last executing test programs:

22.700388408s ago: executing program 2 (id=1968):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x4082c1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8904, 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x7101})
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r5 = accept4(r4, 0x0, 0x0, 0x0)
keyctl$clear(0x7, 0xfffffffffffffffc)
sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x43c, 0x64, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xfff1}, {0xc, 0xe}}, [@f_rsvp6={{0xa}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x85, 0x8, 0x4, 0x9, 0x4, 0x9, 0xcf, 0x775, 0xfffffffa, 0x3, 0xa2, 0x4, 0x4, 0x7fff, 0x3, 0xf, 0x4, 0x3, 0x6, 0x2, 0x8, 0x7, 0x6, 0xffffffff, 0x9, 0x78, 0x1, 0x2, 0x4, 0x1, 0xfffffee8, 0x5, 0x9, 0xa, 0x5, 0x8000, 0xd9, 0x0, 0x16, 0x0, 0x8, 0xfffffffa, 0x1ff, 0x5, 0x3ff, 0x7, 0x0, 0x5, 0xfffffff7, 0x8, 0x50ea, 0x6, 0x8001, 0x9, 0xb0e0, 0xf, 0x5, 0x8, 0x3, 0x0, 0x4, 0x5b23, 0x5, 0x8, 0x2, 0xee, 0x7fffffff, 0x7fffffff, 0x3, 0x172, 0x5ae27a20, 0x5, 0x6, 0x4, 0x200, 0x1ff, 0x3, 0x400, 0xe6b3, 0xd171, 0x6, 0x1ff, 0x7, 0x699213b0, 0x9, 0xa, 0x12, 0x3, 0x4, 0x0, 0x100, 0x5, 0x6793, 0x0, 0x1, 0xfffffffa, 0x9, 0x80000000, 0x7, 0x5, 0x0, 0x80000000, 0x400, 0x7, 0x7, 0x5, 0x9, 0x6, 0x9, 0x0, 0x1, 0x5, 0x2, 0x2, 0x2, 0x7ff, 0x40, 0x7f, 0x5fece1ea, 0xbf7, 0x8, 0x78, 0xe, 0x80000000, 0x6, 0x8, 0x5, 0xe, 0x5, 0x200, 0x4, 0x4, 0x0, 0x0, 0x1, 0x3, 0xb, 0x70, 0x2, 0x1, 0x9, 0x1800000, 0x9, 0xbff, 0x4, 0x6, 0x800, 0x7, 0x5, 0x3, 0x9, 0x6, 0x0, 0x2, 0x6, 0x800, 0x3ff, 0x9, 0x3, 0xcc, 0xc60, 0x3, 0x8, 0x4, 0x1, 0x0, 0x7, 0x2, 0x6, 0xc, 0x4, 0x32, 0x2, 0x8, 0x1000, 0x2, 0x4, 0x4, 0x2, 0xffff, 0xb37, 0x7fff, 0xbec, 0x8, 0x5, 0x1, 0x5, 0x0, 0x1, 0xffff, 0x7f, 0x3, 0x94f, 0xc91, 0x9, 0x3, 0x2, 0xd46, 0xf, 0x200, 0x0, 0x8, 0x7fffffff, 0x0, 0x8, 0x2, 0xe6, 0xb, 0x18000000, 0x4, 0x5, 0xd756, 0x6, 0x3, 0x800, 0xd3, 0x2, 0x6, 0x9, 0x4, 0x7, 0x5, 0xaec, 0x100, 0x0, 0xfffffffb, 0x40, 0xfffffffe, 0x3, 0xa, 0x7f, 0x1, 0x9c, 0x400, 0x5, 0x8000, 0x8, 0x8, 0x9, 0x6, 0xffffff7f, 0xee2b, 0x7, 0xeaf, 0x3, 0x401, 0x7, 0x7f, 0x5f, 0x1000, 0x7, 0x9, 0x7, 0x8001, 0x9, 0x3]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x40881)
recvmmsg(r5, &(0x7f0000006fc0)=[{{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000d40)=""/13, 0xd}, {&(0x7f0000000d80)=""/247, 0xf7}], 0x2}, 0x3}], 0x1, 0x1, 0x0)
r6 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="f4", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x2ce9}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x9, 0x2ce8}, 0x8)
recvmsg(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001580)=""/4090, 0xffa}], 0x1}, 0x0)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, 0x0)
r7 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r8, 0x541b, 0x0)

20.046765111s ago: executing program 3 (id=1971):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r1, 0x0, 0xffdd)
syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x63, @loopback, 0x7}, 0x1c)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00')
preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r7, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast1}}, 0xa, 0x0, 0xdd5, 0x7ff, 0x38fa8b00d923ddd5}, 0x9c)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0)
pwritev(r9, &(0x7f00000000c0)=[{&(0x7f0000000080)="e756d337a1129afc310be63dea375cc551177c82b985e06e0a82e6a0ac24510aef6adbe5adbce172d671cf", 0x2b}, {&(0x7f0000000140)="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", 0x1000}], 0x2, 0x8, 0x1)
write$vga_arbiter(r9, &(0x7f0000000100)=@other={'decodes', ' ', 'io+mem'}, 0xf)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x5, 0x0, 0x0, {0x0, 0x4e22, [0x0, 0xffffffff], [0x0, 0x0, 0xfffffffd], 0x0, [0x1, 0x3]}, 0x0, 0xfffffffe}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x0)

19.979749596s ago: executing program 1 (id=1972):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSLCKTRMIOS(r1, 0x5453, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1})
ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="c3428136aafe27ee024c7b7ab3d1c5a3e9ad1b394f1041625bca3965becc45c80e8456dc82540d7ec69091d61c8378d6f35bdff1504e82679090e9846809c43d8174a8c3a37a1f180578e08fb9f3ac7683c788bd58007e546571951c"])
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40011}, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, 0x0, 0x0, 0x0)
recvmmsg(r5, 0x0, 0x0, 0x2, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r7 = openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0xffffff3e)
timer_create(0x3, 0x0, &(0x7f0000000100))
ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000000300)=""/240)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0)
ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007})

17.371339173s ago: executing program 2 (id=1976):
syz_emit_ethernet(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="b80000000001050500000000000000000a0000013c00028057fd018014000300fe80000000000000000000000000003814000400000000000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000000000000000000000000114000400fe8000000000000000000000000000aa0800074000000001240006800c000380060001004e21000014004400fe880000000000000000000000000001"], 0xb8}}, 0x0)
openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
r2 = socket(0x200000000000011, 0x2, 0x0)
openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x4, 0x0, 0x800, 0x0, 0x10, 0x0, 0x1}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'caif0\x00'})
r3 = socket(0x10, 0x803, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9})
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, 'gretap0\x00'}}, 0x1e)
ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @remote, 'caif0\x00'}})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet6_buf(r2, 0x29, 0x3d, &(0x7f00000002c0)=""/132, &(0x7f00000000c0)=0x84)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @u32=0xffff}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)

15.745647643s ago: executing program 1 (id=1977):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioprio_set$pid(0x2, 0x0, 0x6000)
syz_clone(0x80280, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0xe, &(0x7f00000001c0))
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x14000180, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x3, 0x9, 0x8, 0x6, 0x3}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000000)={r5, 0x8}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000400)={r5, 0x6f1}, &(0x7f0000000440)=0x8)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x2, &(0x7f0000000200)=<r7=>0x0)
io_submit(r7, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x80000000}])
io_getevents(r7, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0)
io_submit(r7, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r6, 0x0}])
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040))
r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x8, 0x530, 0xc, 0xfffffffffffffffd, 0x59c})
socket$kcm(0x10, 0x2, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c0000001800010025bd7000000000000a00000000030006000000001400070000000000000000000000000000000001140002"], 0x6c}}, 0x0)

15.347343742s ago: executing program 4 (id=1978):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0"], 0x40}}, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41)
r0 = syz_open_dev$evdev(0x0, 0x3, 0x822b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x918)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
eventfd2(0x5, 0x801)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000001c0)=@v={0x93, 0x7, 0x80, 0x9, @generic=0x1, 0x2, 0x8})
r2 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_MKDIRAT={0x25, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}})
io_uring_enter(r2, 0x7277, 0x0, 0x28, 0x0, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a80)=@o_path={&(0x7f0000000a40)='./file0\x00', 0x0, 0x4008}, 0x18)
syz_clone3(&(0x7f0000000480)={0x80810200, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280), {0x17}, &(0x7f0000000340)=""/121, 0x79, &(0x7f0000000580)=""/4096, &(0x7f00000003c0)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x58)
r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=<r8=>0x0, &(0x7f0000000040)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}})
io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0)

14.757540534s ago: executing program 3 (id=1979):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
syz_open_dev$vbi(0x0, 0x0, 0x2)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000100))
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x9, 0x8, 0x0, 0x3}, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000200), 0x0)
r2 = io_uring_setup(0x2ef1, &(0x7f0000000000)={0x0, 0x5712, 0x10000, 0x0, 0x1})
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000030603000000000000000000050037f5670421a6967993000000190a32abb5a01593fd0000000500e93f07"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x8051)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000002c0)={0x79, 0x0, 0x100000})
close_range(r2, r3, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, 0x0)
r8 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x8a1d, 0x1, 0x0, 0x10000, 0x0, r1}, &(0x7f0000000380)=<r9=>0x0, &(0x7f0000000280)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r11 = socket$can_bcm(0x1d, 0x2, 0x2)
syz_io_uring_submit(r9, r10, &(0x7f0000000300)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r11, 0x0, 0x0})
io_uring_enter(r8, 0x3f70, 0x0, 0x0, 0x0, 0x0)
truncate(&(0x7f0000000040)='./file0\x00', 0x0)

14.756712019s ago: executing program 4 (id=1980):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1000, &(0x7f0000000000))
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb8, &(0x7f0000000000), 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x4}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000002060102000000000000000082fc00000000140007a700000640000000030800080c000000300500010006000000050005000a00000013000300686173683a6e65742c696661636500000900020073797a3100000000050004000300"], 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
syz_open_dev$video(0x0, 0xa7, 0x0)
r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0)
write$USERIO_CMD_REGISTER(r8, &(0x7f0000000100), 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_KEY(r1, 0x0, 0x4004)
write$USERIO_CMD_SEND_INTERRUPT(r8, &(0x7f00000000c0)={0x2, 0xfa}, 0x2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e65766500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x2c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, 0x500}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000)

14.564418026s ago: executing program 0 (id=1981):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(0xffffffffffffffff, 0x28, 0x1, &(0x7f00000001c0), 0x8)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r1})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f00000000c0)={0x18, r1})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
socket$netlink(0x10, 0x3, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
landlock_restrict_self(r6, 0x0)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x4, 0x3}, &(0x7f0000000200)=0x8)
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8000000)
syz_open_procfs(0xffffffffffffffff, 0x0)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
unshare(0x20020480)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r9=>0x0})
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x2, 0x4, 0x3a0, 0xffffffff, 0xd0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x7, 0x45}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@srh={{0x30}}, @common=@unspec=@mark={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400)
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x2c, r8, 0x5, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x40048}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000056fffffff00000000200000005700e0ff000002009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
signalfd(0xffffffffffffffff, 0x0, 0x0)

13.978799892s ago: executing program 2 (id=1982):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
fgetxattr(r2, 0x0, &(0x7f0000000040)=""/111, 0x6f)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$setregs(0x1a, r3, 0xba, &(0x7f0000000040))
sched_setattr(r3, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x22000, 0x0)
socket$unix(0x1, 0x1, 0x0)
r4 = io_uring_setup(0x5bde, &(0x7f0000000380)={0x0, 0x5f41, 0x80})
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c)
ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f00000001c0))
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000200000008001240000000000500050002000000050004000000000014000300686173683a69702c706f72742c697000"], 0x60}}, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
r6 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r6, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
recvmsg$kcm(r6, &(0x7f0000000240)={0x0, 0xfffffd02, 0x0, 0x0, &(0x7f0000000140)=""/55, 0x37}, 0x202)
write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)={'#! ', './file0'}, 0xb)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000540)={'syz0\x00', {0x6, 0x3, 0xb, 0x5}, 0x50, [0xfa0, 0xc, 0x401, 0x8e8, 0x7, 0x3, 0x5, 0x5, 0x5, 0x10001, 0x2, 0x0, 0x1, 0x3, 0x707, 0x2, 0x7, 0xffffffff, 0x0, 0xe82, 0x5, 0x4, 0xc959, 0x9, 0x9, 0x100, 0x0, 0x7, 0xffff0000, 0x66, 0xa, 0x1ff, 0x1, 0x5b, 0x7, 0x2, 0x2, 0x7fff, 0x6, 0x1000, 0x5, 0x1, 0x1, 0xfffdff81, 0x3, 0x6, 0x3, 0x6, 0x9, 0x4, 0xe5, 0x3, 0x7, 0xfffffe00, 0xffffffff, 0x3bf, 0x5, 0x2, 0xa, 0x1, 0xa, 0x1, 0x7f, 0x8], [0x0, 0x80000000, 0x0, 0x5, 0xc33, 0x516, 0x0, 0x4, 0x8000, 0x3, 0x5, 0x7, 0x227, 0xfffffff0, 0x1, 0x92f, 0xccc4, 0xdf, 0x5, 0x4, 0x6, 0x3, 0x3, 0x3, 0xff, 0x5, 0xfffffff9, 0x3, 0x5, 0x6, 0x4, 0xb0d, 0x101, 0x1, 0x6, 0x6, 0x2f, 0x6c7, 0x0, 0x1, 0xf, 0x4, 0xffffff92, 0xa4, 0x3, 0x8, 0x5, 0x6, 0x0, 0x5, 0x935, 0x0, 0x2, 0x800000, 0x3, 0x8, 0x8, 0x2, 0x8001, 0x6, 0x3, 0x6, 0x5, 0xd50], [0x6, 0x3, 0x3, 0xe, 0x9, 0x7, 0x8, 0xfffffffc, 0x0, 0x4, 0x1000, 0x1, 0xffffff21, 0x4, 0x2, 0x62, 0x5, 0x8, 0x0, 0x0, 0x1ff, 0x3, 0x8, 0x5, 0x3, 0xcd3, 0x7, 0x9, 0x5, 0x8, 0x2, 0x40, 0x13, 0x727, 0x7, 0x6, 0x6, 0x7, 0x1, 0x52, 0xc, 0x1, 0x1, 0x4180, 0x1ff, 0x7f, 0x7fffffff, 0x9, 0x8, 0xfffffffe, 0x1, 0x4, 0x4, 0x0, 0xd, 0x11, 0x8, 0x2, 0x7, 0x101, 0x3658f834, 0x2, 0x400, 0x1], [0x2, 0x101, 0x96, 0x8, 0x9, 0x1, 0x7, 0x7, 0xdd, 0x3, 0x5, 0x5, 0x10000, 0x7, 0x8, 0x7f, 0x4, 0x1, 0xa07, 0xd, 0x6, 0x4a88, 0x6, 0x1009aa2, 0x6, 0x2, 0x0, 0x372e, 0xffffffff, 0x200, 0x7, 0x7fff, 0x400, 0x9, 0x80, 0x95, 0x0, 0x7, 0x3, 0x3ff, 0x6, 0xfffffffb, 0x7f, 0x3ff, 0x6, 0xe, 0x10, 0x48, 0x10000, 0x5, 0x7, 0x1, 0x800, 0x0, 0x1, 0x7f, 0xa, 0x8, 0x3, 0x7, 0x401, 0x1, 0x6, 0x2deedef9]}, 0x45c)

12.004866866s ago: executing program 3 (id=1983):
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x0, 0x6, 0x1, 0x3}, 0x0)
syz_open_dev$media(&(0x7f0000000140), 0xfffffffffffffff7, 0x201240)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20)
syz_emit_ethernet(0x3e, &(0x7f0000001200)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x8, 0x0, 0x0, @local, @local, {[@dstopts]}}}}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x10\x00'}]}, 0x1c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffa, '\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r4, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x8, 0x0, 0x0}}, 0x10)
lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x3}, [{0x2, 0x1}], {}, [], {0x10, 0x5}}, 0x2c, 0x0)
r5 = open(&(0x7f00000001c0)='./cgroup\x00', 0x0, 0x157)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_clone3(&(0x7f0000000340)={0x3a0000080, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58)
write$proc_mixer(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="4449474954414c3120274d6963272030303030303030303030303030303030303030300a4449474954414c320a4449474954414c3320274d617374657220506c61796261636b20566f6c756d6527203030303030da01000030303030303030303030300a4d49430a50434d0a4449474954414c320a4c494e45320a494d4958202743442043617074757265272030303030303030303030303030303030303030300a"], 0xa2)

11.819608657s ago: executing program 1 (id=1984):
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10)
sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0)
r4 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000900)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x258a, 0x36, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f00000002c0)={0x2c, &(0x7f0000000080)={0x40, 0x23, 0x2, {0x2, 0x10}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r4, &(0x7f0000000280)={0x2c, &(0x7f0000000040)={0x40, 0x6, 0x1b, {0x1b, 0x8, "217090948f3a5191fd0aef67e0036a0f6e028ec523a0d96464"}}, &(0x7f0000000080)={0x0, 0x3, 0x7d, @string={0x7d, 0x3, "5e87e0304d90b958a89bafa822be88d230c2aa76c9acfc3a6b1d6f0f61ae127bc3ca8c63e62028895abe0ebd18016b3dd39922545b1b1cc3797f8018a567dade6016acbba1cb2183f27ecfb24a2eaa9103334653a65ca113db24489ef14b1bd13ce6cafc11a525a12df5a5cde705348402a7293f6492c42efd4e51"}}, &(0x7f0000000140)={0x0, 0xf, 0x34, {0x5, 0xf, 0x34, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "3db3aec0e198d115feb932543126d6d8"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "4d2368a3465e3ecc530160c477b1c5d6"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x7, 0xc}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xf4, 0x3, 0x5, 0x7, "2f26cc38", "148f2cc4"}}, &(0x7f0000000200)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x3, 0x0, 0x9e, 0xff, 0x1, 0x3}}}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
io_uring_setup(0x7bca, &(0x7f0000000080)={0x0, 0xfffffffe, 0x0, 0x10800000, 0xbc})
mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_EXPBUF(r5, 0xc0405610, &(0x7f0000000040)={0xe})
r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x10101)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000000)
writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0)

11.576423987s ago: executing program 4 (id=1985):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000080)={@loopback={0xfec0ffff00000000}, @private1, @local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x280})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
r3 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10)
write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
socket(0x2, 0x80805, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
pipe2$watch_queue(0x0, 0x80)
add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe)
preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x100000000000000d, 0x0, 0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0})
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16)
mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0)
mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil)

11.323012742s ago: executing program 0 (id=1986):
set_mempolicy(0x2, 0x0, 0xf5)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000001c0)=';', 0x1})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r2, 0xc01064bd, 0x0)
r3 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000019080)='hrtimer_expire_entry\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18)
ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000140)={0x7, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}]})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000140000000000000a00"/83], 0x54}}, 0x0)
ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x5, 0x0, 0xfefffffffffffffe, 0x1}, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00')
pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x64, 0x4, 0x3b0, 0xffffffff, 0x128, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}, @common=@ah={{0x30}, {[], 0x0, 0x0, 0x5}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], [], 'wlan0\x00', 'wg0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, [], [], 'wg2\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410)
r7 = socket(0x1e, 0x4, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000480), 0x4)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000002000000000000a4c000000060a0b04000000000000000002000000200004801c000180090001006c617374000000000c00028008000140000000060900010073797a30000000000900020073797a320000000014000000110001c98c8254a599c1000000000000"], 0x74}}, 0x0)

10.313989628s ago: executing program 0 (id=1987):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x556, 0x2, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
openat$audio(0xffffff9c, 0x0, 0x402, 0x0)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r5 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r5, &(0x7f0000002200)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000480)={r7, 0x9}, 0xc)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000001c0)={r7, 0x6, 0x20, 0x4, 0xffffffff00000001}, &(0x7f0000000200)=0x18)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
migrate_pages(0x0, 0x8, &(0x7f0000000280)=0x9, &(0x7f00000003c0)=0x3)
sendmmsg$inet(r8, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)}, {&(0x7f0000000d40)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a4e", 0xe1}, {&(0x7f0000000b80)}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0)
sendto$inet(r8, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xff, 0x2, 0x0, 0x2}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x44080)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000)

9.654792217s ago: executing program 2 (id=1988):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r1 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = syz_io_uring_setup(0x235, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x1, 0x0, 0x0, r3}, 0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_io_uring_submit(0x0, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x718, 0x120, 0x2f8, 0x440, 0x510, 0x2f8, 0x670, 0x670, 0x670, 0x670, 0x670, 0x6, 0x0, {[{{@ipv6={@private2, @loopback, [0xff000000, 0xffffffff, 0xffffff00, 0xff000000], [0xff000000, 0xffffff00, 0x0, 0xffffff00], 'vlan1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x3, 0x3, 0x14}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x6, 0x7}}}, {{@ipv6={@remote, @local, [0x0, 0xffffffff], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x0, 0x4}, 0x0, 0x170, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@remote, [], @ipv6=@private1, [0xffffffff, 0xff000000, 0xffffffff], @ipv4=@multicast2, [0x0, 0xffffffff, 0xffffffff, 0xffffffff], @ipv4=@empty, [0x0, 0x0, 0xff000000, 0xff], 0x0, 0x0, 0x42, 0x4e22, 0x4e24, 0x4e20, 0x4e24, 0x0, 0x23ccf3e9fd2b5143}, 0x0, 0x80, 0x0, 0x4e20, 0x4e24, 0x4e23}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private2, 0x0, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xc}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x2]}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778)
prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='\xf4\xaa\\k[sC\xae\xd6\x98\x9bY\nI}\xd8\xcc9K\xd7Z+\\\xf8\xdb\x84\xee\xa9\f>\xe4\x81\x88\x90_\xd4\r\xb83\x9e\x13B3\xfe\xcf\xccm\xfdO2\xd7\xa0DD4\x1b*\xdd\xb6\xcf\xacr\xabF\f\xb5\x11Vkp\"\xb1\xa8\xf0\x8d\x00\x18}3utO\x1bQ<bJ[9\x19\xb1zWMLo\v\x84\xa6\x1d~\xa5\x9a\x8dn\xf2\xf0*\xe0MYva\xa6\x0f\xcb{\xcb\x9e\xab\x91\x9b\xb3`%\x11Q6\x8a\xc7\xca\f\xb0<\x01wLM\xc8\xea\xa7!\xf1\xdb9K\xed?\xda\x17\xba\xcfc,\x8f\xf6\xa6a0')
io_uring_enter(r4, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x0)
mmap(&(0x7f000003b000/0xf000)=nil, 0xf000, 0x1000006, 0x38011, r7, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x33}, 0x0, @in=@dev, 0x200, 0x0, 0x0, 0x7}}, 0xe8)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0)

8.98740537s ago: executing program 3 (id=1989):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r1, 0x0, 0xffdd)
syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x63, @loopback, 0x7}, 0x1c)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00')
preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r7, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast1}}, 0xa, 0x0, 0xdd5, 0x7ff, 0x38fa8b00d923ddd5}, 0x9c)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0)
pwritev(r9, &(0x7f00000000c0)=[{&(0x7f0000000080)="e756d337a1129afc310be63dea375cc551177c82b985e06e0a82e6a0ac24510aef6adbe5adbce172d671cf", 0x2b}, {&(0x7f0000000140)="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", 0x1000}], 0x2, 0x8, 0x1)
write$vga_arbiter(r9, &(0x7f0000000100)=@other={'decodes', ' ', 'io+mem'}, 0xf)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x5, 0x0, 0x0, {0x0, 0x4e22, [0x0, 0xffffffff], [0x0, 0x0, 0xfffffffd], 0x0, [0x1, 0x3]}, 0x0, 0xfffffffe}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x0)

8.327661139s ago: executing program 0 (id=1990):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0"], 0x40}}, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41)
r0 = syz_open_dev$evdev(0x0, 0x3, 0x822b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x918)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
eventfd2(0x5, 0x801)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000001c0)=@v={0x93, 0x7, 0x80, 0x9, @generic=0x1, 0x2, 0x8})
r2 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_MKDIRAT={0x25, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}})
io_uring_enter(r2, 0x7277, 0x0, 0x28, 0x0, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a80)=@o_path={&(0x7f0000000a40)='./file0\x00', 0x0, 0x4008}, 0x18)
syz_clone3(&(0x7f0000000480)={0x80810200, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280), {0x17}, &(0x7f0000000340)=""/121, 0x79, &(0x7f0000000580)=""/4096, &(0x7f00000003c0)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x58)
r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=<r8=>0x0, &(0x7f0000000040)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}})
io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0)

7.418213742s ago: executing program 1 (id=1991):
bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mknodat(0xffffffffffffffff, 0x0, 0x800, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x0, 0x6, 0x1, 0x3}, 0x0)
syz_open_dev$media(&(0x7f0000000140), 0xfffffffffffffff7, 0x201240)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20)
syz_emit_ethernet(0x3e, &(0x7f0000001200)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x8, 0x0, 0x0, @local, @local, {[@dstopts]}}}}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x10\x00'}]}, 0x1c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffa, '\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r4, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x8, 0x0, 0x0}}, 0x10)
lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x3}, [{0x2, 0x1}], {}, [], {0x10, 0x5}}, 0x2c, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x20, 0x13, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000044}, 0x90)
syz_clone3(&(0x7f0000000340)={0x3a0000080, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, 0x0}, 0x58)
write$proc_mixer(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="4449474954414c3120274d6963272030303030303030303030303030303030303030300a4449474954414c320a4449474954414c3320274d617374657220506c61796261636b20566f6c756d6527203030303030da01000030303030303030303030300a4d49430a50434d0a4449474954414c320a4c494e45320a494d4958202743442043617074757265272030303030303030303030303030303030303030300a"], 0xa2)

7.337201926s ago: executing program 0 (id=1992):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
unshare(0x68040200)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x80, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x9}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffff7}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x5}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x7}]}]}, 0x80}, 0x1, 0x0, 0x0, 0xc840}, 0x20000001)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
socket$nl_audit(0x10, 0x3, 0x9)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r4 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
r5 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
getpid()
getsockopt(r5, 0x200000000114, 0x2713, 0x0, &(0x7f00000000c0))
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0xfffffffd, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_INET6={0x4, 0x2d}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]})
close_range(r7, 0xffffffffffffffff, 0x0)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'ip6tnl0\x00', 0x3}, 0x18)

7.214302205s ago: executing program 4 (id=1993):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4401})
writev(r0, &(0x7f0000000280)=[{&(0x7f0000000080)="0bc3", 0x2}, {&(0x7f0000000240)="5cfb52", 0x3}], 0x2)
syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
syz_open_dev$vbi(0x0, 0x0, 0x2)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x66040, 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2)
r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0cc5605, 0x0)
ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000000c0)={0x5, 0x2, 0x1, "f7b817716daef7e53fa4f998da1907309f97630a33ea3b6bd13c74c37001fd36", 0x35315241})
bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58)
write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef00000000000000000800380001000400"], 0x78)
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a01020000000000000000000000001400000011000100000a00"/60], 0x3c}, 0x1, 0x1200}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', <r8=>0x0})
r9 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', r8, 0x7800, 0x7800, 0x0, 0xfffffffb, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x0, 0x0, 0x9, 0x4, 0x0, @remote, @multicast2}}}})

5.840239495s ago: executing program 2 (id=1994):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x10000000b4d, 0x9, 0x8, 0x0, 0x3}, 0x0)
r3 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000080)={r3})
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00')
preadv(r4, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1)
madvise(&(0x7f00005ce000/0x3000)=nil, 0x3000, 0xb)
pread64(r2, &(0x7f0000000400)=""/154, 0x9a, 0x51)
pipe2$watch_queue(0x0, 0x80)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'})
set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
keyctl$negate(0xd, 0x0, 0x3, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000000)
syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804175000000000000109022400010000c04009040000010300000009210900000122a00009058103"], 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc)
r6 = syz_open_dev$sndpcmp(&(0x7f0000007640), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_INFO(r6, 0x40084149, &(0x7f0000000000))

5.128739639s ago: executing program 3 (id=1995):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r1, 0x0, 0xffdd)
syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x63, @loopback, 0x7}, 0x1c)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00')
preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r7, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast1}}, 0xa, 0x0, 0xdd5, 0x7ff, 0x38fa8b00d923ddd5}, 0x9c)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0)
pwritev(r9, &(0x7f00000000c0)=[{&(0x7f0000000080)="e756d337a1129afc310be63dea375cc551177c82b985e06e0a82e6a0ac24510aef6adbe5adbce172d671cf", 0x2b}, {&(0x7f0000000140)="2fe223062b20b43055a9dafe4340c47124ecd08f52a0c029f0a905035f10e9372aff2c7d2157544591840dd6c552a01e4ba3451745e9f6acf1ab492ec553c0a3a346a7aeb4ddec32ccc729701914fced53fda22078fda3fd9e1b0af51b28313480732979e4cd1840fc633c288bce242d33d7e3f261d3fe0b171ef6fda9219a2027ef44ddc97cc419e3383a31b1f5267e9a7381a10983c6e302a04311986e02c10795068e88c0f4c9fd102ac1c8555325f987f841b93ff8d248e9ac7340b7a8fa442bcba46626f609784da08ea2f72f31248b565a48990caecab054389a205965e86545fb133b4f1f7ea299132f4c545563cbcbf34f964218687b441a95ac50897e8985b939e5dae4facf50de8dc32d59d10a310afe7b8bf72d502a517af97dd21e60950510c291c4636adef9dffd5651fc004395e886a814edcbd672cfbfc1d50e7a16d3d5d83075ef1362e9e087defb7a107af5edc02ac5ecbb720affdbb2032bd2e4c046a949cdce18d90e8ac4d4af14723e8ff94ab24a89fb576081d6d3ebdd8943e796aa3c1eddba172161d57e214a0602b3c039c29f2f523046ea2d899540a20d81dfa3d326696c5a5876044dcc625f2ac8d023502428346fea4f5bb0d82c75ffb0c91940a232793467989f7d0503ca85c5b241e12af8e838799581cb678a4362d4b34569cc312c518cffd9946da804158046a38a520c84ee7792193cc03b0851164a18a75ba265f0e13d3f4941052b7ceb8cc344a1ad231784e8165ba13a192d23d3740aa479b74e2730fd07cafd06b6683cb1d52cc09575c536ca34b2174e17bf18a20b8982f74dbd137be413dffee5f2b9829412e8c585319f2c0b0edd9e16a615a1f0806fc6b9b54ac44cd6effc61376107d33a76d41c381f73fcffaf41ef60e64e8f43ce96d21cb321f41e8f23a189d08d562ec927e8dd7522792268f2b4b790ad6c8e6758c34a5ae61adc93e3c3867f83a0714173627581a739ce408cd90f96e8634d88645dfbb97389e3b010676083c82558c12977dd8933bfa5f448a74f42775ac4623319ea6ebb0066db0ce56b577a296b6c753de9fb019b9c02ae939e413a6c88633746b7cde63e3547344a0b5542ebf0454fd93098e53a8d6dd1d0e21283ccbdef4eb1b97b1847802c917475bde022d455cef0e9478963ef304302caa38bd053ce5aa8a5118b1f987ee24167565aba7304c612e36a6305629c64b71ed893678fe138a412f4cc85dc190ea81521a1991ed09a1833afc8966b37850271f9f3cb37a455cdfb3675c4f8fff2d7d8e68f637c0ea509a2dc75f60399a6f77661010245422b10c864541df432e2e7a278bb73584ad962c2250dea46af78a40930c9506f8a1b81ec3a55574e417f1bd35a4832ed48e0c5ded28c5e666df4f8fe0ac0e60212d94bd9b308540aabf7fb68890416891792790317f7514009e98dc40e2ba092d8c7cdb4ee48cefefc2d7763c1915f95bcd32295127dbf6baa46e4132596e51e6a79b671cf16eb3e58f3968224f3adc5a628c8473a477fd1c48e6627ba26ac5401a65aefc2dcf60bf446c3496d2ededdd8bdd23bbf4d4b5aa1cff98b7ffeb65dd9f5a84f22b3a50b8d194f44e21d3515b2f9bd8c28506ec0f646327c892c4613d61fc24931b6939472eeee3e22ce1f8bcc191a04c56b28dc4616b2ef7bf219e6745b631c1ec089d6027e99b1f9f613ea0bc75db0f56f62fb924989fd43693ce31f038fac8672e4da4210af05100403c643a654a05f3655078f31df0222e98b01841bfd7800c6aaee8a0e7ec88b60efb02afab6c1fb2d2abcfc60ae8b15f5937de2dbddd4ea31d4e423cc6f0d48af9de2053a3d4f5c28170e8ad53d0d4b25dee8f91acfdb089b60707c12a668dc4aeea747e15740a48fbbdf860042d9f97fb810f8bf1237033aae5adda9fabea1e49219c93f9055f05e79f9b987e40484dab641141e759f22fe83928febdb4fce6aeefbacb22540355d4112dc5dfb62c7aeda256364b238a470d19b516abbef5cac019be1c60809d394a5c3d875b891caf322eee675bf2b8fe503a6be877d094a36661dac863ecd7f2323253bb99c71456085f523afda527d7b4c7b0a3b5eab9fdd870c7d38373e741dde1b5f4481a8f9db3ba71c11a28a16242e54f9660ac69285669aa78dbdd9eef6ca43948285dfca8ea632dc3bc31b1519215c9fe4022647884edd56449e03e2d577835dc7d5a0d6981e27fd872677a4b477588da6a898567e1227c8bff8a1676702ce647411b129c34d008093bb0b48f99967d68268ccde0f09cfa372c3292f547bb7436b6e08e942766ae097f47f9ebf5c752731eaa596e46f721536b4871ce1692ed973ff00e5b38858756324f556209b9a0573df20557574814d2cabed8023419529b7927616090103423cb6cbe6c99f99099bbe26c0a8d0faacb8b07e79da40a476b813fd0701943f1254d66181242fb03f8bfd7f8e7b7537eee03c02a3eb3c42c13cb7e8d7e5f05d2c3f8168f408b251094d83a477196708c1361568f53e01756bac5685b8ab6bdbf50aa9db9977cdccc22e347ed6dd78b2f93aebb88b7714b3a628e1468f836c6de1e6f12575c6afba940ccde6a4d95f62ce512886adfabb06896da9ca81e1809642c537f96712568ddce33d9c12187477fb3654b63873b596c7850d7ec1728debab8047ae5b04399f84b378b6b886257ca51de651a8b6cde74a653e36ca75cc698ce411bd237d52e64180dcdc4bd45ad03acca3c98412ff229a474cd99f0d856c405f63ae282e7e1f3e2375335aa922ca42d392a6295fc35921eda0430076eae5192157d37cfd6dcf905107e168f5fc40f238950bbec2360b0e3bedc52d69a0d99ba119e07374878dad7c2c1394d981d224344954fd9acb8ac6c2df4d979a074d7d8062a54df9e5bffde9b5a1bc1ec9186234d729ffbc9d08865f9f7ade5bd39b62d38d6934d7f31fef05d380231790e9a51824654354e20ffe15b4c6c1e0817b7371dc3eabdb4eb56d93343c50e87b2723009e26f03256eb1061c3072ab84a50b3be516ad059d0557acaab5407104fe42f4a832983d38896675a544f4ed6ae2203cb958b061f0e5b8df3fd94b4dd9c942885857925264bb75a5231059f98d5da64f5d7ecc21e79d6a402132be9a8dd28df04899202a4e6c28bad2c5f75d01403623753316685d4eb8a0b93372770e9ff1bcda974b4e62b47438f52ed94f14e71a3162eeb2c5a5c3b7eee5b423ba2eaed05468f9904b509b1453ff3431d95dcc30fdaff2f1e9c33d42684e89ff66894b4052effdc808d9d5c7810e7bca2505edc6d3896584d2e6ddc9383de2df55492c17c9ed63055701ab45ba7edab661475bc292781196ef6a5eb5c82b92ce029e942b189d9d17dac51ba62c319ece7bbc37131cddc389dbdfe181944e099e4a36b448b9e77dde2e50d767d5b103bd8737e31ca206ff9f0328d1ca23540f928ae397c742b514285c22698c937be7f763473df59607fed8b7bb3289a97ee431e1310d011b9ac0f5f78b4415bb280d59d769389a926b2e4963c436a760463e4e59a4db9214988fbe7336c1f51c9425eacf3d975e42d8acdf207cd6dc71f6b9dc1efc1893e47e0b3fe2c7cf683cbc7fa4fc00e2b4d69f4b7c883d448d4bb724dec3f601e97a181288ee2f654c2c7c8e915e14daed55d017cd9ed5d2ead80f14fb29e9150150244551b843a7b1780490c97962d2e63957f49a5dcfec73188bb8284e7e699f0727b7eb339806bae3cd051c6e77666c3142e27ca626c4ea41865d60ab1d425a609f6dcf53ac58477b8bebef4b83fcd181808acb4d504fc7b51dc3452685c2449ee86b34dd2418c3157fc02daaa29aced516afd1ed478942cfd730e68f25c97e0f8866f1fe266c3895d9e19fc6964c38f63237d682fcd2e0b070788e5ed5ac3d32c5036b71fd3abc4ca53b2bb93bd5085b6d58f1bf68ffa134f5ef63b498702fb69a6aff33dbe27bff9250b3696ca267e1534a2d1780221f997f7b0a32de9ee2fd6fbf75cae4560f5011ae81e0143c356ead3e7ae63cd806056feef5afee0697b7fd2b6630535a0bd006d86400110356743ee70af78c0b96a72c384ae81843374f22f84feaf8d430624ccd81760abf674f0a2991be60ea7f096dbc6ba5b9c7c95c2f0aeb568bee45e8bd40727688d415e3d62440a6217590855e6b413877abb6bef485d1cce8960a369fd4348c824864bca07f4a9f2be9e0eeb84dc2bc3ecdb35c723e7a96f8fda5846e95bca2c648d64bc30242c1efa80086af683bd67aef0620740056276a54b8a1c43dffb631e24e443264168453b76e005c47c60f510327cd6f85b51428e5832d1ced42baf29e1627a56322ba76658bfae3c441f4667dbdf2b25931b85b95ed37a6d942736b69214e2bb9234a019bc6559e600836bba640cdfe6ba1b1b821e49a2b4aae23474c496064cc4bd3072fcbf299e2f76028a4e7c47f6ec9c2c6f4485316d1345bcadd19c69aaf707d3f762ff7972b817787f4297f619307b113bd16fb880f1a7080971d9973fc99c12966c6450db87a5b8b9a243a2927ec845de2eda52617e4b41b5dd51eb39ee3a1a95bbe95eeb822b2f6215f8c649ba2e2a5e6cdade3d4bc4a12aaff064efed4a15bd34f2bd1cf40c9e510a965b99265ff2a37239c729eb3cfc35c7086ab3f5db6772219d67509547588867136bf67314aad16dcedc089e268aa1fd83e7d41730c9d6bb55a5e036c6874609d9e9e97614916af0b65ec739ae830af63f03a88ec3e9b4c565da02538181fa89bf651873b1074bde86b90ba29341bc3f1be26e01b1aa15966ea799f0f46a36702e3db540027c5832f6e534d4c640280864b0eac8649f4d69db7ce210402fabdda8986006a64d34ed64196191ba5b3bd62c6bddc89449919c276da8daf0887185f1ac4ea2cfd1b2546dd2d71b89b6ed20e6311242f689fe49a19dd60f00cf7429cf806f389dc75e9ce0b53603e3d725d6069a6064a13cd24e03b6a5f7a6601ebf72e013a45609fa1cbfc7c4435d9ae0b048f99fa389764bacc81f7b3c72b6b8a1b751c8d0c364c7158a9baa985e6cded3321b60a066d249e05853b933611366d7c5a7cf7d86bfa42e013f01aa622b15abc60a0d16940f12735aade184a15c736cfd7f080a0469353ee1a8bafdb79fa6dfcce5a781b8ed7e2ce44a356c97a3733916143dc043400348673c7cc59f1d4c99eb856fe0e768d517e03329531b2e1c07348a44054d1efd21e348100947f6c1c0bf632b95a6c00999474a1ae5fc75c048b51226f9e31768db3fdb188b0e654d088b3d710cd342ce727e0b024d1e13056a67dc1eaf6f66cd837b0eb11cccada111927977760c95295d15526e4e7b6219bdcd1fcbdb75dd0d410684a74dffb0d2f757b1aaafb7ed765f6d9a4f6afc173c2452da7768e967a426fe299ec67d2793098cf03f02ea5920b174761dd6c8c081d7997bd68ecac43f23bf969e7dd58bc3573cb4941a9344f396eb1d340d49b435ac065f306c0838814b3a83981d81d6247cd7b174e472778ad2a6313e02563f07ba4ac359bb2c895a4c09ece95cf739a1f720ea2b6d8919fb58ed4773434de5262682d5fb847252598b75a76cd7d725245b0adc1807ef02e362fce69c918b42808125d8d6dd9cf29e905252edad26b9b5db2a2414d7a3f9add683d8cb0cf545d57b46417e73882b74c457b3e0c98e461c691b51a4824ebdcfa8ff5d1ff14b788a4aa9f3801ec340838e7777e328a9b7384628abe75f24067935afae5e98d57135c3a4a55479816a41e4", 0x1000}], 0x2, 0x8, 0x1)
write$vga_arbiter(r9, &(0x7f0000000100)=@other={'decodes', ' ', 'io+mem'}, 0xf)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x5, 0x0, 0x0, {0x0, 0x4e22, [0x0, 0xffffffff], [0x0, 0x0, 0xfffffffd], 0x0, [0x1, 0x3]}, 0x0, 0xfffffffe}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x0)

4.90907401s ago: executing program 4 (id=1996):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
socket(0x2, 0x80805, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x115440)
openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000006111b4000000000085000000580000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x48)
r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000001340)={0x84, &(0x7f0000001400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa980, 0x0)
readv(r5, &(0x7f0000000400), 0x0)
readv(r5, &(0x7f0000000580)=[{&(0x7f0000000080)=""/125, 0x7d}, {0x0}], 0x2)
ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0d, &(0x7f0000000040))
sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x20000000005, 0x21}, 0xd8)
connect$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e20}, 0xfffffffffffffef5)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5)

3.575568698s ago: executing program 1 (id=1997):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/bpf', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x85}, 0x0)
brk(0x400000ffc000)
r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882)
r4 = syz_io_uring_setup(0x62ce, &(0x7f0000000780)={0x0, 0x3, 0x10100, 0x0, 0xffffffff}, &(0x7f00000000c0)=<r5=>0x0, &(0x7f00000003c0)=<r6=>0x0)
keyctl$get_keyring_id(0x0, 0x0, 0x2)
r7 = syz_io_uring_setup(0xa0, &(0x7f0000000640)={0x0, 0x105cc6, 0x0, 0x0, 0x207}, &(0x7f0000000040)=<r8=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x4000, @fd=r0, 0xff, 0x0, 0x0, 0x1, 0x0, {0x1, r9}})
io_uring_enter(r4, 0x567, 0x0, 0x8, 0x0, 0x0)
r10 = inotify_init1(0x0)
r11 = fsopen(&(0x7f00000002c0)='pstore\x00', 0x1)
fsconfig$FSCONFIG_SET_BINARY(r11, 0x2, &(0x7f0000000300)='\x00', &(0x7f0000000340)='?', 0x1)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYRES8=r4, @ANYRES64=0x0, @ANYRES16=r1, @ANYRESOCT=r5, @ANYRES16=r2, @ANYRES16=r3], 0x24}, 0x1, 0x0, 0x0, 0x48025}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0)
inotify_add_watch(r10, &(0x7f0000000080)='.\x00', 0x2000434)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
symlinkat(&(0x7f0000000140)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00')
r12 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r12, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r12, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3]})

1.49469512s ago: executing program 0 (id=1998):
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a6fec07001d0806000108"], 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000340)={'batadv0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0))
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r10 = dup(r9)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r10, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
open_by_handle_at(r7, &(0x7f0000000240)=ANY=[], 0x10000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1)
ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000000))
ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})
ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000140)={0x3, r10, 0x1})
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000002000010000000000000000000200000000000000000000000c0014401400000000000000"], 0x28}}, 0x0)
socket(0x10, 0x3, 0x0)

1.492368175s ago: executing program 2 (id=1999):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r1, 0x0, 0xffdd)
syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x63, @loopback, 0x7}, 0x1c)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/fib_triestat\x00')
preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x4)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f00000001c0), &(0x7f0000000240)=0x4)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r7, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast1}}, 0xa, 0x0, 0xdd5, 0x7ff, 0x38fa8b00d923ddd5}, 0x9c)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0)
r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0)
pwritev(r9, &(0x7f00000000c0)=[{&(0x7f0000000080)="e756d337a1129afc310be63dea375cc551177c82b985e06e0a82e6a0ac24510aef6adbe5adbce172d671cf", 0x2b}, {&(0x7f0000000140)="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", 0x1000}], 0x2, 0x8, 0x1)
write$vga_arbiter(r9, &(0x7f0000000100)=@other={'decodes', ' ', 'io+mem'}, 0xf)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x1, 0x0, 0x0, {0xa, 0x5, 0x0, 0x0, {0x0, 0x4e22, [0x0, 0xffffffff], [0x0, 0x0, 0xfffffffd], 0x0, [0x1, 0x3]}, 0x0, 0xfffffffe}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}}, 0x0)

1.308965969s ago: executing program 1 (id=2000):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x60240)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000096f44b402104230258430000000109022200010000000009"], 0x0)
ioctl$sock_SIOCSIFBR(r2, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2})
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1)
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f00000d6000/0x1000)=nil, 0x3000, 0x1})
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x3dc, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x38, 0xcf, [{{0x9, 0x4, 0x0, 0x2d, 0x1, 0x7, 0x1, 0x2, 0xa4, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x8, 0xa}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x1, 0x7, 0x63}}]}}}]}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0x5, 0x8, 0x4, 0xff, 0x4}, 0x0, 0x0, 0x4, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x413}}, {0xd, &(0x7f0000000480)=@string={0xd, 0x3, "058d75932f6a926f302bab"}}]})
write$binfmt_aout(r3, 0x0, 0x0)

404.797841ms ago: executing program 4 (id=2001):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0)
syz_open_dev$media(0x0, 0x0, 0x101d01)
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, "2ca949476cf646d3", "69f840be3a8e7295ba1f3a20669f8bf5", "2597d401", "ca94516f2eadaed8"}, 0x28)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4)
ioctl$int_in(r2, 0x5421, &(0x7f0000000740)=0x1)
setsockopt$inet6_tcp_int(r2, 0x6, 0x19, 0x0, 0x0)
writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1)
io_uring_enter(0xffffffffffffffff, 0x1ea, 0xe9ad, 0x0, &(0x7f00000001c0)={[0x7]}, 0x8)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
ioctl$KVM_NMI(r6, 0xae9a)

0s ago: executing program 3 (id=2002):
sendmsg$key(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0"], 0x40}}, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41)
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01)
write$char_usb(r0, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
eventfd2(0x5, 0x801)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f00000001c0)=@v={0x93, 0x7, 0x80, 0x9, @generic=0x1, 0x2, 0x8})
r2 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=<r3=>0x0, &(0x7f0000000300)=<r4=>0x0)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_MKDIRAT={0x25, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r5}})
io_uring_enter(r2, 0x7277, 0x0, 0x28, 0x0, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a80)=@o_path={&(0x7f0000000a40)='./file0\x00', 0x0, 0x4008}, 0x18)
syz_clone3(&(0x7f0000000480)={0x80810200, &(0x7f00000001c0), &(0x7f0000000240), &(0x7f0000000280), {0x17}, &(0x7f0000000340)=""/121, 0x79, &(0x7f0000000580)=""/4096, &(0x7f00000003c0)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x58)
r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=<r8=>0x0, &(0x7f0000000040)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}})
io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

816] usb 3-1: new high-speed USB device number 113 using dummy_hcd
[ 1178.935178][ T5931] usb 2-1: Manufacturer: syz
[ 1178.947932][ T5931] usb 2-1: SerialNumber: syz
[ 1178.990666][ T5931] usb 2-1: config 0 descriptor??
[ 1179.084191][ T8816] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1179.440263][T14998] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1179.745146][ T8816] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1179.822556][ T8816] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1179.841367][ T5931] usb 2-1: can't set config #0, error -71
[ 1179.876647][ T5931] usb 2-1: USB disconnect, device number 123
[ 1179.901573][ T8816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1179.968487][   T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[ 1180.049752][T14992] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[ 1180.086251][ T8816] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1180.097448][ T5909] usb 1-1: new high-speed USB device number 98 using dummy_hcd
[ 1180.142092][   T10] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1180.180180][   T10] usb 5-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1180.249444][ T5909] usb 1-1: Using ep0 maxpacket: 8
[ 1180.373329][   T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1180.380955][ T5909] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64
[ 1180.439874][ T5909] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1180.470526][ T5909] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76
[ 1180.484757][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1180.514494][ T5909] usb 1-1: Product: syz
[ 1180.524744][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1180.583119][ T5931] usb 3-1: USB disconnect, device number 113
[ 1180.590210][ T5909] usb 1-1: Manufacturer: syz
[ 1180.622123][ T5909] usb 1-1: SerialNumber: syz
[ 1180.681448][   T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1180.697031][ T5909] usb 1-1: config 0 descriptor??
[ 1180.786849][ T5909] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found
[ 1181.004380][T15003] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1181.166569][T14998] vlan2: entered promiscuous mode
[ 1181.330963][   T10] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1181.447386][ T8816] usb 2-1: new high-speed USB device number 124 using dummy_hcd
[ 1181.600603][ T8816] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1181.640092][ T8816] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1181.659609][ T5930] usb 4-1: USB disconnect, device number 116
[ 1181.711585][ T8816] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1181.785137][ T8816] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1181.801405][ T8816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1181.836979][ T8816] usb 2-1: Product: syz
[ 1181.862983][ T8816] usb 2-1: Manufacturer: syz
[ 1181.873954][ T8816] usb 2-1: SerialNumber: syz
[ 1181.908218][ T8816] hub 2-1:1.0: bad descriptor, ignoring hub
[ 1181.925483][ T8816] hub 2-1:1.0: probe with driver hub failed with error -5
[ 1182.121899][ T8816] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 124 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[ 1182.157621][ T5930] usb 4-1: new high-speed USB device number 117 using dummy_hcd
[ 1182.219284][ T5909] snd_usb_toneport 1-1:0.0: set_interface failed
[ 1182.225937][ T5909] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected
[ 1182.273165][ T5909] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -71
[ 1182.349704][ T5930] usb 4-1: config 0 has no interfaces?
[ 1182.388265][ T5930] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1182.419789][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1182.428633][ T5909] usb 1-1: USB disconnect, device number 98
[ 1182.503343][ T5930] usb 4-1: Product: syz
[ 1182.534518][ T5930] usb 4-1: Manufacturer: syz
[ 1182.560805][ T5930] usb 4-1: SerialNumber: syz
[ 1182.594653][ T5930] usb 4-1: config 0 descriptor??
[ 1182.797606][T15003] usb 2-1: reset high-speed USB device number 124 using dummy_hcd
[ 1182.846453][T15008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1645'.
[ 1182.955736][ T5909] usb 5-1: USB disconnect, device number 8
[ 1183.077536][   T10] usb 3-1: new high-speed USB device number 114 using dummy_hcd
[ 1183.332708][T15026] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1183.361164][T15026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1649'.
[ 1183.401508][T15026] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1649'.
[ 1183.857792][   T10] usb 3-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1
[ 1183.867097][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1183.925401][   T10] usb 3-1: config 0 descriptor??
[ 1183.956643][   T10] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1183.984559][   T10] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[ 1184.593975][T15026] bond0: (slave team0): Releasing backup interface
[ 1184.603135][T15026] team0 (unregistering): left allmulticast mode
[ 1184.770970][   T10] usb 4-1: USB disconnect, device number 117
[ 1184.949303][   T24] usb 2-1: USB disconnect, device number 124
[ 1185.110462][   T24] usblp0: removed
[ 1185.403527][T15039] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1651'.
[ 1185.435944][T15038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1651'.
[ 1185.445935][T15038] chnl_net:caif_netlink_parms(): no params data found
[ 1186.221091][ T5909] usb 3-1: USB disconnect, device number 114
[ 1186.227382][   T10] usb 2-1: new high-speed USB device number 125 using dummy_hcd
[ 1186.411944][   T10] usb 2-1: config index 0 descriptor too short (expected 8192, got 77)
[ 1186.420539][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1186.434994][   T10] usb 2-1: config 0 has no interfaces?
[ 1186.492845][   T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1186.514158][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1186.608318][   T10] usb 2-1: Product: syz
[ 1186.647990][T15052] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1654'.
[ 1186.667582][T15052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1654'.
[ 1186.676788][T15052] chnl_net:caif_netlink_parms(): no params data found
[ 1186.727379][   T10] usb 2-1: Manufacturer: syz
[ 1186.732184][   T10] usb 2-1: SerialNumber: syz
[ 1186.742886][   T10] usb 2-1: config 0 descriptor??
[ 1186.857344][ T8816] usb 1-1: new high-speed USB device number 99 using dummy_hcd
[ 1187.012379][T15051] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000'
[ 1187.158764][ T5929] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[ 1187.197995][ T8816] usb 1-1: Using ep0 maxpacket: 8
[ 1187.213685][ T8816] usb 1-1: config 2 has an invalid interface number: 31 but max is 0
[ 1187.222667][ T8816] usb 1-1: config 2 has no interface number 0
[ 1187.233455][ T8816] usb 1-1: config 2 interface 31 has no altsetting 0
[ 1187.266748][ T8816] usb 1-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[ 1187.642710][ T8816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1187.652720][ T5929] usb 5-1: config index 0 descriptor too short (expected 8192, got 77)
[ 1187.665263][ T5929] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1187.676661][ T5929] usb 5-1: config 0 has no interfaces?
[ 1187.693273][ T5929] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1187.706386][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1187.714876][ T5929] usb 5-1: Product: syz
[ 1187.722965][ T5929] usb 5-1: Manufacturer: syz
[ 1187.728288][ T5929] usb 5-1: SerialNumber: syz
[ 1187.735396][ T5929] usb 5-1: config 0 descriptor??
[ 1187.768880][ T8816] usb 1-1: Product: syz
[ 1187.778914][ T8816] usb 1-1: Manufacturer: syz
[ 1187.791099][ T8816] usb 1-1: SerialNumber: syz
[ 1187.831981][ T8816] ch9200 1-1:2.31: probe with driver ch9200 failed with error -22
[ 1188.555845][   T10] usb 2-1: USB disconnect, device number 125
[ 1190.297468][   T10] usb 4-1: new high-speed USB device number 118 using dummy_hcd
[ 1190.450288][   T10] usb 4-1: Using ep0 maxpacket: 8
[ 1190.463017][   T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64
[ 1190.484554][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1190.644045][T15087] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[ 1191.508959][   T10] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76
[ 1191.541170][ T5929] usb 5-1: USB disconnect, device number 9
[ 1191.550935][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1191.613301][   T10] usb 4-1: Product: syz
[ 1191.639284][   T10] usb 4-1: Manufacturer: syz
[ 1191.660412][   T10] usb 4-1: SerialNumber: syz
[ 1191.728977][   T10] usb 4-1: config 0 descriptor??
[ 1191.743361][   T24] usb 1-1: USB disconnect, device number 99
[ 1191.803994][   T10] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found
[ 1193.831769][   T10] snd_usb_toneport 4-1:0.0: set_interface failed
[ 1193.944165][   T10] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected
[ 1194.047668][   T10] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -71
[ 1194.103713][   T10] usb 4-1: USB disconnect, device number 118
[ 1194.190018][T15108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1662'.
[ 1194.445452][T15104] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1661'.
[ 1194.467388][T15100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1661'.
[ 1195.430964][T15118] pim6reg: entered allmulticast mode
[ 1195.926408][T15110] pim6reg: left allmulticast mode
[ 1197.312700][T15143] pim6reg: entered allmulticast mode
[ 1197.546853][T15130] pim6reg: left allmulticast mode
[ 1197.654507][T15149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1669'.
[ 1197.721754][T15150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1669'.
[ 1198.285011][T15149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1669'.
[ 1198.310890][T15149] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1669'.
[ 1199.805350][T15164] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[ 1199.904860][T15157] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1671'.
[ 1199.917305][T15157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1671'.
[ 1199.926703][T15157] chnl_net:caif_netlink_parms(): no params data found
[ 1200.168090][T15171] netlink: 'syz.3.1672': attribute type 13 has an invalid length.
[ 1200.277893][ T5930] usb 2-1: new high-speed USB device number 126 using dummy_hcd
[ 1200.589838][ T5930] usb 2-1: config index 0 descriptor too short (expected 8192, got 77)
[ 1200.641827][ T5930] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1200.864836][ T5930] usb 2-1: config 0 has no interfaces?
[ 1200.978233][ T5930] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1201.020128][T15180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1674'.
[ 1201.294711][T15171] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1201.388153][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1201.468901][ T5930] usb 2-1: Product: syz
[ 1201.517761][ T5930] usb 2-1: Manufacturer: syz
[ 1201.522516][ T5930] usb 2-1: SerialNumber: syz
[ 1201.531920][ T5930] usb 2-1: config 0 descriptor??
[ 1202.262630][T15192] binder: 15187:15192 unknown command 0
[ 1202.268654][T15192] binder: 15187:15192 ioctl c0306201 200000000480 returned -22
[ 1205.226690][T15212] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[ 1205.380007][ T5930] usb 2-1: USB disconnect, device number 126
[ 1206.287843][ T5909] usb 2-1: new high-speed USB device number 127 using dummy_hcd
[ 1206.571696][ T5909] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1206.765453][ T5909] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1206.837402][   T10] usb 4-1: new high-speed USB device number 119 using dummy_hcd
[ 1207.026250][ T5909] usb 2-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=43.58
[ 1207.053180][   T10] usb 4-1: config 0 has no interfaces?
[ 1207.065459][   T10] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1207.074991][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1207.089646][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1207.105962][   T10] usb 4-1: Product: syz
[ 1207.113055][   T10] usb 4-1: Manufacturer: syz
[ 1207.125384][   T10] usb 4-1: SerialNumber: syz
[ 1207.155178][   T10] usb 4-1: config 0 descriptor??
[ 1207.173880][ T5909] usb 2-1: config 0 descriptor??
[ 1207.622203][T15223] netlink: 'syz.3.1681': attribute type 12 has an invalid length.
[ 1207.633549][T15223] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.1681'.
[ 1208.040743][T15217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1208.053602][T15217] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1208.374861][T15217] nvme_fabrics: missing parameter 'transport=%s'
[ 1208.382737][T15217] nvme_fabrics: missing parameter 'nqn=%s'
[ 1209.709756][T15249] geneve3: entered promiscuous mode
[ 1209.861339][ T8816] usb 2-1: USB disconnect, device number 127
[ 1210.057392][T15249] geneve3: entered allmulticast mode
[ 1210.117683][T15256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1687'.
[ 1210.288022][ T8816] usb 4-1: USB disconnect, device number 119
[ 1212.434111][T15275] pim6reg: entered allmulticast mode
[ 1212.973872][T15272] pim6reg: left allmulticast mode
[ 1213.694446][T15286] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[ 1213.701169][T15286] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1213.736665][T15286] vhci_hcd vhci_hcd.0: Device attached
[ 1213.918656][ T5929] vhci_hcd: vhci_device speed not set
[ 1213.987653][ T5929] usb 35-1: new full-speed USB device number 2 using vhci_hcd
[ 1214.158371][T15306] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1693'.
[ 1214.227423][ T8816] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[ 1214.459257][ T8816] usb 5-1: Using ep0 maxpacket: 8
[ 1214.638976][ T8816] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64
[ 1214.657251][ T8816] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1214.712889][ T8816] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76
[ 1214.722207][ T8816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1214.738841][ T8816] usb 5-1: Product: syz
[ 1214.755552][ T8816] usb 5-1: Manufacturer: syz
[ 1214.767003][ T8816] usb 5-1: SerialNumber: syz
[ 1214.947677][ T8816] usb 5-1: config 0 descriptor??
[ 1214.965239][ T8816] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found
[ 1215.328654][T15289] vhci_hcd: connection reset by peer
[ 1215.350436][ T7699] vhci_hcd: stop threads
[ 1215.366097][ T7699] vhci_hcd: release socket
[ 1215.382542][ T7699] vhci_hcd: disconnect device
[ 1216.711724][ T8816] snd_usb_toneport 5-1:0.0: set_interface failed
[ 1216.730438][ T8816] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected
[ 1216.749899][ T8816] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -71
[ 1216.949013][ T8816] usb 5-1: USB disconnect, device number 10
[ 1217.133377][T15315] pim6reg: entered allmulticast mode
[ 1217.339595][T15327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1699'.
[ 1217.374181][T15327] ip6tnl0: left promiscuous mode
[ 1217.736650][T15311] pim6reg: left allmulticast mode
[ 1218.211659][T15334] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1218.501632][   T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 1218.713299][   T10] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1218.726427][   T10] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1218.747371][   T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1218.781424][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1219.044075][   T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1219.118353][   T10] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1219.137351][ T5929] vhci_hcd: vhci_device speed not set
[ 1219.167315][ T8816] usb 3-1: new high-speed USB device number 115 using dummy_hcd
[ 1219.336437][ T8816] usb 3-1: config 0 has no interfaces?
[ 1219.348811][ T8816] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1219.359022][ T8816] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1219.373899][ T8816] usb 3-1: Product: syz
[ 1219.389529][ T8816] usb 3-1: Manufacturer: syz
[ 1219.394703][ T8816] usb 3-1: SerialNumber: syz
[ 1219.420819][ T8816] usb 3-1: config 0 descriptor??
[ 1219.602917][T15346] netlink: 'syz.3.1702': attribute type 13 has an invalid length.
[ 1219.671976][T15346] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1219.736177][T15338] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1221.616946][ T5929] usb 2-1: USB disconnect, device number 2
[ 1221.880425][ T8816] usb 3-1: USB disconnect, device number 115
[ 1221.999430][T15360] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1705'.
[ 1222.647435][   T24] usb 3-1: new high-speed USB device number 116 using dummy_hcd
[ 1223.075823][   T24] usb 3-1: Using ep0 maxpacket: 8
[ 1223.087708][   T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64
[ 1223.099007][   T24] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1223.114544][   T24] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76
[ 1223.170444][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1223.191607][   T24] usb 3-1: Product: syz
[ 1223.204070][   T24] usb 3-1: Manufacturer: syz
[ 1223.213118][   T24] usb 3-1: SerialNumber: syz
[ 1223.272110][   T24] usb 3-1: config 0 descriptor??
[ 1223.288152][   T24] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found
[ 1223.702545][T15360] bond0 (unregistering): Released all slaves
[ 1224.795590][T15386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1709'.
[ 1226.352377][T15397] bridge1: entered promiscuous mode
[ 1226.656236][   T24] snd_usb_toneport 3-1:0.0: set_interface failed
[ 1226.677514][   T24] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected
[ 1226.775075][   T24] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -71
[ 1226.839599][   T24] usb 3-1: USB disconnect, device number 116
[ 1228.676014][ T8816] usb 4-1: new high-speed USB device number 120 using dummy_hcd
[ 1228.929204][ T8816] usb 4-1: config 0 has no interfaces?
[ 1228.971210][ T8816] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1228.980504][ T8816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1228.990255][ T8816] usb 4-1: Product: syz
[ 1229.185151][ T8816] usb 4-1: Manufacturer: syz
[ 1229.192412][ T8816] usb 4-1: SerialNumber: syz
[ 1229.221432][ T8816] usb 4-1: config 0 descriptor??
[ 1229.542482][T15407] netlink: 'syz.3.1713': attribute type 12 has an invalid length.
[ 1229.552013][T15407] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.1713'.
[ 1229.960966][   T10] usb 4-1: USB disconnect, device number 120
[ 1232.165347][T15436] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1717'.
[ 1234.313137][T15459] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[ 1236.309429][   T10] usb 4-1: new low-speed USB device number 121 using dummy_hcd
[ 1236.471032][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1236.485064][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1236.503317][   T10] usb 4-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[ 1236.540705][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1236.932367][   T10] usb 4-1: config 0 descriptor??
[ 1237.405472][   T10] glorious 0003:258A:0036.0034: item fetching failed at offset 0/2
[ 1237.436704][   T10] glorious 0003:258A:0036.0034: probe with driver glorious failed with error -22
[ 1237.877411][   T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[ 1238.071217][T15489] syz.3.1725 (15489): drop_caches: 2
[ 1238.251958][T15495] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[ 1238.449441][   T24] usb 3-1: new high-speed USB device number 117 using dummy_hcd
[ 1238.493380][   T10] usb 5-1: config 0 has no interfaces?
[ 1238.741352][   T10] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1238.761569][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.769006][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 1238.796928][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1238.813410][   T24] usb 3-1: config 0 has no interfaces?
[ 1238.819212][   T10] usb 5-1: Product: syz
[ 1238.823695][   T10] usb 5-1: Manufacturer: syz
[ 1238.830621][   T10] usb 5-1: SerialNumber: syz
[ 1238.845960][   T24] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1238.872468][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1238.884677][   T24] usb 3-1: Product: syz
[ 1238.904775][   T24] usb 3-1: Manufacturer: syz
[ 1238.917466][   T24] usb 3-1: SerialNumber: syz
[ 1238.973740][   T10] usb 5-1: config 0 descriptor??
[ 1239.006158][   T24] usb 3-1: config 0 descriptor??
[ 1239.243116][T15481] netlink: 'syz.4.1727': attribute type 12 has an invalid length.
[ 1239.251339][T15481] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.1727'.
[ 1239.603989][ T8816] usb 5-1: USB disconnect, device number 11
[ 1239.874563][ T5930] usb 4-1: USB disconnect, device number 121
[ 1240.906693][ T5930] usb 4-1: new low-speed USB device number 122 using dummy_hcd
[ 1241.241256][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1241.330371][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1241.571038][ T5930] usb 4-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[ 1241.585918][   T10] usb 3-1: USB disconnect, device number 117
[ 1241.686973][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1241.802860][ T5930] usb 4-1: config 0 descriptor??
[ 1242.243834][   T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 1242.280029][ T5930] glorious 0003:258A:0036.0035: item fetching failed at offset 0/2
[ 1242.332208][ T5930] glorious 0003:258A:0036.0035: probe with driver glorious failed with error -22
[ 1242.433947][   T10] usb 2-1: Using ep0 maxpacket: 32
[ 1242.475752][   T10] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[ 1242.484627][ T5929] usb 3-1: new high-speed USB device number 118 using dummy_hcd
[ 1242.513980][   T10] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[ 1242.535215][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[ 1242.554659][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1242.609690][   T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[ 1242.637741][T15521] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1735'.
[ 1242.657528][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1242.673780][ T5929] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1242.734435][ T5929] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[ 1242.743836][   T10] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[ 1242.799626][ T5929] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1242.809294][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1242.838311][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1242.857091][   T10] usb 2-1: config 0 descriptor??
[ 1243.098422][T15506] syz.3.1730 (15506): drop_caches: 2
[ 1243.186131][T15518] delete_channel: no stack
[ 1243.235711][ T5929] usb 3-1: USB disconnect, device number 118
[ 1243.695236][   T10] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[ 1243.938759][T15529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1243.961630][T15529] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1244.414295][T15532] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1244.901260][   T10] usb 4-1: USB disconnect, device number 122
[ 1245.628224][T15538] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1738'.
[ 1245.675651][ T5930] usb 2-1: USB disconnect, device number 3
[ 1245.688404][ T5930] usblp0: removed
[ 1245.862534][T15548] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[ 1246.149851][T15554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1741'.
[ 1248.158209][   T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[ 1248.467276][   T10] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1248.527974][   T10] usb 5-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1248.659914][   T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1248.698643][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1248.769588][   T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1248.915156][   T10] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1249.428719][   T10] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[ 1249.694149][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1249.759654][   T10] usb 2-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[ 1249.783522][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1249.831241][   T10] usb 2-1: Product: syz
[ 1249.847092][   T10] usb 2-1: Manufacturer: syz
[ 1249.885183][   T10] usb 2-1: SerialNumber: syz
[ 1250.070368][   T10] usb 2-1: config 0 descriptor??
[ 1250.392369][T15580] xt_hashlimit: size too large, truncated to 1048576
[ 1251.609615][ T8816] usb 2-1: USB disconnect, device number 4
[ 1251.760852][   T10] usb 5-1: USB disconnect, device number 12
[ 1252.390333][T15608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1750'.
[ 1252.400269][T15608] chnl_net:caif_netlink_parms(): no params data found
[ 1252.751586][ T5909] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[ 1253.037433][ T5909] usb 5-1: config index 0 descriptor too short (expected 8192, got 77)
[ 1253.045779][ T5909] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1253.057760][ T5909] usb 5-1: config 0 has no interfaces?
[ 1253.069132][ T5909] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1253.078506][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1253.086499][ T5909] usb 5-1: Product: syz
[ 1253.101088][ T5909] usb 5-1: Manufacturer: syz
[ 1253.111276][ T5909] usb 5-1: SerialNumber: syz
[ 1253.133875][ T5909] usb 5-1: config 0 descriptor??
[ 1253.866715][T15623] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1254.128951][   T10] usb 3-1: new high-speed USB device number 119 using dummy_hcd
[ 1254.648542][   T10] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1254.776334][   T10] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1254.820126][   T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1254.839421][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1255.217062][   T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1255.329331][   T10] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1255.341455][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1255.464496][T15623] vlan0: entered promiscuous mode
[ 1256.164002][ T5909] usb 5-1: USB disconnect, device number 13
[ 1257.029063][T15648] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[ 1257.203520][ T5930] usb 3-1: USB disconnect, device number 119
[ 1257.548666][T15653] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[ 1260.668915][T15670] ALSA: mixer_oss: invalid index 40000
[ 1260.744142][ T5930] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[ 1261.070900][ T5930] usb 2-1: config 0 has no interfaces?
[ 1261.088160][ T5930] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1261.110514][T15672] binder: 15671:15672 ioctl c0306201 0 returned -14
[ 1261.167239][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1261.424735][ T5930] usb 2-1: Product: syz
[ 1261.466068][ T5930] usb 2-1: Manufacturer: syz
[ 1261.515672][ T5930] usb 2-1: SerialNumber: syz
[ 1261.543927][ T5930] usb 2-1: config 0 descriptor??
[ 1261.789027][T15680] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[ 1262.025136][T15682] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1765'.
[ 1263.947446][ T5930] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[ 1264.424775][ T5930] usb 5-1: Using ep0 maxpacket: 8
[ 1264.451797][ T5930] usb 5-1: config 1 interface 0 altsetting 45 bulk endpoint 0x1 has invalid maxpacket 64
[ 1264.489198][T15703] sctp: [Deprecated]: syz.0.1768 (pid 15703) Use of int in maxseg socket option.
[ 1264.489198][T15703] Use struct sctp_assoc_value instead
[ 1264.510015][T15703] netlink: 'syz.0.1768': attribute type 10 has an invalid length.
[ 1264.599272][T15703] veth0_vlan: left promiscuous mode
[ 1264.623710][T15703] veth0_vlan: entered promiscuous mode
[ 1264.637865][T15703] team0: Device veth0_vlan failed to register rx_handler
[ 1264.777614][ T5930] usb 5-1: config 1 interface 0 altsetting 45 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1264.870102][ T5930] usb 5-1: config 1 interface 0 has no altsetting 0
[ 1264.916362][ T5930] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1264.935726][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1264.964500][ T5930] usb 5-1: Product: Г
[ 1265.170558][   T24] usb 2-1: USB disconnect, device number 5
[ 1265.207295][ T5930] usb 5-1: Manufacturer: ж
[ 1265.283305][ T5930] usb 5-1: SerialNumber: 贅鍵樯澒⬰
[ 1265.396540][T15698] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 1265.427458][T15698] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 1265.863846][T15698] nvme_fabrics: missing parameter 'transport=%s'
[ 1265.871038][T15698] nvme_fabrics: missing parameter 'nqn=%s'
[ 1266.404036][T15722] ptrace attach of "./syz-executor exec"[5858] was attempted by "./syz-executor exec"[15722]
[ 1266.418565][T15722] netlink: 'syz.2.1769': attribute type 41 has an invalid length.
[ 1266.491206][T15720] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[ 1268.524407][ T5930] usb 5-1: USB disconnect, device number 14
[ 1269.246852][T15740] binder: 15737:15740 ioctl c0306201 0 returned -14
[ 1269.317265][ T5929] usb 3-1: new high-speed USB device number 120 using dummy_hcd
[ 1269.655121][T15742] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1774'.
[ 1269.735627][ T5929] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 1269.760129][T15743] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1774'.
[ 1269.769528][ T5929] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1270.177720][ T5929] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1270.186829][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1270.195830][ T5929] usb 3-1: Product: syz
[ 1270.200238][ T5929] usb 3-1: Manufacturer: syz
[ 1270.204832][ T5929] usb 3-1: SerialNumber: syz
[ 1270.211440][ T5929] usb 3-1: config 0 descriptor??
[ 1270.220288][ T5929] usb 3-1: selecting invalid altsetting 0
[ 1270.812117][ T5929] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[ 1271.098137][ T5929] usb 2-1: Using ep0 maxpacket: 8
[ 1271.140096][ T5929] usb 2-1: config 1 interface 0 altsetting 45 bulk endpoint 0x1 has invalid maxpacket 64
[ 1271.186419][ T5929] usb 2-1: config 1 interface 0 altsetting 45 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1271.414315][ T5929] usb 2-1: config 1 interface 0 has no altsetting 0
[ 1271.472823][ T5929] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1271.482343][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1271.506620][ T5929] usb 2-1: Product: Г
[ 1271.534584][ T5929] usb 2-1: Manufacturer: ж
[ 1271.545898][ T5929] usb 2-1: SerialNumber: 贅鍵樯澒⬰
[ 1271.798434][T15752] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1271.806338][T15752] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[ 1273.088452][T15751] nvme_fabrics: missing parameter 'transport=%s'
[ 1273.109911][T15751] nvme_fabrics: missing parameter 'nqn=%s'
[ 1273.505323][ T5930] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[ 1273.771685][ T5930] usb 5-1: config 0 has no interfaces?
[ 1273.842942][ T5930] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1273.867887][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1273.892752][ T5930] usb 5-1: Product: syz
[ 1273.913317][ T5930] usb 5-1: Manufacturer: syz
[ 1273.923516][ T5930] usb 5-1: SerialNumber: syz
[ 1273.966791][ T5930] usb 5-1: config 0 descriptor??
[ 1274.342247][ T5930] usb 3-1: USB disconnect, device number 120
[ 1274.781124][T15784] futex_wake_op: syz.2.1781 tries to shift op by 36; fix this program
[ 1275.244589][ T5929] usb 2-1: USB disconnect, device number 6
[ 1275.523111][ T8816] usb 5-1: USB disconnect, device number 15
[ 1275.727810][ T5929] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[ 1275.907387][ T5929] usb 2-1: Using ep0 maxpacket: 8
[ 1275.929232][ T5929] usb 2-1: config 1 interface 0 altsetting 45 bulk endpoint 0x1 has invalid maxpacket 64
[ 1275.940039][ T5929] usb 2-1: config 1 interface 0 altsetting 45 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 1276.235800][ T5929] usb 2-1: config 1 interface 0 has no altsetting 0
[ 1276.444006][T15805] netlink: 'syz.0.1784': attribute type 3 has an invalid length.
[ 1276.452409][T15805] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1784'.
[ 1276.500609][T15806] Failed to get privilege flags for destination (handle=0x2:0xd)
[ 1276.651331][ T5929] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1276.673099][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1276.689953][T15805] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1784'.
[ 1276.699443][T15805] unsupported nlmsg_type 40
[ 1277.226020][ T5929] usb 2-1: Product: Г
[ 1277.274616][ T5929] usb 2-1: Manufacturer: ж
[ 1277.335191][ T5929] usb 2-1: SerialNumber: 贅鍵樯澒⬰
[ 1277.603651][T15789] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1277.681345][T15789] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1278.171356][T15789] nvme_fabrics: missing parameter 'transport=%s'
[ 1278.178448][T15789] nvme_fabrics: missing parameter 'nqn=%s'
[ 1278.872221][T15815] binder: 15814:15815 ioctl c0306201 0 returned -14
[ 1279.377325][   T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[ 1279.499557][T15783] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1279.528805][   T10] usb 5-1: Using ep0 maxpacket: 16
[ 1279.545489][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1279.635617][   T10] usb 5-1: New USB device found, idVendor=2040, idProduct=d864, bcdDevice=7f.c5
[ 1279.747643][   T10] usb 5-1: New USB device strings: Mfr=242, Product=2, SerialNumber=3
[ 1279.755980][   T10] usb 5-1: Product: syz
[ 1279.760351][   T10] usb 5-1: Manufacturer: syz
[ 1279.765032][   T10] usb 5-1: SerialNumber: syz
[ 1279.777453][   T10] usb 5-1: config 0 descriptor??
[ 1279.785730][   T10] usb 5-1: dvb_usb_v2: found a 'Hauppauge 138xxx DVBT' in warm state
[ 1279.837658][   T10] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1279.872430][   T10] dvbdev: DVB: registering new adapter (Hauppauge 138xxx DVBT)
[ 1279.932033][   T10] usb 5-1: media controller created
[ 1279.969555][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1279.998537][ T5929] usb 2-1: USB disconnect, device number 7
[ 1280.009691][T15816] loop2: detected capacity change from 0 to 7
[ 1280.019199][T15816] buffer_io_error: 42 callbacks suppressed
[ 1280.019261][T15816] Buffer I/O error on dev loop2, logical block 0, async page read
[ 1280.033552][T15816] Buffer I/O error on dev loop2, logical block 0, async page read
[ 1280.047732][T15816] Buffer I/O error on dev loop2, logical block 0, async page read
[ 1280.056002][T15816] Buffer I/O error on dev loop2, logical block 0, async page read
[ 1280.187633][T15816] Buffer I/O error on dev loop2, logical block 0, async page read
[ 1280.207676][   T10] usb 5-1: selecting invalid altsetting 2
[ 1280.213432][   T10] set interface failed
[ 1280.213745][   T10] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[ 1280.363906][ T5930] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1280.372154][ T5930] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1280.380092][T15816] Buffer I/O error on dev loop2, logical block 0, async page read
[ 1280.390219][ T5930] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1280.398639][ T5930] rtc_cmos 00:00: Alarms can be up to one day in the future
[ 1280.417060][ T5930] rtc rtc0: __rtc_set_alarm: err=-22
[ 1280.449053][   T10] error writing reg: 0xff, val: 0x00
[ 1280.457488][T15816] Buffer I/O error on dev loop2, logical block 0, async page read
[ 1280.681239][T15833] pim6reg: entered allmulticast mode
[ 1281.233098][T15816] ldm_validate_partition_table(): Disk read failed.
[ 1281.240436][T15816] Buffer I/O error on dev loop2, logical block 0, async page read
[ 1281.248802][T15816] Buffer I/O error on dev loop2, logical block 0, async page read
[ 1281.257195][T15816] Buffer I/O error on dev loop2, logical block 0, async page read
[ 1281.266707][T15816] Dev loop2: unable to read RDB block 0
[ 1281.311181][   T10] dvb_usb_mxl111sf 5-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22
[ 1281.337957][T15816]  loop2: unable to read partition table
[ 1281.349810][T15816] loop2: partition table beyond EOD, truncated
[ 1281.363072][T15829] pim6reg: left allmulticast mode
[ 1281.403885][T15816] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[ 1281.954744][   T10] usb 5-1: USB disconnect, device number 16
[ 1282.251458][T15843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1792'.
[ 1282.624147][T15849] binder: 15822:15849 ioctl c0306201 200000000640 returned -22
[ 1282.667813][ T5930] usb 4-1: new high-speed USB device number 123 using dummy_hcd
[ 1282.983907][ T5930] usb 4-1: config 0 has no interfaces?
[ 1283.045394][ T5930] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1283.054528][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1283.062562][ T5930] usb 4-1: Product: syz
[ 1283.066720][ T5930] usb 4-1: Manufacturer: syz
[ 1283.077301][ T5930] usb 4-1: SerialNumber: syz
[ 1283.090479][ T5930] usb 4-1: config 0 descriptor??
[ 1283.536110][T15857] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1794'.
[ 1283.862743][ T5930] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[ 1283.995014][T15859] futex_wake_op: syz.2.1791 tries to shift op by 32; fix this program
[ 1284.979149][ T5930] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1285.215944][ T5930] usb 5-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1285.364082][ T5930] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1285.374373][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1285.423792][ T5930] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1285.472360][ T5930] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1285.876363][ T5909] usb 4-1: USB disconnect, device number 123
[ 1286.101447][T15881] Failed to get privilege flags for destination (handle=0x2:0xd)
[ 1286.298470][T15880] binder: 15879:15880 ioctl c0306201 0 returned -14
[ 1287.222783][T15887] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1287.487340][ T5930] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[ 1288.061929][ T5930] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1288.092908][ T5930] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1288.154109][   T24] usb 5-1: USB disconnect, device number 17
[ 1288.193879][ T5930] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1288.217219][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1288.393688][ T5930] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1288.532791][ T5930] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1288.704759][T15893] vlan2: entered promiscuous mode
[ 1289.217878][   T30] kauditd_printk_skb: 10 callbacks suppressed
[ 1289.219458][   T30] audit: type=1326 audit(1752192269.638:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15891 comm="syz.2.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19c18e929 code=0x7ffc0000
[ 1289.341278][T15897] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1289.357397][   T30] audit: type=1326 audit(1752192269.648:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15891 comm="syz.2.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fa19c18e929 code=0x7ffc0000
[ 1289.387730][   T30] audit: type=1326 audit(1752192269.648:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15891 comm="syz.2.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19c18e929 code=0x7ffc0000
[ 1289.432446][   T30] audit: type=1326 audit(1752192269.648:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15891 comm="syz.2.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa19c18e929 code=0x7ffc0000
[ 1289.722370][   T30] audit: type=1326 audit(1752192269.648:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15891 comm="syz.2.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19c18e929 code=0x7ffc0000
[ 1289.766232][   T30] audit: type=1326 audit(1752192269.648:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15891 comm="syz.2.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa19c18d290 code=0x7ffc0000
[ 1289.799705][   T30] audit: type=1326 audit(1752192269.658:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15891 comm="syz.2.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19c18e929 code=0x7ffc0000
[ 1289.822633][   T30] audit: type=1326 audit(1752192269.658:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15891 comm="syz.2.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa19c18e929 code=0x7ffc0000
[ 1289.845152][   T30] audit: type=1326 audit(1752192269.658:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15891 comm="syz.2.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa19c18e929 code=0x7ffc0000
[ 1289.899705][   T30] audit: type=1326 audit(1752192269.658:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15891 comm="syz.2.1801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa19c18e929 code=0x7ffc0000
[ 1291.351928][ T5909] usb 4-1: USB disconnect, device number 124
[ 1291.478431][T15915] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1291.929877][T15915] trusted_key: encrypted_key: insufficient parameters specified
[ 1292.617236][ T5909] usb 4-1: new low-speed USB device number 125 using dummy_hcd
[ 1292.789926][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1292.810556][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1292.905692][ T5909] usb 4-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[ 1292.930068][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1292.952637][ T5909] usb 4-1: config 0 descriptor??
[ 1293.072478][T15932] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1293.457514][   T24] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[ 1293.520754][ T5909] glorious 0003:258A:0036.0036: item fetching failed at offset 0/2
[ 1293.571213][ T5909] glorious 0003:258A:0036.0036: probe with driver glorious failed with error -22
[ 1293.694143][   T24] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1293.707671][   T24] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1293.758819][   T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1293.798167][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1293.834627][   T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1293.996857][   T24] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1294.307250][T15937] syz.3.1807 (15937): drop_caches: 2
[ 1294.732679][T15940] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1294.878479][   T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[ 1295.104047][   T24] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1295.123357][   T24] usb 5-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1295.264792][   T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1295.298073][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1295.336652][   T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1295.424670][   T24] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1296.259747][  T923] usb 4-1: USB disconnect, device number 125
[ 1296.881257][   T24] usb 2-1: USB disconnect, device number 8
[ 1297.456048][T15964] ip6tnl0: entered promiscuous mode
[ 1297.477019][T15964] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1298.535057][T15975] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1298.547835][  T923] usb 5-1: USB disconnect, device number 18
[ 1298.838710][ T5930] usb 3-1: new high-speed USB device number 121 using dummy_hcd
[ 1299.006498][ T5930] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1299.016984][ T5930] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1299.055563][ T5930] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1299.094454][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1299.299631][ T5930] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1299.481722][ T5930] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1299.617326][  T923] usb 5-1: new low-speed USB device number 19 using dummy_hcd
[ 1299.635596][T15974] vlan0: entered promiscuous mode
[ 1299.821490][  T923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1299.906993][  T923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1299.971003][  T923] usb 5-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[ 1300.054995][  T923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1300.075729][  T923] usb 5-1: config 0 descriptor??
[ 1300.190578][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.197023][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 1300.524008][  T923] glorious 0003:258A:0036.0037: item fetching failed at offset 0/2
[ 1300.547441][   T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[ 1300.878493][  T923] glorious 0003:258A:0036.0037: probe with driver glorious failed with error -22
[ 1301.092464][ T5930] usb 3-1: USB disconnect, device number 121
[ 1301.207965][   T10] usb 2-1: config 0 has no interfaces?
[ 1301.235836][   T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1301.248112][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1301.256104][   T10] usb 2-1: Product: syz
[ 1301.435648][   T10] usb 2-1: Manufacturer: syz
[ 1301.640203][   T10] usb 2-1: SerialNumber: syz
[ 1301.663649][   T10] usb 2-1: config 0 descriptor??
[ 1301.913539][T15987] syz.4.1819 (15987): drop_caches: 2
[ 1302.096584][T15995] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1822'.
[ 1302.431766][   T10] usb 3-1: new low-speed USB device number 122 using dummy_hcd
[ 1302.631417][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1302.643066][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1302.665961][   T10] usb 3-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[ 1302.688679][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1302.722182][   T10] usb 3-1: config 0 descriptor??
[ 1303.465546][   T10] glorious 0003:258A:0036.0038: item fetching failed at offset 0/2
[ 1303.537737][ T5909] usb 5-1: USB disconnect, device number 19
[ 1303.547591][ T5930] usb 4-1: new high-speed USB device number 126 using dummy_hcd
[ 1303.642237][   T10] glorious 0003:258A:0036.0038: probe with driver glorious failed with error -22
[ 1303.729216][ T5930] usb 4-1: Using ep0 maxpacket: 16
[ 1303.884026][ T5930] usb 4-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35
[ 1303.897372][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1304.060022][T16008] syz.2.1824 (16008): drop_caches: 2
[ 1304.090493][ T5930] usb 4-1: Product: syz
[ 1304.094850][ T5930] usb 4-1: Manufacturer: syz
[ 1304.116577][ T5930] usb 4-1: SerialNumber: syz
[ 1304.150398][ T5930] usb 4-1: config 0 descriptor??
[ 1304.302421][ T5930] as10x_usb: device has been detected
[ 1304.314133][ T5930] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led))
[ 1304.341677][ T5930] usb 4-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))...
[ 1304.391199][ T5930] as10x_usb: error during firmware upload part1
[ 1304.414528][ T5930] Registered device Sky IT Digital Key (green led)
[ 1304.514355][T16012] random: crng reseeded on system resumption
[ 1304.684961][ T8816] usb 2-1: USB disconnect, device number 9
[ 1305.483783][ T8816] usb 3-1: USB disconnect, device number 122
[ 1306.171941][T16032] Invalid logical block size (7)
[ 1306.341033][   T10] usb 4-1: USB disconnect, device number 126
[ 1306.419073][   T10] Unregistered device Sky IT Digital Key (green led)
[ 1306.445006][   T10] as10x_usb: device has been disconnected
[ 1306.487371][ T8816] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[ 1306.758102][ T8816] usb 2-1: config 0 has an invalid interface number: 160 but max is 0
[ 1306.766618][ T8816] usb 2-1: config 0 has no interface number 0
[ 1306.773960][ T8816] usb 2-1: config 0 interface 160 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7
[ 1306.907445][ T5909] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[ 1307.000640][ T8816] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e
[ 1307.019509][ T8816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1307.029593][ T8816] usb 2-1: Product: syz
[ 1307.033794][ T8816] usb 2-1: Manufacturer: syz
[ 1307.123883][ T8816] usb 2-1: SerialNumber: syz
[ 1307.212105][T16052] IPv6: sit1: Disabled Multicast RS
[ 1307.306268][ T8816] usb 2-1: config 0 descriptor??
[ 1307.328264][ T8816] usb 2-1: Found UVC 0.00 device syz (05ac:8501)
[ 1307.337017][ T8816] usb 2-1: No valid video chain found.
[ 1307.692396][ T5909] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1307.703810][ T5909] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1307.713090][ T5909] usb 5-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=43.58
[ 1307.724052][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1307.747754][ T5909] usb 5-1: config 0 descriptor??
[ 1308.025386][T16045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1308.041524][T16045] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1308.296265][T16045] nvme_fabrics: missing parameter 'transport=%s'
[ 1308.304331][T16045] nvme_fabrics: missing parameter 'nqn=%s'
[ 1309.249648][T16062] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[ 1310.257447][ T5909] usb 2-1: USB disconnect, device number 10
[ 1311.981887][   T24] usb 5-1: USB disconnect, device number 20
[ 1312.171116][T16083] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1312.534565][T16083] fuse: Bad value for 'group_id'
[ 1312.568681][T16083] fuse: Bad value for 'group_id'
[ 1312.684760][  T923] usb 4-1: new high-speed USB device number 127 using dummy_hcd
[ 1312.798257][T16090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1839'.
[ 1312.898603][T16090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1839'.
[ 1313.011380][  T923] usb 4-1: config 0 has no interfaces?
[ 1313.064059][  T923] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1313.086602][  T923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1313.215302][  T923] usb 4-1: Product: syz
[ 1313.252508][  T923] usb 4-1: Manufacturer: syz
[ 1313.267745][  T923] usb 4-1: SerialNumber: syz
[ 1313.417846][  T923] usb 4-1: config 0 descriptor??
[ 1313.419967][T16098] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1313.857573][ T5909] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[ 1313.895528][T16088] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1838'.
[ 1314.117453][ T5909] usb 5-1: Using ep0 maxpacket: 8
[ 1314.143183][ T5909] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64
[ 1314.164322][ T5909] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1314.186276][ T5909] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76
[ 1314.202242][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1314.268724][ T5909] usb 5-1: Product: syz
[ 1314.286141][ T5909] usb 5-1: Manufacturer: syz
[ 1314.305419][ T5909] usb 5-1: SerialNumber: syz
[ 1314.339117][ T5909] usb 5-1: config 0 descriptor??
[ 1314.478603][ T5909] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found
[ 1314.592627][T16103] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[ 1314.599174][T16103] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1314.628690][T16103] vhci_hcd vhci_hcd.0: Device attached
[ 1314.817329][ T5930] vhci_hcd: vhci_device speed not set
[ 1314.866920][T16109] tipc: Enabled bearer <eth:syz_tun>, priority 10
[ 1314.909992][ T5930] usb 33-1: new full-speed USB device number 2 using vhci_hcd
[ 1315.250309][   T24] usb 4-1: USB disconnect, device number 127
[ 1315.680508][T16104] vhci_hcd: connection reset by peer
[ 1315.735749][T10947] vhci_hcd: stop threads
[ 1315.757823][T10947] vhci_hcd: release socket
[ 1315.897397][T10947] vhci_hcd: disconnect device
[ 1316.540823][ T5909] snd_usb_toneport 5-1:0.0: set_interface failed
[ 1316.560104][ T5909] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected
[ 1316.600329][ T5909] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -71
[ 1316.670848][ T5909] usb 5-1: USB disconnect, device number 21
[ 1316.869446][T16123] openvswitch: netlink: Key 12 has unexpected len 644 expected 2
[ 1316.885056][T16123] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1317.152515][T16123] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1317.939053][  T923] usb 3-1: new low-speed USB device number 123 using dummy_hcd
[ 1318.463513][  T923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1318.474811][  T923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1318.541348][  T923] usb 3-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[ 1318.628745][  T923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1318.680322][  T923] usb 3-1: config 0 descriptor??
[ 1319.194578][  T923] glorious 0003:258A:0036.0039: item fetching failed at offset 0/2
[ 1319.249053][  T923] glorious 0003:258A:0036.0039: probe with driver glorious failed with error -22
[ 1319.595357][T16152] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1319.625009][T16152] batadv0: entered promiscuous mode
[ 1319.647275][ T8816] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 1319.768237][T16154] syz.2.1847 (16154): drop_caches: 2
[ 1319.815192][T16155] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[ 1319.934784][T16152] team0: Port device batadv0 added
[ 1319.946084][ T8816] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1320.015079][ T8816] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1320.047734][ T5930] vhci_hcd: vhci_device speed not set
[ 1320.062807][ T8816] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1320.516256][ T8816] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1320.576649][ T8816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1320.785582][ T8816] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1320.889095][T16149] delete_channel: no stack
[ 1321.028949][  T923] usb 3-1: USB disconnect, device number 123
[ 1321.038067][ T8816] usb 4-1: invalid MIDI out EP 0
[ 1321.132394][ T8816] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22
[ 1321.262571][ T8816] usb 4-1: USB disconnect, device number 2
[ 1321.275714][T16166] fuse: Bad value for 'group_id'
[ 1321.298333][T16166] fuse: Bad value for 'group_id'
[ 1321.386606][ T6892] udevd[6892]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1321.412594][T16163] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1323.307462][ T5930] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[ 1323.323263][T16182] sctp: [Deprecated]: syz.1.1854 (pid 16182) Use of int in maxseg socket option.
[ 1323.323263][T16182] Use struct sctp_assoc_value instead
[ 1323.344098][T16182] netlink: 'syz.1.1854': attribute type 10 has an invalid length.
[ 1323.352891][T16182] veth0_vlan: left promiscuous mode
[ 1323.362663][T16182] veth0_vlan: entered promiscuous mode
[ 1323.377263][T16182] team0: Device veth0_vlan failed to register rx_handler
[ 1323.534111][ T5930] usb 5-1: config 0 has no interfaces?
[ 1323.790740][ T5930] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1323.800189][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1323.808337][ T5930] usb 5-1: Product: syz
[ 1323.822674][ T5930] usb 5-1: Manufacturer: syz
[ 1323.828175][ T5930] usb 5-1: SerialNumber: syz
[ 1323.857612][ T8816] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 1323.866653][ T5930] usb 5-1: config 0 descriptor??
[ 1324.183675][T16179] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1855'.
[ 1324.257728][ T8816] usb 4-1: Using ep0 maxpacket: 8
[ 1324.268288][ T8816] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64
[ 1324.391960][ T8816] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1324.456724][ T8816] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76
[ 1324.471507][ T8816] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1324.487212][ T8816] usb 4-1: Product: syz
[ 1324.506158][ T8816] usb 4-1: Manufacturer: syz
[ 1325.139328][ T8816] usb 4-1: SerialNumber: syz
[ 1325.181331][ T8816] usb 4-1: config 0 descriptor??
[ 1325.210415][ T8816] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found
[ 1325.831937][T16182] syz.1.1854 (16182) used greatest stack depth: 19176 bytes left
[ 1326.402130][  T923] usb 5-1: USB disconnect, device number 22
[ 1326.652578][ T8816] snd_usb_toneport 4-1:0.0: set_interface failed
[ 1326.693027][T16203] syz.1.1860 (16203): drop_caches: 2
[ 1326.735347][ T8816] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected
[ 1326.755163][ T8816] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -71
[ 1326.827656][ T8816] usb 4-1: USB disconnect, device number 3
[ 1327.281615][T16216] fuse: Bad value for 'group_id'
[ 1327.310348][T16216] fuse: Bad value for 'group_id'
[ 1327.394664][T16214] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1327.520159][ T8816] usb 4-1: new low-speed USB device number 4 using dummy_hcd
[ 1327.702693][ T8816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1327.712257][T16221] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus
[ 1327.737980][T16221] loop8: detected capacity change from 0 to 7
[ 1327.745110][T16221] Dev loop8: unable to read RDB block 7
[ 1327.757304][   T24] usb 5-1: new low-speed USB device number 23 using dummy_hcd
[ 1327.757376][T16221]  loop8: unable to read partition table
[ 1327.772502][ T8816] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1327.797492][T16221] loop8: partition table beyond EOD, truncated
[ 1327.826345][T16221] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[ 1327.856838][ T8816] usb 4-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[ 1327.936337][ T8816] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1327.969062][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1328.005706][ T8816] usb 4-1: config 0 descriptor??
[ 1328.032655][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1328.137079][   T24] usb 5-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[ 1328.247108][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1328.291463][   T24] usb 5-1: config 0 descriptor??
[ 1328.720467][ T8816] glorious 0003:258A:0036.003A: item fetching failed at offset 0/2
[ 1328.747706][ T8816] glorious 0003:258A:0036.003A: probe with driver glorious failed with error -22
[ 1328.762083][   T24] glorious 0003:258A:0036.003B: item fetching failed at offset 0/2
[ 1328.795399][   T24] glorious 0003:258A:0036.003B: probe with driver glorious failed with error -22
[ 1328.839322][T16231] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1329.396096][T16217] syz.4.1863 (16217): drop_caches: 2
[ 1329.469166][T16239] fuse: Bad value for 'fd'
[ 1329.479018][T16238] syz.3.1862 (16238): drop_caches: 2
[ 1329.715093][T16237] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1330.940043][ T5929] usb 5-1: USB disconnect, device number 23
[ 1331.133668][ T5929] usb 4-1: USB disconnect, device number 4
[ 1331.207527][   T13] bond1: (slave bridge0): link status up again after 0 ms
[ 1331.215510][   T13] bond1: (slave bridge0): failed to get link speed/duplex
[ 1331.416660][T10864] bond1: (slave bridge0): failed to get link speed/duplex
[ 1331.549261][T10947] bond1: (slave bridge0): failed to get link speed/duplex
[ 1331.687559][ T7693] bond1: (slave bridge0): failed to get link speed/duplex
[ 1331.891620][ T7693] bond1: (slave bridge0): failed to get link speed/duplex
[ 1332.027436][T10947] bond1: (slave bridge0): failed to get link speed/duplex
[ 1332.221766][ T7693] bond1: (slave bridge0): failed to get link speed/duplex
[ 1332.449164][ T7693] net_ratelimit: 1 callbacks suppressed
[ 1332.449189][ T7693] bond1: (slave bridge0): failed to get link speed/duplex
[ 1332.617526][T10864] bond1: (slave bridge0): failed to get link speed/duplex
[ 1332.746614][ T7693] bond1: (slave bridge0): failed to get link speed/duplex
[ 1332.832681][T16273] netlink: 'syz.3.1875': attribute type 10 has an invalid length.
[ 1332.840906][T16273] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1875'.
[ 1332.850172][T16273] dummy0: left promiscuous mode
[ 1332.868717][T16273] bridge0: port 3(dummy0) entered blocking state
[ 1332.875872][T16273] bridge0: port 3(dummy0) entered disabled state
[ 1332.883425][T16273] dummy0: entered allmulticast mode
[ 1332.901614][T16273] dummy0: entered promiscuous mode
[ 1332.923672][T16273] bridge0: port 3(dummy0) entered blocking state
[ 1332.930173][T16273] bridge0: port 3(dummy0) entered forwarding state
[ 1332.997485][T10864] bond1: (slave bridge0): failed to get link speed/duplex
[ 1333.113258][T10864] bond1: (slave bridge0): failed to get link speed/duplex
[ 1333.495660][ T7693] bond1: (slave bridge0): failed to get link speed/duplex
[ 1333.592246][T16285] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1333.677484][ T7693] bond1: (slave bridge0): failed to get link speed/duplex
[ 1334.189617][   T13] bond1: (slave bridge0): failed to get link speed/duplex
[ 1334.337330][T10947] bond1: (slave bridge0): failed to get link speed/duplex
[ 1335.404046][T16309] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1335.667256][ T8816] usb 3-1: new high-speed USB device number 124 using dummy_hcd
[ 1335.835063][ T8816] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1335.882207][ T8816] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1335.994065][ T8816] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1336.017305][ T8816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1336.089620][ T8816] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1336.482870][T16309] vlan0: entered promiscuous mode
[ 1336.527710][ T8816] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1337.497344][   T36] net_ratelimit: 9 callbacks suppressed
[ 1337.497361][   T36] bond1: (slave bridge0): failed to get link speed/duplex
[ 1337.627733][   T13] bond1: (slave bridge0): failed to get link speed/duplex
[ 1337.756555][ T1104] bond1: (slave bridge0): failed to get link speed/duplex
[ 1337.903521][T10864] bond1: (slave bridge0): failed to get link speed/duplex
[ 1337.947422][ T8816] usb 5-1: new low-speed USB device number 24 using dummy_hcd
[ 1338.231235][T16339] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1338.256122][T10864] bond1: (slave bridge0): failed to get link speed/duplex
[ 1338.367522][T10864] bond1: (slave bridge0): failed to get link speed/duplex
[ 1338.385155][ T8816] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1338.477425][T10947] bond1: (slave bridge0): failed to get link speed/duplex
[ 1338.495832][ T8816] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1338.566433][ T8816] usb 5-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[ 1338.609058][ T8816] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1338.628272][ T8816] usb 5-1: config 0 descriptor??
[ 1338.661705][ T1104] bond1: (slave bridge0): failed to get link speed/duplex
[ 1338.818563][ T1104] bond1: (slave bridge0): failed to get link speed/duplex
[ 1339.012699][T10864] bond1: (slave bridge0): failed to get link speed/duplex
[ 1339.025154][ T5929] usb 3-1: USB disconnect, device number 124
[ 1339.128296][ T8816] glorious 0003:258A:0036.003C: item fetching failed at offset 0/2
[ 1339.276705][ T8816] glorious 0003:258A:0036.003C: probe with driver glorious failed with error -22
[ 1339.720959][T16346] syz.4.1885 (16346): drop_caches: 2
[ 1340.602276][T16356] sctp: [Deprecated]: syz.1.1890 (pid 16356) Use of int in maxseg socket option.
[ 1340.602276][T16356] Use struct sctp_assoc_value instead
[ 1340.677309][   T24] usb 3-1: new high-speed USB device number 125 using dummy_hcd
[ 1340.755975][T16356] netlink: 'syz.1.1890': attribute type 10 has an invalid length.
[ 1340.764289][T16356] veth0_vlan: left promiscuous mode
[ 1340.772179][T16356] veth0_vlan: entered promiscuous mode
[ 1340.780517][T16356] team0: Device veth0_vlan failed to register rx_handler
[ 1341.070452][   T24] usb 3-1: config 0 has no interfaces?
[ 1341.125136][   T24] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1341.142153][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1341.259231][   T24] usb 3-1: Product: syz
[ 1341.270434][   T24] usb 3-1: Manufacturer: syz
[ 1341.292138][   T24] usb 3-1: SerialNumber: syz
[ 1341.309609][   T24] usb 3-1: config 0 descriptor??
[ 1341.904134][T16365] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1889'.
[ 1341.922115][ T5929] usb 5-1: USB disconnect, device number 24
[ 1342.127299][   T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 1342.427687][   T10] usb 4-1: Using ep0 maxpacket: 16
[ 1342.436299][   T10] usb 4-1: config 0 has an invalid interface number: 68 but max is 0
[ 1342.475225][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1342.502361][   T10] usb 4-1: config 0 has no interface number 0
[ 1342.509287][   T36] net_ratelimit: 20 callbacks suppressed
[ 1342.509307][   T36] bond1: (slave bridge0): failed to get link speed/duplex
[ 1342.621418][   T10] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4
[ 1342.658232][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1342.706636][T16374] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1342.747219][   T10] usb 4-1: Product: syz
[ 1342.753351][   T10] usb 4-1: Manufacturer: syz
[ 1342.759196][T10947] bond1: (slave bridge0): failed to get link speed/duplex
[ 1342.772829][   T10] usb 4-1: SerialNumber: syz
[ 1342.790533][   T10] usb 4-1: config 0 descriptor??
[ 1342.897385][   T36] bond1: (slave bridge0): failed to get link speed/duplex
[ 1342.917744][   T24] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[ 1343.028358][ T1104] bond1: (slave bridge0): failed to get link speed/duplex
[ 1343.056474][   T10] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1343.227942][   T36] bond1: (slave bridge0): failed to get link speed/duplex
[ 1343.320423][   T24] usb 5-1: Using ep0 maxpacket: 8
[ 1343.367396][ T1104] bond1: (slave bridge0): failed to get link speed/duplex
[ 1343.404488][   T24] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[ 1343.413990][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1343.440972][   T24] usb 5-1: Product: syz
[ 1343.465147][   T24] usb 5-1: Manufacturer: syz
[ 1343.563122][   T36] bond1: (slave bridge0): failed to get link speed/duplex
[ 1343.580175][   T24] usb 5-1: SerialNumber: syz
[ 1343.712309][   T24] usb 5-1: config 0 descriptor??
[ 1343.749534][   T24] gspca_main: sonixj-2.14.0 probing 0c45:613e
[ 1343.843209][   T13] bond1: (slave bridge0): failed to get link speed/duplex
[ 1343.862688][   T10] usb 4-1: USB disconnect, device number 5
[ 1343.871623][T10864] usb 4-1: Failed to submit usb control message: -71
[ 1343.889349][T10864] usb 4-1: unable to send the bmi data to the device: -71
[ 1343.924497][T10864] usb 4-1: unable to get target info from device
[ 1343.974089][T10864] usb 4-1: could not get target info (-71)
[ 1343.988220][   T36] bond1: (slave bridge0): failed to get link speed/duplex
[ 1343.997340][T10864] usb 4-1: could not probe fw (-71)
[ 1344.018083][ T5929] usb 3-1: USB disconnect, device number 125
[ 1344.147749][T10864] bond1: (slave bridge0): failed to get link speed/duplex
[ 1344.537300][   T10] usb 3-1: new high-speed USB device number 126 using dummy_hcd
[ 1344.757379][ T5930] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[ 1344.883752][T16372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1344.900093][T16372] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1344.990515][   T10] usb 3-1: config 0 has an invalid interface number: 255 but max is 0
[ 1345.009365][   T10] usb 3-1: config 0 has no interface number 0
[ 1345.025773][   T10] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[ 1345.045674][ T5930] usb 2-1: Using ep0 maxpacket: 8
[ 1345.086262][ T5930] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64
[ 1345.103176][   T10] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[ 1345.131443][ T5930] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1345.169805][ T5930] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76
[ 1345.179634][   T24] gspca_sonixj: reg_w1 err -110
[ 1345.210045][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1345.227746][   T24] sonixj 5-1:0.0: probe with driver sonixj failed with error -110
[ 1345.243723][   T10] usb 3-1: config 0 interface 255 has no altsetting 0
[ 1345.267849][ T5930] usb 2-1: Product: syz
[ 1345.285580][ T5930] usb 2-1: Manufacturer: syz
[ 1345.287241][   T10] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[ 1345.305347][ T5930] usb 2-1: SerialNumber: syz
[ 1345.326264][ T5930] usb 2-1: config 0 descriptor??
[ 1345.369245][ T5930] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found
[ 1345.509358][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1345.612308][   T10] usb 3-1: config 0 descriptor??
[ 1345.653395][   T10] ums-realtek 3-1:0.255: USB Mass Storage device detected
[ 1345.911956][T16395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1345.921334][T16395] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1346.302379][   T24] usb 3-1: USB disconnect, device number 126
[ 1346.592316][   T24] usb 5-1: USB disconnect, device number 25
[ 1347.570872][T16410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1898'.
[ 1347.681187][T16411] input: syz0 as /devices/virtual/input/input39
[ 1347.698527][ T1104] net_ratelimit: 24 callbacks suppressed
[ 1347.698576][ T1104] bond1: (slave bridge0): failed to get link speed/duplex
[ 1347.847519][T10864] bond1: (slave bridge0): failed to get link speed/duplex
[ 1348.239078][   T13] bond1: (slave bridge0): failed to get link speed/duplex
[ 1348.386355][   T13] bond1: (slave bridge0): failed to get link speed/duplex
[ 1348.616822][ T5930] snd_usb_toneport 2-1:0.0: set_interface failed
[ 1348.633748][ T5930] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected
[ 1348.675863][ T5930] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -71
[ 1348.697266][   T36] bond1: (slave bridge0): failed to get link speed/duplex
[ 1348.794066][ T5930] usb 2-1: USB disconnect, device number 11
[ 1348.825734][   T36] bond1: (slave bridge0): failed to get link speed/duplex
[ 1348.997827][   T36] bond1: (slave bridge0): failed to get link speed/duplex
[ 1349.222638][ T7693] bond1: (slave bridge0): failed to get link speed/duplex
[ 1349.352691][   T30] kauditd_printk_skb: 27 callbacks suppressed
[ 1349.352713][   T30] audit: type=1326 audit(1752192329.908:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16414 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0f7d8e929 code=0x7ffc0000
[ 1349.386553][   T36] bond1: (slave bridge0): failed to get link speed/duplex
[ 1349.404530][   T30] audit: type=1326 audit(1752192329.908:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16414 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0f7d8e929 code=0x7ffc0000
[ 1349.489387][T16425] netlink: 'syz.3.1901': attribute type 13 has an invalid length.
[ 1349.554771][   T36] bond1: (slave bridge0): failed to get link speed/duplex
[ 1349.627397][T16429] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[ 1349.664113][   T30] audit: type=1326 audit(1752192329.908:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16414 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7ff0f7d8e929 code=0x7ffc0000
[ 1349.727263][   T30] audit: type=1326 audit(1752192329.908:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16414 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0f7d8e929 code=0x7ffc0000
[ 1349.914039][   T30] audit: type=1326 audit(1752192329.908:1486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16414 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0f7d8e929 code=0x7ffc0000
[ 1350.254795][   T10] usb 3-1: new low-speed USB device number 127 using dummy_hcd
[ 1350.415930][   T30] audit: type=1326 audit(1752192329.908:1487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16414 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0f7d8e929 code=0x7ffc0000
[ 1350.465697][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1350.507186][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1350.537586][   T30] audit: type=1326 audit(1752192329.908:1488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16414 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff0f7d8e929 code=0x7ffc0000
[ 1350.582948][   T10] usb 3-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[ 1350.766777][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1350.810255][   T10] usb 3-1: config 0 descriptor??
[ 1350.817553][   T30] audit: type=1326 audit(1752192330.538:1489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16414 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0f7d8e929 code=0x7ffc0000
[ 1350.878236][   T30] audit: type=1326 audit(1752192330.538:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16414 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0f7d8e929 code=0x7ffc0000
[ 1350.917229][   T30] audit: type=1326 audit(1752192330.578:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16414 comm="syz.1.1900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0f7d8e929 code=0x7ffc0000
[ 1350.951933][T16434] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1351.207588][ T5930] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[ 1351.446761][ T5930] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1351.458801][ T5930] usb 5-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1351.596039][ T5930] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1351.600871][   T10] glorious 0003:258A:0036.003D: item fetching failed at offset 0/2
[ 1351.644218][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1351.756202][   T10] glorious 0003:258A:0036.003D: probe with driver glorious failed with error -22
[ 1351.852766][ T5930] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1351.947289][   T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[ 1352.055664][ T5930] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1352.409327][T16430] syz.2.1902 (16430): drop_caches: 2
[ 1352.519691][   T24] usb 2-1: Using ep0 maxpacket: 8
[ 1352.759142][   T36] net_ratelimit: 22 callbacks suppressed
[ 1352.759160][   T36] bond1: (slave bridge0): failed to get link speed/duplex
[ 1352.855209][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1352.871301][   T24] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1352.888974][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1352.927662][ T1104] bond1: (slave bridge0): failed to get link speed/duplex
[ 1352.958371][   T24] usb 2-1: config 0 descriptor??
[ 1353.047423][ T1104] bond1: (slave bridge0): failed to get link speed/duplex
[ 1353.157380][ T1104] bond1: (slave bridge0): failed to get link speed/duplex
[ 1353.228369][   T24] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1353.267287][ T1104] bond1: (slave bridge0): failed to get link speed/duplex
[ 1353.378456][ T7693] bond1: (slave bridge0): failed to get link speed/duplex
[ 1353.557544][ T7693] bond1: (slave bridge0): failed to get link speed/duplex
[ 1353.669127][ T1104] bond1: (slave bridge0): failed to get link speed/duplex
[ 1353.778368][T10864] bond1: (slave bridge0): failed to get link speed/duplex
[ 1353.887304][T10864] bond1: (slave bridge0): failed to get link speed/duplex
[ 1353.961064][T16452] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1907'.
[ 1353.996698][  T923] usb 3-1: USB disconnect, device number 127
[ 1354.033076][T16452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1907'.
[ 1354.042552][T16452] chnl_net:caif_netlink_parms(): no params data found
[ 1354.274583][T16457] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1354.340535][ T5909] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 1354.726016][ T5909] usb 4-1: config index 0 descriptor too short (expected 8192, got 77)
[ 1354.737194][ T5909] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1354.757277][  T923] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 1354.777977][ T5909] usb 4-1: config 0 has no interfaces?
[ 1354.807580][ T5909] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1354.816876][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1354.866582][ T5909] usb 4-1: Product: syz
[ 1354.882408][ T5909] usb 4-1: Manufacturer: syz
[ 1354.887052][ T5909] usb 4-1: SerialNumber: syz
[ 1354.936306][ T5909] usb 4-1: config 0 descriptor??
[ 1354.987545][  T923] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1354.998073][  T923] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1355.037325][  T923] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1355.156024][  T923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1355.181645][ T5930] usb 2-1: USB disconnect, device number 12
[ 1355.243422][  T923] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1355.459810][T16457] vlan0: entered promiscuous mode
[ 1355.903991][  T923] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1356.267586][  T923] usb 5-1: USB disconnect, device number 26
[ 1356.920127][ T5909] usb 4-1: USB disconnect, device number 6
[ 1357.170522][T16471] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus
[ 1357.220431][T16471] loop8: detected capacity change from 0 to 7
[ 1357.228452][T16471] Dev loop8: unable to read RDB block 7
[ 1357.234669][T16471]  loop8: unable to read partition table
[ 1357.245673][T16471] loop8: partition table beyond EOD, truncated
[ 1357.323399][T16471] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[ 1357.480486][T16478] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1913'.
[ 1357.797664][  T923] usb 3-1: USB disconnect, device number 2
[ 1358.357300][ T7693] net_ratelimit: 23 callbacks suppressed
[ 1358.357321][ T7693] bond1: (slave bridge0): failed to get link speed/duplex
[ 1358.423864][T16492] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1915'.
[ 1358.448954][T16492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1915'.
[ 1358.519396][T16492] chnl_net:caif_netlink_parms(): no params data found
[ 1358.624802][T16496] xt_hashlimit: max too large, truncated to 1048576
[ 1358.635721][T16496] xt_bpf: check failed: parse error
[ 1358.721556][   T36] bond1: (slave bridge0): failed to get link speed/duplex
[ 1358.797295][  T923] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 1358.907388][   T36] bond1: (slave bridge0): failed to get link speed/duplex
[ 1358.966211][  T923] usb 3-1: config index 0 descriptor too short (expected 8192, got 77)
[ 1359.017434][  T923] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1359.037552][ T7693] bond1: (slave bridge0): failed to get link speed/duplex
[ 1359.054960][  T923] usb 3-1: config 0 has no interfaces?
[ 1359.085786][  T923] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1359.095133][  T923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1359.105292][  T923] usb 3-1: Product: syz
[ 1359.111824][  T923] usb 3-1: Manufacturer: syz
[ 1359.116944][  T923] usb 3-1: SerialNumber: syz
[ 1359.162082][   T36] bond1: (slave bridge0): failed to get link speed/duplex
[ 1359.192512][  T923] usb 3-1: config 0 descriptor??
[ 1359.480533][   T36] bond1: (slave bridge0): failed to get link speed/duplex
[ 1359.617655][   T36] bond1: (slave bridge0): failed to get link speed/duplex
[ 1359.755678][ T7693] bond1: (slave bridge0): failed to get link speed/duplex
[ 1359.887255][ T5909] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[ 1359.898584][ T7693] bond1: (slave bridge0): failed to get link speed/duplex
[ 1360.018073][ T1104] bond1: (slave bridge0): failed to get link speed/duplex
[ 1360.090234][ T5909] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1360.104929][ T5909] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1360.114170][ T5909] usb 2-1: New USB device found, idVendor=0421, idProduct=0223, bcdDevice=43.58
[ 1360.129104][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1360.234561][ T5909] usb 2-1: config 0 descriptor??
[ 1360.534531][T16506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1360.546637][T16506] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1360.845658][T16518] netlink: 'syz.0.1919': attribute type 13 has an invalid length.
[ 1360.914249][T16520] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[ 1360.987459][T16506] nvme_fabrics: missing parameter 'transport=%s'
[ 1360.994187][T16506] nvme_fabrics: missing parameter 'nqn=%s'
[ 1361.402413][  T923] usb 3-1: USB disconnect, device number 3
[ 1361.555927][T16521] netlink: 'syz.3.1918': attribute type 7 has an invalid length.
[ 1361.597007][T16517] syz.3.1918 (16517): drop_caches: 2
[ 1361.707955][ T1303] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.714341][ T1303] ieee802154 phy1 wpan1: encryption failed: -22
[ 1361.771758][T16525] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1361.833842][T16517] syz.3.1918 (16517): drop_caches: 2
[ 1361.985529][T16521] : entered promiscuous mode
[ 1362.067553][ T5909] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[ 1362.282473][ T5909] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1362.304136][ T5909] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1362.351361][ T5909] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1362.390438][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1362.516775][ T5909] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[ 1362.582928][T16530] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1921'.
[ 1362.625903][ T5909] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1362.705564][T16530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1921'.
[ 1362.759762][T16525] vlan0: entered promiscuous mode
[ 1363.107324][ T5909] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[ 1363.294510][ T5909] usb 5-1: config index 0 descriptor too short (expected 8192, got 77)
[ 1363.303090][ T5909] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1363.330759][ T5909] usb 5-1: config 0 has no interfaces?
[ 1363.353335][T16530] chnl_net:caif_netlink_parms(): no params data found
[ 1363.355644][ T5909] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1363.411076][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1363.422556][   T24] usb 2-1: USB disconnect, device number 13
[ 1363.483647][ T5909] usb 5-1: Product: syz
[ 1363.506028][ T5909] usb 5-1: Manufacturer: syz
[ 1363.526513][ T5909] usb 5-1: SerialNumber: syz
[ 1363.609879][ T5909] usb 5-1: config 0 descriptor??
[ 1363.770761][T16542] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1363.807385][T10864] net_ratelimit: 20 callbacks suppressed
[ 1363.807403][T10864] bond1: (slave bridge0): failed to get link speed/duplex
[ 1363.998997][   T36] bond1: (slave bridge0): failed to get link speed/duplex
[ 1364.027301][   T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[ 1364.188105][ T7693] bond1: (slave bridge0): failed to get link speed/duplex
[ 1364.201085][   T24] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1364.358832][T10864] bond1: (slave bridge0): failed to get link speed/duplex
[ 1364.371570][   T24] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1364.516865][   T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1364.526445][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1364.572838][   T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1364.619560][T10864] bond1: (slave bridge0): failed to get link speed/duplex
[ 1364.653446][T16545] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1364.680549][   T24] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1364.738124][ T1104] bond1: (slave bridge0): failed to get link speed/duplex
[ 1365.017943][   T36] bond1: (slave bridge0): failed to get link speed/duplex
[ 1365.394456][ T5909] usb 5-1: USB disconnect, device number 27
[ 1365.406915][T16550] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1365.656422][ T8816] usb 3-1: USB disconnect, device number 4
[ 1365.810075][T16559] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1365.940420][   T36] bond1: (slave bridge0): failed to get link speed/duplex
[ 1366.063217][T16565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1927'.
[ 1367.287384][ T5909] usb 4-1: new low-speed USB device number 7 using dummy_hcd
[ 1367.400892][T16567] netlink: 'syz.2.1928': attribute type 4 has an invalid length.
[ 1367.426943][T16567] netlink: 'syz.2.1928': attribute type 4 has an invalid length.
[ 1367.602341][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1367.667050][T16576] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1930'.
[ 1367.694738][ T8816] usb 2-1: USB disconnect, device number 14
[ 1367.917914][ T5909] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1367.920608][T16576] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1930'.
[ 1367.954383][T16576] chnl_net:caif_netlink_parms(): no params data found
[ 1367.993239][ T5909] usb 4-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[ 1368.037289][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1368.098264][ T5909] usb 4-1: config 0 descriptor??
[ 1368.297364][ T8816] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[ 1368.385959][T16582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1931'.
[ 1368.399822][T16582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1931'.
[ 1368.452691][ T8816] usb 5-1: config index 0 descriptor too short (expected 8192, got 77)
[ 1368.464741][ T8816] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1368.483078][T16582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1931'.
[ 1368.494304][ T8816] usb 5-1: config 0 has no interfaces?
[ 1368.505260][ T8816] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1368.516378][ T8816] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1368.565119][ T8816] usb 5-1: Product: syz
[ 1368.569869][ T8816] usb 5-1: Manufacturer: syz
[ 1368.571327][ T5909] glorious 0003:258A:0036.003E: item fetching failed at offset 0/2
[ 1368.575756][ T8816] usb 5-1: SerialNumber: syz
[ 1368.596955][ T8816] usb 5-1: config 0 descriptor??
[ 1368.613446][ T5909] glorious 0003:258A:0036.003E: probe with driver glorious failed with error -22
[ 1368.878649][   T36] net_ratelimit: 20 callbacks suppressed
[ 1368.878674][   T36] bond1: (slave bridge0): failed to get link speed/duplex
[ 1369.196711][T16584] syz.3.1929 (16584): drop_caches: 2
[ 1369.337417][ T1104] bond1: (slave bridge0): failed to get link speed/duplex
[ 1369.457560][   T36] bond1: (slave bridge0): failed to get link speed/duplex
[ 1369.567314][   T36] bond1: (slave bridge0): failed to get link speed/duplex
[ 1370.017742][   T13] bond1: (slave bridge0): failed to get link speed/duplex
[ 1370.196791][   T13] bond1: (slave bridge0): failed to get link speed/duplex
[ 1370.361497][   T13] bond1: (slave bridge0): failed to get link speed/duplex
[ 1370.514554][T16589] pim6reg: entered allmulticast mode
[ 1370.550056][T16590] pim6reg: left allmulticast mode
[ 1370.667697][ T8816] usb 5-1: USB disconnect, device number 28
[ 1370.698086][   T36] bond1: (slave bridge0): failed to get link speed/duplex
[ 1370.999585][T10864] bond1: (slave bridge0): failed to get link speed/duplex
[ 1371.095055][T16596] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1371.152658][T10864] bond1: (slave bridge0): failed to get link speed/duplex
[ 1371.412469][  T923] usb 4-1: USB disconnect, device number 7
[ 1371.460887][T16603] netlink: 'syz.4.1934': attribute type 13 has an invalid length.
[ 1371.468801][ T8816] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[ 1371.513578][T16603] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[ 1371.620717][ T8816] usb 2-1: config 0 has no interfaces?
[ 1371.631128][ T8816] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1371.642867][ T8816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1371.661328][ T8816] usb 2-1: Product: syz
[ 1371.668277][T16610] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1937'.
[ 1371.687223][ T8816] usb 2-1: Manufacturer: syz
[ 1371.767880][T16610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1937'.
[ 1371.782437][ T8816] usb 2-1: SerialNumber: syz
[ 1371.797045][ T8816] usb 2-1: config 0 descriptor??
[ 1371.902242][T16610] chnl_net:caif_netlink_parms(): no params data found
[ 1372.012046][T16600] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1935'.
[ 1372.067427][ T5909] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[ 1372.249450][ T5909] usb 4-1: config index 0 descriptor too short (expected 8192, got 77)
[ 1372.257944][ T5909] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1372.293505][ T5909] usb 4-1: config 0 has no interfaces?
[ 1372.315925][ T5909] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1372.325543][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1372.340086][ T5909] usb 4-1: Product: syz
[ 1372.354734][ T5909] usb 4-1: Manufacturer: syz
[ 1372.385207][ T5909] usb 4-1: SerialNumber: syz
[ 1372.463822][ T5909] usb 4-1: config 0 descriptor??
[ 1372.595071][T16618] sctp: [Deprecated]: syz.2.1938 (pid 16618) Use of int in maxseg socket option.
[ 1372.595071][T16618] Use struct sctp_assoc_value instead
[ 1372.619906][T16618] netlink: 'syz.2.1938': attribute type 10 has an invalid length.
[ 1372.630208][T16618] veth0_vlan: left promiscuous mode
[ 1372.645329][T16618] veth0_vlan: entered promiscuous mode
[ 1372.657503][T16618] team0: Device veth0_vlan failed to register rx_handler
[ 1373.987491][T10947] net_ratelimit: 19 callbacks suppressed
[ 1373.987522][T10947] bond1: (slave bridge0): failed to get link speed/duplex
[ 1374.259852][T10864] bond1: (slave bridge0): failed to get link speed/duplex
[ 1374.374701][   T24] usb 2-1: USB disconnect, device number 15
[ 1374.411955][T10864] bond1: (slave bridge0): failed to get link speed/duplex
[ 1374.608099][T10947] bond1: (slave bridge0): failed to get link speed/duplex
[ 1374.717825][T10864] bond1: (slave bridge0): failed to get link speed/duplex
[ 1374.734108][T16626] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus
[ 1374.762856][ T5909] usb 4-1: USB disconnect, device number 8
[ 1374.795429][T16626] loop8: detected capacity change from 0 to 7
[ 1374.802513][T16626] Dev loop8: unable to read RDB block 7
[ 1374.842247][T16626]  loop8: unable to read partition table
[ 1374.896042][T16626] loop8: partition table beyond EOD, truncated
[ 1374.916362][T16626] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[ 1374.930578][ T1104] bond1: (slave bridge0): failed to get link speed/duplex
[ 1375.079211][T10947] bond1: (slave bridge0): failed to get link speed/duplex
[ 1375.156146][T16632] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 1375.199775][T10947] bond1: (slave bridge0): failed to get link speed/duplex
[ 1375.391249][T10947] bond1: (slave bridge0): failed to get link speed/duplex
[ 1375.619681][   T36] bond1: (slave bridge0): failed to get link speed/duplex
[ 1375.757283][ T5909] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[ 1375.782747][T16643] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1375.803876][T16640] x_tables: duplicate underflow at hook 3
[ 1376.564751][ T5909] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1376.575133][ T5909] usb 4-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1376.622513][T16650] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1376.707352][ T5909] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1376.737024][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1377.017849][T16646] pim6reg: entered allmulticast mode
[ 1377.150370][   T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[ 1377.172860][T16645] pim6reg: left allmulticast mode
[ 1377.281413][ T5909] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1377.448425][T16632] vlan2: entered promiscuous mode
[ 1377.658297][ T5909] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1377.694441][   T24] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1377.715395][   T24] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1377.773650][   T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1377.870700][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1377.926179][   T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1378.274830][ T3203] usb 3-1: new low-speed USB device number 5 using dummy_hcd
[ 1378.302100][   T24] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1378.615461][ T3203] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1378.626696][ T3203] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1378.652885][ T3203] usb 3-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[ 1378.705581][ T3203] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1378.860913][ T3203] usb 3-1: config 0 descriptor??
[ 1379.087605][T10864] net_ratelimit: 15 callbacks suppressed
[ 1379.087629][T10864] bond1: (slave bridge0): failed to get link speed/duplex
[ 1379.398399][ T3203] glorious 0003:258A:0036.003F: item fetching failed at offset 0/2
[ 1379.403983][T16669] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1949'.
[ 1379.449380][   T36] bond1: (slave bridge0): failed to get link speed/duplex
[ 1379.567053][T16669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1949'.
[ 1379.576859][ T1104] bond1: (slave bridge0): failed to get link speed/duplex
[ 1379.588363][T16669] chnl_net:caif_netlink_parms(): no params data found
[ 1379.629563][ T3203] glorious 0003:258A:0036.003F: probe with driver glorious failed with error -22
[ 1379.700853][ T8816] usb 4-1: USB disconnect, device number 9
[ 1379.823873][ T3203] usb 2-1: USB disconnect, device number 16
[ 1379.868073][  T923] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[ 1380.029431][  T923] usb 5-1: config index 0 descriptor too short (expected 8192, got 77)
[ 1380.037921][  T923] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1380.068773][T16672] syz.2.1947 (16672): drop_caches: 2
[ 1380.116817][  T923] usb 5-1: config 0 has no interfaces?
[ 1380.127942][   T13] bond1: (slave bridge0): failed to get link speed/duplex
[ 1380.160843][  T923] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1380.528163][T16680] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1380.561158][ T1104] bond1: (slave bridge0): failed to get link speed/duplex
[ 1380.571133][  T923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1380.627651][T16683] netlink: 'syz.3.1951': attribute type 13 has an invalid length.
[ 1380.679454][T16685] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[ 1380.705614][T16683] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1380.837597][  T923] usb 5-1: Product: syz
[ 1380.841875][  T923] usb 5-1: Manufacturer: syz
[ 1380.846512][  T923] usb 5-1: SerialNumber: syz
[ 1380.855538][  T923] usb 5-1: config 0 descriptor??
[ 1381.251028][   T36] bond1: (slave bridge0): failed to get link speed/duplex
[ 1381.384426][ T7699] bond1: (slave bridge0): failed to get link speed/duplex
[ 1381.504436][   T24] usb 3-1: USB disconnect, device number 5
[ 1381.517260][T10864] bond1: (slave bridge0): failed to get link speed/duplex
[ 1381.640555][ T7699] bond1: (slave bridge0): failed to get link speed/duplex
[ 1382.019231][T16693] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1382.278653][ T8816] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[ 1382.319356][  T923] usb 5-1: USB disconnect, device number 29
[ 1382.357256][ T3203] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[ 1382.452910][ T8816] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1382.463718][ T8816] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1382.613120][ T3203] usb 3-1: config 0 has no interfaces?
[ 1382.626142][ T8816] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1382.713379][ T8816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1382.789815][ T3203] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1382.807555][ T3203] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1382.823604][ T3203] usb 3-1: Product: syz
[ 1382.838672][T16699] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1955'.
[ 1382.989460][ T3203] usb 3-1: Manufacturer: syz
[ 1383.003636][ T3203] usb 3-1: SerialNumber: syz
[ 1383.095252][ T3203] usb 3-1: config 0 descriptor??
[ 1383.097694][ T8816] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1383.434050][T16691] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1952'.
[ 1383.496455][ T8816] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1383.520045][ T5855] udevd[5855]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1384.129063][ T1104] net_ratelimit: 17 callbacks suppressed
[ 1384.129082][ T1104] bond1: (slave bridge0): failed to get link speed/duplex
[ 1384.247799][T10947] bond1: (slave bridge0): failed to get link speed/duplex
[ 1384.358032][ T1104] bond1: (slave bridge0): failed to get link speed/duplex
[ 1384.507749][   T13] bond1: (slave bridge0): failed to get link speed/duplex
[ 1384.566812][T16708] netlink: 'syz.3.1956': attribute type 13 has an invalid length.
[ 1384.596538][T16708] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1384.630274][T16710] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[ 1384.669179][T10947] bond1: (slave bridge0): failed to get link speed/duplex
[ 1384.816282][   T13] bond1: (slave bridge0): failed to get link speed/duplex
[ 1384.927364][T10947] bond1: (slave bridge0): failed to get link speed/duplex
[ 1385.039331][   T13] bond1: (slave bridge0): failed to get link speed/duplex
[ 1385.188602][   T13] bond1: (slave bridge0): failed to get link speed/duplex
[ 1385.458537][   T10] usb 3-1: USB disconnect, device number 6
[ 1385.488316][ T8816] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[ 1385.777566][ T8816] usb 5-1: Using ep0 maxpacket: 32
[ 1385.785294][ T8816] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1385.802920][ T8816] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1385.825682][ T8816] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[ 1385.850604][ T8816] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1385.912843][ T8816] usb 5-1: config 0 descriptor??
[ 1386.197446][ T5909] usb 2-1: USB disconnect, device number 17
[ 1389.238203][ T7699] net_ratelimit: 28 callbacks suppressed
[ 1389.238227][ T7699] bond1: (slave bridge0): failed to get link speed/duplex
[ 1389.439941][T16748] sch_fq: defrate 6 ignored.
[ 1389.705389][   T36] bond1: (slave bridge0): failed to get link speed/duplex
[ 1390.201871][T10947] bond1: (slave bridge0): failed to get link speed/duplex
[ 1390.395382][   T36] bond1: (slave bridge0): failed to get link speed/duplex
[ 1390.567309][   T36] bond1: (slave bridge0): failed to get link speed/duplex
[ 1390.624482][T16720] delete_channel: no stack
[ 1390.698197][ T1104] bond1: (slave bridge0): failed to get link speed/duplex
[ 1390.863421][ T8816] usbhid 5-1:0.0: can't add hid device: -71
[ 1390.887533][ T8816] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1390.947804][T10947] bond1: (slave bridge0): failed to get link speed/duplex
[ 1390.955170][ T8816] usb 5-1: USB disconnect, device number 30
[ 1391.060565][T10947] bond1: (slave bridge0): failed to get link speed/duplex
[ 1391.256466][ T1104] bond1: (slave bridge0): failed to get link speed/duplex
[ 1391.378125][  T923] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[ 1391.390011][ T1104] bond1: (slave bridge0): failed to get link speed/duplex
[ 1391.465390][T16765] binder: 16762:16765 ioctl c0306201 0 returned -14
[ 1391.545172][  T923] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1391.564598][  T923] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1391.610766][  T923] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1391.687261][  T923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1391.717388][T16767] tipc: Failed to remove unknown binding: 66,1,1/0:2424822679/2424822681
[ 1391.726689][T16767] tipc: Failed to remove unknown binding: 66,1,1/0:2424822679/2424822681
[ 1391.752393][T16757] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 1391.764116][  T923] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[ 1392.037490][ T8816] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[ 1392.517508][ T8816] usb 5-1: Using ep0 maxpacket: 16
[ 1392.656510][ T8816] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1392.767241][ T8816] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1392.819518][ T8816] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[ 1392.862354][ T8816] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1392.906509][ T8816] usb 5-1: config 0 descriptor??
[ 1393.357379][  T923] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[ 1393.517454][  T923] usb 3-1: Using ep0 maxpacket: 8
[ 1393.560353][ T8816] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8241.0040/input/input42
[ 1393.591794][  T923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1393.672315][  T923] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1393.709569][  T923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1393.743776][  T923] usb 3-1: config 0 descriptor??
[ 1393.791989][ T8816] appleir 0003:05AC:8241.0040: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0
[ 1394.222938][  T923] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1
[ 1394.362690][ T1104] net_ratelimit: 23 callbacks suppressed
[ 1394.362706][ T1104] bond1: (slave bridge0): failed to get link speed/duplex
[ 1394.540659][   T13] bond1: (slave bridge0): failed to get link speed/duplex
[ 1394.667895][   T13] bond1: (slave bridge0): failed to get link speed/duplex
[ 1394.887772][   T13] bond1: (slave bridge0): failed to get link speed/duplex
[ 1394.991062][  T923] usb 5-1: reset high-speed USB device number 31 using dummy_hcd
[ 1395.049076][T10864] bond1: (slave bridge0): failed to get link speed/duplex
[ 1395.068044][   T10] usb 4-1: USB disconnect, device number 10
[ 1395.280130][T10947] bond1: (slave bridge0): failed to get link speed/duplex
[ 1395.407449][   T13] bond1: (slave bridge0): failed to get link speed/duplex
[ 1395.689684][   T30] kauditd_printk_skb: 17 callbacks suppressed
[ 1395.689707][   T30] audit: type=1326 audit(1752192376.238:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16785 comm="syz.0.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad078e929 code=0x7ffc0000
[ 1395.749117][T10864] bond1: (slave bridge0): failed to get link speed/duplex
[ 1395.811723][T16794] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[ 1395.841867][   T30] audit: type=1326 audit(1752192376.238:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16785 comm="syz.0.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad078e929 code=0x7ffc0000
[ 1395.937567][T10947] bond1: (slave bridge0): failed to get link speed/duplex
[ 1396.157480][   T13] bond1: (slave bridge0): failed to get link speed/duplex
[ 1396.476878][   T30] audit: type=1326 audit(1752192376.238:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16785 comm="syz.0.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f8ad078e929 code=0x7ffc0000
[ 1396.529169][   T30] audit: type=1326 audit(1752192376.238:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16785 comm="syz.0.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad078e929 code=0x7ffc0000
[ 1396.584475][T16798] netlink: 'syz.3.1971': attribute type 13 has an invalid length.
[ 1396.655277][   T30] audit: type=1326 audit(1752192376.238:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16785 comm="syz.0.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ad078e929 code=0x7ffc0000
[ 1396.691418][T16798] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[ 1396.794772][   T30] audit: type=1326 audit(1752192376.238:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16785 comm="syz.0.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad078e929 code=0x7ffc0000
[ 1396.854076][   T30] audit: type=1326 audit(1752192376.238:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16785 comm="syz.0.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad078e929 code=0x7ffc0000
[ 1396.888763][   T30] audit: type=1326 audit(1752192376.238:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16785 comm="syz.0.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8ad078e929 code=0x7ffc0000
[ 1397.093463][   T30] audit: type=1326 audit(1752192376.418:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16785 comm="syz.0.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad078e929 code=0x7ffc0000
[ 1397.330537][   T30] audit: type=1326 audit(1752192376.418:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16785 comm="syz.0.1969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ad078e929 code=0x7ffc0000
[ 1397.968860][ T5909] usb 3-1: USB disconnect, device number 7
[ 1398.207839][T16816] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1976'.
[ 1398.285924][T16816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1976'.
[ 1398.423943][T16817] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1398.482297][T16816] chnl_net:caif_netlink_parms(): no params data found
[ 1398.560938][ T8816] usb 5-1: USB disconnect, device number 31
[ 1398.787316][   T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[ 1399.019106][   T10] usb 3-1: config index 0 descriptor too short (expected 8192, got 77)
[ 1399.027647][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1399.048313][   T10] usb 3-1: config 0 has no interfaces?
[ 1399.069811][   T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1399.099457][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1399.172060][   T10] usb 3-1: Product: syz
[ 1399.216267][   T10] usb 3-1: Manufacturer: syz
[ 1399.258644][   T10] usb 3-1: SerialNumber: syz
[ 1399.308273][   T10] usb 3-1: config 0 descriptor??
[ 1399.406865][T10947] net_ratelimit: 25 callbacks suppressed
[ 1399.406889][T10947] bond1: (slave bridge0): failed to get link speed/duplex
[ 1399.598219][   T13] bond1: (slave bridge0): failed to get link speed/duplex
[ 1399.747366][T10947] bond1: (slave bridge0): failed to get link speed/duplex
[ 1399.897334][   T13] bond1: (slave bridge0): failed to get link speed/duplex
[ 1400.027606][   T13] bond1: (slave bridge0): failed to get link speed/duplex
[ 1400.152008][T16827] binder: 16825:16827 ioctl c0306201 0 returned -14
[ 1400.494299][T16824] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1977'.
[ 1400.503565][   T13] bond1: (slave bridge0): failed to get link speed/duplex
[ 1400.637353][T10947] bond1: (slave bridge0): failed to get link speed/duplex
[ 1400.838764][T10864] bond1: (slave bridge0): failed to get link speed/duplex
[ 1401.033900][   T36] bond1: (slave bridge0): failed to get link speed/duplex
[ 1401.049281][T16840] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1980'.
[ 1401.253426][T10864] bond1: (slave bridge0): failed to get link speed/duplex
[ 1401.293034][   T10] usb 3-1: USB disconnect, device number 8
[ 1401.317503][T16842] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1401.344175][T16824] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1401.351570][T16824] IPv6: NLM_F_CREATE should be set when creating new route
[ 1401.402165][T16840] misc userio: No port type given on /dev/userio
[ 1401.409577][T16840] misc userio: The device must be registered before sending interrupts
[ 1401.421264][T16840] netlink: 'syz.4.1980': attribute type 1 has an invalid length.
[ 1401.562089][T16840] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1401.584641][T16844] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1401.593743][T16844] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1401.609654][T16844] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1401.626087][T16844] bond2: (slave geneve2): making interface the new active one
[ 1401.637238][T16844] bond2: (slave geneve2): Enslaving as an active interface with an up link
[ 1402.053543][T16853] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1981'.
[ 1402.088623][T16853] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1404.436355][ T8816] usb 2-1: new low-speed USB device number 18 using dummy_hcd
[ 1404.521112][   T36] net_ratelimit: 21 callbacks suppressed
[ 1404.521128][   T36] bond1: (slave bridge0): failed to get link speed/duplex
[ 1404.710530][T10864] bond1: (slave bridge0): failed to get link speed/duplex
[ 1404.839221][T10947] bond1: (slave bridge0): failed to get link speed/duplex
[ 1404.915670][ T8816] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1404.952368][ T8816] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1404.962458][   T13] bond1: (slave bridge0): failed to get link speed/duplex
[ 1404.970133][ T5909] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[ 1404.984064][ T8816] usb 2-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[ 1405.005711][ T8816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1405.081589][ T8816] usb 2-1: config 0 descriptor??
[ 1405.088752][T10864] bond1: (slave bridge0): failed to get link speed/duplex
[ 1405.220429][ T5909] usb 5-1: config 0 has no interfaces?
[ 1405.248416][ T5909] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1405.407902][T10864] bond1: (slave bridge0): failed to get link speed/duplex
[ 1405.497595][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1405.518184][ T8816] glorious 0003:258A:0036.0041: item fetching failed at offset 0/2
[ 1405.530677][T10864] bond1: (slave bridge0): failed to get link speed/duplex
[ 1405.561725][ T8816] glorious 0003:258A:0036.0041: probe with driver glorious failed with error -22
[ 1405.632020][ T5909] usb 5-1: Product: syz
[ 1405.637273][ T5909] usb 5-1: Manufacturer: syz
[ 1405.641913][ T5909] usb 5-1: SerialNumber: syz
[ 1405.816119][T10864] bond1: (slave bridge0): failed to get link speed/duplex
[ 1405.970787][T10864] bond1: (slave bridge0): failed to get link speed/duplex
[ 1406.230774][ T1104] bond1: (slave bridge0): failed to get link speed/duplex
[ 1406.290250][T16868] syz.1.1984 (16868): drop_caches: 2
[ 1406.338073][ T5909] usb 5-1: config 0 descriptor??
[ 1407.099385][T16899] binder: 16898:16899 ioctl c0306201 0 returned -14
[ 1407.170354][T16896] netlink: 'syz.3.1989': attribute type 13 has an invalid length.
[ 1407.210794][T16896] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[ 1407.774847][  T923] usb 2-1: USB disconnect, device number 18
[ 1408.147860][   T24] usb 5-1: USB disconnect, device number 32
[ 1409.558352][   T13] net_ratelimit: 20 callbacks suppressed
[ 1409.566147][   T13] bond1: (slave bridge0): failed to get link speed/duplex
[ 1409.777532][   T13] bond1: (slave bridge0): failed to get link speed/duplex
[ 1409.906462][   T13] bond1: (slave bridge0): failed to get link speed/duplex
[ 1410.042142][T10947] bond1: (slave bridge0): failed to get link speed/duplex
[ 1410.157350][   T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[ 1410.199670][T10947] bond1: (slave bridge0): failed to get link speed/duplex
[ 1410.340002][   T24] usb 3-1: Using ep0 maxpacket: 16
[ 1410.342362][T10864] bond1: (slave bridge0): failed to get link speed/duplex
[ 1410.467236][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1410.545359][T10947] bond1: (slave bridge0): failed to get link speed/duplex
[ 1410.552680][   T24] usb 3-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00
[ 1410.552718][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1410.626274][   T24] usb 3-1: config 0 descriptor??
[ 1410.810468][T10947] bond1: (slave bridge0): failed to get link speed/duplex
[ 1410.951409][T10864] bond1: (slave bridge0): failed to get link speed/duplex
[ 1411.043266][T16935] netlink: 'syz.3.1995': attribute type 13 has an invalid length.
[ 1411.080700][  T923] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[ 1411.185249][T16935] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1411.205997][T16935] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[ 1411.261289][  T923] usb 5-1: Using ep0 maxpacket: 8
[ 1411.491782][  T923] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1411.506869][  T923] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1411.535363][  T923] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1411.574739][  T923] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1411.618857][  T923] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1411.696141][  T923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1411.994791][  T923] usb 5-1: GET_CAPABILITIES returned 0
[ 1412.006350][  T923] usbtmc 5-1:16.0: can't read capabilities
[ 1413.808726][   T24] usbhid 3-1:0.0: can't add hid device: -71
[ 1413.814762][   T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 1413.948791][   T24] usb 3-1: USB disconnect, device number 9
[ 1414.576873][ T7699] net_ratelimit: 19 callbacks suppressed
[ 1414.576890][ T7699] bond1: (slave bridge0): failed to get link speed/duplex
[ 1414.726039][T10947] bond1: (slave bridge0): failed to get link speed/duplex
[ 1414.815137][ T5909] usb 5-1: USB disconnect, device number 33
[ 1414.963503][   T13] bond1: (slave bridge0): failed to get link speed/duplex
[ 1414.977215][   T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[ 1415.073151][T16955] netlink: 'syz.2.1999': attribute type 13 has an invalid length.
[ 1415.123780][T16959] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[ 1415.279263][T16955] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1415.400100][   T13] ==================================================================
[ 1415.408206][   T13] BUG: KASAN: use-after-free in __linkwatch_run_queue+0x5b9/0x7e0
[ 1415.416023][   T13] Read of size 8 at addr ffff888021bf8b88 by task kworker/u8:1/13
[ 1415.423828][   T13] 
[ 1415.426174][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[ 1415.426192][   T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1415.426205][   T13] Workqueue: events_unbound linkwatch_event
[ 1415.426237][   T13] Call Trace:
[ 1415.426247][   T13]  <TASK>
[ 1415.426256][   T13]  dump_stack_lvl+0x189/0x250
[ 1415.426281][   T13]  ? __virt_addr_valid+0x1c8/0x5c0
[ 1415.426301][   T13]  ? rcu_is_watching+0x15/0xb0
[ 1415.426316][   T13]  ? __kasan_check_byte+0x12/0x40
[ 1415.426331][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1415.426345][   T13]  ? rcu_is_watching+0x15/0xb0
[ 1415.426358][   T13]  ? lock_release+0x4b/0x3e0
[ 1415.426372][   T13]  ? __virt_addr_valid+0x1c8/0x5c0
[ 1415.426387][   T13]  ? __virt_addr_valid+0x4a5/0x5c0
[ 1415.426402][   T13]  print_report+0xd2/0x2b0
[ 1415.426414][   T13]  ? __linkwatch_run_queue+0x5b9/0x7e0
[ 1415.426429][   T13]  kasan_report+0x118/0x150
[ 1415.426444][   T13]  ? __linkwatch_run_queue+0x5b9/0x7e0
[ 1415.426462][   T13]  __linkwatch_run_queue+0x5b9/0x7e0
[ 1415.426480][   T13]  ? __pfx___linkwatch_run_queue+0x10/0x10
[ 1415.426497][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1415.426514][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[ 1415.426528][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[ 1415.426542][   T13]  linkwatch_event+0x4c/0x60
[ 1415.426557][   T13]  process_scheduled_works+0xae1/0x17b0
[ 1415.426577][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1415.426595][   T13]  worker_thread+0x8a0/0xda0
[ 1415.426615][   T13]  kthread+0x70e/0x8a0
[ 1415.426632][   T13]  ? __pfx_worker_thread+0x10/0x10
[ 1415.426645][   T13]  ? __pfx_kthread+0x10/0x10
[ 1415.426661][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1415.426694][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1415.426720][   T13]  ? __pfx_kthread+0x10/0x10
[ 1415.426736][   T13]  ret_from_fork+0x3fc/0x770
[ 1415.426750][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[ 1415.426764][   T13]  ? __switch_to_asm+0x39/0x70
[ 1415.426779][   T13]  ? __switch_to_asm+0x33/0x70
[ 1415.426794][   T13]  ? __pfx_kthread+0x10/0x10
[ 1415.426810][   T13]  ret_from_fork_asm+0x1a/0x30
[ 1415.426830][   T13]  </TASK>
[ 1415.426835][   T13] 
[ 1415.635942][   T13] The buggy address belongs to the physical page:
[ 1415.642359][   T13] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888021bfba80 pfn:0x21bf8
[ 1415.652434][   T13] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 1415.659558][   T13] raw: 00fff00000000000 ffffea000086ff08 ffff8880b863fdc0 0000000000000000
[ 1415.668160][   T13] raw: ffff888021bfba80 0000000000000000 00000000ffffffff 0000000000000000
[ 1415.676747][   T13] page dumped because: kasan: bad access detected
[ 1415.683184][   T13] page_owner tracks the page as freed
[ 1415.688573][   T13] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x546dc0(GFP_USER|__GFP_ZERO|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_COMP|__GFP_ACCOUNT), pid 16926, tgid 16924 (syz.3.1995), ts 1410649082938, free_ts 1415351134234
[ 1415.710814][   T13]  post_alloc_hook+0x240/0x2a0
[ 1415.715594][   T13]  get_page_from_freelist+0x21e4/0x22c0
[ 1415.721158][   T13]  __alloc_frozen_pages_noprof+0x181/0x370
[ 1415.726981][   T13]  __alloc_pages_noprof+0xa/0x30
[ 1415.731931][   T13]  ___kmalloc_large_node+0x85/0x210
[ 1415.737142][   T13]  __kmalloc_large_node_noprof+0x18/0x90
[ 1415.742786][   T13]  __kvmalloc_node_noprof+0x6d/0x5f0
[ 1415.748084][   T13]  alloc_netdev_mqs+0xa6/0x11e0
[ 1415.752949][   T13]  tun_set_iff+0x532/0xef0
[ 1415.757377][   T13]  __tun_chr_ioctl+0x788/0x1df0
[ 1415.762233][   T13]  __se_sys_ioctl+0xfc/0x170
[ 1415.766830][   T13]  do_syscall_64+0xfa/0x3b0
[ 1415.771340][   T13]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1415.777239][   T13] page last free pid 16926 tgid 16924 stack trace:
[ 1415.783740][   T13]  __free_frozen_pages+0xc71/0xe70
[ 1415.788866][   T13]  __folio_put+0x21b/0x2c0
[ 1415.793349][   T13]  free_large_kmalloc+0x145/0x200
[ 1415.798411][   T13]  device_release+0x9c/0x1c0
[ 1415.803025][   T13]  kobject_put+0x22b/0x480
[ 1415.807455][   T13]  netdev_run_todo+0xd2e/0xea0
[ 1415.812240][   T13]  tun_chr_close+0x13c/0x1c0
[ 1415.816837][   T13]  __fput+0x449/0xa70
[ 1415.820836][   T13]  task_work_run+0x1d1/0x260
[ 1415.825445][   T13]  do_exit+0x6b5/0x22e0
[ 1415.829615][   T13]  do_group_exit+0x21c/0x2d0
[ 1415.834221][   T13]  get_signal+0x1286/0x1340
[ 1415.838730][   T13]  arch_do_signal_or_restart+0x9a/0x750
[ 1415.844292][   T13]  exit_to_user_mode_loop+0x75/0x110
[ 1415.849590][   T13]  do_syscall_64+0x2bd/0x3b0
[ 1415.854192][   T13]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1415.860109][   T13] 
[ 1415.862460][   T13] Memory state around the buggy address:
[ 1415.868107][   T13]  ffff888021bf8a80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 1415.876275][   T13]  ffff888021bf8b00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 1415.884351][   T13] >ffff888021bf8b80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 1415.892414][   T13]                       ^
[ 1415.896747][   T13]  ffff888021bf8c00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 1415.904814][   T13]  ffff888021bf8c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 1415.912878][   T13] ==================================================================
[ 1415.930374][   T13] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1415.937647][   T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) 
[ 1415.949651][   T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1415.959728][   T13] Workqueue: events_unbound linkwatch_event
[ 1415.965635][   T13] Call Trace:
[ 1415.968918][   T13]  <TASK>
[ 1415.971890][   T13]  dump_stack_lvl+0x99/0x250
[ 1415.976489][   T13]  ? __asan_memcpy+0x40/0x70
[ 1415.981095][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1415.986293][   T13]  ? __pfx__printk+0x10/0x10
[ 1415.990887][   T13]  panic+0x2db/0x790
[ 1415.994786][   T13]  ? __pfx_panic+0x10/0x10
[ 1415.999216][   T13]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[ 1416.005113][   T13]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1416.011465][   T13]  ? print_memory_metadata+0x314/0x400
[ 1416.016925][   T13]  ? __linkwatch_run_queue+0x5b9/0x7e0
[ 1416.022386][   T13]  check_panic_on_warn+0x89/0xb0
[ 1416.027333][   T13]  ? __linkwatch_run_queue+0x5b9/0x7e0
[ 1416.032802][   T13]  end_report+0x78/0x160
[ 1416.037072][   T13]  kasan_report+0x129/0x150
[ 1416.041591][   T13]  ? __linkwatch_run_queue+0x5b9/0x7e0
[ 1416.047050][   T13]  __linkwatch_run_queue+0x5b9/0x7e0
[ 1416.052342][   T13]  ? __pfx___linkwatch_run_queue+0x10/0x10
[ 1416.058151][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1416.063350][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[ 1416.069067][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[ 1416.074782][   T13]  linkwatch_event+0x4c/0x60
[ 1416.079372][   T13]  process_scheduled_works+0xae1/0x17b0
[ 1416.084934][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1416.090918][   T13]  worker_thread+0x8a0/0xda0
[ 1416.095534][   T13]  kthread+0x70e/0x8a0
[ 1416.099625][   T13]  ? __pfx_worker_thread+0x10/0x10
[ 1416.104745][   T13]  ? __pfx_kthread+0x10/0x10
[ 1416.109340][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1416.114540][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1416.119740][   T13]  ? __pfx_kthread+0x10/0x10
[ 1416.124350][   T13]  ret_from_fork+0x3fc/0x770
[ 1416.128942][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[ 1416.134069][   T13]  ? __switch_to_asm+0x39/0x70
[ 1416.138850][   T13]  ? __switch_to_asm+0x33/0x70
[ 1416.143628][   T13]  ? __pfx_kthread+0x10/0x10
[ 1416.148222][   T13]  ret_from_fork_asm+0x1a/0x30
[ 1416.152987][   T13]  </TASK>
[ 1416.156301][   T13] Kernel Offset: disabled
[ 1416.160640][   T13] Rebooting in 86400 seconds..