last executing test programs:

10.979600136s ago: executing program 0 (id=2481):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0xfffffffffffffc5f, &(0x7f0000000080)=ANY=[@ANYBLOB="c42d57fb8acedba2be98adef81eb3454f3ebbfa5f4d5e642a9fcac2c4b6c82f16fcd9dc0ede3892c9b54d0fac3f2b42b8c88c1302ac326e91f46dabf16025836e7f87fb9d3ec805113493bac17d5d33c64"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x40, 0xd, 0x4, "fef890a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

6.838023933s ago: executing program 0 (id=2494):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="04"], 0xd)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={0xa, 0x0, 0x3d, 0x10000, 'syz1\x00', 0x5})
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x10, 0x9]}})
syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa"], 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000"], 0x40}}, 0x0)
r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16a", 0x5, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2c0c0}, 0x8804)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r8 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r10 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r9, &(0x7f0000000880)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xff8, 0x2c, 0x0, @local, @mcast2, {[@dstopts={0x4, 0xb, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0xc, 0x8, [0x2, 0x7fff, 0x4, 0x7f]}}, @hao={0xc9, 0x10, @local}, @calipso={0x7, 0x18, {0x0, 0x4, 0xc5, 0x9, [0x0, 0x2]}}, @ra={0x5, 0x2, 0xff}, @ra={0x5, 0x2, 0x9}]}], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0xf, 0x6, '*zc', 0x3ff, 0x6c, 0x1, @loopback, @loopback, [@routing={0x2f, 0x10, 0x0, 0x6, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private2, @empty, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @mcast2]}, @hopopts={0xff, 0x1d8, '\x00', [@generic={0xb7, 0xebf, "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"}]}], "a90924172f9c2a1d"}}}}}}, 0x102e)

5.811433784s ago: executing program 1 (id=2497):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0xd)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0xffffffffffffffff}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x2e, 0x0, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

5.536154005s ago: executing program 0 (id=2499):
r0 = socket$unix(0x1, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000000000000000000001500f7ffffff00019500800000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bind$unix(r0, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x5f}, @initr0, @exit]}, &(0x7f0000000000)='syzkaller\x00'}, 0x80)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e9780000000000dbdf250a0000000000000008000500", @ANYRES32], 0x20}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@getnexthop={0x18, 0x76, 0xb0d, 0x4000, 0x0, {0x3}}, 0x18}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000076000d0b"], 0x18}}, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ptrace$setsig(0x4203, 0x0, 0x72d8, &(0x7f0000000000)={0x15, 0x0, 0x899d})
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000200)={0xc, r3})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r2, 0x3b70, &(0x7f0000000000)={0x48})
bind$unix(r0, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e)

5.535635117s ago: executing program 1 (id=2500):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000300)={@ptr={0x73622a85, 0x0, 0x0, 0x458, 0x0, 0x21}, @flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0})

5.378542556s ago: executing program 1 (id=2501):
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000540)=[@code={0x1, 0x4d, {"0f01ca2e646740c159368266bad00426470f001464ee66baa100ed640f017c9993660f38816da4470f019d0d000000f3430fc776100f01c336260f37"}}], 0x4d})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
prctl$PR_SCHED_CORE(0x26, 0x4, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201050037057b082d0800014b702c02030109021200070100a0000904"], 0x0)
syz_usb_control_io$hid(r2, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000700)={0x20, 0x6, 0x6, "1ea701533dab"}, 0x0, 0x0, 0x0, 0x0})
socket$kcm(0x10, 0x2, 0x0) (async)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdfb8951f215ce3bbce81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92782f9ffcdb020e6f3baf26d57a000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) (async)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000500a8000600200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdfb8951f215ce3bbce81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92782f9ffcdb020e6f3baf26d57a000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0)
syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000000bc0)={0x1c, &(0x7f0000000180)={0x20, 0xf}, 0x0, 0x0})
syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0) (async)
r4 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x0)
ioctl$SG_IO(r4, 0x2285, &(0x7f0000000180)={0x53, 0xffffffffffffffff, 0x6, 0x10, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000540)="be0600000000", 0x0, 0x3, 0x11, 0x801, 0x0})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') (async)
r6 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r7 = eventfd2(0x10001, 0x801)
ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000280)={0x4, r7}) (async)
ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000280)={0x4, r7})
openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) (async)
r8 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff)
close(r8)
execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x100) (async)
execveat$binfmt(0xffffffffffffff9c, r6, 0x0, 0x0, 0x100)
r9 = openat$binfmt(0xffffffffffffff9c, r6, 0x2, 0x0)
close(r9)
execve(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)={[&(0x7f0000000080)='\\3\x06\xc7F\xb2?=']}, 0x0) (async)
execve(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180)={[&(0x7f0000000080)='\\3\x06\xc7F\xb2?=']}, 0x0)
execve(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @pic={0x3, 0xff, 0x3, 0x0, 0x6, 0x1, 0x8, 0x5, 0x0, 0x1, 0xc, 0x2, 0xff, 0xc, 0x4, 0x10}})
writev(0xffffffffffffffff, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75", 0xc}], 0x1)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x20106c, 0x8, 0x8000000000000, 0x80000004000080, 0x7, 0x8, 0x0, 0x8, 0x0, 0x8001], 0xdddd0000, 0x3c4210})

5.35325323s ago: executing program 0 (id=2502):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x24088000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x8001ffe4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}})

4.984126785s ago: executing program 0 (id=2503):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="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", 0x2c6}], 0x1}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
syz_open_procfs(0x0, &(0x7f0000000300)='attr\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=<r6=>r5, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
move_mount(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$fuseblk(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a4031, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'xfrm0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20)
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, &(0x7f0000000140)={0x7, 0x7, 0x1}, &(0x7f0000000280)=0x28)
socket$packet(0x11, 0x2, 0x300)
r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYRES64=r6], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r9, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000980)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00')
preadv(r10, &(0x7f0000000440)=[{&(0x7f0000000300)=""/147, 0x93}], 0x1, 0x7, 0x10000)
syz_usb_control_io$uac1(r9, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r9, &(0x7f0000000780)={0x14, &(0x7f00000006c0)={0x0, 0xb, 0x43, {0x43, 0xe, "1a4a51b3c024ecfbf9da60727864da0baf5f13f86d88611dc63dc98eb979259a8658eb5d22ff3375df0d0d71e63e3063dfcbaf1498bc05dab5cb483ca282ebd405"}}, &(0x7f0000000740)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000940)={0x1c, &(0x7f00000007c0)={0x20, 0xb, 0xd5, "aaa51f4d17fa64938ba84d56f4f6d6e984e296eda83449f5042c57c966c54a9436a729cf270d5a56d888d495e3dc85b3c58014581c26b4c7bd5a88b9446a4d1963121e7650610f8bf4f9d948323abcb31b145db96766abad5d16b944fae406289517cb7117ce395059c4b668cc6a287ed241b3777613ca8a80e46ba2d49707c177403744ce5a275f02807c140a5e3eb10565a4feeaf0a40e50fadd5b34080ad9de7b0a88019aa4b12a79788ebc159841d93f0d57d611acfa7596a19efbe2d8294e2afb8cc304425adc2186689eeb97ffbe9fdd58a1"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0xb3}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x5}})
mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000080)=0x3fd, 0x4a1, 0x2)
syz_usb_control_io(r9, 0x0, &(0x7f00000023c0)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

4.642342902s ago: executing program 4 (id=2506):
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3)
r0 = socket$kcm(0x10, 0x2, 0x10)
socket$xdp(0x2c, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0)
ioctl$HIDIOCSFEATURE(r1, 0xc0404806, &(0x7f00000006c0)="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")
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'})
openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x20a02, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
file_setattr(r4, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x100)
r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x1000, 0x2, 0x158, 0x0, r1}, &(0x7f0000000100)=<r6=>0x0, &(0x7f0000000280)=<r7=>0x0, &(0x7f0000000040)=<r8=>0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
syz_ublk_add_dev(r5, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=<r9=>0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = dup(r10)
syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x2c3}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7d09, 0x2000, 0x2100, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x4000, 0x1, 0x11d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2a75, 0x100, 0x3, 0xd3, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a8c, 0x8200, 0x2, 0x2b4, 0x0, r11}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0xfffffffffffffdef, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x490)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
socket$inet_sctp(0x2, 0x1, 0x84)
unshare(0x22020400)

3.675969524s ago: executing program 4 (id=2512):
pipe2(&(0x7f0000000040), 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x4, 0x0, 0x2, 0x7fff7ffc}]})
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
dup2(r0, r1)
syz_usb_connect$uac2(0x0, 0x98, &(0x7f0000000240)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x200c, 0x1018, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x3, 0x1, 0x80, 0x0, 0xe, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa, 0x20, 0x79}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0x3, 0x26, 0x85}, [@processing_unit={0x11, 0x24, 0x8, 0x6, 0x5, [0x0, 0x0, 0x2, 0x2, 0xfffffffffffffffe, 0x3]}, @output_terminal={0xc, 0x24, 0x3, 0xfd, 0x101, 0x3c, 0x3, 0x6, 0xfff9, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x4, 0x0, {0x8, 0x25, 0x1, 0x81, 0x9, 0x9, 0xab08}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x4, 0x2, {0x8, 0x25, 0x1, 0x83, 0x3c, 0xa, 0x2}}}}}}}}]}}, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c)
sendto$inet6(r1, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e24, 0x9, @remote, 0xa}, 0x1c)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x401}, 0x8)

3.272293151s ago: executing program 1 (id=2513):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfb, {{@in6=@private0, @in=@loopback, 0x0, 0x4, 0x1, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x4, 0x0, 0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x1, 0x2}}, 0xb8}}, 0x50)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000001"], 0xb8}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x26)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
syz_usb_connect(0x5, 0x78, &(0x7f00000009c0)={{0x12, 0x1, 0x201, 0x5c, 0xa8, 0x8e, 0x20, 0xbb4, 0xa97, 0xb27b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x1, 0xc, 0x16, 0x80, 0x5, "", [{{0x9, 0x4, 0xac, 0xd, 0x5, 0x6e, 0x57, 0x1c, 0x5, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "8567"}, {0x5, 0x24, 0x0, 0xb22}, {0xd, 0x24, 0xf, 0x1, 0xd, 0xbca, 0xaebe, 0xe}, {0x6, 0x24, 0x1a, 0x3, 0x2}, [@mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x9, 0x5}]}], [{{0x9, 0x5, 0x1, 0x10, 0x8, 0xfa, 0x6, 0x9}}, {{0x9, 0x5, 0x80, 0x4, 0x8, 0x1, 0x0, 0x1}}, {{0x9, 0x5, 0xd, 0x0, 0x218, 0x3, 0x4, 0x58}}, {{0x9, 0x5, 0x3, 0x4, 0x3ff, 0x8, 0x80, 0x8}}, {{0x9, 0x5, 0x9, 0x4, 0x40, 0x7e, 0xd, 0x7}}]}}]}}]}}, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x24, &(0x7f0000000e80)=@string={0x24, 0x3, "a4eda0dfbe68f607f3481700a8ea0d120663c8a5d4c7983c2ecf9c201a77db985a1a"}}, {0x0, 0x0}, {0x56, &(0x7f0000000f40)=@string={0x56, 0x3, "3d26e5324b3491b144037fac6a79ea431dc4d3d66df1a9c4de0ee20072ea9dffbd10c6b2ff9abfb42beba1c31721a22310721335660a260fc3818897ba8eefb895acaf5a6c545214f23b0e8e81fcfae890469a26"}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4}}, {0x0, 0x0}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x2001}}]})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000080ff0000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0)

2.540017979s ago: executing program 2 (id=2515):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async)
getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'veth0_vlan\x00', &(0x7f0000000880)=@ethtool_link_settings={0x4c, 0xffff, 0x1, 0xfb, 0x8, 0xb, 0xfd, 0x7, 0xe, 0x6, [0x1, 0x3ff, 0x0, 0x641, 0x7, 0x401, 0x7f, 0x8]}}) (async)
bind$packet(r0, &(0x7f0000000040)={0x11, 0x5, r1, 0x1, 0xc, 0x6, @random="3aae9b8da8b6"}, 0x14) (async)
sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x503, 0x70bd27, 0x702, {0x0, 0x0, 0x0, 0x0, 0x6000, 0x1806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0xc005}, 0x440b0)

2.468542732s ago: executing program 2 (id=2516):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x298, 0x0, 0x700001b, 0x148, 0x0, 0x148, 0x200, 0x206, 0x240, 0x200, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x0, 0x5b}, 0x1ea, 0xc0, 0x108, 0x0, {0x390, 0x8f00}, [@common=@unspec=@state={{0x28}, {0xbb7}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x8, 0x9, 'snmp\x00', {0xbffd}}}}, {{@uncond, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x6275dd3c01ecbf44, 0x2, 0x3, 0x4], 0x4, 0x2}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0x0, 0x8, 'netbios-ns\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8)

2.399026457s ago: executing program 3 (id=2517):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x550, 0x0, 0x0, 0x2e0, 0x3b0, 0x0, 0x480, 0x480, 0x480, 0x480, 0x480, 0x6, 0x0, {[{{@ipv6={@local, @private1, [0xff38], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x1}, 0x0, 0x100, 0x128, 0x0, {0x7a00000010000000}, [@common=@unspec=@cluster={{0x30}, {0x4, 0xb, 0x5}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xff}, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x2b}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x20, "8400e1bf7f5dc8f3a5a6d0765e0770d84ae4b2b0fddc9481bc5db3d2e0c1"}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8fd, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0)

2.324718711s ago: executing program 2 (id=2518):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x0, 0xffffffffffffffff}})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x2e, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.184006456s ago: executing program 3 (id=2519):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000002cc0)=ANY=[@ANYBLOB="2400000000000000290000003200002a00000000000000000000ffffac1414aa2a"], 0x28}}], 0x1, 0x0)

2.153576106s ago: executing program 3 (id=2520):
r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(0xffffffffffffffff, 0xc0386447, &(0x7f0000000080)={{0x8, 0x2, &(0x7f0000000040)=[{0x0, 0x0, 0xd312}, {0x3, 0x0, 0xc6}]}, 0xfd, 0xa, 0x1, 0x1, 0x0, 0x7, 0x2, 0x0, 0x0, <r1=>0x0})
ioctl$DRM_IOCTL_PANTHOR_GROUP_GET_STATE(r0, 0xc010644a, &(0x7f00000000c0)={r1})
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x100, 0xecee945102ddbf8b)
linkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00', 0x1600) (async, rerun: 64)
ioctl$OCFS2_IOC_GROUP_EXTEND(r0, 0x40046f01, &(0x7f00000001c0)=0xe1) (async, rerun: 64)
ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000200)) (async)
r3 = syz_open_dev$dmmidi(&(0x7f0000000240), 0x4, 0x460d03)
read$midi(r3, &(0x7f0000000280)=""/65, 0x41)
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000340)={0x0, 0x0, <r4=>0x0, 0x0, 0x0, 0xa, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000380)={r4}) (async)
r5 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000003c0), 0x450000, 0x0)
ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f0000000400)=0x8)
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe)
r6 = socket(0x22, 0x3, 0x8) (async, rerun: 32)
fanotify_init(0x0, 0x2) (rerun: 32)
timer_create(0x4, &(0x7f0000001480)={0x0, 0xb, 0x0, @thr={&(0x7f0000000440)="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", &(0x7f0000001440)="64947c50f563"}}, &(0x7f00000014c0)=<r7=>0x0) (async, rerun: 32)
landlock_create_ruleset(&(0x7f0000001500)={0x2001, 0xc, 0x2, 0x200, 0x1}, 0x30, 0x2) (async, rerun: 32)
r8 = syz_open_dev$sg(&(0x7f0000001540), 0x4, 0x4000)
ioctl$SG_GET_SCSI_ID(r8, 0x2276, &(0x7f0000001580)) (async)
sendmsg$tipc(r5, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000015c0)="a54bf3c5d2cdc09e63368a14f5551d6d232033a92ced1a6fb164dadadc76d378e59738094c5d7dae719f2145e79cbef62fbfe1846db5", 0x36}, {&(0x7f0000001600)="9078ee77e55c8444f115afc46e9160c57c2fec3635b510f35248", 0x1a}], 0x2, &(0x7f0000001680)="0db5c48a84e3575a9a90e9d98508f9aa0e5d2747aec0e25dc7a80578f17a6b1e04a744f75aae3e33a395201eedc3e8ba82893e502bbd37ce274c48f34047292cf9b0ef8d753e6bc951246f2aa13451aafd5d5a6afe8f5818d8e423dfa759f67a767781", 0x63, 0x8080}, 0x20000041)
timer_delete(r7) (async)
r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001740)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
quotactl_fd$Q_SYNC(r9, 0xffffffff80000100, 0x0, 0x0)
ioctl$F2FS_IOC_FLUSH_DEVICE(r6, 0x4008f50a, &(0x7f0000001780)={0x6, 0xa9d6})
ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000017c0)=<r10=>0x0) (async)
ioctl$AUTOFS_DEV_IOCTL_FAIL(r9, 0xc0189377, &(0x7f0000001800)={{0x1, 0x1, 0x18, <r11=>r6, {0x8, 0x1}}, './file0\x00'})
ioctl$BTRFS_IOC_SUBVOL_CREATE(r5, 0x5000940e, &(0x7f0000001840)={{r11}, "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"}) (async)
syz_clone3(&(0x7f0000002b00)={0x0, &(0x7f0000002840), &(0x7f0000002880), &(0x7f00000028c0), {0x18}, &(0x7f0000002900)=""/207, 0xcf, &(0x7f0000002a00)=""/159, &(0x7f0000002ac0)=[r10, r10], 0x2, {r11}}, 0x58)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r8)

2.063805654s ago: executing program 3 (id=2521):
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002)
r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
syz_open_dev$video(&(0x7f0000000180), 0x6, 0x7251ae1cb51bcdbc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c400000000328000480080002"], 0xa4}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r4=>0x0})
sendmsg$nl_netfilter(r2, &(0x7f0000002b80)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002b40)={&(0x7f00000014c0)={0x15e4, 0x12, 0x1, 0x401, 0x70bd26, 0x25dfdbff, {0x9, 0x0, 0x2}, [@typed={0x8, 0x4e, 0x0, 0x0, @fd=r0}, @nested={0x15a, 0x124, 0x0, 0x1, [@nested={0x4, 0xc3}, @generic="15608faf151b57c22fa5723f330ae9995fa5df34ee54d101c6faed4429bc00131445a21dfe110899af0c5533edd8fb839908668e2e8caf590610895077bebc7a0bbf337426fb1d3ae7fe2362f1497c1f88e5ef2ffad2119496c9a416c2b245a9d63a54", @generic="a27e64c86cd5f22f4f5f070078a743ddc457f7a3bf79f82594e8e88d3803675b67f99e1f61fcfb822803667ce0cac63986a1c8a77f96cb78048a7c449a61208fdc8f1fdeebc3491482e9494ec88216bfa3d34e46468231cb428c8bb469fc27cf8f8a2b8ef6536f0176df01f48dcd5fcf70b380530c2775812ac09dc315fccb2c0e7f824b524dc25f420a393ed18fece327d854a5e93ad5ada334ac4a25868b5275a122c0890300897e3074408cc8c0aa37ca6b46e90bfdbd1a0bb0f986570b3d907d5762e3d55b717f19e981429210a51204639b7cd42961a4a9dbb7f160b9136f274b9a1b003a73c616fa", @nested={0x4, 0xba}]}, @nested={0xc, 0xc8, 0x0, 0x1, [@nested={0x4, 0x7f}, @nested={0x4, 0xb9}]}, @generic="f3d92706b4f9711814926d681882f9fe9fd3bd62adbbba7198cfed75b819d4d64adc4aabf7abc2279ff7267c88e6", @typed={0x8, 0x9c, 0x0, 0x0, @u32=0xe}, @nested={0x117b, 0x11d, 0x0, 0x1, [@generic="5754803b5f041f3ee471e002921fa65c6a71a1e2b7b89fa035c48bd37092c35f385cb65559596e1d4c62c332bfb73f8480f2b0ad9166b5492ce5cf41be3d6485602fdb18cc3cfb11e7eaf752079a19b1e927752c08d27ab9bcb98cede7798b0a7bc1d4ebf00c39e849317b82ed2f13102aa0ffcc5e464612f00df0ac8bd3694e68fb45a072a1c26011ebfe9dc39da1d7db778a6030084cf26dee7dedf256e252534a17734dbf28083ae2d8e9b2e1477100ea55e4987726ee4cf0c264c8676a23235a7c03f3ebdd4de0378f04702fd48e9e2c9c8da8f51cdababc", @generic="03eeb757d265e814a6e7df7313500e6d746c48ce60d0793fcd38e02d3cb4e14b696e8f79ac0cd55232d966259e704f7910b841c2e58c83a3ba6c19dd03d3dcfe1448aac3e7526ca8f13e4168dd44229fe8964ddc7df61876e835fd3c2a4e877bd43929cdcfba33c4500a8997732b51728980f1111599d83f9bcb853c75e04ac20911f9b2ddb5428bd8422e3a0fc5b46268a44ba83fd7d1b71c1ab86b9484c9454c711e4968718eb8426d1f6796f72a8139769dfab321cb2bc5176483d274019d4c1bd24c1c045221da40165eb3d889eab070ee034dd06f7e8a4fa65f9cc5ad452360605b812de8f53e892b51e76d968d290c14feda4cdcbc075b05987a52903ee4f5eb884f478981d83365e4687bd20966f892ef9631cf3e1b19cfca189c7455cb6011fb94fa3697946a1c4c5e174350ebf2c0a4ee706c04450b006dd998e1688da325aadb678681428d2a7b8bbf8d4e96e4361f7c002642f3ce89ed5f8806493ee0bcc96464d8aed9b2aa45488487a6ab46e5bdfbde0e49d37e063a6ef41774cb64d8459151f8dc5fdab0f71c78736a69657b6b54c06dfb2b7877f2c6e3354626c8dda85e95302a2539671b2fc6448184d1f210fa1602f56e8b9a0436d7b668e6bed7cdd6cbed0727d6fe4e7a257b9cb7fd05f9c1480d249b93fcd0eba1bf0276baecafd739c07bb77399d7db1fb3dc58338a015a4d8c2e3b517a394293f86af7777410447bbf7e7f676df09617152de0bbd16312b07791cecaa05361556d29ecb94cdd070a7e8e672353b2a2024f559d3d61fc517893adbe83b60c0ec2e0aabb0f161b21f26358e292eb37fcde08103c1c41524668107b9e1c48e6019b6c913c4e3c08846415cd2ad2419d3d6ef57ab687ae1d9adea3a5e7b9dfe6f929d0f1143ac091cad13141223aa4a5abbe6d282c0d26bdd214f4b24878b7b4caf97687b3142962bdc0695e3a6ce05436e8821edd74a45a9e760b196022769269b64218baad9fc2cb2eda5200f7230e30884a40e8d7cfed66ae0a89d3ac12742ec4e784adb0b0e3af03d4e667cace0c959f0328a7c2632b86a8f0dd9670de2d5ca565ff4e777df372e806ce9c5ab810306d1531e0957228310fa68495e3ea406497b56249b207ed6865d152d2e428532beb401d99dabc99ae768809de0d83f0774f4772b5fe98e32a396dd137e9d49e79a55009b7d00df067feae6ab4e72a668a8c1cec0628a59199cfeae8ae0301b161d3a4d389ce3dd23a54a330e6fa9c5a3ab1c3c1dbc8834218d075371003063efe3d7abbe3d5dfae0137d6774c23a77e3d8d26fbcb52b702255896374073f4437358470d6ce934a663e4035c2dc35a40dd3c32c1fe993e09be7725e4cb0a67bf16f15ced5f9f6b9ba0da77aed10632920247fc15a4c01d613f5e8a6a6384a32eeca12f51ea291b04a41cfe005edfbc94f0cbe52af0846ac1c0b7d31517fd8b0df4a126e9d14087770a74de745a365fefe8e6d5fcf0b86248f31f17cd5a94316465e0336c5f4facc836758a6de6ceb513f4eaedb6d8868a94d26ff2407d78e55e102a2ba0a540fff231b667a922b1231632720f47812ce0526b267c2dd221d8c17ea0bafda8d78cb8411161b8b34f566306cffc908cd5ac45ddb8e30a533aac3e5c890760ff3dc5d4bbab7e33bac6101400dee835caf9f000a06590b809385aa35c459e63170ca4fe6b36d334548959f6dee0e9835ba8f2b90a78b12d2f6e6097aed3b7e949acb7d8e7621c0c9eaaf161e8e6e271281f30366dd21b9ae875acde5070702922ca7eef763311d3e31b386e276329e265148cd9c40d7b386c3f33f37d73eac29f95df0938ccd033378d90f5c437b9e097700252a5e4c7df6c7e4590773226bed4c0a6c8f6fea8eb7a6c0860294d65e11c0f325bcc0a5bf237b4db4ab3f81295793bb1113dc24c88b05ca54103762a7917223471db38850304dbc2538448a4f0dcf454116212aa1211bc613d59330203b0b0c5f41e1363339ddca3824e46ed966b496f5abb65c2c217d62b248ea3fbbd5e9720ef0e297db51d8f658aba51e89f06d8ea58ff4fd044a0349fe5307832a48bbd9e3dce551e8238563abbc982b37352997b2c0daea89828ccc89a49729492b1ccefcfa95d9a2d10a4e9f09f62a2c64607ce326e434968bd8ff3e96b766b3b7bdacda3480d6b5246d75eacc66e7196cc99baefbdc86aa8fbc67f102faf34e85cdd9e9d805eb19b3e9f4da6e620241880030ba32d1d9398e69e1047d87448cb7ef221e52781680b6f1e9bf502589e500b3714d777ca0abad1f448cb1698230319e4fd72c810d863863c699ae22a5ffbba9f9a3ee5b9acdf3a64caaa3a594495a93f3c473179e005a64220c71d8d9f62535c79fb6aa8804a0252f0976c3cfdc61cf5dd41c9ada63f3afc353c4fba44a1fd5e8952a675d3a06740a697fcca986acbe62a567f7c7da26678f61d85ea76db7c1775df4f2f0ed2d28eb9408ac6134048fede58e5f1b8fcd3d50b242450d393cf76a1ab7b279154f320b9e9cf87986cc037086f98fefb53a118324f2e09d983481fd838d91b42bfdba0ce3c8caff2cc3ebe52c5686ef59a165c5e2ee4e6997d9513b686ff9d6a4f462f01358dc9924c38b139787548b77b0e927c60b8489d6a96fce1981938554b27a78dc3582c3b03649710d9e4f20377f904e7c63e005bc298f8ee363f984310f116312ed19c0bf76cbcf24023ad99185d7ff441dd6118195550073345d9655b71afa24a14836ebc7186b74505c59ab8fedd9da3907fd17602ce061b041636569be03e39b279335cc431cf648a2b79d87c29942adfa1bb755e1ff88c682a8e8e5ec8b64f5188ee268b410c93f3b263acae75110887785d7e89b75999bea7b3d0d3fef999c81f0d312bf066afd5f9ddafe458aa733bb7269e45aa8f07be68429c8840fd63c861ae6540e65da68ef89e7a16165b98bf40224465baea607311061e67dff7a7a078794a4a85e35fe499ca7af32f1fa0972f8fd85407e4a7bcbeb1740a027be8d62483194563a029a5858a9c2386545331c9c2079c1e87cea14f9aff3e7915177573e9b89f37966f94f03482af3ebd184ff6b58bfa78601f5db6457fb76ec7ccb5252c960b77352eb5ade5d4790ca4a5a3b2d379f4865d2f1010806bac47a9b43cb383eb5b0041ce2bdc79bc92057b21631275eefb5e70b51e370ab33d46d4ce84243664b49b672906492f35d07f8fd4dcf0ea4182043c763c73fd65ff9e0d7e44843e7a7367f9234764e7eecd083b48530dc00b90b4430c24a89a44ef8bf0a73dd422f2846f010e833b0aa9157e5d834d3e3c2a7db6c6acd69dca7009cf57e65ed2806b424412cf512b0ed9f372031bf7730c49c1eb305e8775eebe9bac19ee272f9c500f5d767ca6b811528c3d52aaf2b0a7cc381e9b7a45e745663df1c2e103239601c6efe3f03c97eab15b9ca8fafe0ff17ecb56be960dff3f7bb1b1734ae1e143ee3d34f1d5681431541133ce7f155390c293ed104f670bf90d7c06d0fdd1deb53711055f422213887a70940ee8b497761be4493680676fec6bd3c4344dbd6e0ae1aaed9e9362b74f68333188b2309c3d8cb4bccfad036ba4a0e473c9a3574aad5cc73a4a423cd62cfc439d429dfd16fb40497a82fe397dba83ce0b41eec28769853d5f19ce379e81166e83b5cf48f84980127cfc6a3812ca6971cbcdaf0b3c65c86c8949b95f3a4979e61ad7de5ebc510a239cded07705fce1d8ed0ccc3b05a53739289a05586424d317452054a64ecee1fb9f6435e4e95499928aa01b0ba015e8b296c52972e4625b7c988982212668fcbbb14f560143b551905343497277593b04afb5a230d77933abd1510b7a71ba97f521dcad9319893c568d1ca5a3996cd5263316b5d4f2a71c93d05a01c793e6525598d30091bd12c6f486ab835c9e4f16537bb8cb709cf19caa91dd834373fa045a0b0dfb49a83706d6fafe3ed75c334804eaeb845ae8401dad88186d562ac4a1e224695a53bc42d844ed517e51810256408a48aedab33a4d89492ca500377564e3ad1537054251be5d43523af37f5dfe1c79a603b367479be9019fa99ff67ee7cda9ff852d5c9f4918f3981c639c36c5721dbf25355ef4c9ea143660dafc1035ec7d34bfaef2a9145e07ed5e29c9415250fcade871ef926917f00dee5a48cb929e79429bc73d556b2bd47ee755a292ab40ce80a182101da9c3946f3bbc7fc01b26350e3d181f9615dfc4c0793b16c2caf46b9d8265a56b1579a9370e554b65a5f4c1ad5c9d1a59e40d55b25d255d94ad42398810977b6e6d639c80aa924d1d1b6c1111c5cab017a34d1edcbf64866137394be075107bfc483aa57a1491681fc736143a528f54f5bc247d85e94b0c61d5a642668c6ddb36b36d52d60615c79de6a0770bb01dc71e0d12bd96ea140a192052824077ef54aa84f0e5f582d7300b12bbeb26a96f57082b0eb3a5f6f44c52452117ec3b5c5958e3e65a9096335fdd7f3ff51bf8a2efe2c2d42c02f8e843814e95054b6c5d3008179814d73657724953cf4d66e6fb3b590434e59f192abf11371be733a2d510b63b8502b2dca4a6acb5471e9ff8a77ef1f696d061aa4062b7fa44c03a66a13df2ae5b001967c809f7bd6959a0826cb93ffda01ac443af6b33183bb9eb2040ff75d67d96d8d3838d5a505e91908a534dccffc1a7e5f321ec8921ca21b4419d44e3c2759f2956301e1e565916f8748e99b753d5564a1eadfe3e45fa4cc90f453770888d7e7f4c7d325eb76e7942f8497fa22a3919d632a464def06159427b4d0f63c99eef40da5d0e0f732b5f7e8a20265a817fef23cddf0b7910fda66f8192af75b6b42720fb20b9ee356a8b713ff79e329cd137d8e21735b61e0a88a3f6abdc3d6b0c01d103305ea865fcaa3d50afaeee655beb4ecab5b47166cc7550194e42d64205d48e3f0fa8a7dee01a6d60fe7559cf2e1e1f1679da6c1fd30644d4569b47db0acd303ba65198a378797fe9584a5150b5485e4230095c48b917421172fe2357eead081e8b7afdd2917e55b25e956aa0aafb7e2d7615389a1edf33129a71f6909430e2a273e208af56d95fcd603459c2873519656cf3e913c1f6995e19f9af31fc0d65a06912a33207a8a967299e1b7dde3fdca5aa12dfa0f1f689da74b8ed05c7bac3697fc1804a02731e0d2b64b2b1e77aaea561bf4649be0cd48e051c6f9526f903b535ffd2af2437f9ffd5876c99343a116b07828e9477d118de1b2e519feea73deeaab41c56951538c1bdcaea5028a3ece50e4a7efae73d222da55a33de4a506e26fbc1c72c51f31fbf70566ee5f5aaca828c61eec9f5cd56c9b957594029bfb552765659ab14eefee7c3395e1c080dc6187f28a02ea9c3e5dd196062ea648d7eb5b57a5c2b9620fd3d4ccb02583c8dc733de9db219b9c4202bc315d0f0a35dd822d423cb7fb9bdd7db918c678d61f6da23052add4c70913f010a53e2b4c2a09ce16e64b0526d6279051858f7504bc150140b9d2adfecf3c9e9669f749914b7135f3304623d328181dd2841b8aeacacaee55508e24b6cb7b5bc510f27285011d1dfc480159f5fb7806328bc7044ec7117b0b37445cdfcee463e364610f918b4878e9e663afd0dbaca615ebd598bb9c4d9e25388a57dafd89085d12193893f697e49f41ebeaa5a65c7425300dbb2cd6e1e4d3175d1c4d3c174b16fe60d220c15a6eb3b7a975954660c4d68ecf42a7702a1cd882c756333b8e5aac401a46b1dd911f677278d9cd8e714948b08c6bdd5b357336a27e029", @nested={0x4, 0xd1}, @nested={0x4, 0x2c}, @nested={0x4, 0x10a}, @generic="2e76d968725a913181759dce56c5f07b974c5ca498fc21e3cdebcaad6a69af73eb033bafe5fe53e0dc8f096fbc5e41a6277fd03f1e9493e489756c9f801c66941c4e1ed24cdf8f4e21c85eb83924cb8416f0abd1ae5d69763ed2ad93d796f8159a5cd8ed6d51511181c257a64d75a55570dd52c3ef39f45a31a07d072cf497953e1a4cc320467c2d59a3d3d2a8f1cee5bc"]}, @generic="0edf083a687cb72ef4cc5fc29502acd123544d0325f5fbccc04939db80425d1d81ad6eca0e0e2b6c45287cba8ce3d2b5f04c82a4830b796c79a274ae52cd0e09bf2041f62274d9fa14b9efbfe6110e43da53f53154321cc1a6aaa2ee0803b3f74d5838ca4e70608af0de77fa5d0dbec415e9a856ec568d84e55567d4f5708020aab1a915cb7819abcd94f8ae4608257bd6984747f6438a66ecc0b60693eb73c586be79422229817f6c693d50c1e27b6db5b9ac41ec593ef34125a8b6ac3342b9b3534ba6ab29ca63cc8f69d35f944ffa4be4a383ff00390ffd2df25428392fa2661c1eed3792403f8fbb0f52ebd8", @nested={0x125, 0x80, 0x0, 0x1, [@nested={0x4, 0xde}, @generic="861e3f5fa68a37cb12ac228bd5cdd25f1ed9c73437911d89d0078173c381d7c893d022e4420bf7904ad598f6e4ac1f13a9c71cc8f5cea4e5d54545a8ac9743d4272133e30af24bc3083891368c53b33effa07ddaa13d68b9ca72b47f2d910bc8c6f5", @nested={0x4, 0x111}, @generic="6b8bd6cafad583d8a04191c3dc521fdaff1b152ae21bc0420ae4bc7be29dc1098c0213a07ff3f66fc04ad1eef6773d59d28444442e6fe046c839b2e849533a0e8d50164d9d1ad5bbb45d34e8f0a9f68cc1d6053b16a7d01301c9c6ddcf96823c7f446c5ceda67c57accf6d9c2b4ecc1e85a381df0feebcf1f3b4daacf211f16e", @nested={0x4, 0x59}, @generic="574ff88b00ac14419929338c8815a358a9d8", @nested={0x4, 0xfc}, @generic="83cf7a6096d0a372135a8d58d16f545becc8c1b80398d42c92", @typed={0x4, 0x14a}]}, @generic="25898df481a9277025e43ebd92161ce6daf4c7321690d78dcb0f7da59478d09c6eb207fd8eadec13cef73848b62b154150a4604d31eced2145820ce62f", @nested={0x56, 0xd5, 0x0, 0x1, [@nested={0x4, 0x104}, @generic="321004d7e6b6237ff32f7fbd78c4431fb06cfc39a163316502208657f4c13a352ce15be2de4c5058548231291bb4bbec19c380235a68c235e72fb98c0192ef7bb90e", @typed={0xc, 0x6e, 0x0, 0x0, @u64=0x3}]}]}, 0x15e4}, 0x1, 0x0, 0x0, 0x1}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0xfffffffffffffe0d, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000011000100000000000000000700000000", @ANYRES32=r4, @ANYBLOB="000000000000000014001a80100004800c0006"], 0x34}}, 0x0)
r5 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000440)={0x2, @pix_mp={0x4, 0x6, 0x3234564e, 0x2, 0x1, [{0x5, 0x4000400}, {0x80000001, 0x105}, {0x6, 0x7}, {0x122, 0x8}, {0x100000, 0x10001}, {0xe9, 0xe}, {0xae8, 0x2}, {0xfffffff9, 0x3c49}], 0x0, 0x2, 0x7, 0x2, 0x2}})
r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0)
r7 = epoll_create(0x20000006)
r8 = socket(0xa, 0x3, 0xc7)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r9=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x14}, 0x78, r9})
ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x8936, &(0x7f0000000000))
r10 = socket(0x2d, 0x2, 0x0)
connect$inet6(r10, 0x0, 0x0)
r11 = epoll_create(0x7)
r12 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000100)={0x8})
epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r7, &(0x7f0000000140)={0x60000000})
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r12, &(0x7f0000000240)={0x20000000})
r13 = syz_clone(0x4000000, &(0x7f00000001c0)="5951d7929e29a254e8529a924a7aa1c674a2e7c7e1acc49ea5f4bf87d31ca2d13498d61ec54ffde1e1c8112a2c3811951b72a9164499be891022179ae078d64f3cac569ce9e71748c218d66cfcf0f2a700fccaec707ef573ccae571de9f92ae5e378f1930b77e9fc085a7fa55bb97f09422bd0c6c02997c8ab2819b67a7a270ca1d6550ebf80309c3a5f09ef5f112dfcb141eecc12229aad5903b66dc3e786affb62afbd55b19f1b6cd88030f4c1fb387856680e9c58759c4dc471519cf30c84a3c4", 0xc2, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000380)="034290d47f21f20ca14735413a97b8ec7a4e5be65d29abe4c08c92f96f57dd883aa5a1270f15c8f486f507f86f55e6")
syz_open_procfs(r13, &(0x7f00000003c0)='net/ip6_flowlabel\x00')
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000fc0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1})
ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000007c0)={0x2, @win={{0xffffffff, 0x5, 0x8, 0x3}, 0x6, 0x17d, 0x0, 0x80000000, 0x0, 0x2}})

1.862341241s ago: executing program 3 (id=2522):
syz_usb_connect(0x4, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x49, 0xcd, 0xb4, 0x40, 0x424, 0xcf19, 0x7190, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xff, 0x2b, 0x20, 0x6, "", [{{0x9, 0x4, 0x61, 0x9, 0x0, 0x2, 0x2, 0xff, 0x7}}]}}]}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
select(0x40, &(0x7f0000000040)={0xec4e, 0xf, 0x10001, 0xfffffffffffffffd, 0x1d4d953e, 0x3ff, 0x3, 0x9}, 0x0, &(0x7f00000000c0)={0x9, 0x7ff, 0x9, 0xc, 0x10000, 0x3, 0x6, 0x3}, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet(r1, &(0x7f0000000900)=[{{&(0x7f0000000440)={0x2, 0x4e23, @rand_addr=0x640100fe}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000180)="d9", 0x1}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000400)="8b", 0x1}], 0x1}}], 0x2, 0x50)
shutdown(r1, 0x1)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000a80)={0x0, 0x1}, &(0x7f0000000ac0)=0x8)
madvise(&(0x7f0000207000/0x4000)=nil, 0x4000, 0x17)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
quotactl_fd$Q_QUOTAOFF(r3, 0xffffffff80000300, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000500), 0x10)
sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000400005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000380)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a00"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x88, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'geneve1\x00'}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}, @IPSET_ATTR_CIDR2={0x5}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008040}, 0x20009084)
r8 = fsopen(&(0x7f0000000040)='binder\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) (fail_nth: 39)
socket$xdp(0x2c, 0x3, 0x0)

1.778984327s ago: executing program 1 (id=2523):
socket$packet(0x11, 0xa, 0x300)
r0 = socket$packet(0x11, 0x2, 0x300)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
clock_nanosleep(0xb, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x4, &(0x7f0000006680))
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
fadvise64(0xffffffffffffffff, 0x0, 0x8, 0x2)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="f8000000160001000000000000000000640101000000000000000000000000000000000000000000000000000000000100000000000300000000a0a00000000039288d7cec8ad578fc780410be009bfe4c2842ffeb63dd4cfa9d9abe7ea24d10c7ec6cfc3c118c7cd7006122ec6cffad94b6c37a610a09aa296068028f7349f2e2ffbddf885eaffe6a033d1ef08b50b0b00e16f9aa75e1db1cadc197c649002fb37b4c9c516d6434de1a8a32851930cd3170c6c9e68e2bde", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000030000004d633000000fc02000000000000000000000000000100000000000000000000000000000000060000000000000000000000000000000000008000000000f1ffffffffffffff03000000000000000000000000000000000000000000000000000000000000000200000000000000fefffffffffffbff0000000000000000960700002dbd70000000000000000002be0000000000000000000000b1a00100"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syz_tun\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', <r3=>0x0})
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_SELECTION(r6, 0xc0405668, &(0x7f0000000040)={0x1, 0x100, 0x0, {0x1, 0xa, 0x2, 0x6}})
r7 = socket(0x10, 0x2, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="030328bd7000fbdbdf250a00000008000300", @ANYRES32=r3, @ANYBLOB="5491b5787f7e8b1fd06dccedea2871438828ea01d03bd4d5b2b0fdbf73e2891630617b4158fc380888240c217f43f888d47f871e4871c8cb459971578d7ccf82ae824955076fc6396676726dd42334b5accbd8d528aa58681bd6ab91721ead59b669be0d05556600f4eaccee6af634ca141dfb1b259197529439fd6a0ab964d86539a96cb2774d749bd67d3f33fe2c40736f0f303e7d2e70df3ac65fb7bb456f9eec5e7df430259830791e4ad43a"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4080)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r9, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x3, {0x0, 0x1, 0x3}}, 0x18)
io_setup(0x8, &(0x7f00000000c0))
openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x1c7)
r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0)
ioctl$KVM_CREATE_GUEST_MEMFD(r11, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000})

1.412152454s ago: executing program 0 (id=2524):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f00000002c0)={0x4300000000000000, 0x1, 0xfffffffffffffffe, 0x1})
r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r4 = syz_open_dev$dvb_demux(&(0x7f0000000140), 0x0, 0x62400)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f0000000180)={0x1, 0x0, 0x1, 0xb, 0x4})
ioctl$DVB_DEMUX_DMX_ADD_PID(r4, 0x40026f33, &(0x7f0000000000)=0x120)
socket$can_raw(0x1d, 0x3, 0x1)
openat$zero(0xffffffffffffff9c, &(0x7f0000000200), 0x80082, 0x0)
r5 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79})
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
ioctl$UFFDIO_POISON(r5, 0xc020aa08, &(0x7f0000000240)={{&(0x7f0000b9f000/0x3000)=nil, 0x3000}})
r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r7=>0x0, &(0x7f0000000280)=<r8=>0x0, &(0x7f0000000140)=<r9=>0x0)
syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf4a, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4043, 0x8a, 0x0, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x1}}}, &(0x7f0000000480)=<r10=>0x0)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
r12 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r12, 0x2, &(0x7f0000000140)='\x00@\xf1f\x9e#l \xa8\xfe\xbb\x18F\b\r\xc0(\xcff|2\x81\xba\xfeA\xa4!\xcb\xaa[\xbbn\t\x0e\xfd)\x974T\xfc\xba\x82P\x11\xd9\x97\xa1\xe7\x9b\x9e\xacq\x99\xe4\xe5EH\x84xn\x88\x88^6d\x90\xd3R\xb7\xbc\xd7\x94\x82\xd2\x14\x18T\xce}:\xc6t\xff\xed!_-\xcd\xa5\t\xc2\xeb\xc8\x1cA\xb4tW\r\x9c\xec\t$\xa5\xf4\"g>\xb8\xf3\xab\x12\x8a\xc4\xa1 \xf5\xe2\x18\xd4m\xe3\x92\x89E\x7f #,\x8dzk\x13\xd0\x17\xc0\xbdC\xfd\xd6\xf2v\xd6B\xab\x01\xc0(w2\xdaf3\xff\x8ei\xfehj\x9f\xac\x9f\xf5\x1c{\x8f\x1ei\xc9\x03\t5\xd238\xbe\x85\xe6XD\x04\x8fq\xca\xbaO\x16\x92\x18\xcd\xf5;i\xb0\xb4mtT\xcc\xaf\xb6?T\xc9\xb1\xb1>\xd2\xa0W\xcfN\xdb\xedK\xa9\x1b1r\x00\x00\x00\x004\xa0\xcb)\x0ej|l\xd0\xb4\b]\xe2\xc1\xe2\x18\x06O\x1f\x1e\x1d\xb5+\f\x7fs.A\xd7\"9&\xb1\xf6\xba\xd5\xbf6\xaf\xfb\xad\xdb5\xbd>\xb8\x17\xc2\x95^\xbe\x9c<\xfc\v\xfe\x8b\xd62v\x97\x8aW\xef0\v\xd3\x9b\x80\xdfk\xde\x9c\xfd_^\x0e\xefN\x14o', &(0x7f0000000080)="ce", 0xff00)
r13 = dup(r11)
syz_ublk_setup_queues(r13, r10, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255, 0x0, r6}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x617d, 0x8, 0x2000, 0x10000004, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed80, 0x1, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x0, 0x1, 0x401f0, 0x0, r13}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48)
syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r3, 0x81, 0x1, &(0x7f00000006c0)='P')
r14 = socket(0xa, 0x3, 0xff)
setsockopt$inet6_int(r14, 0x29, 0x3a, 0x0, 0x0)
ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000140)={0xd200000000000000, 0x8000000, 0x3ff, 0x4})

1.14506644s ago: executing program 2 (id=2525):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000540)={@flat=@weak_handle={0x77682a85, 0x1, 0x1}, @ptr={0x70742a85, 0x80000, &(0x7f0000000440)=""/210, 0xd2, 0x1, 0x11}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x74, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xfffffffe, 0x6361, 0x7, 0xffffffff, 0x3}}}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x8, 0x207, 0x10, 0x0, 0xe, 0x7, 0x1}}, {0x6, 0x2, [0xb867]}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0x7, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890)
syz_extract_tcp_res(&(0x7f00000000c0)={0x41424344, <r8=>0x41424344}, 0x9c, 0x0)
syz_extract_tcp_res(&(0x7f0000000200)={<r9=>0x41424344}, 0x4, 0x7)
write$tun(r5, &(0x7f0000000600)={@val={0x0, 0x6}, @void, @ipv4=@tcp={{0x1e, 0x4, 0x3, 0x0, 0x19e, 0x65, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @multicast1, {[@rr={0x7, 0x1f, 0xed, [@rand_addr=0x64010102, @local, @multicast2, @private=0xa010102, @local, @empty, @broadcast]}, @timestamp_prespec={0x44, 0x34, 0xc7, 0x3, 0x8, [{@rand_addr=0x64010101, 0x6}, {@multicast2}, {@remote, 0x9}, {@remote, 0xb}, {@local, 0x8e}, {@broadcast, 0x5}]}, @end, @ssrr={0x89, 0xf, 0xc5, [@remote, @broadcast, @dev={0xac, 0x14, 0x14, 0xf8}]}, @end]}}, {{0x4e24, 0x4e22, r8, r9, 0x1, 0x0, 0xc, 0x80, 0x3, 0x0, 0x9, {[@exp_fastopen={0xfe, 0x6, 0xf989, "bfd5"}, @nop, @md5sig={0x13, 0x12, "7fcb012c9519c5130620f7b1fe1c59cf"}]}}, {"91ff8e4e741fa96b1f17bfbc76fe08ec8e41e47460a140306f59fc3d385f1237f64c38fa7981571672213c37df2eb2669ab64b736bb3722b304ae0736f9de0602c00da7eb091b0d264f5b39e1ae49d339051e4ef54fed44e19003dfd9ea81a70083d3118e9822293675c58df281c0ed29ded1e336e2c2c991730736bf1a5c8a7737f976550b28fed2ac054e4929f8a692495d61bf052cd967232568d26432b7d1a38c68c3863a9e1df197253f2cdcf9cd0b88aa4b0fcdc38e64ab64ae65e3bfb19c9fa941345d087121e25dcfdbb4287a71331b58bc1ac92a0504a760eb6cf55fe63c2da82c9daa08758122f34bdf9b2eb33cfe089e2"}}}}, 0x1a2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r10 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r11=>0x0})
syz_open_dev$I2C(0x0, 0x0, 0x0)
sendto$packet(r10, &(0x7f00000005c0)="05031c00d3fc140000004788ed1c", 0xe, 0x24000091, &(0x7f0000000140)={0x11, 0x7, r11, 0x1, 0xfe, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)

721.172559ms ago: executing program 2 (id=2526):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="540000000206050000000000000000000700000005000100060000000d000300686173683a6e6574000000000900020073797a3100000000050005000200000005000400000000000c00078008001240"], 0x54}}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050)

643.767842ms ago: executing program 3 (id=2527):
r0 = syz_io_uring_setup(0x10000002, &(0x7f0000000580)={0x0, 0x8b2, 0x20, 0x0, 0x304}, &(0x7f0000000240), &(0x7f0000001880), &(0x7f00000001c0))
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x21, &(0x7f0000000440), 0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r1, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)
setsockopt$inet_int(r1, 0x0, 0x21, &(0x7f0000000180)=0x4, 0x4)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10)
setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0xfffffffffffffffd, 0x8000000000010, 0x7, 0x7, 0x0, 0x4], 0x11e, 0x0}, 0x78)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r2, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1414aa2a"], 0x28}}], 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x2000000000000021, 0x2, 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x8}, {0xd}, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x404c081}, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='9', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845)
io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0)
r4 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0)
syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301)
pipe2(&(0x7f0000000080), 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f000068b000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f000030b000/0x6000)=nil, &(0x7f000068f000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000692000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

569.807705ms ago: executing program 4 (id=2528):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xfd, 0x5ae5}, {0x6, 0x2, 0x7, 0x2}]}, 0x10)
sendmmsg$inet(r0, &(0x7f00000012c0)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x4}], 0x1}}, {{&(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000180)="f9b4da087f59eb3f7fc7909caeb373e5952fb64b7fe82443526a8d430e8734c276edff8d68167dc5f5af5496d91705f70cddd21ee1eb966bfef1d1395395c1bfddfa13b1e9a9ce38c80287470380e63a21fdce36d4ba980d970fb7218dc2e3e9d1a75eb4670a6d0c5eb2a9e80ee249591e4ccf5c9a0dea1a6eed728464e44fd752320add6c18c1403ef35b9a46f10cf3ade01ec516af99edd1efdd6b2a6a86b670f5011c4acf288c1adc23", 0xab}, {&(0x7f0000000240)="aa50a48ca5cd94e193a9084ea3ce38a31b86d7f9b511c677a8c7db6b9922901c91913e6cfc54f9904add126069d3f253722bad45f1fbcb0c782a693d05d4e597f73a82e8034cba97db188c7291c9ab98cd227d450b38ef0201ec8a145dbc57ecee237ce0a68b990ca9ad6d761820ffe6acad87423583dc922e0c35021e937326a313f081256450c10858d5f183d24c713698627d53ee85eae444b9d8630c3d30c2227cc511274f17c5cc96602b4f581212e167800eb2b6c7e6b7fc24e806b6efff91a3c73f68b15760121fbcffd377e7f2267ee0", 0xd4}, {&(0x7f00000003c0)="0d53fbbb64bef0b5d18b0019b3daa83bcf405225f11d93f71c38aeeec2a932ce44772cdeeb605f8e743bea6f1d3975bd651df0700895827e0d33d8666c158e82779ead4fe043c1c0a6d3221da6493ddae751aa5459474ceafd1ae0eceb1d0e567c31713e61d27e9ae39b898b105f5a2962b68540c9f2289a83b543e1834414a38e7cfd4b0281519a9728ca0a66619c76fe9806bac9fdcae61bce88047c1a60aa", 0xa0}, {&(0x7f0000000480)="1b8da0949156299066b19798279bf37ac2e4a72e929605f087b60c2679445a955e7312bc0a718faf3b1825af8a8254a4b296aee12c6edcbcd657cd90813a56459326fcd902cbf8a8111dcc8d9ada0a39218a67f78deab1757ea355a77e2f1d55c27353d8ea7cdeff0450fe419537", 0x6e}, {&(0x7f0000000500)="8d9e1185769068fa2c64c4510a070854ad392014dd5759abbcf97eec67520e3c960dee21725e0c92ced2a07f2b717ca31af1a364c767512535c8af9b6d920d9bc265a8a60f7e25552784b6569c28909eaff38e3ef6f1c8c00ab033bdef6902601cccfde920990b7e8c2da92a52efd16263460ffc45d45acf8750d9f53738854befd1b9f4b51effc4c07728141fc5737154ec8de677ad0df400d013f1f5a143ce856192e70381d6d658ad62a4a0c55cb8c7b98cc58ad087d88a02c7bd545de607ef3cbe54d8940df4475015b18c6edeb8105206ce1a92589c7de3669d2ae7c4bcab47fcc0af787fea46a1a820c9", 0xed}], 0x5, &(0x7f00000006c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xd9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_u8={{0x11, 0x11, 0x1, 0x64}}, @ip_retopts={{0x30, 0x0, 0x7, {[@generic={0x82, 0x2}, @ra={0x94, 0x4, 0x5}, @timestamp_addr={0x44, 0x14, 0xd7, 0x1, 0x1, [{@private=0xa010102, 0x4923}, {@private=0xa010102, 0x8}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}], 0xe0}}, {{&(0x7f00000007c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000cc0)=[{&(0x7f0000000800)="f7e6c41d301e3ac6e515d25094e488658fb09160c7d83ca60dfd521065ca19cdb8a0d68b015799f8110f26902267dfa4a004fb76828d0de635b3d6c55a260526aaf053107bcdb20a1c9fa6553a51a8e98841d6567da39e7356e3c7134a9228a8b6da39219da396d4b7dd8d29ce9903525c3fd852e940df3181dec8431344a924e36eb0712221855802ca80e9c31ce6655a035111dad05059a206c9077f1e2ec8d932c64a1e046f64fa9cd5ee325d6ac46559ff5c2bced1dca648098a500c40d99a1c29ae8f9682a42978b6b3153500048d7bd8e56956f23631", 0xd9}, {&(0x7f0000000900)="354055da106b37900a990ac53ef521ca8d9f43fbbbdc57c902d0509b84e828e6ca4358defbb09dcdd0319dd7fc58811680c5e67aca9b4a8b858244708f94b13fe2a17f4aca3857a1deed2e632ac453ee38f668c9c147dfcd7cc918a4a945cd16fa25c8fc719ded1c0f8e0b9913dfdd29b52b88696cbaec99e4d69c3a5af595dd8ebf9c97ba42358c757d675eeb7ef7e7d9be047c9543c1b0cfaa9897a5cbce", 0x9f}, {&(0x7f00000009c0)="6789b3ef27dcd4c01637dee38369096ffc70", 0x12}, {&(0x7f0000000a00)="3a42aaf9105ac988d447a923d5a218572aa5e7c597aab7b855755ed63e1bdf00e1dd76a1ec47613a00d6f619160b611aaed4abb9", 0x34}, {&(0x7f0000000ac0)="68d372904881f776395aac318d26abcee13d3b087d474b2dc5f9faabd34a75b6f2ee1b676ba674ecad7f2918c61619f2d139a12b08c3f84c0f7e89c1aa0a0a332efb0519767d7abe8dbed0d2056e0e", 0x4f}, {&(0x7f0000000b40)="5411ff88673326a17a6bb4ca50f7519fa83013d9fce5b188b176c65e33ea49eadd8679240dadf255725b5482e029be023342138a77cc10122718b8c39bfeed266c1505804f31d71db71f9c824f2d4629c216252c484ca2fd64b124755c3e8f5db1", 0x61}, {&(0x7f0000000bc0)="1d6ccec30869a3aaa6cc5bf0ebabb6088dae65a969e1a74ceab5a9dd900e96a660317fb007f5b516af011fc326ef92ab16796fd5cd445b1b7b72cb03e89e068c1954019e84734b59cad58b099ad9497656e4b403efb4dc3af646937b171bb42cf0a7e75c7b318990f12cb8a459226dd74a9c3e9fca4b0476503ebd720d493045d83a37cc84997cc1b3efe003960cef6e1df7a83a4d5a9d515314be7e0846f3119aa46c1d5453762fe7c434669754158c04401890f86ca1e691c59787e0", 0xbd}, {&(0x7f0000000c80)="443375bc21bc3b045455b5d789208234006576f526c2f7d86b090f89458c200e3a159ae0", 0x24}], 0x8}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000d40)="6dec528fcf1c99bd5c9ffb8f2b17016c29cb4261f0", 0x15}], 0x1, &(0x7f0000000dc0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe980}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfc1}}], 0x68}}, {{&(0x7f0000000e40)={0x2, 0x4e22, @private=0xd}, 0x10, &(0x7f0000000f80)=[{&(0x7f0000000ec0)="e45335a347", 0x5}, {&(0x7f0000000f00)="a4c2ec1b9bd0db05d1481c0bf0249859561b0163fc667dc088c406ebbb1e79b09ceb138c929b25e22a077542e45a7a01ff4d7cf710efa2c6e48790e2af2e099433d0e4874c25d91b14432585c422edf0b6faaf23fbd037a67d", 0xff45}], 0x2, &(0x7f0000001080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @local}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @end, @ssrr={0x89, 0x7, 0xad, [@empty]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}, @ip_retopts={{0x74, 0x0, 0x7, {[@lsrr={0x83, 0xf, 0x9, [@multicast2, @broadcast, @multicast2]}, @end, @rr={0x7, 0x1b, 0x45, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @empty, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x34, 0x56, 0x3, 0xd, [{@broadcast, 0x80}, {@private=0xa010101, 0x9}, {@private=0xa010102, 0x1a4b}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty, 0x200}, {@rand_addr=0x64010100, 0x8}]}, @generic={0x82, 0x2}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x70}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0xd4, 0x0, 0x7, {[@cipso={0x86, 0x1d, 0x2, [{0x7, 0x9, "1f917db948be37"}, {0x0, 0xe, "2563f20001712a4931595422"}]}, @timestamp_prespec={0x44, 0x4c, 0xe1, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@loopback, 0x10001}, {@multicast1, 0xc5}, {@remote, 0x5}, {@multicast2, 0x6}, {@multicast1, 0x5}, {@local, 0x5}, {@empty, 0x6}, {@multicast2, 0x1}]}, @timestamp_addr={0x44, 0x2c, 0x35, 0x1, 0x2, [{@broadcast, 0x6}, {@remote, 0x101}, {@empty, 0xfffffff8}, {@remote, 0xefd1}, {@rand_addr=0x64010100, 0x8}]}, @rr={0x7, 0x7, 0x9, [@broadcast]}, @cipso={0x86, 0x26, 0x3, [{0x6, 0xf, "5923841b3b8e7f5b8e4fcd9837"}, {0x0, 0x11, "5b8f42cacacc2a46d17a9ecf69ec73"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x932}}], 0x220}}], 0x5, 0x0)

505.344723ms ago: executing program 2 (id=2529):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYRESOCT], 0x0)
syz_usb_ep_write(r0, 0x7, 0x77, &(0x7f0000000200)="503b798b2fb879d14e3181fa895221cc0a0652ea7a00d54b31b7e7af059e5e7072c747079f48403a9a97d08b41fd87b620af05efc7d69585c4425279d0050d72c4e4ed173a0c28824b99ee9f633c9caa3d1f847f61b02e0bf407d8ae31837b5a7d65dbb1809cc164027be9b8624aadd8d7e473fb44162a")
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000280)=ANY=[@ANYBLOB="0005010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000400)={0x2c, r1, 0x303, 0x70bd26, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10, 0x4b}}}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4045}, 0x14014)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r3, 0x0, 0xd0, 0x0, 0x0)
r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xffffffff, 0x1e5}, &(0x7f00000001c0), &(0x7f0000000080), &(0x7f0000000140))
io_uring_register$IORING_REGISTER_QUERY(r4, 0x23, &(0x7f0000000ac0)=[{0x0, &(0x7f0000000680)="02a0", 0x0, 0x2}], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x40, 0x24, 0xae, {0xae, 0x23, "f76d7329aacdd5963a16cc5ecb1d3b9613183ccfbf88465d3e3509235fcebd5aab7d1fa6d74ee15f2a35abd93e2ddca3a3a7d674c1318bb898617422425fb6a6f23f513feff05bd84145dd6ddc3a805013f537dd4f63aca6c0346f84abebd0be03d61556f66603f27e2a5ce25e0ac37b6acb03d6cb588e043790b8a46b03d69f3dd288937844c7e635747676b906c54494961cac309bf1e3e88853078259d359bc23fdbb8abea6356ed479e6"}}, &(0x7f0000000100)={0x0, 0x3, 0x30, @string={0x30, 0x3, "1f17a8846a4a3e66d07087219690a2e0605cb48aec74dd2a8c84778ce0d0f9ba4d132e104222c15b18c70d330de8"}}}, &(0x7f00000006c0)={0x2c, &(0x7f0000000480)={0x0, 0x12, 0xca, "5cd66ae666dbba89c75754f77f55bc7647378d6d68192f532d68d9144ad8632be6d844537a89140141f82c90e0139501b38787dce0428cae899424ae9209412bf4c1e2caa698d23c53bb9c95a72557d28e74b954acabe4d3a413297dfb8d420555540e7603a5a5fe4bb0f6ef5161ca1687895be1fa81a0fc361e2b09825f27a3e2c0fe1f5876b837e5d1fc72e62f80a7b7c8cd6f6dcee3522201edcb3042ddb152e03c586f84650d8de249ae6a6cd27dd01d7aaa9c8475dd80e17ec6b5c1057395724d9faf31116d5fb8"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000600)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000640)=ANY=[@ANYBLOB="c00506000000076299e574b1"], &(0x7f0000000680)={0x40, 0x5, 0x1, 'o'}})
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r5, 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
dup2(r6, r8)
ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, 0x0)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x2, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x1)
syz_open_dev$video4linux(&(0x7f0000000040), 0xff, 0x800)
connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r9, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff)

405.484239ms ago: executing program 1 (id=2530):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x804, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)=<r2=>0x0)
r3 = epoll_create1(0x0)
kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000300)={r3, r0, 0xeda})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$tipc(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0)
landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) (async)
r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
landlock_restrict_self(r6, 0x5) (async)
landlock_restrict_self(r6, 0x5)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x200000, 0x0) (async)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x200000, 0x0)
recvmsg(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x36}, 0x41fe)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x2, 0x3, 0x6) (async)
r7 = socket(0x2, 0x3, 0x6)
r8 = syz_open_dev$vim2m(&(0x7f0000000280), 0x2, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000040)={0x1, @pix_mp={0xffffffe7, 0x0, 0x32314247, 0x0, 0xa, [{0x5ae, 0x6}, {0x0, 0xfffffffd}, {0x0, 0xae}, {0x1}, {0x0, 0x1}, {0x0, 0xbfe}, {}, {0x0, 0x1}]}})
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r7, @ANYBLOB='\a'], 0x0)

320.404233ms ago: executing program 4 (id=2531):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x1) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0xd, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r2], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) (async)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES32=r1, @ANYRESHEX=r1], 0x48) (async)
unshare(0x20060680)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r4, 0x0, 0x1a, 0x0, 0x0) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = socket(0x848000000015, 0x805, 0x0)
sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) (async)
bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r5, 0x0, 0x0)
rseq(&(0x7f0000002340), 0x20, 0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f0000000380)={0x0, 0x989680}, 0x0, 0x0) (async, rerun: 32)
setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@private=0xa010102, @in=@dev={0xac, 0x14, 0x14, 0x43}, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x1, 0x0, 0x4, 0x0, 0xfffffffffffffff8, 0x2e, 0x6}, {0x0, 0x0, 0x400000003, 0x5}, 0xfffffffc, 0x0, 0x1, 0x1, 0x3, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x1, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) (async, rerun: 32)
pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x80) (async)
sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x1c) (async, rerun: 64)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000005001e"], 0x24}}, 0x0) (async, rerun: 64)
r8 = epoll_create1(0x80000)
r9 = signalfd4(r2, &(0x7f00000000c0)={[0x4452]}, 0x8, 0x80000)
r10 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="f68f19647cececf2050b3718000000000300000009218100030122280009fd1c24fd0400000000000000000000000000000000000000feebb062e6e6a62e0860b80317a515416dbd4e35572cb25a579603c14eff3250d8a4112fec73c386ef7d28"], 0x0)
syz_usb_control_io$hid(r10, 0x0, 0x0) (async)
syz_usb_control_io(r10, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="202228000000280ac263138526792c00000000918d0fb74237ccee446c6b88e78881ce92e3333ac80c55b0ae7414"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000100)={0xc000000b}) (async)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, &(0x7f0000000200)={0xb2}, 0x4)
signalfd4(r9, &(0x7f0000000140)={[0xfffffffffffffff9]}, 0x8, 0x0) (async)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001b61e308d016a91052300102030109021b0001000000000904000001ff7f8800090503"], 0x0)

135.337222ms ago: executing program 4 (id=2532):
r0 = socket$unix(0x1, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000000000000000000001500f7ffffff00019500800000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bind$unix(r0, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xf}, @generic={0x5f}, @initr0, @exit]}, &(0x7f0000000000)='syzkaller\x00'}, 0x80)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e9780000000000dbdf250a0000000000000008000500", @ANYRES32], 0x20}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@getnexthop={0x18, 0x76, 0xb0d, 0x4000, 0x0, {0x3}}, 0x18}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000076000d0b"], 0x18}}, 0x0)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ptrace$setsig(0x4203, 0x0, 0x72d8, &(0x7f0000000000)={0x15, 0x0, 0x899d})
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r3=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r2, 0x3b88, &(0x7f0000000200)={0xc, r3})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r2, 0x3b70, &(0x7f0000000000)={0x48})
bind$unix(r0, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e)

0s ago: executing program 4 (id=2533):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0xfffd}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3e}]}, @NFT_MSG_NEWSETELEM={0x40, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "fefe"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}, 0x1, 0x0, 0x1000000}, 0x50)

kernel console output (not intermixed with test programs):

][ T5762] usb 1-1: USB disconnect, device number 60
[  709.652684][T12214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1997'.
[  709.661672][T12214] openvswitch: netlink: Flow actions attr not present in new flow.
[  710.001919][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  710.046287][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  710.063643][T12222] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  710.134001][T12224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2000'.
[  710.333720][  T187] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  710.397733][T12238] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2003'.
[  710.503873][  T187] usb 3-1: Using ep0 maxpacket: 32
[  710.531466][  T187] usb 3-1: unable to get BOS descriptor or descriptor too short
[  710.583910][  T187] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 127, changing to 7
[  710.634637][  T187] usb 3-1: New USB device found, idVendor=0582, idProduct=0121, bcdDevice= 0.40
[  710.671310][  T187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  710.704135][ T5753] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  710.718895][  T187] usb 3-1: Product: syz
[  710.738058][  T187] usb 3-1: Manufacturer: ࠒ
[  710.764385][  T187] usb 3-1: SerialNumber: syz
[  710.872449][ T5753] usb 2-1: Using ep0 maxpacket: 8
[  710.901300][ T5753] usb 2-1: unable to get BOS descriptor or descriptor too short
[  710.915300][ T5746] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  710.940783][ T5753] usb 2-1: config 4 interface 0 has no altsetting 0
[  710.969347][ T5753] usb 2-1: string descriptor 0 read error: -22
[  710.987354][ T5753] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  711.011832][ T5753] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  711.039418][  T187] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  711.040839][ T5753] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  711.054836][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  711.077686][  T187] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  711.116065][ T5746] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  711.147053][ T5746] usb 4-1: config 0 has no interfaces?
[  711.157668][ T5746] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  711.175756][ T5753] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  711.196573][ T5746] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  711.206956][ T5753] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  711.217192][ T5746] usb 4-1: Product: syz
[  711.223069][ T5746] usb 4-1: Manufacturer: syz
[  711.228922][ T5753] usb 2-1: media controller created
[  711.270404][ T5746] usb 4-1: config 0 descriptor??
[  711.353755][ T5753] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  711.441384][T12229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2003'.
[  711.458848][  T187] usb 3-1: USB disconnect, device number 58
[  711.486209][T12253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2009'.
[  711.526552][   T30] kauditd_printk_skb: 764 callbacks suppressed
[  711.526573][   T30] audit: type=1400 audit(1784878047.112:1157): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F26090260 pid=12241 comm="syz.3.2005"
[  711.561590][ T7977] udevd[7977]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory
[  711.590037][T12243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  711.628164][T12243] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  711.646046][ T5753] zl10353_read_register: readreg error (reg=127, ret==0)
[  711.670203][ T5762] usb 4-1: USB disconnect, device number 53
[  711.718987][ T7977] udevd[7977]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory
[  711.861042][ T5753] usb 2-1: USB disconnect, device number 49
[  711.868059][T12260] batadv_slave_1: entered promiscuous mode
[  711.879217][   T30] audit: type=1326 audit(1784878047.472:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12259 comm="syz.2.2011" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf6a99de99 code=0x0
[  712.024722][T12264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2012'.
[  712.042692][ T5746] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[  712.081803][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  712.207474][ T5746] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  712.231983][ T5746] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  712.253946][ T5746] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  712.273390][ T5746] usb 1-1: config 0 descriptor??
[  712.498038][T12257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  712.524428][T12257] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  712.660277][T12278] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2018'.
[  712.673945][T12259] batadv_slave_1: left promiscuous mode
[  713.121799][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  713.372535][T12303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  713.411596][T12303] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  714.171818][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  714.231047][T12323] netlink: 'syz.3.2031': attribute type 4 has an invalid length.
[  714.285204][T12326] netlink: 'syz.3.2031': attribute type 4 has an invalid length.
[  714.728724][ T5746] usb 1-1: USB disconnect, device number 61
[  715.201789][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  715.652128][ T5746] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  715.672319][  T187] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  715.772027][ T5358] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  715.834245][ T5746] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[  715.845317][  T187] usb 2-1: Using ep0 maxpacket: 32
[  715.855657][  T187] usb 2-1: unable to get BOS descriptor or descriptor too short
[  715.874965][  T187] usb 2-1: config 12 has an invalid interface number: 172 but max is 0
[  715.881950][ T5746] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 115, changing to 7
[  715.897523][  T187] usb 2-1: config 12 has no interface number 0
[  715.915036][  T187] usb 2-1: config 12 interface 172 altsetting 13 has an invalid descriptor for endpoint zero, skipping
[  715.934081][ T5746] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40
[  715.942453][ T5358] usb 3-1: Using ep0 maxpacket: 32
[  715.948655][  T187] usb 2-1: config 12 interface 172 altsetting 13 endpoint 0xD has invalid maxpacket 536, setting to 64
[  715.953203][ T5746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  715.963954][  T187] usb 2-1: config 12 interface 172 altsetting 13 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[  715.980010][  T187] usb 2-1: config 12 interface 172 has no altsetting 0
[  715.987453][ T5358] usb 3-1: unable to get BOS descriptor or descriptor too short
[  715.998582][ T5358] usb 3-1: config 14 has an invalid interface number: 57 but max is 1
[  716.002420][ T5746] usb 4-1: Product: syz
[  716.015328][ T5358] usb 3-1: config 14 has an invalid interface number: 228 but max is 1
[  716.024325][ T5358] usb 3-1: config 14 has no interface number 0
[  716.029021][ T5746] usb 4-1: Manufacturer: syz
[  716.031480][ T5358] usb 3-1: config 14 has no interface number 1
[  716.035603][ T5358] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  716.055358][ T5358] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  716.068164][  T187] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a97, bcdDevice=b2.7b
[  716.071938][ T5746] usb 4-1: SerialNumber: syz
[  716.080139][  T187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  716.090641][  T187] usb 2-1: Product: ☽㋥㑋놑̈́걿祪䏪쐝훓쒩ໞâﾝႽ닆髿뒿쎡℗⎢爐㔓੦༦臃鞈躺룯겕媯呬ᑒ㯲踎ﲁ䚐⚚
[  716.107215][ T5358] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  716.120330][ T5358] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  716.150902][ T5358] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  716.168660][ T5358] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  716.182788][ T5358] usb 3-1: config 14 interface 57 has no altsetting 0
[  716.189726][ T5358] usb 3-1: config 14 interface 228 has no altsetting 0
[  716.203279][ T5358] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  716.214259][ T5358] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  716.223124][ T5358] usb 3-1: Product: syz
[  716.227688][ T5358] usb 3-1: Manufacturer: syz
[  716.232994][ T5358] usb 3-1: SerialNumber: syz
[  716.241785][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  716.447909][  T187] usb 2-1: USB disconnect, device number 50
[  716.636030][ T5746] usb 4-1: 1:1: cannot get freq (v2/v3): err -71
[  716.650385][ T5746] usb 4-1: 2:1: cannot get freq (v2/v3): err -71
[  716.673773][ T5358] legousbtower 3-1:14.57: interrupt endpoints not found
[  716.710472][T12355] program syz.0.2043 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  716.805293][ T5746] usb 4-1: USB disconnect, device number 54
[  717.086508][ T7976] udevd[7976]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  717.102770][ T5358] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 0.0 build 0
[  717.140351][ T5358] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[  717.282901][   T10] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[  717.291794][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  717.451840][   T10] usb 1-1: Using ep0 maxpacket: 32
[  717.468485][   T10] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  717.510371][   T10] usb 1-1: config 5 has 0 interfaces, different from the descriptor's value: 1
[  717.550425][   T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=120a, bcdDevice=7b.2d
[  717.580492][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  717.608828][   T10] usb 1-1: Product: syz
[  717.626635][   T10] usb 1-1: Manufacturer: syz
[  717.634221][ T5746] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  717.654367][   T10] usb 1-1: SerialNumber: syz
[  717.816979][ T5746] usb 4-1: unable to get BOS descriptor or descriptor too short
[  717.843306][ T5746] usb 4-1: config index 0 descriptor too short (expected 26766, got 142)
[  717.863665][ T5746] usb 4-1: config 1 has too many interfaces: 173, using maximum allowed: 32
[  717.910912][ T5746] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  717.966986][  T187] usb 3-1: USB disconnect, device number 59
[  717.967190][    C1] usb 3-1: tower_interrupt_in_callback: usb_submit_urb failed (-19)
[  717.981671][ T5746] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 173
[  718.003157][ T5746] usb 4-1: string descriptor 0 read error: -22
[  718.019939][ T5746] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  718.054680][ T5746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  718.104212][  T187] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected
[  718.169130][ T5746] usb 4-1: selecting invalid altsetting 1
[  718.199345][ T5746] usb 4-1: unit 6 not found!
[  718.322218][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  718.346688][ T5746] usb 4-1: 2:0: failed to get current value for ch 0 (-32)
[  718.560328][T12381] bridge0: port 2(bridge_slave_1) entered disabled state
[  718.568325][T12381] bridge0: port 1(bridge_slave_0) entered disabled state
[  718.584333][T12369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  718.620558][T12369] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  719.046229][ T5746] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  719.084870][ T5746] usb 4-1: USB disconnect, device number 55
[  719.361810][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  719.528070][T12381] vlan2: left promiscuous mode
[  719.534793][T12381] bridge0: left promiscuous mode
[  719.548026][T12381] ip6gre1: left promiscuous mode
[  719.559178][   T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  719.612775][   T36] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  719.647329][   T36] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  719.684990][   T36] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  719.981092][T12394] input: syz0 as /devices/virtual/input/input25
[  720.289160][T12400] program syz.3.2056 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  720.325550][T12402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  720.389441][T12402] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  720.404311][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  720.445561][T12402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  720.465185][   T10] apple-mfi-fastcharge 1-1: USB disconnect, device number 62
[  720.487644][T12402] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  720.891845][   T10] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  721.053823][   T10] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  721.073158][   T10] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  721.100245][   T10] usb 1-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config
[  721.142355][   T10] usb 1-1: config 220 has no interface number 2
[  721.168071][   T10] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  721.203689][   T10] usb 1-1: config 220 interface 0 has no altsetting 0
[  721.210745][   T10] usb 1-1: config 220 interface 76 has no altsetting 0
[  721.247634][   T10] usb 1-1: config 220 interface 1 has no altsetting 0
[  721.284778][   T10] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  721.316175][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  721.339140][   T10] usb 1-1: Product: syz
[  721.358523][   T10] usb 1-1: Manufacturer: syz
[  721.382820][   T10] usb 1-1: SerialNumber: syz
[  721.441779][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  721.655368][   T10] usb 1-1: selecting invalid altsetting 0
[  721.692198][   T10] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  721.708000][   T10] uvcvideo 1-1:220.0: No valid video chain found.
[  721.750506][   T10] usb 1-1: selecting invalid altsetting 0
[  721.784903][   T10] usbtest 1-1:220.1: probe with driver usbtest failed with error -22
[  721.851494][   T10] usb 1-1: USB disconnect, device number 63
[  722.269013][T12446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  722.300365][T12446] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  722.481787][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  722.574192][T12453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2075'.
[  722.602466][ T5762] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  722.772876][ T5762] usb 1-1: Using ep0 maxpacket: 32
[  722.793350][ T5762] usb 1-1: unable to get BOS descriptor or descriptor too short
[  722.826227][ T5762] usb 1-1: config 12 has an invalid interface number: 172 but max is 0
[  722.849006][ T5762] usb 1-1: config 12 has no interface number 0
[  722.872615][ T5762] usb 1-1: config 12 interface 172 altsetting 13 has an invalid descriptor for endpoint zero, skipping
[  722.903035][T12446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  722.916299][ T5762] usb 1-1: config 12 interface 172 altsetting 13 endpoint 0xD has invalid maxpacket 536, setting to 64
[  722.922409][   T10] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  722.935585][T12446] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  722.945973][ T5762] usb 1-1: config 12 interface 172 altsetting 13 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[  722.978494][ T5762] usb 1-1: config 12 interface 172 has no altsetting 0
[  723.001470][ T5762] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a97, bcdDevice=b2.7b
[  723.021231][ T5762] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  723.040115][ T5762] usb 1-1: Product: ☽㋥㑋놑̈́걿祪䏪쐝훓쒩ໞâﾝႽ닆髿뒿쎡℗⎢爐㔓੦༦臃鞈躺룯겕媯呬ᑒ㯲踎ﲁ䚐⚚
[  723.091861][   T10] usb 2-1: device descriptor read/64, error -71
[  723.318320][ T5762] usb 1-1: USB disconnect, device number 64
[  723.351850][   T10] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  723.501894][   T10] usb 2-1: device descriptor read/64, error -71
[  723.521780][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  723.622132][   T10] usb usb2-port1: attempt power cycle
[  723.872577][T12465] loop2: detected capacity change from 0 to 7
[  723.896701][T12465] Dev loop2: unable to read RDB block 7
[  723.910645][T12465]  loop2: unable to read partition table
[  723.927445][T12465] loop2: partition table beyond EOD, truncated
[  723.944190][T12465] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  723.972063][   T10] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  724.023140][   T10] usb 2-1: device descriptor read/8, error -71
[  724.281940][   T10] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  724.334841][   T10] usb 2-1: device descriptor read/8, error -71
[  724.432862][ T5762] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  724.462374][   T10] usb usb2-port1: unable to enumerate USB device
[  724.561780][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  724.611916][ T5762] usb 4-1: Using ep0 maxpacket: 16
[  724.627052][ T5762] usb 4-1: unable to get BOS descriptor or descriptor too short
[  724.665720][ T5762] usb 4-1: language id specifier not provided by device, defaulting to English
[  724.698727][ T5762] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40
[  724.711960][  T187] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  724.717758][ T5762] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  724.728160][ T5762] usb 4-1: Product: ‚ꐃ澥͠⬐ꋇǩ䅋嫋5
[  724.735893][ T5762] usb 4-1: SerialNumber: syz
[  724.902521][  T187] usb 3-1: Using ep0 maxpacket: 8
[  724.912675][  T187] usb 3-1: too many configurations: 129, using maximum allowed: 8
[  724.968245][  T187] usb 3-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=e9.c3
[  724.996059][  T187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  725.022010][  T187] usb 3-1: Product: syz
[  725.031802][  T187] usb 3-1: Manufacturer: syz
[  725.041464][  T187] usb 3-1: SerialNumber: syz
[  725.292199][ T5753] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  725.464941][ T5753] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  725.479630][T12497] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  725.487828][ T5753] usb 1-1: config 0 has no interfaces?
[  725.494515][T12498] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  725.495300][ T5753] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  725.523180][ T5753] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  725.563802][ T5753] usb 1-1: config 0 descriptor??
[  725.601782][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  725.618621][ T5762] usb 4-1: BAAD HEADSET ADAPTER c_chmask mismatch
[  725.756858][T12503] gretap1: entered promiscuous mode
[  725.763615][  T187] gspca_main: 0734:043b too many config
[  725.784994][  T187] usb 3-1: USB disconnect, device number 60
[  725.814018][ T5753] usb 1-1: USB disconnect, device number 65
[  725.986159][ T5762] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[  726.038476][ T5762] usb 4-1: USB disconnect, device number 56
[  726.078365][ T7977] udevd[7977]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  726.335090][T12521] program syz.4.2098 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  726.560235][T12523] process 'memfd:-B�N4�Ey�ѧ�S�:)' started with executable stack
[  726.641870][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  726.683131][T12534] SET target dimension over the limit!
[  726.782150][T12539] Cannot find del_set index 2 as target
[  726.803828][T12532] kvm: MWAIT instruction emulated as NOP!
[  726.858581][   T30] audit: type=1326 audit(1784878062.452:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12530 comm="syz.2.2102" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6a99de99 code=0x7ffc0000
[  726.947234][   T30] audit: type=1326 audit(1784878062.452:1160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12530 comm="syz.2.2102" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6a99de99 code=0x7ffc0000
[  727.070929][   T30] audit: type=1326 audit(1784878062.452:1161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12530 comm="syz.2.2102" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6a99de99 code=0x7ffc0000
[  727.179923][   T30] audit: type=1326 audit(1784878062.452:1162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12530 comm="syz.2.2102" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7faf6a99de99 code=0x7ffc0000
[  727.298244][   T30] audit: type=1326 audit(1784878062.452:1163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12530 comm="syz.2.2102" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6a99de99 code=0x7ffc0000
[  727.399689][   T30] audit: type=1326 audit(1784878062.452:1164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12530 comm="syz.2.2102" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6a99de99 code=0x7ffc0000
[  727.481486][   T30] audit: type=1326 audit(1784878062.452:1165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12530 comm="syz.2.2102" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6a99de99 code=0x7ffc0000
[  727.570201][   T30] audit: type=1326 audit(1784878062.482:1166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12530 comm="syz.2.2102" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf6a99de99 code=0x7ffc0000
[  727.658651][   T30] audit: type=1326 audit(1784878062.482:1167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12530 comm="syz.2.2102" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6a99de99 code=0x7ffc0000
[  727.683461][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  727.801196][   T30] audit: type=1326 audit(1784878062.482:1168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12530 comm="syz.2.2102" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf6a99de99 code=0x7ffc0000
[  727.849251][T12553] kvm: faulting far call emulation tainted memory
[  727.860821][T12553] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  728.623492][T12587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2122'.
[  728.633211][T12587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2122'.
[  728.646440][T12588] FAULT_INJECTION: forcing a failure.
[  728.646440][T12588] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  728.677654][T12589] IPv6: NLM_F_CREATE should be specified when creating new route
[  728.701297][T12589] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  728.707448][T12588] CPU: 0 UID: 0 PID: 12588 Comm: syz.4.2124 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  728.707566][T12588] Tainted: [L]=SOFTLOCKUP
[  728.707586][T12588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  728.707639][T12588] Call Trace:
[  728.707660][T12588]  <TASK>
[  728.707681][T12588]  dump_stack_lvl+0xe8/0x150
[  728.707781][T12588]  should_fail_ex+0x40c/0x560
[  728.707871][T12588]  _copy_from_user+0x2d/0xb0
[  728.707954][T12588]  ___sys_sendmsg+0x1c6/0x360
[  728.708015][T12588]  ? __lock_acquire+0x683/0x2cf0
[  728.708107][T12588]  ? __pfx____sys_sendmsg+0x10/0x10
[  728.708261][T12588]  ? __fget_files+0x2a/0x420
[  728.708334][T12588]  ? __fget_files+0x3a2/0x420
[  728.708423][T12588]  __x64_sys_sendmsg+0x1b1/0x290
[  728.708486][T12588]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  728.708581][T12588]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  728.708638][T12588]  do_syscall_64+0x174/0x580
[  728.708692][T12588]  ? trace_irq_disable+0x3b/0x140
[  728.708764][T12588]  ? clear_bhb_loop+0x40/0x90
[  728.708843][T12588]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  728.708903][T12588] RIP: 0033:0x7f4833f9de99
[  728.708947][T12588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  728.708998][T12588] RSP: 002b:00007f4834db5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  728.709058][T12588] RAX: ffffffffffffffda RBX: 00007f4834225fa0 RCX: 00007f4833f9de99
[  728.709071][T12588] RDX: 0000000000000080 RSI: 0000200000000080 RDI: 0000000000000006
[  728.709082][T12588] RBP: 00007f4834db5090 R08: 0000000000000000 R09: 0000000000000000
[  728.709092][T12588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  728.709102][T12588] R13: 00007f4834226038 R14: 00007f4834225fa0 R15: 00007f483434fa48
[  728.709127][T12588]  </TASK>
[  728.895488][T12589] IPv6: NLM_F_CREATE should be set when creating new route
[  728.904629][T12589] IPv6: NLM_F_CREATE should be set when creating new route
[  728.911982][T12589] IPv6: NLM_F_CREATE should be set when creating new route
[  728.924330][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  728.936607][T12591] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2123'.
[  729.082159][ T5762] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  729.242121][ T5762] usb 1-1: Using ep0 maxpacket: 32
[  729.253847][ T5762] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  729.265803][ T5762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  729.275150][ T5358] usb 4-1: new full-speed USB device number 57 using dummy_hcd
[  729.303903][ T5762] usb 1-1: config 0 descriptor??
[  729.388988][T12609] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2128'.
[  729.433968][T12612] xt_CT: You must specify a L4 protocol and not use inversions on it
[  729.465033][T12592] netlink: 'syz.3.2125': attribute type 2 has an invalid length.
[  729.473491][T12592] netlink: 'syz.3.2125': attribute type 8 has an invalid length.
[  729.489672][T12592] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2125'.
[  729.540416][T12583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  729.573141][T12583] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  729.626366][T12583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  729.659265][T12583] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  729.678487][T12583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  729.688930][T12583] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  729.698947][T12583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  729.708881][T12583] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  729.752628][T12583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  729.775568][T12583] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  729.836281][ T5762] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  729.907315][ T5762] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  729.941393][ T5762] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  729.984341][ T5762] usb 1-1: media controller created
[  730.001823][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  730.032884][T12618] bridge0: port 2(bridge_slave_1) entered disabled state
[  730.115726][ T5762] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  730.192313][ T5762] az6027: usb out operation failed. (-71)
[  730.200188][ T5762] az6027: usb out operation failed. (-71)
[  730.206161][ T5762] stb0899_attach: Driver disabled by Kconfig
[  730.216688][ T5762] az6027: no front-end attached
[  730.216688][ T5762] 
[  730.236050][ T5762] az6027: usb out operation failed. (-71)
[  730.247281][ T5762] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  730.260264][ T5762] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input26
[  730.284392][ T5762] dvb-usb: schedule remote query interval to 400 msecs.
[  730.291640][ T5762] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  730.354269][ T5762] usb 1-1: USB disconnect, device number 66
[  730.368393][T12633] loop4: detected capacity change from 0 to 7
[  730.376108][T12618] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  730.388775][T12633] Dev loop4: unable to read RDB block 7
[  730.400940][T12633]  loop4: unable to read partition table
[  730.407905][T12633] loop4: partition table beyond EOD, truncated
[  730.408858][T12618] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  730.429125][T12633] loop_reread_partitions: partition scan of loop4 (�被x������ ) failed (rc=-5)
[  730.520957][ T5762] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  730.545867][T12618] gretap1: left promiscuous mode
[  730.560103][T12618] bond1: left promiscuous mode
[  730.594560][T12618] vlan3: left promiscuous mode
[  730.600952][T12618] bridge0: left promiscuous mode
[  730.610049][T12618] vlan3: left allmulticast mode
[  730.616149][T12618] bridge0: left allmulticast mode
[  730.629514][ T5812] netdevsim netdevsim2 : unset [1, 0] type 2 family 0 port 6081 - 0
[  730.648450][ T5812] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  730.672677][ T5812] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  730.695344][ T5812] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  730.877883][T12640] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2139'.
[  730.921673][T12644] binder: 12642:12644 ioctl c00c620f 200000000200 returned -22
[  731.041809][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  731.339307][T12652] FAULT_INJECTION: forcing a failure.
[  731.339307][T12652] name failslab, interval 1, probability 0, space 0, times 0
[  731.386282][T12652] CPU: 0 UID: 0 PID: 12652 Comm: syz.4.2144 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  731.386318][T12652] Tainted: [L]=SOFTLOCKUP
[  731.386326][T12652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  731.386340][T12652] Call Trace:
[  731.386348][T12652]  <TASK>
[  731.386357][T12652]  dump_stack_lvl+0xe8/0x150
[  731.386398][T12652]  should_fail_ex+0x40c/0x560
[  731.386438][T12652]  should_failslab+0xa8/0x100
[  731.386463][T12652]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  731.386483][T12652]  ? security_inode_alloc+0x39/0x310
[  731.386499][T12652]  ? security_inode_alloc+0x39/0x310
[  731.386546][T12652]  security_inode_alloc+0x39/0x310
[  731.386572][T12652]  inode_init_always_gfp+0x97e/0xd30
[  731.386605][T12652]  alloc_inode+0x82/0x1b0
[  731.386635][T12652]  new_inode+0x1f/0x170
[  731.386657][T12652]  binderfs_create_dir+0x8d/0x300
[  731.386684][T12652]  binderfs_fill_super+0xbcf/0x1000
[  731.386712][T12652]  ? __pfx_binderfs_fill_super+0x10/0x10
[  731.386761][T12652]  ? __pfx_binderfs_fill_super+0x10/0x10
[  731.386805][T12652]  get_tree_nodev+0xbb/0x150
[  731.386840][T12652]  vfs_get_tree+0x92/0x2a0
[  731.386865][T12652]  vfs_cmd_create+0xa2/0x200
[  731.386893][T12652]  __se_sys_fsconfig+0x6b9/0x810
[  731.386925][T12652]  ? __pfx___se_sys_fsconfig+0x10/0x10
[  731.386947][T12652]  ? ksys_write+0x242/0x270
[  731.386983][T12652]  ? __pfx_ksys_write+0x10/0x10
[  731.387023][T12652]  ? __x64_sys_fsconfig+0x20/0xc0
[  731.387047][T12652]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  731.387072][T12652]  do_syscall_64+0x174/0x580
[  731.387096][T12652]  ? clear_bhb_loop+0x40/0x90
[  731.387124][T12652]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  731.387147][T12652] RIP: 0033:0x7f4833f9de99
[  731.387168][T12652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  731.387187][T12652] RSP: 002b:00007f4834db5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  731.387209][T12652] RAX: ffffffffffffffda RBX: 00007f4834225fa0 RCX: 00007f4833f9de99
[  731.387225][T12652] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000c
[  731.387238][T12652] RBP: 00007f4834db5090 R08: 0000000000000000 R09: 0000000000000000
[  731.387252][T12652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  731.387264][T12652] R13: 00007f4834226038 R14: 00007f4834225fa0 R15: 00007f483434fa48
[  731.387300][T12652]  </TASK>
[  732.091822][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  732.697792][T12662] Cannot find del_set index 2 as target
[  733.121845][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  734.161858][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  734.485198][ T5358] usb 4-1: unable to get BOS descriptor or descriptor too short
[  734.496777][ T5358] usb 4-1: unable to read config index 0 descriptor/start: -32
[  734.515738][ T5358] usb 4-1: chopping to 0 config(s)
[  734.530714][ T5358] usb 4-1: can't read configurations, error -32
[  735.201794][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  735.381981][ T5358] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  735.554556][ T5358] usb 4-1: Using ep0 maxpacket: 8
[  735.569967][T12693] sg_write: data in/out 413696/136 bytes for SCSI command 0x0-- guessing data in;
[  735.569967][T12693]    program syz.0.2159 not setting count and/or reply_len properly
[  735.604752][ T5358] usb 4-1: config index 0 descriptor too short (expected 30, got 18)
[  735.638085][ T5358] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  735.665426][ T5358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  735.697282][ T5358] usb 4-1: Product: syz
[  735.721075][ T5358] usb 4-1: Manufacturer: syz
[  735.731871][ T5746] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  735.741191][ T5358] usb 4-1: SerialNumber: syz
[  735.775873][ T5358] usb 4-1: config 0 descriptor??
[  735.816214][ T5358] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  735.847732][ T5358] usb 4-1: setting power ON
[  735.864935][ T5358] dvb-usb: bulk message failed: -22 (2/0)
[  735.903086][ T5746] usb 2-1: device descriptor read/64, error -71
[  735.935706][ T5358] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  735.976585][ T5358] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  736.007502][ T5358] usb 4-1: media controller created
[  736.078450][ T5358] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  736.119917][T12695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  736.156431][T12695] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  736.174615][ T5746] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  736.191181][ T5358] usb 4-1: selecting invalid altsetting 6
[  736.212991][ T5358] usb 4-1: digital interface selection failed (-22)
[  736.233839][ T5358] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  736.251814][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  736.262185][ T5358] usb 4-1: setting power OFF
[  736.280786][ T5358] dvb-usb: bulk message failed: -22 (2/0)
[  736.303194][ T5358] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  736.323174][ T5358] (NULL device *): no alternate interface
[  736.333366][ T5746] usb 2-1: device descriptor read/64, error -71
[  736.458644][ T5358] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  736.485685][ T5746] usb usb2-port1: attempt power cycle
[  736.791497][T12677] bridge0: port 2(bridge_slave_1) entered disabled state
[  736.842441][ T5746] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  736.873807][ T5746] usb 2-1: device descriptor read/8, error -71
[  737.134957][ T5746] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  737.182828][ T5746] usb 2-1: device descriptor read/8, error -71
[  737.281794][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  737.303349][ T5746] usb usb2-port1: unable to enumerate USB device
[  737.446471][T12677] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  737.522062][T12677] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  738.264193][T12677] gretap1: left promiscuous mode
[  738.283368][T12677] hsr1: left promiscuous mode
[  738.321801][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  738.348284][T12677] vlan4: left promiscuous mode
[  738.362516][T12677] vlan4: left allmulticast mode
[  738.368968][T12677] bridge0: left allmulticast mode
[  738.446634][T12714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  738.461283][ T5753] usb 4-1: USB disconnect, device number 58
[  738.492403][T12714] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  738.493613][T12705] bridge0: port 1(bridge_slave_0) entered disabled state
[  738.516623][T12700] overlayfs: missing 'lowerdir'
[  738.539040][T12705] bridge_slave_0 (unregistering): left allmulticast mode
[  738.559100][T12705] bridge_slave_0 (unregistering): left promiscuous mode
[  738.596531][T12705] bridge0: port 1(bridge_slave_0) entered disabled state
[  738.648331][T12721] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2164'.
[  738.648336][T12720] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2164'.
[  738.695472][ T1180] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0
[  738.719140][ T1180] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  738.837443][ T1180] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  738.854204][ T1180] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  738.971910][T12729] syzkaller0: entered promiscuous mode
[  738.991767][T12729] syzkaller0: entered allmulticast mode
[  739.016953][T12729] tipc: Started in network mode
[  739.034011][T12729] tipc: Node identity 0218138cd3ed, cluster identity 4711
[  739.052863][T12729] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  739.073616][T12728] tipc: Resetting bearer <eth:syzkaller0>
[  739.135944][T12728] tipc: Disabling bearer <eth:syzkaller0>
[  739.361789][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  739.389226][T12735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  739.414168][T12735] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  739.639213][T12741] FAULT_INJECTION: forcing a failure.
[  739.639213][T12741] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  739.667882][T12741] CPU: 1 UID: 0 PID: 12741 Comm: syz.3.2173 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  739.667916][T12741] Tainted: [L]=SOFTLOCKUP
[  739.667923][T12741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  739.667935][T12741] Call Trace:
[  739.667943][T12741]  <TASK>
[  739.667952][T12741]  dump_stack_lvl+0xe8/0x150
[  739.667989][T12741]  should_fail_ex+0x40c/0x560
[  739.668020][T12741]  _copy_from_iter+0x1d3/0x1660
[  739.668046][T12741]  ? kmem_cache_alloc_node_noprof+0x111/0x610
[  739.668074][T12741]  ? rcu_is_watching+0x15/0xb0
[  739.668108][T12741]  ? trace_kmem_cache_alloc+0x29/0xe0
[  739.668134][T12741]  ? kmem_cache_alloc_node_noprof+0x3b8/0x610
[  739.668160][T12741]  ? __pfx__copy_from_iter+0x10/0x10
[  739.668187][T12741]  ? __alloc_skb+0x276/0x7a0
[  739.668226][T12741]  ? __alloc_skb+0x276/0x7a0
[  739.668262][T12741]  ? netlink_sendmsg+0x650/0xb40
[  739.668285][T12741]  ? skb_put+0x112/0x210
[  739.668319][T12741]  netlink_sendmsg+0x6c0/0xb40
[  739.668352][T12741]  ? __pfx_netlink_sendmsg+0x10/0x10
[  739.668380][T12741]  ? aa_sock_msg_perm+0xf1/0x1b0
[  739.668409][T12741]  ? __pfx_netlink_sendmsg+0x10/0x10
[  739.668431][T12741]  sock_sendmsg_nosec+0x13a/0x180
[  739.668462][T12741]  ____sys_sendmsg+0x54e/0x850
[  739.668490][T12741]  ? __pfx_____sys_sendmsg+0x10/0x10
[  739.668524][T12741]  ? import_iovec+0x73/0xa0
[  739.668559][T12741]  ___sys_sendmsg+0x2a5/0x360
[  739.668581][T12741]  ? __lock_acquire+0x683/0x2cf0
[  739.668615][T12741]  ? __pfx____sys_sendmsg+0x10/0x10
[  739.668672][T12741]  ? __fget_files+0x2a/0x420
[  739.668699][T12741]  ? __fget_files+0x3a2/0x420
[  739.668738][T12741]  __x64_sys_sendmsg+0x1b1/0x290
[  739.668763][T12741]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  739.668803][T12741]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  739.668826][T12741]  do_syscall_64+0x174/0x580
[  739.668846][T12741]  ? trace_irq_disable+0x3b/0x140
[  739.668871][T12741]  ? clear_bhb_loop+0x40/0x90
[  739.668898][T12741]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  739.668920][T12741] RIP: 0033:0x7f139b19de99
[  739.668940][T12741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  739.668959][T12741] RSP: 002b:00007f139bf85028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  739.668981][T12741] RAX: ffffffffffffffda RBX: 00007f139b425fa0 RCX: 00007f139b19de99
[  739.668996][T12741] RDX: 0000000000000080 RSI: 0000200000000080 RDI: 0000000000000006
[  739.669009][T12741] RBP: 00007f139bf85090 R08: 0000000000000000 R09: 0000000000000000
[  739.669022][T12741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  739.669035][T12741] R13: 00007f139b426038 R14: 00007f139b425fa0 R15: 00007f139b54fa48
[  739.669068][T12741]  </TASK>
[  739.680176][T12742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2172'.
[  739.739705][ T5762] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  739.969247][T12742] hsr_slave_0: left promiscuous mode
[  739.993894][T12742] hsr_slave_1: left promiscuous mode
[  740.392674][ T5762] usb 2-1: Using ep0 maxpacket: 16
[  740.403290][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  740.424208][ T5762] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  740.457024][ T5762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  740.476256][ T5762] usb 2-1: config 0 descriptor??
[  740.519350][ T5762] gspca_main: sonixj-2.14.0 probing 0471:0327
[  740.638456][T12764] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  740.702141][ T5668] usb 3-1: new full-speed USB device number 61 using dummy_hcd
[  740.874983][ T5668] usb 3-1: unable to get BOS descriptor or descriptor too short
[  740.915726][ T5668] usb 3-1: not running at top speed; connect to a high speed hub
[  740.977113][ T5668] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 0.40
[  741.030708][ T5668] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  741.083413][ T5668] usb 3-1: Product: syz
[  741.092497][ T5668] usb 3-1: Manufacturer: syz
[  741.115203][ T5668] usb 3-1: SerialNumber: syz
[  741.387950][T12783] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
[  741.416124][T12784] loop4: detected capacity change from 0 to 7
[  741.443072][T12784] Dev loop4: unable to read RDB block 7
[  741.451805][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  741.477561][T12784]  loop4: unable to read partition table
[  741.500084][ T5668] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  741.520619][T12784] loop4: partition table beyond EOD, truncated
[  741.561562][T12784] loop_reread_partitions: partition scan of loop4 (�被x������ ) failed (rc=-5)
[  741.650018][T12788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2187'.
[  741.691300][T12788] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2187'.
[  741.817456][ T5668] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2
[  741.881156][ T5668] usb 3-1: USB disconnect, device number 61
[  741.997238][ T7977] udevd[7977]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  742.481805][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  742.523671][ T5668] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  742.687231][ T5668] usb 3-1: device descriptor read/64, error -71
[  743.024474][ T5668] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  743.223939][ T5668] usb 3-1: device descriptor read/64, error -71
[  743.389856][ T5668] usb usb3-port1: attempt power cycle
[  743.522283][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  743.761985][T12736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  743.806796][T12736] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  743.852756][ T5762] gspca_sonixj: reg_w1 err -110
[  743.870147][T12736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  743.915528][ T5668] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  743.940857][ T5762] sonixj 2-1:0.0: probe with driver sonixj failed with error -110
[  743.965329][T12736] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  744.023403][ T5668] usb 3-1: device descriptor read/8, error -71
[  744.071604][ T5762] usb 2-1: USB disconnect, device number 59
[  744.332340][ T5668] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  744.449241][ T5668] usb 3-1: device descriptor read/8, error -71
[  744.561834][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  744.620862][ T5668] usb usb3-port1: unable to enumerate USB device
[  744.797921][T12821] fuse: Bad value for 'fd'
[  745.093603][ T5358] usb 4-1: new full-speed USB device number 59 using dummy_hcd
[  745.309731][ T5358] usb 4-1: unable to get BOS descriptor or descriptor too short
[  745.362528][ T5358] usb 4-1: not running at top speed; connect to a high speed hub
[  745.415892][ T5358] usb 4-1: config 9 has an invalid interface number: 124 but max is 0
[  745.428088][T12828] bridge_slave_0 (unregistering): left allmulticast mode
[  745.451342][T12828] bridge_slave_0 (unregistering): left promiscuous mode
[  745.458681][ T5358] usb 4-1: config 9 has no interface number 0
[  745.486946][ T5358] usb 4-1: config 9 interface 124 altsetting 195 endpoint 0x5 has invalid maxpacket 1024, setting to 64
[  745.499899][T12828] bridge0: port 1(bridge_slave_0) entered disabled state
[  745.539618][ T5358] usb 4-1: config 9 interface 124 altsetting 195 endpoint 0xB has an invalid bInterval 0, changing to 4
[  745.611950][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  745.631157][ T5358] usb 4-1: config 9 interface 124 altsetting 195 endpoint 0xB has invalid wMaxPacketSize 0
[  745.701478][ T5358] usb 4-1: config 9 interface 124 has no altsetting 0
[  745.757678][T12833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  745.780441][ T5358] usb 4-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=42.b4
[  745.826660][T12833] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  745.858522][ T5358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  745.913430][ T5358] usb 4-1: Product: syz
[  745.947652][ T5358] usb 4-1: Manufacturer: syz
[  745.970039][T12835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  746.029161][ T5358] usb 4-1: SerialNumber: syz
[  746.034915][T12835] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  746.182942][T12837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  746.246711][T12837] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  746.341653][T12821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2198'.
[  746.641796][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  747.203433][ T1316] ieee802154 phy0 wpan0: encryption failed: -22
[  747.210038][ T1316] ieee802154 phy1 wpan1: encryption failed: -22
[  747.345822][T12822] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  747.436445][ T5358] usbtest 4-1:9.124: couldn't get endpoints, -71
[  747.482607][ T5358] usbtest 4-1:9.124: probe with driver usbtest failed with error -71
[  747.578739][ T5358] usb 4-1: USB disconnect, device number 59
[  747.682107][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  748.087152][T12860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  748.147848][T12860] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  748.721805][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  748.845341][T12869] netlink: 'syz.3.2211': attribute type 10 has an invalid length.
[  748.882753][T12869] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  748.947666][T12870] netlink: 'syz.3.2211': attribute type 10 has an invalid length.
[  748.995856][T12869] netdevsim netdevsim3 netdevsim1: entered promiscuous mode
[  749.035063][T12869] team0: Port device netdevsim1 added
[  749.077131][T12874] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  749.083709][T12874] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  749.095652][T12870] netdevsim netdevsim3 netdevsim1: left promiscuous mode
[  749.280753][T12870] team0: Port device netdevsim1 removed
[  749.292821][   T50] Bluetooth: hci3: command 0x0406 tx timeout
[  749.330844][T12874] vhci_hcd vhci_hcd.0: Device attached
[  749.365473][T12870] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  749.402182][T12870] netdevsim netdevsim3 netdevsim1: entered promiscuous mode
[  749.412168][T12870] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  749.682261][ T5762] usb 36-1: SetAddress Request (6) to port 0
[  749.732432][ T5762] usb 36-1: new SuperSpeed USB device number 6 using vhci_hcd
[  749.761777][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  750.187562][T12875] vhci_hcd: connection reset by peer
[  750.211294][ T1180] vhci_hcd vhci_hcd.1: stop threads
[  750.269866][ T1180] vhci_hcd vhci_hcd.1: release socket
[  750.337066][ T1180] vhci_hcd vhci_hcd.1: disconnect device
[  750.811821][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  751.841770][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  751.944821][T12921] syzkaller1: entered promiscuous mode
[  751.978252][T12921] syzkaller1: entered allmulticast mode
[  752.228000][T12924] tipc: Enabling of bearer <udp:����> rejected, failed to enable media
[  752.871303][T12940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  752.881892][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  752.935990][T12940] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  753.063103][T12940] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  753.641659][T12954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2233'.
[  753.773061][T12956] FAULT_INJECTION: forcing a failure.
[  753.773061][T12956] name failslab, interval 1, probability 0, space 0, times 0
[  753.815662][T12956] CPU: 1 UID: 0 PID: 12956 Comm: syz.3.2234 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  753.815703][T12956] Tainted: [L]=SOFTLOCKUP
[  753.815709][T12956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  753.815718][T12956] Call Trace:
[  753.815725][T12956]  <TASK>
[  753.815731][T12956]  dump_stack_lvl+0xe8/0x150
[  753.815762][T12956]  should_fail_ex+0x40c/0x560
[  753.815785][T12956]  should_failslab+0xa8/0x100
[  753.815810][T12956]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  753.815829][T12956]  ? security_inode_alloc+0x39/0x310
[  753.815846][T12956]  ? security_inode_alloc+0x39/0x310
[  753.815867][T12956]  security_inode_alloc+0x39/0x310
[  753.815885][T12956]  inode_init_always_gfp+0x97e/0xd30
[  753.815911][T12956]  alloc_inode+0x82/0x1b0
[  753.815930][T12956]  new_inode+0x1f/0x170
[  753.815953][T12956]  binderfs_create_file+0x9d/0x300
[  753.815980][T12956]  binderfs_fill_super+0xc04/0x1000
[  753.816033][T12956]  ? __pfx_binderfs_fill_super+0x10/0x10
[  753.816090][T12956]  ? __pfx_binderfs_fill_super+0x10/0x10
[  753.816112][T12956]  get_tree_nodev+0xbb/0x150
[  753.816138][T12956]  vfs_get_tree+0x92/0x2a0
[  753.816155][T12956]  vfs_cmd_create+0xa2/0x200
[  753.816174][T12956]  __se_sys_fsconfig+0x6b9/0x810
[  753.816196][T12956]  ? __pfx___se_sys_fsconfig+0x10/0x10
[  753.816211][T12956]  ? ksys_write+0x242/0x270
[  753.816237][T12956]  ? __pfx_ksys_write+0x10/0x10
[  753.816265][T12956]  ? __x64_sys_fsconfig+0x20/0xc0
[  753.816281][T12956]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  753.816298][T12956]  do_syscall_64+0x174/0x580
[  753.816314][T12956]  ? trace_irq_disable+0x3b/0x140
[  753.816334][T12956]  ? clear_bhb_loop+0x40/0x90
[  753.816353][T12956]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  753.816368][T12956] RIP: 0033:0x7f139b19de99
[  753.816382][T12956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  753.816395][T12956] RSP: 002b:00007f139bf85028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  753.816411][T12956] RAX: ffffffffffffffda RBX: 00007f139b425fa0 RCX: 00007f139b19de99
[  753.816423][T12956] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000c
[  753.816431][T12956] RBP: 00007f139bf85090 R08: 0000000000000000 R09: 0000000000000000
[  753.816440][T12956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  753.816449][T12956] R13: 00007f139b426038 R14: 00007f139b425fa0 R15: 00007f139b54fa48
[  753.816473][T12956]  </TASK>
[  754.065084][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  754.207581][T12958] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2233'.
[  754.779101][T12966] netlink: 'syz.3.2237': attribute type 1 has an invalid length.
[  754.862091][ T5753] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  754.882869][ T5762] usb 36-1: device descriptor read/8, error -110
[  754.890261][T12966] bond3: entered promiscuous mode
[  754.895500][T12966] bond3: entered allmulticast mode
[  754.903002][T12966] 8021q: adding VLAN 0 to HW filter on device bond3
[  754.909117][T12971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2237'.
[  754.926694][T12968] erspan1: entered allmulticast mode
[  755.007730][T12971] bond3 (unregistering): Released all slaves
[  755.064844][ T5753] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  755.104520][ T5753] usb 3-1: config 0 has no interfaces?
[  755.129231][ T5753] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  755.138602][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  755.215748][ T5753] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  755.254238][ T5753] usb 3-1: config 0 descriptor??
[  755.323567][ T5762] usb usb36-port1: attempt power cycle
[  755.481590][ T5358] usb 3-1: USB disconnect, device number 66
[  755.622554][ T5753] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  755.785987][ T5753] usb 1-1: unable to get BOS descriptor or descriptor too short
[  755.821619][ T5753] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  755.849485][ T5753] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  755.892051][ T5753] usb 1-1: config 1 interface 0 has no altsetting 1
[  755.909179][ T5753] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  755.923333][ T5762] usb usb36-port1: unable to enumerate USB device
[  755.944836][ T5753] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  755.962128][ T5753] usb 1-1: Product: syz
[  755.971977][ T5753] usb 1-1: Manufacturer: syz
[  755.982147][ T5753] usb 1-1: SerialNumber: syz
[  756.027670][T12990] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  756.078725][ T5753] smsusb:smsusb_probe: board id=8, interface number 0
[  756.105056][T12990] bond3: (slave lo): Enslaving as an active interface with an up link
[  756.114232][T12990] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  756.162167][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  756.257680][ T5753] smsusb:smsusb_probe: usb_set_interface failed, rc -71
[  756.274667][ T5753] smsusb 1-1:1.0: probe with driver smsusb failed with error -71
[  756.311415][ T5753] usb 1-1: USB disconnect, device number 67
[  756.402575][ T5762] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  756.512309][   T30] kauditd_printk_skb: 62 callbacks suppressed
[  756.512327][   T30] audit: type=1326 audit(1784878092.112:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12998 comm="syz.2.2248" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf6a99de99 code=0x0
[  756.572088][ T5762] usb 4-1: Using ep0 maxpacket: 32
[  756.586297][ T5762] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  756.605762][ T5762] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  756.630759][ T5762] usb 4-1: config 0 descriptor??
[  756.647424][ T5762] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  756.846463][T12988] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2244'.
[  756.879348][ T5762] gspca_vc032x: reg_r err -71
[  756.897487][ T5762] gspca_vc032x: I2c Bus Busy Wait 00
[  756.915363][ T5762] gspca_vc032x: I2c Bus Busy Wait 00
[  756.927299][ T5762] gspca_vc032x: I2c Bus Busy Wait 00
[  756.947578][ T5762] gspca_vc032x: I2c Bus Busy Wait 00
[  756.965400][ T5762] gspca_vc032x: I2c Bus Busy Wait 00
[  756.983441][ T5762] gspca_vc032x: I2c Bus Busy Wait 00
[  757.001851][ T5762] gspca_vc032x: I2c Bus Busy Wait 00
[  757.026555][ T5762] gspca_vc032x: I2c Bus Busy Wait 00
[  757.048483][ T5762] gspca_vc032x: I2c Bus Busy Wait 00
[  757.069185][ T5762] gspca_vc032x: I2c Bus Busy Wait 00
[  757.090906][ T5762] gspca_vc032x: I2c Bus Busy Wait 00
[  757.114010][ T5762] gspca_vc032x: I2c Bus Busy Wait 00
[  757.133090][ T5762] gspca_vc032x: I2c Bus Busy Wait 00
[  757.148266][ T5762] gspca_vc032x: I2c Bus Busy Wait 00
[  757.161067][T13018] netlink: 'syz.0.2254': attribute type 1 has an invalid length.
[  757.172249][ T5762] gspca_vc032x: I2c Bus Busy Wait 00
[  757.182654][ T5762] gspca_vc032x: I2c Bus Busy Wait 00
[  757.199188][ T5762] gspca_vc032x: I2c Bus Busy Wait 00
[  757.204863][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  757.241283][ T5762] gspca_vc032x: I2c Bus Busy Wait 00
[  757.263120][ T5762] gspca_vc032x: Unknown sensor...
[  757.277171][T13018] 8021q: adding VLAN 0 to HW filter on device bond5
[  757.290859][ T5762] vc032x 4-1:0.0: probe with driver vc032x failed with error -22
[  757.352359][ T5762] usb 4-1: USB disconnect, device number 60
[  757.646128][T13031] bridge0: port 1(syz_tun) entered blocking state
[  757.669763][T13031] bridge0: port 1(syz_tun) entered disabled state
[  757.702641][T13034] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  757.709224][T13034] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  757.718055][T13031] syz_tun: entered allmulticast mode
[  757.799238][T13034] vhci_hcd vhci_hcd.0: Device attached
[  757.935525][T13031] syz_tun: entered promiscuous mode
[  758.014597][T13038] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  758.072244][ T5753] usb 36-1: SetAddress Request (10) to port 0
[  758.098970][ T5753] usb 36-1: new SuperSpeed USB device number 10 using vhci_hcd
[  758.241770][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  758.452257][T13036] vhci_hcd: connection reset by peer
[  758.477360][ T5766] vhci_hcd vhci_hcd.1: stop threads
[  758.515693][ T5766] vhci_hcd vhci_hcd.1: release socket
[  758.554413][ T5766] vhci_hcd vhci_hcd.1: disconnect device
[  758.751174][T13060] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6)
[  758.757789][T13060] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus)
[  758.846633][T13060] vhci_hcd vhci_hcd.0: Device attached
[  758.861793][ T5762] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  759.072306][ T5762] usb 1-1: Using ep0 maxpacket: 32
[  759.116397][ T5762] usb 1-1: unable to get BOS descriptor or descriptor too short
[  759.132602][    T9] tipc: Node number set to 2886997007
[  759.146587][ T5651] usb 42-1: SetAddress Request (2) to port 0
[  759.170825][T13075] netlink: 'syz.2.2269': attribute type 4 has an invalid length.
[  759.193212][ T5762] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  759.210699][ T5651] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd
[  759.242019][T13075] netlink: 'syz.2.2269': attribute type 4 has an invalid length.
[  759.281123][ T5762] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  759.290344][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  759.396550][T13064] vhci_hcd: connection reset by peer
[  759.402771][ T5762] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  759.421901][ T5762] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  759.430158][ T5762] usb 1-1: Product: syz
[  759.436894][ T5762] usb 1-1: Manufacturer: syz
[  759.443642][ T5762] usb 1-1: SerialNumber: syz
[  759.500256][ T5812] vhci_hcd vhci_hcd.4: stop threads
[  759.518347][ T5812] vhci_hcd vhci_hcd.4: release socket
[  759.546985][ T5812] vhci_hcd vhci_hcd.4: disconnect device
[  759.641101][T13082] loop4: detected capacity change from 0 to 7
[  759.673547][T13059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  759.709111][T13082] Dev loop4: unable to read RDB block 7
[  759.737794][T13082]  loop4: unable to read partition table
[  759.766790][T13082] loop4: partition table beyond EOD, truncated
[  759.796885][ T5668] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  759.807595][T13059] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  759.823636][T13082] loop_reread_partitions: partition scan of loop4 (�被x������ ) failed (rc=-5)
[  760.223262][ T5668] usb 4-1: Using ep0 maxpacket: 16
[  760.235550][ T5762] usb 1-1: 1:1 : no UAC_FORMAT_TYPE desc
[  760.300217][ T5762] usb 1-1: 0:2 : does not exist
[  760.308218][ T5668] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  760.331781][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  760.638344][ T5668] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  760.868161][ T5668] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  761.173246][ T5668] usb 4-1: config 0 descriptor??
[  761.228199][ T5762] usb 1-1: USB disconnect, device number 68
[  761.372325][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  761.381835][ T5358] usb 3-1: new full-speed USB device number 67 using dummy_hcd
[  761.522913][ T7977] udevd[7977]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  761.579902][ T5358] usb 3-1: device descriptor read/64, error -71
[  761.652726][ T5668] usbhid 4-1:0.0: can't add hid device: -71
[  761.697000][ T5668] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  761.759524][ T5668] usb 4-1: USB disconnect, device number 61
[  761.842147][ T5358] usb 3-1: new full-speed USB device number 68 using dummy_hcd
[  762.002788][ T5358] usb 3-1: device descriptor read/64, error -71
[  762.132766][ T5358] usb usb3-port1: attempt power cycle
[  762.402032][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  762.482066][ T5358] usb 3-1: new full-speed USB device number 69 using dummy_hcd
[  762.532485][ T5358] usb 3-1: device descriptor read/8, error -71
[  762.794154][ T5358] usb 3-1: new full-speed USB device number 70 using dummy_hcd
[  762.862599][ T5358] usb 3-1: device descriptor read/8, error -71
[  763.012170][ T5358] usb usb3-port1: unable to enumerate USB device
[  763.202778][ T5753] usb 36-1: device descriptor read/8, error -110
[  763.441927][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  763.623012][ T5753] usb usb36-port1: attempt power cycle
[  763.994258][T13140] xt_CT: You must specify a L4 protocol and not use inversions on it
[  764.176412][T13144] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2292'.
[  764.203947][ T5753] usb usb36-port1: unable to enumerate USB device
[  764.379926][T13158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  764.401920][ T5651] usb 42-1: device descriptor read/8, error -110
[  764.409275][T13158] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  764.449165][T13158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  764.481854][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  764.494235][T13158] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  764.536843][T13163] netlink: 136 bytes leftover after parsing attributes in process `syz.2.2296'.
[  764.863040][ T5651] usb usb42-port1: attempt power cycle
[  765.012808][T13175] loop4: detected capacity change from 0 to 7
[  765.071231][T13175] Dev loop4: unable to read RDB block 7
[  765.107657][T13175]  loop4: unable to read partition table
[  765.139178][T13175] loop4: partition table beyond EOD, truncated
[  765.194725][T13175] loop_reread_partitions: partition scan of loop4 (�被x������ ) failed (rc=-5)
[  765.489824][ T5651] usb usb42-port1: unable to enumerate USB device
[  765.498668][T13186] usb usb7: usbfs: process 13186 (syz.2.2307) did not claim interface 0 before use
[  765.522076][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  765.540016][T13186] netlink: 'syz.2.2307': attribute type 39 has an invalid length.
[  765.654867][T13190] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2308'.
[  766.441845][ T5358] usb 1-1: new full-speed USB device number 69 using dummy_hcd
[  766.497051][T13211] loop7: detected capacity change from 0 to 16384
[  766.561793][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  766.592651][ T5358] usb 1-1: device descriptor read/64, error -71
[  766.739098][T13215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  766.792211][T13215] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  766.871774][ T5358] usb 1-1: new full-speed USB device number 70 using dummy_hcd
[  767.039817][ T5358] usb 1-1: device descriptor read/64, error -71
[  767.050018][    C0] I/O error, dev loop7, sector 4608 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2
[  767.059992][    C0] I/O error, dev loop7, sector 4864 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2
[  767.078354][    C0] I/O error, dev loop7, sector 4608 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  767.088398][    C0] buffer_io_error: 14 callbacks suppressed
[  767.088503][    C0] Buffer I/O error on dev loop7, logical block 576, async page read
[  767.102456][    C0] I/O error, dev loop7, sector 4616 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  767.112447][    C0] Buffer I/O error on dev loop7, logical block 577, async page read
[  767.120475][    C0] I/O error, dev loop7, sector 4624 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  767.130511][    C0] Buffer I/O error on dev loop7, logical block 578, async page read
[  767.138601][    C0] I/O error, dev loop7, sector 4632 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  767.148593][    C0] Buffer I/O error on dev loop7, logical block 579, async page read
[  767.183510][T13214] loop7: detected capacity change from 16384 to 0
[  767.282142][ T5358] usb usb1-port1: attempt power cycle
[  767.502140][ T5668] usb 3-1: new full-speed USB device number 71 using dummy_hcd
[  767.611788][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  767.621821][ T5651] usb 2-1: new full-speed USB device number 60 using dummy_hcd
[  767.632495][ T5358] usb 1-1: new full-speed USB device number 71 using dummy_hcd
[  767.652698][ T5358] usb 1-1: device descriptor read/8, error -71
[  767.674525][ T5668] usb 3-1: config index 0 descriptor too short (expected 28277, got 36)
[  767.683990][ T5668] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  767.697042][ T5668] usb 3-1: config 0 has no interfaces?
[  767.707270][ T5668] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  767.720540][ T5668] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  767.740909][ T5668] usb 3-1: config 0 descriptor??
[  767.775800][ T5651] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31
[  767.795301][ T5651] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  767.876783][ T5651] usb 2-1: selecting invalid altsetting 3
[  767.890362][ T5651] comedi comedi5: could not set alternate setting 3 in high speed
[  767.892593][ T5358] usb 1-1: new full-speed USB device number 72 using dummy_hcd
[  767.900121][ T5651] usbduxsigma 2-1:128.0: driver 'usbduxsigma' failed to auto-configure device.
[  767.944790][ T5358] usb 1-1: device descriptor read/8, error -71
[  767.955356][ T5651] usbduxsigma 2-1:128.0: probe with driver usbduxsigma failed with error -22
[  768.029803][ T5651] usb 2-1: USB disconnect, device number 60
[  768.067985][ T5358] usb usb1-port1: unable to enumerate USB device
[  768.101794][ T5732] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[  768.154413][T13231] netlink: 'syz.4.2321': attribute type 1 has an invalid length.
[  768.239264][T13231] bond4 (unregistering): Released all slaves
[  768.275065][T13234] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2321'.
[  768.499361][T13236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  768.510549][T13236] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  768.524799][T13237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  768.558335][T13237] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  768.651883][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  768.833955][ T5651] usb 3-1: USB disconnect, device number 71
[  769.682042][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  769.777421][T13250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2327'.
[  770.372393][ T5651] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  770.552141][ T5651] usb 2-1: Using ep0 maxpacket: 32
[  770.566007][ T5651] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[  770.575154][ T5651] usb 2-1: config 0 has no interface number 0
[  770.596394][ T5651] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  770.607963][ T5651] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  770.621645][ T5651] usb 2-1: Product: syz
[  770.622280][T13246] syzkaller0: entered promiscuous mode
[  770.638414][ T5651] usb 2-1: Manufacturer: syz
[  770.649206][ T5651] usb 2-1: SerialNumber: syz
[  770.655336][T13246] syzkaller0: entered allmulticast mode
[  770.674215][ T5651] usb 2-1: config 0 descriptor??
[  770.699340][ T5651] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  770.731874][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  770.918750][ T5651] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  770.987743][ T5651] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  771.267647][T13261] netlink: 'syz.0.2330': attribute type 1 has an invalid length.
[  771.363734][T13261] bond6: entered promiscuous mode
[  771.372852][T13261] bond6: entered allmulticast mode
[  771.379048][T13261] 8021q: adding VLAN 0 to HW filter on device bond6
[  771.389316][T13264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2330'.
[  771.424135][T13264] bond6 (unregistering): Released all slaves
[  771.761799][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  771.785417][T13272] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2332'.
[  771.826145][T13272] [U] 
[  771.829534][T13272] [U] 
[  771.832284][T13272] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\
[  771.879380][T13272] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\
[  772.028976][T13272] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\
[  772.075954][T13272] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\
[  772.122911][T13272] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\
[  772.169834][T13272] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\
[  772.377873][T13272] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\
[  772.424877][T13272] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0
[  772.430580][T13272] [U] 
[  772.433322][T13272] [U] 
[  772.478190][T13272] [U] 
[  772.480981][T13272] [U] 
[  772.483726][T13272] [U] 
[  772.486462][T13272] [U] 
[  772.510197][T13276] xt_CT: You must specify a L4 protocol and not use inversions on it
[  772.521910][T13272] [U] 
[  772.524694][T13272] [U] 
[  772.527441][T13272] [U] 
[  772.530183][T13272] [U] 
[  772.554686][T13272] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\
[  772.601684][T13272] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\
[  772.648643][T13272] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\
[  772.695621][T13272] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\
[  772.812175][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  772.969711][T13272] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\
[  773.016804][T13272] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\
[  773.063785][T13272] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\
[  773.110743][T13272] [U] aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0
[  773.309179][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[  773.321833][    T9] usb 2-1: USB disconnect, device number 61
[  773.427446][    T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  773.461092][    T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  773.482424][    T9] quatech2 2-1:0.51: device disconnected
[  773.488265][T13272] [U] 
[  773.841868][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  774.384862][T13311] Cannot find del_set index 2 as target
[  774.472385][T13320] FAULT_INJECTION: forcing a failure.
[  774.472385][T13320] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  774.540388][T13320] CPU: 0 UID: 0 PID: 13320 Comm: syz.3.2351 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  774.540425][T13320] Tainted: [L]=SOFTLOCKUP
[  774.540434][T13320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  774.540447][T13320] Call Trace:
[  774.540456][T13320]  <TASK>
[  774.540466][T13320]  dump_stack_lvl+0xe8/0x150
[  774.540508][T13320]  should_fail_ex+0x40c/0x560
[  774.540543][T13320]  _copy_to_user+0x31/0xb0
[  774.540578][T13320]  __se_sys_sysfs+0x3e1/0x700
[  774.540613][T13320]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  774.540638][T13320]  do_syscall_64+0x174/0x580
[  774.540662][T13320]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  774.540685][T13320]  ? clear_bhb_loop+0x40/0x90
[  774.540713][T13320]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  774.540735][T13320] RIP: 0033:0x7f139b19de99
[  774.540756][T13320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  774.540775][T13320] RSP: 002b:00007f13993f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000008b
[  774.540798][T13320] RAX: ffffffffffffffda RBX: 00007f139b426090 RCX: 00007f139b19de99
[  774.540816][T13320] RDX: 00002000000012c0 RSI: 0000000000000000 RDI: 0000000000000002
[  774.540830][T13320] RBP: 00007f13993f6090 R08: 0000000000000000 R09: 0000000000000000
[  774.540848][T13320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  774.540862][T13320] R13: 00007f139b426128 R14: 00007f139b426090 R15: 00007f139b54fa48
[  774.540896][T13320]  </TASK>
[  774.714244][T13324] tipc: Enabling of bearer <udp:����> rejected, failed to enable media
[  774.881777][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  775.107560][T13321] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2343'.
[  775.291907][ T5651] usb 1-1: new high-speed USB device number 73 using dummy_hcd
[  775.303080][T13318] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  775.389607][T13318] block device autoloading is deprecated and will be removed.
[  775.474439][ T5651] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  775.504322][ T5651] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  775.555461][ T5651] usb 1-1: config 0 descriptor??
[  775.581126][ T5651] cp210x 1-1:0.0: cp210x converter detected
[  775.921903][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  775.990742][ T5651] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32
[  776.123519][ T5358] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  776.235463][ T5651] cp210x 1-1:0.0: failed to get vendor val 0x370c size 15: -71
[  776.273011][ T5651] cp210x 1-1:0.0: GPIO initialisation failed: -71
[  776.303090][ T5651] usb 1-1: cp210x converter now attached to ttyUSB0
[  776.310958][ T5358] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  776.337104][ T5358] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  776.360647][ T5358] usb 3-1: Product: syz
[  776.365387][ T5651] usb 1-1: USB disconnect, device number 73
[  776.377072][ T5358] usb 3-1: Manufacturer: syz
[  776.392668][ T5358] usb 3-1: SerialNumber: syz
[  776.403769][ T5651] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  776.463211][ T5651] cp210x 1-1:0.0: device disconnected
[  776.476129][ T5358] usb 3-1: config 0 descriptor??
[  776.699328][ T5358] usb 3-1: f81604_read: reg: 105 failed: -EREMOTEIO
[  776.727312][ T5358] f81604 3-1:0.0: Setting termination of CH#0 failed: -EREMOTEIO
[  776.761420][ T5358] f81604 3-1:0.0: probe with driver f81604 failed with error -121
[  776.849664][T13369] FAULT_INJECTION: forcing a failure.
[  776.849664][T13369] name failslab, interval 1, probability 0, space 0, times 0
[  776.888900][T13369] CPU: 1 UID: 0 PID: 13369 Comm: syz.4.2365 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  776.888935][T13369] Tainted: [L]=SOFTLOCKUP
[  776.888944][T13369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  776.888956][T13369] Call Trace:
[  776.888965][T13369]  <TASK>
[  776.888975][T13369]  dump_stack_lvl+0xe8/0x150
[  776.889014][T13369]  should_fail_ex+0x40c/0x560
[  776.889047][T13369]  should_failslab+0xa8/0x100
[  776.889090][T13369]  kmem_cache_alloc_lru_noprof+0xa7/0x5f0
[  776.889119][T13369]  ? __d_lookup+0x66/0x790
[  776.889152][T13369]  ? __d_alloc+0x37/0x6f0
[  776.889180][T13369]  ? __d_alloc+0x37/0x6f0
[  776.889218][T13369]  __d_alloc+0x37/0x6f0
[  776.889255][T13369]  d_alloc+0x4b/0x190
[  776.889283][T13369]  ? lookup_one_qstr_excl+0xc4/0x360
[  776.889318][T13369]  lookup_one_qstr_excl+0xd8/0x360
[  776.889349][T13369]  ? lookup_noperm_common+0x245/0x430
[  776.889382][T13369]  start_dirop+0x5c/0x90
[  776.889412][T13369]  simple_start_creating+0xcc/0x110
[  776.889444][T13369]  ? __pfx_simple_start_creating+0x10/0x10
[  776.889480][T13369]  ? _raw_spin_unlock+0x28/0x50
[  776.889593][T13369]  ? fast_dput+0x469/0x670
[  776.889625][T13369]  binderfs_create_file+0x53/0x300
[  776.889663][T13369]  binderfs_fill_super+0xc36/0x1000
[  776.889703][T13369]  ? __pfx_binderfs_fill_super+0x10/0x10
[  776.889769][T13369]  ? __pfx_binderfs_fill_super+0x10/0x10
[  776.889800][T13369]  get_tree_nodev+0xbb/0x150
[  776.889836][T13369]  vfs_get_tree+0x92/0x2a0
[  776.889861][T13369]  vfs_cmd_create+0xa2/0x200
[  776.889889][T13369]  __se_sys_fsconfig+0x6b9/0x810
[  776.889921][T13369]  ? __pfx___se_sys_fsconfig+0x10/0x10
[  776.889943][T13369]  ? ksys_write+0x242/0x270
[  776.889979][T13369]  ? __pfx_ksys_write+0x10/0x10
[  776.890019][T13369]  ? __x64_sys_fsconfig+0x20/0xc0
[  776.890043][T13369]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  776.890076][T13369]  do_syscall_64+0x174/0x580
[  776.890102][T13369]  ? clear_bhb_loop+0x40/0x90
[  776.890130][T13369]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  776.890153][T13369] RIP: 0033:0x7f4833f9de99
[  776.890174][T13369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  776.890193][T13369] RSP: 002b:00007f4834db5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  776.890217][T13369] RAX: ffffffffffffffda RBX: 00007f4834225fa0 RCX: 00007f4833f9de99
[  776.890234][T13369] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000c
[  776.890247][T13369] RBP: 00007f4834db5090 R08: 0000000000000000 R09: 0000000000000000
[  776.890266][T13369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  776.890280][T13369] R13: 00007f4834226038 R14: 00007f4834225fa0 R15: 00007f483434fa48
[  776.890316][T13369]  </TASK>
[  777.163235][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  778.241798][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  778.281955][ T5358] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  778.423057][T13391] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2373'.
[  778.441892][ T5358] usb 2-1: Using ep0 maxpacket: 16
[  778.457958][ T5358] usb 2-1: config 0 interface 0 has no altsetting 0
[  778.478605][ T5358] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00
[  778.514245][ T5358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  778.557799][ T5358] usb 2-1: config 0 descriptor??
[  778.837352][T13402] xt_CT: You must specify a L4 protocol and not use inversions on it
[  778.961298][T13403] program syz.3.2377 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  779.065890][ T5358] redragon 0003:0C45:760B.000D: unknown main item tag 0x0
[  779.077624][  T187] usb 3-1: USB disconnect, device number 73
[  779.107513][ T5358] redragon 0003:0C45:760B.000D: unknown main item tag 0x0
[  779.140340][ T5358] redragon 0003:0C45:760B.000D: unknown main item tag 0x0
[  779.184642][ T5358] redragon 0003:0C45:760B.000D: unknown main item tag 0x0
[  779.216157][ T5358] redragon 0003:0C45:760B.000D: unknown main item tag 0x0
[  779.244870][ T5358] redragon 0003:0C45:760B.000D: unknown main item tag 0x0
[  779.278058][ T5358] redragon 0003:0C45:760B.000D: unknown main item tag 0x0
[  779.281962][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  779.345854][ T5358] redragon 0003:0C45:760B.000D: unknown main item tag 0x0
[  779.396312][ T5358] redragon 0003:0C45:760B.000D: unknown main item tag 0x0
[  779.439074][ T5358] redragon 0003:0C45:760B.000D: unknown main item tag 0x0
[  779.530008][ T5358] redragon 0003:0C45:760B.000D: hidraw0: USB HID v0.81 Device [HID 0c45:760b] on usb-dummy_hcd.1-1/input0
[  779.567779][T13408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2379'.
[  780.127719][T13417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  780.180915][T13417] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  780.321943][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  780.482040][ T5732] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  780.628635][T13436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  780.663688][ T5732] usb 4-1: Using ep0 maxpacket: 8
[  780.665950][T13436] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  780.682861][ T5732] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  780.708339][ T5732] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  780.734627][ T5732] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  780.750417][ T5732] usb 4-1: config 0 descriptor??
[  780.976602][ T5732] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  781.122331][ T5732] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[  781.272201][ T5732] usb 3-1: Using ep0 maxpacket: 32
[  781.287362][ T5732] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 8
[  781.312086][ T5732] usb 3-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40
[  781.323085][ T5732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  781.331411][ T5732] usb 3-1: Product: syz
[  781.338313][ T5732] usb 3-1: Manufacturer: syz
[  781.348475][ T5732] usb 3-1: SerialNumber: syz
[  781.361800][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  781.376642][T13444] raw-gadget.5 gadget.2: fail, usb_ep_enable returned -22
[  781.453707][ T5358] usb 4-1: USB disconnect, device number 63
[  781.615812][T13444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2393'.
[  781.723364][ T5732] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  781.741841][ T5732] usb 3-1: MIDIStreaming interface descriptor not found
[  781.796975][ T5358] usb 2-1: USB disconnect, device number 62
[  781.839654][T13453] loop4: detected capacity change from 0 to 7
[  781.866784][T13453] Dev loop4: unable to read RDB block 7
[  781.887672][T13453]  loop4: unable to read partition table
[  781.908770][T13453] loop4: partition table beyond EOD, truncated
[  781.930636][T13453] loop_reread_partitions: partition scan of loop4 (�被x������ ) failed (rc=-5)
[  782.010405][ T5732] usb 3-1: USB disconnect, device number 74
[  782.401789][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  782.462162][ T5358] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[  782.602169][ T5732] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  782.644150][ T5358] usb 1-1: Using ep0 maxpacket: 32
[  782.659565][ T5358] usb 1-1: unable to get BOS descriptor or descriptor too short
[  782.668362][T13479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2407'.
[  782.680632][ T5358] usb 1-1: config 12 has an invalid interface number: 172 but max is 0
[  782.689335][ T5358] usb 1-1: config 12 has no interface number 0
[  782.696526][ T5358] usb 1-1: config 12 interface 172 altsetting 13 has an invalid descriptor for endpoint zero, skipping
[  782.707834][ T5358] usb 1-1: config 12 interface 172 altsetting 13 endpoint 0xD has invalid maxpacket 536, setting to 64
[  782.719261][ T5358] usb 1-1: config 12 interface 172 altsetting 13 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[  782.730907][ T5358] usb 1-1: config 12 interface 172 has no altsetting 0
[  782.744205][ T5358] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a97, bcdDevice=b2.7b
[  782.755722][ T5358] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  782.764885][ T5358] usb 1-1: Product: ☽㋥㑋놑̈́걿祪䏪쐝훓쒩ໞâﾝႽ닆髿뒿쎡℗⎢爐㔓੦༦臃鞈躺룯겕媯呬ᑒ㯲踎ﲁ䚐⚚
[  782.782682][ T5732] usb 2-1: config 0 has an invalid interface number: 120 but max is 0
[  782.805614][ T5732] usb 2-1: config 0 has no interface number 0
[  782.821360][ T5732] usb 2-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  782.843994][T13484] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  782.853768][ T5732] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  782.868983][T13484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  782.879186][ T5732] usb 2-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  782.889907][T13484] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  782.900001][ T5732] usb 2-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  782.912348][ T5732] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  782.925429][ T5732] usb 2-1: config 0 descriptor??
[  782.949475][ T5732] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.120/input/input28
[  783.022305][ T5651] usb 4-1: new low-speed USB device number 64 using dummy_hcd
[  783.062474][ T5358] usb 1-1: USB disconnect, device number 74
[  783.144637][T13465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  783.153835][T13465] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  783.179066][T13465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  783.188167][T13465] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  783.196600][ T5651] usb 4-1: Invalid ep0 maxpacket: 32
[  783.202186][   T30] audit: type=1326 audit(1784878118.802:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13464 comm="syz.1.2402" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f962a79de99 code=0x0
[  783.354973][ T5651] usb 4-1: new low-speed USB device number 65 using dummy_hcd
[  783.441780][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  783.514242][ T5651] usb 4-1: Invalid ep0 maxpacket: 32
[  783.543634][ T5651] usb usb4-port1: attempt power cycle
[  783.609250][T13495] netlink: 'syz.2.2410': attribute type 1 has an invalid length.
[  783.638742][T13494] ptrace attach of "ci-upstream-kasan-gce/syz-executor exec"[13497] was attempted by "ci-upstream-kasan-gce/syz-executor exec"[13494]
[  783.677750][T13495] 8021q: adding VLAN 0 to HW filter on device bond3
[  783.902771][ T5651] usb 4-1: new low-speed USB device number 66 using dummy_hcd
[  783.932662][ T5651] usb 4-1: Invalid ep0 maxpacket: 32
[  784.078858][ T5651] usb 4-1: new low-speed USB device number 67 using dummy_hcd
[  784.123068][ T5651] usb 4-1: Invalid ep0 maxpacket: 32
[  784.130146][ T5651] usb usb4-port1: unable to enumerate USB device
[  784.342100][ T5668] usb 3-1: new full-speed USB device number 75 using dummy_hcd
[  784.481803][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  784.515826][ T5668] usb 3-1: unable to get BOS descriptor or descriptor too short
[  784.529416][ T5668] usb 3-1: not running at top speed; connect to a high speed hub
[  784.539264][ T5668] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 2
[  784.548507][ T5668] usb 3-1: config 5 interface 0 has no altsetting 1
[  784.562010][ T5668] usb 3-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70
[  784.579294][ T5668] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  784.596858][ T5668] usb 3-1: Product: syz
[  784.604248][ T5668] usb 3-1: Manufacturer: syz
[  784.609446][ T5668] usb 3-1: SerialNumber: syz
[  784.673215][T13529] netlink: 'syz.4.2424': attribute type 1 has an invalid length.
[  784.715966][T13529] 8021q: adding VLAN 0 to HW filter on device bond4
[  784.772984][T13529] bond4: (slave geneve4): making interface the new active one
[  784.785916][T13529] bond4: (slave geneve4): Enslaving as an active interface with an up link
[  784.854022][T13518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  784.887338][T13518] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  785.020168][ T5668] usb 3-1: USB disconnect, device number 75
[  785.090085][ T7977] udevd[7977]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:5.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  785.362622][ T5668] usb 2-1: USB disconnect, device number 63
[  785.521879][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  785.637631][T13542] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2428'.
[  785.670511][T13542] ipvlan2: entered allmulticast mode
[  785.678898][T13542] syz_tun: entered allmulticast mode
[  785.721942][  T187] usb 1-1: new high-speed USB device number 75 using dummy_hcd
[  785.891775][  T187] usb 1-1: Using ep0 maxpacket: 16
[  785.919549][T13548] binder_alloc: 13547: binder_alloc_buf, no vma
[  785.937560][  T187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  785.978067][  T187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  786.020289][  T187] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  786.084288][  T187] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  786.118328][  T187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  786.159157][  T187] usb 1-1: config 0 descriptor??
[  786.222068][ T5358] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[  786.312448][    T9] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  786.371935][ T5358] usb 3-1: device descriptor read/64, error -71
[  786.411785][ T5651] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  786.471820][    T9] usb 2-1: Using ep0 maxpacket: 8
[  786.479610][    T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  786.492268][    T9] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  786.507867][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[  786.514874][    T9] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0a1d, bcdDevice= 0.00
[  786.524241][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  786.538243][    T9] usb 2-1: config 0 descriptor??
[  786.561790][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  786.591940][ T5651] usb 4-1: Using ep0 maxpacket: 16
[  786.621927][ T5358] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[  786.761812][ T5358] usb 3-1: device descriptor read/64, error -71
[  786.884635][ T5358] usb usb3-port1: attempt power cycle
[  786.955884][T13563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  786.965335][T13563] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  786.980773][T13562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  786.999441][T13562] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  787.140780][ T5651] usb 4-1: unable to get BOS descriptor or descriptor too short
[  787.170882][ T5651] usb 4-1: unable to read config index 0 descriptor/start: -71
[  787.191843][ T5651] usb 4-1: can't read configurations, error -71
[  787.241924][ T5358] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[  787.272886][ T5358] usb 3-1: device descriptor read/8, error -71
[  787.297407][    T9] usbhid 2-1:0.0: can't add hid device: -71
[  787.306067][    T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  787.319596][    T9] usb 2-1: USB disconnect, device number 64
[  787.521850][ T5358] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[  787.542653][ T5358] usb 3-1: device descriptor read/8, error -71
[  787.601804][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  787.654088][ T5358] usb usb3-port1: unable to enumerate USB device
[  788.162097][    C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:0c to non-existent VLAN 3
[  788.537694][  T187] usbhid 1-1:0.0: can't add hid device: -71
[  788.559873][  T187] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  788.604609][  T187] usb 1-1: USB disconnect, device number 75
[  788.641781][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  788.845594][T13594] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2443'.
[  788.871133][T13596] program syz.3.2444 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  788.899025][T13596] program syz.3.2444 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  789.263404][T13607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2449'.
[  789.283142][T13607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2449'.
[  789.681940][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  790.153975][  T187] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  790.329343][  T187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  790.388974][  T187] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  790.441391][  T187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  790.477326][  T187] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  790.512069][  T187] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  790.540682][  T187] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  790.580089][  T187] usb 2-1: config 0 descriptor??
[  790.721848][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  790.850163][ T5651] hid_parser_main: 30 callbacks suppressed
[  790.850187][ T5651] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  790.944293][ T5651] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  791.411512][T13691] netlink: 'syz.0.2476': attribute type 1 has an invalid length.
[  791.520211][T13691] 8021q: adding VLAN 0 to HW filter on device bond6
[  791.761792][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  792.712615][ T5732] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[  792.772922][ T5651] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[  792.801966][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  792.871831][ T5732] usb 3-1: Using ep0 maxpacket: 16
[  792.897802][ T5732] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85
[  792.918656][ T5732] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  792.932099][ T5651] usb 1-1: Using ep0 maxpacket: 32
[  792.937992][ T5732] usb 3-1: Product: syz
[  792.943403][ T5732] usb 3-1: Manufacturer: syz
[  792.948427][ T5732] usb 3-1: SerialNumber: syz
[  792.955240][ T5651] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  792.966220][ T5651] usb 1-1: config 0 has no interface number 0
[  792.976932][ T5651] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  792.987432][ T5732] usb 3-1: config 0 descriptor??
[  793.008479][ T5732] usb 3-1: selecting invalid altsetting 1
[  793.016863][ T5651] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  793.026325][ T5732] technisat-usb2: could not set alternate setting to 0
[  793.036880][ T5651] usb 1-1: Product: syz
[  793.041329][ T5651] usb 1-1: Manufacturer: syz
[  793.053351][ T5651] usb 1-1: SerialNumber: syz
[  793.063956][ T5651] usb 1-1: config 0 descriptor??
[  793.160084][T13712] netlink: 'syz.3.2483': attribute type 9 has an invalid length.
[  793.175749][  T187] hdpvr 2-1:0.0: unexpected answer of status request, len -71
[  793.208411][ T5732] technisat-usb2: firmware version: 0.0
[  793.212434][  T187] hdpvr 2-1:0.0: device init failed
[  793.228074][ T5732] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state.
[  793.234098][  T187] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12
[  793.296369][  T187] usb 2-1: USB disconnect, device number 65
[  793.419064][ T5732] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  793.476520][ T5732] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2))
[  793.502664][ T5732] usb 3-1: media controller created
[  793.515675][ T5732] technisat-usb2: i2c-error: out failed 53 = -22
[  793.532698][ T5651] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  793.548455][ T5732] dvb-usb: MAC address reading failed.
[  793.563559][ T5651] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  793.596745][ T5732] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  793.740383][ T5732] DVB: Unable to find symbol stv090x_attach()
[  793.749098][ T5732] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)'
[  793.841926][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  793.924635][ T5732] rc_core: IR keymap rc-technisat-usb2 not found
[  793.931294][ T5732] Registered IR keymap rc-empty
[  793.938978][ T5732] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0
[  793.958819][ T5732] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input29
[  793.978416][ T5732] dvb-usb: schedule remote query interval to 100 msecs.
[  794.101712][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  794.223977][T13705] fuse: Bad value for 'user_id'
[  794.434042][T13705] fuse: Bad value for 'user_id'
[  794.445815][ T5732] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected.
[  794.461113][ T5753] dvb-usb: error -71 while querying for an remote control event.
[  794.491359][ T5732] usb 3-1: USB disconnect, device number 80
[  794.794323][ T5732] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected.
[  794.881928][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  795.942335][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  796.559907][ T5651] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  796.617834][ T5651] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[  796.694565][ T5672] Bluetooth: hci1: Received unexpected HCI Event 0x00
[  796.896251][ T5651] usb 1-1: USB disconnect, device number 76
[  796.937758][T13754] FAULT_INJECTION: forcing a failure.
[  796.937758][T13754] name failslab, interval 1, probability 0, space 0, times 0
[  796.961786][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  796.984779][T13754] CPU: 0 UID: 0 PID: 13754 Comm: syz.1.2495 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  796.984812][T13754] Tainted: [L]=SOFTLOCKUP
[  796.984821][T13754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  796.984834][T13754] Call Trace:
[  796.984842][T13754]  <TASK>
[  796.984852][T13754]  dump_stack_lvl+0xe8/0x150
[  796.984890][T13754]  should_fail_ex+0x40c/0x560
[  796.984919][T13754]  ? translate_table+0x193/0x1f80
[  796.985034][T13754]  should_failslab+0xa8/0x100
[  796.985068][T13754]  __kvmalloc_node_noprof+0x176/0x860
[  796.985098][T13754]  ? nf_setsockopt+0x26f/0x290
[  796.985173][T13754]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  796.985233][T13754]  ? do_syscall_64+0x174/0x580
[  796.985255][T13754]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  796.985278][T13754]  ? translate_table+0x193/0x1f80
[  796.985306][T13754]  translate_table+0x193/0x1f80
[  796.985357][T13754]  ? __pfx_translate_table+0x10/0x10
[  796.985378][T13754]  ? __might_fault+0xaf/0x130
[  796.985404][T13754]  ? __might_fault+0xaf/0x130
[  796.985446][T13754]  ? _copy_from_user+0x94/0xb0
[  796.985483][T13754]  do_ipt_set_ctl+0xa53/0xe20
[  796.985516][T13754]  ? rcu_is_watching+0x15/0xb0
[  796.985551][T13754]  ? __pfx_do_ipt_set_ctl+0x10/0x10
[  796.985591][T13754]  ? __mutex_unlock_slowpath+0x731/0x900
[  796.985617][T13754]  ? aa_sk_perm+0x6d5/0x900
[  796.985654][T13754]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  796.985682][T13754]  ? __pfx_aa_sk_perm+0x10/0x10
[  796.985722][T13754]  nf_setsockopt+0x26f/0x290
[  796.985754][T13754]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  796.985790][T13754]  do_sock_setsockopt+0x17c/0x1b0
[  796.985840][T13754]  __x64_sys_setsockopt+0x13d/0x1b0
[  796.985874][T13754]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  796.985897][T13754]  do_syscall_64+0x174/0x580
[  796.985917][T13754]  ? trace_irq_disable+0x3b/0x140
[  796.985944][T13754]  ? clear_bhb_loop+0x40/0x90
[  796.985970][T13754]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  796.985991][T13754] RIP: 0033:0x7f962a79de99
[  796.986010][T13754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  796.986027][T13754] RSP: 002b:00007f962b673028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  796.986048][T13754] RAX: ffffffffffffffda RBX: 00007f962aa25fa0 RCX: 00007f962a79de99
[  796.986064][T13754] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003
[  796.986077][T13754] RBP: 00007f962b673090 R08: 00000000000003b0 R09: 0000000000000000
[  796.986090][T13754] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001
[  796.986104][T13754] R13: 00007f962aa26038 R14: 00007f962aa25fa0 R15: 00007f962ab4fa48
[  796.986135][T13754]  </TASK>
[  797.570606][T13757] loop4: detected capacity change from 0 to 7
[  797.599202][T13757] Dev loop4: unable to read RDB block 7
[  797.624507][T13757]  loop4: unable to read partition table
[  797.677977][T13757] loop4: partition table beyond EOD, truncated
[  797.701312][T13757] loop_reread_partitions: partition scan of loop4 (�被x������ ) failed (rc=-5)
[  798.001773][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  798.270269][T13770] loop4: detected capacity change from 0 to 7
[  798.293841][T13770] Dev loop4: unable to read RDB block 7
[  798.310264][T13770]  loop4: unable to read partition table
[  798.325890][T13770] loop4: partition table beyond EOD, truncated
[  798.340927][T13770] loop_reread_partitions: partition scan of loop4 (�被x������ ) failed (rc=-5)
[  798.422097][ T5651] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  798.507405][T13772] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2503'.
[  798.519919][T13772] syzkaller0: entered promiscuous mode
[  798.529112][T13772] syzkaller0: entered allmulticast mode
[  798.615629][ T5651] usb 2-1: Using ep0 maxpacket: 8
[  798.635176][ T5651] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7
[  798.667845][ T5651] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  798.718168][ T5651] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  798.730157][T13689] Set syz1 is full, maxelem 65536 reached
[  798.750253][ T5651] usb 2-1: Product: syz
[  798.757295][ T5651] usb 2-1: Manufacturer: syz
[  798.762057][ T5651] usb 2-1: SerialNumber: syz
[  798.772220][  T187] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  798.921848][  T187] usb 1-1: device descriptor read/64, error -71
[  798.994777][ T5651] usb 2-1: Handspring Visor / Palm OS: No valid connect info available
[  799.022062][ T5651] usb 2-1: Handspring Visor / Palm OS: port 83, is for Debugger use
[  799.042037][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  799.057720][ T5651] usb 2-1: Handspring Visor / Palm OS: port 171, is for unknown use
[  799.079235][ T5651] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2
[  799.120553][T13787] loop4: detected capacity change from 0 to 7
[  799.135373][T13787] Dev loop4: unable to read RDB block 7
[  799.142236][T13787]  loop4: unable to read partition table
[  799.148245][T13787] loop4: partition table beyond EOD, truncated
[  799.155371][T13787] loop_reread_partitions: partition scan of loop4 (�被x������ ) failed (rc=-5)
[  799.173213][  T187] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[  799.194747][T13768] netlink: 'syz.1.2501': attribute type 21 has an invalid length.
[  799.202922][T13789] netlink: 'syz.1.2501': attribute type 21 has an invalid length.
[  799.215682][T13768] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2501'.
[  799.225382][T13789] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2501'.
[  799.245444][T13768] netlink: 'syz.1.2501': attribute type 5 has an invalid length.
[  799.257082][ T5651] visor 2-1:1.0: Handspring Visor / Palm OS converter detected
[  799.264262][T13768] netlink: 'syz.1.2501': attribute type 6 has an invalid length.
[  799.283878][T13768] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2501'.
[  799.295362][ T5651] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  799.310241][T13789] netlink: 'syz.1.2501': attribute type 5 has an invalid length.
[  799.323568][T13789] netlink: 'syz.1.2501': attribute type 6 has an invalid length.
[  799.332102][ T5651] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  799.340073][T13789] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2501'.
[  799.349692][  T187] usb 1-1: device descriptor read/64, error -71
[  799.354656][ T5753] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[  799.462106][  T187] usb usb1-port1: attempt power cycle
[  799.481414][ T5358] usb 2-1: USB disconnect, device number 66
[  799.505149][ T5358] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  799.533889][ T5753] usb 3-1: Using ep0 maxpacket: 32
[  799.557401][ T5753] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[  799.572150][ T5358] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  799.576769][ T5753] usb 3-1: config 0 has no interface number 0
[  799.598870][ T5753] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  799.610078][ T5358] visor 2-1:1.0: device disconnected
[  799.642087][ T5753] usb 3-1: config 0 interface 85 has no altsetting 0
[  799.662505][ T5753] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  799.672190][ T5753] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  799.680382][ T5753] usb 3-1: Product: syz
[  799.685155][ T5753] usb 3-1: Manufacturer: syz
[  799.689905][ T5753] usb 3-1: SerialNumber: syz
[  799.708444][ T5753] usb 3-1: config 0 descriptor??
[  799.779169][T13796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  799.788661][T13796] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  799.812313][  T187] usb 1-1: new high-speed USB device number 79 using dummy_hcd
[  799.832783][  T187] usb 1-1: device descriptor read/8, error -71
[  799.882146][ T5651] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  800.044041][ T5651] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  800.056649][ T5651] usb 4-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40
[  800.065865][ T5651] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  800.072535][  T187] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[  800.075950][ T5651] usb 4-1: Product: syz
[  800.085901][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  800.096098][ T5651] usb 4-1: Manufacturer: syz
[  800.100869][ T5651] usb 4-1: SerialNumber: syz
[  800.103854][  T187] usb 1-1: device descriptor read/8, error -71
[  800.119152][ T5753] appletouch 3-1:0.85: Failed to read mode from device.
[  800.142033][ T5753] appletouch 3-1:0.85: probe with driver appletouch failed with error -5
[  800.223606][  T187] usb usb1-port1: unable to enumerate USB device
[  800.250429][ T5753] usb 3-1: USB disconnect, device number 81
[  800.348904][T13794] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  800.358626][T13794] block device autoloading is deprecated and will be removed.
[  800.410644][ T5651] usb 4-1: 1:1 : format type 0 is detected, processed as PCM
[  800.420381][ T5651] usb 4-1: 1:1 : sample bitwidth 135 in over sample bytes 14
[  800.429592][ T5651] usb 4-1: 1:1 : unsupported sample bitwidth 135 in 14 bytes
[  800.439824][ T5651] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  800.447864][ T5651] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2
[  800.460840][ T5651] usb 4-1: 1:1 : format type 0 is detected, processed as PCM
[  800.468649][ T5651] usb 4-1: 1:1 : sample bitwidth 135 in over sample bytes 14
[  800.476971][ T5651] usb 4-1: 1:1 : unsupported sample bitwidth 135 in 14 bytes
[  800.485816][ T5651] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  800.493141][ T5732] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  800.501159][ T5651] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -2
[  800.515413][ T5651] usb 4-1: 1:1 : format type 0 is detected, processed as PCM
[  800.523059][ T5651] usb 4-1: 1:1 : sample bitwidth 135 in over sample bytes 14
[  800.530539][ T5651] usb 4-1: 1:1 : unsupported sample bitwidth 135 in 14 bytes
[  800.538889][ T5651] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  800.581106][ T5651] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -2
[  800.596422][ T5651] usb 4-1: USB disconnect, device number 70
[  800.630614][ T7977] udevd[7977]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  800.671799][ T5732] usb 2-1: Using ep0 maxpacket: 32
[  800.679566][ T5732] usb 2-1: unable to get BOS descriptor or descriptor too short
[  800.689086][ T5732] usb 2-1: config 12 has an invalid interface number: 172 but max is 0
[  800.697895][ T5732] usb 2-1: config 12 has no interface number 0
[  800.705279][ T5732] usb 2-1: config 12 interface 172 altsetting 13 has an invalid descriptor for endpoint zero, skipping
[  800.716830][ T5732] usb 2-1: config 12 interface 172 altsetting 13 endpoint 0xD has invalid maxpacket 536, setting to 64
[  800.728152][ T5732] usb 2-1: config 12 interface 172 altsetting 13 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[  800.739728][ T5732] usb 2-1: config 12 interface 172 has no altsetting 0
[  800.751734][ T5732] usb 2-1: New USB device found, idVendor=0bb4, idProduct=0a97, bcdDevice=b2.7b
[  800.761105][ T5732] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  800.769604][ T5732] usb 2-1: Product: ☽㋥㑋놑̈́걿祪䏪쐝훓쒩ໞâﾝႽ닆髿뒿쎡℗⎢爐㔓੦༦臃鞈躺룯겕媯呬ᑒ㯲踎ﲁ䚐⚚
[  801.019573][ T5732] usb 2-1: USB disconnect, device number 67
[  801.058284][T13809] xt_CT: You must specify a L4 protocol and not use inversions on it
[  801.121812][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  801.174566][T13814] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING
[  801.735968][T13826] FAULT_INJECTION: forcing a failure.
[  801.735968][T13826] name failslab, interval 1, probability 0, space 0, times 0
[  801.749131][T13826] CPU: 1 UID: 0 PID: 13826 Comm: syz.3.2522 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  801.749165][T13826] Tainted: [L]=SOFTLOCKUP
[  801.749173][T13826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  801.749186][T13826] Call Trace:
[  801.749195][T13826]  <TASK>
[  801.749204][T13826]  dump_stack_lvl+0xe8/0x150
[  801.749241][T13826]  should_fail_ex+0x40c/0x560
[  801.749272][T13826]  should_failslab+0xa8/0x100
[  801.749307][T13826]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  801.749334][T13826]  ? security_inode_alloc+0x39/0x310
[  801.749358][T13826]  ? security_inode_alloc+0x39/0x310
[  801.749388][T13826]  security_inode_alloc+0x39/0x310
[  801.749415][T13826]  inode_init_always_gfp+0x97e/0xd30
[  801.749451][T13826]  alloc_inode+0x82/0x1b0
[  801.749484][T13826]  new_inode+0x1f/0x170
[  801.749517][T13826]  binderfs_create_file+0x9d/0x300
[  801.749560][T13826]  binderfs_fill_super+0xc65/0x1000
[  801.749623][T13826]  ? __pfx_binderfs_fill_super+0x10/0x10
[  801.749708][T13826]  ? __pfx_binderfs_fill_super+0x10/0x10
[  801.749743][T13826]  get_tree_nodev+0xbb/0x150
[  801.749788][T13826]  vfs_get_tree+0x92/0x2a0
[  801.749823][T13826]  vfs_cmd_create+0xa2/0x200
[  801.749863][T13826]  __se_sys_fsconfig+0x6b9/0x810
[  801.749905][T13826]  ? __pfx___se_sys_fsconfig+0x10/0x10
[  801.749936][T13826]  ? ksys_write+0x242/0x270
[  801.749986][T13826]  ? __pfx_ksys_write+0x10/0x10
[  801.750040][T13826]  ? __x64_sys_fsconfig+0x20/0xc0
[  801.750073][T13826]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  801.750106][T13826]  do_syscall_64+0x174/0x580
[  801.750140][T13826]  ? clear_bhb_loop+0x40/0x90
[  801.750177][T13826]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  801.750209][T13826] RIP: 0033:0x7f139b19de99
[  801.750238][T13826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  801.750264][T13826] RSP: 002b:00007f139bf85028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af
[  801.750296][T13826] RAX: ffffffffffffffda RBX: 00007f139b425fa0 RCX: 00007f139b19de99
[  801.750319][T13826] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 000000000000000c
[  801.750340][T13826] RBP: 00007f139bf85090 R08: 0000000000000000 R09: 0000000000000000
[  801.750358][T13826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  801.750375][T13826] R13: 00007f139b426038 R14: 00007f139b425fa0 R15: 00007f139b54fa48
[  801.750417][T13826]  </TASK>
[  802.161751][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  802.439371][T13834] syzkaller0: entered promiscuous mode
[  802.452859][  T187] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[  802.461936][T13834] syzkaller0: entered allmulticast mode
[  802.671822][  T187] usb 1-1: Using ep0 maxpacket: 16
[  802.680418][  T187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  802.718491][  T187] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  802.729268][  T187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  802.787400][  T187] usb 1-1: config 0 descriptor??
[  803.201810][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  803.291802][ T5732] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[  803.338595][  T187] mcp2221 0003:04D8:00DD.000F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0
[  803.431800][ T5732] usb 3-1: device descriptor read/64, error -71
[  803.513533][    C0] ==================================================================
[  803.521673][    C0] BUG: KASAN: slab-out-of-bounds in mcp2221_raw_event+0x10b0/0x12a0
[  803.529773][    C0] Read of size 1 at addr ffff888052873fff by task udevd/4992
[  803.537207][    C0] 
[  803.539586][    C0] CPU: 0 UID: 0 PID: 4992 Comm: udevd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  803.539628][    C0] Tainted: [L]=SOFTLOCKUP
[  803.539640][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  803.539658][    C0] Call Trace:
[  803.539667][    C0]  <IRQ>
[  803.539677][    C0]  dump_stack_lvl+0xe8/0x150
[  803.539719][    C0]  print_address_description+0x55/0x1e0
[  803.539756][    C0]  ? mcp2221_raw_event+0x10b0/0x12a0
[  803.539779][    C0]  print_report+0x58/0x70
[  803.539812][    C0]  kasan_report+0x117/0x150
[  803.539850][    C0]  ? mcp2221_raw_event+0x10b0/0x12a0
[  803.539880][    C0]  mcp2221_raw_event+0x10b0/0x12a0
[  803.539905][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  803.539944][    C0]  ? down_trylock+0x50/0xb0
[  803.539971][    C0]  __hid_input_report+0x41c/0x580
[  803.540006][    C0]  ? __pfx_mcp2221_raw_event+0x10/0x10
[  803.540032][    C0]  hid_irq_in+0x492/0x710
[  803.540164][    C0]  __usb_hcd_giveback_urb+0x374/0x530
[  803.540268][    C0]  dummy_timer+0xac3/0x4b40
[  803.540387][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  803.540428][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  803.540465][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  803.540491][    C0]  __hrtimer_run_queues+0x3bc/0xa10
[  803.540527][    C0]  hrtimer_run_softirq+0x17a/0x240
[  803.540557][    C0]  handle_softirqs+0x225/0x840
[  803.540587][    C0]  ? __irq_exit_rcu+0xca/0x220
[  803.540618][    C0]  __irq_exit_rcu+0xca/0x220
[  803.540645][    C0]  irq_exit_rcu+0x9/0x30
[  803.540669][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  803.540707][    C0]  </IRQ>
[  803.540715][    C0]  <TASK>
[  803.540725][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  803.540751][    C0] RIP: 0010:lock_release+0x2d7/0x3c0
[  803.540785][    C0] Code: cd ca 11 00 00 00 00 eb b5 e8 c5 bd 2d 0a f7 c3 00 02 00 00 74 b9 65 48 8b 05 b5 88 ca 11 48 3b 44 24 28 75 44 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 9a be 30 0a cc 48 8d 3d 72 c4 b8
[  803.540807][    C0] RSP: 0018:ffffc900033d7810 EFLAGS: 00000282
[  803.540830][    C0] RAX: 9729b7100babf800 RBX: 0000000000000206 RCX: 0000000080000001
[  803.540867][    C0] RDX: 00000000363510b2 RSI: ffffffff8e4b12ee RDI: ffffffff8c4bdb80
[  803.540886][    C0] RBP: ffff88807f9c8ba0 R08: ffffffff824d60fc R09: 0000000000000000
[  803.540905][    C0] R10: 0000000000000000 R11: ffff888023b2a9a0 R12: 0000000000000001
[  803.540923][    C0] R13: 0000000000000001 R14: ffffffff8eb59c60 R15: ffff88807f9c8000
[  803.540945][    C0]  ? fast_dput+0x29c/0x670
[  803.540984][    C0]  ? fast_dput+0x1e/0x670
[  803.541015][    C0]  rcu_read_unlock+0x93/0xa0
[  803.541045][    C0]  fast_dput+0x2a1/0x670
[  803.541078][    C0]  dput+0x30/0x60
[  803.541107][    C0]  step_into_slowpath+0x2ec/0x820
[  803.541143][    C0]  ? __pfx_step_into_slowpath+0x10/0x10
[  803.541178][    C0]  ? lookup_fast+0x3f1/0x5d0
[  803.541213][    C0]  ? inode_permission+0x2bc/0x5f0
[  803.541246][    C0]  link_path_walk+0xd5e/0x1910
[  803.541299][    C0]  path_openat+0x236/0x3830
[  803.541340][    C0]  ? kasan_save_track+0x3e/0x80
[  803.541373][    C0]  ? do_sys_openat2+0xcc/0x200
[  803.541405][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  803.541441][    C0]  do_file_open+0x23e/0x4a0
[  803.541482][    C0]  ? __pfx_do_file_open+0x10/0x10
[  803.541532][    C0]  ? _raw_spin_unlock+0x28/0x50
[  803.541567][    C0]  ? alloc_fd+0x651/0x6c0
[  803.541601][    C0]  do_sys_openat2+0x115/0x200
[  803.541636][    C0]  ? __pfx_do_sys_openat2+0x10/0x10
[  803.541668][    C0]  ? fput_close_sync+0x11f/0x240
[  803.541699][    C0]  ? __pfx_fput_close_sync+0x10/0x10
[  803.541732][    C0]  __x64_sys_openat+0x138/0x170
[  803.541765][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  803.541791][    C0]  do_syscall_64+0x174/0x580
[  803.541817][    C0]  ? clear_bhb_loop+0x40/0x90
[  803.541846][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  803.541870][    C0] RIP: 0033:0x7f3fa22a7407
[  803.541905][    C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  803.541928][    C0] RSP: 002b:00007ffe7bba7800 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  803.541972][    C0] RAX: ffffffffffffffda RBX: 00007f3fa2a6c880 RCX: 00007f3fa22a7407
[  803.541991][    C0] RDX: 0000000000080241 RSI: 00007ffe7bba7c70 RDI: ffffffffffffff9c
[  803.542010][    C0] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000
[  803.542026][    C0] R10: 00000000000001b6 R11: 0000000000000202 R12: 000055f68d8dbdfc
[  803.542042][    C0] R13: 000055f68d8dbdfc R14: 0000000000000001 R15: 00007ffe7bba7b60
[  803.542080][    C0]  </TASK>
[  803.542089][    C0] 
[  803.984168][    C0] Allocated by task 13689:
[  803.988669][    C0]  kasan_save_track+0x3e/0x80
[  803.993374][    C0]  __kasan_kmalloc+0x93/0xb0
[  803.997987][    C0]  __kmalloc_noprof+0x375/0x720
[  804.002860][    C0]  hash_net4_resize+0xb0b/0x1ca0
[  804.007900][    C0]  call_ad+0x439/0xb50
[  804.012005][    C0]  ip_set_ad+0x824/0x9d0
[  804.016264][    C0]  nfnetlink_rcv_msg+0xcc2/0x12b0
[  804.021323][    C0]  netlink_rcv_skb+0x226/0x4a0
[  804.026103][    C0]  nfnetlink_rcv+0x2b9/0x28c0
[  804.030811][    C0]  netlink_unicast+0x7bb/0x940
[  804.035596][    C0]  netlink_sendmsg+0x813/0xb40
[  804.040384][    C0]  sock_sendmsg_nosec+0x13a/0x180
[  804.045429][    C0]  ____sys_sendmsg+0x54e/0x850
[  804.050217][    C0]  ___sys_sendmsg+0x2a5/0x360
[  804.054905][    C0]  __x64_sys_sendmsg+0x1b1/0x290
[  804.059858][    C0]  do_syscall_64+0x174/0x580
[  804.064462][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  804.070385][    C0] 
[  804.072726][    C0] Freed by task 0:
[  804.076477][    C0]  kasan_save_track+0x3e/0x80
[  804.081210][    C0]  kasan_save_free_info+0x40/0x50
[  804.086249][    C0]  __kasan_slab_free+0x5c/0x80
[  804.091051][    C0]  __rcu_free_sheaf_prepare+0x12d/0x2a0
[  804.096620][    C0]  rcu_free_sheaf+0x31/0x200
[  804.101230][    C0]  rcu_core+0x78b/0x10a0
[  804.105491][    C0]  handle_softirqs+0x225/0x840
[  804.110278][    C0]  __irq_exit_rcu+0xca/0x220
[  804.114881][    C0]  irq_exit_rcu+0x9/0x30
[  804.119142][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  804.124810][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  804.130810][    C0] 
[  804.133141][    C0] The buggy address belongs to the object at ffff888052873f80
[  804.133141][    C0]  which belongs to the cache kmalloc-64 of size 64
[  804.147035][    C0] The buggy address is located 63 bytes to the right of
[  804.147035][    C0]  allocated 64-byte region [ffff888052873f80, ffff888052873fc0)
[  804.161567][    C0] 
[  804.163907][    C0] The buggy address belongs to the physical page:
[  804.170344][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x52873
[  804.179119][    C0] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  804.186255][    C0] page_type: f5(slab)
[  804.190253][    C0] raw: 00fff00000000000 ffff88801b0048c0 dead000000000100 dead000000000122
[  804.198849][    C0] raw: 0000000000000000 0000000800200020 00000000f5000000 0000000000000000
[  804.207432][    C0] page dumped because: kasan: bad access detected
[  804.213865][    C0] page_owner tracks the page as allocated
[  804.219586][    C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13689, tgid 13684 (syz.4.2474), ts 794320445112, free_ts 790312474344
[  804.240539][    C0]  post_alloc_hook+0x1f9/0x250
[  804.245329][    C0]  get_page_from_freelist+0x21fa/0x2270
[  804.250900][    C0]  __alloc_frozen_pages_noprof+0x18d/0x380
[  804.256733][    C0]  allocate_slab+0x79/0x5e0
[  804.261363][    C0]  refill_objects+0x2d5/0x350
[  804.266051][    C0]  __pcs_replace_empty_main+0x2bf/0x6b0
[  804.271621][    C0]  __kmalloc_noprof+0x485/0x720
[  804.272446][    C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  804.276516][    C0]  hash_net4_resize+0xa36/0x1ca0
[  804.276550][    C0]  call_ad+0x439/0xb50
[  804.292584][    C0]  ip_set_ad+0x824/0x9d0
[  804.296882][    C0]  nfnetlink_rcv_msg+0xcc2/0x12b0
[  804.301949][    C0]  netlink_rcv_skb+0x226/0x4a0
[  804.306733][    C0]  nfnetlink_rcv+0x2b9/0x28c0
[  804.311438][    C0]  netlink_unicast+0x7bb/0x940
[  804.316224][    C0]  netlink_sendmsg+0x813/0xb40
[  804.321002][    C0]  sock_sendmsg_nosec+0x13a/0x180
[  804.326052][    C0] page last free pid 5358 tgid 5358 stack trace:
[  804.332386][    C0]  __free_frozen_pages+0xc1e/0xd10
[  804.337519][    C0]  kasan_depopulate_vmalloc_pte+0x6d/0x90
[  804.343263][    C0]  __apply_to_page_range+0xbd8/0x1420
[  804.348662][    C0]  __kasan_release_vmalloc+0xa2/0xd0
[  804.353966][    C0]  purge_vmap_node+0x220/0x960
[  804.358765][    C0]  __purge_vmap_area_lazy+0x783/0xb40
[  804.364168][    C0]  drain_vmap_area_work+0x27/0x40
[  804.369215][    C0]  process_scheduled_works+0xa8e/0x14e0
[  804.374776][    C0]  worker_thread+0xa47/0xfb0
[  804.379389][    C0]  kthread+0x388/0x470
[  804.383486][    C0]  ret_from_fork+0x514/0xb70
[  804.388122][    C0]  ret_from_fork_asm+0x1a/0x30
[  804.392904][    C0] 
[  804.395242][    C0] Memory state around the buggy address:
[  804.400880][    C0]  ffff888052873e80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  804.408977][    C0]  ffff888052873f00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  804.417125][    C0] >ffff888052873f80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  804.425214][    C0]                                                                 ^
[  804.433208][    C0]  ffff888052874000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  804.441280][    C0]  ffff888052874080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  804.449347][    C0] ==================================================================
[  804.457442][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  804.464657][    C0] CPU: 0 UID: 0 PID: 4992 Comm: udevd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  804.475095][    C0] Tainted: [L]=SOFTLOCKUP
[  804.479434][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  804.489506][    C0] Call Trace:
[  804.492803][    C0]  <IRQ>
[  804.495665][    C0]  vpanic+0x56c/0xa60
[  804.499677][    C0]  ? __pfx_vpanic+0x10/0x10
[  804.504210][    C0]  panic+0xc5/0xd0
[  804.507956][    C0]  ? __pfx_panic+0x10/0x10
[  804.512403][    C0]  ? mcp2221_raw_event+0x10b0/0x12a0
[  804.517729][    C0]  ? mcp2221_raw_event+0x10b0/0x12a0
[  804.523037][    C0]  ? mcp2221_raw_event+0x10b0/0x12a0
[  804.528342][    C0]  check_panic_on_warn+0x89/0xb0
[  804.533309][    C0]  ? mcp2221_raw_event+0x10b0/0x12a0
[  804.538611][    C0]  end_report+0x73/0x170
[  804.542879][    C0]  ? mcp2221_raw_event+0x10b0/0x12a0
[  804.548186][    C0]  kasan_report+0x128/0x150
[  804.552722][    C0]  ? mcp2221_raw_event+0x10b0/0x12a0
[  804.558035][    C0]  mcp2221_raw_event+0x10b0/0x12a0
[  804.563167][    C0]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  804.569000][    C0]  ? down_trylock+0x50/0xb0
[  804.573527][    C0]  __hid_input_report+0x41c/0x580
[  804.578581][    C0]  ? __pfx_mcp2221_raw_event+0x10/0x10
[  804.584066][    C0]  hid_irq_in+0x492/0x710
[  804.588421][    C0]  __usb_hcd_giveback_urb+0x374/0x530
[  804.593822][    C0]  dummy_timer+0xac3/0x4b40
[  804.598383][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  804.603340][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  804.609171][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  804.614148][    C0]  __hrtimer_run_queues+0x3bc/0xa10
[  804.619409][    C0]  hrtimer_run_softirq+0x17a/0x240
[  804.624547][    C0]  handle_softirqs+0x225/0x840
[  804.629345][    C0]  ? __irq_exit_rcu+0xca/0x220
[  804.634159][    C0]  __irq_exit_rcu+0xca/0x220
[  804.638772][    C0]  irq_exit_rcu+0x9/0x30
[  804.643038][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  804.648704][    C0]  </IRQ>
[  804.651651][    C0]  <TASK>
[  804.654603][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  804.660614][    C0] RIP: 0010:lock_release+0x2d7/0x3c0
[  804.665942][    C0] Code: cd ca 11 00 00 00 00 eb b5 e8 c5 bd 2d 0a f7 c3 00 02 00 00 74 b9 65 48 8b 05 b5 88 ca 11 48 3b 44 24 28 75 44 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 9a be 30 0a cc 48 8d 3d 72 c4 b8
[  804.685572][    C0] RSP: 0018:ffffc900033d7810 EFLAGS: 00000282
[  804.691676][    C0] RAX: 9729b7100babf800 RBX: 0000000000000206 RCX: 0000000080000001
[  804.699672][    C0] RDX: 00000000363510b2 RSI: ffffffff8e4b12ee RDI: ffffffff8c4bdb80
[  804.707661][    C0] RBP: ffff88807f9c8ba0 R08: ffffffff824d60fc R09: 0000000000000000
[  804.715650][    C0] R10: 0000000000000000 R11: ffff888023b2a9a0 R12: 0000000000000001
[  804.723633][    C0] R13: 0000000000000001 R14: ffffffff8eb59c60 R15: ffff88807f9c8000
[  804.731637][    C0]  ? fast_dput+0x29c/0x670
[  804.736113][    C0]  ? fast_dput+0x1e/0x670
[  804.740469][    C0]  rcu_read_unlock+0x93/0xa0
[  804.745098][    C0]  fast_dput+0x2a1/0x670
[  804.749373][    C0]  dput+0x30/0x60
[  804.753029][    C0]  step_into_slowpath+0x2ec/0x820
[  804.758080][    C0]  ? __pfx_step_into_slowpath+0x10/0x10
[  804.763673][    C0]  ? lookup_fast+0x3f1/0x5d0
[  804.768290][    C0]  ? inode_permission+0x2bc/0x5f0
[  804.773340][    C0]  link_path_walk+0xd5e/0x1910
[  804.778139][    C0]  path_openat+0x236/0x3830
[  804.782673][    C0]  ? kasan_save_track+0x3e/0x80
[  804.787561][    C0]  ? do_sys_openat2+0xcc/0x200
[  804.792352][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  804.798451][    C0]  do_file_open+0x23e/0x4a0
[  804.803000][    C0]  ? __pfx_do_file_open+0x10/0x10
[  804.808067][    C0]  ? _raw_spin_unlock+0x28/0x50
[  804.812941][    C0]  ? alloc_fd+0x651/0x6c0
[  804.817300][    C0]  do_sys_openat2+0x115/0x200
[  804.822004][    C0]  ? __pfx_do_sys_openat2+0x10/0x10
[  804.827250][    C0]  ? fput_close_sync+0x11f/0x240
[  804.832215][    C0]  ? __pfx_fput_close_sync+0x10/0x10
[  804.837557][    C0]  __x64_sys_openat+0x138/0x170
[  804.842444][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  804.848536][    C0]  do_syscall_64+0x174/0x580
[  804.853147][    C0]  ? clear_bhb_loop+0x40/0x90
[  804.857845][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  804.863754][    C0] RIP: 0033:0x7f3fa22a7407
[  804.868199][    C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  804.887827][    C0] RSP: 002b:00007ffe7bba7800 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  804.896297][    C0] RAX: ffffffffffffffda RBX: 00007f3fa2a6c880 RCX: 00007f3fa22a7407
[  804.904286][    C0] RDX: 0000000000080241 RSI: 00007ffe7bba7c70 RDI: ffffffffffffff9c
[  804.912270][    C0] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000
[  804.920252][    C0] R10: 00000000000001b6 R11: 0000000000000202 R12: 000055f68d8dbdfc
[  804.928261][    C0] R13: 000055f68d8dbdfc R14: 0000000000000001 R15: 00007ffe7bba7b60
[  804.936261][    C0]  </TASK>
[  804.939999][    C0] Kernel Offset: disabled
[  804.944327][    C0] Rebooting in 86400 seconds..