last executing test programs:

1m40.818648866s ago: executing program 0 (id=403):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9})
fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5})
fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x7, 0x0)
fcntl$lock(r1, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9})
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100001ff00000000200000d5a8000000", @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c"], 0x44}}, 0x200040cc)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400030000", @ANYRES32=0x0, @ANYBLOB="04000d80080005"], 0x24}, 0x1, 0x5502000000000000}, 0x0)

1m37.136432942s ago: executing program 0 (id=414):
mbind(&(0x7f0000bdc000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000140)=0x3ff, 0x3, 0x0)
mbind(&(0x7f0000bdb000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000040)=0x1, 0x5, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0xc})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x109a40, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="540000004900010928bd700018dcdf250a001c00", @ANYRES32, @ANYBLOB="0000000014000100fe80000000000000000000000000001f14000100fe8000000000000000000000000000bb080002"], 0x54}}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
openat$mixer(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/address_bits', 0x82002, 0x105)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0x8, 0x9, 0x3, 0xb6, 0x40, 0x3, 0x0, 0x30, 0x19}, {0xeeeb1000, 0x3000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x9, 0x58, 0x3, 0x3, 0x1}, {0xdddd1000, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x81}, {0x40000, 0x8000000, 0x3, 0xa, 0x4, 0x5, 0x3, 0xf7, 0x80, 0x7, 0xe}, {0x5000, 0x9000, 0x3, 0x1, 0x3, 0x7, 0xab, 0x7f, 0x6f, 0x83, 0xf7, 0x82}, {0x0, 0x80a0000, 0x8, 0xa0, 0xb1, 0x18, 0xc, 0x4, 0x88, 0xf, 0x8, 0xfd}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0x2, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0x1000, 0xa, 0x5, 0xf, 0x47, 0x1, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xb000, 0x2d}, {0x10000, 0x7fff}, 0x80000031, 0x0, 0x26000, 0x42024, 0xb, 0x1, 0x3000, [0x5, 0x3, 0x10de, 0xff]})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001b00)=[@textreal={0x8, 0x0}], 0x1, 0xe, 0x0, 0x0)
r7 = epoll_create(0x7)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r8, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000000ac0)={0x14, 0x0, 0x3, 0x301, 0x70bd25, 0x25dfdbfb, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20008002}, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r1, &(0x7f00000001c0)={0x80000011})
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 0x4, 0x6, "ee060100000016000057000020000000006000"})
ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0x7)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x50, 0x26, 0x109, 0x870bd22, 0xfffffff9, {0x2}, [@typed={0x34, 0xca, 0x0, 0x0, @binary="a8f8d4ff3e41edc7e21d5033370640cc06a5aa0c499cdc92b7177d51ee6484efc889b6f719da7c555015b4d858ce7773"}, @typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
r9 = syz_open_pts(r1, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0x1b)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00004bd000/0x3000)=nil, 0x3000}})

1m36.731062932s ago: executing program 0 (id=419):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
io_uring_setup(0x1f8e, &(0x7f0000000140)={0x0, 0x7bfc, 0x1, 0xfffffffe, 0xc})
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e25, 0x0, @loopback}, {0xa, 0x0, 0xfffffffe, @empty}}}, 0x48)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00178008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
write$RDMA_USER_CM_CMD_QUERY(r3, 0x0, 0x0)
r5 = dup(r2)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r6)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r7, @ANYBLOB="010025bd7000fddbdf252100000008000300", @ANYRES32, @ANYBLOB="14002c8008"], 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r8 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r10, 0x1, 0x70bd2a, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000000c000280080004000240"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYRES16=r0], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x48003)

1m35.518070052s ago: executing program 0 (id=430):
pipe(&(0x7f0000000000))
syz_usb_connect(0x4, 0x2d, 0x0, 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x40000000)
syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x6, 0x1000, 0x1, 0x1ba}, &(0x7f0000000880), &(0x7f0000000100), &(0x7f0000000140))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000009c0)={0x0, 0x2e, 0xfff9}, 0x8)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0)
pwritev(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x4, 0x5)
r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x200000000000, 0x0)
ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0305602, &(0x7f0000000000)={0x1, 0x900, {0x4, 0x0, 0x0, 0x6}})
bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58)
r5 = syz_io_uring_setup(0x5f38, &(0x7f00000005c0)={0x0, 0x2, 0x800, 0xffffffff, 0x3}, &(0x7f0000000080)=<r6=>0x0, &(0x7f00000000c0)=<r7=>0x0, &(0x7f0000000000)=<r8=>0x0)
syz_io_uring_submit(r6, r7, r8, 0x0)
io_uring_enter(r5, 0x1006516, 0x6d93, 0x74, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r5, 0x18, &(0x7f0000000200)={0x8e, 0xffffffffffffffff, 0x31, {0x7, 0x8000000000000003}, 0x2b}, 0x1)
syz_create_resource$binfmt(&(0x7f00000003c0)='./file0\x00')
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0xdc3c, 0x0)
r9 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r9, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x40004)
recvmmsg(r9, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0)
writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000a00)='A', 0x1}], 0x1)
close(0x3)

1m35.243721228s ago: executing program 2 (id=434):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) (async)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$VIDIOC_ENUMINPUT(0xffffffffffffffff, 0xc050561a, &(0x7f0000000340)={0x1d6, "ecfe0f429f0905afdb82a501c6592eabd52563f19493c9ff874adc649910f965", 0x1, 0x2, 0x1, 0xffffff, 0x1000012, 0x8}) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) (async)
r3 = socket$unix(0x1, 0x1, 0x0) (async)
r4 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f00000002c0)={0x80000000, 0x0, &(0x7f0000000300)=[{{}, {<r5=>0x80000000}}]})
ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000000)={r5, 0x0, &(0x7f0000000100)=[{{}, {<r6=>0x80000000}}]})
ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f00000001c0)={r6, 0x0, &(0x7f0000000bc0)=[{{<r7=>0x80000000, <r8=>0x0}}]})
ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f000000a300)={{r7, r8, 0x6, [0x1, 0x8]}, {r7, 0x0, 0x0, [0xffffffff, 0x4]}, 0x1, [0x7e, 0x6]})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0}) (async)
r10 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x709d0a, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {0xffff, 0x1b}, {0x3, 0x10}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002740)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x1}, {}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x38, 0x2, [@TCA_MATCHALL_ACT={0x34, 0x2, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4, 0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000001000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) (async)
socket$packet(0x11, 0x3, 0x300) (async)
socket$kcm(0x10, 0x2, 0x4)
r11 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r11}, &(0x7f0000bbdffc)) (async)
syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff000000070581020002"], 0x0) (async)
getsockopt$IP_SET_OP_GET_BYINDEX(r1, 0x1, 0x53, &(0x7f0000000200)={0x7, 0x7, 0x2}, &(0x7f0000000240)=0x28)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r12 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r12, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0x18) (async)
setsockopt$sock_int(r12, 0x1, 0x47, &(0x7f0000000300), 0x4) (async)
r13 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00')
r14 = openat(r13, &(0x7f0000000e00)='nfsd.export/channel\x00', 0x2, 0x0)
write(r14, &(0x7f0000000f00)='localhost /tmp 2000000000 0 0 0 0\n', 0x22)

1m35.023904473s ago: executing program 1 (id=436):
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket(0x10, 0x80003, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000b00020400"}}}]}, 0x48}, 0x1, 0xb00, 0x0, 0x4000}, 0x40000)

1m34.988862469s ago: executing program 4 (id=437):
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000180)=""/111, 0x6f}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000)
recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000580)=""/53, 0x35}, {0x0}, {&(0x7f0000000680)=""/13, 0xd}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x4, &(0x7f00000019c0)=""/151, 0x97}}, {{&(0x7f0000001a80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000002c00)=[{0x0}, {&(0x7f0000001c00)=""/4096, 0x1000}], 0x2, &(0x7f0000002c40)=""/216, 0xd8}, 0x10001}], 0x2, 0x40010000, 0x0)

1m34.920175426s ago: executing program 4 (id=438):
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x802, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl(r0, 0x5, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000280)={0x0, 0x30b6, 0x0, 0x2, 0x1000158}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000080)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000140)=@any_dev={0x3, 0xe29, 0x0, 0x0, 0x1000, 0xfffffff8, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r5=>0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x2000003, 0x400, 0x3, 0x257}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0xfffffffe, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2, 0x1, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x10, 0x200, 0x3, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r7, 0xc0107520, 0x0, 0x0, 0xf0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfbf9, 0x4, 0x0, 0x0}}, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48)
openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = openat$sequencer(0xffffffffffffff9c, 0x0, 0xa0602, 0x0)
writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0xff2b}], 0x2)

1m34.779436089s ago: executing program 3 (id=439):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x55)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xe2, 0x0, 0x7fff0000}]})
close_range(r2, 0xffffffffffffffff, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r5, &(0x7f000000c3c0)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r5, &(0x7f0000000640)={0x50, 0x0, r6, {0x7, 0x1f, 0xb, 0x1100, 0x5, 0x0, 0x6, 0x1400000, 0x0, 0x0, 0x40, 0x7}}, 0x50)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000a40)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYBLOB="0c000280050027000000000008000500", @ANYRESHEX=r6, @ANYRES32=r7], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
add_key(&(0x7f0000000480)='encrypted\x00', &(0x7f00000004c0)={'syz', 0x2}, &(0x7f0000000540)="108ff6f98ff8aa01c393362dc8bc0a3626e228", 0x13, 0x0)
ioctl$UBLK_U_CMD_GET_QUEUE_AFFINITY(0xffffffffffffffff, 0x80207501, &(0x7f0000000180)={<r8=>0x0, 0xffff, 0x8, &(0x7f0000000140)})
ioctl$UBLK_U_CMD_SET_PARAMS(r4, 0xc0207508, &(0x7f00000003c0)={r8, 0xffff, 0x70, &(0x7f00000002c0)={0x70, 0x0, {0x1, 0x9, 0xb, 0x4, 0x81, 0x7, 0x7, 0x3, 0x9}, {0x6, 0x1000, 0x2, 0x6164e62d, 0x5}, {0x81, 0x3654, 0x4, 0xfffffffc}, {0x1, 0x3, 0x80000001}}})
r9 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r9, 0x7b2, &(0x7f0000001b40)={&(0x7f0000000b40)=[0x78e, 0x400, 0x7ff, 0xd, 0xe3, 0x1800000, 0x1, 0x4, 0x0, 0xa2, 0x4, 0x2, 0x7, 0x5, 0x1, 0x5, 0x1, 0x100, 0x3, 0x8, 0x5, 0x6, 0x8, 0x20000000, 0x6, 0x34, 0x5, 0xe, 0x9, 0x80, 0x8, 0x8, 0x8, 0x3, 0xd5fe, 0xa98, 0x2140, 0xfff, 0x100, 0x7b0, 0x7, 0x3ff, 0x8, 0xfffffff8, 0x5, 0x8, 0xfffffffe, 0x49, 0x400, 0x0, 0x7, 0x8, 0x401, 0xb, 0x7, 0x4, 0x6, 0x4e, 0x3, 0xb9, 0x9, 0x3, 0x9, 0xaf02, 0x3b, 0x84, 0x2, 0x3, 0xfff, 0x7, 0x42, 0x8, 0xfffffffc, 0x1000, 0x100, 0x5, 0xfffffffe, 0x7fff, 0xb, 0x462, 0xb0000000, 0x7f, 0x9, 0xa29b, 0x0, 0x4, 0x7, 0x4, 0x401, 0xfffffffa, 0xc, 0x8, 0x80, 0x6, 0x5, 0x3, 0x7a8, 0x6, 0xc591, 0x7, 0x2, 0x7, 0xd, 0x2, 0x0, 0x8001, 0x7, 0x9, 0x7fff, 0x81, 0x2f, 0x7a34, 0x9, 0x8, 0x4, 0x1, 0x4653, 0xc46, 0x3e0a, 0x5, 0x0, 0x97, 0x0, 0x0, 0x8, 0x80000001, 0xd, 0x4, 0x9, 0x0, 0x4, 0x280000, 0x1ee, 0x7, 0x6, 0xd, 0x10000, 0x80000001, 0x4, 0x2, 0x7, 0xa, 0xf7, 0x7f, 0x79, 0x3, 0x2c, 0x4, 0x2, 0x9, 0x6, 0x4, 0x0, 0xff, 0x3, 0x5, 0x8, 0x2, 0x100, 0x9, 0x7fff, 0xfffffff8, 0xb28, 0x10, 0x8, 0xb, 0xffff, 0xff, 0xe76b, 0x1, 0x6, 0xfff, 0x7, 0x7, 0x6, 0x8b, 0x7, 0x1, 0xd3, 0xbf7, 0x0, 0x9, 0x4d, 0x2, 0x7fff, 0x6, 0x3f, 0x0, 0xfffffffd, 0xfffffff7, 0xbed, 0x7fffffff, 0x6, 0x5, 0x100, 0x8000, 0x8, 0x3, 0x6, 0x1, 0x3, 0xfffff800, 0xd, 0x3, 0x0, 0x975, 0x0, 0x2, 0x6dc, 0x4, 0x5, 0x6, 0x0, 0x1, 0x4000000, 0x4, 0x4, 0x4, 0x6, 0x0, 0x5, 0xeed, 0x1000, 0x8000000, 0x2, 0xffffffff, 0x8, 0x5, 0x3, 0x7, 0x8, 0x11a, 0x2, 0xd0, 0x6, 0x7, 0x8, 0x0, 0x1, 0x5, 0x5, 0x92b7dfc, 0x7f, 0x10, 0x7fffffff, 0x3, 0x6, 0x6, 0x7, 0x3, 0x5, 0x9, 0xfffffeff, 0x0, 0xa, 0x2, 0x100, 0xc, 0x4, 0x2, 0xa, 0x2, 0x8000, 0x101, 0x8, 0x8, 0xfffffffc, 0x8000, 0x8, 0x56, 0x9, 0x2, 0x5, 0x7, 0x4, 0x9, 0x0, 0xc9cc, 0x10000, 0xf922, 0x1, 0x0, 0x5, 0x6, 0x3, 0xc0000, 0x1387, 0xb2c, 0x9, 0x8001, 0x2f, 0x0, 0x2d, 0x3, 0x401, 0x4, 0x5, 0x8, 0x2, 0x5, 0x4, 0x5, 0x8, 0x3, 0x8001, 0x3, 0x10, 0x0, 0x1, 0xe06, 0x70000, 0xffb, 0xb4ab, 0x3, 0xffffffff, 0xfd2, 0x8001, 0x2880, 0x8, 0x3, 0x3, 0x4, 0x80000001, 0x80, 0x5, 0x80000001, 0x61, 0x3, 0xfffffffd, 0x1, 0x7, 0x4, 0x3, 0x8, 0x1, 0x1ff, 0x7, 0xfffffff6, 0xfffffff7, 0xfffffff7, 0x3, 0x9, 0x7, 0x6481, 0x2, 0x7fff, 0x10, 0xf92, 0x8, 0x400, 0xe, 0x8, 0x6, 0x0, 0x297, 0xea11, 0x800, 0x10001, 0x3ff, 0x2, 0x8, 0x6, 0x2, 0x2, 0x35, 0xd, 0x1, 0x0, 0x6, 0x4, 0x0, 0x6f7fcc4e, 0x8, 0xfffffffd, 0x9, 0x40002, 0x5, 0x800, 0x101, 0x7fffffff, 0x0, 0x0, 0xfffffff7, 0x102c, 0x7, 0x2, 0x4e, 0x7, 0xf, 0x6, 0xf95f, 0x3, 0xf1e, 0x8, 0xfd8, 0x4, 0x7, 0x88, 0x4, 0xfffff001, 0x9, 0x4, 0x0, 0x174, 0xf, 0xc74e, 0x9, 0x1, 0x100, 0x7fff, 0x7, 0xfffffff7, 0xe33, 0x4, 0x5, 0x0, 0x6, 0x2, 0x7, 0x9, 0x9896, 0x800, 0x2, 0xffffffff, 0x0, 0x9, 0x5, 0x3bc, 0x6, 0xc0000000, 0x0, 0x2, 0x1, 0x2, 0x0, 0x7f, 0x7, 0x5, 0xf, 0x9, 0x8000, 0x9, 0xfffffbff, 0x10000, 0x0, 0x2, 0x579, 0x200, 0x8, 0xac3, 0x1, 0x80000001, 0xfffffffe, 0xb, 0x1ff, 0x0, 0x7, 0x7, 0x100, 0x101, 0x80, 0x0, 0xffffff01, 0x4, 0xfc, 0x1, 0x5, 0x6, 0x2, 0x9, 0x0, 0x4, 0xace, 0x390, 0x10001, 0x100, 0x1393, 0x6, 0x0, 0xa, 0xffffffff, 0x0, 0x4, 0x1, 0x6, 0xb, 0x7, 0x5, 0x1000, 0x4, 0x9, 0x23, 0x1, 0x0, 0x3fad, 0xfffffffe, 0x2, 0x0, 0x8, 0x2, 0x3, 0x1, 0x5, 0x1, 0x4, 0x1000, 0x4, 0x6, 0x7fff, 0x8, 0x81, 0x6, 0x0, 0xb, 0x2, 0x465fc3b8, 0xcd, 0xf, 0x3, 0x12600000, 0x3, 0x9, 0x3, 0x3, 0x5c23, 0x9, 0x4, 0x8e, 0x8, 0x202, 0x8000, 0x7, 0x1, 0x10000, 0x2, 0x844, 0x4, 0x4, 0xffff8000, 0x2, 0x0, 0x913, 0x0, 0x4, 0x1, 0x4, 0x6, 0x3, 0x0, 0x7, 0x3, 0x10, 0x8, 0x9, 0xe12b, 0x9, 0x4, 0xffffffff, 0x6, 0x6, 0x829, 0x9, 0xb51, 0x40, 0x173d, 0x1, 0x0, 0x3, 0x0, 0x1d2, 0x7, 0xfffffffb, 0x6, 0x101, 0x10001, 0xb, 0x9, 0x404, 0x8, 0x7ff, 0x9, 0x4, 0x5, 0x3, 0x5, 0xb93, 0x9, 0x4, 0x2, 0x8, 0xc9bc, 0xff, 0x43, 0xffff, 0xc50, 0x5, 0x9, 0x8, 0x26, 0x83, 0x0, 0xab3, 0x2b, 0xc1d7, 0xb026, 0x5, 0x0, 0x0, 0x4, 0x454, 0x6, 0x3, 0x6, 0xe17b066, 0x0, 0x6d8, 0x8, 0x6, 0x8, 0x8, 0xffff92c9, 0x5, 0xb, 0x7, 0x800, 0x5, 0x100, 0x8, 0x8, 0x7, 0xfffffff8, 0x1, 0x400, 0x9, 0xc8, 0x2, 0x9, 0x6, 0xff, 0x8, 0x0, 0x7fff, 0x0, 0x389, 0xd1, 0x4, 0xffffffff, 0xae, 0x2, 0xb55d, 0x9, 0x10001, 0x7, 0xfffffffd, 0x8000, 0x1000, 0x9, 0x10000, 0x4, 0x8, 0x1b, 0x4, 0xff, 0x9, 0x9, 0x1, 0x5, 0x8, 0x7f, 0x6, 0xf921, 0x5, 0x9, 0x0, 0x2, 0x10001, 0x80000000, 0xfffffffc, 0x7, 0xce, 0xd, 0x1, 0x7fff, 0x5, 0x7ca0aa85, 0x5, 0x1, 0x1, 0x1, 0xbc7, 0x5, 0x3, 0x0, 0x10, 0xc8, 0xfff, 0x5, 0xfffffff5, 0x8, 0x7f, 0xff, 0x5, 0x7, 0x8000, 0x1, 0x0, 0x80000000, 0x8, 0x9, 0xfffffffe, 0x1, 0x7, 0x2, 0x1ea8, 0xe, 0x7, 0x7, 0x42, 0x8, 0x7, 0x4, 0x8001, 0x1, 0xc584, 0x1, 0x9, 0x1, 0x6, 0x2, 0x200, 0x9, 0x8, 0x2f1, 0xfffffffe, 0xffffffff, 0x1000, 0xfffffffa, 0x3d, 0x40, 0x6, 0x3ff, 0x6, 0x100, 0x884, 0x8, 0xd3f, 0x70, 0x4, 0x3, 0x1000, 0x2, 0x800, 0x50ce1a88, 0x7, 0x1, 0x7ff, 0x2, 0x9, 0x8, 0x5, 0x7a52, 0x4, 0x7f, 0x7, 0xffffffff, 0x7, 0x6, 0x7, 0x80, 0xa, 0x1, 0x3, 0x3, 0x9, 0x2, 0x2, 0xbd41, 0xc, 0x2, 0x80, 0xff, 0x5, 0xb8, 0xe, 0x8, 0x10001, 0x0, 0x7b08901b, 0xfcb, 0x8, 0x0, 0x9, 0x1, 0xffff573d, 0x10, 0x4, 0x9, 0x8, 0x10, 0x9, 0x7, 0x1, 0x6, 0x3, 0x8, 0x0, 0xb676, 0x8, 0x8001, 0xc1b7, 0x10001, 0x3, 0x1, 0x7, 0x8, 0x2, 0x0, 0x80, 0x9, 0xcf28, 0x0, 0x3, 0x5, 0x5, 0x3, 0xfffffff7, 0x7, 0xf, 0x3, 0x8, 0x9, 0x100, 0xffffff9f, 0x7ff, 0xff16, 0x9, 0x0, 0x9, 0x868c, 0x3, 0x6, 0x6, 0x5ee42eb0, 0x66b0, 0x75, 0x6, 0x65, 0x2e, 0x3, 0x7fffffff, 0x6, 0x2, 0x692, 0x7, 0x4, 0x8, 0x7, 0xffffff88, 0x80000000, 0x100, 0xb07, 0xfffffff7, 0x9, 0xb21b, 0x3, 0x4, 0x7, 0x3, 0x7, 0x5, 0x8, 0xfffff3ce, 0x10001, 0xfffffffa, 0xf71, 0x6, 0x2, 0x13, 0x1, 0x5, 0x9, 0x101, 0x2, 0x1d, 0x8, 0x7ff, 0x8, 0x675, 0x100, 0x543, 0x1ff, 0xf81, 0x3, 0x0, 0x80000000, 0x4, 0x4, 0x0, 0xffffffff, 0x3, 0xb, 0xd0, 0x2, 0x79, 0x2, 0x81, 0x97, 0x0, 0x1c, 0x3, 0x14, 0x994e, 0x7, 0x3, 0x2, 0x9, 0x0, 0x7, 0x80, 0xfffffc9d, 0x2, 0x292, 0x4, 0x6, 0x1, 0x1000, 0x9, 0x3, 0xffffffff, 0x5, 0xa, 0x352b, 0x3d5, 0xfffffffb, 0x1, 0x1, 0x3, 0x2, 0x7fff, 0xf4, 0x2ae1, 0x8, 0x8, 0x7, 0x3, 0x6, 0x8, 0x1c95, 0x4, 0x9, 0x652, 0x5, 0x4, 0x6, 0x7ff, 0x8, 0x0, 0x7, 0x38d8, 0xb, 0x8000, 0x6, 0xfffffffa, 0x5, 0x100, 0x9d8, 0x4, 0xf, 0x3, 0x1, 0x4, 0x401, 0x3, 0x8, 0x3, 0x8ff, 0x3ff, 0x5, 0xfff, 0x0, 0xed3a, 0x5, 0xe, 0xffff88f9, 0x80000001, 0x500, 0x7fff, 0x6, 0x7fffffff, 0xa, 0x7, 0x200, 0x2, 0x6, 0x7, 0x1, 0x6, 0x9, 0xc, 0x7ad, 0x7, 0x0, 0x5, 0x5, 0x8, 0xfff, 0x101, 0x4, 0x1, 0x7fffffff, 0x800, 0x7, 0xc0, 0x7, 0xcc0c, 0xa, 0x0, 0xffffffff, 0x5, 0x8, 0xef, 0x1, 0xf, 0x8], 0x4, 0x400, 0x3})
r10 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xa, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x8b0}, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x3c}}, 0x8000)

1m34.533051989s ago: executing program 3 (id=440):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x4c1})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x1000, &(0x7f0000004000/0x1000)=nil})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a010000201d0040b70800000000000043010902"], 0x0)

1m34.321524968s ago: executing program 1 (id=441):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$getownex(r0, 0x10, &(0x7f0000000080))
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES8=r1, @ANYRES32=r1], 0x308}, 0x1, 0x0, 0x0, 0x4040801}, 0x22048044)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040))

1m33.96831602s ago: executing program 1 (id=442):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x8ac02)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r7)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r8 = socket$kcm(0x11, 0x3, 0x0)
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x2, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x4, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x7}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x4, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x6, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x10, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x5, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x200, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$kcm(r8, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r6, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)="6b46afbe0e12", 0x6}], 0x1}, 0x20000885)
ioctl$PTP_PEROUT_REQUEST2(r1, 0x3d13, 0x0)
syz_usb_disconnect(r0)
io_uring_setup(0x7, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
unshare(0x8040480)
pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f, 0x0, 0x40000000, 0x0, 0x100000000}, 0x0, 0x0, 0x0)

1m33.862736879s ago: executing program 4 (id=443):
socket$inet_udp(0x2, 0x2, 0x0)
shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/mcfilter6\x00')
read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x2020)
r1 = userfaultfd(0x801)
munlockall()
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x5})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e)
syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
syz_usb_connect$uac2(0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045)
r2 = io_uring_setup(0x1191, &(0x7f0000000100)={0x0, 0x2150, 0x10000, 0x2, 0xcb})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, 0x0)
io_uring_enter(r2, 0x2219, 0xcf74, 0x16, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50)
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r3, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e1f, 0x0, @remote, 0x100000}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000029000000040000000200000600000000280000000000000029000000050000000002020100000000fee3"], 0x40}, 0x0)
syz_clone3(&(0x7f0000001e80)={0x1e6022000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58)
socket$nl_generic(0x10, 0x3, 0x10)

1m33.716693926s ago: executing program 2 (id=444):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)=@newtfilter={0x80, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x50, 0x2, [@TCA_BASIC_ACT={0x4c, 0x3, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0xffff, 0x1ff, 0x6, 0x7f, 0x5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x48)

1m33.493316377s ago: executing program 2 (id=445):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x6, 0x3, "91ab"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x8c}, 0x1, 0x0, 0x900, 0x81}, 0x4000800)

1m33.329579974s ago: executing program 2 (id=446):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001fff5000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a30"], 0xa4}}, 0x0)

1m33.162345139s ago: executing program 2 (id=447):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x11, r0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0)
preadv(r0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0)
r1 = syz_io_uring_setup(0x11f7, &(0x7f00000012c0)={0x0, 0x7071, 0x80000, 0x0, 0x2f6}, &(0x7f0000001240), &(0x7f0000001180), &(0x7f0000001200))
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100)

1m32.960264046s ago: executing program 3 (id=448):
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000180)=""/111, 0x6f}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000)
recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000580)=""/53, 0x35}, {0x0}, {&(0x7f0000000680)=""/13, 0xd}, {&(0x7f00000006c0)=""/58, 0x3a}], 0x5, &(0x7f00000019c0)=""/151, 0x97}}, {{&(0x7f0000001a80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @local}}, 0x80, &(0x7f0000002c00)=[{0x0}, {&(0x7f0000001c00)=""/4096, 0x1000}], 0x2, &(0x7f0000002c40)=""/216, 0xd8}, 0x10001}], 0x2, 0x40010000, 0x0)

1m32.952836507s ago: executing program 4 (id=449):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYRES8=r1, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0], 0x48}, 0x1, 0x0, 0x0, 0x48485}, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=ANY=[@ANYBLOB="01000000670f00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0xc080}, 0x11)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r4=>0x0})
r5 = syz_io_uring_complete(0x0, 0x0)
ioctl$TIOCMBIC(r5, 0x5417, &(0x7f0000000040)=0x6)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050)
r6 = openat$cgroup(r5, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0)
openat$cgroup_int(r6, &(0x7f0000000180)='memory.min\x00', 0x2, 0x0)

1m32.867978765s ago: executing program 2 (id=450):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x0, 0x5, 0xbd, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x4, 0xb}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0xa0, 0x6, 0x321, 0x3, 0x0, 0x101, 0x0})
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000340000000000000001e340165e000000", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x70, 0x40c0}}], 0x1, 0x2)
io_setup(0x6, &(0x7f0000000080))
io_setup(0x7, &(0x7f0000000100))
io_setup(0x9, &(0x7f0000000300))
io_setup(0x1ff, &(0x7f00000005c0))
io_setup(0xaa, &(0x7f00000006c0))
recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x2, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
close(r3)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r4 = userfaultfd(0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x2ff})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000364000/0x1000)=nil, 0x400000, 0x2, 0x2})
unshare(0x42070e00)
sendfile(r0, r0, 0x0, 0x20000005)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000040)={@multicast1=0xe0000300, @multicast1}, 0x8)
setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000400)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x985, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xfff7ffff, 0x7ff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x13ffd]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x6, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xb6f, 0x0, 0x0, 0x1}, {0x1388, 0x6, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x3fc, 0x1000, 0x0, 0x0, 0x1}, {0x100002, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})

1m32.719683847s ago: executing program 3 (id=451):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
recvmmsg(r0, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0xc7}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001bc0)=""/4097, 0x1001}, {&(0x7f0000000380)=""/201, 0xc9}, {&(0x7f0000002d40)=""/113, 0x71}, {&(0x7f0000004b00)=""/4098, 0x1002}, {0x0}], 0x5}, 0x19}], 0x3, 0x0, 0x0)

1m32.563919299s ago: executing program 4 (id=452):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0xa, 0x4)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r7=>r6, {0x9}}, './file0\x00'})
r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r7)
sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x80, r8, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x1]}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x7d1c4469, 0x8000, 0x5, 0x2, 0x1000]}]}, 0x80}, 0x1, 0x0, 0x0, 0x90}, 0x4000010)
sendmsg$SEG6_CMD_DUMPHMAC(r5, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x4c, r8, 0x20, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x8, 0x4, [0x8]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x7f, 0xc, 0x5, 0x9, 0x9]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x844}, 0x8000)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000640)="940b4655b4c7962cead4ab3a05573c4385e051171c4d1733d7c6c22e6e2c4b9a2e7d30a079f200cbd73432baed8ca4af955aba717d1bb930d60b680682b47c119d1bb57eba4a49355a1bf8d889f33c7a313d534e5a59fa0a536126c7b19e6708586f886348f8ce0a2d789b4dcd4b7a4f501e12d7855bb4f9edbe15780fe921e0a48f5d64f63a4d888524884dad452e710ef8c9143ab1feebd4cc", 0x9a, 0xfffffffffffffffb)
keyctl$read(0xb, r10, &(0x7f0000000540)=""/151, 0x97)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x20000880)
close(0x3)

1m32.512806503s ago: executing program 3 (id=453):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
fcntl$getownex(r0, 0x10, &(0x7f0000000080))
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES8=r1, @ANYRES32=r1], 0x308}, 0x1, 0x0, 0x0, 0x4040801}, 0x22048044)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000040))

1m32.374543366s ago: executing program 4 (id=454):
syz_usb_connect(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x8ac02)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r4)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
socket$kcm(0x11, 0x3, 0x0)
socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f, 0x0, 0x40000000, 0x0, 0x100000000}, 0x0, 0x0, 0x0)

1m32.267768863s ago: executing program 3 (id=455):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$kcm(0x21, 0x2, 0x2)
setsockopt$sock_attach_bpf(r2, 0x110, 0x7, 0x0, 0x4)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x0, 0x0, 0x9, 0xffffff7fffffffff, 0xfffffdfffffffffd, 0xffffffc0, 0xffffffff}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$sock(r0, &(0x7f0000000840)={&(0x7f0000000500)=@qipcrtr, 0x80, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000680)="5f150f107ac3e05b42b4425cd3c8b40437ea0213fe93ef7b865e907684d2faa297c7ccc1adac82421e8f8951b2277448e812f3f561", 0x35}, {0x0}], 0x3, &(0x7f0000000800)}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x418, 0x110, 0x2c8, 0xfeffffff, 0x2c8, 0x2c8, 0x3a0, 0x3a0, 0xffffffff, 0x3a0, 0x3a0, 0x5, 0x0, {[{{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x7, 0x1}}, @common=@inet=@multiport={{0x50}, {0x1, 0x7, [0x4e20, 0x4e22, 0x4e20, 0x4e23, 0x4e24, 0x4e24, 0x4f24, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e20, 0x4e24, 0x4e23, 0x4e1f], [0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfc, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x3, 0x0, 0x0, 0x0, 0x3]}}}, @common=@ttl={{0x28}, {0x3, 0xb}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x40, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e20}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x66, @gre_key=0x9}}}}, {{@ip={@local, @remote, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x16}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv6=@rand_addr=' \x01\x00', @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478)
mount$fuse(0x0, 0x0, 0x0, 0x10000, &(0x7f0000002140)=ANY=[])
ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000040)=0x800001c)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0, 0x1})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f00000007c0)={0x28, 0x4, r5, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x9})
socket(0xa, 0x3, 0x3a)
syz_usb_connect$uac2(0x3, 0x87, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100300000020ba0d001040000102030109027500030106100208c597e7b58f1b4ed509991ebb097cfd640b0100010c200009040000000101200009240180ff071500040c2403020403050400ff011c0904010000010220000904010101010220000905010910000c02090825018030ad000109040200000102200009040201010102200009"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0})
r6 = socket(0x400000000010, 0x3, 0x0)
write(r6, &(0x7f0000000040)="0f03000018002551075c0165ff0ffc02802000030011000500e1000cee0203001a000000", 0x33a)
r7 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r7, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]})
r8 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=<r9=>0x0, &(0x7f0000000140)=<r10=>0x0, &(0x7f0000000080)=<r11=>0x0)
syz_io_uring_submit(r9, r10, r11, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}})
io_uring_enter(r8, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)

1m32.194654627s ago: executing program 0 (id=456):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
r2 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f00000002c0)={0x0, 0x1, 0x1, 0x0, 0x0, 0x8fc0, 0x6ae1})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x3, @rand_addr=0x64010102}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x2, @multicast1}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000000180)=0x80, 0x4)
setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000040)=0x3, 0x4)
recvmmsg(r1, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000002440)=""/208, 0xd0}], 0x1, &(0x7f0000000ac0)=""/152, 0x98}, 0x2}, {{&(0x7f0000000b80)=@isdn, 0x80, &(0x7f0000001100)=[{&(0x7f0000000c00)=""/148, 0x94}, {&(0x7f0000000cc0)=""/241, 0xf1}, {&(0x7f0000000dc0)=""/86, 0x56}, {&(0x7f0000000e40)=""/146, 0x92}, {&(0x7f0000000f00)=""/198, 0xc6}, {&(0x7f0000001000)=""/200, 0xc8}], 0x6, &(0x7f0000001180)=""/237, 0xed}, 0x9}, {{&(0x7f0000001280)=@nfc, 0x80, &(0x7f0000001300), 0x0, &(0x7f0000001340)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000002340)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000003600)=[{&(0x7f00000023c0)=""/96, 0x60}, {&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000003440)=""/93, 0x5d}, {&(0x7f00000034c0)=""/133, 0x85}, {&(0x7f0000003580)=""/76, 0x4c}], 0x5, &(0x7f0000003680)=""/194, 0xc2}, 0x581}], 0x4, 0x45833af96e4b19fe, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0xe0881)
r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0)
syz_io_uring_submit(r5, r6, r7, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}})
io_uring_enter(r4, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0)
write$sndseq(r3, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000240)={0x83, 0x1, 0xc, 0x0, 0x0, 0x62a})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newsa={0x1a8, 0x10, 0x633, 0x70bd2c, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x2e}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffd, 0x32}, @in=@loopback, {0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, {0x0, 0xfffffffffffffffe}, {}, 0x70bd2a, 0x0, 0x2, 0x1}, [@algo_crypt={0xb0, 0x2, {{'ecb-des3_ede-asm\x00'}, 0x340, "a19bc059b76c3380e25385d25e9747f3151227b383f4b4c2f83e2b7b0e552869dee589b3bb82bb873b5f4b1896b88393326f901dd62fbd0eb136ace6626c7b9451495868de55bf18b4b73a4d2c53bb5aaced263e5741c8da8a71f79d531cb8fdf455a8a2b95ba800"}}, @tfcpad={0x8, 0x16, 0x1f4}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x10}, 0x20000080)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10)
connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e23, @loopback}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x4}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffffd, 0x32}, 0xa, @in=@loopback, 0x0, 0x1}}, 0xe8)
write(r8, &(0x7f0000000140)="0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef", 0x40)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_NAT_SRC={0x70, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private0}]}]}, 0xa4}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)

1m32.105637511s ago: executing program 1 (id=457):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x10, 0x4e24, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x7, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004)
sendmsg$nl_xfrm(r0, 0x0, 0x2c000010)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="b8000000140001000000000000080000e00000020000000000000000000000000000ff8000000000000000000000000000000800100000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0)

1m31.972067893s ago: executing program 0 (id=458):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) (async)
r1 = socket(0x400000000010, 0x3, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f303000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a300000000007000200"], 0xcd0}}, 0x0) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100006800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
socket$unix(0x1, 0x1, 0x0) (async)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'pim6reg0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0xd, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x81) (async, rerun: 32)
r5 = socket$unix(0x1, 0x1, 0x0) (rerun: 32)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a80)={0x0, @in6={{0xa, 0x4e20, 0xe6a, @mcast2, 0x7}}, 0x7fffffff, 0x0, 0x8, 0x2172, 0x3b, 0x8001, 0x4}, 0x9c)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)=@newtfilter={0x2c, 0x2c, 0x100, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xfff1, 0x1}, {0x8, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r8=>0x0})
bind$can_raw(r7, &(0x7f0000000180)={0x1d, r8}, 0x10)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) (async)
sendmsg$can_raw(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@can={{0x4, 0x0, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "71949a1857e8bcf3"}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0xd209f6d81082d3d6) (async)
recvmmsg(r7, &(0x7f0000002100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000100)=""/48, 0x30}, {0x0}], 0x2}, 0x8001}], 0x2, 0x40000043, 0x0) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r10, &(0x7f0000000280)='0', 0x1) (async)
r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000600), 0xc0000, 0x0)
io_submit(0x0, 0x3, &(0x7f0000000980)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x8, r0, &(0x7f0000000300)="03b803b81ad3f4873034e3a07341596f60db5b0a8e73653d7942293941bc6680a3702c39a170f1f2efc635699b9bb5b961a1ee8f45baf8e1e58647b466e2947f5396b00305576715870f2b5b8f1b8e940e33480f0fab92e0d9e2f78619eecfdd2a411c", 0x63, 0x3, 0x0, 0x1, r10}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x8, r9, &(0x7f00000003c0)="6497148de6ef58fe65824cd19ae3b18d5331a5b7997edde287f23d309d127e34e3435ff177ad0c6800eae48e9de608d087079563eeb5cdb3110fd86a3ef789a34966d4113387bcb3a8bf30d2d319a7b9c5f8e35409a178ca746932cea26a08edfd9f99e699a59ed104559d8077d12da27cd543dde965babc85a334ff77e1c7f2247d6f33dc105907714e0567a6d56f66ec43b48b58a1bfa01434f1cc3ccbe6bafa6ce9", 0xa3, 0x4}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x3, 0x8001, r0, &(0x7f0000000500)="dba300b8119b1d51c10ac41002726034771fa9a5c569a2ccc4aa0471d8033eabd0a45ebce311e73f94032814eaf5289d334bda7f59593547b0855cd5cf6deed7a9ea916e1b5fbbea44a378369d45ca96c7223f61c7c297bc4a443d220772f372a81b4c31d1217bbb141a572c7032eac050ae35ff12e795af2ba49b63106989a122a05ce5fa5a76974ba491c2083e8075aa45dd1e19c903e391c3b227b15e526bf338b0e9511734256ff3130ab3d3c6f9717a5078ef7945db83576c90d6ea0a9d7862cc8e2831aadc6dd1152f90ae1867e7e10404a20d2f84d2461931368fd6", 0xdf, 0x4, 0x0, 0x0, r11}]) (async)
sendmsg$IPSET_CMD_TEST(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0) (async)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0, 0xbd3b, 0x200, 0x0, 0x2eb}, &(0x7f00000006c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8e2e, 0x40, 0x2, 0x177, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd027, 0x0, 0x0, 0x19b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa06d, 0x800, 0x2, 0x1c3}, <r12=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7863, 0x20000, 0x2, 0x353, 0x0, r10}}], 0x4, &(0x7f00000009c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf3}, 0x0, 0x0, '\x00', {0x2, 0xde5, 0x0, &(0x7f0000000c80)=@buf_max_buf="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"}}, &(0x7f0000001d00))
syz_io_uring_setup(0x3afa, &(0x7f0000001d40)={0x0, 0xe473, 0x4, 0x3, 0x15b, 0x0, r12}, &(0x7f0000001dc0), &(0x7f0000001e00), &(0x7f0000001e40))
openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0)

1m31.881656054s ago: executing program 1 (id=459):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=@updpolicy={0xb8, 0x14, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x80ff}}, 0xb8}}, 0x0)

1m31.41417013s ago: executing program 1 (id=460):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x11, r0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[], 0x48}}, 0x0)
preadv(r0, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0)
r1 = syz_io_uring_setup(0x11f7, &(0x7f00000012c0)={0x0, 0x7071, 0x80000, 0x0, 0x2f6}, &(0x7f0000001240), &(0x7f0000001180), &(0x7f0000001200))
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100)

1m15.295682369s ago: executing program 32 (id=458):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) (async)
r1 = socket(0x400000000010, 0x3, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f303000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a300000000007000200"], 0xcd0}}, 0x0) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100006800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
socket$unix(0x1, 0x1, 0x0) (async)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'pim6reg0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0xd, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x81) (async, rerun: 32)
r5 = socket$unix(0x1, 0x1, 0x0) (rerun: 32)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a80)={0x0, @in6={{0xa, 0x4e20, 0xe6a, @mcast2, 0x7}}, 0x7fffffff, 0x0, 0x8, 0x2172, 0x3b, 0x8001, 0x4}, 0x9c)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)=@newtfilter={0x2c, 0x2c, 0x100, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0x3}, {0xfff1, 0x1}, {0x8, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r8=>0x0})
bind$can_raw(r7, &(0x7f0000000180)={0x1d, r8}, 0x10)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) (async)
sendmsg$can_raw(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@can={{0x4, 0x0, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "71949a1857e8bcf3"}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0xd209f6d81082d3d6) (async)
recvmmsg(r7, &(0x7f0000002100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000100)=""/48, 0x30}, {0x0}], 0x2}, 0x8001}], 0x2, 0x40000043, 0x0) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0)
write(r10, &(0x7f0000000280)='0', 0x1) (async)
r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000600), 0xc0000, 0x0)
io_submit(0x0, 0x3, &(0x7f0000000980)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x6, 0x8, r0, &(0x7f0000000300)="03b803b81ad3f4873034e3a07341596f60db5b0a8e73653d7942293941bc6680a3702c39a170f1f2efc635699b9bb5b961a1ee8f45baf8e1e58647b466e2947f5396b00305576715870f2b5b8f1b8e940e33480f0fab92e0d9e2f78619eecfdd2a411c", 0x63, 0x3, 0x0, 0x1, r10}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3, 0x8, r9, &(0x7f00000003c0)="6497148de6ef58fe65824cd19ae3b18d5331a5b7997edde287f23d309d127e34e3435ff177ad0c6800eae48e9de608d087079563eeb5cdb3110fd86a3ef789a34966d4113387bcb3a8bf30d2d319a7b9c5f8e35409a178ca746932cea26a08edfd9f99e699a59ed104559d8077d12da27cd543dde965babc85a334ff77e1c7f2247d6f33dc105907714e0567a6d56f66ec43b48b58a1bfa01434f1cc3ccbe6bafa6ce9", 0xa3, 0x4}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x3, 0x8001, r0, &(0x7f0000000500)="dba300b8119b1d51c10ac41002726034771fa9a5c569a2ccc4aa0471d8033eabd0a45ebce311e73f94032814eaf5289d334bda7f59593547b0855cd5cf6deed7a9ea916e1b5fbbea44a378369d45ca96c7223f61c7c297bc4a443d220772f372a81b4c31d1217bbb141a572c7032eac050ae35ff12e795af2ba49b63106989a122a05ce5fa5a76974ba491c2083e8075aa45dd1e19c903e391c3b227b15e526bf338b0e9511734256ff3130ab3d3c6f9717a5078ef7945db83576c90d6ea0a9d7862cc8e2831aadc6dd1152f90ae1867e7e10404a20d2f84d2461931368fd6", 0xdf, 0x4, 0x0, 0x0, r11}]) (async)
sendmsg$IPSET_CMD_TEST(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000b0601020800000000000000000000000900020073797a310000000005000100060000002c00078018000180e3bf6d9d8a3eb49129176b6ec2d2863d7ae487ca62a896b4e83d54912514d6f1d23d5a16f6e71cb6d1d43e885c4bdefda07c6c64173e9530649516ff59dd601c96baab74a040eb8c78211da64c140bd17e7d22c93a2d3efb23b232ca996c50a8c13ae4471d177b73425b0ba75c01d8179a8a70aa26e6fc4bbde5c8692568c6b4f2f8edf11d4b462c3c35ad861c46a18f3b1cf799485e44acf340272f21ee0000000000000000000000a37d18eb9b4a909578269dcf0b5c74e095ae24c56dc89634d7caa7f69e3c7212b59a357cfdb63a3dbc22cbbc19318d9ee7394da242aa68f6b00b0bf9ba8c51f89d4d43108acaffc3fa92f8b0b080cbf5c73537570c95059fdedfb3c1a8e80cd5b2f3a1192eba1a4e793ef6dad5572308571997b77a48a6d24fadcaef69eac2119bc36a8d7bac611c846a27192ae22e88ec5ebf1acecccb6a8b"], 0x54}}, 0x0) (async)
syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0, 0xbd3b, 0x200, 0x0, 0x2eb}, &(0x7f00000006c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8e2e, 0x40, 0x2, 0x177, 0x0, r10}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd027, 0x0, 0x0, 0x19b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa06d, 0x800, 0x2, 0x1c3}, <r12=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7863, 0x20000, 0x2, 0x353, 0x0, r10}}], 0x4, &(0x7f00000009c0)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xf3}, 0x0, 0x0, '\x00', {0x2, 0xde5, 0x0, &(0x7f0000000c80)=@buf_max_buf="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"}}, &(0x7f0000001d00))
syz_io_uring_setup(0x3afa, &(0x7f0000001d40)={0x0, 0xe473, 0x4, 0x3, 0x15b, 0x0, r12}, &(0x7f0000001dc0), &(0x7f0000001e00), &(0x7f0000001e40))
openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0)

0s ago: executing program 33 (id=450):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x0, 0x5, 0xbd, &(0x7f000000cf3d)=""/189, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x4, 0xb}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0xa0, 0x6, 0x321, 0x3, 0x0, 0x101, 0x0})
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000340000000000000001e340165e000000", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x70, 0x40c0}}], 0x1, 0x2)
io_setup(0x6, &(0x7f0000000080))
io_setup(0x7, &(0x7f0000000100))
io_setup(0x9, &(0x7f0000000300))
io_setup(0x1ff, &(0x7f00000005c0))
io_setup(0xaa, &(0x7f00000006c0))
recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x2, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
close(r3)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r4 = userfaultfd(0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x2ff})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000364000/0x1000)=nil, 0x400000, 0x2, 0x2})
unshare(0x42070e00)
sendfile(r0, r0, 0x0, 0x20000005)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000040)={@multicast1=0xe0000300, @multicast1}, 0x8)
setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000400)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x985, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xfff7ffff, 0x7ff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x13ffd]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x6, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xb6f, 0x0, 0x0, 0x1}, {0x1388, 0x6, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x3fc, 0x1000, 0x0, 0x0, 0x1}, {0x100002, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]})

kernel console output (not intermixed with test programs):

0925][   T30] pvrusb2: Hardware description: Terratec Grabster AV400
[   96.622120][   T30] pvrusb2: **********
[   96.622129][   T30] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[   96.622141][   T30] pvrusb2: Important functionality might not be entirely working.
[   96.622148][   T30] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[   96.622172][   T30] pvrusb2: **********
[   96.836276][ T2348] pvrusb2: Invalid write control endpoint
[   97.047772][ T2348] pvrusb2: Invalid write control endpoint
[   97.047782][ T2348] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[   97.047787][ T2348] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[   97.047791][ T2348] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[   97.047795][ T2348] pvrusb2: Device being rendered inoperable
[   97.056725][ T2348] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[   97.062061][ T2348] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[   97.063032][ T2348] pvrusb2: Attached sub-driver cx25840
[   97.063043][ T2348] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[   97.063050][ T2348] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[   97.156321][ T5352] usb 5-1: USB disconnect, device number 4
[   97.980347][ T5711] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   98.140324][ T5711] usb 1-1: Using ep0 maxpacket: 32
[   98.141041][ T5711] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[   98.142167][ T5711] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[   98.142189][ T5711] usb 1-1: config 0 has no interface number 0
[   98.144802][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.144823][ T5711] usb 1-1: Product: syz
[   98.144836][ T5711] usb 1-1: Manufacturer: syz
[   98.144848][ T5711] usb 1-1: SerialNumber: syz
[   98.150076][ T5711] usb 1-1: config 0 descriptor??
[   98.194531][ T5711] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[   98.271276][   T30] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   98.332331][ T5352] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[   98.401989][ T5711] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[   98.409126][ T5711] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[   98.430726][   T30] usb 5-1: Using ep0 maxpacket: 8
[   98.436646][   T30] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[   98.439466][   T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.483536][ T5352] usb 3-1: New USB device found, idVendor=093a, idProduct=8002, bcdDevice= 0.00
[   98.485934][ T5352] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   98.485962][ T5352] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   98.485981][ T5352] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   98.486042][ T5352] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.511734][   T30] pvrusb2: Hardware description: Terratec Grabster AV400
[   98.511752][   T30] pvrusb2: **********
[   98.511758][   T30] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[   98.511767][   T30] pvrusb2: Important functionality might not be entirely working.
[   98.511775][   T30] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[   98.511783][   T30] pvrusb2: **********
[   98.606028][ T5352] usb 3-1: config 0 descriptor??
[   98.712509][ T2348] pvrusb2: Invalid write control endpoint
[   98.791187][ T2348] pvrusb2: Invalid write control endpoint
[   98.791202][ T2348] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[   98.791209][ T2348] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[   98.791240][ T2348] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[   98.791249][ T2348] pvrusb2: Device being rendered inoperable
[   98.791319][ T2348] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[   98.791396][ T2348] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[   98.795246][ T2348] pvrusb2: Attached sub-driver cx25840
[   98.795261][ T2348] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[   98.795269][ T2348] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[   98.918926][   T30] usb 5-1: USB disconnect, device number 5
[   98.959314][ T6021] netlink: 104 bytes leftover after parsing attributes in process `syz.3.76'.
[   99.073591][ T5680] usb 2-1: USB disconnect, device number 4
[   99.094416][ T6008] netlink: 'syz.2.71': attribute type 1 has an invalid length.
[   99.115833][ T5680] yurex 2-1:0.0: USB YUREX #0 now disconnected
[   99.191253][ T5352] hid-generic 0003:093A:8002.0002: item fetching failed at offset 21/24
[   99.192133][ T5352] hid-generic 0003:093A:8002.0002: probe with driver hid-generic failed with error -22
[   99.290942][   T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[   99.451905][   T10] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e
[   99.453631][ T5711] usb 3-1: USB disconnect, device number 5
[   99.461091][   T10] usb 4-1: config 171 has an invalid interface number: 109 but max is 0
[   99.461144][   T10] usb 4-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config
[   99.461161][   T10] usb 4-1: config 171 has no interface number 0
[   99.461200][   T10] usb 4-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023
[   99.461222][   T10] usb 4-1: config 171 interface 109 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   99.461245][   T10] usb 4-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12
[   99.465770][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.465792][   T10] usb 4-1: Product: syz
[   99.465805][   T10] usb 4-1: Manufacturer: syz
[   99.465848][   T10] usb 4-1: SerialNumber: syz
[   99.510179][ T6023] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[   99.625033][ T6032] netlink: 'syz.1.81': attribute type 8 has an invalid length.
[   99.625053][ T6032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.81'.
[   99.656372][ T6032] veth1_to_team: entered promiscuous mode
[   99.658593][ T6032] gretap0: entered promiscuous mode
[   99.660157][ T6032] veth1_to_team: left promiscuous mode
[   99.667423][ T6032] gretap0: left promiscuous mode
[   99.741736][ T6038] capability: warning: `syz.4.82' uses deprecated v2 capabilities in a way that may be insecure
[   99.803828][ T6039] IPVS: lc: TCP 127.0.0.1:21 - no destination available
[   99.857341][   T31] kauditd_printk_skb: 58 callbacks suppressed
[   99.857358][   T31] audit: type=1326 audit(1790388037.575:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6022 comm="syz.3.77" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311739e159 code=0x7ffc0000
[   99.857505][   T31] audit: type=1326 audit(1790388037.575:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6022 comm="syz.3.77" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f311739e159 code=0x7ffc0000
[  100.134999][ T6053] bridge1: entered allmulticast mode
[  100.230346][ T5680] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  100.383193][ T5680] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  100.384490][ T5680] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  100.384516][ T5680] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  100.384549][ T5680] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.388655][ T5680] usb 5-1: config 0 descriptor??
[  100.600714][   T10] ath6kl: Failed to submit usb control message: -110
[  100.600793][   T10] ath6kl: unable to send the bmi data to the device: -110
[  100.600807][   T10] ath6kl: Unable to send get target info: -110
[  100.605444][   T10] ath6kl: Failed to init ath6kl core: -110
[  100.620804][   T10] ath6kl_usb 4-1:171.109: probe with driver ath6kl_usb failed with error -110
[  100.665548][ T5680] usbhid 5-1:0.0: can't add hid device: -32
[  100.665650][ T5680] usbhid 5-1:0.0: probe with driver usbhid failed with error -32
[  100.699732][    C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  100.700784][   T10] usb 1-1: USB disconnect, device number 3
[  100.783130][   T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  100.817423][   T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  100.836412][   T10] quatech2 1-1:0.51: device disconnected
[  100.841546][    C0] IPVS: lc: TCP 127.0.0.1:21 - no destination available
[  101.043602][ T6075] process 'syz.2.91' launched '/dev/fd/4' with NULL argv: empty string added
[  101.380836][   T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  101.510450][   T10] usb 1-1: device descriptor read/64, error -71
[  101.628282][ T6081] netlink: 56 bytes leftover after parsing attributes in process `syz.1.93'.
[  101.775292][   T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  101.912292][   T10] usb 1-1: device descriptor read/64, error -71
[  102.034063][   T10] usb usb1-port1: attempt power cycle
[  102.066657][  T943] usb 4-1: USB disconnect, device number 9
[  102.190414][ T5352] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  102.256986][ T6087] FAULT_INJECTION: forcing a failure.
[  102.256986][ T6087] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  102.257034][ T6087] CPU: 0 UID: 0 PID: 6087 Comm: syz.3.96 Not tainted syzkaller #0 PREEMPT(full) 
[  102.257046][ T6087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  102.257058][ T6087] Call Trace:
[  102.257065][ T6087]  <TASK>
[  102.257070][ T6087]  dump_stack_lvl+0xe8/0x150
[  102.257090][ T6087]  should_fail_ex+0x410/0x560
[  102.257105][ T6087]  fpu__restore_sig+0x207/0x1200
[  102.257124][ T6087]  ? __pfx_fpu__restore_sig+0x10/0x10
[  102.257151][ T6087]  __ia32_sys_rt_sigreturn+0x756/0x8c0
[  102.257167][ T6087]  ? __lock_acquire+0x747/0x2de0
[  102.257180][ T6087]  ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10
[  102.257194][ T6087]  ? _raw_spin_unlock_irq+0x2e/0x50
[  102.257254][ T6087]  ? __task_pid_nr_ns+0x28/0x470
[  102.257283][ T6087]  do_syscall_64+0x166/0x520
[  102.257302][ T6087]  ? trace_irq_disable+0x3b/0x140
[  102.257312][ T6087]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.257323][ T6087]  ? clear_bhb_loop+0x70/0xc0
[  102.257334][ T6087]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  102.257344][ T6087] RIP: 0033:0x7f311739e157
[  102.257359][ T6087] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89
[  102.257366][ T6087] RSP: 002b:00007f31181f8028 EFLAGS: 00000246
[  102.257378][ T6087] RAX: 0000000000000000 RBX: 00007f3117625fa0 RCX: 00007f311739e159
[  102.257385][ T6087] RDX: 000000000000004a RSI: 0000200000000300 RDI: 0000000000000004
[  102.257392][ T6087] RBP: 00007f31181f8090 R08: 0000000000000000 R09: 0000000000000000
[  102.257397][ T6087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  102.257403][ T6087] R13: 00007f3117626038 R14: 00007f3117625fa0 R15: 00007f311774fa48
[  102.257418][ T6087]  </TASK>
[  102.392089][   T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  102.412851][   T10] usb 1-1: device descriptor read/8, error -71
[  102.460555][ T5352] usb 3-1: Using ep0 maxpacket: 32
[  102.472591][ T5352] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  102.482642][ T5352] usb 3-1: config 0 interface 0 altsetting 14 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  102.482674][ T5352] usb 3-1: config 0 interface 0 has no altsetting 0
[  102.482705][ T5352] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.519031][ T5352] usb 3-1: config 0 descriptor??
[  102.528017][ T6094] netlink: 104 bytes leftover after parsing attributes in process `syz.3.97'.
[  102.651268][   T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  102.659048][ T6098] IPv6: NLM_F_CREATE should be specified when creating new route
[  102.684037][   T10] usb 1-1: device descriptor read/8, error -71
[  102.790874][   T10] usb usb1-port1: unable to enumerate USB device
[  102.880204][ T6106] netlink: 48 bytes leftover after parsing attributes in process `syz.3.103'.
[  102.934218][ T5352] logitech 0003:046D:C20E.0003: rdesc size test failed for formula gp
[  102.939200][ T5352] logitech 0003:046D:C20E.0003: hidraw0: USB HID v0.03 Device [HID 046d:c20e] on usb-dummy_hcd.2-1/input0
[  103.046739][  T943] usb 5-1: USB disconnect, device number 6
[  103.192677][ T6114] FAULT_INJECTION: forcing a failure.
[  103.192677][ T6114] name failslab, interval 1, probability 0, space 0, times 1
[  103.192698][ T6114] CPU: 0 UID: 0 PID: 6114 Comm: syz.4.106 Not tainted syzkaller #0 PREEMPT(full) 
[  103.192709][ T6114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  103.192715][ T6114] Call Trace:
[  103.192719][ T6114]  <TASK>
[  103.192724][ T6114]  dump_stack_lvl+0xe8/0x150
[  103.192743][ T6114]  should_fail_ex+0x410/0x560
[  103.192759][ T6114]  should_failslab+0xa8/0x100
[  103.192773][ T6114]  __kmalloc_cache_noprof+0xa3/0x600
[  103.192784][ T6114]  ? __kmalloc_cache_noprof+0x14d/0x600
[  103.192793][ T6114]  ? sctp_add_bind_addr+0x8c/0x370
[  103.192802][ T6114]  ? sctp_add_bind_addr+0x8c/0x370
[  103.192815][ T6114]  sctp_add_bind_addr+0x8c/0x370
[  103.192827][ T6114]  sctp_copy_local_addr_list+0x31a/0x4e0
[  103.192844][ T6114]  ? sctp_copy_local_addr_list+0xa3/0x4e0
[  103.192859][ T6114]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  103.192878][ T6114]  ? sctp_v6_is_any+0x64/0x80
[  103.192890][ T6114]  ? sctp_copy_one_addr+0x93/0x360
[  103.192907][ T6114]  sctp_bind_addr_copy+0xb3/0x3c0
[  103.192923][ T6114]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  103.192938][ T6114]  sctp_connect_new_asoc+0x2ff/0x6b0
[  103.192952][ T6114]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  103.192970][ T6114]  ? __local_bh_enable_ip+0xd6/0x140
[  103.192983][ T6114]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  103.192996][ T6114]  ? security_sctp_bind_connect+0x7e/0x2c0
[  103.193009][ T6114]  sctp_sendmsg+0x159b/0x2d00
[  103.193026][ T6114]  ? kstrtouint+0x6e/0xe0
[  103.193036][ T6114]  ? __pfx_sctp_sendmsg+0x10/0x10
[  103.193047][ T6114]  ? lock_acquire+0x115/0x350
[  103.193057][ T6114]  ? get_pid_task+0x20/0x1f0
[  103.193075][ T6114]  ? aa_sock_msg_perm+0xf5/0x210
[  103.193088][ T6114]  ? sock_rps_record_flow+0x19/0x350
[  103.193100][ T6114]  ? inet_sendmsg+0x298/0x320
[  103.193112][ T6114]  ? __pfx_inet_sendmsg+0x10/0x10
[  103.193121][ T6114]  sock_sendmsg_nosec+0x10e/0x180
[  103.193134][ T6114]  __sys_sendto+0x408/0x5a0
[  103.193146][ T6114]  ? ksys_write+0x1e6/0x270
[  103.193162][ T6114]  ? __pfx___sys_sendto+0x10/0x10
[  103.193173][ T6114]  ? __mutex_unlock_slowpath+0x731/0x900
[  103.193201][ T6114]  ? __pfx_ksys_write+0x10/0x10
[  103.193218][ T6114]  __x64_sys_sendto+0xde/0x100
[  103.193233][ T6114]  do_syscall_64+0x166/0x520
[  103.193245][ T6114]  ? trace_irq_disable+0x3b/0x140
[  103.193255][ T6114]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.193265][ T6114]  ? clear_bhb_loop+0x70/0xc0
[  103.193277][ T6114]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  103.193286][ T6114] RIP: 0033:0x7f8fb779e159
[  103.193296][ T6114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  103.193304][ T6114] RSP: 002b:00007f8fb863e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  103.193315][ T6114] RAX: ffffffffffffffda RBX: 00007f8fb7a25fa0 RCX: 00007f8fb779e159
[  103.193322][ T6114] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003
[  103.193328][ T6114] RBP: 00007f8fb863e090 R08: 0000200000000080 R09: 000000000000001c
[  103.193334][ T6114] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002
[  103.193340][ T6114] R13: 00007f8fb7a26038 R14: 00007f8fb7a25fa0 R15: 00007f8fb7b4fa48
[  103.193356][ T6114]  </TASK>
[  103.371458][ T6116] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  103.371481][ T6116] batman_adv: batadv0: Removing interface: batadv_slave_0
[  103.389021][ T6116] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  103.389043][ T6116] batman_adv: batadv0: Removing interface: batadv_slave_1
[  103.539553][ T6119] netlink: 12 bytes leftover after parsing attributes in process `syz.4.107'.
[  104.286474][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.111'.
[  104.986390][ T5680] usb 3-1: USB disconnect, device number 6
[  105.145028][ T6158] IPv4: Oversized IP packet from 127.202.26.0
[  105.191551][ T6161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.191985][ T6161] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.313611][ T5352] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  105.333252][ T6168] netlink: 'syz.1.121': attribute type 1 has an invalid length.
[  105.421140][   T30] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  105.470338][ T5352] usb 1-1: Using ep0 maxpacket: 32
[  105.471491][ T5352] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  105.480033][ T5352] usb 1-1: string descriptor 0 read error: -22
[  105.480155][ T5352] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.564328][ T5352] usb 1-1: Audio class v2/v3 interfaces need an interface association
[  105.580665][   T30] usb 4-1: device descriptor read/64, error -71
[  105.717346][ T5352] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  105.745341][ T5352] usb 1-1: USB disconnect, device number 8
[  105.752885][ T6178] sctp: [Deprecated]: syz.4.123 (pid 6178) Use of int in max_burst socket option.
[  105.752885][ T6178] Use struct sctp_assoc_value instead
[  105.830555][   T30] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  105.960332][   T30] usb 4-1: device descriptor read/64, error -71
[  106.081527][   T30] usb usb4-port1: attempt power cycle
[  106.084661][ T6191] Cannot find add_set index 0 as target
[  106.321567][ T5352] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  106.430620][   T30] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  106.453370][   T30] usb 4-1: device descriptor read/8, error -71
[  106.484002][ T5352] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  106.484988][ T5352] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  106.487277][ T5352] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  106.487299][ T5352] usb 2-1: Product: syz
[  106.487311][ T5352] usb 2-1: Manufacturer: syz
[  106.487325][ T5352] usb 2-1: SerialNumber: syz
[  106.537781][ T5352] usb 2-1: config 0 descriptor??
[  106.588754][ T6202] netlink: 'syz.0.129': attribute type 1 has an invalid length.
[  106.588775][ T6202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.129'.
[  106.700515][   T30] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  106.722376][   T30] usb 4-1: device descriptor read/8, error -71
[  106.831378][   T30] usb usb4-port1: unable to enumerate USB device
[  106.886484][ T6214] atomic_op ffff8880550789e0 conn xmit_atomic 0000000000000000
[  107.260342][ T5711] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  107.411373][ T5711] usb 5-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40
[  107.412924][ T5711] usb 5-1: config index 0 descriptor too short (expected 1572, got 36)
[  107.412949][ T5711] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  107.416326][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.416349][ T5711] usb 5-1: Product: syz
[  107.416362][ T5711] usb 5-1: Manufacturer: syz
[  107.416374][ T5711] usb 5-1: SerialNumber: syz
[  107.497892][ T5711] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input9
[  107.687528][ T4971] bcm5974 5-1:1.0: could not read from device
[  107.689672][ T4971] bcm5974 5-1:1.0: could not read from device
[  107.705449][ T5711] bcm5974 5-1:1.0: could not read from device
[  107.749593][ T5711] input: failed to attach handler mousedev to device input9, error: -5
[  107.777936][ T5711] usb 5-1: USB disconnect, device number 7
[  107.788856][ T4971] bcm5974 5-1:1.0: could not read from device
[  108.029353][ T6229] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[6230] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[6229]
[  108.813725][   T30] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  108.935309][ T6248] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size.
[  108.971959][   T30] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  108.973399][   T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  108.973427][   T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.973455][   T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.979317][   T30] usb 5-1: config 0 descriptor??
[  109.121404][ T5711] usb 2-1: USB disconnect, device number 5
[  109.432107][   T30] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0
[  109.432232][   T30] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0
[  109.478597][   T30] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0004/input/input10
[  109.612113][ T6254] sctp: [Deprecated]: syz.3.145 (pid 6254) Use of int in maxseg socket option.
[  109.612113][ T6254] Use struct sctp_assoc_value instead
[  109.640693][   T30] cm6533_jd 0003:0D8C:0022.0004: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0
[  110.148169][ T6267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.149'.
[  110.203131][ T6269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.148'.
[  110.203167][ T6269] netlink: 59 bytes leftover after parsing attributes in process `syz.1.148'.
[  110.264006][ T5711] usb 5-1: USB disconnect, device number 8
[  110.459926][ T6285] netlink: 40 bytes leftover after parsing attributes in process `syz.3.154'.
[  110.515819][ T6282] fuse: Bad value for 'fd'
[  110.553903][   T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  110.690354][ T6292] binder: 6290:6292 ioctl c0306201 0 returned -14
[  110.702578][   T10] usb 3-1: Using ep0 maxpacket: 16
[  110.705853][   T10] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  110.743964][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.743981][   T10] usb 3-1: Product: syz
[  110.743988][   T10] usb 3-1: Manufacturer: syz
[  110.743995][   T10] usb 3-1: SerialNumber: syz
[  111.056433][   T10] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  111.106659][   T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  111.107016][   T10] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  111.107059][   T10] usb 3-1: media controller created
[  111.207356][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  111.401351][   T30] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  111.475627][   T10] zl10353_read_register: readreg error (reg=127, ret==-71)
[  111.554536][   T30] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  111.555530][   T30] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  111.555558][   T30] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  111.555592][   T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.603198][ T6300] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  111.634783][   T30] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  111.656138][   T10] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  111.671849][   T10] usb 3-1: USB disconnect, device number 7
[  111.789992][ T5709] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  112.025267][ T5709] usb 4-1: Using ep0 maxpacket: 8
[  112.027134][ T5709] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  112.029047][ T5709] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  112.029069][ T5709] usb 4-1: config 179 has no interface number 0
[  112.029107][ T5709] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  112.029128][ T5709] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  112.029152][ T5709] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  112.029173][ T5709] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  112.029193][ T5709] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  112.029231][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.133073][ T6306] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  112.263557][ T6300] tc action pedit offset must be on 32 bit boundaries
[  112.263581][ T6300] tc action pedit offset must be on 32 bit boundaries
[  112.263591][ T6300] tc action pedit offset must be on 32 bit boundaries
[  112.263600][ T6300] tc action pedit offset must be on 32 bit boundaries
[  112.263608][ T6300] tc action pedit offset must be on 32 bit boundaries
[  112.263616][ T6300] tc action pedit offset must be on 32 bit boundaries
[  112.263625][ T6300] tc action pedit offset must be on 32 bit boundaries
[  112.263632][ T6300] tc action pedit offset must be on 32 bit boundaries
[  112.263640][ T6300] tc action pedit offset must be on 32 bit boundaries
[  112.263648][ T6300] tc action pedit offset must be on 32 bit boundaries
[  112.263665][ T6300] 0: reclassify loop, rule prio 0, protocol 800
[  112.546828][   T10] usb 1-1: USB disconnect, device number 9
[  112.600709][ T5709] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  112.669789][ T6315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.162'.
[  112.760711][ T5709] usb 3-1: Using ep0 maxpacket: 16
[  112.761718][ T5709] usb 3-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40
[  112.763657][ T5709] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  112.763681][ T5709] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  112.763770][ T5709] usb 3-1: config 1 has no interface number 1
[  112.763808][ T5709] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  112.763839][ T5709] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  112.767375][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.767397][ T5709] usb 3-1: Product: syz
[  112.767409][ T5709] usb 3-1: Manufacturer: syz
[  112.767422][ T5709] usb 3-1: SerialNumber: syz
[  112.888054][   T31] audit: type=1326 audit(1790388050.605:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6317 comm="syz.1.163" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56619e159 code=0x7ffc0000
[  112.888433][   T31] audit: type=1326 audit(1790388050.605:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6317 comm="syz.1.163" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56619e159 code=0x7ffc0000
[  112.889370][   T31] audit: type=1326 audit(1790388050.605:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6317 comm="syz.1.163" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd56619e159 code=0x7ffc0000
[  112.889847][   T31] audit: type=1326 audit(1790388050.605:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6317 comm="syz.1.163" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56619e159 code=0x7ffc0000
[  112.914759][   T31] audit: type=1326 audit(1790388050.605:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6317 comm="syz.1.163" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56619e159 code=0x7ffc0000
[  112.943593][   T31] audit: type=1326 audit(1790388050.665:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6317 comm="syz.1.163" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=438 compat=0 ip=0x7fd56619e159 code=0x7ffc0000
[  112.943639][   T31] audit: type=1326 audit(1790388050.665:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6317 comm="syz.1.163" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56619e159 code=0x7ffc0000
[  112.943757][   T31] audit: type=1326 audit(1790388050.665:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6317 comm="syz.1.163" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56619e159 code=0x7ffc0000
[  112.943796][   T31] audit: type=1326 audit(1790388050.665:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6317 comm="syz.1.163" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd56619e159 code=0x7ffc0000
[  112.943833][   T31] audit: type=1326 audit(1790388050.665:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6317 comm="syz.1.163" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd56619e159 code=0x7ffc0000
[  112.999788][ T6318] netlink: 132 bytes leftover after parsing attributes in process `syz.1.163'.
[  113.288837][ T6311] syzkaller0: entered promiscuous mode
[  113.288859][ T6311] syzkaller0: entered allmulticast mode
[  113.313647][ T6316] warning: `syz.3.160' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  114.041642][ T5709] usb 3-1: 0:1 : does not exist
[  114.041812][ T5709] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor
[  114.041842][ T5709] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  114.041858][ T5709] usb 3-1: 2:1 : invalid channels 0
[  114.344341][ T5709] usb 3-1: USB disconnect, device number 8
[  114.545977][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  114.759976][ T5709] usb 4-1: USB disconnect, device number 14
[  114.760034][    C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  114.760083][    C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  115.652294][ T5708] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  115.802662][ T5708] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[  115.805303][ T5708] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  115.805348][ T5708] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  115.805384][ T5708] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.104725][   T10] usb 1-1: USB disconnect, device number 10
[  116.276793][ T6369] fuse: Bad value for 'fd'
[  116.482510][ T6373] loop4: detected capacity change from 0 to 2640
[  116.490520][   T30] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  116.507831][ T6373] Buffer I/O error on dev loop4, logical block 0, async page read
[  116.507881][ T6373] Buffer I/O error on dev loop4, logical block 0, async page read
[  116.507908][ T6373] Buffer I/O error on dev loop4, logical block 0, async page read
[  116.507934][ T6373] Buffer I/O error on dev loop4, logical block 0, async page read
[  116.507959][ T6373] Buffer I/O error on dev loop4, logical block 0, async page read
[  116.508003][ T6373] Buffer I/O error on dev loop4, logical block 0, async page read
[  116.508142][ T6373] Buffer I/O error on dev loop4, logical block 0, async page read
[  116.508167][ T6373] Buffer I/O error on dev loop4, logical block 0, async page read
[  116.508180][ T6373] ldm_validate_partition_table(): Disk read failed.
[  116.508202][ T6373] Buffer I/O error on dev loop4, logical block 0, async page read
[  116.508226][ T6373] Buffer I/O error on dev loop4, logical block 0, async page read
[  116.508267][ T6373] Dev loop4: unable to read RDB block 0
[  116.508436][ T6373]  loop4: unable to read partition table
[  116.508626][ T6373] loop_reread_partitions: partition scan of loop4 (3�����) failed (rc=-5)
[  116.680781][   T30] usb 3-1: Using ep0 maxpacket: 8
[  116.681619][   T30] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  116.683521][   T30] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  116.683552][   T30] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  116.683564][   T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  116.683576][   T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  116.683586][   T30] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  116.685447][   T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  116.685468][   T30] usb 3-1: Product: syz
[  116.685481][   T30] usb 3-1: Manufacturer: syz
[  116.685493][   T30] usb 3-1: SerialNumber: syz
[  116.688073][   T30] usb 3-1: config 0 descriptor??
[  116.965606][ T6383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  116.966028][ T6383] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.096790][ T6383] input: syz0 as /devices/virtual/input/input13
[  117.200578][   T30] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -110
[  117.200919][   T30] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5
[  117.222390][ T6386] ip6t_rt: unknown flags B
[  117.463353][   T30] usb 3-1: USB disconnect, device number 9
[  118.253966][ T6403] xt_CT: You must specify a L4 protocol and not use inversions on it
[  118.487946][ T6410] tipc: Started in network mode
[  118.487965][ T6410] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  118.488065][ T6410] tipc: Enabled bearer <eth:team0>, priority 0
[  118.522320][ T6295] Set syz1 is full, maxelem 65536 reached
[  118.660620][ T5680] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  118.714935][ T6408] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  118.811777][ T5680] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  118.846359][ T5680] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  118.846375][ T5680] usb 2-1: Product: syz
[  118.846383][ T5680] usb 2-1: SerialNumber: syz
[  118.876302][ T5680] usb 2-1: config 0 descriptor??
[  119.015412][ T6423] netlink: 'syz.0.196': attribute type 10 has an invalid length.
[  119.126327][ T6413] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.127551][ T6413] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.159919][ T1220] IPVS: starting estimator thread 0...
[  119.183525][ T5680] usb 2-1: USB disconnect, device number 6
[  119.241642][ T6427] IPVS: using max 52 ests per chain, 124800 per kthread
[  119.316126][ T6413] bridge_slave_0: left allmulticast mode
[  119.316144][ T6413] bridge_slave_0: left promiscuous mode
[  119.316296][ T6413] bridge0: port 1(bridge_slave_0) entered disabled state
[  119.362038][ T6413] bridge_slave_1: left allmulticast mode
[  119.362897][ T6413] bridge_slave_1: left promiscuous mode
[  119.363273][ T6413] bridge0: port 2(bridge_slave_1) entered disabled state
[  119.406206][ T6413] bond0: (slave bond_slave_0): Releasing backup interface
[  119.442358][ T6413] bond0: (slave bond_slave_1): Releasing backup interface
[  119.479434][ T6413] team0: Port device team_slave_0 removed
[  119.521732][ T6413] team0: Port device team_slave_1 removed
[  119.562950][ T6413] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  119.563737][ T6423] team0: Device veth0_vlan is up. Set it down before adding it as a team port
[  119.658804][ T6421] ipvlan2: entered allmulticast mode
[  119.658823][ T6421] macvlan1: entered allmulticast mode
[  119.658835][ T6421] veth1_vlan: entered allmulticast mode
[  119.708303][ T6421] batman_adv: batadv0: Adding interface: ipvlan2
[  119.708320][ T6421] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  119.708346][ T6421] batman_adv: batadv0: Interface activated: ipvlan2
[  119.820105][ T6425] ipvlan3: entered allmulticast mode
[  119.846213][ T6425] batman_adv: batadv0: Adding interface: ipvlan3
[  119.846225][ T6425] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  119.846239][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:35) already exists on: ipvlan2
[  119.846259][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.846266][ T6425] batman_adv: batadv0: Interface activated: ipvlan3
[  119.903090][ T5760] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  119.920731][ T6432] ip6t_rt: unknown flags B
[  119.937895][ T5711] tipc: Node number set to 11578026
[  120.050999][ T5760] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  120.054306][ T5760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.054330][ T5760] usb 4-1: Product: syz
[  120.054343][ T5760] usb 4-1: Manufacturer: syz
[  120.054356][ T5760] usb 4-1: SerialNumber: syz
[  120.274758][ T6438] netlink: 16 bytes leftover after parsing attributes in process `syz.1.200'.
[  120.308273][ T6429] netlink: 'syz.3.197': attribute type 3 has an invalid length.
[  120.319320][ T5760] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  120.319371][ T5760] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  120.319390][ T5760] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  120.362993][ T5760] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  120.390415][ T5760] usb 4-1: USB disconnect, device number 15
[  120.779187][ T6445] netlink: 32 bytes leftover after parsing attributes in process `syz.2.201'.
[  121.050062][ T6451] sg_write: data in/out 614412/136 bytes for SCSI command 0x0-- guessing data in;
[  121.050062][ T6451]    program syz.0.203 not setting count and/or reply_len properly
[  121.223591][ T6456] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  121.317017][ T6458] FAULT_INJECTION: forcing a failure.
[  121.317017][ T6458] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  121.317077][ T6458] CPU: 0 UID: 0 PID: 6458 Comm: syz.3.206 Not tainted syzkaller #0 PREEMPT(full) 
[  121.317089][ T6458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  121.317095][ T6458] Call Trace:
[  121.317100][ T6458]  <TASK>
[  121.317105][ T6458]  dump_stack_lvl+0xe8/0x150
[  121.317131][ T6458]  should_fail_ex+0x410/0x560
[  121.317146][ T6458]  _copy_to_user+0x31/0xb0
[  121.317161][ T6458]  copy_siginfo_to_user+0x22/0xc0
[  121.317176][ T6458]  x64_setup_rt_frame+0x764/0xc50
[  121.317201][ T6458]  ? __pfx_x64_setup_rt_frame+0x10/0x10
[  121.317220][ T6458]  arch_do_signal_or_restart+0x456/0x860
[  121.317235][ T6458]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  121.317252][ T6458]  ? ksys_read+0x242/0x270
[  121.317271][ T6458]  exit_to_user_mode_loop+0x10e/0x770
[  121.317287][ T6458]  ? rcu_is_watching+0x16/0xb0
[  121.317302][ T6458]  do_syscall_64+0x328/0x520
[  121.317315][ T6458]  ? trace_irq_disable+0x3b/0x140
[  121.317325][ T6458]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.317336][ T6458]  ? clear_bhb_loop+0x70/0xc0
[  121.317348][ T6458]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.317357][ T6458] RIP: 0033:0x7f311739e157
[  121.317370][ T6458] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89
[  121.317378][ T6458] RSP: 002b:00007f31181f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  121.317392][ T6458] RAX: 0000000000000000 RBX: 00007f3117625fa0 RCX: 00007f311739e159
[  121.317398][ T6458] RDX: 000000000000004a RSI: 0000200000000300 RDI: 0000000000000004
[  121.317404][ T6458] RBP: 00007f31181f8090 R08: 0000000000000000 R09: 0000000000000000
[  121.317410][ T6458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  121.317415][ T6458] R13: 00007f3117626038 R14: 00007f3117625fa0 R15: 00007f311774fa48
[  121.317431][ T6458]  </TASK>
[  122.024983][ T5711] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  122.170507][ T5711] usb 1-1: device descriptor read/64, error -71
[  122.190716][ T5760] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  122.217669][ T6481] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  122.356965][ T5760] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  122.358366][ T5760] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  122.358394][ T5760] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  122.358414][ T5760] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  122.358438][ T5760] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.417106][ T5760] usb 5-1: config 0 descriptor??
[  122.439415][ T6481] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  122.440365][ T5711] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  122.601063][ T5711] usb 1-1: device descriptor read/64, error -71
[  122.720867][ T5711] usb usb1-port1: attempt power cycle
[  122.783831][ T6484] ip6t_rt: unknown flags B
[  122.827393][ T5760] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  122.827475][ T5760] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  122.827510][ T5760] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0
[  122.864419][ T5760] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  123.072541][ T5711] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  123.091300][ T5711] usb 1-1: device descriptor read/8, error -71
[  123.143147][ T6477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  123.143396][ T6477] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  123.330354][ T5711] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  123.351692][ T5711] usb 1-1: device descriptor read/8, error -71
[  123.470683][ T5711] usb usb1-port1: unable to enumerate USB device
[  123.724162][ T5708] usb 5-1: USB disconnect, device number 9
[  123.835906][ T6494] syzkaller0: entered promiscuous mode
[  123.835927][ T6494] syzkaller0: entered allmulticast mode
[  124.008077][   T31] kauditd_printk_skb: 34 callbacks suppressed
[  124.008095][   T31] audit: type=1326 audit(1790388061.725:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.4.218" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb779e159 code=0x7ffc0000
[  124.009808][   T31] audit: type=1326 audit(1790388061.725:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.4.218" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb779e159 code=0x7ffc0000
[  124.066071][ T6500] FAULT_INJECTION: forcing a failure.
[  124.066071][ T6500] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  124.066094][ T6500] CPU: 0 UID: 0 PID: 6500 Comm: syz.1.219 Not tainted syzkaller #0 PREEMPT(full) 
[  124.066105][ T6500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  124.066111][ T6500] Call Trace:
[  124.066115][ T6500]  <TASK>
[  124.066119][ T6500]  dump_stack_lvl+0xe8/0x150
[  124.066138][ T6500]  should_fail_ex+0x410/0x560
[  124.066152][ T6500]  _copy_from_iter+0x1d3/0x1660
[  124.066165][ T6500]  ? __alloc_skb+0x27a/0x7a0
[  124.066178][ T6500]  ? __alloc_skb+0x27a/0x7a0
[  124.066190][ T6500]  ? __alloc_skb+0x27a/0x7a0
[  124.066201][ T6500]  ? __pfx__copy_from_iter+0x10/0x10
[  124.066211][ T6500]  ? kmem_cache_alloc_node_noprof+0x1f9/0x610
[  124.066226][ T6500]  ? __alloc_skb+0x27a/0x7a0
[  124.066236][ T6500]  ? __alloc_skb+0x27a/0x7a0
[  124.066250][ T6500]  ? netlink_sendmsg+0x650/0xb40
[  124.066260][ T6500]  ? skb_put+0x112/0x210
[  124.066273][ T6500]  netlink_sendmsg+0x6c0/0xb40
[  124.066287][ T6500]  ? __pfx_netlink_sendmsg+0x10/0x10
[  124.066301][ T6500]  ? apparmor_socket_sendmsg+0x98/0x360
[  124.066313][ T6500]  ? __pfx_netlink_sendmsg+0x10/0x10
[  124.066322][ T6500]  sock_sendmsg_nosec+0x13a/0x180
[  124.066334][ T6500]  ____sys_sendmsg+0x54e/0x850
[  124.066350][ T6500]  ? __pfx_____sys_sendmsg+0x10/0x10
[  124.066368][ T6500]  ? import_iovec+0x73/0xa0
[  124.066381][ T6500]  ___sys_sendmsg+0x2a5/0x360
[  124.066393][ T6500]  ? __lock_acquire+0x747/0x2de0
[  124.066406][ T6500]  ? __pfx____sys_sendmsg+0x10/0x10
[  124.066436][ T6500]  ? __fget_files+0x2a/0x420
[  124.066449][ T6500]  ? __fget_files+0x3a2/0x420
[  124.066466][ T6500]  __x64_sys_sendmsg+0x1b1/0x290
[  124.066481][ T6500]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  124.066504][ T6500]  do_syscall_64+0x166/0x520
[  124.066523][ T6500]  ? trace_irq_disable+0x3b/0x140
[  124.066533][ T6500]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.066543][ T6500]  ? clear_bhb_loop+0x70/0xc0
[  124.066556][ T6500]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.066565][ T6500] RIP: 0033:0x7fd56619e159
[  124.066579][ T6500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  124.066587][ T6500] RSP: 002b:00007fd566fc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  124.066599][ T6500] RAX: ffffffffffffffda RBX: 00007fd566425fa0 RCX: 00007fd56619e159
[  124.066605][ T6500] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003
[  124.066611][ T6500] RBP: 00007fd566fc6090 R08: 0000000000000000 R09: 0000000000000000
[  124.066617][ T6500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  124.066623][ T6500] R13: 00007fd566426038 R14: 00007fd566425fa0 R15: 00007fd56654fa48
[  124.066638][ T6500]  </TASK>
[  124.080426][   T31] audit: type=1326 audit(1790388061.795:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.4.218" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f8fb779e159 code=0x7ffc0000
[  124.080467][   T31] audit: type=1326 audit(1790388061.795:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.4.218" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb779e159 code=0x7ffc0000
[  124.080503][   T31] audit: type=1326 audit(1790388061.795:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.4.218" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb779e159 code=0x7ffc0000
[  124.100424][   T31] audit: type=1326 audit(1790388061.815:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.4.218" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8fb779e159 code=0x7ffc0000
[  124.100474][   T31] audit: type=1326 audit(1790388061.815:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.4.218" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb779e159 code=0x7ffc0000
[  124.100509][   T31] audit: type=1326 audit(1790388061.815:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.4.218" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb779e159 code=0x7ffc0000
[  124.100571][   T31] audit: type=1326 audit(1790388061.815:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.4.218" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8fb779e159 code=0x7ffc0000
[  124.100607][   T31] audit: type=1326 audit(1790388061.815:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.4.218" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fb779e159 code=0x7ffc0000
[  124.641054][ T6507] vlan2: entered promiscuous mode
[  124.641069][ T6507] hsr0: entered promiscuous mode
[  124.641286][ T6507] vlan2: entered allmulticast mode
[  124.641294][ T6507] hsr0: entered allmulticast mode
[  124.641300][ T6507] hsr_slave_0: entered allmulticast mode
[  124.641307][ T6507] hsr_slave_1: entered allmulticast mode
[  124.712832][ T6507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.221'.
[  124.735123][ T6507] hsr_slave_0: left promiscuous mode
[  124.736620][ T6507] hsr_slave_1: left promiscuous mode
[  125.078687][ T6516] xt_CT: You must specify a L4 protocol and not use inversions on it
[  125.147477][ T6519] ip6t_rt: unknown flags B
[  125.950528][ T6547] fuse: Bad value for 'fd'
[  126.413559][ T6560] atomic_op ffff888021b271e0 conn xmit_atomic 0000000000000000
[  126.575335][ T6563] netlink: 104 bytes leftover after parsing attributes in process `syz.3.243'.
[  126.640835][ T5709] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  126.793103][ T5709] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  126.793745][ T5709] usb 2-1: config 0 has no interfaces?
[  126.794893][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  126.794914][ T5709] usb 2-1: SerialNumber: syz
[  126.803467][ T5709] usb 2-1: config 0 descriptor??
[  126.877415][ T6570] netlink: 16 bytes leftover after parsing attributes in process `syz.0.245'.
[  127.020538][ T5680] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  127.025992][ T5709] usb 2-1: USB disconnect, device number 7
[  127.171143][ T5680] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  127.172748][ T5680] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  127.172768][ T5680] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  127.176707][ T5680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.176729][ T5680] usb 4-1: Product: syz
[  127.176763][ T5680] usb 4-1: Manufacturer: syz
[  127.176778][ T5680] usb 4-1: SerialNumber: syz
[  127.330483][   T30] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  127.445342][ T6585] ip6t_rt: unknown flags B
[  127.448198][ T6569] netlink: 16 bytes leftover after parsing attributes in process `syz.3.246'.
[  127.494444][   T30] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  127.496390][   T30] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  127.496442][   T30] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  127.496478][   T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.521841][ T6578] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  127.585009][   T30] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  127.850928][ T6578] tcf_pedit_act: 7 callbacks suppressed
[  127.850948][ T6578] tc action pedit offset must be on 32 bit boundaries
[  127.851535][ T6578] tc action pedit offset must be on 32 bit boundaries
[  127.851550][ T6578] tc action pedit offset must be on 32 bit boundaries
[  127.851559][ T6578] tc action pedit offset must be on 32 bit boundaries
[  127.851567][ T6578] tc action pedit offset must be on 32 bit boundaries
[  127.851576][ T6578] tc action pedit offset must be on 32 bit boundaries
[  127.851584][ T6578] tc action pedit offset must be on 32 bit boundaries
[  127.851593][ T6578] tc action pedit offset must be on 32 bit boundaries
[  127.851601][ T6578] tc action pedit offset must be on 32 bit boundaries
[  127.851610][ T6578] tc action pedit offset must be on 32 bit boundaries
[  127.851631][ T6578] 0: reclassify loop, rule prio 0, protocol 800
[  128.037330][ T5680] usb 4-1: USB disconnect, device number 16
[  128.177284][   T30] usb 5-1: USB disconnect, device number 10
[  128.461902][ T5711] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  128.611009][ T5711] usb 3-1: Using ep0 maxpacket: 8
[  128.611709][ T5711] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  128.613128][ T5711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.673360][ T5711] pvrusb2: Hardware description: Terratec Grabster AV400
[  128.673376][ T5711] pvrusb2: **********
[  128.673383][ T5711] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  128.673392][ T5711] pvrusb2: Important functionality might not be entirely working.
[  128.673400][ T5711] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  128.673409][ T5711] pvrusb2: **********
[  128.900904][ T6595] syzkaller0: entered promiscuous mode
[  128.900925][ T6595] syzkaller0: entered allmulticast mode
[  129.199018][ T6615] netlink: 16 bytes leftover after parsing attributes in process `syz.4.261'.
[  129.367066][   T31] kauditd_printk_skb: 211 callbacks suppressed
[  129.367084][   T31] audit: type=1804 audit(1790388067.085:425): pid=6620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.262" name="bus" dev="ramfs" ino=13576 res=1 errno=0
[  129.734014][ T2348] pvrusb2: Invalid write control endpoint
[  129.875772][ T2348] pvrusb2: Invalid write control endpoint
[  129.875783][ T2348] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  129.875787][ T2348] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  129.875791][ T2348] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  129.875796][ T2348] pvrusb2: Device being rendered inoperable
[  129.878657][ T2348] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  129.887428][ T2348] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  129.938687][ T2348] pvrusb2: Attached sub-driver cx25840
[  129.938698][ T2348] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  129.938703][ T2348] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  130.197284][ T5760] usb 3-1: USB disconnect, device number 10
[  130.576248][ T6644] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  130.980387][ T5760] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  131.130293][ T5760] usb 4-1: Using ep0 maxpacket: 32
[  131.133382][ T5760] usb 4-1: unable to get BOS descriptor or descriptor too short
[  131.133429][ T5760] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  131.162438][ T5760] usb 4-1: config 1 has an invalid descriptor of length 213, skipping remainder of the config
[  131.162462][ T5760] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  131.193495][ T5760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.193528][ T5760] usb 4-1: Product: syz
[  131.193539][ T5760] usb 4-1: Manufacturer: syz
[  131.193552][ T5760] usb 4-1: SerialNumber: syz
[  131.665894][ T6644] netlink: 'syz.3.267': attribute type 3 has an invalid length.
[  131.665924][ T6644] netlink: 3 bytes leftover after parsing attributes in process `syz.3.267'.
[  131.720914][ T5680] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  131.871661][ T5680] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00
[  131.878610][ T5680] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  131.878634][ T5680] usb 5-1: Product: syz
[  131.878642][ T5680] usb 5-1: SerialNumber: syz
[  131.898346][ T5680] usb 5-1: config 0 descriptor??
[  132.241435][   T68] IPVS: starting estimator thread 0...
[  132.273988][ T5680] usb 5-1: USB disconnect, device number 11
[  132.351134][ T6659] IPVS: using max 52 ests per chain, 124800 per kthread
[  132.764262][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  132.764342][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  133.142913][ T6669] netlink: 24 bytes leftover after parsing attributes in process `syz.4.273'.
[  133.219262][ T6672] netlink: 4 bytes leftover after parsing attributes in process `syz.4.273'.
[  133.256668][ T6672] IPVS: length: 197 != 8
[  133.628407][ T6682] netlink: 'syz.4.278': attribute type 10 has an invalid length.
[  133.661353][ T6682] team0: Device veth0_vlan failed to register rx_handler
[  133.693547][ T5760] usb 4-1: USB disconnect, device number 17
[  133.880818][   T30] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  133.900321][ T5711] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  133.958632][ T6692] binder: 6690:6692 ioctl c0306201 0 returned -14
[  133.980099][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.284'.
[  133.980114][ T6693] netlink: 4 bytes leftover after parsing attributes in process `syz.3.284'.
[  134.008546][ T6693] macvtap1: entered allmulticast mode
[  134.008562][ T6693] dummy0: entered allmulticast mode
[  134.008684][ T6693] dummy0: entered promiscuous mode
[  134.031206][   T30] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80
[  134.033044][   T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.033072][   T30] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.033107][   T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.039608][   T30] usb 3-1: config 0 descriptor??
[  134.061302][ T5711] usb 2-1: Using ep0 maxpacket: 8
[  134.071830][ T5711] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  134.114326][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.114351][ T5711] usb 2-1: Product: syz
[  134.114364][ T5711] usb 2-1: Manufacturer: syz
[  134.114376][ T5711] usb 2-1: SerialNumber: syz
[  134.152076][ T5711] usb 2-1: config 0 descriptor??
[  134.156387][ T5711] gspca_main: sq930x-2.14.0 probing 2770:930c
[  134.490366][ T5760] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  134.536691][   T30] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  134.537988][   T30] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  134.538020][   T30] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  134.538057][   T30] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  134.538083][   T30] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  134.538107][   T30] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  134.538131][   T30] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  134.580420][  T943] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  134.611957][   T30] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0
[  134.662367][ T5760] usb 4-1: Using ep0 maxpacket: 16
[  134.663593][ T5711] gspca_sq930x: reg_r 001f failed -110
[  134.663643][ T5711] sq930x 2-1:0.0: probe with driver sq930x failed with error -110
[  134.666749][ T5760] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  134.712717][ T5760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.712741][ T5760] usb 4-1: Product: syz
[  134.712751][ T5760] usb 4-1: Manufacturer: syz
[  134.712763][ T5760] usb 4-1: SerialNumber: syz
[  134.717471][   T30] cp2112 0003:10C4:EA90.0006: Part Number: 0x00 Device Version: 0x00
[  134.753914][  T943] usb 5-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[  134.757491][  T943] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  134.757515][  T943] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  134.816162][  T943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.816178][  T943] usb 5-1: Product: syz
[  134.816188][  T943] usb 5-1: Manufacturer: syz
[  134.816200][  T943] usb 5-1: SerialNumber: syz
[  134.874848][  T943] ums-sddr09 5-1:1.0: USB Mass Storage device detected
[  134.916146][  T943] ums-sddr09 5-1:1.0: This device (04e6,0005,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  134.916146][  T943]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  135.021070][ T5760] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  135.075796][ T5760] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  135.079858][ T5760] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  135.079899][ T5760] usb 4-1: media controller created
[  135.165729][ T5760] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  135.217362][ T6696] FAULT_INJECTION: forcing a failure.
[  135.217362][ T6696] name failslab, interval 1, probability 0, space 0, times 0
[  135.217390][ T6696] CPU: 0 UID: 0 PID: 6696 Comm: syz.3.285 Not tainted syzkaller #0 PREEMPT(full) 
[  135.217407][ T6696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  135.217417][ T6696] Call Trace:
[  135.217423][ T6696]  <TASK>
[  135.217429][ T6696]  dump_stack_lvl+0xe8/0x150
[  135.217461][ T6696]  should_fail_ex+0x410/0x560
[  135.217483][ T6696]  should_failslab+0xa8/0x100
[  135.217503][ T6696]  __kmalloc_cache_noprof+0xa3/0x600
[  135.217520][ T6696]  ? __pfx___mutex_lock+0x10/0x10
[  135.217542][ T6696]  ? usb_control_msg+0x73/0x3e0
[  135.217559][ T6696]  ? usb_control_msg+0x73/0x3e0
[  135.217581][ T6696]  usb_control_msg+0x73/0x3e0
[  135.217599][ T6696]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  135.217621][ T6696]  gl861_ctrl_msg+0x207/0x420
[  135.217657][ T6696]  ? __pfx_gl861_ctrl_msg+0x10/0x10
[  135.217686][ T6696]  ? kasan_save_track+0x4f/0x80
[  135.217709][ T6696]  ? stack_depot_save_flags+0x33/0x7f0
[  135.217731][ T6696]  ? __lock_acquire+0x747/0x2de0
[  135.217757][ T6696]  gl861_i2c_master_xfer+0x439/0x6a0
[  135.217790][ T6696]  __i2c_transfer+0x7bf/0x1fe0
[  135.217825][ T6696]  __i2c_smbus_xfer+0x159a/0x27e0
[  135.217866][ T6696]  ? __pfx___i2c_smbus_xfer+0x10/0x10
[  135.217914][ T6696]  ? rt_mutex_lock_nested+0x156/0x1c0
[  135.217944][ T6696]  i2c_smbus_xfer+0x1f5/0x310
[  135.217975][ T6696]  i2cdev_ioctl_smbus+0x407/0x700
[  135.218002][ T6696]  ? __pfx_i2cdev_ioctl_smbus+0x10/0x10
[  135.218040][ T6696]  i2cdev_ioctl+0x615/0x880
[  135.218057][ T6696]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  135.218073][ T6696]  ? __fget_files+0x2a/0x420
[  135.218092][ T6696]  ? __fget_files+0x3a2/0x420
[  135.218116][ T6696]  ? bpf_lsm_file_ioctl+0x9/0x20
[  135.218140][ T6696]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  135.218157][ T6696]  __se_sys_ioctl+0xfc/0x170
[  135.218178][ T6696]  do_syscall_64+0x166/0x520
[  135.218198][ T6696]  ? trace_irq_disable+0x3b/0x140
[  135.218214][ T6696]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.218233][ T6696]  ? clear_bhb_loop+0x70/0xc0
[  135.218254][ T6696]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.218271][ T6696] RIP: 0033:0x7f311739e159
[  135.218284][ T6696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  135.218295][ T6696] RSP: 002b:00007f31181f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  135.218312][ T6696] RAX: ffffffffffffffda RBX: 00007f3117625fa0 RCX: 00007f311739e159
[  135.218323][ T6696] RDX: 0000200000000100 RSI: 0000000000000720 RDI: 0000000000000004
[  135.218334][ T6696] RBP: 00007f31181f8090 R08: 0000000000000000 R09: 0000000000000000
[  135.218342][ T6696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  135.218350][ T6696] R13: 00007f3117626038 R14: 00007f3117625fa0 R15: 00007f311774fa48
[  135.218376][ T6696]  </TASK>
[  135.456590][ T5760] zl10353_read_register: readreg error (reg=127, ret==-71)
[  135.558401][   T30] cp2112 0003:10C4:EA90.0006: error reading lock byte: -71
[  135.576335][   T30] usb 3-1: USB disconnect, device number 11
[  135.691224][  T943] ums-sddr09 5-1:1.0: probe with driver ums-sddr09 failed with error -5
[  135.741827][ T5760] dvb_usb_gl861 4-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  135.748922][ T5760] usb 4-1: USB disconnect, device number 18
[  136.023377][ T6710] Cannot find add_set index 0 as target
[  136.178943][   T30] usb 2-1: USB disconnect, device number 8
[  136.271388][   T25] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  136.402575][ T6725] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  136.422147][   T25] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  136.426260][   T25] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  136.456098][   T25] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3
[  136.456125][   T25] usb 1-1: Product: syz
[  136.456138][   T25] usb 1-1: Manufacturer: syz
[  136.456150][   T25] usb 1-1: SerialNumber: syz
[  136.469216][   T25] usb 1-1: config 0 descriptor??
[  136.660416][ T5760] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  136.813278][ T5760] usb 3-1: Using ep0 maxpacket: 16
[  136.814079][ T5760] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  136.831950][ T5760] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.831973][ T5760] usb 3-1: Product: syz
[  136.831986][ T5760] usb 3-1: Manufacturer: syz
[  136.831999][ T5760] usb 3-1: SerialNumber: syz
[  136.901321][  T943] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  136.914520][ T6730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.293'.
[  137.055138][  T943] usb 4-1: Using ep0 maxpacket: 32
[  137.071225][  T943] usb 4-1: unable to get BOS descriptor or descriptor too short
[  137.071277][  T943] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  137.080097][  T943] usb 4-1: config 1 has an invalid descriptor of length 213, skipping remainder of the config
[  137.080148][  T943] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  137.132846][  T943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.132863][  T943] usb 4-1: Product: syz
[  137.132870][  T943] usb 4-1: Manufacturer: syz
[  137.132878][  T943] usb 4-1: SerialNumber: syz
[  137.257876][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.292'.
[  137.407682][ T6725] netlink: 'syz.3.291': attribute type 3 has an invalid length.
[  137.407704][ T6725] netlink: 3 bytes leftover after parsing attributes in process `syz.3.291'.
[  137.482388][  T969] usb 5-1: USB disconnect, device number 12
[  137.581073][ T6743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.581432][ T6743] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  138.959993][   T30] usb 1-1: USB disconnect, device number 15
[  139.140667][    T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!!
[  139.432109][   T31] audit: type=1804 audit(1790388077.155:426): pid=6758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.301" name="bus" dev="ramfs" ino=14024 res=1 errno=0
[  139.598697][ T5760] usb 3-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  139.677832][ T5760] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  139.679541][ T5760] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  139.679590][ T5760] usb 3-1: media controller created
[  139.752262][ T6763] netlink: 'syz.4.303': attribute type 1 has an invalid length.
[  139.816646][ T5760] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  139.840005][  T943] usb 4-1: USB disconnect, device number 19
[  139.901985][ T5760] zl10353_read_register: readreg error (reg=127, ret==-71)
[  139.962398][ T5760] dvb_usb_gl861 3-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  140.015764][ T5760] usb 3-1: USB disconnect, device number 12
[  140.066968][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.305'.
[  140.184377][ T6763] 8021q: adding VLAN 0 to HW filter on device bond1
[  140.278350][ T6776] bond1: (slave geneve2): making interface the new active one
[  140.288981][ T6776] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  140.361307][ T5760] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  140.491461][ T5760] usb 3-1: device descriptor read/64, error -71
[  140.507383][   T30] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  140.585541][ T6791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.310'.
[  140.660313][   T25] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  140.679523][ T6793] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  140.694273][   T30] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  140.695997][   T30] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  140.696027][   T30] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  140.696050][   T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.698796][ T6783] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  140.734591][ T5760] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  140.778507][   T30] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  140.820865][   T25] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  140.821845][   T25] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  140.821870][   T25] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  140.821891][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.860356][ T5760] usb 3-1: device descriptor read/64, error -71
[  140.884308][ T6785] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  140.973609][ T5760] usb usb3-port1: attempt power cycle
[  140.994628][   T25] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  141.060934][ T6783] tcf_pedit_act: 7 callbacks suppressed
[  141.060961][ T6783] tc action pedit offset must be on 32 bit boundaries
[  141.060971][ T6783] tc action pedit offset must be on 32 bit boundaries
[  141.060980][ T6783] tc action pedit offset must be on 32 bit boundaries
[  141.060988][ T6783] tc action pedit offset must be on 32 bit boundaries
[  141.060997][ T6783] tc action pedit offset must be on 32 bit boundaries
[  141.061005][ T6783] tc action pedit offset must be on 32 bit boundaries
[  141.061013][ T6783] tc action pedit offset must be on 32 bit boundaries
[  141.061022][ T6783] tc action pedit offset must be on 32 bit boundaries
[  141.061030][ T6783] tc action pedit offset must be on 32 bit boundaries
[  141.061039][ T6783] tc action pedit offset must be on 32 bit boundaries
[  141.061059][ T6783] 0: reclassify loop, rule prio 0, protocol 800
[  141.298843][  T943] usb 2-1: USB disconnect, device number 9
[  141.311052][ T5760] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  141.336919][ T5760] usb 3-1: device descriptor read/8, error -71
[  141.399746][ T6785] 0: reclassify loop, rule prio 0, protocol 800
[  141.461810][ T5711] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  141.570360][ T5760] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  141.591004][ T5760] usb 3-1: device descriptor read/8, error -71
[  141.610318][ T5711] usb 5-1: Using ep0 maxpacket: 32
[  141.613070][ T5711] usb 5-1: unable to get BOS descriptor or descriptor too short
[  141.613113][ T5711] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  141.615042][ T5711] usb 5-1: config 1 has an invalid descriptor of length 213, skipping remainder of the config
[  141.615061][ T5711] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  141.617706][ T5711] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.617728][ T5711] usb 5-1: Product: syz
[  141.617741][ T5711] usb 5-1: Manufacturer: syz
[  141.617753][ T5711] usb 5-1: SerialNumber: syz
[  141.647000][   T10] usb 4-1: USB disconnect, device number 20
[  141.690444][  T969] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  141.703000][ T5760] usb usb3-port1: unable to enumerate USB device
[  141.841318][  T969] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  141.842637][  T969] usb 1-1: config 0 has no interfaces?
[  141.847572][  T969] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  141.847596][  T969] usb 1-1: SerialNumber: syz
[  141.850797][  T969] usb 1-1: config 0 descriptor??
[  141.901589][ T6793] netlink: 'syz.4.308': attribute type 3 has an invalid length.
[  141.901611][ T6793] netlink: 3 bytes leftover after parsing attributes in process `syz.4.308'.
[  142.057594][  T969] usb 1-1: USB disconnect, device number 16
[  142.518566][ T6812] input: syz1 as /devices/virtual/input/input16
[  142.588326][ T6810] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.589018][ T6810] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.624330][ T6812] loop8: detected capacity change from 0 to 8
[  142.663018][ T6812] Dev loop8: unable to read RDB block 8
[  142.664491][ T6812]  loop8: unable to read partition table
[  142.664640][ T6812] loop8: partition table beyond EOD, truncated
[  142.664664][ T6812] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  143.252335][ T6810] bridge_slave_0: left allmulticast mode
[  143.252393][ T6810] bridge_slave_0: left promiscuous mode
[  143.254653][ T6810] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.356469][ T6810] bridge_slave_1: left allmulticast mode
[  143.356495][ T6810] bridge_slave_1: left promiscuous mode
[  143.375215][ T6810] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.469402][ T6810] bond0: (slave bond_slave_0): Releasing backup interface
[  143.487060][ T6810] bond0: (slave bond_slave_1): Releasing backup interface
[  143.507510][ T6810] team0: Port device team_slave_0 removed
[  143.539078][ T6810] team0: Port device team_slave_1 removed
[  143.591869][ T5711] usb 5-1: USB disconnect, device number 13
[  143.657604][ T6810] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  144.080374][   T30] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  144.243474][   T30] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  144.244490][   T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  144.244517][   T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  144.244537][   T30] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  144.244576][   T30] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.248822][   T30] usb 2-1: config 0 descriptor??
[  144.524588][ T6849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  144.525007][ T6849] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  144.550737][   T30] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd
[  144.578240][   T30] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  144.590325][  T969] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  144.730079][   T30] usb 2-1: USB disconnect, device number 10
[  144.747247][  T969] usb 1-1: unable to get BOS descriptor or descriptor too short
[  144.747296][  T969] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40
[  144.756574][  T969] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  144.756597][  T969] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  144.756647][  T969] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  144.759209][  T969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.759231][  T969] usb 1-1: Product: syz
[  144.759244][  T969] usb 1-1: Manufacturer: syz
[  144.759256][  T969] usb 1-1: SerialNumber: syz
[  145.032825][ T6862] netlink: 48 bytes leftover after parsing attributes in process `syz.3.327'.
[  145.032847][ T6862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.327'.
[  145.061033][  T969] usb 1-1: unit 4 not found!
[  145.061061][  T969] usb 1-1: unit 8 not found!
[  145.215973][  T969] usb 1-1: USB disconnect, device number 17
[  145.337202][ T5633] udevd[5633]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  145.460052][ T6872] kernel read not supported for file /zero (pid: 6872 comm: syz.3.330)
[  145.467049][ T6873] kernel read not supported for file /zero (pid: 6873 comm: syz.3.330)
[  145.750436][  T969] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  145.883617][ T6883] netlink: 'syz.0.333': attribute type 10 has an invalid length.
[  145.883646][ T6883] team0: Device veth0_vlan is up. Set it down before adding it as a team port
[  145.905996][  T969] usb 2-1: Using ep0 maxpacket: 32
[  145.909749][  T969] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  145.912664][  T969] usb 2-1: config 0 has an invalid interface number: 131 but max is 0
[  145.912686][  T969] usb 2-1: config 0 has no interface number 0
[  145.912711][  T969] usb 2-1: too many endpoints for config 0 interface 131 altsetting 181: 207, using maximum allowed: 30
[  145.912744][  T969] usb 2-1: config 0 interface 131 altsetting 181 has 0 endpoint descriptors, different from the interface descriptor's value: 207
[  145.912768][  T969] usb 2-1: config 0 interface 131 has no altsetting 0
[  145.919900][  T969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.919922][  T969] usb 2-1: Product: syz
[  145.919935][  T969] usb 2-1: Manufacturer: syz
[  145.919948][  T969] usb 2-1: SerialNumber: syz
[  145.929447][  T969] usb 2-1: config 0 descriptor??
[  145.932450][ T5709] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  146.026386][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.334'.
[  146.026407][ T6885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.334'.
[  146.076006][ T6885] macvtap1: entered allmulticast mode
[  146.076030][ T6885] dummy0: entered allmulticast mode
[  146.076661][ T6885] dummy0: entered promiscuous mode
[  146.120661][ T5709] usb 3-1: Using ep0 maxpacket: 8
[  146.121550][ T5709] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[  146.122978][ T5709] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  146.123032][ T5709] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  146.123056][ T5709] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  146.126630][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3
[  146.126653][ T5709] usb 3-1: Product: syz
[  146.126666][ T5709] usb 3-1: Manufacturer: syz
[  146.126680][ T5709] usb 3-1: SerialNumber: syz
[  146.166777][ T5709] usb 3-1: config 0 descriptor??
[  146.320352][ T5709] rc_core: IR keymap rc-imon-rsc not found
[  146.320370][ T5709] Registered IR keymap rc-empty
[  146.326490][ T5709] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  146.358272][ T5709] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input18
[  146.536877][ T6899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  146.537359][ T6899] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  146.617682][ T6895] kernel read not supported for file / 
�7���âW)�s���!Q���fs��r�)r��O���2:"��T+͟v|�ղDvc���֠�6�x�c: (pid: 6895 comm: syz.4.336)
[  146.622111][   T31] audit: type=1800 audit(1790388084.335:427): pid=6895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.336" name=20019C1437B3CFFCC3A25729AB7393A7C721518FF6ECA56673F58772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=19541 res=0 errno=0
[  146.683698][  T969] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  146.687773][  T969] gspca_topro: reg_w err -71
[  146.710692][  T969] gspca_topro: Sensor soi763a
[  146.826919][  T969] usb 2-1: USB disconnect, device number 11
[  147.216699][  T969] usb 3-1: USB disconnect, device number 17
[  147.300712][ T5760] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  147.454309][ T5760] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  147.456017][ T5760] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  147.456047][ T5760] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  147.456089][ T5760] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.503686][ T6912] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  147.515210][ T5760] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  147.571776][ T5709] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  147.720342][ T5709] usb 2-1: Using ep0 maxpacket: 16
[  147.720383][  T969] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  147.721209][ T5709] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  147.727994][ T5709] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.728009][ T5709] usb 2-1: Product: syz
[  147.728017][ T5709] usb 2-1: Manufacturer: syz
[  147.728024][ T5709] usb 2-1: SerialNumber: syz
[  147.816833][ T6912] tcf_pedit_act: 24 callbacks suppressed
[  147.816854][ T6912] tc action pedit offset must be on 32 bit boundaries
[  147.816865][ T6912] tc action pedit offset must be on 32 bit boundaries
[  147.816874][ T6912] tc action pedit offset must be on 32 bit boundaries
[  147.816882][ T6912] tc action pedit offset must be on 32 bit boundaries
[  147.816891][ T6912] tc action pedit offset must be on 32 bit boundaries
[  147.816900][ T6912] tc action pedit offset must be on 32 bit boundaries
[  147.816909][ T6912] tc action pedit offset must be on 32 bit boundaries
[  147.816917][ T6912] tc action pedit offset must be on 32 bit boundaries
[  147.816925][ T6912] tc action pedit offset must be on 32 bit boundaries
[  147.816933][ T6912] tc action pedit offset must be on 32 bit boundaries
[  147.816947][ T6912] 0: reclassify loop, rule prio 0, protocol 800
[  147.850540][  T969] usb 3-1: device descriptor read/64, error -71
[  147.987802][ T5709] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  148.003430][ T5709] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  148.003870][ T5709] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  148.003941][ T5709] usb 2-1: media controller created
[  148.020176][ T5711] usb 1-1: USB disconnect, device number 18
[  148.049264][ T5709] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  148.090947][  T969] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  148.122588][ T6922] loop4: detected capacity change from 0 to 7
[  148.134476][ T6922] Dev loop4: unable to read RDB block 7
[  148.134517][ T6922]  loop4: unable to read partition table
[  148.134706][ T6922] loop4: partition table beyond EOD, truncated
[  148.134744][ T6922] loop_reread_partitions: partition scan of loop4 (�被x������ ) failed (rc=-5)
[  148.220334][  T969] usb 3-1: device descriptor read/64, error -71
[  148.302880][ T6914] FAULT_INJECTION: forcing a failure.
[  148.302880][ T6914] name failslab, interval 1, probability 0, space 0, times 0
[  148.302918][ T6914] CPU: 1 UID: 0 PID: 6914 Comm: syz.1.341 Not tainted syzkaller #0 PREEMPT(full) 
[  148.302941][ T6914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  148.302953][ T6914] Call Trace:
[  148.302970][ T6914]  <TASK>
[  148.302979][ T6914]  dump_stack_lvl+0xe8/0x150
[  148.303012][ T6914]  should_fail_ex+0x410/0x560
[  148.303041][ T6914]  should_failslab+0xa8/0x100
[  148.303069][ T6914]  __kmalloc_noprof+0xfe/0x720
[  148.303088][ T6914]  ? __kasan_kmalloc+0x93/0xb0
[  148.303110][ T6914]  ? usb_alloc_urb+0x46/0x150
[  148.303127][ T6914]  ? usb_alloc_urb+0x46/0x150
[  148.303146][ T6914]  ? __kmalloc_cache_noprof+0x14d/0x600
[  148.303169][ T6914]  usb_alloc_urb+0x46/0x150
[  148.303192][ T6914]  usb_control_msg+0x118/0x3e0
[  148.303218][ T6914]  gl861_ctrl_msg+0x207/0x420
[  148.303256][ T6914]  ? __pfx_gl861_ctrl_msg+0x10/0x10
[  148.303282][ T6914]  ? do_raw_spin_lock+0x12b/0x2f0
[  148.303327][ T6914]  gl861_i2c_master_xfer+0x439/0x6a0
[  148.303361][ T6914]  __i2c_transfer+0x7bf/0x1fe0
[  148.303399][ T6914]  __i2c_smbus_xfer+0x159a/0x27e0
[  148.303435][ T6914]  ? rt_mutex_slowlock+0x1f2/0x780
[  148.303459][ T6914]  ? __pfx___i2c_smbus_xfer+0x10/0x10
[  148.303507][ T6914]  ? rt_mutex_lock_nested+0x167/0x1c0
[  148.303540][ T6914]  i2c_smbus_xfer+0x1f5/0x310
[  148.303572][ T6914]  i2cdev_ioctl_smbus+0x407/0x700
[  148.303600][ T6914]  ? __pfx_i2cdev_ioctl_smbus+0x10/0x10
[  148.303640][ T6914]  i2cdev_ioctl+0x615/0x880
[  148.303660][ T6914]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  148.303681][ T6914]  ? __fget_files+0x2a/0x420
[  148.303706][ T6914]  ? __fget_files+0x3a2/0x420
[  148.303736][ T6914]  ? bpf_lsm_file_ioctl+0x9/0x20
[  148.303764][ T6914]  ? __pfx_i2cdev_ioctl+0x10/0x10
[  148.303785][ T6914]  __se_sys_ioctl+0xfc/0x170
[  148.303809][ T6914]  do_syscall_64+0x166/0x520
[  148.303832][ T6914]  ? trace_irq_disable+0x3b/0x140
[  148.303851][ T6914]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.303871][ T6914]  ? clear_bhb_loop+0x70/0xc0
[  148.303895][ T6914]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.303913][ T6914] RIP: 0033:0x7fd56619e159
[  148.303932][ T6914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  148.303947][ T6914] RSP: 002b:00007fd566fc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  148.303977][ T6914] RAX: ffffffffffffffda RBX: 00007fd566425fa0 RCX: 00007fd56619e159
[  148.303991][ T6914] RDX: 0000200000000100 RSI: 0000000000000720 RDI: 0000000000000004
[  148.304004][ T6914] RBP: 00007fd566fc6090 R08: 0000000000000000 R09: 0000000000000000
[  148.304016][ T6914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  148.304028][ T6914] R13: 00007fd566426038 R14: 00007fd566425fa0 R15: 00007fd56654fa48
[  148.304059][ T6914]  </TASK>
[  148.304193][ T5709] zl10353_read_register: readreg error (reg=127, ret==-110)
[  148.336160][  T969] usb usb3-port1: attempt power cycle
[  148.668005][ T5709] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  148.674636][  T969] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  148.695117][ T5709] usb 2-1: USB disconnect, device number 12
[  148.697302][  T969] usb 3-1: device descriptor read/8, error -71
[  148.930708][  T969] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  148.950936][  T969] usb 3-1: device descriptor read/8, error -71
[  149.056657][ T6936] xt_CT: You must specify a L4 protocol and not use inversions on it
[  149.064174][  T969] usb usb3-port1: unable to enumerate USB device
[  149.269743][ T6944] kvm: requested 124876 ns i8254 timer period limited to 200000 ns
[  149.269871][ T6944] kvm: requested 168457 ns i8254 timer period limited to 200000 ns
[  149.289429][ T6940] kvm: pic: non byte write
[  149.314885][ T6944] netlink: 68 bytes leftover after parsing attributes in process `syz.4.352'.
[  149.522352][ T6953] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  149.911616][ T5709] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  150.060558][ T5709] usb 4-1: Using ep0 maxpacket: 32
[  150.077004][ T5709] usb 4-1: unable to get BOS descriptor or descriptor too short
[  150.077040][ T5709] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  150.078626][ T5709] usb 4-1: config 1 has an invalid descriptor of length 213, skipping remainder of the config
[  150.078648][ T5709] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  150.123001][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.123026][ T5709] usb 4-1: Product: syz
[  150.123040][ T5709] usb 4-1: Manufacturer: syz
[  150.123081][ T5709] usb 4-1: SerialNumber: syz
[  150.143442][ T5711] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  150.294103][ T5711] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  150.295227][ T5711] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  150.295255][ T5711] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  150.295288][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.303414][ T6962] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  150.385406][ T5711] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  150.531216][ T6970] netlink: 'syz.4.358': attribute type 2 has an invalid length.
[  150.571995][ T6953] netlink: 'syz.3.353': attribute type 3 has an invalid length.
[  150.572063][ T6953] netlink: 3 bytes leftover after parsing attributes in process `syz.3.353'.
[  151.186611][ T5711] usb 1-1: USB disconnect, device number 19
[  151.860370][ T5352] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  152.010388][ T5352] usb 3-1: Using ep0 maxpacket: 32
[  152.011156][ T5352] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  152.012663][ T5352] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  152.012688][ T5352] usb 3-1: config 0 has no interface number 0
[  152.012862][ T5352] usb 3-1: config 0 interface 12 has no altsetting 0
[  152.017218][ T5352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.017240][ T5352] usb 3-1: Product: syz
[  152.017253][ T5352] usb 3-1: Manufacturer: syz
[  152.017266][ T5352] usb 3-1: SerialNumber: syz
[  152.094466][ T5352] usb 3-1: config 0 descriptor??
[  152.097593][ T6996] netlink: 104 bytes leftover after parsing attributes in process `syz.4.368'.
[  152.486364][ T7000] kvm: requested 124876 ns i8254 timer period limited to 200000 ns
[  152.486490][ T7000] kvm: requested 168457 ns i8254 timer period limited to 200000 ns
[  152.531242][ T7000] netlink: 68 bytes leftover after parsing attributes in process `syz.1.369'.
[  152.562015][ T5709] usb 4-1: USB disconnect, device number 21
[  152.926250][ T6991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.929616][ T6991] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.043584][ T5352] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71
[  153.043653][ T5352] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[  153.043719][ T5352] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  153.043802][ T5352] f81534 3-1:0.12: probe with driver f81534 failed with error -71
[  153.066629][ T5760] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  153.096981][ T5352] usb 3-1: USB disconnect, device number 22
[  153.200406][ T5760] usb 1-1: device descriptor read/64, error -71
[  153.450324][ T5760] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  153.580396][ T5760] usb 1-1: device descriptor read/64, error -71
[  153.690758][ T5760] usb usb1-port1: attempt power cycle
[  154.030790][ T5760] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  154.051416][ T5760] usb 1-1: device descriptor read/8, error -71
[  154.290512][ T5760] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  154.314158][ T5760] usb 1-1: device descriptor read/8, error -71
[  154.420943][ T5760] usb usb1-port1: unable to enumerate USB device
[  154.442218][ T5709] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  154.511478][  T969] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  154.594570][ T5709] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  154.598130][ T5709] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.642626][ T5709] usb 3-1: config 0 descriptor??
[  154.649787][ T5709] cp210x 3-1:0.0: cp210x converter detected
[  154.664602][  T969] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  154.665617][  T969] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  154.665646][  T969] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  154.665682][  T969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.713003][ T7035] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  154.719712][  T969] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  155.129494][ T5709] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -71
[  155.131119][ T5709] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -71
[  155.131142][ T5709] cp210x 3-1:0.0: GPIO initialisation failed: -71
[  155.151565][ T5709] usb 3-1: cp210x converter now attached to ttyUSB0
[  155.188995][ T5709] usb 3-1: USB disconnect, device number 23
[  155.218921][ T5709] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  155.219346][ T5709] cp210x 3-1:0.0: device disconnected
[  155.417700][ T5352] usb 2-1: USB disconnect, device number 13
[  155.992563][ T7044] FAULT_INJECTION: forcing a failure.
[  155.992563][ T7044] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  155.992604][ T7044] CPU: 0 UID: 0 PID: 7044 Comm: syz.0.382 Not tainted syzkaller #0 PREEMPT(full) 
[  155.992624][ T7044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  155.992635][ T7044] Call Trace:
[  155.992643][ T7044]  <TASK>
[  155.992651][ T7044]  dump_stack_lvl+0xe8/0x150
[  155.992682][ T7044]  should_fail_ex+0x410/0x560
[  155.992709][ T7044]  prepare_alloc_pages+0x223/0x600
[  155.992735][ T7044]  __alloc_frozen_pages_noprof+0x185/0x5a0
[  155.992761][ T7044]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  155.992802][ T7044]  ? __pfx_policy_nodemask+0x10/0x10
[  155.992837][ T7044]  alloc_pages_mpol+0x21e/0x390
[  155.992867][ T7044]  alloc_pages_noprof+0xb1/0x2b0
[  155.992892][ T7044]  get_free_pages_noprof+0xf/0x80
[  155.992913][ T7044]  __kasan_populate_vmalloc+0x38/0x1c0
[  155.992933][ T7044]  ? do_raw_spin_unlock+0xf5/0x200
[  155.992964][ T7044]  alloc_vmap_area+0xd1a/0x1420
[  155.993006][ T7044]  ? __pfx_alloc_vmap_area+0x10/0x10
[  155.993031][ T7044]  ? __kmalloc_cache_node_noprof+0x1f7/0x620
[  155.993052][ T7044]  ? __get_vm_area_node+0x155/0x2f0
[  155.993083][ T7044]  __get_vm_area_node+0x200/0x2f0
[  155.993116][ T7044]  ? vmci_qp_broker_unmap+0x612/0xa70
[  155.993135][ T7044]  vmap+0x158/0x300
[  155.993160][ T7044]  ? vmci_qp_broker_unmap+0x612/0xa70
[  155.993183][ T7044]  vmci_qp_broker_unmap+0x612/0xa70
[  155.993212][ T7044]  ? __pfx_vmci_qp_broker_unmap+0x10/0x10
[  155.993242][ T7044]  vmci_host_unlocked_ioctl+0x1b42/0x2850
[  155.993277][ T7044]  ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10
[  155.993330][ T7044]  ? kasan_quarantine_put+0xbb/0x1f0
[  155.993358][ T7044]  ? tomoyo_path_number_perm+0x219/0x5f0
[  155.993381][ T7044]  ? tomoyo_path_number_perm+0x219/0x5f0
[  155.993403][ T7044]  ? do_vfs_ioctl+0x116f/0x1530
[  155.993426][ T7044]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  155.993459][ T7044]  ? hook_file_ioctl+0x1f2/0x600
[  155.993499][ T7044]  ? __fget_files+0x2a/0x420
[  155.993528][ T7044]  ? __fget_files+0x2a/0x420
[  155.993551][ T7044]  ? __fget_files+0x3a2/0x420
[  155.993581][ T7044]  ? __fget_files+0x2a/0x420
[  155.993608][ T7044]  ? bpf_lsm_file_ioctl+0x9/0x20
[  155.993635][ T7044]  ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10
[  155.993664][ T7044]  __se_sys_ioctl+0xfc/0x170
[  155.993687][ T7044]  do_syscall_64+0x166/0x520
[  155.993710][ T7044]  ? trace_irq_disable+0x3b/0x140
[  155.993730][ T7044]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.993747][ T7044]  ? clear_bhb_loop+0x70/0xc0
[  155.993769][ T7044]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.993787][ T7044] RIP: 0033:0x7fb11079e159
[  155.993805][ T7044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  155.993820][ T7044] RSP: 002b:00007fb111660028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  155.993840][ T7044] RAX: ffffffffffffffda RBX: 00007fb110a25fa0 RCX: 00007fb11079e159
[  155.993853][ T7044] RDX: 0000200000000540 RSI: 00000000000007a4 RDI: 0000000000000003
[  155.993865][ T7044] RBP: 00007fb111660090 R08: 0000000000000000 R09: 0000000000000000
[  155.993877][ T7044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  155.993888][ T7044] R13: 00007fb110a26038 R14: 00007fb110a25fa0 R15: 00007fb110b4fa48
[  155.993920][ T7044]  </TASK>
[  155.998527][ T7044] vmap failed
[  155.998539][ T7044] Failed to save queue headers for queue pair (handle=0x1:0x2,result=-3)
[  156.101655][ T5352] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  156.250448][ T5352] usb 3-1: Using ep0 maxpacket: 32
[  156.252285][ T5352] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  156.254630][ T5352] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  156.254656][ T5352] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  156.254679][ T5352] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  156.254698][ T5352] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7
[  156.254731][ T5352] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  156.257891][ T5352] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.257912][ T5352] usb 3-1: Product: syz
[  156.257924][ T5352] usb 3-1: Manufacturer: syz
[  156.257937][ T5352] usb 3-1: SerialNumber: syz
[  156.272748][ T5352] usb 3-1: config 0 descriptor??
[  156.385498][ T7050] netlink: 24 bytes leftover after parsing attributes in process `syz.0.383'.
[  156.940982][  T969] wacom 0003:056A:003F.0008: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0
[  157.218634][ T5352] iforce 3-1:0.0: usb_submit_urb failed: -71
[  157.218697][ T5352] input input19: Device does not respond to id packet M
[  157.221610][ T5352] iforce 3-1:0.0: usb_submit_urb failed: -71
[  157.221655][ T5352] input input19: Device does not respond to id packet P
[  157.222363][ T5352] iforce 3-1:0.0: usb_submit_urb failed: -71
[  157.222405][ T5352] input input19: Device does not respond to id packet B
[  157.224389][ T5352] iforce 3-1:0.0: usb_submit_urb failed: -71
[  157.224441][ T5352] input input19: Device does not respond to id packet N
[  157.224846][ T5352] iforce 3-1:0.0: usb_submit_urb failed: -71
[  157.226911][ T5352] iforce 3-1:0.0: usb_submit_urb failed: -71
[  157.228073][ T7061] fido_id[7061]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  157.228697][ T5352] iforce 3-1:0.0: usb_submit_urb failed: -71
[  157.230635][ T5352] iforce 3-1:0.0: usb_submit_urb failed: -71
[  157.230953][ T5352] iforce 3-1:0.0: usb_submit_urb failed -90
[  157.231127][ T5352] iforce 3-1:0.0: usb_submit_urb failed -90
[  157.241444][ T5352] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input19
[  157.397462][ T5352] usb 3-1: USB disconnect, device number 24
[  158.321421][ T7079] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  159.560649][   T25] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  159.593271][ T7099] Cannot find map_set index 0 as target
[  159.712567][   T25] usb 2-1: Using ep0 maxpacket: 16
[  159.713633][   T25] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22
[  159.735296][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.735320][   T25] usb 2-1: Product: syz
[  159.735333][   T25] usb 2-1: Manufacturer: syz
[  159.735346][   T25] usb 2-1: SerialNumber: syz
[  159.775243][ T7103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.399'.
[  159.857043][ T7108] input input23: cannot allocate more than FF_MAX_EFFECTS effects
[  159.963299][   T25] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state
[  159.995287][   T25] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  159.995490][   T25] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0)
[  159.995515][   T25] usb 2-1: media controller created
[  160.011157][   T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  160.095470][ T7116] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  160.174376][ T7094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.395'.
[  160.230541][   T25] zl10353_read_register: readreg error (reg=127, ret==-110)
[  160.507030][   T25] dvb_usb_gl861 2-1:157.0: probe with driver dvb_usb_gl861 failed with error -5
[  160.513166][   T25] usb 2-1: USB disconnect, device number 14
[  160.670979][  T969] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  160.750846][ T5760] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  160.820281][  T969] usb 3-1: Using ep0 maxpacket: 32
[  160.863179][  T969] usb 3-1: unable to get BOS descriptor or descriptor too short
[  160.863225][  T969] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  160.878117][  T969] usb 3-1: config 1 has an invalid descriptor of length 213, skipping remainder of the config
[  160.878141][  T969] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  160.918377][  T969] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.918403][  T969] usb 3-1: Product: syz
[  160.918415][  T969] usb 3-1: Manufacturer: syz
[  160.918427][  T969] usb 3-1: SerialNumber: syz
[  160.938436][ T5760] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  160.953749][ T5760] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  160.953782][ T5760] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  160.953842][ T5760] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.991559][ T7124] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[  161.009581][ T5760] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  161.223370][ T7116] netlink: 'syz.2.401': attribute type 3 has an invalid length.
[  161.223391][ T7116] netlink: 3 bytes leftover after parsing attributes in process `syz.2.401'.
[  161.446012][ T7124] tcf_pedit_act: 7 callbacks suppressed
[  161.446031][ T7124] tc action pedit offset must be on 32 bit boundaries
[  161.446042][ T7124] tc action pedit offset must be on 32 bit boundaries
[  161.446052][ T7124] tc action pedit offset must be on 32 bit boundaries
[  161.446061][ T7124] tc action pedit offset must be on 32 bit boundaries
[  161.446070][ T7124] tc action pedit offset must be on 32 bit boundaries
[  161.446078][ T7124] tc action pedit offset must be on 32 bit boundaries
[  161.446087][ T7124] tc action pedit offset must be on 32 bit boundaries
[  161.446095][ T7124] tc action pedit offset must be on 32 bit boundaries
[  161.446104][ T7124] tc action pedit offset must be on 32 bit boundaries
[  161.446113][ T7124] tc action pedit offset must be on 32 bit boundaries
[  161.446133][ T7124] 0: reclassify loop, rule prio 0, protocol 800
[  161.531954][ T7132] FAULT_INJECTION: forcing a failure.
[  161.531954][ T7132] name failslab, interval 1, probability 0, space 0, times 0
[  161.531985][ T7132] CPU: 1 UID: 0 PID: 7132 Comm: syz.1.406 Not tainted syzkaller #0 PREEMPT(full) 
[  161.532005][ T7132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  161.532015][ T7132] Call Trace:
[  161.532022][ T7132]  <TASK>
[  161.532030][ T7132]  dump_stack_lvl+0xe8/0x150
[  161.532062][ T7132]  should_fail_ex+0x410/0x560
[  161.532088][ T7132]  should_failslab+0xa8/0x100
[  161.532113][ T7132]  __kmalloc_cache_noprof+0xa3/0x600
[  161.532132][ T7132]  ? __kmalloc_cache_noprof+0x14d/0x600
[  161.532150][ T7132]  ? sctp_add_bind_addr+0x8c/0x370
[  161.532166][ T7132]  ? sctp_add_bind_addr+0x8c/0x370
[  161.532189][ T7132]  sctp_add_bind_addr+0x8c/0x370
[  161.532210][ T7132]  sctp_copy_local_addr_list+0x31a/0x4e0
[  161.532248][ T7132]  ? sctp_copy_local_addr_list+0xa3/0x4e0
[  161.532290][ T7132]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  161.532318][ T7132]  ? sctp_v6_is_any+0x64/0x80
[  161.532339][ T7132]  ? sctp_copy_one_addr+0x93/0x360
[  161.532370][ T7132]  sctp_bind_addr_copy+0xb3/0x3c0
[  161.532398][ T7132]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  161.532426][ T7132]  sctp_connect_new_asoc+0x2ff/0x6b0
[  161.532451][ T7132]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  161.532482][ T7132]  ? __local_bh_enable_ip+0xd6/0x140
[  161.532504][ T7132]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  161.532529][ T7132]  ? security_sctp_bind_connect+0x7e/0x2c0
[  161.532552][ T7132]  sctp_sendmsg+0x159b/0x2d00
[  161.532584][ T7132]  ? kstrtouint+0x6e/0xe0
[  161.532602][ T7132]  ? __pfx_sctp_sendmsg+0x10/0x10
[  161.532621][ T7132]  ? lock_acquire+0x115/0x350
[  161.532641][ T7132]  ? get_pid_task+0x20/0x1f0
[  161.532675][ T7132]  ? aa_sock_msg_perm+0xf5/0x210
[  161.532696][ T7132]  ? sock_rps_record_flow+0x19/0x350
[  161.532717][ T7132]  ? inet_sendmsg+0x298/0x320
[  161.532738][ T7132]  ? __pfx_inet_sendmsg+0x10/0x10
[  161.532754][ T7132]  sock_sendmsg_nosec+0x10e/0x180
[  161.532778][ T7132]  __sys_sendto+0x408/0x5a0
[  161.532799][ T7132]  ? ksys_write+0x1e6/0x270
[  161.532858][ T7132]  ? __pfx___sys_sendto+0x10/0x10
[  161.532881][ T7132]  ? __mutex_unlock_slowpath+0x731/0x900
[  161.532933][ T7132]  ? __pfx_ksys_write+0x10/0x10
[  161.532965][ T7132]  __x64_sys_sendto+0xde/0x100
[  161.532992][ T7132]  do_syscall_64+0x166/0x520
[  161.533013][ T7132]  ? trace_irq_disable+0x3b/0x140
[  161.533030][ T7132]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.533049][ T7132]  ? clear_bhb_loop+0x70/0xc0
[  161.533071][ T7132]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.533089][ T7132] RIP: 0033:0x7fd56619e159
[  161.533106][ T7132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  161.533139][ T7132] RSP: 002b:00007fd566fc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  161.533158][ T7132] RAX: ffffffffffffffda RBX: 00007fd566425fa0 RCX: 00007fd56619e159
[  161.533172][ T7132] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003
[  161.533183][ T7132] RBP: 00007fd566fc6090 R08: 0000200000000080 R09: 000000000000001c
[  161.533195][ T7132] R10: 0000000000000051 R11: 0000000000000246 R12: 0000000000000002
[  161.533206][ T7132] R13: 00007fd566426038 R14: 00007fd566425fa0 R15: 00007fd56654fa48
[  161.533242][ T7132]  </TASK>
[  161.725877][ T5352] usb 5-1: USB disconnect, device number 14
[  162.533268][ T7140] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  162.600921][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.410'.
[  162.850949][ T7143] syz.3.410: vmalloc error: size 16384, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  162.851217][ T7143] CPU: 1 UID: 0 PID: 7143 Comm: syz.3.410 Not tainted syzkaller #0 PREEMPT(full) 
[  162.851235][ T7143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  162.851247][ T7143] Call Trace:
[  162.851255][ T7143]  <TASK>
[  162.851264][ T7143]  dump_stack_lvl+0xe8/0x150
[  162.851297][ T7143]  warn_alloc+0x24d/0x270
[  162.851322][ T7143]  ? __pfx_warn_alloc+0x10/0x10
[  162.851336][ T7143]  ? alloc_pages_mpol+0x256/0x390
[  162.851356][ T7143]  __vmalloc_node_range_noprof+0x11a9/0x1540
[  162.851393][ T7143]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  162.851418][ T7143]  ? rcu_is_watching+0x16/0xb0
[  162.851443][ T7143]  ? rcu_is_watching+0x16/0xb0
[  162.851465][ T7143]  ? nft_array_may_resize+0x354/0x570
[  162.851489][ T7143]  __kvmalloc_node_noprof+0x5a1/0x820
[  162.851511][ T7143]  ? nft_array_may_resize+0x354/0x570
[  162.851535][ T7143]  ? __kmalloc_cache_noprof+0x321/0x600
[  162.851555][ T7143]  ? nft_array_may_resize+0x32d/0x570
[  162.851579][ T7143]  ? nft_array_may_resize+0x354/0x570
[  162.851610][ T7143]  nft_array_may_resize+0x354/0x570
[  162.851646][ T7143]  nft_rbtree_walk+0x96/0x660
[  162.851660][ T7143]  ? nft_pernet+0x23/0x240
[  162.851674][ T7143]  ? nft_pernet+0x23/0x240
[  162.851691][ T7143]  nf_tables_delsetelem+0x181b/0x1fd0
[  162.851723][ T7143]  ? __pfx_nf_tables_delsetelem+0x10/0x10
[  162.851751][ T7143]  ? rcu_is_watching+0x16/0xb0
[  162.851774][ T7143]  ? do_trace_netlink_extack+0x80/0x1d0
[  162.851801][ T7143]  ? __nla_validate_parse+0x2534/0x2d50
[  162.851823][ T7143]  ? reacquire_held_locks+0x117/0x1a0
[  162.851836][ T7143]  ? __pfx___nla_validate_parse+0x10/0x10
[  162.851852][ T7143]  ? nfnetlink_rcv+0x8d1/0x28c0
[  162.851877][ T7143]  ? __pfx_nft_setelem_flush+0x10/0x10
[  162.851910][ T7143]  ? nfnl_pernet+0x23/0x240
[  162.851946][ T7143]  ? __nla_parse+0x40/0x60
[  162.851966][ T7143]  nfnetlink_rcv+0x1288/0x28c0
[  162.851997][ T7143]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  162.852026][ T7143]  ? ref_tracker_free+0x689/0x830
[  162.852071][ T7143]  ? skb_clone+0x246/0x3a0
[  162.852102][ T7143]  ? __netlink_deliver_tap+0x811/0x860
[  162.852129][ T7143]  ? netlink_deliver_tap+0x2e/0x1b0
[  162.852140][ T7143]  ? netlink_deliver_tap+0x2e/0x1b0
[  162.852166][ T7143]  netlink_unicast+0x7bd/0x940
[  162.852195][ T7143]  netlink_sendmsg+0x813/0xb40
[  162.852224][ T7143]  ? __pfx_netlink_sendmsg+0x10/0x10
[  162.852252][ T7143]  ? apparmor_socket_sendmsg+0x98/0x360
[  162.852276][ T7143]  ? __pfx_netlink_sendmsg+0x10/0x10
[  162.852285][ T7143]  sock_sendmsg_nosec+0x13a/0x180
[  162.852298][ T7143]  ____sys_sendmsg+0x54e/0x850
[  162.852314][ T7143]  ? __pfx_____sys_sendmsg+0x10/0x10
[  162.852334][ T7143]  ? import_iovec+0x73/0xa0
[  162.852363][ T7143]  ___sys_sendmsg+0x2a5/0x360
[  162.852388][ T7143]  ? __lock_acquire+0x747/0x2de0
[  162.852412][ T7143]  ? __pfx____sys_sendmsg+0x10/0x10
[  162.852434][ T7143]  ? tomoyo_path_number_perm+0x219/0x5f0
[  162.852460][ T7143]  ? __fget_files+0x2a/0x420
[  162.852473][ T7143]  ? __fget_files+0x3a2/0x420
[  162.852499][ T7143]  __x64_sys_sendmsg+0x1b1/0x290
[  162.852528][ T7143]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  162.852553][ T7143]  ? kfree+0x4d/0x650
[  162.852586][ T7143]  ? __pfx_kcov_ioctl+0x10/0x10
[  162.852612][ T7143]  do_syscall_64+0x166/0x520
[  162.852636][ T7143]  ? trace_irq_disable+0x3b/0x140
[  162.852655][ T7143]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.852675][ T7143]  ? clear_bhb_loop+0x70/0xc0
[  162.852700][ T7143]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.852719][ T7143] RIP: 0033:0x7f311739e159
[  162.852735][ T7143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  162.852743][ T7143] RSP: 002b:00007f31181d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  162.852754][ T7143] RAX: ffffffffffffffda RBX: 00007f3117626090 RCX: 00007f311739e159
[  162.852762][ T7143] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003
[  162.852768][ T7143] RBP: 00007f311743506b R08: 0000000000000000 R09: 0000000000000000
[  162.852774][ T7143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  162.852780][ T7143] R13: 00007f3117626128 R14: 00007f3117626090 R15: 00007f311774fa48
[  162.852810][ T7143]  </TASK>
[  162.857918][ T7143] Mem-Info:
[  162.857933][ T7143] active_anon:8410 inactive_anon:1 isolated_anon:0
[  162.857933][ T7143]  active_file:0 inactive_file:20430 isolated_file:0
[  162.857933][ T7143]  unevictable:0 dirty:429 writeback:0
[  162.857933][ T7143]  slab_reclaimable:12169 slab_unreclaimable:95627
[  162.857933][ T7143]  mapped:33905 shmem:520 pagetables:1380
[  162.857933][ T7143]  sec_pagetables:2 bounce:0
[  162.857933][ T7143]  kernel_misc_reclaimable:0
[  162.857933][ T7143]  free:1339745 free_pcp:13534 free_cma:0
[  162.858341][ T7143] Node 0 active_anon:33640kB inactive_anon:4kB active_file:0kB inactive_file:81584kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:135620kB dirty:1712kB writeback:0kB shmem:2080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:6144kB kernel_stack:12580kB pagetables:5384kB sec_pagetables:8kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  162.858402][ T7143] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  162.858470][ T7143] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  162.858527][ T7143] lowmem_reserve[]: 0 2487 2487 2487 2487
[  162.858553][ T7143] Node 0 DMA32 free:1408196kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:33640kB inactive_anon:4kB active_file:0kB inactive_file:81584kB unevictable:0kB writepending:1712kB zspages:20kB present:3129332kB managed:2546896kB mlocked:0kB bounce:0kB free_pcp:54136kB local_pcp:24424kB free_cma:0kB
[  162.858584][ T7143] lowmem_reserve[]: 0 0 0 0 0
[  162.858608][ T7143] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  162.858658][ T7143] lowmem_reserve[]: 0 0 0 0 0
[  162.858692][ T7143] Node 1 Normal free:3935424kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  162.858721][ T7143] lowmem_reserve[]: 0 0 0 0 0
[  162.858738][ T7143] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  162.858870][ T7143] Node 0 DMA32: 1037*4kB (UME) 903*8kB (UM) 481*16kB (UM) 447*32kB (UME) 272*64kB (UM) 117*128kB (UM) 62*256kB (UME) 33*512kB (UM) 13*1024kB (ME) 9*2048kB (UME) 312*4096kB (UM) = 1408220kB
[  162.888060][ T7143] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  162.888152][ T7143] Node 1 Normal: 8*4kB (UM) 10*8kB (UM) 9*16kB (UM) 12*32kB (UM) 7*64kB (UM) 5*128kB (UM) 4*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 4*2048kB (UM) 957*4096kB (M) = 3935424kB
[  162.888294][ T7143] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  162.888308][ T7143] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[  162.888337][ T7143] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  162.888352][ T7143] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  162.888367][ T7143] 20947 total pagecache pages
[  162.888378][ T7143] 1 pages in swap cache
[  162.888384][ T7143] Free swap  = 124988kB
[  162.888392][ T7143] Total swap = 124996kB
[  162.888400][ T7143] 2097051 pages RAM
[  162.888406][ T7143] 0 pages HighMem/MovableOnly
[  162.888412][ T7143] 428711 pages reserved
[  162.888419][ T7143] 0 pages cma reserved
[  162.958822][   T30] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  163.127096][   T30] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  163.129626][   T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.199819][   T30] usb 5-1: config 0 descriptor??
[  163.452308][   T30] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  163.671993][ T7143] syz.3.410 (7143) used greatest stack depth: 17280 bytes left
[  164.021513][  T969] usb 3-1: USB disconnect, device number 25
[  164.218111][ T7158] syzkaller0: entered promiscuous mode
[  164.218127][ T7158] syzkaller0: entered allmulticast mode
[  164.275166][ T7158] tipc: Started in network mode
[  164.275186][ T7158] tipc: Node identity 8e6dbcfa4b38, cluster identity 4711
[  164.302886][ T7158] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  164.318888][ T7156] tipc: Resetting bearer <eth:syzkaller0>
[  164.444875][ T7156] tipc: Disabling bearer <eth:syzkaller0>
[  164.545299][ T7168] openvswitch: netlink: Duplicate or invalid key (type 0).
[  164.545340][ T7168] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  164.585554][ T7168] netlink: 76 bytes leftover after parsing attributes in process `syz.0.419'.
[  165.020538][ T7174] tipc: New replicast peer: 255.255.255.255
[  165.049663][ T7174] tipc: Enabled bearer <udp:syz2>, priority 10
[  165.244578][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.424'.
[  165.654493][   T30] [drm:udl_init] *ERROR* Selecting channel failed
[  165.762781][   T30] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 1
[  165.762805][   T30] [drm] Initialized udl on minor 1
[  165.775098][   T30] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  165.775514][   T30] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  165.807878][   T30] usb 5-1: USB disconnect, device number 15
[  165.825548][ T5352] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  165.864227][ T5352] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  166.011819][ T7203] mmap: syz.0.430 (7203) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  166.210822][   T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  166.329472][ T7226] netlink: 'syz.3.439': attribute type 1 has an invalid length.
[  166.371179][   T10] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00
[  166.372316][   T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  166.372361][   T10] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  166.374263][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.374285][   T10] usb 3-1: Product: syz
[  166.374361][   T10] usb 3-1: Manufacturer: syz
[  166.374377][   T10] usb 3-1: SerialNumber: syz
[  166.475815][ T7226] 8021q: adding VLAN 0 to HW filter on device bond1
[  166.650694][   T10] usb 3-1: USB disconnect, device number 26
[  166.974832][   T30] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  167.122455][   T30] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  167.122935][   T30] usb 4-1: config 0 has no interfaces?
[  167.123813][   T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  167.123827][   T30] usb 4-1: SerialNumber: syz
[  167.131795][   T30] usb 4-1: config 0 descriptor??
[  167.340311][   T30] usb 4-1: USB disconnect, device number 22
[  167.450339][  T969] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  167.621230][  T969] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  167.622515][  T969] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  167.622546][  T969] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  167.622583][  T969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.640108][ T7234] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  167.679460][  T969] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  167.834600][ T7245] netlink: 40 bytes leftover after parsing attributes in process `syz.2.446'.
[  168.240491][   T10] usb 2-1: USB disconnect, device number 15
[  168.287162][ T7253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.449'.
[  168.614467][ T7261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.452'.
[  169.092835][ T7273] netlink: 104 bytes leftover after parsing attributes in process `syz.1.457'.
[  169.120558][  T969] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  169.138510][ T7271] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  169.235359][ T7275] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  169.272527][  T969] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  169.273655][  T969] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  169.273685][  T969] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  169.273720][  T969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.278359][ T7265] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  169.319813][  T969] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  169.429437][ T7281] netlink: 104 bytes leftover after parsing attributes in process `syz.1.459'.
[  169.601513][ T5352] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  170.321358][ T5352] usb 4-1: Using ep0 maxpacket: 32
[  170.640995][ T5352] usb 4-1: unable to get BOS descriptor or descriptor too short
[  170.641048][ T5352] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  170.896542][    T0] NOHZ tick-stop error: local softirq work is pending, handler #38a!!!
[  171.738568][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[  171.753246][    T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!!
[  171.871911][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[  172.025957][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[  172.191615][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[  172.225379][    T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!!
[  172.242432][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[  172.258967][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[  175.924252][ T5352] usb 4-1: unable to read config index 0 descriptor/start: -110
[  175.924293][ T5352] usb 4-1: can't read configurations, error -110
[  176.120230][    C0] sched: DL replenish lagged too much
[  177.087443][ T5352] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  177.676483][ T5352] usb 4-1: device descriptor read/64, error -32
[  177.834410][ T5352] usb usb4-port1: attempt power cycle
[  179.241632][ T5352] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  180.652556][ T5352] usb 4-1: device descriptor read/8, error -32
[  183.757825][ T5352] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  184.209443][ T5352] usb 4-1: device descriptor read/8, error -32
[  184.375454][ T5352] usb usb4-port1: unable to enumerate USB device
[  195.977964][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  195.994473][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  213.471735][ T5709] usb 5-1: USB disconnect, device number 16
[  256.140653][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  256.156337][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  317.750039][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  317.762535][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  432.875582][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  432.889052][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  440.431422][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  440.583992][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[  444.850100][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  444.857079][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P5631/1:b..l
[  444.865004][    C0] rcu: 	(detected by 0, t=10503 jiffies, g=31057, q=1146011 ncpus=2)
[  444.873092][    C0] task:syz-executor    state:R  running task     stack:22208 pid:5631  tgid:5631  ppid:1      task_flags:0x40054c flags:0x00080003
[  444.886613][    C0] Call Trace:
[  444.889908][    C0]  <TASK>
[  444.892848][    C0]  __schedule+0x17db/0x58f0
[  444.897392][    C0]  ? __lock_acquire+0x747/0x2de0
[  444.902344][    C0]  ? __lock_acquire+0x747/0x2de0
[  444.907297][    C0]  ? __pfx___schedule+0x10/0x10
[  444.912167][    C0]  ? __lock_acquire+0x747/0x2de0
[  444.917133][    C0]  preempt_schedule_irq+0x4b/0x90
[  444.922179][    C0]  irqentry_exit+0x14f/0x910
[  444.926791][    C0]  ? trace_irq_disable+0x3b/0x140
[  444.931850][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  444.937856][    C0] RIP: 0010:__rcu_read_unlock+0x32/0xe0
[  444.943429][    C0] Code: 41 55 41 54 53 49 bf 00 00 00 00 00 fc ff df 65 48 8b 3d d9 40 e8 11 48 8d 9f c4 04 00 00 49 89 dc 49 c1 ec 03 43 0f b6 04 3c <84> c0 75 4f ff 0b 75 1d 4c 8d b7 c8 04 00 00 4c 89 f0 48 c1 e8 03
[  444.963050][    C0] RSP: 0018:ffffc9000436f478 EFLAGS: 00000a03
[  444.969165][    C0] RAX: 0000000000000000 RBX: ffff88807f4084c4 RCX: 0000000000000046
[  444.977147][    C0] RDX: ffffc9000436f501 RSI: ffffffff8e69f0c4 RDI: ffff88807f408000
[  444.985133][    C0] RBP: 1ffffffff2222801 R08: ffffc9000436f630 R09: 0000000000000000
[  444.993559][    C0] R10: ffffc9000436f5f8 R11: fffff5200086dec1 R12: 1ffff1100fe81098
[  445.001541][    C0] R13: ffffffff8177f1df R14: ffffc9000436f5a8 R15: dffffc0000000000
[  445.009533][    C0]  ? unwind_next_frame+0x8f/0x2550
[  445.014691][    C0]  ? unwind_next_frame+0x8f/0x2550
[  445.019825][    C0]  unwind_next_frame+0x1baf/0x2550
[  445.024963][    C0]  ? arch_stack_walk+0xe3/0x150
[  445.029833][    C0]  ? unwind_next_frame+0x8f/0x2550
[  445.035029][    C0]  __unwind_start+0x514/0x660
[  445.039729][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  445.045906][    C0]  arch_stack_walk+0xe3/0x150
[  445.050699][    C0]  ? stack_trace_save+0xa9/0x100
[  445.055652][    C0]  stack_trace_save+0xa9/0x100
[  445.060423][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  445.065808][    C0]  ? stack_depot_save_flags+0x33/0x7f0
[  445.071292][    C0]  save_stack+0x122/0x230
[  445.075644][    C0]  ? __pfx_save_stack+0x10/0x10
[  445.080522][    C0]  ? page_ext_put+0x97/0xc0
[  445.085042][    C0]  __reset_page_owner+0x71/0x1f0
[  445.090086][    C0]  free_pages_prepare+0x9eb/0xaf0
[  445.095136][    C0]  __free_contig_range_common+0x174/0x340
[  445.100888][    C0]  free_pages_bulk+0x48/0x120
[  445.105667][    C0]  vfree+0x231/0x490
[  445.109589][    C0]  ? __pfx_kcov_close+0x10/0x10
[  445.114450][    C0]  kcov_close+0x28/0x50
[  445.118617][    C0]  __fput+0x418/0xa50
[  445.122628][    C0]  task_work_run+0x1d9/0x270
[  445.127249][    C0]  ? __pfx_task_work_run+0x10/0x10
[  445.132376][    C0]  ? do_exit+0x735/0x2360
[  445.136714][    C0]  ? kmem_cache_free+0x182/0x650
[  445.141668][    C0]  ? put_net+0x191/0x260
[  445.145930][    C0]  do_exit+0x73a/0x2360
[  445.150112][    C0]  ? __pfx_do_exit+0x10/0x10
[  445.154718][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  445.159774][    C0]  do_group_exit+0x22d/0x2f0
[  445.164383][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  445.169603][    C0]  get_signal+0x121b/0x12c0
[  445.174144][    C0]  arch_do_signal_or_restart+0xbb/0x860
[  445.179711][    C0]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  445.184940][    C0]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  445.191127][    C0]  ? __se_sys_clock_nanosleep+0x35b/0x3b0
[  445.196875][    C0]  exit_to_user_mode_loop+0x10e/0x770
[  445.202258][    C0]  ? rcu_is_watching+0x16/0xb0
[  445.207039][    C0]  do_syscall_64+0x328/0x520
[  445.211648][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  445.217725][    C0]  ? clear_bhb_loop+0x70/0xc0
[  445.222415][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  445.228313][    C0] RIP: 0033:0x7fb11075e98e
[  445.232734][    C0] RSP: 002b:00007fb110b4fd28 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6
[  445.241154][    C0] RAX: 0000000000000000 RBX: 0000555579ee9500 RCX: 00007fb11075e98e
[  445.249134][    C0] RDX: 00007fb110b4fd80 RSI: 0000000000000000 RDI: 0000000000000000
[  445.257115][    C0] RBP: 00007fb110b4fdec R08: 0000000000000000 R09: 0000000000000000
[  445.265093][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000057
[  445.273070][    C0] R13: 0000000000000038 R14: 0000000000029807 R15: 00007fb110b4fe40
[  445.281068][    C0]  </TASK>
[  445.284092][    C0] rcu: rcu_preempt kthread starved for 414 jiffies! g31057 f0x2 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1
[  445.295028][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  445.305002][    C0] rcu: RCU grace-period kthread stack dump:
[  445.310912][    C0] task:rcu_preempt     state:R  running task     stack:27496 pid:17    tgid:17    ppid:2      task_flags:0x208040 flags:0x00080000
[  445.324418][    C0] Call Trace:
[  445.327696][    C0]  <TASK>
[  445.330632][    C0]  __schedule+0x17db/0x58f0
[  445.335173][    C0]  ? __pfx___schedule+0x10/0x10
[  445.340031][    C0]  ? lock_acquire+0x115/0x350
[  445.344724][    C0]  ? schedule+0x90/0x2b0
[  445.348983][    C0]  schedule+0x164/0x2b0
[  445.353151][    C0]  schedule_timeout+0x152/0x2c0
[  445.358007][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[  445.363386][    C0]  ? __pfx_process_timeout+0x10/0x10
[  445.368696][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  445.374515][    C0]  ? prepare_to_swait_event+0x322/0x350
[  445.380083][    C0]  rcu_gp_fqs_loop+0x30c/0x11f0
[  445.384957][    C0]  ? __pfx_rcu_watching_snap_recheck+0x10/0x10
[  445.391122][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  445.396413][    C0]  ? _raw_spin_unlock_irq+0x2e/0x50
[  445.401724][    C0]  rcu_gp_kthread+0x9e/0x2b0
[  445.406328][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  445.411537][    C0]  ? __kthread_parkme+0x71/0x1f0
[  445.416495][    C0]  ? __kthread_parkme+0x199/0x1f0
[  445.421539][    C0]  kthread+0x38b/0x480
[  445.425617][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  445.430823][    C0]  ? __pfx_kthread+0x10/0x10
[  445.435443][    C0]  ret_from_fork+0x514/0xb70
[  445.440038][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  445.445149][    C0]  ? __switch_to+0xc89/0x1420
[  445.449840][    C0]  ? __pfx_kthread+0x10/0x10
[  445.454439][    C0]  ret_from_fork_asm+0x1a/0x30
[  445.459236][    C0]  </TASK>
[  445.462254][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  445.468588][    C0] Sending NMI from CPU 0 to CPUs 1:
[  445.473861][    C1] NMI backtrace for cpu 1
[  445.473883][    C1] CPU: 1 UID: 0 PID: 420 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) 
[  445.473905][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  445.473917][    C1] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker
[  445.473946][    C1] RIP: 0010:__this_cpu_preempt_check+0x0/0x20
[  445.473976][    C1] Code: f5 48 8b 74 24 20 48 c7 c7 00 ad 6d 8c e8 58 2c 41 f5 e8 f3 2a 4c f5 eb ae 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <f3> 0f 1e fa 48 89 fe 48 c7 c7 80 ac 6d 8c e9 0d ff ff ff cc cc cc
[  445.473993][    C1] RSP: 0018:ffffc90000a17d80 EFLAGS: 00000086
[  445.474009][    C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000000
[  445.474021][    C1] RDX: 00000000071bee9f RSI: 00000000db147cf1 RDI: ffffffff8e69f0c4
[  445.474034][    C1] RBP: ffff8880227dddc0 R08: ffffffff8177f1df R09: 0000000000000000
[  445.474048][    C1] R10: ffffc90000a17f18 R11: ffffffff81b293f0 R12: ffffffff8ed5c920
[  445.474062][    C1] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246
[  445.474074][    C1] FS:  0000000000000000(0000) GS:ffff888124dca000(0000) knlGS:0000000000000000
[  445.474090][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  445.474103][    C1] CR2: 00002000001ff030 CR3: 000000004b234000 CR4: 00000000003526f0
[  445.474120][    C1] Call Trace:
[  445.474126][    C1]  <IRQ>
[  445.474133][    C1]  lock_acquire+0x125/0x350
[  445.474156][    C1]  ? unwind_next_frame+0x8f/0x2550
[  445.474178][    C1]  ? nft_synproxy_eval_v4+0x362/0x4e0
[  445.474203][    C1]  ? unwind_next_frame+0x8f/0x2550
[  445.474225][    C1]  unwind_next_frame+0xac/0x2550
[  445.474245][    C1]  ? unwind_next_frame+0x8f/0x2550
[  445.474268][    C1]  ? synproxy_send_client_synack+0x175/0xde0
[  445.474298][    C1]  ? unwind_next_frame+0x8f/0x2550
[  445.474320][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  445.474339][    C1]  arch_stack_walk+0x11b/0x150
[  445.474361][    C1]  ? nft_synproxy_eval_v4+0x362/0x4e0
[  445.474388][    C1]  stack_trace_save+0xa9/0x100
[  445.474405][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  445.474422][    C1]  ? unwind_next_frame+0x1baf/0x2550
[  445.474447][    C1]  kasan_save_track+0x3e/0x80
[  445.474467][    C1]  ? kasan_save_track+0x3e/0x80
[  445.474485][    C1]  ? __kasan_slab_alloc+0x6c/0x80
[  445.474505][    C1]  ? kmem_cache_alloc_node_noprof+0x354/0x610
[  445.474535][    C1]  ? __alloc_skb+0x1db/0x7a0
[  445.474557][    C1]  ? synproxy_send_client_synack+0x175/0xde0
[  445.474579][    C1]  ? nft_synproxy_eval_v4+0x362/0x4e0
[  445.474623][    C1]  __kasan_slab_alloc+0x6c/0x80
[  445.474645][    C1]  kmem_cache_alloc_node_noprof+0x354/0x610
[  445.474675][    C1]  ? kmem_cache_alloc_node_noprof+0x1f9/0x610
[  445.474703][    C1]  ? __alloc_skb+0x1db/0x7a0
[  445.474724][    C1]  ? __alloc_skb+0x1db/0x7a0
[  445.474749][    C1]  __alloc_skb+0x1db/0x7a0
[  445.474773][    C1]  synproxy_send_client_synack+0x175/0xde0
[  445.474797][    C1]  ? lock_acquire+0x115/0x350
[  445.474815][    C1]  ? synproxy_pernet+0x45/0x270
[  445.474841][    C1]  ? __pfx_synproxy_send_client_synack+0x10/0x10
[  445.474864][    C1]  ? nft_socket_cgroup_subtree_level+0x154/0x340
[  445.474888][    C1]  ? synproxy_pernet+0x45/0x270
[  445.474915][    C1]  nft_synproxy_eval_v4+0x362/0x4e0
[  445.474942][    C1]  ? __pfx_nft_synproxy_eval_v4+0x10/0x10
[  445.474968][    C1]  ? nf_ip_checksum+0x13c/0x510
[  445.474995][    C1]  nft_synproxy_do_eval+0x389/0x5d0
[  445.475022][    C1]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[  445.475049][    C1]  ? chacha_permute+0x4ce/0xf00
[  445.475081][    C1]  nft_do_chain+0x48d/0x1b10
[  445.475112][    C1]  ? __pfx_nft_do_chain+0x10/0x10
[  445.475140][    C1]  ? __local_bh_enable_ip+0xd6/0x140
[  445.475165][    C1]  ? lockdep_hardirqs_on+0x7b/0x110
[  445.475200][    C1]  nft_do_chain_ipv4+0x195/0x290
[  445.475224][    C1]  ? ipt_do_table+0x2b9/0x15d0
[  445.475248][    C1]  ? __pfx_nft_do_chain_ipv4+0x10/0x10
[  445.475274][    C1]  ? iptable_mangle_hook+0x18a/0x4c0
[  445.475306][    C1]  ? __pfx_nft_do_chain_ipv4+0x10/0x10
[  445.475331][    C1]  nf_hook_slow+0xc5/0x220
[  445.475353][    C1]  NF_HOOK+0x21f/0x3c0
[  445.475379][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  445.475404][    C1]  ? NF_HOOK+0x9e/0x3c0
[  445.475427][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  445.475452][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  445.475480][    C1]  ? ip_local_deliver+0x113/0x190
[  445.475506][    C1]  NF_HOOK+0x336/0x3c0
[  445.475530][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  445.475555][    C1]  ? NF_HOOK+0x9e/0x3c0
[  445.475578][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  445.475603][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  445.475627][    C1]  ? ip_rcv_core+0x88d/0xd50
[  445.475653][    C1]  ? __pfx_ip_rcv+0x10/0x10
[  445.475676][    C1]  ? __pfx_ip_rcv+0x10/0x10
[  445.475700][    C1]  process_backlog+0xa6b/0x18b0
[  445.475724][    C1]  ? process_backlog+0x3de/0x18b0
[  445.475752][    C1]  __napi_poll+0xaa/0x330
[  445.475773][    C1]  net_rx_action+0x61d/0xf50
[  445.475799][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  445.475832][    C1]  handle_softirqs+0x226/0x860
[  445.475858][    C1]  ? do_softirq+0x77/0xd0
[  445.475883][    C1]  ? kernel_fpu_end+0x62/0x80
[  445.475905][    C1]  do_softirq+0x77/0xd0
[  445.475928][    C1]  </IRQ>
[  445.475935][    C1]  <TASK>
[  445.475941][    C1]  __local_bh_enable_ip+0x100/0x140
[  445.475966][    C1]  blake2s_compress+0xfa/0x1c00
[  445.475993][    C1]  ? enqueue_to_backlog+0x6ab/0xef0
[  445.476019][    C1]  ? __asan_memset+0x22/0x50
[  445.476037][    C1]  ? kernel_fpu_begin_mask+0x2bb/0x380
[  445.476061][    C1]  ? __pfx_blake2s_compress+0x10/0x10
[  445.476089][    C1]  ? kernel_fpu_end+0x62/0x80
[  445.476112][    C1]  ? __local_bh_enable_ip+0xd6/0x140
[  445.476137][    C1]  ? lockdep_hardirqs_on+0x7b/0x110
[  445.476159][    C1]  ? kernel_fpu_end+0x62/0x80
[  445.476181][    C1]  ? __local_bh_enable_ip+0xd6/0x140
[  445.476205][    C1]  ? blake2s_compress+0x1b4d/0x1c00
[  445.476236][    C1]  blake2s_final+0x10f/0x270
[  445.476265][    C1]  hmac+0x2dc/0x3b0
[  445.476299][    C1]  ? __pfx_hmac+0x10/0x10
[  445.476330][    C1]  ? curve25519_generate_public+0x2fed/0x3050
[  445.476357][    C1]  ? __asan_memset+0x22/0x50
[  445.476375][    C1]  message_ephemeral+0x255/0x310
[  445.476405][    C1]  ? __pfx_message_ephemeral+0x10/0x10
[  445.476446][    C1]  ? down_read+0x2be/0x330
[  445.476473][    C1]  wg_noise_handshake_create_initiation+0x24f/0x810
[  445.476505][    C1]  ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10
[  445.476537][    C1]  ? __lock_acquire+0x747/0x2de0
[  445.476558][    C1]  ? ret_from_fork+0x514/0xb70
[  445.476577][    C1]  ? __lock_acquire+0x747/0x2de0
[  445.476597][    C1]  ? lock_acquire+0x115/0x350
[  445.476617][    C1]  ? ktime_get_coarse_with_offset+0x8a/0x150
[  445.476640][    C1]  ? lockdep_hardirqs_on+0x7b/0x110
[  445.476663][    C1]  ? ktime_get_coarse_with_offset+0x8a/0x150
[  445.476684][    C1]  ? ktime_get_coarse_with_offset+0x102/0x150
[  445.476704][    C1]  wg_packet_handshake_send_worker+0x18c/0x370
[  445.476728][    C1]  ? __pfx_wg_packet_handshake_send_worker+0x10/0x10
[  445.476750][    C1]  ? do_raw_spin_lock+0x12b/0x2f0
[  445.476783][    C1]  ? rcu_is_watching+0x16/0xb0
[  445.476806][    C1]  ? process_scheduled_works+0x97a/0x1630
[  445.476831][    C1]  process_scheduled_works+0xc3d/0x1630
[  445.476855][    C1]  ? __lock_acquire+0x747/0x2de0
[  445.476885][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  445.476912][    C1]  ? assign_work+0x3cf/0x5d0
[  445.476937][    C1]  worker_thread+0xa47/0xfb0
[  445.476974][    C1]  kthread+0x38b/0x480
[  445.476992][    C1]  ? __pfx_worker_thread+0x10/0x10
[  445.477016][    C1]  ? __pfx_kthread+0x10/0x10
[  445.477033][    C1]  ret_from_fork+0x514/0xb70
[  445.477051][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  445.477068][    C1]  ? __switch_to+0xc89/0x1420
[  445.477094][    C1]  ? __pfx_kthread+0x10/0x10
[  445.477112][    C1]  ret_from_fork_asm+0x1a/0x30
[  445.477147][    C1]  </TASK>