c131f724c353dc8c45e666a1cbec6df2995981eb5e8cf09e81e8ab0c2bb925b37c0512b235eaddefa8ec80a4b7dd75ae311803475d4866a63cff5d5e", 0x59}, {&(0x7f0000000200)="287f97a7b9a6c9375d866afb4de8a06bcaf45643bfaf34e2faa5e4273aec3ec8ba2fcdc9506c93bb659c363bb8d762b6cea1f526efcdf3576cae30fe789ebefd37c402ccf37d4f611af7923871093ee4d68a446006f932f32a10af15be02cc189482a5619358802b6d95a2b143a9284741dbbfd850e8eb0d3d6c930a623c97170f0c533ba942bc2c5515378e2a0cdb75d7d3675b66ddf6a6c19ab50440f313384d1e6df606226db13f6ef48b1c1ed21c84c4df3b43becf94916c571486ac92577758d88553fd148f23b2e784a17daa630fd60f60c8e9350201be568a77278599f14ab0ad", 0xe4}], 0x3, &(0x7f0000000340)=[@txtime={{0x18, 0x1, 0x3d, 0x999}}, @txtime={{0x18}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0x80000001}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x78}, 0x20000000)
munlockall()
syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x1}, 0x6e)
r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x458, 0x5013, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xb9, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x800, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x2}}}}}]}}]}}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "cb8e7e34"}]}}, 0x0}, 0x0)
r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_ALM_READ(r5, 0x40187013, &(0x7f0000000040))
shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000)

3.053391047s ago: executing program 2 (id=2905):
r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x81204101, 0x0)
pipe2$9p(&(0x7f0000000040), 0x80000)
statx(0xffffffffffffffff, 0xffffffffffffffff, 0x219b88a945bbfc11, 0x200, 0x0)
syz_usb_connect(0x0, 0x47, &(0x7f0000001fc0)=ANY=[@ANYBLOB="120100003194b00899045510a4010102030109023500010000000009040000039e402c00082402010000000009058d0200000000000905030300000000000905"], 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
mkdirat$cgroup(r3, &(0x7f0000000a00)='syz0\x00', 0x1ff)
openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0)
bind$rds(r4, 0x0, 0x0)
sendmsg$rds(r4, &(0x7f0000002180)={&(0x7f0000000100)={0x2, 0x4e22, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@rdma_args={0x48, 0x114, 0x1, {{0x9, 0xb58}, {&(0x7f00000004c0)=""/40, 0x28}, &(0x7f0000000840)=[{&(0x7f0000000500)=""/28, 0x1c}, {&(0x7f00000008c0)=""/186, 0xba}, {0x0}, {&(0x7f0000000780)=""/81, 0x51}, {&(0x7f0000000800)=""/56, 0x38}], 0x5, 0x10, 0x6}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0, 0x0, 0x8}}], 0x90, 0x5}, 0x8011)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00fb00"/25], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1000000}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0x23, &(0x7f00000000c0)={r6, r5}, 0xc)
r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa34e, 0x8, 0x0, 0xbfdffffc}, &(0x7f0000000540)=<r8=>0x0, &(0x7f0000000280)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r7, 0x0)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})

3.049751374s ago: executing program 4 (id=2906):
r0 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000280)=0xffffffff, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000c00), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24040800}, 0x400c0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000040)={'syztnl2\x00', <r3=>0x0, 0x20, 0x1, 0x9, 0xd, {{0x32, 0x4, 0x0, 0x3c, 0xc8, 0x66, 0x0, 0x7, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x41}, {[@timestamp={0x44, 0x8, 0x59, 0x0, 0x3, [0x0]}, @generic={0x94, 0xf, "cf2aef7e1184627e7da790145b"}, @timestamp_prespec={0x44, 0x14, 0xe3, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x3a}, 0x5b83}, {@empty, 0x8}]}, @noop, @rr={0x7, 0x2b, 0xa3, [@empty, @empty, @dev={0xac, 0x14, 0x14, 0x1b}, @rand_addr=0x64010102, @loopback, @dev={0xac, 0x14, 0x14, 0x3e}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @local]}, @timestamp={0x44, 0x14, 0x40, 0x0, 0x7, [0x4, 0x0, 0x1, 0x400]}, @timestamp_addr={0x44, 0x24, 0xba, 0x1, 0x3, [{@loopback, 0xa}, {@remote}, {@broadcast, 0x5}, {@broadcast, 0x3ff}]}, @timestamp_prespec={0x44, 0x24, 0xe9, 0x3, 0x9, [{@private=0xa010100, 0x10}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80000001}, {@multicast2, 0x6}, {@empty, 0x7}]}]}}}}})
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000180)={@local, <r4=>0x0}, &(0x7f00000001c0)=0x14)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x340, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0)
pread64(r5, &(0x7f0000000040)=""/17, 0xfffffffffffffd73, 0x0)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0xe0, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf7}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffa}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xe0}, 0x1, 0x0, 0x0, 0x54}, 0x40000c4)

3.039024031s ago: executing program 5 (id=2907):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r1})
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r3=>0x0})
connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002840)=ANY=[], 0x48}}, 0x1004c000)
r4 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x7, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x8, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1a, 0x1b, 0x7, 0x2, {0x9, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003600)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xc}, {}, {0x8, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0xc114}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x20004000)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000900)={0x48, 0x1, r1, 0x0, 0x5, 0x2})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1})
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
epoll_create(0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_mptcp(0x2, 0x1, 0x106)
r8 = socket$packet(0x11, 0x3, 0x300)
sendmsg$TIPC_CMD_SET_LINK_PRI(r7, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000041)
socket$inet6_sctp(0xa, 0x801, 0x84)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff})
getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r8, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r10, 0x3b}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0)

2.798406546s ago: executing program 5 (id=2908):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead)
fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, <r3=>0x0})
sched_setattr(r3, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0)
syz_usb_control_io(r5, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000040)={0xa04, 0x4002, 0x0, 0x15, 0xa, 0x20000050, 0x0, 0x0, 0xffffffffffffffff})
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4)
r7 = dup2(r6, r6)
setsockopt$inet6_int(r7, 0x29, 0x4a, &(0x7f0000000580)=0x7ff, 0x4)
write$tun(r7, &(0x7f0000000040)=ANY=[], 0x46)
recvmmsg(r7, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x2000, 0x0)
r8 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_GET_CAP(r8, 0xc010640c, &(0x7f0000000300)={0x15})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005440)=[{{&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000240)="4e3feb45b0ee88c7ac657aad12aff40392b672435d4ad78fca15afe8", 0x1c}, {&(0x7f00000003c0)="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", 0xfe0}, {&(0x7f00000013c0)="dd1c6148058f9cd9c6be9b9f0e1f249fd5f338e809efc776a1a6295293120fd4d450a72409c3543be4f9d0d86928b73cf5d2ab02fe434aaead918d7432a95cb17045e757dcdb165ae9cd448d6a68f1f97f31b04316229f4f183d7b0a4422f10d38bcae17fdbf71439e8825d5a2acd1ac6c24078f07b4f1880f49db3e936956d18a5d79f1645458b5e087064d5b4b808aea1a6ff5d5e7c42a333ae65014957c6dd436489b86ab26d9d4", 0xa9}], 0x3, 0x0, 0x0, 0x8000}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001680)="9d88e44f3908eca7b1cd86b110df5d2c4657388fd3e64ce36037a6b74daffe1c6466c2693c466b2e2eb1c8e593c0d87e955cdb389ce1f362037fef", 0x3b}, {&(0x7f00000016c0)}, {0x0}, {&(0x7f0000001880)}, {&(0x7f0000001980)="ece629b1a1a7e657151c8a4f7ab45354c6c8056336c965105c43b54691be551c22a6", 0x22}], 0x5, &(0x7f0000002000)=ANY=[@ANYRES32=r1, @ANYBLOB="000084124287e6fe2bc400001c00000000000000e370667ae3b790ac1a9e0e61758cb23952ccde6e8170a6e535975baa9e1066b4d94c11c4b7d3c36c822eeac694ef2598e226889bc257778f3ff58564b82400f1ddb6951c68d92aa96c9b9eee0ca6b8d15fe360c59b8d1cc7327591602ffdb404d39cf8970d32ca328ae3e6e5979cfcdabce65b8dd9497e4583035afab506949a0cc613cccfb6492ec0f664944934f0ef002c72201e34511e3cfaa92a2e0f80c425d402cf0273f93ea142df5015acdd58c7fc629b548d3ade477b1272c0fafbb5b881543b0c4bb6cb4d4def1bafb24008d73f9c3e11c07415991f61643a3a40f37f26c39bc3a1c68f8f894f711a5ba4b52796c6a966e592a4ab0de0b56d5a768c556cad654aa4aa44a7d88789098cd637534bdd84163bf48e30854e588ad93b8a00bd8ae36b6c6d5c284746d3d41581242a63c845756915f83f3d9f39ee904e833d5a57973bcda6c38dcd568042292d317bacf55849c11ce789997b5d46", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r3, @ANYRES32=0x0], 0x58, 0x4}}, {{&(0x7f0000001c40)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001480), 0x0, 0x40004}}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f00000047c0)="19cbb4bc94f54ec7ed056051c3109de9dc57f38a61cdf7a29864b4744b88cdb2ad86a08ff6b425b12e7b65033850af61dbeb0bfb1480adcac2422e3dd9109ceb024b0f66d1993f196e82f524663cd89d987ea252e2500df5c748d3523c2bcb5d951e680e305b912865ec3ea97ff3e3e29e067fb9fea2cc4d6065c5822c0106291d7eec38df92f24cb8e38601e95f94a833cf", 0x92}], 0x1, &(0x7f0000001480)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [r4, 0xffffffffffffffff, r9, 0xffffffffffffffff, r7, 0xffffffffffffffff, r8, r8]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x30, 0x1, 0x1, [r0, r2, r4, r4, r8, 0xffffffffffffffff, r9, r2]}}], 0x100, 0xc45}}], 0x4, 0x4000040)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r10, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r10, 0x5)
setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0)

2.59749202s ago: executing program 4 (id=2909):
socket$packet(0x11, 0x2, 0x300)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000200002000100000008000500", @ANYRES32=r2], 0x54}}, 0x0)

2.444867297s ago: executing program 4 (id=2910):
r0 = fsopen(&(0x7f0000000040)='exfat\x00', 0x0)
fadvise64(r0, 0x5, 0xffffffffffffffff, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000)
timer_create(0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x4, &(0x7f00000000c0)=[{0xfff7, 0x9, 0xb, 0x6dc}, {0xd1ca, 0x9, 0x1, 0x5}, {0x1008, 0x8, 0x0, 0xfffffffe}, {0xae, 0x9, 0x5, 0x5}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x54}, {0x6, 0xfd, 0x0, 0x7ffffcb9}]})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
exit(0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
write$binfmt_aout(r2, 0x0, 0xffffffdb)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
r5 = accept4(r4, 0x0, 0x0, 0x80000)
accept4$vsock_stream(r5, &(0x7f0000001380)={0x28, 0x0, 0xa0ad095b0260f07e, @host}, 0x10, 0x800)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)

1.415696509s ago: executing program 0 (id=2911):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000052000100ffffff37b60700cdae153b0008000100bb4d7ef8"], 0x1c}}, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000)
syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040007"], 0x7)
ptrace$getregset(0x4205, 0x0, 0x2, 0x0)
ptrace$getregset(0x4204, 0x0, 0x2, 0x0)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x3)
ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000040)={{0x2, 0xb04c}, {0x77f, 0x1003ff}})

1.324596724s ago: executing program 4 (id=2912):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000700)="580000001400add427323b472545b45602117fffffff81000e220e2280007f000001e801000500000000013ac7100003ffffffffd3daffffffffffe7ee000000deff000000ddbd57cff2ffe293a2afebd998c88d5d6b3710", 0x58}], 0x1)

1.253085547s ago: executing program 3 (id=2913):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000040), 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x74d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xff, 0x1, 0x1, {0x22, 0xbb0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xba, 0x7}}}}}]}}]}}, 0x0)
mlock2(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
syz_open_dev$sg(0x0, 0x0, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280), 0x0)
sendmmsg$inet6(r5, 0x0, 0x0, 0x34000811)
unshare(0x3000000)
sendmsg(r0, &(0x7f0000002d00)={0x0, 0x0, 0x0}, 0x40844)
sendmsg$unix(r0, &(0x7f0000000640)={&(0x7f00000005c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001680)=[{0x0, 0xfffffd5b}], 0x1, 0x0, 0x0, 0x8001}, 0x0)

1.13339853s ago: executing program 4 (id=2914):
r0 = socket(0x80000000000000a, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0))
ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100))
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x1, @empty, 0xd8}, 0x1c)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1}, {[@rr={0x7, 0x13, 0x0, [@multicast2, @private, @broadcast, @dev={0xac, 0x14, 0x14, 0xc}]}]}}}}}}}, 0x0)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000640)=0x8000)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r7, &(0x7f0000000000)="d1", 0x1, 0x24004000, &(0x7f0000000100)={0xa, 0x4e24, 0x7f, @remote, 0x5}, 0x1c)
shutdown(r7, 0x1)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r7, 0x84, 0x82, &(0x7f0000000200), 0x8)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0)

0s ago: executing program 2 (id=2915):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
r2 = socket$inet6(0xa, 0x2, 0x0)
r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$6lowpan_control(r3, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000000)={0x3, 0x6, 0x2, 0x3}, 0x14)
r5 = landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x4}, 0x18, 0x0)
r6 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r6, 0x0)
landlock_restrict_self(r5, 0x0)
landlock_restrict_self(r5, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r9 = getpgrp(0x0)
fcntl$setownex(r8, 0xf, &(0x7f0000000100)={0x2, r9})
sendmsg$unix(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1, 0x0, 0x0, 0x804}, 0x240408c1)
r10 = socket$netlink(0x10, 0x3, 0x8000000004)
r11 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}})
writev(r10, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000700)="580000001400add427323b472545b45602117fffffff81000e220e2280007f000001e801000500000000003ac7100003ffffffffd3daffffffffffe7ee000000deff000000ddbd57cff2ffe293a2afebd998c88d5d6b3710", 0x58}], 0x1)
syz_open_dev$video(&(0x7f0000000040), 0x5, 0x0)
r12 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r13 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r12, &(0x7f0000000040))

kernel console output (not intermixed with test programs):

number 105
[  650.775234][   T10] usb 4-1: new high-speed USB device number 121 using dummy_hcd
[  651.338338][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  651.435223][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  651.473866][   T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  651.504142][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  651.564364][   T10] usb 4-1: config 0 descriptor??
[  651.607114][T14527] delete_channel: no stack
[  651.655309][ T6438] usb 1-1: new high-speed USB device number 106 using dummy_hcd
[  651.795257][ T6438] usb 1-1: device descriptor read/64, error -71
[  651.939194][   T10] usb 4-1: string descriptor 0 read error: -71
[  651.950931][   T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  651.987842][   T10] usb 4-1: USB disconnect, device number 121
[  652.035315][ T6438] usb 1-1: new high-speed USB device number 107 using dummy_hcd
[  652.115569][   T48] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[  652.215188][ T6438] usb 1-1: device descriptor read/64, error -71
[  652.275241][   T48] usb 5-1: Using ep0 maxpacket: 8
[  652.286794][   T48] usb 5-1: config 135 has an invalid interface number: 230 but max is 0
[  652.295234][   T48] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  652.314894][   T48] usb 5-1: config 135 has no interface number 0
[  652.329026][   T48] usb 5-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30
[  652.345614][ T6438] usb usb1-port1: attempt power cycle
[  652.398448][T14552] fuse: Invalid rootmode
[  652.405360][   T48] usb 5-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53
[  652.429770][   T48] usb 5-1: config 135 interface 230 has no altsetting 0
[  652.448696][   T48] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  652.457909][   T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  652.466255][   T48] usb 5-1: Product: syz
[  652.470406][   T48] usb 5-1: Manufacturer: syz
[  652.479847][   T48] usb 5-1: SerialNumber: syz
[  652.747918][ T6438] usb 1-1: new high-speed USB device number 108 using dummy_hcd
[  652.775362][T11547] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[  652.775868][ T6438] usb 1-1: device descriptor read/8, error -71
[  652.947286][T11547] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  653.025826][ T6438] usb 1-1: new high-speed USB device number 109 using dummy_hcd
[  653.039857][T11547] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  653.062234][T14574] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  653.066324][ T6438] usb 1-1: device descriptor read/8, error -71
[  653.207349][ T6438] usb usb1-port1: unable to enumerate USB device
[  653.209197][T11547] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  653.283662][T11547] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  653.293445][T11547] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  653.309214][T11547] usb 2-1: Product: syz
[  653.313424][T11547] usb 2-1: Manufacturer: syz
[  653.323894][T11547] usb 2-1: SerialNumber: syz
[  653.619407][T14577] xt_hashlimit: size too large, truncated to 1048576
[  653.990960][T11547] usb 2-1: cannot find UAC_HEADER
[  653.998307][T11547] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  654.002760][T14582] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2615'.
[  654.060669][T11547] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  654.068330][T11547] usb 2-1: MIDIStreaming interface descriptor not found
[  654.119285][T14582] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2615'.
[  654.129795][T11547] usb 2-1: USB disconnect, device number 119
[  654.163358][T14582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2615'.
[  654.184452][T14582] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2615'.
[  654.466709][ T6438] usb 5-1: USB disconnect, device number 97
[  654.741168][T14589] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2616'.
[  654.816700][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  654.841094][T14592] fuse: Invalid rootmode
[  655.089285][T14604] FAULT_INJECTION: forcing a failure.
[  655.089285][T14604] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  655.136726][T14604] CPU: 0 UID: 0 PID: 14604 Comm: syz.4.2621 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) 
[  655.136752][T14604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  655.136764][T14604] Call Trace:
[  655.136772][T14604]  <TASK>
[  655.136779][T14604]  dump_stack_lvl+0x241/0x360
[  655.136812][T14604]  ? __pfx_dump_stack_lvl+0x10/0x10
[  655.136836][T14604]  ? __pfx__printk+0x10/0x10
[  655.136870][T14604]  should_fail_ex+0x424/0x570
[  655.136894][T14604]  _copy_to_user+0x31/0xb0
[  655.136920][T14604]  simple_read_from_buffer+0xc4/0x170
[  655.136948][T14604]  proc_fail_nth_read+0x1ef/0x260
[  655.136970][T14604]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  655.136991][T14604]  ? rw_verify_area+0x246/0x630
[  655.137009][T14604]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  655.137027][T14604]  vfs_read+0x21f/0xb90
[  655.137049][T14604]  ? __pfx___mutex_lock+0x10/0x10
[  655.137071][T14604]  ? __pfx_vfs_read+0x10/0x10
[  655.137093][T14604]  ? __fget_files+0x2a/0x420
[  655.137111][T14604]  ? __fget_files+0x39d/0x420
[  655.137125][T14604]  ? __fget_files+0x2a/0x420
[  655.137150][T14604]  ksys_read+0x19d/0x2d0
[  655.137172][T14604]  ? __pfx_ksys_read+0x10/0x10
[  655.137197][T14604]  ? do_syscall_64+0xb6/0x230
[  655.137220][T14604]  do_syscall_64+0xf3/0x230
[  655.137241][T14604]  ? clear_bhb_loop+0x45/0xa0
[  655.137261][T14604]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  655.137278][T14604] RIP: 0033:0x7f106598bb7c
[  655.137309][T14604] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  655.137324][T14604] RSP: 002b:00007f106681b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  655.137345][T14604] RAX: ffffffffffffffda RBX: 00007f1065ba5fa0 RCX: 00007f106598bb7c
[  655.137358][T14604] RDX: 000000000000000f RSI: 00007f106681b0a0 RDI: 0000000000000003
[  655.137370][T14604] RBP: 00007f106681b090 R08: 0000000000000000 R09: 0000000000000000
[  655.137381][T14604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  655.137392][T14604] R13: 0000000000000000 R14: 00007f1065ba5fa0 R15: 00007f1065ccfa28
[  655.137422][T14604]  </TASK>
[  655.352460][    C0] vkms_vblank_simulate: vblank timer overrun
[  655.709809][T14612] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  656.046021][T14625] fuse: Unknown parameter 'root'
[  656.112528][T14625] kvm: pic: non byte write
[  656.703681][T14635] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  656.920402][ T6438] usb 2-1: new high-speed USB device number 120 using dummy_hcd
[  657.194204][ T6438] usb 2-1: Using ep0 maxpacket: 8
[  657.295353][ T6438] usb 2-1: config 135 has an invalid interface number: 230 but max is 0
[  657.303752][ T6438] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  657.328640][ T6438] usb 2-1: config 135 has no interface number 0
[  657.334911][ T6438] usb 2-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30
[  657.416860][ T6438] usb 2-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53
[  657.443584][T14646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2632'.
[  657.453657][T14646] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2632'.
[  657.464697][ T6438] usb 2-1: config 135 interface 230 has no altsetting 0
[  657.508154][ T6438] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  657.518714][ T6438] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  657.528952][ T6438] usb 2-1: Product: syz
[  657.725385][ T6438] usb 2-1: Manufacturer: syz
[  657.730134][ T6438] usb 2-1: SerialNumber: syz
[  657.905719][   T10] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[  658.129353][   T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  658.141387][   T10] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  658.180767][   T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  658.245454][   T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  658.281332][   T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  658.370886][   T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  658.380847][   T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  658.414796][   T10] usb 5-1: Product: syz
[  658.441453][   T10] usb 5-1: Manufacturer: syz
[  658.587866][   T10] cdc_wdm 5-1:1.0: skipping garbage
[  658.639203][   T10] cdc_wdm 5-1:1.0: skipping garbage
[  658.671436][   T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  658.677456][   T10] cdc_wdm 5-1:1.0: Unknown control protocol
[  658.786592][T14655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  658.797831][T14655] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  658.850801][T14672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2643'.
[  658.900827][T14672] xt_recent: Unsupported userspace flags (00000042)
[  659.255244][   T10] usb 4-1: new high-speed USB device number 122 using dummy_hcd
[  659.297579][T11547] usb 2-1: USB disconnect, device number 120
[  659.419433][ T5839] Bluetooth: hci2: unexpected event for opcode 0x0803
[  659.435781][   T10] usb 4-1: Using ep0 maxpacket: 8
[  659.473258][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  659.657017][   T10] usb 4-1: config 1 interface 0 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  659.703043][   T10] usb 4-1: config 1 interface 0 has no altsetting 0
[  659.717962][   T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40
[  659.738212][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  659.754388][   T10] usb 4-1: Product: syz
[  659.763797][   T10] usb 4-1: Manufacturer: syz
[  659.795326][   T10] usb 4-1: SerialNumber: syz
[  659.840373][   T10] usbhid 4-1:1.0: couldn't find an input interrupt endpoint
[  660.076759][   T10] usb 4-1: USB disconnect, device number 122
[  660.155686][T14693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2650'.
[  660.469039][   T10] usb 5-1: USB disconnect, device number 98
[  660.702761][T14699] IPv6: Can't replace route, no match found
[  660.990215][T14703] netlink: zone id is out of range
[  661.020586][T14703] netlink: zone id is out of range
[  661.045926][T14703] netlink: zone id is out of range
[  661.076942][T14703] netlink: del zone limit has 4 unknown bytes
[  661.105818][   T10] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[  661.145071][   T48] usb 4-1: new low-speed USB device number 123 using dummy_hcd
[  661.315234][   T48] usb 4-1: device descriptor read/64, error -71
[  661.435514][   T10] usb 5-1: Using ep0 maxpacket: 16
[  661.451044][   T10] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[  661.459733][   T10] usb 5-1: config 0 has no interface number 0
[  661.469888][   T10] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  661.523688][   T10] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  661.543764][T14712] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2654'.
[  661.556507][   T10] usb 5-1: config 0 interface 41 has no altsetting 0
[  661.563688][T14712] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2654'.
[  661.575950][   T10] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  661.585270][   T48] usb 4-1: new low-speed USB device number 124 using dummy_hcd
[  661.585326][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  661.623790][   T10] usb 5-1: Product: syz
[  661.631261][   T10] usb 5-1: Manufacturer: syz
[  661.641491][   T10] usb 5-1: SerialNumber: syz
[  661.665905][   T10] usb 5-1: config 0 descriptor??
[  661.676518][T14697] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  661.687608][T14712] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2654'.
[  661.705457][T14697] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  661.712871][T14712] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2654'.
[  661.739708][T14715] FAULT_INJECTION: forcing a failure.
[  661.739708][T14715] name failslab, interval 1, probability 0, space 0, times 0
[  661.755288][   T48] usb 4-1: device descriptor read/64, error -71
[  661.759470][T14715] CPU: 0 UID: 0 PID: 14715 Comm: syz.1.2657 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) 
[  661.759503][T14715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  661.759513][T14715] Call Trace:
[  661.759521][T14715]  <TASK>
[  661.759528][T14715]  dump_stack_lvl+0x241/0x360
[  661.759558][T14715]  ? __pfx_dump_stack_lvl+0x10/0x10
[  661.759581][T14715]  ? __pfx__printk+0x10/0x10
[  661.759607][T14715]  ? __pfx___might_resched+0x10/0x10
[  661.759632][T14715]  should_fail_ex+0x424/0x570
[  661.759655][T14715]  should_failslab+0xac/0x100
[  661.759679][T14715]  __kmalloc_noprof+0xdf/0x4d0
[  661.759700][T14715]  ? snd_pcm_hw_refine+0x978/0x1b80
[  661.759723][T14715]  snd_pcm_hw_refine+0x978/0x1b80
[  661.759739][T14715]  ? __kmalloc_cache_noprof+0x236/0x370
[  661.759759][T14715]  ? snd_pcm_hw_param_near+0xe7/0x790
[  661.759780][T14715]  ? snd_pcm_oss_change_params_locked+0x22d7/0x4150
[  661.759815][T14715]  ? __pfx_snd_pcm_hw_refine+0x10/0x10
[  661.759866][T14715]  ? __kasan_kmalloc+0x9d/0xb0
[  661.759884][T14715]  ? _snd_pcm_hw_param_min+0x597/0x880
[  661.759912][T14715]  snd_pcm_hw_param_near+0x162/0x790
[  661.759940][T14715]  ? __pfx_snd_pcm_hw_param_near+0x10/0x10
[  661.759962][T14715]  ? __asan_memset+0x23/0x50
[  661.759985][T14715]  snd_pcm_oss_change_params_locked+0x22d7/0x4150
[  661.760036][T14715]  ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10
[  661.760059][T14715]  ? snd_pcm_oss_make_ready+0xc2/0x350
[  661.760079][T14715]  ? __lock_acquire+0xad5/0xd80
[  661.760100][T14715]  ? do_raw_spin_lock+0x151/0x370
[  661.760127][T14715]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  661.760156][T14715]  snd_pcm_oss_make_ready+0x11d/0x350
[  661.760183][T14715]  snd_pcm_oss_set_trigger+0x93/0x720
[  661.760215][T14715]  snd_pcm_oss_poll+0x6e8/0x940
[  661.760241][T14715]  ? __pfx_snd_pcm_oss_poll+0x10/0x10
[  661.760267][T14715]  ? __pfx_snd_pcm_oss_poll+0x10/0x10
[  661.760290][T14715]  ep_insert+0x1147/0x1ac0
[  661.760326][T14715]  ? __pfx_ep_insert+0x10/0x10
[  661.760346][T14715]  ? __pfx___mutex_lock+0x10/0x10
[  661.760367][T14715]  ? __fget_files+0x2a/0x420
[  661.760384][T14715]  ? __pfx_ep_ptable_queue_proc+0x10/0x10
[  661.760406][T14715]  ? __fget_files+0x2a/0x420
[  661.760430][T14715]  do_epoll_ctl+0x8bc/0xf70
[  661.760460][T14715]  __x64_sys_epoll_ctl+0x163/0x1a0
[  661.760489][T14715]  ? __pfx___x64_sys_epoll_ctl+0x10/0x10
[  661.760517][T14715]  ? do_syscall_64+0xb6/0x230
[  661.760540][T14715]  do_syscall_64+0xf3/0x230
[  661.760559][T14715]  ? clear_bhb_loop+0x45/0xa0
[  661.760579][T14715]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  661.760595][T14715] RIP: 0033:0x7fdbf5b8d169
[  661.760611][T14715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  661.760626][T14715] RSP: 002b:00007fdbf6a8c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9
[  661.760645][T14715] RAX: ffffffffffffffda RBX: 00007fdbf5da5fa0 RCX: 00007fdbf5b8d169
[  661.760657][T14715] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004
[  661.760668][T14715] RBP: 00007fdbf6a8c090 R08: 0000000000000000 R09: 0000000000000000
[  661.760679][T14715] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002
[  661.760690][T14715] R13: 0000000000000000 R14: 00007fdbf5da5fa0 R15: 00007fdbf5ecfa28
[  661.760719][T14715]  </TASK>
[  661.969167][T14696] fuse: Unknown parameter 'grou00000000000000000000'
[  662.152578][T14696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  662.162776][T14696] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  662.241426][   T48] usb usb4-port1: attempt power cycle
[  662.395396][T14697] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  662.474409][T14680] syz.0.2647 (14680): drop_caches: 1
[  662.595258][   T48] usb 4-1: new low-speed USB device number 125 using dummy_hcd
[  662.646345][   T48] usb 4-1: device descriptor read/8, error -71
[  662.896130][   T48] usb 4-1: new low-speed USB device number 126 using dummy_hcd
[  662.916284][   T48] usb 4-1: device descriptor read/8, error -71
[  663.079203][   T48] usb usb4-port1: unable to enumerate USB device
[  663.110047][T14726] kvm: kvm [14725]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x809
[  663.138162][T14726] kvm_intel: kvm [14725]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x835
[  663.179908][T14726] kvm: kvm [14725]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x1aa
[  663.227536][T14726] kvm: kvm [14725]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x142
[  663.263259][T14726] kvm: kvm [14725]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xab3
[  663.298143][T14726] kvm_intel: kvm [14725]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xa9e
[  663.332144][T14726] kvm_intel: kvm [14725]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xa52
[  663.364427][T14726] kvm_intel: kvm [14725]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xaf7
[  663.402128][T14726] kvm_intel: kvm [14725]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xa9e
[  663.420854][T14726] kvm_intel: kvm [14725]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xa9e
[  663.433040][T14726] kvm_intel: kvm [14725]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xa52
[  663.451338][T14726] kvm_intel: kvm [14725]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xaf7
[  663.463377][ T5888] usb 2-1: new high-speed USB device number 121 using dummy_hcd
[  663.489953][T14726] kvm_intel: kvm [14725]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xa9e
[  663.503715][T14726] kvm_intel: kvm [14725]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xa9e
[  663.625787][ T5888] usb 2-1: Using ep0 maxpacket: 8
[  663.658141][ T5888] usb 2-1: config 135 has an invalid interface number: 230 but max is 0
[  663.747685][ T5888] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  663.849506][T14736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2662'.
[  663.858953][ T5888] usb 2-1: config 135 has no interface number 0
[  663.870835][T14736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2662'.
[  663.891282][ T5888] usb 2-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30
[  663.923660][ T5888] usb 2-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53
[  663.964486][ T5888] usb 2-1: config 135 interface 230 has no altsetting 0
[  663.985756][ T5888] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  664.008076][T14738] FAULT_INJECTION: forcing a failure.
[  664.008076][T14738] name failslab, interval 1, probability 0, space 0, times 0
[  664.064689][T14738] CPU: 1 UID: 0 PID: 14738 Comm: syz.0.2663 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) 
[  664.064707][T14738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  664.064714][T14738] Call Trace:
[  664.064719][T14738]  <TASK>
[  664.064723][T14738]  dump_stack_lvl+0x241/0x360
[  664.064748][T14738]  ? __pfx_dump_stack_lvl+0x10/0x10
[  664.064773][T14738]  ? __pfx__printk+0x10/0x10
[  664.064802][T14738]  ? __pfx___might_resched+0x10/0x10
[  664.064829][T14738]  should_fail_ex+0x424/0x570
[  664.064844][T14738]  should_failslab+0xac/0x100
[  664.064860][T14738]  __kmalloc_cache_noprof+0x73/0x370
[  664.064873][T14738]  ? netdevice_event+0x3f4/0x8e0
[  664.064886][T14738]  netdevice_event+0x3f4/0x8e0
[  664.064905][T14738]  ? __up_read+0x2c4/0x6b0
[  664.064926][T14738]  ? __pfx_netdevice_event+0x10/0x10
[  664.064943][T14738]  ? __pfx_del_netdev_ips+0x10/0x10
[  664.064958][T14738]  ? __pfx_pass_all_filter+0x10/0x10
[  664.064987][T14738]  notifier_call_chain+0x1a5/0x3f0
[  664.065003][T14738]  unregister_netdevice_many_notify+0x1572/0x2510
[  664.065028][T14738]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  664.065044][T14738]  ? call_rcu+0x7a4/0xad0
[  664.065064][T14738]  ? lockdep_hardirqs_on+0x9d/0x150
[  664.065119][T14738]  unregister_netdevice_queue+0x383/0x400
[  664.065141][T14738]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  664.065158][T14738]  ? kernfs_put+0x43e/0x460
[  664.065186][T14738]  _cfg80211_unregister_wdev+0x163/0x590
[  664.065217][T14738]  ieee80211_if_remove+0x25d/0x320
[  664.065241][T14738]  ieee80211_del_iface+0x19/0x30
[  664.065266][T14738]  cfg80211_remove_virtual_intf+0x23f/0x410
[  664.065291][T14738]  genl_rcv_msg+0xb38/0xf00
[  664.065319][T14738]  ? __pfx_genl_rcv_msg+0x10/0x10
[  664.065335][T14738]  ? stack_trace_save+0x11a/0x1d0
[  664.065362][T14738]  ? __pfx_stack_trace_save+0x10/0x10
[  664.065379][T14738]  ? stack_depot_save_flags+0x44/0x940
[  664.065389][T14738]  ? stack_trace_snprint+0x71/0xf0
[  664.065409][T14738]  ? __lock_acquire+0xad5/0xd80
[  664.065421][T14738]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  664.065441][T14738]  ? __pfx_nl80211_del_interface+0x10/0x10
[  664.065462][T14738]  ? __pfx_nl80211_post_doit+0x10/0x10
[  664.065494][T14738]  netlink_rcv_skb+0x208/0x480
[  664.065517][T14738]  ? __pfx_genl_rcv_msg+0x10/0x10
[  664.065528][T14738]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  664.065553][T14738]  ? netlink_deliver_tap+0x2e/0x1b0
[  664.065570][T14738]  genl_rcv+0x28/0x40
[  664.065581][T14738]  netlink_unicast+0x7f8/0x9a0
[  664.065612][T14738]  ? __pfx_netlink_unicast+0x10/0x10
[  664.065635][T14738]  ? skb_put+0x114/0x1f0
[  664.065657][T14738]  netlink_sendmsg+0x8c3/0xcd0
[  664.065680][T14738]  ? __pfx_netlink_sendmsg+0x10/0x10
[  664.065696][T14738]  ? aa_sock_msg_perm+0x91/0x160
[  664.065713][T14738]  ? __pfx_netlink_sendmsg+0x10/0x10
[  664.065727][T14738]  __sock_sendmsg+0x221/0x270
[  664.065753][T14738]  ____sys_sendmsg+0x523/0x860
[  664.065782][T14738]  ? __pfx_____sys_sendmsg+0x10/0x10
[  664.065797][T14738]  ? __fget_files+0x2a/0x420
[  664.065813][T14738]  ? __fget_files+0x2a/0x420
[  664.065831][T14738]  __sys_sendmsg+0x271/0x360
[  664.065854][T14738]  ? __pfx___sys_sendmsg+0x10/0x10
[  664.065922][T14738]  ? do_syscall_64+0xb6/0x230
[  664.065946][T14738]  do_syscall_64+0xf3/0x230
[  664.065966][T14738]  ? clear_bhb_loop+0x45/0xa0
[  664.065986][T14738]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  664.065997][T14738] RIP: 0033:0x7f3bd898d169
[  664.066008][T14738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  664.066020][T14738] RSP: 002b:00007f3bd9795038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  664.066040][T14738] RAX: ffffffffffffffda RBX: 00007f3bd8ba5fa0 RCX: 00007f3bd898d169
[  664.066053][T14738] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006
[  664.066064][T14738] RBP: 00007f3bd9795090 R08: 0000000000000000 R09: 0000000000000000
[  664.066076][T14738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  664.066087][T14738] R13: 0000000000000000 R14: 00007f3bd8ba5fa0 R15: 00007f3bd8ccfa28
[  664.066109][T14738]  </TASK>
[  664.563817][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  664.599444][ T5888] usb 2-1: Product: syz
[  664.610151][ T5888] usb 2-1: Manufacturer: syz
[  664.630945][ T5888] usb 2-1: SerialNumber: syz
[  664.739349][   T10] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71
[  664.820288][T14745] fuse: Bad value for 'user_id'
[  664.834376][   T10] usb 5-1: USB disconnect, device number 99
[  664.861802][T14745] fuse: Bad value for 'user_id'
[  664.981820][T14751] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  665.643067][   T48] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0
[  665.743254][   T48] hid-generic 0000:0000:0000.001C: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  665.821121][T14765] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2670'.
[  666.048353][   T10] usb 1-1: new high-speed USB device number 110 using dummy_hcd
[  666.048857][   T48] usb 2-1: USB disconnect, device number 121
[  666.227367][   T10] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  666.250459][   T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  666.292601][   T10] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  666.309695][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  666.325550][   T10] usb 1-1: SerialNumber: syz
[  666.657670][T14774] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2671'.
[  666.667373][T14774] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2671'.
[  666.683357][T14774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2671'.
[  666.692640][T14774] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2671'.
[  667.615290][T14785] vlan2: entered allmulticast mode
[  668.615272][T14800] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2681'.
[  668.700976][   T10] usb 1-1: invalid UAC_HEADER (v1)
[  668.761940][   T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  668.774278][T14804] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2682'.
[  668.791583][   T10] usb 1-1: USB disconnect, device number 110
[  668.997013][ T5928] udevd[5928]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  669.871485][T14827] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2688'.
[  669.916752][T14827] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2688'.
[  669.995123][T14827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2688'.
[  670.027426][T14827] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2688'.
[  670.082009][T14832] fuse: Unknown parameter '0x0000000000000004�00000000000000000000'
[  670.357131][   T48] usb 4-1: new high-speed USB device number 127 using dummy_hcd
[  670.517173][   T48] usb 4-1: Using ep0 maxpacket: 16
[  670.537129][   T48] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  670.562405][   T48] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  670.600631][   T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  670.646283][   T48] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  670.661583][   T48] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  670.676378][   T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  670.700978][   T48] usb 4-1: Product: syz
[  670.718969][   T48] usb 4-1: Manufacturer: syz
[  670.734692][   T48] usb 4-1: SerialNumber: syz
[  670.751102][   T48] usb 4-1: config 0 descriptor??
[  670.771876][   T48] appledisplay 4-1:0.0: Submitting URB failed
[  670.788102][   T48] appledisplay 4-1:0.0: probe with driver appledisplay failed with error -5
[  670.983418][T14836] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2691'.
[  670.987928][T14841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2693'.
[  671.010198][   T48] usb 4-1: USB disconnect, device number 127
[  671.382742][T14859] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2697'.
[  671.440193][T11547] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[  671.615262][   T48] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[  671.636233][T11547] usb 2-1: Using ep0 maxpacket: 32
[  671.652219][T11547] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  671.663823][T14861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2698'.
[  671.750694][T11547] usb 2-1: config 0 has no interfaces?
[  671.765191][   T48] usb 5-1: Using ep0 maxpacket: 8
[  671.775466][   T48] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  671.787952][   T48] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  671.799454][   T48] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  671.809769][   T48] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  671.823112][   T48] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  671.825992][T11547] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  671.897854][   T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  671.910417][T11547] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  671.958723][T11547] usb 2-1: config 0 descriptor??
[  672.159292][   T48] usb 5-1: usb_control_msg returned -32
[  672.246463][   T48] usbtmc 5-1:16.0: can't read capabilities
[  672.305987][ T5888] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  672.369538][   T48] usb 2-1: USB disconnect, device number 122
[  672.635779][ T5888] usb 4-1: config 0 has no interfaces?
[  672.648875][ T5888] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  672.658199][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  672.666598][ T5888] usb 4-1: Product: syz
[  672.687134][ T5888] usb 4-1: Manufacturer: syz
[  672.704638][ T5888] usb 4-1: SerialNumber: syz
[  672.744266][ T5888] usb 4-1: config 0 descriptor??
[  673.032394][T14867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2699'.
[  673.181443][T14876] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2702'.
[  674.065574][T14885] FAULT_INJECTION: forcing a failure.
[  674.065574][T14885] name failslab, interval 1, probability 0, space 0, times 0
[  674.124716][T14885] CPU: 1 UID: 0 PID: 14885 Comm: syz.2.2705 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) 
[  674.124742][T14885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  674.124753][T14885] Call Trace:
[  674.124761][T14885]  <TASK>
[  674.124769][T14885]  dump_stack_lvl+0x241/0x360
[  674.124800][T14885]  ? __pfx_dump_stack_lvl+0x10/0x10
[  674.124824][T14885]  ? __pfx__printk+0x10/0x10
[  674.124851][T14885]  ? __pfx___might_resched+0x10/0x10
[  674.124877][T14885]  should_fail_ex+0x424/0x570
[  674.124900][T14885]  should_failslab+0xac/0x100
[  674.124925][T14885]  kmem_cache_alloc_noprof+0x78/0x390
[  674.124947][T14885]  ? __kernfs_new_node+0xdf/0x890
[  674.124971][T14885]  __kernfs_new_node+0xdf/0x890
[  674.124990][T14885]  ? __lock_acquire+0xad5/0xd80
[  674.125013][T14885]  ? __pfx___kernfs_new_node+0x10/0x10
[  674.125042][T14885]  ? kernfs_root+0x1c/0x230
[  674.125061][T14885]  ? kernfs_root+0x1c/0x230
[  674.125081][T14885]  kernfs_new_node+0x114/0x220
[  674.125106][T14885]  __kernfs_create_file+0x49/0x2e0
[  674.125131][T14885]  sysfs_add_file_mode_ns+0x24a/0x310
[  674.125162][T14885]  internal_create_group+0x7ea/0x1320
[  674.125181][T14885]  ? kernfs_add_one+0xf8/0x530
[  674.125212][T14885]  ? __pfx_internal_create_group+0x10/0x10
[  674.125243][T14885]  sysfs_create_groups+0x56/0x120
[  674.125263][T14885]  device_add_attrs+0xef/0x670
[  674.125288][T14885]  ? __pfx_device_add_attrs+0x10/0x10
[  674.125318][T14885]  device_add+0x576/0xbf0
[  674.125339][T14885]  ? device_initialize+0x266/0x460
[  674.125361][T14885]  netdev_register_kobject+0x157/0x2f0
[  674.125393][T14885]  register_netdevice+0x12b0/0x1b80
[  674.125427][T14885]  ? __pfx_register_netdevice+0x10/0x10
[  674.125450][T14885]  ? __pfx_ip_tunnel_find+0x10/0x10
[  674.125471][T14885]  ? ip_tunnel_newlink+0x246/0x920
[  674.125493][T14885]  ip_tunnel_newlink+0x26f/0x920
[  674.125517][T14885]  ? __pfx_ip_tunnel_newlink+0x10/0x10
[  674.125536][T14885]  ? __asan_memset+0x23/0x50
[  674.125553][T14885]  ? ipgre_netlink_parms+0x667/0x9a0
[  674.125582][T14885]  ipgre_newlink+0x45b/0x600
[  674.125604][T14885]  ? rcu_is_watching+0x15/0xb0
[  674.125629][T14885]  ? __pfx_ipgre_newlink+0x10/0x10
[  674.125652][T14885]  ? __pfx_validate_linkmsg+0x10/0x10
[  674.125682][T14885]  ? rtnl_create_link+0x95b/0xc90
[  674.125704][T14885]  ? __pfx_ipgre_newlink+0x10/0x10
[  674.125729][T14885]  rtnl_newlink_create+0x39b/0xcb0
[  674.125755][T14885]  ? __mutex_lock+0x380/0x10c0
[  674.125779][T14885]  ? __pfx_aa_get_newest_label+0x10/0x10
[  674.125806][T14885]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  674.125835][T14885]  ? __pfx___mutex_lock+0x10/0x10
[  674.125865][T14885]  ? ns_capable+0x8a/0xf0
[  674.125886][T14885]  rtnl_newlink+0x18b0/0x1fe0
[  674.125927][T14885]  ? __pfx_rtnl_newlink+0x10/0x10
[  674.125945][T14885]  ? unwind_get_return_address+0x4d/0x90
[  674.125967][T14885]  ? arch_stack_walk+0xff/0x150
[  674.125994][T14885]  ? __lock_acquire+0xad5/0xd80
[  674.126019][T14885]  ? __lock_acquire+0xad5/0xd80
[  674.126041][T14885]  ? __lock_acquire+0xad5/0xd80
[  674.126077][T14885]  ? is_bpf_text_address+0x26/0x2a0
[  674.126102][T14885]  ? is_bpf_text_address+0x288/0x2a0
[  674.126120][T14885]  ? is_bpf_text_address+0x26/0x2a0
[  674.126140][T14885]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  674.126164][T14885]  ? kernel_text_address+0xa7/0xe0
[  674.126182][T14885]  ? __kernel_text_address+0xd/0x40
[  674.126204][T14885]  ? aa_get_newest_label+0x101/0x6f0
[  674.126232][T14885]  ? __lock_acquire+0xad5/0xd80
[  674.126269][T14885]  ? __pfx_rtnl_newlink+0x10/0x10
[  674.126294][T14885]  rtnetlink_rcv_msg+0x80f/0xd70
[  674.126315][T14885]  ? rtnetlink_rcv_msg+0x1ba/0xd70
[  674.126343][T14885]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  674.126369][T14885]  ? __lock_acquire+0xad5/0xd80
[  674.126404][T14885]  netlink_rcv_skb+0x208/0x480
[  674.126428][T14885]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  674.126453][T14885]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  674.126494][T14885]  ? netlink_deliver_tap+0x2e/0x1b0
[  674.126520][T14885]  ? netlink_deliver_tap+0x2e/0x1b0
[  674.126544][T14885]  netlink_unicast+0x7f8/0x9a0
[  674.126572][T14885]  ? __pfx_netlink_unicast+0x10/0x10
[  674.126595][T14885]  ? skb_put+0x114/0x1f0
[  674.126614][T14885]  netlink_sendmsg+0x8c3/0xcd0
[  674.126650][T14885]  ? __pfx_netlink_sendmsg+0x10/0x10
[  674.126678][T14885]  ? aa_sock_msg_perm+0x91/0x160
[  674.126706][T14885]  ? __pfx_netlink_sendmsg+0x10/0x10
[  674.126725][T14885]  __sock_sendmsg+0x221/0x270
[  674.126749][T14885]  ____sys_sendmsg+0x523/0x860
[  674.126777][T14885]  ? __pfx_____sys_sendmsg+0x10/0x10
[  674.126793][T14885]  ? __fget_files+0x2a/0x420
[  674.126814][T14885]  ? __fget_files+0x2a/0x420
[  674.126839][T14885]  __sys_sendmsg+0x271/0x360
[  674.126864][T14885]  ? __pfx___sys_sendmsg+0x10/0x10
[  674.126939][T14885]  ? do_syscall_64+0xb6/0x230
[  674.126962][T14885]  do_syscall_64+0xf3/0x230
[  674.126981][T14885]  ? clear_bhb_loop+0x45/0xa0
[  674.127002][T14885]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  674.127018][T14885] RIP: 0033:0x7f2fb558d169
[  674.127034][T14885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  674.127049][T14885] RSP: 002b:00007f2fb63be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  674.127068][T14885] RAX: ffffffffffffffda RBX: 00007f2fb57a5fa0 RCX: 00007f2fb558d169
[  674.127082][T14885] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  674.127093][T14885] RBP: 00007f2fb63be090 R08: 0000000000000000 R09: 0000000000000000
[  674.127104][T14885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  674.127115][T14885] R13: 0000000000000000 R14: 00007f2fb57a5fa0 R15: 00007f2fb58cfa28
[  674.127145][T14885]  </TASK>
[  674.728103][T14887] fuse: Unknown parameter 'user_i00000000000000000000'
[  675.311684][   T48] usb 5-1: USB disconnect, device number 100
[  675.339594][T14893] __nla_validate_parse: 3 callbacks suppressed
[  675.339612][T14893] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2708'.
[  675.727127][ T6438] usb 4-1: USB disconnect, device number 2
[  675.959107][T14908] fuse: Unknown parameter '[d'
[  676.005218][   T48] usb 5-1: new high-speed USB device number 101 using dummy_hcd
[  676.341064][   T48] usb 5-1: config 0 has no interfaces?
[  676.370709][   T48] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  676.379879][   T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  676.395577][ T5888] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  676.435580][   T48] usb 5-1: Product: syz
[  676.446022][   T48] usb 5-1: Manufacturer: syz
[  676.450688][   T48] usb 5-1: SerialNumber: syz
[  676.470836][T14917] netlink: 'syz.2.2715': attribute type 10 has an invalid length.
[  676.513368][   T48] usb 5-1: config 0 descriptor??
[  676.534057][T14917] hsr0: left allmulticast mode
[  676.575186][T14917] hsr_slave_0: left allmulticast mode
[  676.584985][T14917] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  676.730619][T14917] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  676.745464][ T5888] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  676.754116][ T5888] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config
[  676.794902][ T5888] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  676.815582][T14917] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  676.843148][ T5888] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7
[  676.904478][ T5888] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024
[  677.281453][ T5888] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  677.294912][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  677.323098][ T5888] usb 4-1: Product: syz
[  677.327695][ T5888] usb 4-1: Manufacturer: syz
[  677.349850][ T5888] cdc_wdm 4-1:1.0: skipping garbage
[  677.361855][ T5888] cdc_wdm 4-1:1.0: skipping garbage
[  677.372152][ T5888] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[  677.460249][T14924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2716'.
[  678.031971][T14930] fuse: Unknown parameter 'user_i00000000000000000000'
[  678.425924][T14933] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2720'.
[  678.809681][   T48] usb 5-1: USB disconnect, device number 101
[  679.098454][ T6438] usb 4-1: USB disconnect, device number 3
[  679.678578][T14957] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2728'.
[  679.973027][T14964] fuse: Unknown parameter 'user_i00000000000000000000'
[  680.085533][ T6438] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  680.505977][ T6438] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  680.514933][ T6438] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config
[  680.525696][ T6438] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  680.534716][ T6438] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7
[  680.545962][ T6438] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024
[  680.573232][ T6438] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  680.606957][ T6438] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  680.636423][ T6438] usb 4-1: Product: syz
[  680.644799][ T6438] usb 4-1: Manufacturer: syz
[  680.727243][ T6438] cdc_wdm 4-1:1.0: skipping garbage
[  680.732894][ T6438] cdc_wdm 4-1:1.0: skipping garbage
[  680.742103][ T6438] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[  682.005327][ T6438] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[  682.128334][T14972] loop8: detected capacity change from 0 to 7
[  682.135028][T14972] Dev loop8: unable to read RDB block 7
[  682.147271][ T6438] usb 2-1: device descriptor read/64, error -71
[  682.207306][T14972]  loop8: unable to read partition table
[  682.223479][T14972] loop8: partition table beyond EOD, truncated
[  682.230028][T14972] loop_reread_partitions: partition scan of loop8 (�被x) failed (rc=-5)
[  682.257423][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  682.257441][   T30] audit: type=1326 audit(1744120900.443:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.0.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd898d169 code=0x7ffc0000
[  682.399695][   T30] audit: type=1326 audit(1744120900.443:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.0.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd898d169 code=0x7ffc0000
[  682.427615][ T6438] usb 2-1: new high-speed USB device number 124 using dummy_hcd
[  682.585252][ T6438] usb 2-1: device descriptor read/64, error -71
[  682.703321][ T6438] usb usb2-port1: attempt power cycle
[  682.823818][   T48] usb 4-1: USB disconnect, device number 4
[  682.893165][   T30] audit: type=1326 audit(1744120900.473:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.0.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3bd898d169 code=0x7ffc0000
[  682.975478][   T30] audit: type=1326 audit(1744120900.473:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.0.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd898d169 code=0x7ffc0000
[  683.015531][   T30] audit: type=1326 audit(1744120900.483:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.0.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f3bd898d169 code=0x7ffc0000
[  683.055467][ T6438] usb 2-1: new high-speed USB device number 125 using dummy_hcd
[  683.122351][ T6438] usb 2-1: device descriptor read/8, error -71
[  683.132813][   T30] audit: type=1326 audit(1744120900.503:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.0.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3bd8929359 code=0x7ffc0000
[  683.383853][ T6438] usb 2-1: new high-speed USB device number 126 using dummy_hcd
[  683.415271][   T48] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  683.427175][   T30] audit: type=1326 audit(1744120900.503:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.0.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3bd8929359 code=0x7ffc0000
[  683.485153][   T30] audit: type=1326 audit(1744120900.503:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.0.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3bd8929359 code=0x7ffc0000
[  683.535732][ T6438] usb 2-1: device descriptor read/8, error -71
[  683.542427][   T30] audit: type=1326 audit(1744120900.503:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.0.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3bd8929359 code=0x7ffc0000
[  683.565947][   T30] audit: type=1326 audit(1744120900.503:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14982 comm="syz.0.2736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3bd8929359 code=0x7ffc0000
[  683.588573][   T48] usb 4-1: Using ep0 maxpacket: 32
[  683.596536][   T48] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  683.609066][   T48] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  683.621020][   T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  683.630410][   T48] usb 4-1: Product: syz
[  683.634800][   T48] usb 4-1: Manufacturer: syz
[  683.644320][   T48] usb 4-1: SerialNumber: syz
[  683.649346][ T6438] usb usb2-port1: unable to enumerate USB device
[  683.666887][   T48] usb 4-1: config 0 descriptor??
[  683.697339][   T48] usb 4-1: bad CDC descriptors
[  683.706539][   T48] usb 4-1: unsupported MDLM descriptors
[  683.900153][T14991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  683.911659][T14991] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  684.085284][ T6438] usb 5-1: new full-speed USB device number 102 using dummy_hcd
[  684.175065][   T48] usb 4-1: USB disconnect, device number 5
[  684.248552][ T6438] usb 5-1: config 0 has an invalid interface number: 235 but max is 0
[  684.257066][ T6438] usb 5-1: config 0 has no interface number 0
[  684.263144][ T6438] usb 5-1: config 0 interface 235 has no altsetting 0
[  684.282001][ T6438] usb 5-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18
[  684.293898][ T6438] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  684.322926][ T6438] usb 5-1: Product: syz
[  684.327892][ T6438] usb 5-1: Manufacturer: syz
[  684.332743][ T6438] usb 5-1: SerialNumber: syz
[  684.341661][ T6438] usb 5-1: config 0 descriptor??
[  684.352796][ T6438] keyspan 5-1:0.235: Keyspan 1 port adapter converter detected
[  684.363206][ T6438] keyspan 5-1:0.235: found no endpoint descriptor for endpoint 87
[  684.371613][ T6438] keyspan 5-1:0.235: found no endpoint descriptor for endpoint 7
[  684.383287][ T6438] keyspan 5-1:0.235: found no endpoint descriptor for endpoint 81
[  684.391786][ T6438] keyspan 5-1:0.235: found no endpoint descriptor for endpoint 1
[  684.409348][ T6438] keyspan 5-1:0.235: found no endpoint descriptor for endpoint 85
[  684.425477][ T6438] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  684.557234][ T6438] usb 5-1: USB disconnect, device number 102
[  684.594426][ T6438] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  684.622855][ T6438] keyspan 5-1:0.235: device disconnected
[  685.089060][T15006] FAULT_INJECTION: forcing a failure.
[  685.089060][T15006] name failslab, interval 1, probability 0, space 0, times 0
[  685.111845][T15006] CPU: 1 UID: 0 PID: 15006 Comm: syz.4.2745 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) 
[  685.111862][T15006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  685.111868][T15006] Call Trace:
[  685.111873][T15006]  <TASK>
[  685.111877][T15006]  dump_stack_lvl+0x241/0x360
[  685.111901][T15006]  ? __pfx_dump_stack_lvl+0x10/0x10
[  685.111915][T15006]  ? __pfx__printk+0x10/0x10
[  685.111932][T15006]  ? __pfx___might_resched+0x10/0x10
[  685.111947][T15006]  should_fail_ex+0x424/0x570
[  685.111961][T15006]  should_failslab+0xac/0x100
[  685.111976][T15006]  kmem_cache_alloc_lru_noprof+0x7d/0x390
[  685.111990][T15006]  ? sock_alloc_inode+0x28/0xc0
[  685.112006][T15006]  sock_alloc_inode+0x28/0xc0
[  685.112018][T15006]  ? __pfx_sock_alloc_inode+0x10/0x10
[  685.112029][T15006]  alloc_inode+0x69/0x1b0
[  685.112045][T15006]  __sock_create+0x127/0xa30
[  685.112063][T15006]  udp_sock_create4+0xdc/0x680
[  685.112075][T15006]  ? kasan_save_track+0x3f/0x80
[  685.112085][T15006]  ? __kasan_kmalloc+0x9d/0xb0
[  685.112097][T15006]  ? gtp_newlink+0x285/0xf80
[  685.112116][T15006]  ? rtnl_newlink_create+0x39b/0xcb0
[  685.112141][T15006]  ? __pfx_udp_sock_create4+0x10/0x10
[  685.112157][T15006]  ? netlink_sendmsg+0x8c3/0xcd0
[  685.112178][T15006]  ? ____sys_sendmsg+0x523/0x860
[  685.112193][T15006]  ? __sys_sendmsg+0x271/0x360
[  685.112202][T15006]  ? do_syscall_64+0xf3/0x230
[  685.112220][T15006]  gtp_create_sock+0x3ad/0x6c0
[  685.112238][T15006]  ? __pfx_gtp_create_sock+0x10/0x10
[  685.112263][T15006]  ? rcu_is_watching+0x15/0xb0
[  685.112276][T15006]  ? trace_kmalloc+0x1f/0xd0
[  685.112288][T15006]  ? __kmalloc_noprof+0x2ae/0x4d0
[  685.112300][T15006]  ? gtp_newlink+0x285/0xf80
[  685.112315][T15006]  gtp_newlink+0x651/0xf80
[  685.112330][T15006]  ? __pfx_gtp_newlink+0x10/0x10
[  685.112344][T15006]  rtnl_newlink_create+0x39b/0xcb0
[  685.112359][T15006]  ? __mutex_lock+0x380/0x10c0
[  685.112372][T15006]  ? __pfx_aa_get_newest_label+0x10/0x10
[  685.112388][T15006]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  685.112404][T15006]  ? __pfx___mutex_lock+0x10/0x10
[  685.112421][T15006]  ? ns_capable+0x8a/0xf0
[  685.112434][T15006]  rtnl_newlink+0x18b0/0x1fe0
[  685.112457][T15006]  ? __pfx_rtnl_newlink+0x10/0x10
[  685.112478][T15006]  ? preempt_schedule_irq+0xfe/0x1c0
[  685.112492][T15006]  ? __pfx___schedule+0x10/0x10
[  685.112508][T15006]  ? rcu_is_watching+0x15/0xb0
[  685.112523][T15006]  ? rcu_is_watching+0x15/0xb0
[  685.112535][T15006]  ? trace_irq_disable+0x3b/0x120
[  685.112544][T15006]  ? preempt_schedule_irq+0x145/0x1c0
[  685.112555][T15006]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  685.112575][T15006]  ? aa_get_newest_label+0x101/0x6f0
[  685.112591][T15006]  ? __lock_acquire+0xad5/0xd80
[  685.112613][T15006]  ? __pfx_rtnl_newlink+0x10/0x10
[  685.112627][T15006]  rtnetlink_rcv_msg+0x80f/0xd70
[  685.112639][T15006]  ? rtnetlink_rcv_msg+0x1ba/0xd70
[  685.112654][T15006]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  685.112676][T15006]  netlink_rcv_skb+0x208/0x480
[  685.112690][T15006]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  685.112704][T15006]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  685.112726][T15006]  ? netlink_deliver_tap+0x2e/0x1b0
[  685.112740][T15006]  ? netlink_deliver_tap+0x2e/0x1b0
[  685.112761][T15006]  netlink_unicast+0x7f8/0x9a0
[  685.112777][T15006]  ? __pfx_netlink_unicast+0x10/0x10
[  685.112789][T15006]  ? netlink_sendmsg+0x460/0xcd0
[  685.112802][T15006]  ? skb_put+0x114/0x1f0
[  685.112814][T15006]  netlink_sendmsg+0x8c3/0xcd0
[  685.112837][T15006]  ? __pfx_netlink_sendmsg+0x10/0x10
[  685.112863][T15006]  ? aa_sock_msg_perm+0x91/0x160
[  685.112890][T15006]  ? __pfx_netlink_sendmsg+0x10/0x10
[  685.112910][T15006]  __sock_sendmsg+0x221/0x270
[  685.112926][T15006]  ____sys_sendmsg+0x523/0x860
[  685.112942][T15006]  ? __pfx_____sys_sendmsg+0x10/0x10
[  685.112951][T15006]  ? __fget_files+0x2a/0x420
[  685.112962][T15006]  ? __fget_files+0x2a/0x420
[  685.112976][T15006]  __sys_sendmsg+0x271/0x360
[  685.112989][T15006]  ? __pfx___sys_sendmsg+0x10/0x10
[  685.113028][T15006]  ? do_syscall_64+0xb6/0x230
[  685.113041][T15006]  do_syscall_64+0xf3/0x230
[  685.113053][T15006]  ? clear_bhb_loop+0x45/0xa0
[  685.113065][T15006]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  685.113074][T15006] RIP: 0033:0x7f106598d169
[  685.113084][T15006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  685.113093][T15006] RSP: 002b:00007f106681b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  685.113105][T15006] RAX: ffffffffffffffda RBX: 00007f1065ba5fa0 RCX: 00007f106598d169
[  685.113112][T15006] RDX: 0000000000008000 RSI: 0000200000000040 RDI: 0000000000000003
[  685.113119][T15006] RBP: 00007f106681b090 R08: 0000000000000000 R09: 0000000000000000
[  685.113125][T15006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  685.113131][T15006] R13: 0000000000000000 R14: 00007f1065ba5fa0 R15: 00007f1065ccfa28
[  685.113147][T15006]  </TASK>
[  685.114825][T15006] socket: no more sockets
[  685.495261][ T5888] usb 2-1: new high-speed USB device number 127 using dummy_hcd
[  685.683838][T15010] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  685.755718][ T5888] usb 2-1: Using ep0 maxpacket: 8
[  685.770238][ T5888] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  685.785383][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  685.793433][ T5888] usb 2-1: Product: syz
[  685.815724][ T5888] usb 2-1: Manufacturer: syz
[  685.829378][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  685.834511][ T5888] usb 2-1: SerialNumber: syz
[  685.839073][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  685.847795][ T5888] usb 2-1: config 0 descriptor??
[  685.873786][ T5888] gspca_main: sq905-2.14.0 probing 2770:9120
[  686.076406][T15002] fuse: Bad value for 'rootmode'
[  686.117907][T15002] =======================================================
[  686.117907][T15002] WARNING: The mand mount option has been deprecated and
[  686.117907][T15002]          and is ignored by this kernel. Remove the mand
[  686.117907][T15002]          option from the mount to silence this warning.
[  686.117907][T15002] =======================================================
[  686.298029][T11547] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  686.509685][T11547] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  686.585389][T11547] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config
[  686.726699][ T5888] gspca_sq905: sq905_command: usb_control_msg failed (-71)
[  686.734018][ T5888] sq905 2-1:0.0: probe with driver sq905 failed with error -71
[  686.772252][T11547] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66
[  686.813655][T11547] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7
[  686.837641][ T5888] usb 2-1: USB disconnect, device number 127
[  686.869655][T11547] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024
[  686.913579][T11547] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  686.939207][T11547] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  686.980038][T11547] usb 4-1: Product: syz
[  687.000540][T11547] usb 4-1: Manufacturer: syz
[  687.025709][T11547] cdc_wdm 4-1:1.0: skipping garbage
[  687.030941][T11547] cdc_wdm 4-1:1.0: skipping garbage
[  687.047735][T11547] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22
[  687.650109][ T6438] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  687.805319][ T6438] usb 2-1: Using ep0 maxpacket: 8
[  687.875451][ T6438] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  687.949953][ T6438] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  687.999507][ T6438] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  688.112218][ T6438] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  688.217562][ T6438] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  688.264516][ T6438] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  688.595369][ T6438] usb 2-1: usb_control_msg returned -32
[  688.603222][ T6438] usbtmc 2-1:16.0: can't read capabilities
[  689.020548][T11547] usb 4-1: USB disconnect, device number 6
[  689.353735][T15050] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2760'.
[  689.935410][T11547] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  689.994852][T15060] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  690.145294][T11547] usb 4-1: Using ep0 maxpacket: 8
[  690.187307][T11547] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  690.224758][T11547] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  690.260115][T11547] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  690.301970][T11547] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  690.344548][T11547] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  690.391683][T11547] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  690.401694][T11547] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  690.413161][ T5888] usb 2-1: USB disconnect, device number 2
[  690.660148][T11547] usb 4-1: GET_CAPABILITIES returned 0
[  690.666138][T11547] usbtmc 4-1:16.0: can't read capabilities
[  690.683829][T15068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2764'.
[  690.717375][T15068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2764'.
[  690.879961][T15075] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2768'.
[  690.923743][T15081] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.2767'.
[  690.960155][T15081] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  691.025429][T11547] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  691.122455][ T5888] usb 4-1: USB disconnect, device number 7
[  691.175490][T11547] usb 2-1: Using ep0 maxpacket: 32
[  691.191072][T11547] usb 2-1: unable to get BOS descriptor or descriptor too short
[  691.218618][T11547] usb 2-1: config index 0 descriptor too short (expected 8192, got 27)
[  691.233816][T11547] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  691.245356][T11547] usb 2-1: config 0 has no interfaces?
[  691.256935][T11547] usb 2-1: New USB device found, idVendor=0123, idProduct=0001, bcdDevice=4a.fe
[  691.270088][T11547] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  691.279105][T11547] usb 2-1: Manufacturer: 璼ච⹏皶ᅝၴ㻠ⲁ貥鿽緼蜅솴墨ꕈ돌褁뻺蒝㢠ᱵ๔ቼ⍘䶅㸛犅癍关홃鯝︼椋ꬕ퓣蘊뽥㴽㺊˼ష챟ᾆ돳精㏅ᦣ鏉蹩쏶磐嬭ꦋ걕鯢ꇮْ켖饋䀍䦾兮鏽漬
[  691.305751][T11547] usb 2-1: SerialNumber: syz
[  691.337425][T11547] usb 2-1: config 0 descriptor??
[  691.360646][T15086] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2770'.
[  692.185195][ T6438] usb 1-1: new high-speed USB device number 111 using dummy_hcd
[  692.435948][   T10] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[  692.633467][   T10] usb 5-1: Using ep0 maxpacket: 8
[  692.658380][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  692.835179][ T6438] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  692.843842][ T6438] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config
[  692.872899][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  692.895769][   T10] usb 5-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad
[  692.907027][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  692.928105][   T10] usb 5-1: Product: syz
[  692.942116][   T10] usb 5-1: Manufacturer: syz
[  692.948437][   T10] usb 5-1: SerialNumber: syz
[  692.975671][   T48] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  693.048349][ T6438] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  693.057647][ T6438] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7
[  693.068945][ T6438] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024
[  693.101778][   T10] usb 5-1: config 0 descriptor??
[  693.189339][ T6438] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  693.198514][ T6438] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  693.275162][ T6438] usb 1-1: Product: syz
[  693.279531][ T6438] usb 1-1: Manufacturer: syz
[  693.305485][   T48] usb 4-1: Using ep0 maxpacket: 8
[  693.326735][ T6438] cdc_wdm 1-1:1.0: skipping garbage
[  693.372010][   T10] smsusb:smsusb_probe: board id=2, interface number 0
[  693.382941][   T10] smsusb:smsusb_probe: Device initialized with return code -19
[  693.431727][ T6438] cdc_wdm 1-1:1.0: skipping garbage
[  693.437446][ T6438] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[  693.739837][   T48] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  693.790887][   T48] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  693.851949][T11547] usb 2-1: USB disconnect, device number 3
[  693.857072][   T48] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  693.913554][   T48] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  694.063351][T15110] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2775'.
[  694.123782][   T48] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  694.183269][   T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  694.500249][   T48] usb 4-1: usb_control_msg returned -32
[  694.549673][   T48] usbtmc 4-1:16.0: can't read capabilities
[  694.611232][T15115] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  694.860081][   T10] usb 5-1: USB disconnect, device number 103
[  694.895976][T11547] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  695.082941][T11547] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  695.093087][T11547] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  695.107456][T11547] usb 2-1: Product: syz
[  695.116076][T11547] usb 2-1: Manufacturer: syz
[  695.129931][T11547] usb 2-1: SerialNumber: syz
[  695.219721][   T48] usb 1-1: USB disconnect, device number 111
[  695.232142][T11547] usb 2-1: config 0 descriptor??
[  695.280369][T11547] gspca_main: sunplus-2.14.0 probing 055f:c230
[  695.305994][   T10] usb 5-1: new low-speed USB device number 104 using dummy_hcd
[  695.465897][   T10] usb 5-1: Invalid ep0 maxpacket: 16
[  695.557469][T15127] FAULT_INJECTION: forcing a failure.
[  695.557469][T15127] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  695.605487][   T10] usb 5-1: new low-speed USB device number 105 using dummy_hcd
[  695.736733][T15128] Option '[��y�$
[  695.736733][T15128] ���>�ڎ��Tk���S�@S�V��fhJ' to dns_resolver key: bad/missing value
[  695.765691][   T10] usb 5-1: Invalid ep0 maxpacket: 16
[  695.771862][   T10] usb usb5-port1: attempt power cycle
[  695.783288][T15127] CPU: 0 UID: 0 PID: 15127 Comm: syz.2.2782 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) 
[  695.783311][T15127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  695.783321][T15127] Call Trace:
[  695.783328][T15127]  <TASK>
[  695.783335][T15127]  dump_stack_lvl+0x241/0x360
[  695.783368][T15127]  ? __pfx_dump_stack_lvl+0x10/0x10
[  695.783382][T15127]  ? __pfx__printk+0x10/0x10
[  695.783402][T15127]  should_fail_ex+0x424/0x570
[  695.783416][T15127]  _copy_from_user+0x2d/0xb0
[  695.783431][T15127]  do_sock_getsockopt+0x1d5/0x740
[  695.783445][T15127]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  695.783455][T15127]  ? __fget_files+0x2a/0x420
[  695.783467][T15127]  ? __fget_files+0x39d/0x420
[  695.783475][T15127]  ? __fget_files+0x2a/0x420
[  695.783488][T15127]  __x64_sys_getsockopt+0x2a3/0x370
[  695.783502][T15127]  ? __pfx___x64_sys_getsockopt+0x10/0x10
[  695.783515][T15127]  ? do_syscall_64+0xb6/0x230
[  695.783529][T15127]  do_syscall_64+0xf3/0x230
[  695.783541][T15127]  ? clear_bhb_loop+0x45/0xa0
[  695.783554][T15127]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  695.783563][T15127] RIP: 0033:0x7f2fb558d169
[  695.783573][T15127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  695.783582][T15127] RSP: 002b:00007f2fb63be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  695.783595][T15127] RAX: ffffffffffffffda RBX: 00007f2fb57a5fa0 RCX: 00007f2fb558d169
[  695.783602][T15127] RDX: 00000000000000ce RSI: 000000000000010d RDI: 0000000000000003
[  695.783609][T15127] RBP: 00007f2fb63be090 R08: 0000200000000280 R09: 0000000000000000
[  695.783616][T15127] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  695.783622][T15127] R13: 0000000000000000 R14: 00007f2fb57a5fa0 R15: 00007f2fb58cfa28
[  695.783637][T15127]  </TASK>
[  696.003943][ T5888] usb 4-1: USB disconnect, device number 8
[  696.265784][   T10] usb 5-1: new low-speed USB device number 106 using dummy_hcd
[  696.306169][   T10] usb 5-1: Invalid ep0 maxpacket: 16
[  696.353021][   T30] kauditd_printk_skb: 1694 callbacks suppressed
[  696.353040][   T30] audit: type=1326 audit(1744120914.533:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15124 comm="syz.0.2781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bd898d169 code=0x7fc00000
[  696.409249][   T48] usb 2-1: USB disconnect, device number 4
[  696.455778][   T10] usb 5-1: new low-speed USB device number 107 using dummy_hcd
[  696.508934][   T10] usb 5-1: Invalid ep0 maxpacket: 16
[  696.514625][   T10] usb usb5-port1: unable to enumerate USB device
[  696.525480][ T5888] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  696.745835][ T5888] usb 4-1: Using ep0 maxpacket: 8
[  696.757823][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  696.772529][ T5888] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0
[  696.801876][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  696.832376][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  696.860586][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  696.900894][ T5888] usb 4-1: New USB device found, idVendor=0499, idProduct=1055, bcdDevice= 1.a4
[  696.937657][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  696.951687][ T5888] usb 4-1: Product: syz
[  696.961789][ T5888] usb 4-1: Manufacturer: syz
[  696.978668][ T5888] usb 4-1: SerialNumber: syz
[  696.992704][ T5888] usb 4-1: config 0 descriptor??
[  698.225601][   T10] usb 1-1: new high-speed USB device number 112 using dummy_hcd
[  698.405285][   T10] usb 1-1: Using ep0 maxpacket: 16
[  698.449138][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  698.478374][   T10] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  698.488338][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  698.500122][   T10] usb 1-1: Product: syz
[  698.504425][   T10] usb 1-1: Manufacturer: syz
[  698.590022][ T5883] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[  698.694160][   T10] usb 1-1: SerialNumber: syz
[  698.759035][   T10] usb 1-1: config 0 descriptor??
[  698.777163][   T10] hub 1-1:0.0: bad descriptor, ignoring hub
[  698.785028][   T10] hub 1-1:0.0: probe with driver hub failed with error -5
[  698.809925][ T5883] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  698.825720][   T10] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input41
[  698.850524][ T5883] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config
[  698.899434][ T5883] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  698.919879][ T5883] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7
[  698.925341][   T48] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  699.035361][ T5883] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024
[  699.093666][ T5888] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  699.103290][   T48] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  699.179526][   T48] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  699.223217][   T48] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  699.249635][T15160] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  699.259459][ T5883] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  699.279714][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  699.323256][ T5883] usb 5-1: Product: syz
[  699.331964][   T48] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  699.352509][ T5888] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -12
[  699.362135][ T5883] usb 5-1: Manufacturer: syz
[  699.382676][ T5883] cdc_wdm 5-1:1.0: skipping garbage
[  699.828251][ T5888] usb 4-1: USB disconnect, device number 9
[  699.865026][ T5883] cdc_wdm 5-1:1.0: skipping garbage
[  700.241414][ T5883] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22
[  700.575021][   T48] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  700.722751][   T48] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  700.752597][   T48] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  700.770761][   T48] usb 2-1: Product: syz
[  700.775131][   T48] usb 2-1: Manufacturer: syz
[  700.787825][ T5924] udevd[5924]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  700.809377][   T48] cdc_wdm 2-1:1.0: skipping garbage
[  700.815015][   T48] cdc_wdm 2-1:1.0: skipping garbage
[  700.878249][   T48] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  700.894477][   T48] cdc_wdm 2-1:1.0: Unknown control protocol
[  701.558192][ T5888] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  701.569042][T15156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  701.580799][T15156] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  701.735606][ T5888] usb 4-1: Using ep0 maxpacket: 8
[  701.966679][ T5888] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  701.978462][ T5888] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  701.993442][ T5888] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  702.038943][ T5888] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  702.107426][ T5888] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  702.159923][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  702.505466][ T5888] usb 4-1: usb_control_msg returned -32
[  702.511173][ T5888] usbtmc 4-1:16.0: can't read capabilities
[  702.691396][   T48] usb 5-1: USB disconnect, device number 108
[  702.727919][    C0] wdm_int_callback: 8 callbacks suppressed
[  702.727944][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  702.740345][    C0] wdm_int_callback: 8 callbacks suppressed
[  702.740357][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  702.752705][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  702.759307][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  702.765613][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  702.772231][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  702.778660][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  702.785255][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  702.791513][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  702.798092][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  702.804310][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  702.810883][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  702.817259][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  702.823834][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  702.830054][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  702.836632][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  702.842930][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  702.849519][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  702.856032][    C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71
[  702.862639][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes
[  702.905901][ T5888] usb 2-1: USB disconnect, device number 5
[  702.911765][    C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  703.519514][   T10] usb 1-1: USB disconnect, device number 112
[  704.514816][ T5883] usb 4-1: USB disconnect, device number 10
[  704.665543][   T48] usb 5-1: new low-speed USB device number 109 using dummy_hcd
[  704.805236][   T48] usb 5-1: device descriptor read/64, error -71
[  704.840950][T15198] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  705.045179][   T48] usb 5-1: new low-speed USB device number 110 using dummy_hcd
[  705.120174][T15201] use of bytesused == 0 is deprecated and will be removed in the future,
[  705.130220][T15201] use the actual size instead.
[  705.154644][T15201] kvm: apic: phys broadcast and lowest prio
[  705.185290][   T48] usb 5-1: device descriptor read/64, error -71
[  705.295518][   T48] usb usb5-port1: attempt power cycle
[  705.522754][T15208] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2807'.
[  705.534829][T15208] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2807'.
[  705.561815][T15208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2807'.
[  705.585317][T15208] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2807'.
[  705.635322][   T48] usb 5-1: new low-speed USB device number 111 using dummy_hcd
[  705.642955][ T6438] usb 1-1: new high-speed USB device number 113 using dummy_hcd
[  705.675899][   T48] usb 5-1: device descriptor read/8, error -71
[  705.815405][ T6438] usb 1-1: Using ep0 maxpacket: 8
[  705.829725][ T6438] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  705.848735][ T6438] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  705.878094][ T6438] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  705.888972][ T6438] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  705.904240][ T6438] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  705.914299][ T6438] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  705.937511][   T48] usb 5-1: new low-speed USB device number 112 using dummy_hcd
[  705.966137][   T48] usb 5-1: device descriptor read/8, error -71
[  706.088697][   T48] usb usb5-port1: unable to enumerate USB device
[  706.140037][ T6438] usb 1-1: GET_CAPABILITIES returned 0
[  706.146286][ T6438] usbtmc 1-1:16.0: can't read capabilities
[  706.371820][T15216] misc userio: The device must be registered before sending interrupts
[  706.735426][   T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  706.921507][   T10] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  706.971631][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  706.981641][   T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  706.991317][   T10] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  706.999875][   T10] usb 4-1: Product: syz
[  707.004255][   T10] usb 4-1: Manufacturer: syz
[  707.009632][   T10] usb 4-1: SerialNumber: syz
[  707.017782][   T10] usb 4-1: config 0 descriptor??
[  707.028389][   T10] usb 4-1: selecting invalid altsetting 0
[  707.545697][ T5883] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  707.777544][T15230] FAULT_INJECTION: forcing a failure.
[  707.777544][T15230] name failslab, interval 1, probability 0, space 0, times 0
[  707.821702][T15230] CPU: 1 UID: 0 PID: 15230 Comm: syz.2.2814 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) 
[  707.821731][T15230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  707.821742][T15230] Call Trace:
[  707.821751][T15230]  <TASK>
[  707.821759][T15230]  dump_stack_lvl+0x241/0x360
[  707.821787][T15230]  ? __pfx_dump_stack_lvl+0x10/0x10
[  707.821801][T15230]  ? __pfx__printk+0x10/0x10
[  707.821816][T15230]  ? __pfx___might_resched+0x10/0x10
[  707.821833][T15230]  should_fail_ex+0x424/0x570
[  707.821846][T15230]  should_failslab+0xac/0x100
[  707.821862][T15230]  __kvmalloc_node_noprof+0x170/0x5a0
[  707.821877][T15230]  ? alloc_netdev_mqs+0xa4/0x1210
[  707.821890][T15230]  ? __pfx_ip6_tnl_dev_setup+0x10/0x10
[  707.821903][T15230]  alloc_netdev_mqs+0xa4/0x1210
[  707.821914][T15230]  ? __pfx_ip6_tnl_dev_setup+0x10/0x10
[  707.821923][T15230]  ? sized_strscpy+0x9a/0x2b0
[  707.821939][T15230]  ip6_tnl_locate+0x66b/0x810
[  707.821957][T15230]  ? __pfx_ip6_tnl_locate+0x10/0x10
[  707.821970][T15230]  ? ip6_tnl_siocdevprivate+0xade/0x1570
[  707.821984][T15230]  ip6_tnl_siocdevprivate+0xb05/0x1570
[  707.822005][T15230]  ? __pfx_ip6_tnl_siocdevprivate+0x10/0x10
[  707.822016][T15230]  ? rcu_is_watching+0x15/0xb0
[  707.822038][T15230]  ? dev_ioctl+0x8b0/0x1380
[  707.822052][T15230]  ? full_name_hash+0x93/0xe0
[  707.822074][T15230]  dev_ifsioc+0xc04/0x1010
[  707.822098][T15230]  ? dev_load+0x21/0x1f0
[  707.822120][T15230]  dev_ioctl+0x8c3/0x1380
[  707.822145][T15230]  sock_ioctl+0x819/0x900
[  707.822161][T15230]  ? __pfx_sock_ioctl+0x10/0x10
[  707.822172][T15230]  ? __fget_files+0x2a/0x420
[  707.822200][T15230]  ? __pfx_sock_ioctl+0x10/0x10
[  707.822221][T15230]  __se_sys_ioctl+0xf1/0x160
[  707.822243][T15230]  do_syscall_64+0xf3/0x230
[  707.822264][T15230]  ? clear_bhb_loop+0x45/0xa0
[  707.822278][T15230]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  707.822288][T15230] RIP: 0033:0x7f2fb558d169
[  707.822298][T15230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  707.822307][T15230] RSP: 002b:00007f2fb63be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  707.822319][T15230] RAX: ffffffffffffffda RBX: 00007f2fb57a5fa0 RCX: 00007f2fb558d169
[  707.822327][T15230] RDX: 00002000000004c0 RSI: 00000000000089f1 RDI: 0000000000000003
[  707.822334][T15230] RBP: 00007f2fb63be090 R08: 0000000000000000 R09: 0000000000000000
[  707.822340][T15230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  707.822346][T15230] R13: 0000000000000000 R14: 00007f2fb57a5fa0 R15: 00007f2fb58cfa28
[  707.822362][T15230]  </TASK>
[  707.885908][ T5883] usb 2-1: Using ep0 maxpacket: 8
[  708.098076][ T6438] usb 4-1: USB disconnect, device number 11
[  708.190112][T15232] kvm: apic: phys broadcast and lowest prio
[  708.254186][ T5883] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  708.268804][ T5883] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  708.285538][ T5883] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  708.295967][ T5883] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  708.309364][ T5883] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  708.319493][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  708.537415][T15238] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  708.560317][ T5883] usb 2-1: usb_control_msg returned -32
[  708.572322][ T5883] usbtmc 2-1:16.0: can't read capabilities
[  708.600053][   T10] usb 1-1: USB disconnect, device number 113
[  709.135528][   T10] usb 1-1: new full-speed USB device number 114 using dummy_hcd
[  709.155937][T11547] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  709.275947][   T10] usb 1-1: device descriptor read/64, error -71
[  709.345841][T11547] usb 4-1: device descriptor read/64, error -71
[  709.415401][T15255] FAULT_INJECTION: forcing a failure.
[  709.415401][T15255] name failslab, interval 1, probability 0, space 0, times 0
[  709.429321][T15255] CPU: 1 UID: 0 PID: 15255 Comm: syz.2.2822 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) 
[  709.429337][T15255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  709.429343][T15255] Call Trace:
[  709.429348][T15255]  <TASK>
[  709.429352][T15255]  dump_stack_lvl+0x241/0x360
[  709.429372][T15255]  ? __pfx_dump_stack_lvl+0x10/0x10
[  709.429386][T15255]  ? __pfx__printk+0x10/0x10
[  709.429402][T15255]  ? __pfx___might_resched+0x10/0x10
[  709.429418][T15255]  should_fail_ex+0x424/0x570
[  709.429432][T15255]  should_failslab+0xac/0x100
[  709.429446][T15255]  kmem_cache_alloc_node_noprof+0x7d/0x3b0
[  709.429460][T15255]  ? __alloc_skb+0x1c2/0x480
[  709.429472][T15255]  __alloc_skb+0x1c2/0x480
[  709.429484][T15255]  ? __pfx___alloc_skb+0x10/0x10
[  709.429495][T15255]  ? netlink_autobind+0xd6/0x2f0
[  709.429508][T15255]  ? netlink_autobind+0x2b0/0x2f0
[  709.429530][T15255]  netlink_sendmsg+0x638/0xcd0
[  709.429549][T15255]  ? __pfx_netlink_sendmsg+0x10/0x10
[  709.429565][T15255]  ? aa_sock_msg_perm+0x91/0x160
[  709.429582][T15255]  ? __pfx_netlink_sendmsg+0x10/0x10
[  709.429594][T15255]  __sock_sendmsg+0x221/0x270
[  709.429609][T15255]  ____sys_sendmsg+0x523/0x860
[  709.429624][T15255]  ? __pfx_____sys_sendmsg+0x10/0x10
[  709.429633][T15255]  ? __fget_files+0x2a/0x420
[  709.429645][T15255]  ? __fget_files+0x2a/0x420
[  709.429658][T15255]  __sys_sendmsg+0x271/0x360
[  709.429671][T15255]  ? __pfx___sys_sendmsg+0x10/0x10
[  709.429708][T15255]  ? do_syscall_64+0xb6/0x230
[  709.429722][T15255]  do_syscall_64+0xf3/0x230
[  709.429733][T15255]  ? clear_bhb_loop+0x45/0xa0
[  709.429745][T15255]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  709.429755][T15255] RIP: 0033:0x7f2fb558d169
[  709.429765][T15255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  709.429774][T15255] RSP: 002b:00007f2fb63be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  709.429786][T15255] RAX: ffffffffffffffda RBX: 00007f2fb57a5fa0 RCX: 00007f2fb558d169
[  709.429793][T15255] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 000000000000000a
[  709.429800][T15255] RBP: 00007f2fb63be090 R08: 0000000000000000 R09: 0000000000000000
[  709.429806][T15255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  709.429812][T15255] R13: 0000000000000000 R14: 00007f2fb57a5fa0 R15: 00007f2fb58cfa28
[  709.429832][T15255]  </TASK>
[  709.809544][ T6438] usb 5-1: new full-speed USB device number 113 using dummy_hcd
[  709.967090][ T6438] usb 5-1: config 8 has an invalid interface number: 177 but max is 0
[  709.978557][ T6438] usb 5-1: config 8 has no interface number 0
[  709.990319][ T6438] usb 5-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xE8, changing to 0x88
[  710.011001][ T6438] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x88 has invalid maxpacket 1023, setting to 64
[  710.022465][ T6438] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0
[  710.034869][ T6438] usb 5-1: config 8 interface 177 has no altsetting 0
[  710.045758][   T10] usb 1-1: new full-speed USB device number 115 using dummy_hcd
[  710.060210][ T6438] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  710.101898][ T6438] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  710.115517][T11547] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  710.150340][T15253] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  710.175535][   T10] usb 1-1: device descriptor read/64, error -71
[  710.238953][   T48] usb 2-1: USB disconnect, device number 6
[  710.245243][T11547] usb 4-1: device descriptor read/64, error -71
[  710.288583][   T10] usb usb1-port1: attempt power cycle
[  710.357017][T11547] usb usb4-port1: attempt power cycle
[  710.379986][T15253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  710.390770][T15253] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  710.414697][ T6438] usb 5-1: string descriptor 0 read error: -71
[  710.440337][ T6438] ir_toy 5-1:8.177: required endpoints not found
[  710.566656][ T6438] usb 5-1: USB disconnect, device number 113
[  710.715470][T11547] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  710.726229][   T10] usb 1-1: new full-speed USB device number 116 using dummy_hcd
[  710.746352][T11547] usb 4-1: device descriptor read/8, error -71
[  710.752767][   T10] usb 1-1: device descriptor read/8, error -71
[  711.035453][T11547] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  711.084043][T11547] usb 4-1: device descriptor read/8, error -71
[  711.104718][T15267] vivid-000: disconnect
[  711.109960][   T10] usb 1-1: new full-speed USB device number 117 using dummy_hcd
[  711.122377][T15267] vivid-000: reconnect
[  711.140157][   T10] usb 1-1: device descriptor read/8, error -71
[  711.196134][T11547] usb usb4-port1: unable to enumerate USB device
[  711.255910][   T10] usb usb1-port1: unable to enumerate USB device
[  711.575676][ T6438] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[  711.771686][T15288] misc userio: The device must be registered before sending interrupts
[  711.825158][ T6438] usb 5-1: Using ep0 maxpacket: 8
[  711.840658][ T6438] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  711.880583][ T6438] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0
[  711.933505][ T6438] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  711.983401][ T6438] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  712.025577][ T6438] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  712.077252][ T6438] usb 5-1: New USB device found, idVendor=0499, idProduct=1055, bcdDevice= 1.a4
[  712.107758][ T6438] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  712.137398][ T6438] usb 5-1: Product: syz
[  712.214121][ T6438] usb 5-1: Manufacturer: syz
[  712.229708][ T6438] usb 5-1: SerialNumber: syz
[  712.275830][ T6438] usb 5-1: config 0 descriptor??
[  712.465536][   T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  712.565276][T11547] usb 1-1: new high-speed USB device number 118 using dummy_hcd
[  712.620306][   T10] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  712.630027][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  712.642672][   T10] usb 2-1: Product: syz
[  712.652275][   T10] usb 2-1: Manufacturer: syz
[  712.667532][   T10] usb 2-1: SerialNumber: syz
[  712.704799][   T10] usb 2-1: config 0 descriptor??
[  712.755605][T11547] usb 1-1: config 0 has no interfaces?
[  712.890608][T11547] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  712.933656][T11547] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  712.962388][T11547] usb 1-1: Product: syz
[  712.973359][T11547] usb 1-1: Manufacturer: syz
[  712.988278][T11547] usb 1-1: SerialNumber: syz
[  713.020402][T11547] usb 1-1: config 0 descriptor??
[  713.118256][   T10] hso 2-1:0.0: Failed to find BULK IN ep
[  713.135538][   T10] usb-storage 2-1:0.0: USB Mass Storage device detected
[  713.358407][ T5883] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  713.512030][   T10] usb 2-1: USB disconnect, device number 7
[  713.531714][ T5883] usb 4-1: config 0 has no interfaces?
[  713.541572][ T5883] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  713.541601][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  713.541621][ T5883] usb 4-1: Product: syz
[  713.541635][ T5883] usb 4-1: Manufacturer: syz
[  713.541684][ T5883] usb 4-1: SerialNumber: syz
[  713.558802][ T5883] usb 4-1: config 0 descriptor??
[  714.210671][T15306] team0: left promiscuous mode
[  714.297328][T15306] team_slave_0: left promiscuous mode
[  714.435422][T15306] team_slave_1: left promiscuous mode
[  714.463812][T15306] vlan0: left promiscuous mode
[  714.502756][T15306] gretap0: left promiscuous mode
[  714.535342][T15306] macvlan2: entered allmulticast mode
[  714.585495][ T6438] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  714.647722][T15306] ip6erspan0: entered allmulticast mode
[  714.653482][T15306] syztnl0: entered allmulticast mode
[  714.667695][T15306] bridge2: entered allmulticast mode
[  714.696232][T15306] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0
[  714.705769][T15306] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0
[  714.741607][ T6438] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -12
[  714.769468][ T6438] usb 5-1: USB disconnect, device number 114
[  714.785434][T15306] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0
[  714.808703][T15306] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0
[  714.833790][T15306] geneve3: left promiscuous mode
[  715.012201][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  715.091356][T15306] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  715.101101][T15306] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  715.110180][T15306] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  715.119103][T15306] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  715.164354][T15306] vxlan1: entered allmulticast mode
[  715.189813][T15306] macsec1: entered allmulticast mode
[  715.200636][T15306] bridge3: left promiscuous mode
[  715.207498][T15306] bridge3: entered allmulticast mode
[  715.213263][T15306] mac80211_hwsim hwsim13 wlan0: entered allmulticast mode
[  715.221661][T15306] batadv1: entered allmulticast mode
[  715.655432][ T6438] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  715.815173][ T6438] usb 2-1: Using ep0 maxpacket: 16
[  715.826714][ T6438] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  715.838504][ T6438] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  715.859746][ T6438] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  715.870725][ T6438] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  715.889769][ T6438] usb 2-1: Product: syz
[  715.897966][ T6438] usb 2-1: Manufacturer: syz
[  715.902587][ T6438] usb 2-1: SerialNumber: syz
[  715.912322][ T6438] usb 2-1: config 0 descriptor??
[  715.921478][ T6438] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  715.933129][ T6438] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  716.183551][   T48] usb 1-1: USB disconnect, device number 118
[  716.366548][T15327] netlink: 204 bytes leftover after parsing attributes in process `syz.4.2843'.
[  716.386024][T15327] FAULT_INJECTION: forcing a failure.
[  716.386024][T15327] name failslab, interval 1, probability 0, space 0, times 0
[  716.405555][T15327] CPU: 1 UID: 0 PID: 15327 Comm: syz.4.2843 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) 
[  716.405580][T15327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  716.405592][T15327] Call Trace:
[  716.405600][T15327]  <TASK>
[  716.405607][T15327]  dump_stack_lvl+0x241/0x360
[  716.405642][T15327]  ? __pfx_dump_stack_lvl+0x10/0x10
[  716.405665][T15327]  ? __pfx__printk+0x10/0x10
[  716.405693][T15327]  ? __pfx___might_resched+0x10/0x10
[  716.405719][T15327]  should_fail_ex+0x424/0x570
[  716.405749][T15327]  should_failslab+0xac/0x100
[  716.405774][T15327]  kmem_cache_alloc_node_noprof+0x7d/0x3b0
[  716.405799][T15327]  ? __alloc_skb+0x1c2/0x480
[  716.405813][T15327]  ? rtnl_bridge_setlink+0x6c1/0xa10
[  716.405840][T15327]  __alloc_skb+0x1c2/0x480
[  716.405856][T15327]  ? __pfx_rtnl_bridge_setlink+0x10/0x10
[  716.405882][T15327]  ? __pfx___alloc_skb+0x10/0x10
[  716.405905][T15327]  ? netlink_ack_tlv_len+0x6e/0x200
[  716.405929][T15327]  netlink_ack+0x147/0xa70
[  716.405949][T15327]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  716.405969][T15327]  ? __lock_acquire+0xad5/0xd80
[  716.406001][T15327]  netlink_rcv_skb+0x296/0x480
[  716.406024][T15327]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  716.406048][T15327]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  716.406088][T15327]  ? netlink_deliver_tap+0x2e/0x1b0
[  716.406113][T15327]  ? netlink_deliver_tap+0x2e/0x1b0
[  716.406137][T15327]  netlink_unicast+0x7f8/0x9a0
[  716.406167][T15327]  ? __pfx_netlink_unicast+0x10/0x10
[  716.406189][T15327]  ? skb_put+0x114/0x1f0
[  716.406210][T15327]  netlink_sendmsg+0x8c3/0xcd0
[  716.406244][T15327]  ? __pfx_netlink_sendmsg+0x10/0x10
[  716.406271][T15327]  ? aa_sock_msg_perm+0x91/0x160
[  716.406299][T15327]  ? __pfx_netlink_sendmsg+0x10/0x10
[  716.406320][T15327]  __sock_sendmsg+0x221/0x270
[  716.406345][T15327]  ____sys_sendmsg+0x523/0x860
[  716.406372][T15327]  ? __pfx_____sys_sendmsg+0x10/0x10
[  716.406388][T15327]  ? __fget_files+0x2a/0x420
[  716.406407][T15327]  ? __fget_files+0x2a/0x420
[  716.406432][T15327]  __sys_sendmsg+0x271/0x360
[  716.406455][T15327]  ? __pfx___sys_sendmsg+0x10/0x10
[  716.406523][T15327]  ? do_syscall_64+0xb6/0x230
[  716.406547][T15327]  do_syscall_64+0xf3/0x230
[  716.406566][T15327]  ? clear_bhb_loop+0x45/0xa0
[  716.406587][T15327]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  716.406603][T15327] RIP: 0033:0x7f106598d169
[  716.406619][T15327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  716.406634][T15327] RSP: 002b:00007f106681b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  716.406653][T15327] RAX: ffffffffffffffda RBX: 00007f1065ba5fa0 RCX: 00007f106598d169
[  716.406666][T15327] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  716.406678][T15327] RBP: 00007f106681b090 R08: 0000000000000000 R09: 0000000000000000
[  716.406688][T15327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  716.406700][T15327] R13: 0000000000000000 R14: 00007f1065ba5fa0 R15: 00007f1065ccfa28
[  716.406728][T15327]  </TASK>
[  716.709525][    C1] vkms_vblank_simulate: vblank timer overrun
[  716.836217][ T6438] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  716.843007][ T6438] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[  716.850331][ T6438] em28xx 2-1:0.0: AC97 chip type couldn't be determined
[  716.857373][ T6438] em28xx 2-1:0.0: No AC97 audio processor
[  716.873648][ T6438] usb 2-1: USB disconnect, device number 8
[  716.881141][ T6438] em28xx 2-1:0.0: Disconnecting em28xx
[  716.891002][ T6438] em28xx 2-1:0.0: Freeing device
[  717.026880][   T48] usb 1-1: new high-speed USB device number 119 using dummy_hcd
[  717.180211][   T10] usb 4-1: USB disconnect, device number 16
[  717.197258][   T48] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023
[  717.259350][   T48] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32
[  717.281454][   T48] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  717.301975][   T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  717.310091][   T48] usb 1-1: Product: syz
[  717.314267][   T48] usb 1-1: Manufacturer: syz
[  717.320125][   T48] usb 1-1: SerialNumber: syz
[  717.750653][   T48] cdc_ncm 1-1:1.0: bind() failure
[  717.763191][   T48] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  717.805879][   T48] cdc_ncm 1-1:1.1: bind() failure
[  717.872142][   T48] usb 1-1: USB disconnect, device number 119
[  718.217719][T15340] FAULT_INJECTION: forcing a failure.
[  718.217719][T15340] name failslab, interval 1, probability 0, space 0, times 0
[  718.230410][T15340] CPU: 0 UID: 0 PID: 15340 Comm: syz.4.2847 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) 
[  718.230425][T15340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  718.230435][T15340] Call Trace:
[  718.230441][T15340]  <TASK>
[  718.230445][T15340]  dump_stack_lvl+0x241/0x360
[  718.230465][T15340]  ? __pfx_dump_stack_lvl+0x10/0x10
[  718.230479][T15340]  ? __pfx__printk+0x10/0x10
[  718.230494][T15340]  ? vxlan_switchdev_event+0x1ee/0xd50
[  718.230508][T15340]  ? switchdev_handle_fdb_event_to_device+0x3e/0x70
[  718.230525][T15340]  should_fail_ex+0x424/0x570
[  718.230538][T15340]  should_failslab+0xac/0x100
[  718.230554][T15340]  kmem_cache_alloc_node_noprof+0x7d/0x3b0
[  718.230568][T15340]  ? __alloc_skb+0x1c2/0x480
[  718.230583][T15340]  ? br_switchdev_fdb_notify+0x446/0x540
[  718.230598][T15340]  __alloc_skb+0x1c2/0x480
[  718.230607][T15340]  ? __pfx_br_switchdev_fdb_notify+0x10/0x10
[  718.230622][T15340]  ? __pfx___alloc_skb+0x10/0x10
[  718.230629][T15340]  ? rht_lock+0x147/0x270
[  718.230643][T15340]  fdb_notify+0xa8/0x170
[  718.230659][T15340]  fdb_delete+0xf53/0x1210
[  718.230675][T15340]  ? __pfx_br_vlan_lookup+0x10/0x10
[  718.230692][T15340]  ? fdb_delete+0x3b2/0x1210
[  718.230708][T15340]  ? __pfx_fdb_delete+0x10/0x10
[  718.230729][T15340]  br_fdb_find_delete_local+0x123/0x140
[  718.230749][T15340]  nbp_vlan_delete+0x17a/0x210
[  718.230761][T15340]  br_vlan_info+0x16c/0x520
[  718.230777][T15340]  ? __pfx_br_vlan_info+0x10/0x10
[  718.230789][T15340]  ? unwind_get_return_address+0x4d/0x90
[  718.230802][T15340]  ? arch_stack_walk+0xff/0x150
[  718.230819][T15340]  br_process_vlan_info+0x33e/0xc30
[  718.230841][T15340]  ? __pfx_br_process_vlan_info+0x10/0x10
[  718.230860][T15340]  br_afspec+0x3d0/0x650
[  718.230877][T15340]  ? __pfx_br_afspec+0x10/0x10
[  718.230899][T15340]  br_dellink+0x25c/0x350
[  718.230914][T15340]  ? __pfx_br_dellink+0x10/0x10
[  718.230930][T15340]  ? mutex_is_locked+0x17/0x50
[  718.230941][T15340]  ? __pfx_br_dellink+0x10/0x10
[  718.230955][T15340]  rtnl_bridge_dellink+0x545/0x910
[  718.230973][T15340]  ? __pfx_rtnl_bridge_dellink+0x10/0x10
[  718.230990][T15340]  ? __pfx_rtnl_bridge_dellink+0x10/0x10
[  718.231004][T15340]  rtnetlink_rcv_msg+0x7c2/0xd70
[  718.231016][T15340]  ? rtnetlink_rcv_msg+0x1ba/0xd70
[  718.231031][T15340]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  718.231043][T15340]  ? __lock_acquire+0xad5/0xd80
[  718.231061][T15340]  netlink_rcv_skb+0x208/0x480
[  718.231077][T15340]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  718.231091][T15340]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  718.231113][T15340]  ? netlink_deliver_tap+0x2e/0x1b0
[  718.231127][T15340]  ? netlink_deliver_tap+0x2e/0x1b0
[  718.231141][T15340]  netlink_unicast+0x7f8/0x9a0
[  718.231159][T15340]  ? __pfx_netlink_unicast+0x10/0x10
[  718.231172][T15340]  ? skb_put+0x114/0x1f0
[  718.231183][T15340]  netlink_sendmsg+0x8c3/0xcd0
[  718.231203][T15340]  ? __pfx_netlink_sendmsg+0x10/0x10
[  718.231218][T15340]  ? aa_sock_msg_perm+0x91/0x160
[  718.231235][T15340]  ? __pfx_netlink_sendmsg+0x10/0x10
[  718.231247][T15340]  __sock_sendmsg+0x221/0x270
[  718.231261][T15340]  ____sys_sendmsg+0x523/0x860
[  718.231276][T15340]  ? __pfx_____sys_sendmsg+0x10/0x10
[  718.231285][T15340]  ? __fget_files+0x2a/0x420
[  718.231296][T15340]  ? __fget_files+0x2a/0x420
[  718.231309][T15340]  __sys_sendmsg+0x271/0x360
[  718.231322][T15340]  ? __pfx___sys_sendmsg+0x10/0x10
[  718.231359][T15340]  ? do_syscall_64+0xb6/0x230
[  718.231372][T15340]  do_syscall_64+0xf3/0x230
[  718.231384][T15340]  ? clear_bhb_loop+0x45/0xa0
[  718.231396][T15340]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  718.231406][T15340] RIP: 0033:0x7f106598d169
[  718.231417][T15340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  718.231425][T15340] RSP: 002b:00007f106681b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  718.231437][T15340] RAX: ffffffffffffffda RBX: 00007f1065ba5fa0 RCX: 00007f106598d169
[  718.231445][T15340] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007
[  718.231451][T15340] RBP: 00007f106681b090 R08: 0000000000000000 R09: 0000000000000000
[  718.231459][T15340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  718.231465][T15340] R13: 0000000000000000 R14: 00007f1065ba5fa0 R15: 00007f1065ccfa28
[  718.231480][T15340]  </TASK>
[  718.882048][   T12] bridge_slave_1: left promiscuous mode
[  719.037115][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  719.074064][   T12] bridge_slave_0: left promiscuous mode
[  719.116913][T15343] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  719.130335][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  719.635358][ T6438] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[  719.888247][ T6438] usb 5-1: Using ep0 maxpacket: 8
[  719.933100][ T6438] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  720.010861][ T6438] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  720.022623][   T12] tipc: Disabling bearer <ib:ip_vti0>
[  720.070737][ T6438] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  720.190861][ T6438] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  720.204917][ T6438] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  720.248370][ T6438] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  720.625699][ T6438] usb 5-1: GET_CAPABILITIES returned 0
[  720.684441][ T6438] usbtmc 5-1:16.0: can't read capabilities
[  721.166748][   T12] bond0 (unregistering): (slave vxlan0): Releasing backup interface
[  721.390147][T13483] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  721.400719][T13483] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  721.424589][T13483] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  721.444794][T13483] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  721.460651][T13483] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  721.558795][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  721.589280][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  721.605869][   T12] bond0 (unregistering): Released all slaves
[  721.748709][   T12] tipc: Left network mode
[  722.176512][   T48] usb 5-1: USB disconnect, device number 115
[  722.265548][   T10] usb 1-1: new full-speed USB device number 120 using dummy_hcd
[  722.455442][T15381] netlink: 124 bytes leftover after parsing attributes in process `syz.3.2855'.
[  722.455968][   T10] usb 1-1: config 0 has an invalid interface number: 72 but max is 0
[  722.488409][   T10] usb 1-1: config 0 has no interface number 0
[  722.507760][   T10] usb 1-1: too many endpoints for config 0 interface 72 altsetting 199: 192, using maximum allowed: 30
[  722.527291][   T10] usb 1-1: config 0 interface 72 altsetting 199 has 0 endpoint descriptors, different from the interface descriptor's value: 192
[  722.550570][   T10] usb 1-1: config 0 interface 72 has no altsetting 0
[  722.558476][   T10] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  722.569766][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  722.587908][   T10] usb 1-1: config 0 descriptor??
[  722.609637][T15400] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2856'.
[  723.350171][   T12] hsr_slave_0: left promiscuous mode
[  723.365761][   T12] hsr_slave_1: left promiscuous mode
[  723.382860][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  723.404251][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  723.410800][   T10] pegasus 1-1:0.72: probe with driver pegasus failed with error -121
[  723.590475][ T5839] Bluetooth: hci0: command tx timeout
[  724.699323][   T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  724.736142][   T12] team0 (unregistering): Port device team_slave_1 removed
[  724.812797][   T12] team0 (unregistering): Port device team_slave_0 removed
[  724.855683][   T10] usb 4-1: Using ep0 maxpacket: 8
[  724.868849][   T10] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  724.880504][   T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  724.907551][   T10] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  724.918266][   T10] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  724.953198][   T10] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  724.990701][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  725.329888][   T10] usb 4-1: GET_CAPABILITIES returned 0
[  725.336045][   T10] usbtmc 4-1:16.0: can't read capabilities
[  725.668833][ T5839] Bluetooth: hci0: command tx timeout
[  725.826632][   T48] usb 1-1: USB disconnect, device number 120
[  726.161197][T15376] chnl_net:caif_netlink_parms(): no params data found
[  726.256365][   T48] usb 1-1: new high-speed USB device number 121 using dummy_hcd
[  726.455808][   T48] usb 1-1: Using ep0 maxpacket: 8
[  726.471603][   T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  726.498627][   T48] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0
[  726.565718][   T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  726.627552][   T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  726.637444][   T48] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  726.649979][T15376] bridge0: port 1(bridge_slave_0) entered blocking state
[  726.657402][   T48] usb 1-1: New USB device found, idVendor=0499, idProduct=1055, bcdDevice= 1.a4
[  726.657430][   T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  726.657448][   T48] usb 1-1: Product: syz
[  726.657463][   T48] usb 1-1: Manufacturer: syz
[  726.657478][   T48] usb 1-1: SerialNumber: syz
[  726.660333][   T48] usb 1-1: config 0 descriptor??
[  726.709808][T15376] bridge0: port 1(bridge_slave_0) entered disabled state
[  726.720412][T15376] bridge_slave_0: entered allmulticast mode
[  726.744921][T15376] bridge_slave_0: entered promiscuous mode
[  726.835602][T15470] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2869'.
[  726.843385][T15376] bridge0: port 2(bridge_slave_1) entered blocking state
[  726.893130][T15376] bridge0: port 2(bridge_slave_1) entered disabled state
[  726.922365][T15376] bridge_slave_1: entered allmulticast mode
[  726.943298][T15376] bridge_slave_1: entered promiscuous mode
[  727.172826][T15376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  727.256478][T15376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  727.482587][T15376] team0: Port device team_slave_0 added
[  727.549675][T15376] team0: Port device team_slave_1 added
[  727.713885][T15376] batman_adv: batadv0: Adding interface: batadv_slave_0
[  727.733685][T15376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  727.745351][ T5839] Bluetooth: hci0: command tx timeout
[  727.775781][T15376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  727.791986][T15376] batman_adv: batadv0: Adding interface: batadv_slave_1
[  727.799546][T15376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  727.826630][T15376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  727.933416][T15376] hsr_slave_0: entered promiscuous mode
[  727.942604][T15376] hsr_slave_1: entered promiscuous mode
[  728.044038][ T6438] usb 4-1: USB disconnect, device number 17
[  728.164050][T15500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  728.367545][T15500] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  728.505340][ T6438] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  728.639030][T15376] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  728.655262][ T6438] usb 4-1: device descriptor read/64, error -71
[  728.674736][T15376] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  728.699253][T15376] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  728.734973][T15376] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  728.905375][ T6438] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  729.007831][   T48] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  729.056032][ T6438] usb 4-1: device descriptor read/64, error -71
[  729.074422][T15376] 8021q: adding VLAN 0 to HW filter on device bond0
[  729.081316][T10886] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[  729.205739][ T6438] usb usb4-port1: attempt power cycle
[  729.240612][   T48] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -12
[  729.265365][T10886] usb 5-1: Using ep0 maxpacket: 32
[  729.285300][T15376] 8021q: adding VLAN 0 to HW filter on device team0
[  729.313419][T10886] usb 5-1: config 0 has an invalid interface number: 218 but max is 0
[  729.390804][ T1518] bridge0: port 1(bridge_slave_0) entered blocking state
[  729.398004][ T1518] bridge0: port 1(bridge_slave_0) entered forwarding state
[  729.412145][   T48] usb 1-1: USB disconnect, device number 121
[  729.423308][T10886] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[  729.442339][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  729.468814][T10886] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  729.499768][   T54] bridge0: port 2(bridge_slave_1) entered blocking state
[  729.506958][   T54] bridge0: port 2(bridge_slave_1) entered forwarding state
[  729.522552][T10886] usb 5-1: config 0 has no interface number 0
[  729.542972][T10886] usb 5-1: config 0 has no interface number 1
[  729.563953][T10886] usb 5-1: config 0 interface 218 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[  729.585949][T10886] usb 5-1: config 0 interface 218 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  729.599474][ T6438] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  729.642135][T10886] usb 5-1: too many endpoints for config 0 interface 12 altsetting 197: 114, using maximum allowed: 30
[  729.654307][ T6438] usb 4-1: device descriptor read/8, error -71
[  729.680938][T10886] usb 5-1: config 0 interface 12 altsetting 197 has 1 endpoint descriptor, different from the interface descriptor's value: 114
[  729.716754][T10886] usb 5-1: config 0 interface 12 has no altsetting 0
[  729.732580][T10886] usb 5-1: New USB device found, idVendor=03f0, idProduct=5039, bcdDevice=c2.b2
[  729.737448][T15376] 8021q: adding VLAN 0 to HW filter on device batadv0
[  729.754183][T10886] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  729.763125][T10886] usb 5-1: Product: syz
[  729.774539][T10886] usb 5-1: Manufacturer: syz
[  729.800120][T10886] usb 5-1: SerialNumber: syz
[  729.805598][   T48] usb 1-1: new high-speed USB device number 122 using dummy_hcd
[  729.825343][ T5839] Bluetooth: hci0: command tx timeout
[  729.843653][T10886] usb 5-1: config 0 descriptor??
[  729.851555][T10886] pl2303 5-1:0.218: required endpoints missing
[  729.857334][T15376] veth0_vlan: entered promiscuous mode
[  729.898912][T15376] veth1_vlan: entered promiscuous mode
[  729.915416][ T6438] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  729.955432][ T6438] usb 4-1: device descriptor read/8, error -71
[  729.979186][   T48] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  729.984665][T15376] veth0_macvtap: entered promiscuous mode
[  729.988210][   T48] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config
[  730.004512][   T48] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  730.010580][T15376] veth1_macvtap: entered promiscuous mode
[  730.030412][   T48] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7
[  730.051959][T15376] batman_adv: batadv0: Interface activated: batadv_slave_0
[  730.070160][ T6438] usb usb4-port1: unable to enumerate USB device
[  730.079422][T15376] batman_adv: batadv0: Interface activated: batadv_slave_1
[  730.095229][   T48] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024
[  730.126719][T15376] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  730.151710][T15376] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  730.162147][   T48] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  730.174637][   T48] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  730.182888][T15376] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  730.195293][   T48] usb 1-1: Product: syz
[  730.199565][   T48] usb 1-1: Manufacturer: syz
[  730.213053][T15376] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  730.239842][   T48] cdc_wdm 1-1:1.0: skipping garbage
[  730.264998][   T48] cdc_wdm 1-1:1.0: skipping garbage
[  730.287077][   T48] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[  730.481174][ T2986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  730.521236][ T2986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  730.580886][T10886] pl2303 5-1:0.12: required endpoints missing
[  730.608819][T10886] usb 5-1: USB disconnect, device number 116
[  730.643016][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  730.677144][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  731.343470][T15557] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2880'.
[  731.665357][   T48] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  732.423459][ T5883] usb 1-1: USB disconnect, device number 122
[  732.485829][T10886] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  732.735232][   T48] usb 6-1: device descriptor read/64, error -71
[  732.754380][T10886] usb 4-1: Using ep0 maxpacket: 8
[  732.828087][T10886] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  732.903866][T10886] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  732.951885][T10886] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  732.995411][   T48] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  733.029634][T10886] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  733.138522][T10886] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  733.245330][   T48] usb 6-1: Using ep0 maxpacket: 16
[  733.273753][T10886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  734.342397][T10886] usb 4-1: GET_CAPABILITIES returned 0
[  734.397660][T10886] usbtmc 4-1:16.0: can't read capabilities
[  734.778147][T15616] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2892'.
[  735.972310][   T48] usb 6-1: unable to get BOS descriptor or descriptor too short
[  736.046066][   T48] usb 6-1: unable to read config index 0 descriptor/start: -71
[  736.121751][   T48] usb 6-1: can't read configurations, error -71
[  736.152485][   T48] usb usb6-port1: attempt power cycle
[  736.535552][   T48] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  736.557734][T15637] xt_TCPMSS: Only works on TCP SYN packets
[  736.573855][ T5888] usb 4-1: USB disconnect, device number 22
[  736.587048][   T48] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  736.625821][   T48] usb 6-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config
[  736.659512][   T48] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[  736.703791][   T48] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7
[  736.730623][   T48] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024
[  736.797966][   T48] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  736.823612][   T48] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  736.843548][   T48] usb 6-1: Product: syz
[  736.869345][   T48] usb 6-1: Manufacturer: syz
[  736.904326][   T48] cdc_wdm 6-1:1.0: skipping garbage
[  736.920411][   T48] cdc_wdm 6-1:1.0: skipping garbage
[  736.937201][   T48] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22
[  737.665692][ T5883] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  737.769086][T15668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2899'.
[  737.920192][ T5888] usb 1-1: new high-speed USB device number 123 using dummy_hcd
[  737.955183][ T5883] usb 4-1: Using ep0 maxpacket: 8
[  738.295208][ T5888] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  738.470849][ T5888] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  738.725855][ T5888] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  738.736254][ T5888] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  738.754297][ T5888] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  738.774417][ T5888] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  738.835351][ T5883] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  738.906597][ T5883] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  738.995265][ T5883] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  739.009913][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  739.025805][ T5888] usb 1-1: Product: syz
[  739.029989][ T5888] usb 1-1: Manufacturer: syz
[  739.034623][ T5883] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  739.072174][   T10] usb 6-1: USB disconnect, device number 4
[  739.184811][ T5888] cdc_wdm 1-1:1.0: skipping garbage
[  739.193020][ T5883] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  739.219445][ T5888] cdc_wdm 1-1:1.0: skipping garbage
[  739.238525][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  739.271604][ T5888] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  739.284304][ T5888] cdc_wdm 1-1:1.0: Unknown control protocol
[  739.333206][T15680] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  739.578130][T15662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  739.582159][ T5883] usb 4-1: usb_control_msg returned -32
[  739.594655][T15662] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  739.627313][ T5883] usbtmc 4-1:16.0: can't read capabilities
[  739.677497][T15688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2909'.
[  739.985216][ T5904] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  740.145666][ T5904] usb 6-1: Using ep0 maxpacket: 8
[  740.160755][ T5904] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  740.172796][ T5904] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  740.185995][ T5904] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  740.209619][ T5904] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  740.238514][ T5904] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  740.250504][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  740.572502][ T5904] usb 6-1: GET_CAPABILITIES returned 0
[  740.579303][ T5904] usbtmc 6-1:16.0: can't read capabilities
[  740.694328][    C0] wdm_int_callback: 201 callbacks suppressed
[  740.694348][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  740.706939][    C0] wdm_int_callback: 201 callbacks suppressed
[  740.706953][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  740.719745][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  740.726336][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  740.732579][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  740.739189][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  740.745683][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  740.752264][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  740.758577][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  740.765196][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  740.771460][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  740.778059][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  740.784437][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  740.791039][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  740.797444][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  740.804030][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  740.810523][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  740.817113][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  740.823370][    C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71
[  740.829978][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes
[  740.845875][ T5883] usb 1-1: USB disconnect, device number 123
[  740.845943][    C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  740.995836][ T5839] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  740.999882][   T10] usb 4-1: USB disconnect, device number 23
[  741.496271][T15713] netlink: 'syz.4.2914': attribute type 27 has an invalid length.
[  741.505800][T15713] lo: left allmulticast mode
[  741.510702][T15713] tunl0: left allmulticast mode
[  741.570696][T15713] gre0: left allmulticast mode
[  741.587818][T15713] gretap0: left allmulticast mode
[  741.593073][T15713] erspan0: left allmulticast mode
[  741.615172][ T5904] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  741.638574][T15713] ip_vti0: left allmulticast mode
[  741.644228][T15713] ip6_vti0: left allmulticast mode
[  741.650044][T15713] sit0: left allmulticast mode
[  741.660021][T15713] ip6tnl0: left allmulticast mode
[  741.666234][T15713] ip6gre0: left allmulticast mode
[  741.671982][T15713] syz_tun: left allmulticast mode
[  741.712388][T15713] ip6gretap0: left allmulticast mode
[  741.733030][T15713] bridge0: left allmulticast mode
[  741.775148][ T5904] usb 4-1: Using ep0 maxpacket: 16
[  741.792421][T15713] vcan0: left allmulticast mode
[  741.803009][T15713] bond0: left allmulticast mode
[  741.812606][T15713] team0: left allmulticast mode
[  741.840929][T15713] dummy0: left promiscuous mode
[  741.858856][T15713] dummy0: left allmulticast mode
[  741.878817][T15713] nlmon0: left allmulticast mode
[  741.910490][T15713] caif0: left allmulticast mode
[  741.931024][T15713] batadv0: left allmulticast mode
[  741.944319][T15720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2913'.
[  741.969284][T15713] veth0: left allmulticast mode
[  741.981129][T15713] veth1: left allmulticast mode
[  741.987989][T15713] wg0: left allmulticast mode
[  741.992854][T15713] wg1: left allmulticast mode
[  741.998058][T15713] wg2: left allmulticast mode
[  742.003048][T15713] veth0_to_bridge: left allmulticast mode
[  742.009392][T15713] veth1_to_bridge: left allmulticast mode
[  742.015792][T15713] veth0_to_bond: left allmulticast mode
[  742.021567][T15713] bond_slave_0: left allmulticast mode
[  742.027518][T15713] veth1_to_bond: left allmulticast mode
[  742.033389][T15713] bond_slave_1: left allmulticast mode
[  742.039249][T15713] veth0_to_team: left allmulticast mode
[  742.045033][T15713] team_slave_0: left allmulticast mode
[  742.051260][T15713] veth1_to_team: left allmulticast mode
[  742.057292][T15713] team_slave_1: left allmulticast mode
[  742.063002][T15713] veth0_to_batadv: left allmulticast mode
[  742.092899][T15713] batadv_slave_0: left allmulticast mode
[  742.100945][T15713] veth1_to_batadv: left allmulticast mode
[  742.109202][T15713] batadv_slave_1: left allmulticast mode
[  742.132247][T15713] xfrm0: left allmulticast mode
[  742.140030][T15713] veth0_to_hsr: left allmulticast mode
[  742.203958][T15713] veth1_to_hsr: left allmulticast mode
[  742.220269][T15713] hsr0: left allmulticast mode
[  742.234314][T15713] hsr_slave_0: left allmulticast mode
[  742.242688][T15713] hsr_slave_1: left allmulticast mode
[  742.291292][T15713] veth1_virt_wifi: left allmulticast mode
[  742.339378][T15713] veth0_virt_wifi: left allmulticast mode
[  742.349291][T15723] 
[  742.351615][T15723] =====================================================
[  742.358531][T15723] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[  742.358667][T15713] net veth1_virt_wifi virt_wifi0: left allmulticast mode
[  742.365967][T15723] 6.15.0-rc1-syzkaller #0 Not tainted
[  742.365978][T15723] -----------------------------------------------------
[  742.365985][T15723] syz.2.2915/15723 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[  742.366002][T15723] ffffffff8ea0c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigurg+0x141/0x430
[  742.401695][T15723] 
[  742.401695][T15723] and this task is already holding:
[  742.409036][T15723] ffff888030659820 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x430
[  742.417713][T15723] which would create a new lock dependency:
[  742.423585][T15723]  (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3}
[  742.431145][T15723] 
[  742.431145][T15723] but this new dependency connects a SOFTIRQ-irq-safe lock:
[  742.440570][T15723]  (&client->buffer_lock){..-.}-{3:3}
[  742.440588][T15723] 
[  742.440588][T15723] ... which became SOFTIRQ-irq-safe at:
[  742.453608][T15723]   lock_acquire+0x116/0x2f0
[  742.458179][T15723]   _raw_spin_lock+0x2e/0x40
[  742.462744][T15723]   evdev_pass_values+0xf8/0xaf0
[  742.467661][T15723]   evdev_events+0x1c2/0x300
[  742.472225][T15723]   input_pass_values+0x268/0x890
[  742.477232][T15723]   input_event_dispose+0x3bc/0x610
[  742.482406][T15723]   input_handle_event+0xa9c/0xc10
[  742.487493][T15723]   input_inject_event+0x221/0x360
[  742.492581][T15723]   kd_sound_helper+0x1a0/0x210
[  742.497410][T15723]   input_handler_for_each_handle+0x103/0x1d0
[  742.503458][T15723]   call_timer_fn+0x189/0x650
[  742.508125][T15723]   __run_timer_base+0x66e/0x8e0
[  742.513047][T15723]   run_timer_softirq+0xb7/0x170
[  742.517965][T15723]   handle_softirqs+0x2d6/0x9b0
[  742.522795][T15723]   __irq_exit_rcu+0xfb/0x220
[  742.527449][T15723]   irq_exit_rcu+0x9/0x30
[  742.531756][T15723]   sysvec_apic_timer_interrupt+0xa6/0xc0
[  742.537455][T15723]   asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  742.543501][T15723]   queue_work_on+0x26b/0x380
[  742.548156][T15723]   snd_rawmidi_kernel_write1+0x52d/0x620
[  742.553860][T15723]   snd_rawmidi_write+0x5f2/0xc00
[  742.558867][T15723]   vfs_write+0x2bc/0xd10
[  742.563203][T15723]   ksys_write+0x19d/0x2d0
[  742.567624][T15723]   do_syscall_64+0xf3/0x230
[  742.572209][T15723]   entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  742.578176][T15723] 
[  742.578176][T15723] to a SOFTIRQ-irq-unsafe lock:
[  742.585190][T15723]  (tasklist_lock){.+.+}-{3:3}
[  742.585215][T15723] 
[  742.585215][T15723] ... which became SOFTIRQ-irq-unsafe at:
[  742.597810][T15723] ...
[  742.597817][T15723]   lock_acquire+0x116/0x2f0
[  742.604949][T15723]   _raw_read_lock+0x36/0x50
[  742.609523][T15723]   __do_wait+0x132/0x850
[  742.613837][T15723]   do_wait+0x1fe/0x510
[  742.617976][T15723]   kernel_wait+0xeb/0x240
[  742.622377][T15723]   call_usermodehelper_exec_work+0xbd/0x230
[  742.628339][T15723]   process_scheduled_works+0xac3/0x18e0
[  742.633956][T15723]   worker_thread+0x870/0xd50
[  742.638617][T15723]   kthread+0x7b7/0x940
[  742.642762][T15723]   ret_from_fork+0x4b/0x80
[  742.647249][T15723]   ret_from_fork_asm+0x1a/0x30
[  742.652083][T15723] 
[  742.652083][T15723] other info that might help us debug this:
[  742.652083][T15723] 
[  742.662293][T15723] Chain exists of:
[  742.662293][T15723]   &client->buffer_lock --> &f_owner->lock --> tasklist_lock
[  742.662293][T15723] 
[  742.675495][T15723]  Possible interrupt unsafe locking scenario:
[  742.675495][T15723] 
[  742.683795][T15723]        CPU0                    CPU1
[  742.689141][T15723]        ----                    ----
[  742.694488][T15723]   lock(tasklist_lock);
[  742.698725][T15723]                                local_irq_disable();
[  742.705463][T15723]                                lock(&client->buffer_lock);
[  742.712816][T15723]                                lock(&f_owner->lock);
[  742.719651][T15723]   <Interrupt>
[  742.723086][T15723]     lock(&client->buffer_lock);
[  742.728096][T15723] 
[  742.728096][T15723]  *** DEADLOCK ***
[  742.728096][T15723] 
[  742.736223][T15723] 2 locks held by syz.2.2915/15723:
[  742.741402][T15723]  #0: ffff888044d886b8 (&u->lock){+.+.}-{3:3}, at: queue_oob+0x209/0x650
[  742.749928][T15723]  #1: ffff888030659820 (&f_owner->lock){....}-{3:3}, at: send_sigurg+0x55/0x430
[  742.759051][T15723] 
[  742.759051][T15723] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[  742.769439][T15723]   -> (&client->buffer_lock){..-.}-{3:3} {
[  742.775339][T15723]      IN-SOFTIRQ-W at:
[  742.779480][T15723]                         lock_acquire+0x116/0x2f0
[  742.785964][T15723]                         _raw_spin_lock+0x2e/0x40
[  742.792447][T15723]                         evdev_pass_values+0xf8/0xaf0
[  742.799276][T15723]                         evdev_events+0x1c2/0x300
[  742.805760][T15723]                         input_pass_values+0x268/0x890
[  742.812682][T15723]                         input_event_dispose+0x3bc/0x610
[  742.819778][T15723]                         input_handle_event+0xa9c/0xc10
[  742.826792][T15723]                         input_inject_event+0x221/0x360
[  742.833808][T15723]                         kd_sound_helper+0x1a0/0x210
[  742.840558][T15723]                         input_handler_for_each_handle+0x103/0x1d0
[  742.848527][T15723]                         call_timer_fn+0x189/0x650
[  742.855099][T15723]                         __run_timer_base+0x66e/0x8e0
[  742.861927][T15723]                         run_timer_softirq+0xb7/0x170
[  742.868756][T15723]                         handle_softirqs+0x2d6/0x9b0
[  742.875500][T15723]                         __irq_exit_rcu+0xfb/0x220
[  742.882069][T15723]                         irq_exit_rcu+0x9/0x30
[  742.888292][T15723]                         sysvec_apic_timer_interrupt+0xa6/0xc0
[  742.895909][T15723]                         asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  742.903869][T15723]                         queue_work_on+0x26b/0x380
[  742.910440][T15723]                         snd_rawmidi_kernel_write1+0x52d/0x620
[  742.918058][T15723]                         snd_rawmidi_write+0x5f2/0xc00
[  742.924973][T15723]                         vfs_write+0x2bc/0xd10
[  742.931197][T15723]                         ksys_write+0x19d/0x2d0
[  742.937509][T15723]                         do_syscall_64+0xf3/0x230
[  742.943995][T15723]                         entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  742.951873][T15723]      INITIAL USE at:
[  742.955927][T15723]                        lock_acquire+0x116/0x2f0
[  742.962333][T15723]                        _raw_spin_lock+0x2e/0x40
[  742.968727][T15723]                        evdev_pass_values+0xf8/0xaf0
[  742.975480][T15723]                        evdev_events+0x1c2/0x300
[  742.981875][T15723]                        input_pass_values+0x268/0x890
[  742.988718][T15723]                        input_event_dispose+0x31b/0x610
[  742.995725][T15723]                        input_handle_event+0xa9c/0xc10
[  743.002645][T15723]                        input_inject_event+0x221/0x360
[  743.009563][T15723]                        evdev_write+0x653/0x7d0
[  743.015870][T15723]                        vfs_write+0x2bc/0xd10
[  743.022094][T15723]                        ksys_write+0x19d/0x2d0
[  743.028317][T15723]                        do_syscall_64+0xf3/0x230
[  743.034718][T15723]                        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  743.042502][T15723]    }
[  743.045158][T15723]    ... key      at: [<ffffffff9aabd8e0>] evdev_open.__key.25+0x0/0x20
[  743.053473][T15723]  -> (&new->fa_lock){....}-{3:3} {
[  743.058674][T15723]     INITIAL USE at:
[  743.062638][T15723]                      lock_acquire+0x116/0x2f0
[  743.068861][T15723]                      _raw_write_lock_irq+0xd3/0x120
[  743.075607][T15723]                      fasync_remove_entry+0xec/0x1b0
[  743.082353][T15723]                      lease_modify+0x1ba/0x3a0
[  743.088579][T15723]                      locks_remove_file+0x5a1/0x10d0
[  743.095323][T15723]                      __fput+0x352/0x9f0
[  743.101021][T15723]                      task_work_run+0x251/0x310
[  743.107336][T15723]                      syscall_exit_to_user_mode+0x13f/0x340
[  743.114687][T15723]                      do_syscall_64+0x100/0x230
[  743.121000][T15723]                      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  743.128612][T15723]     INITIAL READ USE at:
[  743.133011][T15723]                           lock_acquire+0x116/0x2f0
[  743.139672][T15723]                           _raw_read_lock_irqsave+0xe0/0x130
[  743.147109][T15723]                           kill_fasync+0x199/0x4f0
[  743.153681][T15723]                           lease_break_callback+0x26/0x30
[  743.160861][T15723]                           __break_lease+0x753/0x1890
[  743.167693][T15723]                           do_dentry_open+0xd43/0x1960
[  743.174612][T15723]                           vfs_open+0x3b/0x370
[  743.180841][T15723]                           path_openat+0x2caf/0x35d0
[  743.187586][T15723]                           do_filp_open+0x284/0x4e0
[  743.194243][T15723]                           do_sys_openat2+0x12b/0x1d0
[  743.201078][T15723]                           __x64_sys_openat+0x249/0x2a0
[  743.208086][T15723]                           do_syscall_64+0xf3/0x230
[  743.214746][T15723]                           entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  743.222794][T15723]   }
[  743.225372][T15723]   ... key      at: [<ffffffff9a7aece0>] fasync_insert_entry.__key+0x0/0x20
[  743.234131][T15723]   ... acquired at:
[  743.238000][T15723]    lock_acquire+0x116/0x2f0
[  743.242661][T15723]    _raw_read_lock_irqsave+0xe0/0x130
[  743.248100][T15723]    kill_fasync+0x199/0x4f0
[  743.252674][T15723]    evdev_pass_values+0x5a2/0xaf0
[  743.257769][T15723]    evdev_events+0x1c2/0x300
[  743.262429][T15723]    input_pass_values+0x268/0x890
[  743.267527][T15723]    input_event_dispose+0x31b/0x610
[  743.272796][T15723]    input_handle_event+0xa9c/0xc10
[  743.277981][T15723]    input_inject_event+0x221/0x360
[  743.283164][T15723]    evdev_write+0x653/0x7d0
[  743.287737][T15723]    vfs_write+0x2bc/0xd10
[  743.292137][T15723]    ksys_write+0x19d/0x2d0
[  743.296622][T15723]    do_syscall_64+0xf3/0x230
[  743.301285][T15723]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  743.307337][T15723] 
[  743.309647][T15723] -> (&f_owner->lock){....}-{3:3} {
[  743.314846][T15723]    INITIAL USE at:
[  743.318725][T15723]                    lock_acquire+0x116/0x2f0
[  743.324773][T15723]                    _raw_write_lock_irq+0xd3/0x120
[  743.331343][T15723]                    __f_setown+0x68/0x380
[  743.337136][T15723]                    generic_setlease+0xc62/0x1560
[  743.343621][T15723]                    fcntl_setlease+0x408/0x540
[  743.349846][T15723]                    do_fcntl+0x73b/0x1b20
[  743.355637][T15723]                    __se_sys_fcntl+0xd2/0x1e0
[  743.361770][T15723]                    do_syscall_64+0xf3/0x230
[  743.367821][T15723]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  743.375265][T15723]    INITIAL READ USE at:
[  743.379586][T15723]                         lock_acquire+0x116/0x2f0
[  743.386069][T15723]                         _raw_read_lock_irqsave+0xe0/0x130
[  743.393331][T15723]                         send_sigio+0x37/0x390
[  743.399553][T15723]                         dnotify_handle_event+0x153/0x460
[  743.406745][T15723]                         fsnotify+0x1f05/0x2310
[  743.413067][T15723]                         path_openat+0x16a2/0x35d0
[  743.419655][T15723]                         do_filp_open+0x284/0x4e0
[  743.426161][T15723]                         do_sys_openat2+0x12b/0x1d0
[  743.432831][T15723]                         __x64_sys_openat+0x249/0x2a0
[  743.439676][T15723]                         do_syscall_64+0xf3/0x230
[  743.446167][T15723]                         entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  743.454046][T15723]  }
[  743.456533][T15723]  ... key      at: [<ffffffff9a7aecc0>] file_f_owner_allocate.__key+0x0/0x20
[  743.465386][T15723]  ... acquired at:
[  743.469175][T15723]    lock_acquire+0x116/0x2f0
[  743.473836][T15723]    _raw_read_lock_irqsave+0xe0/0x130
[  743.479278][T15723]    send_sigio+0x37/0x390
[  743.483677][T15723]    kill_fasync+0x253/0x4f0
[  743.488250][T15723]    lease_break_callback+0x26/0x30
[  743.493434][T15723]    __break_lease+0x753/0x1890
[  743.498268][T15723]    do_dentry_open+0xd43/0x1960
[  743.503193][T15723]    vfs_open+0x3b/0x370
[  743.507423][T15723]    path_openat+0x2caf/0x35d0
[  743.512168][T15723]    do_filp_open+0x284/0x4e0
[  743.516828][T15723]    do_sys_openat2+0x12b/0x1d0
[  743.521663][T15723]    __x64_sys_openat+0x249/0x2a0
[  743.526676][T15723]    do_syscall_64+0xf3/0x230
[  743.531343][T15723]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  743.537402][T15723] 
[  743.539707][T15723] 
[  743.539707][T15723] the dependencies between the lock to be acquired
[  743.539716][T15723]  and SOFTIRQ-irq-unsafe lock:
[  743.553193][T15723] -> (tasklist_lock){.+.+}-{3:3} {
[  743.558311][T15723]    HARDIRQ-ON-R at:
[  743.562275][T15723]                     lock_acquire+0x116/0x2f0
[  743.568421][T15723]                     _raw_read_lock+0x36/0x50
[  743.574563][T15723]                     __do_wait+0x132/0x850
[  743.580444][T15723]                     do_wait+0x1fe/0x510
[  743.586149][T15723]                     kernel_wait+0xeb/0x240
[  743.592112][T15723]                     call_usermodehelper_exec_work+0xbd/0x230
[  743.599638][T15723]                     process_scheduled_works+0xac3/0x18e0
[  743.606818][T15723]                     worker_thread+0x870/0xd50
[  743.613041][T15723]                     kthread+0x7b7/0x940
[  743.618745][T15723]                     ret_from_fork+0x4b/0x80
[  743.624794][T15723]                     ret_from_fork_asm+0x1a/0x30
[  743.631192][T15723]    SOFTIRQ-ON-R at:
[  743.635158][T15723]                     lock_acquire+0x116/0x2f0
[  743.641295][T15723]                     _raw_read_lock+0x36/0x50
[  743.647431][T15723]                     __do_wait+0x132/0x850
[  743.653310][T15723]                     do_wait+0x1fe/0x510
[  743.659032][T15723]                     kernel_wait+0xeb/0x240
[  743.665020][T15723]                     call_usermodehelper_exec_work+0xbd/0x230
[  743.672582][T15723]                     process_scheduled_works+0xac3/0x18e0
[  743.679773][T15723]                     worker_thread+0x870/0xd50
[  743.686003][T15723]                     kthread+0x7b7/0x940
[  743.691711][T15723]                     ret_from_fork+0x4b/0x80
[  743.697763][T15723]                     ret_from_fork_asm+0x1a/0x30
[  743.704260][T15723]    INITIAL USE at:
[  743.708143][T15723]                    lock_acquire+0x116/0x2f0
[  743.714195][T15723]                    _raw_write_lock_irq+0xd3/0x120
[  743.720777][T15723]                    copy_process+0x221b/0x3d10
[  743.727006][T15723]                    kernel_clone+0x242/0x930
[  743.733058][T15723]                    user_mode_thread+0x148/0x1c0
[  743.739457][T15723]                    rest_init+0x23/0x300
[  743.745166][T15723]                    start_kernel+0x484/0x510
[  743.751215][T15723]                    x86_64_start_reservations+0x2a/0x30
[  743.758229][T15723]                    x86_64_start_kernel+0x66/0x70
[  743.764721][T15723]                    common_startup_64+0x13e/0x147
[  743.771209][T15723]    INITIAL READ USE at:
[  743.775526][T15723]                         lock_acquire+0x116/0x2f0
[  743.782012][T15723]                         _raw_read_lock+0x36/0x50
[  743.788498][T15723]                         __do_wait+0x132/0x850
[  743.794723][T15723]                         do_wait+0x1fe/0x510
[  743.800773][T15723]                         kernel_wait+0xeb/0x240
[  743.807092][T15723]                         call_usermodehelper_exec_work+0xbd/0x230
[  743.814964][T15723]                         process_scheduled_works+0xac3/0x18e0
[  743.822491][T15723]                         worker_thread+0x870/0xd50
[  743.829067][T15723]                         kthread+0x7b7/0x940
[  743.835124][T15723]                         ret_from_fork+0x4b/0x80
[  743.841524][T15723]                         ret_from_fork_asm+0x1a/0x30
[  743.848290][T15723]  }
[  743.850770][T15723]  ... key      at: [<ffffffff8ea0c058>] tasklist_lock+0x18/0x40
[  743.858480][T15723]  ... acquired at:
[  743.862265][T15723]    lock_acquire+0x116/0x2f0
[  743.866927][T15723]    _raw_read_lock+0x36/0x50
[  743.871585][T15723]    send_sigurg+0x141/0x430
[  743.876157][T15723]    sk_send_sigurg+0x6e/0x2f0
[  743.880908][T15723]    queue_oob+0x4b2/0x650
[  743.885311][T15723]    unix_stream_sendmsg+0xd47/0x1000
[  743.890669][T15723]    __sock_sendmsg+0x221/0x270
[  743.895505][T15723]    ____sys_sendmsg+0x523/0x860
[  743.900427][T15723]    __sys_sendmsg+0x271/0x360
[  743.905175][T15723]    do_syscall_64+0xf3/0x230
[  743.909835][T15723]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  743.915885][T15723] 
[  743.918190][T15723] 
[  743.918190][T15723] stack backtrace:
[  743.924064][T15723] CPU: 1 UID: 0 PID: 15723 Comm: syz.2.2915 Not tainted 6.15.0-rc1-syzkaller #0 PREEMPT(full) 
[  743.924081][T15723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  743.924090][T15723] Call Trace:
[  743.924097][T15723]  <TASK>
[  743.924104][T15723]  dump_stack_lvl+0x241/0x360
[  743.924126][T15723]  ? __pfx_dump_stack_lvl+0x10/0x10
[  743.924143][T15723]  ? __pfx__printk+0x10/0x10
[  743.924163][T15723]  validate_chain+0x22bb/0x24e0
[  743.924187][T15723]  __lock_acquire+0xad5/0xd80
[  743.924203][T15723]  lock_acquire+0x116/0x2f0
[  743.924216][T15723]  ? send_sigurg+0x141/0x430
[  743.924235][T15723]  ? do_raw_spin_lock+0x151/0x370
[  743.924254][T15723]  _raw_read_lock+0x36/0x50
[  743.924267][T15723]  ? send_sigurg+0x141/0x430
[  743.924279][T15723]  send_sigurg+0x141/0x430
[  743.924291][T15723]  ? do_raw_spin_unlock+0x13c/0x8b0
[  743.924310][T15723]  sk_send_sigurg+0x6e/0x2f0
[  743.924326][T15723]  queue_oob+0x4b2/0x650
[  743.924345][T15723]  ? __pfx_queue_oob+0x10/0x10
[  743.924364][T15723]  unix_stream_sendmsg+0xd47/0x1000
[  743.924383][T15723]  ? aa_sk_perm+0x96f/0xac0
[  743.924401][T15723]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  743.924418][T15723]  ? __import_iovec+0x585/0x830
[  743.924436][T15723]  ? aa_sock_msg_perm+0x91/0x160
[  743.924454][T15723]  ? __pfx_unix_stream_sendmsg+0x10/0x10
[  743.924469][T15723]  __sock_sendmsg+0x221/0x270
[  743.924488][T15723]  ____sys_sendmsg+0x523/0x860
[  743.924505][T15723]  ? __pfx_____sys_sendmsg+0x10/0x10
[  743.924517][T15723]  ? __fget_files+0x2a/0x420
[  743.924530][T15723]  ? __fget_files+0x2a/0x420
[  743.924544][T15723]  __sys_sendmsg+0x271/0x360
[  743.924559][T15723]  ? __pfx___sys_sendmsg+0x10/0x10
[  743.924575][T15723]  ? do_fcntl+0x125f/0x1b20
[  743.924600][T15723]  ? do_syscall_64+0xb6/0x230
[  743.924616][T15723]  do_syscall_64+0xf3/0x230
[  743.924631][T15723]  ? clear_bhb_loop+0x45/0xa0
[  743.924646][T15723]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  743.924659][T15723] RIP: 0033:0x7f2fb558d169
[  743.924673][T15723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  743.924685][T15723] RSP: 002b:00007f2fb63be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  743.924700][T15723] RAX: ffffffffffffffda RBX: 00007f2fb57a5fa0 RCX: 00007f2fb558d169
[  743.924711][T15723] RDX: 00000000240408c1 RSI: 0000200000000080 RDI: 0000000000000009
[  743.924720][T15723] RBP: 00007f2fb560e2a0 R08: 0000000000000000 R09: 0000000000000000
[  743.924729][T15723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  743.924738][T15723] R13: 0000000000000000 R14: 00007f2fb57a5fa0 R15: 00007f2fb58cfa28
[  743.924752][T15723]  </TASK>
[  744.281393][ T5883] usb 6-1: USB disconnect, device number 5
[  744.339951][T15713] veth1_vlan: left allmulticast mode
[  744.349454][T15713] @: left allmulticast mode
[  744.354185][T15713] vlan1: left allmulticast mode
[  744.362812][T15713] macvlan0: left allmulticast mode
[  744.369521][T15713] macvlan1: left allmulticast mode
[  744.374813][T15713] ipvlan0: left allmulticast mode
[  744.381517][T15713] ipvlan1: left allmulticast mode
[  744.386899][T15713] veth0_vlan: left allmulticast mode
[  744.394765][T15713] veth1_macvtap: left allmulticast mode
[  744.400728][T15713] veth0_macvtap: left allmulticast mode
[  744.407923][T15713] macvtap0: left allmulticast mode
[  744.413295][T15713] macsec0: left allmulticast mode
[  744.418775][T15713] geneve0: left allmulticast mode
[  744.424036][T15713] geneve1: left allmulticast mode
[  744.429779][T15713] netdevsim netdevsim4 netdevsim1: left allmulticast mode
[  744.440618][T15713] netdevsim netdevsim4 netdevsim2: left allmulticast mode
[  744.448155][T15713] netdevsim netdevsim4 netdevsim3: left allmulticast mode
[  744.455496][T15713] bridge1: left allmulticast mode
[  744.460723][T15713] bridge2: left allmulticast mode
[  744.480175][T15713] bridge3: left allmulticast mode
[  744.486523][T15713] erspan1: left allmulticast mode
[  744.500745][T15713] veth2: left allmulticast mode
[  744.506934][T15713] veth3: left allmulticast mode
[  744.512170][T15713] ip6gretap1: left allmulticast mode
[  744.519328][T15713] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  744.530884][T15713] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  744.540930][T15713] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  744.551589][T15713] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  744.562540][T15713] geneve2: left promiscuous mode
[  744.568325][T15713] geneve2: left allmulticast mode
[  744.579384][T15713] bond2: left promiscuous mode
[  744.584315][T15713] veth5: left promiscuous mode
[  744.622059][T15716] 8021q: adding VLAN 0 to HW filter on device bond0
[  744.631338][T15716] 8021q: adding VLAN 0 to HW filter on device team0
[  744.642850][T15716] chnl_net:chnl_net_open(): err: Unable to register and open device, Err:-19
[  744.652800][T15716] caif:caif_disconnect_client(): nothing to disconnect
[  744.736980][T10886] usb 1-1: new high-speed USB device number 124 using dummy_hcd
[  744.745303][T15716] chnl_net:chnl_flowctrl_cb(): NET flowctrl func called flow: CLOSE/DEINIT
[  744.754491][T15716] chnl_net:chnl_net_open(): state disconnected
[  744.761848][T15716] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  744.807334][ T5904] usb 4-1: unable to get BOS descriptor or descriptor too short
[  744.834554][ T5904] usb 4-1: unable to read config index 0 descriptor/start: -71
[  744.847611][ T5904] usb 4-1: can't read configurations, error -71
[  744.915281][T10886] usb 1-1: Using ep0 maxpacket: 8
[  744.925011][T10886] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  744.936076][T10886] usb 1-1: config 1 has an invalid descriptor of length 217, skipping remainder of the config
[  744.948880][T10886] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  744.960102][T10886] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  744.971112][T10886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  744.980252][T10886] usb 1-1: Product: Ў
[  744.984391][T10886] usb 1-1: Manufacturer: 氖禸茋狾ꪺᳵ六佼瀒䑂⌄푋녔챗韐守覔䇹뀅ꡰ놅붲⚭밂⁤饢⇁攊蜇ᗫ펊䑳⬠垐뮭椧墥鹝⮤鋸ᨘ袴赾뺜饖꿣賖雖ᴸ螙殝⑎㬥㋵劁年蠺ꊵ㹗ὡꭔ⅃劌⥦ꭦ輂亟䷿환椿ꇷⶠᄛ汍
[  745.009581][    C1] vkms_vblank_simulate: vblank timer overrun
[  745.019195][T10886] usb 1-1: SerialNumber: 뽅扷溧煽ㇿ쀲䄪䘹㥑ꑭ툞쨑犺蚕꼽薐隲ᚯ쫁띲꒧삜ݜ촽滐䷄鈎쎣᷐⸑뺨倫鍿褅ꅀ脳ꉪ訯츔烙㕼녰ᥦ뗣簦整䰹쒠ꦹ岬ҩﭝ렯떋ᷓ㾉㍣ʂ劗鶝渿⠕ᰐ
[  745.041508][    C1] vkms_vblank_simulate: vblank timer overrun
[  745.262557][T10886] usb 1-1: 0:2 : does not exist
[  745.273166][T10886] usb 1-1: USB disconnect, device number 124
[  745.290478][ T5928] udevd[5928]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  747.277635][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  747.283939][ T1296] ieee802154 phy1 wpan1: encryption failed: -22