last executing test programs:

8.830682895s ago: executing program 3 (id=1288):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x0, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0)

8.77428257s ago: executing program 3 (id=1289):
socket$kcm(0x29, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0xa)
ftruncate(0xffffffffffffffff, 0x200004)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80001d00c0d1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x5, 0x6, 0x7, 0x6, 0xff, 0x2, 0xfffff5ee, 0x401, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0xfffffff9, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x4c, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x8000101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x25, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0x1, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdaa, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x7, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x27f8, 0xc0d, 0xfffffffd, 0xb, 0xc, 0xfffffffb], [0xa3, 0x6, 0x6, 0x9, 0x1003, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0x100, 0x1000, 0xf1, 0x6, 0xc, 0x10000, 0x72, 0xb, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0x3, 0x200, 0xfffffffd, 0xffffffff, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x6, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x4, 0x7fff, 0x5, 0x5, 0x3ff, 0x3, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x0, 0x0, 0x7, 0x4e6, 0x8, 0x6, 0x5ef, 0x8000, 0xc, 0x4, 0x401, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x1ff, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff0000000000080001"], 0x30}}, 0x0)

8.421123514s ago: executing program 3 (id=1290):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x441, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x1e, 0xa01, 0x0, 0xffffffff, {0xb}}, 0x14}}, 0xc0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = getpgid(0x0)
socket(0x15, 0x5, 0x0)
r2 = syz_pidfd_open(r1, 0x0)
r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xac63094eb3328933, 0x0)
pidfd_getfd(r2, r3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)
r5 = dup(0xffffffffffffffff)
sendto$packet(r5, 0x0, 0x0, 0x1, 0x0, 0x0)
r6 = openat$mice(0xffffff9c, &(0x7f0000000100), 0x129102)
write$UHID_INPUT(r6, &(0x7f0000000780)={0x8, {"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", 0x1000}}, 0x1006)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x1)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x4)
openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x600642)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x1}}, 0x0)
ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000040)=""/185)

7.396597859s ago: executing program 0 (id=1294):
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=<r2=>0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000400))
sched_setattr(r2, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
socket(0x2, 0x80805, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff00000000d609080000000000c39af0ff01000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf98000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000938c4c6a16d8000000ed0c0a66000000000060311dd1"], 0x48)
ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000140)=0xfffffdfb)
syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x101000)
r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301)
ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000001ac0)=@urb_type_bulk={0x3, {0x1, 0x1}, 0xe9, 0x42, 0x0, 0x0, 0x3ff, 0x72, 0x6, 0x8, 0x2, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x7191, 0x5, 0x4, 0x8000, 0xffffffffffffffff, 0x3fb, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x0, 0x4}, 0x50)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10)
r7 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
socket$kcm(0x10, 0x2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x0, 0x0, 0x0)

6.755824003s ago: executing program 2 (id=1296):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xc3ff, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="48000000100001002abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0221000008200200140003006e657464657673696d3000000000000014001680100001800c0005"], 0x48}}, 0x40000)

6.348689222s ago: executing program 1 (id=1297):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3}, 0x94)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000308030000000000014000000000"], 0x20}}, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0a45352, &(0x7f0000000300)={0x0, 0x0, 'client1\x00', 0x0, "001c69507363076f", "0857b75b658e8d6661006ee517ff142d1a1eabfd5aa2279d09f30299cb939707"})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000005500010e0e0000000000000007"], 0x38}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000007000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003"], 0xf0}}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000100)={{0x3c, @empty, 0x4e20, 0x1, 'none\x00', 0x30, 0x2, 0x55}, {@broadcast, 0x4e22, 0x2000, 0x2, 0x3, 0xfffffffb}}, 0x44)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x4000000000000200, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'erspan0\x00', <r4=>0x0})
bind$packet(r3, &(0x7f0000000b40)={0x11, 0x0, r4, 0x1, 0x40, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}}, 0x14)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x8, 0x6}]}, 0x8)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c)
socket$packet(0x11, 0x2, 0x300)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)

6.336520742s ago: executing program 2 (id=1298):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @rand_addr=0x64010102}, 0xffffffffffffffc5)
ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0))
r1 = openat$mice(0xffffff9c, &(0x7f0000000000), 0x680002)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0xd, 0x4)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

5.972969548s ago: executing program 1 (id=1299):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x0, {0x43}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0)

5.949453112s ago: executing program 3 (id=1300):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x441, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x1e, 0xa01, 0x0, 0xffffffff, {0xb}}, 0x14}}, 0xc0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = getpgid(0x0)
socket(0x15, 0x5, 0x0)
r2 = syz_pidfd_open(r1, 0x0)
r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xac63094eb3328933, 0x0)
pidfd_getfd(r2, r3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)
syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c)
r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)
r5 = dup(0xffffffffffffffff)
sendto$packet(r5, 0x0, 0x0, 0x1, 0x0, 0x0)
r6 = openat$mice(0xffffff9c, &(0x7f0000000100), 0x129102)
write$UHID_INPUT(r6, &(0x7f0000000780)={0x8, {"b98de7b7403a352380d60af57d3244961adea1343d4c2cdd5b92a055ad5637722d6571433d13e62c9ea7d244c9c5821f68a53b97b0ed4da87a73a041adf8404c6d56ea302f48dd3640e7a6d6ae713cf13459f61a9f103726d56c9cc9727f868e677785c9b7bd7f377e809fbc4234b427a71d73d4cd80460bbfdf3fe437c8539a4af4bbcea89eef67abf9ce7388abbe4c463b4bfac5539c32cacb783e81274174ce7c8b70f7172a9eeb7ef23ed77ad797adc53bef5101583a5db309c5045a8861d8aa823855c867632c1ea6e52d2200e3511afbf9e368f09fef8cec1e326f9d19cc107ddeb1eb50cda2113b380097545b78e221aff13b2aadfd66bb62f1a3a9c1020e250486762d8f5b04b2892c9373f7c2e9af50267f23b13ec3776d392ebe137b465f2a663348df6220539ff9998340c1544f3eeb5812b4336aef612e77b6be67c1d127eca293b20f1fe8805f4de0eb6acc9325cf0c509db71635701b64516db3813e566e13132f04a33294ba12abd625ace0fb446c38235166303f0011fbf580bc313ae9b98582c496d505d5bd7623a1ba7771e4bee1cc17c4bbb73cb053e0b16a79844beb3063c14da11955c4b36f59d8042ad926f38da4e61a403a81410d43752a446320cac1aa293f2f1c1c766c590245413757de58462f939e5bbbd49f8a786bcac4f4672b6f16de62527db534608c910567de166a7ff3506497d1b62e033105106da32f119112b79f5568c89c4fe5ebe40a1032672460e50052a7f6d37950bb9712f75d1a9aedf892f75d2bd367209377277a424291f4382c1633a0eeef094209e51b7d7d5ad8a7b6018e0ea4ad88b5200169e1c00608a442fb97b499785283d35f0530d174c20bb2a360fa6b4c55b67ba29bf16ec2a5f8dfeaf285d93c96ef1e0e2a98d6ca23abfa048230639bbb53e128376200f565d883fe1509e47a8ceba7bac2f521b3bd9b692879a2873aa8851894831206d05d171399db521ae6dea1bce8585d720d43a25c75eea9e82ab749f8c5aa2b89a0ea0d77f870b6c06114d1ede026be8a5115a21c4a19071bdad572301d602732f7e8555f8a93f283b0ebfc881d917d02e9723128de6f6864f43e205712c5de8cc59bd8bcfadec9a147d11e41ad72745f85ca451322538a47ee744a9eff02974da7860b2b029477f7e4e4ff44627848e453cd2c39c36a8e19d110b833440fc97ae4153b995aaa5010b2d38d3c962ef83cc5b891d1d66f8e768327a3a95282b76e94eb3045e1617375b2ac7f1caeeb7a538f1544f2796d32462d8bd5db7621decb41ba84da72bb4198256ce33f84bbea711fdee537d0de0074b10db1bbb40a5fac38e82db7cd7ae6550978fef42ba7b217a902f1d12644b277c6c7dae628207bafd93d82a36e70e429a45cf132b14b2cef2075f0e2346f93587bd886b6acc1f2d54e0cccdfcd9dfab9865359be1c4ec4e8809802aa233d034c5cb516d6af101f21e803b26ba9207cacd91f838377dd8688b505caf5d8704a22a48c1355988ccabb8e1969a0cff7f214c0593e0e92672e076385e95ea8b7c9d88375ea662379e3c7d7a331c40b7a98924ad72125d773215b8d9bb591012346a0f59db8984dc9961c9cabb9e478cc4308c73fbeb5a1b09d515c8d7d27a30c35da964523a797f12d0c48c8425b26195c214f7095baf7f49f39a4e8718569805fef20db8de5a9657cf079c320e1ce857879c634e011c0e4dbd36f439bd017c7e633abbff3a0901c1675bca2e2dcc3ab1def0eb6e5e810c1f746d2843787259ed37fe5f73e1969134b2254f9f9eef83e540de566804178a1e3a592ea75f5586f2534610c6ced422e54944597ac9b867657ea2bfe71fe2e0d832c648b60275a5209a7632217492da3672773c27cc2658f31ab367579f37c56161cd13135b3bad713cdea338a5c6eb99a25efb9e473f29b3b79c380fe07f8a07bcc3909cb103473de8dd16a2e34ebb500e6f66657b06fcac58e7214df650ac1291be7e1bedb380314317c11ddbeb839fd45d868b880bb1a0419bf958a851fdfd580d9740206c5b5332d3207a4dacac06f834ee081cb30b99011c2ae172313a2a242a80b95f7505dfbfca06ade3394775370bf9f887c328a3c98df2adca28c0a70a58a01955b49f6f24b7be3915c0aef8d3801575faa426736f9ecc937c3d553856b013a30c9cdf8b2051b9621354cd84e1b8ec0a143703fc52eac5f009795f446fe973768d3e039ed1eb105e49a1faabc5c69e72ece983e7cad035455c8955a93889c63a5b032f9e8ac84bd2c26b56e2c65289e100351b490992144f2a6aa33a11abef16308b0f5e7972ed956ad1817c164cfec757531b020b8ac55eda611723eb5ebc15b3020baec691a856977f1d57db83551828ed32a18d58bbb1f7026e74061cac1c6603884f2888fa9fcadff02a7ad240b390d805d477d04532d7b4eeb1bfc1e047182ef775a86af7a4664edaabf3eed61f00ec49365c33b5f1f80e331c9b0fd3dc62b896864d3de02d17393b917b86ecd5cbb75a51842bc119e8850a928322172ddc82aa15657d479aee1295244fe2f221bff4e4672793afba7e21928abbd5f2991b80a567270eea00091b4ab6a03a07a132c7ffe28fcd496eef45b17f08fe1a16e546c6cbe62a5426ebfdce17ce78195529dee8607cd1205fea4c79914bf4f9e93697277e9f2a58d3234d5fec7e7b26a8dea7e08df12959fd884bb9b4326f02f14cfc83a5783dac39e1b497899b1786884c1c0526623df9479e5ce08f14ee96b043c65e6f8020815178e2ac10c2f1aaf34b8fc73feb6088eb0f44d7bcee1b6f01c6d815feb19e8338718314ed2126376b4e14db405cc9b8ee0512616c5a720ac3d2911d8c5e2d4191ed8b9e177a118b5bd82468e8224686888f053693af12d70d32270a9d34a4960eb6848bf2c7712a33e0d82bbb21805ec9dc283cb94ec0ac4196c5d4a4312e3192f3b596d986b5ce8a6c34347ef529aca428d9c2450f50536d55d23714aa4e065f2f8e4e94ff1e6404bb0bba365ab2bdd054313614c7e22b25f2096a18b2264343a4a7c15b5a27ff1e103a837a69652a624c7291bfd5e1e1a3d6e236c2791177939f72e77f7ad0e1efeac0d44e85bd7308c3475dc0036151e19b6baa9feebe00bba2f54fb6d1aecf96e56f1f67f1946fbbcc2c1ccdbca217eb8e5aee40b2c905f3bc80c0fdf9dcd2b654d1ea117976ed5d9998b6f04bed3bea6d59b391d20510405d227a3cefbf8a33a115329ad509ef38944bffa424262df16f507391611cd651687f3fa165efd677d5380b726d89d77dc395464bc4b7b83262d85dc4261934c508b6c430a814efbd2dd00c30d7e720399126d221d95a82214302ca81ace556c3ed546b3ddbec262f14b023bb306b57eed43a10d1b7164c308765112fa3a24dabe2e9657607ba03db1ae67081ac51e0c16547228d315cb11a9ec5a1ba794365337d972941f9ed83247bc6c4c68fb27066e950e1f06d94f7c736b18cca78d9d45ef6915f2c482cc68bb073cc17711f0dfaf82c968babdb98062e0cddbe825a6783091c189b38d35af6836ee8ef7a1cc68e3f6645036cfcde2fb2e887624f25a0df1231125217d2657806727025cfdb4cbead4da18f2b766fcdf9ff84c2cb665b582b306cc2a5cf19798126905f01e9f7e5a6303c1dbcd4f19d5feb36bd10e0b25900d8826761fc2306573e28ba8ddef739d76a132ea2a2d8c24e3b6c5a6e29790db53f3e4c4364a66a55bbeaecc8336de5c913f80a50b2f958461f4d685fd67a0e63602ce842d15a2d18b31042b0026c29c42f92a446b3fb9aa0ff9aa1bfdde4d4870c20a932ffd72d4ec33496e415f79e0d3fec38924d4ae8f6a2eb6f149611afe537e5e11ed199a2d2f0e7e77d26aa38902ca6170e7342b8952a9c7e4db462b292c987e0b3aae9a840b1773713acbcb405aadbee8d2a8721d8ca3151f0f1b0660126e5cfe44eecc8f097270d2fc22e7416700125b379b3f0e3a1026ed3d086ffa3ecf4833dfb1d453d195786573b22177437fe1964bdaaa7c46f77432807ddb476673e25fa9f8b567f39fcb023fe4e5be1b7d8ce449de690500ad00abfae2f546c41a702de2cd689e780d641544d521d59a4d36262616615cac94d4c09ae84d66508b55dfa272ace904191bae237443da3b9abe1a00b13bd056677365be4c764d088504ac92661297aad307298d007860b593dfa03b5212a201954e17c3ad9d4e2687db824b86c5fa92a6e1bda6c74e5ea06099d075b121117f4109b89cac29d1205a2bdd1025e6daf05bc38d02e75c7f9c546b94d74b5886de27be08a88d02a4b3eecc5cc104f02f89d90c104715899b6e3275354dc16137a7d519fd704112505759c595289f57474afc8738de1cb8f1c4a78a06ec5f14b420ad7e9d0bece2b339cc336fcbfb43e16bd4ee15fee961d2abb7a9b22d8bf4e3ef6ac4bd5d4cd508d0419f0a0aa15ed02d030afd5fc5ccc920dd0d2893dead0796c43a1a7bfa57d4db67779218bdae73c5b285f3601942b0691167222fbb47aa9c6fea29ba490551626110dddc3016afb3e10f515532e9edef3a6f2eda1f8af64d7079e9c01edccb549a5716eba2f76d60af61d14ea10a2e8ea72ce6b1e00a27ef682cdf2547ae84606ee4c7e51882ac42836c09de5f496bcb4a9e961dcacff5d39a76c16b502fcd41a7e89b92492045ba27950067216ed6a27677f03070935b5d40ca55726213dc1acd43624ee8ee9145264dec6813cb151bb9caacc95428a9f012e0637e0946e58943b2c4b586e320cc931fb868d72c3c60f7b405183e18cf8480f4fd30044a744008b5eea1f91afd555f3cc0e0448e3c09e39cd7a54aaf98e054f04706cec00b996910ecda67327f9d0e29adcc9d729b54bdfdc36dc33af56b3ae405713c60a9234c71101be4233a4a68712a0e9f0720cfef4559bb4536175db38d0a334a78ae08606852fc42bd0203b186bdbfe2f377198ac17d2c4cfea401356ffbba9b075abae387ce585eca0e400a174f536822e91f1f88e57821e9d914b6e92b5555ac51f1d0f631fc2f617ac8dbc303c2e4b0e560214723eda4ec21da083f58ae0470955d7ef9c377f56a26013ffe711cc0c0b33db39db91370f96ed24edee99991e5eb6f4796dad1af2e1904b49fe24bdb89e339f5d78a0f0d0dc1478b9cc7466b7bdf2a2d53750a096da2a890913b12baa0b9a7b63d02af0330c2d26f5dac02f395e596cf78c576fd91f995688ccf64bfc084b22370fc4bef1c522d1bab3599af50ab68872dc9beb1a4a5ca5950e3efd30e0c60cdff9e9c0fc712a40e25cf77e4a8d7616ff950fb1915631a67b0ecd0ff14998b1588fb31aa4953c63dcc01b717b7cfde911dda3bdbc0c3568728d015fd4c716c2106b68aa008677e2b34d19959ba854a2ffd65158fd19cbb24073f5e3f429c8c61fed1518725afea42c484229faf0580b73833c5e5114dd03cd98efab933fe3d8965aba4811d5a8e2e1e23b8ca452122227a82d1961d3cf23f57bd48e2fcb1360eddb4a5a1a502b37b760b327ba8cb8a219069d32f53c7e9dc8c03e9b5411e56a21e84e59d64cbe273e6039d2597ba86ea198bea9e9476e81f5cc5bfcd08b19e607b41199fa6820c75cc0ad9aaa44ac765e825832f0fe9e64cd4140cc5ebb1a21c8d4608d7802826be5681e73a474f1415bba197b70c1d72e1cf06140521b1bafe469f9baab2f6b70baeb7bb910bae039c0163636329e762f0ea999f29b20b8cdc558b9d76d02bfe3a8d9a0c75a670bddd32229baddb53cff0554370", 0x1000}}, 0x1006)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x1)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x4)
openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x600642)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x1}}, 0x0)
ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000040)=""/185)

5.752024034s ago: executing program 1 (id=1301):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r5, 0x2)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000b3000040"])
r9 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
flock(r9, 0x1)

5.566583194s ago: executing program 4 (id=1302):
r0 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r0, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x100, 0x0, 0x1947, 0x5})

5.484996401s ago: executing program 0 (id=1303):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="500000000206030000000000000000000100ffff050001000700000005000400020000000c00078008001200000000000900020073797a30000000000c000300686173683a697000050005000a"], 0x50}, 0x1, 0x0, 0x0, 0x20000804}, 0x4040004)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x2, 0x2, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil})
ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xe3c})
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x4, 0x3, 0x100000, 0x2000, &(0x7f000000f000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xcccc0000, 0x1000, &(0x7f0000f15000/0x1000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x0, 0x6000, 0x1000, &(0x7f0000fd3000/0x1000)=nil})
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r3, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil})
r4 = openat$uinput(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x2a)

5.388595005s ago: executing program 4 (id=1304):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="68000000130001000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003"], 0x68}}, 0x0)
r2 = openat$mixer(0xffffff9c, &(0x7f00000001c0), 0x80002, 0x0)
ioctl$SOUND_MIXER_WRITE_VOLUME(r2, 0xc0044d03, &(0x7f0000000180)=0x3f)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000000)) (fail_nth: 4)

4.993884058s ago: executing program 2 (id=1305):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x1c)
r2 = syz_open_dev$vivid(&(0x7f0000000200), 0x1, 0x2)
ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000240)={0x2, 0x0, '\x00', {0x0, @bt={0x10001, 0x7ff, 0x1, 0x2, 0xe7bd, 0xfdc, 0x4, 0x2, 0x2, 0x2, 0xffffffff, 0x3, 0x7, 0x1000, 0xf, 0x8, {0x6, 0xf}, 0x8, 0x5}}})
r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x161141)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000140), &(0x7f0000000180)=r4}, 0x1c)
socket$inet6_mptcp(0xa, 0x1, 0x106)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e)
socket$nl_audit(0x10, 0x3, 0x9)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f0000001840)=[{{&(0x7f0000000400)=@x25, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000480)=""/136, 0x88}, {&(0x7f00000000c0)=""/17, 0x11}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/217, 0xd9}, {&(0x7f0000001640)=""/28, 0x1c}, {&(0x7f0000001680)=""/123, 0x7b}, {&(0x7f0000001700)=""/107, 0x6b}, {&(0x7f0000001780)=""/19, 0x13}], 0x8, &(0x7f0000001800)=""/3, 0x3}, 0x4}], 0x1, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r6, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r7, 0x0, 0x22, &(0x7f0000000000)=0x40202, 0x4)
add_key(&(0x7f0000000380)='pkcs7_test\x00', 0x0, &(0x7f00000003c0)="d1c61a68031f0ce7f9e8416c91b62300e9e5dc9e", 0x14, 0x0)
unshare(0x22020600)
r8 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r8, 0x114, 0x3f, &(0x7f0000000280)=0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2)
r9 = syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0)
r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(r10, r9, 0x7, 0xffffffffffffffff, 0x0)

4.842081354s ago: executing program 0 (id=1306):
openat$kvm(0xffffffffffffff9c, 0x0, 0x22042, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x1000, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
socket$kcm(0x2, 0x3, 0x2)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
write$sndseq(r2, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1}, {}, @addr={0x2a, 0x5}}], 0x38)
r3 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00')
getdents64(r3, &(0x7f0000000300)=""/55, 0x37)
readv(r2, &(0x7f0000000000)=[{0x0}], 0x1)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000000)={0x5, 0xfff, 0x8, 0x2, 0x5, 0x80000000, 0x5, 0x48a5}, &(0x7f0000000040)=0x20)
r5 = socket(0x200000000000011, 0x2, 0xd)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c9042, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r6, &(0x7f0000000080)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
syz_emit_ethernet(0x42, &(0x7f0000000240)=ANY=[], 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0xb001, 0x4, 0x3b0, 0x0, 0x10c, 0x1f0, 0x2d0, 0x2d0, 0x2d0, 0x7fffffe, 0x0, {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2, 0x1}}}, {{@uncond, 0xbc, 0xe4, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xbc, 0xe0}, @unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0x31caf518}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3fc)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r7 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), r5)
sendmsg$SEG6_CMD_SET_TUNSRC(r5, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x1c, r7, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xf}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x80)
writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000000c0)='$T', 0x2}, {&(0x7f0000000240)="3a77acfd5e3f5b9057ae6018a749450f789ba0177859fcba83592be5205aeed8b1f5e232e6a00bc47ec28687b917c513dc25d2c09e8389abf694a55a5520f963f3123c8ec23833669be46e6e925dedb89f9be55a05f02749c9f71a71c9217e0c92ae63c2dfcd48cc8bab594f7af56cfc756c6c54493e91bd4ab2e5def4c51a5fb5e1b2b537eb97a26be469fc04bbbe7837e3147a64040401d90dfdc2f56f64c7a1", 0xa1}, {&(0x7f0000000140)}, {&(0x7f00000004c0)}, {0x0}], 0x5)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)

4.040750627s ago: executing program 4 (id=1307):
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe9d, 0x10, 0x0, 0x29}, 0x48)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = gettid()
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0)
timer_create(0x2, &(0x7f0000000000)={0x0, 0x0, 0x1}, &(0x7f0000000040))
r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0)
r4 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x201, 0x40, 0x40}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r7}, 0x38)
r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000040)={0x80109, "fa02946a000000001dda524f03000000000000000000003673000000002000"})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
sendmsg$IPSET_CMD_TEST(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090)
ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, 0x0)
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0x40103e05, &(0x7f0000000080)={"df000000000000000000000000000000000000002000a400"})
ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x0, 0x0, 0x3234564e, 0x0, 0x0, 0x0, 0x1, 0xfeedcafe, 0x3, 0x0, 0x0, 0x4}})

4.031235925s ago: executing program 1 (id=1308):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x70003, 0x0, [0x7, 0xb, 0x2, 0x9, 0xfffffffffffffff7, 0x6, 0x3000000002, 0x35fe7901]})

3.844018074s ago: executing program 2 (id=1309):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002400010300000000"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r2)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2)
recvmmsg(r2, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0, 0x2000}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x6}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000980)=""/201, 0xc9}, {&(0x7f0000000540)=""/227, 0xe3}, {&(0x7f00000002c0)=""/35, 0x23}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000002fc0)=""/4080, 0xff0}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x2020, 0x0)

3.668549503s ago: executing program 2 (id=1310):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x441, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x1e, 0xa01, 0x0, 0xffffffff, {0xb}}, 0x14}}, 0xc0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = getpgid(0x0)
socket(0x15, 0x5, 0x0)
r2 = syz_pidfd_open(r1, 0x0)
r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xac63094eb3328933, 0x0)
pidfd_getfd(r2, r3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}, 0x1c)
r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0)
r6 = dup(0xffffffffffffffff)
sendto$packet(r6, 0x0, 0x0, 0x1, 0x0, 0x0)
r7 = openat$mice(0xffffff9c, &(0x7f0000000100), 0x129102)
write$UHID_INPUT(r7, &(0x7f0000000780)={0x8, {"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", 0x1000}}, 0x1006)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x1)
move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x4)
openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x600642)
ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000040)=""/185)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r4], 0x20)

3.592901298s ago: executing program 1 (id=1311):
bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = userfaultfd(0x801)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close(0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$dsp1(0xffffffffffffff9c, 0x0, 0x361082, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, r0, 0x57c68000)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ftruncate(0xffffffffffffffff, 0x4)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
syz_emit_ethernet(0x42, &(0x7f0000000400)={@empty, @random="10200500c54d", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010102, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @mptcp=@mp_join={0x1e, 0x3, 0xb}]}}}}}}}, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1)
r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000140)={0x4, {0x1, 0x1, 0x8, 0x4, 0x5, 0x52}})
shutdown(r4, 0x1)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0)
r6 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b///o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
close(r7)
sendmmsg$inet(r3, 0x0, 0x0, 0xf00)

3.037245923s ago: executing program 4 (id=1312):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff000040720501cb6526010203010902120001000000000904"], 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x4, 0x1, 0x3, 0x8, 0x9, 0x8004}, {0x4, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r1, r2, 0x36}, 0x20)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0003010000000c03b8fe6784cf85da1b5ebfc2136ea0776134b47b7394fcfba0c807"], 0x0, 0x0}, 0x0)

2.91417981s ago: executing program 3 (id=1313):
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=<r2=>0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000400))
sched_setattr(r2, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
socket(0x2, 0x80805, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b2af0ff00000000d609080000000000c39af0ff01000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf980000000000005408000002000000850000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000938c4c6a16d8000000ed0c0a66000000000060311dd1"], 0x48)
ioctl$TIOCMSET(r5, 0x5418, &(0x7f0000000140)=0xfffffdfb)
syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x101000)
r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301)
ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000001ac0)=@urb_type_bulk={0x3, {0x1, 0x1}, 0xe9, 0x42, 0x0, 0x0, 0x3ff, 0x72, 0x6, 0x8, 0x2, 0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x7191, 0x5, 0x4, 0x8000, 0xffffffffffffffff, 0x3fb, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x0, 0x4}, 0x50)
connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10)
r7 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
socket$kcm(0x10, 0x2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x0, 0x0, 0x0)

1.324731213s ago: executing program 0 (id=1314):
r0 = io_uring_setup(0x5f41, &(0x7f0000000240)={0x0, 0x32f0, 0x1000, 0x2000, 0x4})
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10)
connect$qrtr(r1, &(0x7f0000000000)={0x2a, 0x2}, 0xc)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000)
recvfrom(r1, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.164342911s ago: executing program 3 (id=1315):
r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x2200)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000040)=0x1)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2)
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_user_confirm_req={{0x33, 0xa}, {@none, 0x4}}}, 0xd)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$VT_RELDISP(r1, 0x5605)
ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f00000000c0)=""/19)
ioctl$TIOCCONS(0xffffffffffffffff, 0x541d)
r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x42000, 0x28)
statx(r2, &(0x7f0000000140)='./file0\x00', 0x400, 0x100, &(0x7f0000000180))
r3 = syz_open_dev$sg(&(0x7f0000000280), 0xe26c, 0x2000)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r3, 0x2)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000002c0)={0x0, 0x1, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}]})
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000300)=0x3)
r4 = openat$binfmt_format(0xffffff9c, &(0x7f0000000340)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
r5 = fsopen(&(0x7f0000000380)='ocfs2_dlmfs\x00', 0x1)
fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f00000003c0)='/proc/sys/fs/binfmt_misc/syz0\x00', &(0x7f0000000400)="1f4373e9d03b31ea24378f3320c4db20cd34ffce595f0a09a519114eff5679d404b18f2e79e2cc5489b13d87dcf884eda5ce0788140dbe955bd4b2a751c29f665b561ec6ff8e8b3e52a535e850d3d366752f135d10c916c9faae630c080dcd695dd6aef2e787ba4ec105d2", 0x6b)
pipe2$watch_queue(&(0x7f0000000480)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x80)
r7 = open_tree(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x101)
ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x3)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r7)
sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000580)={0x214, r9, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xfc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth0_to_hsr\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2bb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x99}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xcd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa9, 0x3, "163d509db8701d1ca8a4c574173cf38a6ecc647c312e83f325fc0fee9fd69c95e917e653f7e55b9283e59d3c92111e76a1d273cbd34f38b13d3ec63e185f1f9184ced6f8df7ba968405b8e2239b4c7ca8c64bd0115f2c9091194ee2b1bacef56b0195260edbe04b01eef3cb5121416806d89b41bd880fa3ccf38d5a46240f3dacd69939e2d49aa4e8f869931da55628e3b63631e88cbcf913336e542e52812ff1bd621d8bb"}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "7fe5ebe734af271a359be6a589f42efd68677e3be6529a01a893c3d1e5438709cf"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffffb}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x2000c881}, 0x20000000)
sendmsg$NFT_BATCH(r4, &(0x7f0000002240)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002200)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x60, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x20c, 0x9, 0xa, 0x202, 0x0, 0x0, {0xe, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0x190, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x64, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x200}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_CONCAT={0x5c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5d4d}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x70}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc530}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x401}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4e000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_CONCAT={0xbc, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x19bb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1a0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}]}]}]}, @NFTA_SET_DESC={0x24, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x34}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWOBJ={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_DATA={0x28, 0x4, 0x0, 0x1, [@NFTA_CT_HELPER_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8808}, @NFTA_CT_HELPER_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_CT_HELPER_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1}, @NFTA_CT_HELPER_L4PROTO={0x5, 0x3, 0x84}]}}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x1484, 0xc, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1450, 0x3, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x40, 0xb, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x5b}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}]}]}, {0x4f4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x1fc, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x118, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x108, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xc, 0x1, 'physdev\x00'}, @NFTA_MATCH_INFO={0x35, 0x3, "f5370565262fa3142c79575028b3479c3608deb1f21e6f56afee5a92704f9c4966c306104af74d860967d0da3599adeede"}, @NFTA_MATCH_NAME={0xa, 0x1, 'state\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0x99, 0x3, "b7442395724351fe58afb17cd819d1abb946c103d26fad807e41ce3930132833ed98382c7211619811fafb8f11c7bb4b1db2bbbd38aa8518145d1cc2ac04ddaaf44390569b66570077ffe64fc681659f7b770b973a8e0c629436cf9a8e5501bc51a9c723cbca3deb510768280508601e489881530d2d6c39d88d0e8b356294d865197f9664f7e98cae5bf08163ea598856a81730f7"}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x4}]}}}, {0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}]}}}, {0x68, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_LIMIT_FLAGS={0x8}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x6b}]}}}]}, @NFTA_SET_ELEM_KEY_END={0xb8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x5a, 0x1, "ad72e941087914caae1b4743d948fbce40410be27bfce16887b53a1f81bca7187c92225def16df7ef1b48ce97a7c65bcd4c2d11b2eac7dc07206fb910f961802300f6012259afe54d444396424d3e1bf5981747694e7"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x148, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x3c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x3e}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x47}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x2c}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x56}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x37}]}}}, {0x58, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x48, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_TTL={0x5, 0x2, 0x11}, @NFTA_OSF_TTL={0x5, 0x2, 0x2}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_OSF_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x48, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0xfd}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x3}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SYNPROXY_FLAGS={0x8}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0xe4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdf, 0x1, "0ebc199fa96ef12161d92b18f942c9e4a6bd802ff21b34f0d4ec6fabd7893fd348cff18b4820b67ea4221efcb50b24de482933a2aa7573964255d839552d834aaca1064269b495e957ef11bc5427d5f25a8444c62d0dd58cff80b1f3ab8c8895817ffc4fb0fe850d7a704d64a6fb8f2881cf68f4a2428cc834a4024ab01a52997ee0bb45473d1bdffdf2ba8605ed2086aa65fb744113d47fc5642adb0cd5c06bf9514de0b611c9a8d700fac45aa877f87050885660677995a1b6147498afcc5a69ec0e4cf48a5baa26b8f53a6e081d0294c782ee5557d7ceabc079"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8000000000000000}]}, {0x12c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x128, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x20, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz1\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8}]}}}, {0x74, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x64, 0x2, 0x0, 0x1, [@NFTA_DYNSET_TIMEOUT={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_DYNSET_EXPRESSIONS={0x4}, @NFTA_DYNSET_EXPR={0x50, 0x7, 0x0, 0x1, {{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz2\x00'}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}, @NFTA_LOOKUP_FLAGS={0x8}]}}}]}}}, {0x1c, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x2}]}}}]}]}, {0x378, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", ""]}}}, @NFTA_SET_ELEM_DATA={0x7c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x59, 0x1, "5c3d8597543df563e957c119aabb7bbc9cc5817542b2dbc42b3363358ee7d1dcdc51592dbb6bceff38e5bb31ab558cfaee8aad00ccb3a8ba9ee47bc868c6b079d605f2122cbd6f4df91d15978e8f8d0d9d2009a8eb"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_KEY={0x2e4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x5a, 0x1, "3a09334874530bede2535926e805334caa87ea441d05f75d46f7022df6057255a546837007c4cb7c4509a042ab0b2c5685a88937a115ed2b3d099eb4d8e5c0badb22ebb21411043c15bddda3269dd1d819b6e5fd90c4"}, @NFTA_DATA_VALUE={0x3e, 0x1, "af4c728f3035744ed0ab9fea111fbebfdfb5a0c6174b5a772f503351ed8e3d93ff5615054aad63b7ba9c95842862e92a2bea7cd271f066443c0d"}, @NFTA_DATA_VALUE={0x9b, 0x1, "bd499a9f53c890e77995640821262e93cff3c13533cfa0391b8b222954bc92881d34ff4f0eb706536f5143c2bc8693a043af7db84b57b73b0db8d445076dbf20783b35e5b5f799d8a31c0ba57257aef0ebf1b165e5820ea2097bebd1df28934535a73001fee6c04601c28bc9c488e353f17ebeda811c4e2a91b454d3182b86e0e323d31aeab4a5684deffc91ec94f953ce28b3e61ac196"}, @NFTA_DATA_VALUE={0x80, 0x1, "d1fcf412a4e4cbecb5c54dacc8c29a14a3487aa47d2c1e619b01bd3f05a4a896b698686625e3b1c8ceab6a258416e33e5a788f0802a708f94ea2ba3990ab604c37eccdf97ab443622e66c4fe5f19fadccde85dee90572c1b3c567a6ba9d09c5002dfaefb0a3fd80ff687ba813171f18772c67d5238053764d53dd299"}, @NFTA_DATA_VALUE={0x5f, 0x1, "bd7aa0cf9d878dfd5ca5ea8a5b0f0fee3ddea92eedd9bcb8d306180be2a7374ffb66f32954bd3e69e3f87c06ce621d044eaf0649d305bf9f85f7a22380d1d7f52aff9f84310c98912f5f2f76b07db4700a39229ecd3d34ff7275ba"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, {0x8c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_USERDATA={0x7a, 0x6, 0x1, 0x0, "56037a82c042ae4a324f07ef6b8b6fe5e6592da5054bcce3598ff4f4187e10b02a3c46ac76cac4c8366cd9230d7d393e6baffb443b721a67e6e8e1042dadd83c78ea4ca2ee94f4af799b3d7372709c9c334490627ae5e3c59a442482a5f101adb77b35b5c1974aa59d9b96a6181a5cab45a6006ac41d"}]}, {0x1bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x16c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xd4, 0x1, "a589c267e08b3cbdf1bdeeb13912cf9d879efa4bf5273d6fcdabcd51c52f7130187c9cf1950c2b2e7eab283a5f199c95f4ee85b4d5b57871cdc1840f935d9e299a8ba39bc83db6265dca144fa6038cc7d21846d2a9907eeb21cbb6f1b8df1c4038ed35243e5d8425bcd490ccde04d763f2342a42b307fa9c810a72d968406d74ece7c902bde565ec5e5c44fe0a769745dd67da5b4c1c386e264b693c178e87cf9a23e9fc1b4106b657082a0db869c7250c510b52f033abbb13adf135d56229e3bbf53de3aee2e208c837b0afed0f9b23"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_KEY={0x4c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x48, 0x1, "4e0227921adb2a8a2a677f4bc985e45d14878d2f7bd6b87dccc2d3eee395e7e679ace09ce20d3e30ffcdd3473d492bb74fd3bdc7b47d4ae011e8e7c289ddaf872b2402df"}]}]}, {0xf4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x24, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0xcc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc7, 0x1, "4dbbe7bbcc225569cfb51ff33ecd1d0da2c3e6ad1f05e2fb0bfd640efe93a3f2832a1b2b5275bb5aac40860312f107a38bec1245e101d12edac5cc07e549f42edbc0503197992e5a661e9f29fd945407aaf1622c675a6dfe26f33b997068953d3b16445bfafe967a9cbd3ce44ce4a5c564bbb39442cb04599fdde60934dd6b58a96f5e54444ffbf08d261d77b5182288f0d15c0c75ecc298d5ce74667ec384b0e755b9a813a786289e81f2087613e3508c31ef9a8457fd77f3851013378337aa4bf457"}]}]}, {0x4b4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x298, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcd, 0x1, "cc32b39eb441bcccc863113803f2a9fc27e09fe1670bb08a0d5ea907c93bc80e24ff5bcb88acd8bb64aabcf265b38e0db9021404c8eef8f3ed6f5ccac817df86290e06355f6cf75685b91628c9384ea87a3db64a139a65d22371600ae694262ee62fd944aa90bdd52341f850d4b6856df5db7c91b0bf3e75e8ccc36a0870dd25e0ee4278f920c0dcacbf2630248beb0d23c439f21a4b254504819adf464e19bf3724c7e92317c67c6940670d2d0e40808497a6c13a1cd769f1e08ced92abd9075a9703acf98297472a"}, @NFTA_DATA_VALUE={0xd9, 0x1, "2ce33202b59d8a6e50332a7aeb3ef7b38ef3755f71e38af8d5ffe5d8a62007bbbe01adb8c39ab78a56312b18afa16b4bae7bb7a74d63ed633cce9df87fcd2c4a4e92eaa3864411850bceeff62b132e7dd364a62b69664c68c5119b8d24de82b895d1f8ed3e606f93526745469f00a3e48eda8c4a514df3a647c7ab36104712f8f16e11d08f120ff4227a8798cb73403a7374cad8e2f6c545d04600f9e7cafa1ca47f3fdf1ddbf8807baa4ba4eef97c822925b4a561130c67cf69d7388e2d562cc4e0ac1097e1c8d6e0cfea8c443dc64fd1bb43ca1b"}, @NFTA_DATA_VALUE={0x7, 0x1, "153ed2"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x10, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0xdb, 0x6, 0x1, 0x0, "567c8c6fc90f718dddb653f86cfcb30efcd3f9f85f64c4ce441301a57b8e78cd05253626ef2f42f748372e8ac970344131f1f9934c187a6a2952c73b4df69758aa5451ab96fc923da7bbd908832c8484d95f4239441cb1d7980db3fbb1752159f88bad054807f905b3d8f4a38650ec539a2fe2513541066c0024d5383e7228e2a89cddebe1d95dbc73f08e6a1324ed38f272908977acdbe9303c8bdacc40a52fcf78302ab454e819eaa240aa26cf7e4f6aea95fa14f393c0d8cf98d779c262337efdb9a46eaec8a8f39656daa9ac7db8d3cb3af0a1087f"}, @NFTA_SET_ELEM_KEY={0x114, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc0, 0x1, "14e644db28db3991196bd75d061b2b6d063eac861564c7768b0761f654c70175d5e9139dfe4a67a476f57ef8fc9ae332b18797b7ffe394e85484a3fb243f6cf59ad8f6f09d779f43e1a93d947d50c73266c682a8604ca4d4a30b549ffef4a1a9c26f881ebe73f828124bf229a70a3783db9570a32366dac6ad2bce04645b8741c357a2d87724ceb6341c6865ff7b2da7900ab18600cbae9f72f5c8b999145d7a6d6f089b0c8a277138735fc50ca966f8f149450f15442b66cd70376f"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x75f04fd7ec44c6e1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}]}, {0x25c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x22c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x13, 0x1, "6af4d0ea095fd6e68359b495971526"}, @NFTA_DATA_VALUE={0xb2, 0x1, "3043fde45d10eb150bbf9e9e036200df779aa9947521d37552b59899563c0f435bfc9994db6bd36b148309640ca510be44e88f6470ab021165a4ea6b1bf7b38f2dbd067bafdc35d0d0170f21ad6874a2d2701021c4011a2ceb475fa306dc55aa6e3486ee12d71fca4738db9a5ea8c15ac22f5ea1241a04b1b13d4a234625b30c0e347d260fe04d17dd8eb4e3a54a861d5414e9bd577fd78493dc8dae9c7aa69c9333361cc9945b58592144882763"}, @NFTA_DATA_VALUE={0x4d, 0x1, "263247e9f34936c4de1c7c63507bcc459122f23bb55a20e0ab8885a52966282e6c08a02aa3308e8ecc422b3790beebadcb2d3e19d836f25c873efc03b5c1e259f8a4a5e5819958c075"}]}, @NFTA_SET_ELEM_EXPR={0x1c, 0x7, 0x0, 0x1, @match={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}]}}}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @reject={{0xb}, @void}}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0xd8, 0x3, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x5c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'syz_tun\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x736438cb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6c3e58aa}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2495e67e}]}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfe00000000000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x80000001}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x7}]}, @NFT_MSG_DELSETELEM={0x1c, 0xe, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0x54, 0x18, 0xa, 0x203, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x18ec}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040)
syz_emit_vhci(&(0x7f0000002280)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x5, 0x0, 0x1, "48ceee", 0x1, 0x2}]}}}, 0x13)
syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000002300)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1b1c, 0x1b02, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x10, 0xf1, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x3, 0x81, {0x9, 0x21, 0x0, 0x2, 0x1, {0x22, 0x639}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xc2, 0x0, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x6, 0x3}}]}}}]}}]}}, &(0x7f0000002480)={0xa, &(0x7f0000002340)={0xa, 0x6, 0x200, 0x6, 0x40, 0x80, 0xb7, 0xb6}, 0x19, &(0x7f0000002380)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xc, "fe934ce4c11444dcf3d6898ee49b945f"}]}, 0x3, [{0x4, &(0x7f00000023c0)=@lang_id={0x4, 0x3, 0x444}}, {0x4, &(0x7f0000002400)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f0000002440)=@lang_id={0x4, 0x3, 0x1409}}]})
setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f00000024c0), 0x4)
mount_setattr(0xffffffffffffffff, &(0x7f0000002500)='./file0\x00', 0x1000, &(0x7f0000002540)={0x8, 0x10000d, 0xa0000, {r7}}, 0x20)
pselect6(0x40, &(0x7f0000002580)={0xfffffffffffff02e, 0x54a84297, 0x10, 0x8, 0x5, 0xffffffffffff7fff, 0x9}, &(0x7f00000025c0)={0x8, 0x9, 0x8, 0x0, 0x8, 0x1, 0x200, 0x6}, &(0x7f0000002600)={0x6, 0x8, 0x6, 0x8, 0x3, 0x401, 0x1, 0xb09c}, &(0x7f0000002680), &(0x7f0000002700)={&(0x7f00000026c0)={[0x3, 0x8f3e]}, 0x8})

1.157304743s ago: executing program 4 (id=1316):
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
socket$packet(0x11, 0x2, 0x300)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
syz_io_uring_setup(0x4169, &(0x7f00000003c0)={0x0, 0xd490, 0x10100, 0x1}, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000001500)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f0000001440)=[{{&(0x7f0000000200)=@ieee802154, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/140, 0x8c}], 0x1, &(0x7f00000004c0)=""/43, 0x2b}, 0x40076c}, {{&(0x7f0000000500)=@tipc=@name, 0x80, &(0x7f0000000580)=[{&(0x7f0000000680)=""/171, 0xab}], 0x1, &(0x7f00000005c0)=""/14, 0xe}, 0x1}, {{&(0x7f0000000740)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000ec0)=[{&(0x7f00000007c0)=""/34, 0x22}, {&(0x7f00000008c0)=""/224, 0xe0}, {&(0x7f00000009c0)=""/166, 0xa6}, {&(0x7f0000000a80)=""/191, 0xbf}, {&(0x7f0000000b40)=""/254, 0xfe}, {&(0x7f0000000c40)=""/247, 0xf7}, {&(0x7f0000000e40)=""/125, 0x7d}], 0x7, &(0x7f0000000d40)=""/68, 0x44}, 0x9}, {{&(0x7f0000000f00)=@phonet, 0x80, &(0x7f0000001140)=[{&(0x7f0000000840)=""/15, 0xf}, {&(0x7f0000000f80)=""/111, 0x6f}, {&(0x7f0000001000)=""/184, 0xb8}, {&(0x7f00000010c0)=""/93, 0x5d}], 0x4, &(0x7f0000001180)=""/23, 0x17}, 0xfffffffd}, {{&(0x7f00000011c0)=@pppoe, 0x80, &(0x7f0000001300)=[{&(0x7f0000001240)=""/5, 0x5}, {&(0x7f0000001280)=""/79, 0x4f}], 0x2, &(0x7f0000001340)=""/214, 0xd6}}], 0x5, 0x40, 0x0)
setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', 0x0, &(0x7f0000000880)="22cff5", 0x3, 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6(0x10, 0x80000, 0x3)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_G_SELECTION(r2, 0xc040565e, &(0x7f00000000c0)={0x5, 0x0, 0x0, {0xffff, 0x3, 0xb0c, 0x8}})
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x3, 0x0, 0x0, 0x5, 0xb47, 0x9, 0x8, 0x0, 0x3}, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0)
socket(0x400000000010, 0x3, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r4, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={<r5=>0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x100, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xb, 0x2a, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32=r3, @ANYRES64, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001811", @ANYRES8=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8e, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, 0x0, &(0x7f0000000280)='GPL\x00'}, 0x94)
r7 = socket$kcm(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000000)=r6, 0x4)
socket$kcm(0x2, 0x1000000000000002, 0x0)

1.040515407s ago: executing program 0 (id=1317):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r1, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0)
r2 = io_uring_setup(0x6237, &(0x7f0000000080)={0x0, 0x9dc3, 0x0, 0x1, 0x38d})
io_uring_setup(0xeeb, &(0x7f00000001c0)={0x0, 0x466b, 0x2, 0x3, 0x2dc, 0x0, r2})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x38, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2e}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0xc000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_MFC(r7, 0x0, 0xcc, &(0x7f0000000080)={@multicast2, @multicast2, 0x0, "b18c89f8ec85752dace37a71e337f670bfac54f9a317850eaa73a3eb92f19456", 0x8, 0x8, 0x8, 0x1ff}, 0x3c)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000140))
r8 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x7079, 0x0, 0x3, 0x1e5}, &(0x7f00000000c0)=<r9=>0x0, &(0x7f0000000040)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r12 = openat$cgroup_procs(r11, &(0x7f0000000240)='tasks\x00', 0x2, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r12, 0x0, 0x0})
io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)

970.328399ms ago: executing program 2 (id=1318):
clock_adjtime(0xffffffd3, &(0x7f0000000340)={0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xb375, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x2900, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096010006010003000000002a90a02700000000b3813e"], 0x0}, 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x2, 0xff, 0x71, 0x20, 0x9c4, 0x11, 0xb01c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x7e, 0x10, 0x2, 0x26, 0xd5, 0x18, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0)
r3 = open(&(0x7f0000000780)='./bus\x00', 0x2f0a7e, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)={0x294, 0x1, 0x2, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_NAT={0x60, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_HELP_NAME={0xa, 0x6, 'Q.931\x00'}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_NAT={0x1f4, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_TUPLE={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_NAT_TUPLE={0xb8, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x39}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x16}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0xd}}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x60, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x8b9605680216a28c}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}]}, 0x294}, 0x1, 0x0, 0x0, 0x4008000}, 0x80050)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80042, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3)
sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r5, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x8, 0x2)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
syz_open_dev$vim2m(&(0x7f0000000200), 0x6, 0x2)
r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r7, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r6])

215.807549ms ago: executing program 4 (id=1319):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'})
socket$netlink(0x10, 0x3, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{0x5, 0x0, 0x3}, 'syz0\x00', 0x3a})
r4 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r5=>0x0, &(0x7f00000000c0)=<r6=>0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x41, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x21, 0x1, {0x1}})
io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x4000, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x50000000}]}}}}}}}, 0x0)

75.477299ms ago: executing program 0 (id=1320):
syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xa2, 0xb8, 0xd2, 0x40, 0x21bb, 0x2070, 0x870b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xa0, 0x8, 0x0, 0x4, [{{0x9, 0x4, 0xc8, 0x1e, 0x1, 0x1, 0x3, 0xf7, 0x9, [], [{{0x9, 0x5, 0x8, 0x3, 0x3ff, 0x4, 0x6, 0x9}}]}}]}}]}}, 0x0)

0s ago: executing program 1 (id=1321):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', <r1=>0x0})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, r1})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', <r4=>0x0})
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r4})
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}}, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x18)
connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r8, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40010)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0xd, 0x42, 0x44}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r9}, 0x38)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r11, @ANYBLOB="05", @ANYRES16=r10], 0x0)

kernel console output (not intermixed with test programs):

10/0x10
[  358.854734][ T9617]  ? bpf_lsm_file_permission+0x9/0x20
[  358.854751][ T9617]  ? security_file_permission+0x75/0x290
[  358.854775][ T9617]  ? rw_verify_area+0x258/0x650
[  358.854798][ T9617]  vfs_readv+0x253/0x850
[  358.854826][ T9617]  ? __pfx_vfs_readv+0x10/0x10
[  358.854863][ T9617]  ? __fget_files+0x2a/0x420
[  358.854889][ T9617]  ? __fget_files+0x3a0/0x420
[  358.854908][ T9617]  ? __fget_files+0x2a/0x420
[  358.854938][ T9617]  do_readv+0x14d/0x2d0
[  358.854960][ T9617]  ? __pfx_do_readv+0x10/0x10
[  358.854984][ T9617]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  358.855004][ T9617]  ? lockdep_hardirqs_on+0x9c/0x150
[  358.855023][ T9617]  __do_fast_syscall_32+0xb6/0x2b0
[  358.855042][ T9617]  ? lockdep_hardirqs_on+0x9c/0x150
[  358.855060][ T9617]  do_fast_syscall_32+0x34/0x80
[  358.855077][ T9617]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  358.855098][ T9617] RIP: 0023:0xf705e539
[  358.855115][ T9617] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  358.855131][ T9617] RSP: 002b:00000000f504e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000091
[  358.855151][ T9617] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040
[  358.855163][ T9617] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[  358.855174][ T9617] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  358.855184][ T9617] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  358.855195][ T9617] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  358.855222][ T9617]  </TASK>
[  359.193921][   T10] usb 5-1: USB disconnect, device number 38
[  359.201815][   T10] radio-raremono 5-1:0.35: Thanko's Raremono disconnected
[  359.324517][ T5916] usb 2-1: new full-speed USB device number 49 using dummy_hcd
[  359.357024][ T9619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1015'.
[  359.414615][ T5923] vhci_hcd: vhci_device speed not set
[  359.485605][ T5916] usb 2-1: not running at top speed; connect to a high speed hub
[  359.495715][ T5916] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  359.505953][ T5916] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  359.518285][ T5916] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  359.528009][ T5916] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  359.536177][ T5916] usb 2-1: Product: syz
[  359.540426][ T5916] usb 2-1: Manufacturer: syz
[  359.545142][ T5916] usb 2-1: SerialNumber: syz
[  359.783228][ T5916] usb 2-1: 0:2 : does not exist
[  359.811798][   T10] usb 1-1: USB disconnect, device number 54
[  359.928157][ T5916] usb 2-1: USB disconnect, device number 49
[  360.119809][    T9] hid-generic 8001:0003:0000.000F: unknown main item tag 0x0
[  360.131690][    T9] hid-generic 8001:0003:0000.000F: unknown main item tag 0x0
[  360.149730][    T9] hid-generic 8001:0003:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  360.327181][   T10] usb 5-1: new full-speed USB device number 39 using dummy_hcd
[  360.525012][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  360.561522][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  360.886491][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  360.934790][   T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  360.974994][   T10] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  360.987664][   T10] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  361.012004][   T10] usb 5-1: Manufacturer: syz
[  361.047441][   T10] usb 5-1: config 0 descriptor??
[  361.404580][   T10] rc_core: IR keymap rc-hauppauge not found
[  361.414490][   T10] Registered IR keymap rc-empty
[  361.421125][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  361.461179][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  361.499494][ T9647] fuse: Bad value for 'fd'
[  361.575413][ T9631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  361.584923][   T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[  361.627633][ T9631] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  361.644976][   T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input20
[  361.762318][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  361.804647][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  361.855300][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  361.874601][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  361.894477][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  361.926734][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  361.954477][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  362.027653][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  362.141114][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  362.224440][   T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[  362.253966][   T10] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  362.293708][   T10] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  363.473687][ T9668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1028'.
[  363.614842][   T10] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  363.787395][  T977] usb 5-1: USB disconnect, device number 39
[  363.824617][   T10] usb 1-1: Using ep0 maxpacket: 32
[  363.838946][   T10] usb 1-1: config 0 has an invalid interface number: 35 but max is 0
[  363.871067][   T10] usb 1-1: config 0 has no interface number 0
[  363.908926][   T10] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  363.920223][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.949184][   T10] usb 1-1: Product: syz
[  363.958025][   T10] usb 1-1: Manufacturer: syz
[  363.962727][   T10] usb 1-1: SerialNumber: syz
[  363.994859][   T10] usb 1-1: config 0 descriptor??
[  364.024789][ T5923] IPVS: starting estimator thread 0...
[  364.089792][   T30] audit: type=1326 audit(1751778733.593:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9673 comm="syz.1.1030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000
[  364.114467][   T30] audit: type=1326 audit(1751778733.593:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9673 comm="syz.1.1030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000
[  364.146298][   T30] audit: type=1326 audit(1751778733.613:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9673 comm="syz.1.1030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa1539 code=0x7ffc0000
[  364.223050][   T10] radio-si470x 1-1:0.35: this is not a si470x device.
[  364.267283][   T30] audit: type=1326 audit(1751778733.613:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9673 comm="syz.1.1030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000
[  364.289626][ T9680] IPVS: using max 52 ests per chain, 124800 per kthread
[  364.320857][   T10] radio-raremono 1-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  364.334764][   T30] audit: type=1326 audit(1751778733.613:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9673 comm="syz.1.1030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000
[  364.359808][   T30] audit: type=1326 audit(1751778733.613:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9673 comm="syz.1.1030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7fa1539 code=0x7ffc0000
[  364.382013][   T30] audit: type=1326 audit(1751778733.613:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9673 comm="syz.1.1030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000
[  364.404476][   T30] audit: type=1326 audit(1751778733.613:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9673 comm="syz.1.1030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000
[  364.426537][   T30] audit: type=1326 audit(1751778733.623:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9673 comm="syz.1.1030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=63 compat=1 ip=0xf7fa1539 code=0x7ffc0000
[  364.469646][   T30] audit: type=1326 audit(1751778733.623:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9673 comm="syz.1.1030" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa1539 code=0x7ffc0000
[  364.573868][   T10] radio-raremono 1-1:0.35: V4L2 device registered as radio48
[  364.713510][ T9663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  364.750329][ T9663] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  365.173398][ T9699] x_tables: duplicate underflow at hook 2
[  366.332332][   T10] usb 1-1: USB disconnect, device number 55
[  366.342670][   T10] radio-raremono 1-1:0.35: Thanko's Raremono disconnected
[  366.394456][ T5932] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  366.566605][ T5932] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  366.581344][ T5932] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  366.598035][ T5932] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  366.607191][ T5932] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  366.618669][ T5932] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  366.648503][ T5932] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  366.659980][ T9718] netlink: 'syz.0.1043': attribute type 2 has an invalid length.
[  366.663612][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  366.677008][ T5932] usb 5-1: Product: syz
[  366.681200][ T5932] usb 5-1: Manufacturer: syz
[  366.694599][    T9] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  366.698697][ T5932] cdc_wdm 5-1:1.0: skipping garbage
[  366.722092][ T5932] cdc_wdm 5-1:1.0: skipping garbage
[  366.730531][ T5932] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  366.737187][ T5932] cdc_wdm 5-1:1.0: Unknown control protocol
[  366.737442][ T9721] kvm: requested 7542 ns i8254 timer period limited to 200000 ns
[  366.813944][ T9721] kvm: pic: level sensitive irq not supported
[  366.815640][ T9721] kvm: pic: non byte read
[  366.828403][ T9721] kvm: pic: level sensitive irq not supported
[  366.828459][ T9721] kvm: pic: non byte read
[  366.841297][ T9721] kvm: pic: level sensitive irq not supported
[  366.841388][ T9721] kvm: pic: non byte read
[  366.870316][ T9721] kvm: pic: level sensitive irq not supported
[  366.870416][ T9721] kvm: pic: non byte read
[  366.885009][    T9] usb 4-1: Using ep0 maxpacket: 32
[  366.896692][    T9] usb 4-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  366.911066][    T9] usb 4-1: config 1 interface 0 has no altsetting 0
[  366.921261][    T9] usb 4-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.40
[  366.930694][ T5923] usb 5-1: USB disconnect, device number 40
[  366.931084][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.944540][ T5844] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  366.945860][    T9] usb 4-1: Product: ф
[  366.957238][    T9] usb 4-1: Manufacturer: 毷뒍ཋ瞪䍷밐薄飁䃈籨᝵ᒮ讍㑜隤熔힇绅棶槲使탄䡞⽶碓餥ꨃ哷唷烯寮涊䖓遅໮ꠙαﳵꕼ恋鐼淊峔ḝ궝樱ᥨ녑鄽蚞䆦皠꨸슓Ὂ뜥ᮌ㬡᨞ￌ瞠ꐣ례ﱞ㣠・䪩仇ط眩ᆈ췴ု뾨饤퐄ॗ鬶趫퐛裏떗ꀽꟻ患è摶䁛ᖢ둔佞膥厙߶ꘔ鸐歷
[  366.989797][ T9721] kvm: pic: level sensitive irq not supported
[  366.989872][ T9721] kvm: pic: non byte read
[  367.141355][ T5844] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  367.150639][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.158786][ T5844] usb 3-1: Product: syz
[  367.163128][ T5844] usb 3-1: Manufacturer: syz
[  367.168602][ T5844] usb 3-1: SerialNumber: syz
[  367.225864][ T5844] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  367.286140][    T9] usbhid 4-1:1.0: can't add hid device: -71
[  367.321615][ T5932] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  367.321640][    T9] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[  367.367019][    T9] usb 4-1: USB disconnect, device number 63
[  367.444686][ T5923] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  367.594594][ T5923] usb 5-1: Using ep0 maxpacket: 16
[  367.603048][ T5923] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  367.614117][ T5923] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  367.626494][ T5923] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  367.635967][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.644004][ T5923] usb 5-1: Product: syz
[  367.648452][ T5923] usb 5-1: Manufacturer: syz
[  367.653425][ T5923] usb 5-1: SerialNumber: syz
[  367.875445][ T5923] usb 5-1: 0:2 : does not exist
[  367.948395][ T5923] usb 5-1: USB disconnect, device number 41
[  368.471243][ T5932] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[  368.808462][ T5932] ath9k_htc: Failed to initialize the device
[  368.870804][ T5932] usb 3-1: ath9k_htc: USB layer deinitialized
[  369.587083][   T10] usb 3-1: USB disconnect, device number 73
[  369.644375][ T5923] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  369.884669][ T5923] usb 5-1: Using ep0 maxpacket: 32
[  369.896482][ T5923] usb 5-1: config 0 has an invalid interface number: 35 but max is 0
[  370.308715][ T5923] usb 5-1: config 0 has no interface number 0
[  370.335920][ T5923] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  370.372938][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  370.399064][ T5923] usb 5-1: Product: syz
[  370.403287][ T5923] usb 5-1: Manufacturer: syz
[  370.416358][ T5923] usb 5-1: SerialNumber: syz
[  370.437495][ T5923] usb 5-1: config 0 descriptor??
[  370.658135][ T5923] radio-si470x 5-1:0.35: this is not a si470x device.
[  370.695724][ T5923] radio-raremono 5-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  370.704531][  T977] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  370.737008][   T10] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  370.874600][  T977] usb 1-1: Using ep0 maxpacket: 16
[  370.881288][  T977] usb 1-1: too many configurations: 10, using maximum allowed: 8
[  370.891551][  T977] usb 1-1: config 0 has an invalid interface number: 4 but max is 0
[  370.900778][ T5923] radio-raremono 5-1:0.35: V4L2 device registered as radio48
[  370.901403][  T977] usb 1-1: config 0 has no interface number 0
[  370.915327][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  370.928682][  T977] usb 1-1: config 0 interface 4 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64
[  370.938785][   T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  370.954380][  T977] usb 1-1: config 0 has an invalid interface number: 4 but max is 0
[  370.962591][   T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  370.972262][  T977] usb 1-1: config 0 has no interface number 0
[  370.978526][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  370.986828][  T977] usb 1-1: config 0 interface 4 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64
[  370.996686][   T10] usb 4-1: SerialNumber: syz
[  371.002877][  T977] usb 1-1: config 0 has an invalid interface number: 4 but max is 0
[  371.014053][  T977] usb 1-1: config 0 has no interface number 0
[  371.028053][  T977] usb 1-1: config 0 interface 4 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64
[  371.040894][  T977] usb 1-1: config 0 has an invalid interface number: 4 but max is 0
[  371.049690][  T977] usb 1-1: config 0 has no interface number 0
[  371.058943][  T977] usb 1-1: config 0 interface 4 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64
[  371.070333][  T977] usb 1-1: config 0 has an invalid interface number: 4 but max is 0
[  371.078726][  T977] usb 1-1: config 0 has no interface number 0
[  371.085114][  T977] usb 1-1: config 0 interface 4 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64
[  371.085625][ T5844] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[  371.102978][  T977] usb 1-1: config 0 has an invalid interface number: 4 but max is 0
[  371.111501][  T977] usb 1-1: config 0 has no interface number 0
[  371.117788][  T977] usb 1-1: config 0 interface 4 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64
[  371.124467][ T9753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  371.146841][  T977] usb 1-1: config 0 has an invalid interface number: 4 but max is 0
[  371.154951][ T9753] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  371.172450][  T977] usb 1-1: config 0 has no interface number 0
[  371.180448][  T977] usb 1-1: config 0 interface 4 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64
[  371.194156][  T977] usb 1-1: config 0 has an invalid interface number: 4 but max is 0
[  371.202460][  T977] usb 1-1: config 0 has no interface number 0
[  371.209022][  T977] usb 1-1: config 0 interface 4 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64
[  371.221624][  T977] usb 1-1: New USB device found, idVendor=05c6, idProduct=9000, bcdDevice=45.8e
[  371.231632][  T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.240462][  T977] usb 1-1: Product: syz
[  371.248383][   T10] usb 4-1: 0:2 : does not exist
[  371.262028][   T10] usb 4-1: USB disconnect, device number 64
[  371.268367][  T977] usb 1-1: Manufacturer: syz
[  371.278296][  T977] usb 1-1: SerialNumber: syz
[  371.298271][ T5844] usb 3-1: Using ep0 maxpacket: 32
[  371.306106][  T977] usb 1-1: config 0 descriptor??
[  371.313051][ T9767] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  371.329461][ T5945] udevd[5945]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  371.341108][ T5844] usb 3-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  371.391461][ T5844] usb 3-1: config 1 interface 0 has no altsetting 0
[  371.417873][ T5844] usb 3-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.40
[  371.431936][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.440097][ T5844] usb 3-1: Product: ф
[  371.448867][ T5844] usb 3-1: Manufacturer: 毷뒍ཋ瞪䍷밐薄飁䃈籨᝵ᒮ讍㑜隤熔힇绅棶槲使탄䡞⽶碓餥ꨃ哷唷烯寮涊䖓遅໮ꠙαﳵꕼ恋鐼淊峔ḝ궝樱ᥨ녑鄽蚞䆦皠꨸슓Ὂ뜥ᮌ㬡᨞ￌ瞠ꐣ례ﱞ㣠・䪩仇ط眩ᆈ췴ု뾨饤퐄ॗ鬶趫퐛裏떗ꀽꟻ患è摶䁛ᖢ둔佞膥厙߶ꘔ鸐歷
[  371.532572][ T9778] x_tables: duplicate underflow at hook 2
[  371.573988][   T10] usb 1-1: USB disconnect, device number 56
[  371.742744][ T5844] usbhid 3-1:1.0: can't add hid device: -71
[  371.749630][ T5844] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  371.762666][ T5844] usb 3-1: USB disconnect, device number 74
[  372.354613][ T5844] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[  372.556735][ T5844] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  372.572422][ T5844] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  372.574462][  T977] usb 5-1: USB disconnect, device number 42
[  372.594934][  T977] radio-raremono 5-1:0.35: Thanko's Raremono disconnected
[  372.613170][ T5844] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  372.663527][ T5844] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  372.714154][ T5844] usb 1-1: config 0 descriptor??
[  373.587391][ T5844] kovaplus 0003:1E7D:2D50.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0
[  373.964537][ T5844] kovaplus 0003:1E7D:2D50.0010: couldn't init struct kovaplus_device
[  373.973906][ T5844] kovaplus 0003:1E7D:2D50.0010: couldn't install mouse
[  373.999342][ T5844] kovaplus 0003:1E7D:2D50.0010: probe with driver kovaplus failed with error -71
[  374.123335][ T5844] usb 1-1: USB disconnect, device number 57
[  375.024622][ T5923] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  375.208693][ T5923] usb 1-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=75.3e
[  375.248404][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  375.248437][ T5923] usb 1-1: Product: syz
[  375.248449][ T5923] usb 1-1: Manufacturer: syz
[  375.248463][ T5923] usb 1-1: SerialNumber: syz
[  375.285491][ T5923] usb 1-1: config 0 descriptor??
[  375.326180][ T5923] gspca_main: etoms-2.14.0 probing 102c:6251
[  375.560874][ T5923] usb 1-1: USB disconnect, device number 58
[  375.584665][  T977] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  375.646138][ T5844] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  375.724398][  T977] usb 4-1: device descriptor read/64, error -71
[  375.794521][ T5844] usb 5-1: device descriptor read/64, error -71
[  375.834428][ T2005] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[  375.974437][  T977] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  375.984572][ T2005] usb 3-1: Using ep0 maxpacket: 32
[  375.991720][ T2005] usb 3-1: config 0 has an invalid interface number: 35 but max is 0
[  376.000202][ T2005] usb 3-1: config 0 has no interface number 0
[  376.009633][ T2005] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  376.019320][ T2005] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.027595][ T2005] usb 3-1: Product: syz
[  376.031862][ T2005] usb 3-1: Manufacturer: syz
[  376.037091][ T5844] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  376.044891][ T2005] usb 3-1: SerialNumber: syz
[  376.053185][ T2005] usb 3-1: config 0 descriptor??
[  376.104391][  T977] usb 4-1: device descriptor read/64, error -71
[  376.167818][ T9833] pim6reg1: entered promiscuous mode
[  376.173191][ T9833] pim6reg1: entered allmulticast mode
[  376.184463][ T5844] usb 5-1: device descriptor read/64, error -71
[  376.214872][  T977] usb usb4-port1: attempt power cycle
[  376.266970][ T2005] radio-si470x 3-1:0.35: this is not a si470x device.
[  376.297213][ T5844] usb usb5-port1: attempt power cycle
[  376.302836][ T2005] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  376.367986][ T9836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1077'.
[  376.399808][ T9836] 8021q: adding VLAN 0 to HW filter on device team1
[  376.516402][ T2005] radio-raremono 3-1:0.35: V4L2 device registered as radio48
[  376.564881][  T977] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  376.618526][  T977] usb 4-1: device descriptor read/8, error -71
[  376.644400][ T5844] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  376.691031][ T5844] usb 5-1: device descriptor read/8, error -71
[  376.725074][ T9830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  376.757688][ T9830] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  377.034479][  T977] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  377.036012][ T5844] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  377.057837][  T977] usb 4-1: device descriptor read/8, error -71
[  377.075779][ T5844] usb 5-1: device descriptor read/8, error -71
[  377.153856][ T9847] x_tables: duplicate underflow at hook 2
[  377.214721][ T5844] usb usb5-port1: unable to enumerate USB device
[  377.233983][  T977] usb usb4-port1: unable to enumerate USB device
[  377.434466][ T5932] usb 2-1: new full-speed USB device number 50 using dummy_hcd
[  377.587978][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  377.599053][ T5932] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  377.608226][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  377.619214][ T5932] usb 2-1: config 0 descriptor??
[  377.626141][ T9846] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[  377.744546][    T9] usb 1-1: new full-speed USB device number 59 using dummy_hcd
[  377.884509][    T9] usb 1-1: device descriptor read/64, error -71
[  378.046606][ T5932] elan 0003:04F3:0755.0011: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0
[  378.124403][    T9] usb 1-1: new full-speed USB device number 60 using dummy_hcd
[  378.237542][ T9846] FAULT_INJECTION: forcing a failure.
[  378.237542][ T9846] name failslab, interval 1, probability 0, space 0, times 0
[  378.250708][ T9846] CPU: 0 UID: 0 PID: 9846 Comm: syz.1.1080 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) 
[  378.250725][ T9846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  378.250732][ T9846] Call Trace:
[  378.250737][ T9846]  <TASK>
[  378.250743][ T9846]  dump_stack_lvl+0x189/0x250
[  378.250764][ T9846]  ? __pfx____ratelimit+0x10/0x10
[  378.250783][ T9846]  ? __pfx_dump_stack_lvl+0x10/0x10
[  378.250794][ T9846]  ? __pfx__printk+0x10/0x10
[  378.250809][ T9846]  ? __pfx___might_resched+0x10/0x10
[  378.250821][ T9846]  ? fs_reclaim_acquire+0x7d/0x100
[  378.250839][ T9846]  should_fail_ex+0x414/0x560
[  378.250858][ T9846]  should_failslab+0xa8/0x100
[  378.250874][ T9846]  __kmalloc_noprof+0xcb/0x4f0
[  378.250887][ T9846]  ? tomoyo_encode+0x28b/0x550
[  378.250900][ T9846]  tomoyo_encode+0x28b/0x550
[  378.250913][ T9846]  tomoyo_realpath_from_path+0x58d/0x5d0
[  378.250930][ T9846]  tomoyo_check_open_permission+0x1c1/0x3b0
[  378.250945][ T9846]  ? tomoyo_check_open_permission+0x16a/0x3b0
[  378.250957][ T9846]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[  378.250969][ T9846]  ? seqcount_lockdep_reader_access+0x122/0x1c0
[  378.251003][ T9846]  ? tomoyo_file_open+0x165/0x220
[  378.251016][ T9846]  security_file_open+0xb1/0x270
[  378.251031][ T9846]  do_dentry_open+0x35e/0x1970
[  378.251047][ T9846]  ? devcgroup_check_permission+0x86d/0x980
[  378.251071][ T9846]  vfs_open+0x3b/0x340
[  378.251084][ T9846]  ? path_openat+0x2ecd/0x3830
[  378.251095][ T9846]  path_openat+0x2ee5/0x3830
[  378.251104][ T9846]  ? arch_stack_walk+0xfc/0x150
[  378.251134][ T9846]  ? __pfx_path_openat+0x10/0x10
[  378.251143][ T9846]  ? do_fast_syscall_32+0x34/0x80
[  378.251153][ T9846]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  378.251176][ T9846]  do_filp_open+0x1fa/0x410
[  378.251185][ T9846]  ? __lock_acquire+0xab9/0xd20
[  378.251198][ T9846]  ? __pfx_do_filp_open+0x10/0x10
[  378.251219][ T9846]  ? _raw_spin_unlock+0x28/0x50
[  378.251233][ T9846]  ? alloc_fd+0x64c/0x6c0
[  378.251252][ T9846]  do_sys_openat2+0x121/0x1c0
[  378.251263][ T9846]  ? __pfx_do_sys_openat2+0x10/0x10
[  378.251274][ T9846]  ? ksys_write+0x22a/0x250
[  378.251290][ T9846]  __ia32_compat_sys_openat+0x131/0x160
[  378.251302][ T9846]  __do_fast_syscall_32+0xb6/0x2b0
[  378.251328][ T9846]  do_fast_syscall_32+0x34/0x80
[  378.251337][ T9846]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  378.251349][ T9846] RIP: 0023:0xf7fa1539
[  378.251359][ T9846] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  378.251379][ T9846] RSP: 002b:00000000f50c6100 EFLAGS: 00000206 ORIG_RAX: 0000000000000127
[  378.251392][ T9846] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f50c6150
[  378.251399][ T9846] RDX: 0000000000000400 RSI: 0000000000000000 RDI: 00000000f7433ff4
[  378.251405][ T9846] RBP: 0000000000000400 R08: 0000000000000000 R09: 0000000000000000
[  378.251411][ T9846] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  378.251416][ T9846] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  378.251430][ T9846]  </TASK>
[  378.251448][ T9846] ERROR: Out of memory at tomoyo_realpath_from_path.
[  378.563418][    T9] usb 1-1: device descriptor read/64, error -71
[  378.585769][ T5932] usb 2-1: USB disconnect, device number 50
[  378.734722][    T9] usb usb1-port1: attempt power cycle
[  378.757099][ T2005] usb 3-1: USB disconnect, device number 75
[  378.763900][ T2005] radio-raremono 3-1:0.35: Thanko's Raremono disconnected
[  379.084435][    T9] usb 1-1: new full-speed USB device number 61 using dummy_hcd
[  379.105092][    T9] usb 1-1: device descriptor read/8, error -71
[  379.354569][ T2005] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[  379.364417][    T9] usb 1-1: new full-speed USB device number 62 using dummy_hcd
[  379.460162][    T9] usb 1-1: device descriptor read/8, error -71
[  379.536475][ T2005] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[  379.548676][ T2005] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.576904][    T9] usb usb1-port1: unable to enumerate USB device
[  379.577979][ T2005] usb 3-1: config 0 descriptor??
[  380.183750][ T2005] kaweth 3-1:0.0: Firmware present in device.
[  380.375279][ T2005] kaweth 3-1:0.0: Statistics collection: 0
[  380.422964][ T2005] kaweth 3-1:0.0: Multicast filter limit: 0
[  380.459574][ T2005] kaweth 3-1:0.0: MTU: 0
[  380.463873][ T2005] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00
[  380.852806][ T2005] kaweth 3-1:0.0: probe with driver kaweth failed with error -5
[  380.907125][ T2005] usb 3-1: USB disconnect, device number 76
[  381.342614][ T9891] UHID_CREATE from different security context by process 749 (syz.0.1089), this is not allowed.
[  381.679929][ T9896] can: request_module (can-proto-5) failed.
[  381.914362][    T9] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[  381.932194][ T2005] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  382.014868][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  382.021244][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  382.062485][ T9903] macvlan0: entered promiscuous mode
[  382.075544][ T2005] usb 5-1: device descriptor read/64, error -71
[  382.115205][ T9903] netlink: 'syz.1.1093': attribute type 1 has an invalid length.
[  382.118691][    T9] usb 3-1: Using ep0 maxpacket: 32
[  382.136568][    T9] usb 3-1: config 0 has an invalid interface number: 35 but max is 0
[  382.145391][    T9] usb 3-1: config 0 has no interface number 0
[  382.197347][    T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  382.206740][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.215610][    T9] usb 3-1: Product: syz
[  382.220219][    T9] usb 3-1: Manufacturer: syz
[  382.225202][    T9] usb 3-1: SerialNumber: syz
[  382.232912][    T9] usb 3-1: config 0 descriptor??
[  382.324638][ T2005] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  382.474397][ T2005] usb 5-1: device descriptor read/64, error -71
[  382.603163][ T2005] usb usb5-port1: attempt power cycle
[  382.607982][    T9] radio-si470x 3-1:0.35: this is not a si470x device.
[  382.673170][    T9] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  382.999219][    T9] radio-raremono 3-1:0.35: V4L2 device registered as radio48
[  383.186092][ T9904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  383.271305][ T2005] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  383.315037][ T9904] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  383.326147][ T2005] usb 5-1: device descriptor read/8, error -71
[  383.568868][ T9924] netlink: 'syz.3.1097': attribute type 1 has an invalid length.
[  383.576843][ T2005] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  383.645027][ T2005] usb 5-1: device descriptor read/8, error -71
[  383.700890][ T9927] x_tables: duplicate underflow at hook 2
[  383.760215][ T2005] usb usb5-port1: unable to enumerate USB device
[  383.828282][   T30] kauditd_printk_skb: 22 callbacks suppressed
[  383.828305][   T30] audit: type=1326 audit(1751778753.323:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9923 comm="syz.3.1097" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa4539 code=0x0
[  383.868436][ T9924] 8021q: adding VLAN 0 to HW filter on device bond1
[  383.942970][ T9926] gretap1: entered promiscuous mode
[  384.035689][ T9924] input: syz1 as /devices/virtual/input/input22
[  384.144565][ T5916] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  384.274416][ T5916] usb 2-1: device descriptor read/64, error -71
[  384.416852][ T2005] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[  384.534508][ T5916] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  384.584623][ T2005] usb 1-1: Using ep0 maxpacket: 16
[  384.600300][ T2005] usb 1-1: config 0 has an invalid interface number: 199 but max is 0
[  384.620220][ T2005] usb 1-1: config 0 has no interface number 0
[  384.627180][ T2005] usb 1-1: config 0 interface 199 altsetting 2 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  384.639043][ T2005] usb 1-1: config 0 interface 199 has no altsetting 0
[  384.646303][ T2005] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=fc.71
[  384.655982][ T2005] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  384.674418][ T5916] usb 2-1: device descriptor read/64, error -71
[  384.694761][ T2005] usb 1-1: config 0 descriptor??
[  384.707501][ T2005] port100 1-1:0.199: NFC: Could not find bulk-in or bulk-out endpoint
[  384.772129][    T9] usb 3-1: USB disconnect, device number 77
[  384.787872][ T5916] usb usb2-port1: attempt power cycle
[  384.804852][    T9] radio-raremono 3-1:0.35: Thanko's Raremono disconnected
[  385.048315][ T2005] usb 1-1: USB disconnect, device number 63
[  385.224516][ T5916] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  385.268470][ T5916] usb 2-1: device descriptor read/8, error -71
[  385.514401][ T5916] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  385.551009][ T5916] usb 2-1: device descriptor read/8, error -71
[  385.572382][ T9951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1103'.
[  385.669147][ T5916] usb usb2-port1: unable to enumerate USB device
[  385.715561][ T9953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1104'.
[  385.741533][ T9953] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1104'.
[  385.853195][ T9957] fuse: Bad value for 'group_id'
[  385.858393][ T9957] fuse: Bad value for 'group_id'
[  385.952558][ T9957] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1105'.
[  386.185200][ T5916] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  386.344533][ T5916] usb 1-1: Using ep0 maxpacket: 8
[  386.356192][ T5916] usb 1-1: too many configurations: 110, using maximum allowed: 8
[  386.397048][ T5916] usb 1-1: unable to read config index 0 descriptor/start: -61
[  386.421677][ T5916] usb 1-1: can't read configurations, error -61
[  386.567440][ T5916] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  386.888500][ T5916] usb 1-1: Using ep0 maxpacket: 8
[  386.914503][ T5916] usb 1-1: too many configurations: 110, using maximum allowed: 8
[  386.939773][ T5916] usb 1-1: unable to read config index 0 descriptor/start: -61
[  386.977399][ T5916] usb 1-1: can't read configurations, error -61
[  387.006143][ T5916] usb usb1-port1: attempt power cycle
[  387.465734][ T5916] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  387.534617][ T5916] usb 1-1: Using ep0 maxpacket: 8
[  387.540567][ T5916] usb 1-1: too many configurations: 110, using maximum allowed: 8
[  387.557376][ T5916] usb 1-1: unable to read config index 0 descriptor/start: -61
[  387.574561][ T5916] usb 1-1: can't read configurations, error -61
[  387.761217][ T5916] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  387.806568][ T5916] usb 1-1: Using ep0 maxpacket: 8
[  387.820643][ T5916] usb 1-1: too many configurations: 110, using maximum allowed: 8
[  387.846868][ T5916] usb 1-1: unable to read config index 0 descriptor/start: -61
[  387.869315][ T5916] usb 1-1: can't read configurations, error -61
[  387.890634][ T5916] usb usb1-port1: unable to enumerate USB device
[  387.972965][ T9985] syzkaller1: entered promiscuous mode
[  387.988988][  T977] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  387.998245][ T9985] syzkaller1: entered allmulticast mode
[  388.155318][  T977] usb 5-1: device descriptor read/64, error -71
[  388.446773][  T977] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[  388.594398][  T977] usb 5-1: device descriptor read/64, error -71
[  388.724052][  T977] usb usb5-port1: attempt power cycle
[  388.808572][T10001] FAULT_INJECTION: forcing a failure.
[  388.808572][T10001] name failslab, interval 1, probability 0, space 0, times 0
[  388.837383][T10001] CPU: 1 UID: 0 PID: 10001 Comm: syz.0.1116 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) 
[  388.837410][T10001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  388.837420][T10001] Call Trace:
[  388.837427][T10001]  <TASK>
[  388.837435][T10001]  dump_stack_lvl+0x189/0x250
[  388.837472][T10001]  ? __pfx____ratelimit+0x10/0x10
[  388.837500][T10001]  ? __pfx_dump_stack_lvl+0x10/0x10
[  388.837517][T10001]  ? __pfx__printk+0x10/0x10
[  388.837540][T10001]  ? __pfx___might_resched+0x10/0x10
[  388.837559][T10001]  ? fs_reclaim_acquire+0x7d/0x100
[  388.837584][T10001]  should_fail_ex+0x414/0x560
[  388.837612][T10001]  should_failslab+0xa8/0x100
[  388.837636][T10001]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  388.837656][T10001]  ? __alloc_skb+0x112/0x2d0
[  388.837695][T10001]  __alloc_skb+0x112/0x2d0
[  388.837716][T10001]  netlink_ack+0x146/0xa50
[  388.837735][T10001]  ? __pfx_genl_rcv_msg+0x10/0x10
[  388.837754][T10001]  ? ref_tracker_free+0x63a/0x7d0
[  388.837766][T10001]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  388.837790][T10001]  ? __pfx_nl80211_post_doit+0x10/0x10
[  388.837811][T10001]  ? __pfx_ref_tracker_free+0x10/0x10
[  388.837833][T10001]  netlink_rcv_skb+0x28c/0x470
[  388.837852][T10001]  ? __pfx_genl_rcv_msg+0x10/0x10
[  388.837873][T10001]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  388.837908][T10001]  ? down_read+0x1ad/0x2e0
[  388.837929][T10001]  genl_rcv+0x28/0x40
[  388.837949][T10001]  netlink_unicast+0x758/0x8d0
[  388.837977][T10001]  netlink_sendmsg+0x805/0xb30
[  388.838005][T10001]  ? __pfx_netlink_sendmsg+0x10/0x10
[  388.838027][T10001]  ? __import_iovec+0x5d4/0x7f0
[  388.838045][T10001]  ? aa_sock_msg_perm+0x94/0x160
[  388.838070][T10001]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  388.838086][T10001]  ? __pfx_netlink_sendmsg+0x10/0x10
[  388.838106][T10001]  __sock_sendmsg+0x219/0x270
[  388.838127][T10001]  ____sys_sendmsg+0x505/0x830
[  388.838152][T10001]  ? __pfx_____sys_sendmsg+0x10/0x10
[  388.838186][T10001]  ___sys_sendmsg+0x21f/0x2a0
[  388.838207][T10001]  ? __pfx____sys_sendmsg+0x10/0x10
[  388.838261][T10001]  ? __fget_files+0x2a/0x420
[  388.838280][T10001]  ? __fget_files+0x3a0/0x420
[  388.838311][T10001]  __sys_sendmsg+0x164/0x220
[  388.838330][T10001]  ? __pfx___sys_sendmsg+0x10/0x10
[  388.838363][T10001]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  388.838382][T10001]  ? lockdep_hardirqs_on+0x9c/0x150
[  388.838399][T10001]  __do_fast_syscall_32+0xb6/0x2b0
[  388.838418][T10001]  ? lockdep_hardirqs_on+0x9c/0x150
[  388.838436][T10001]  do_fast_syscall_32+0x34/0x80
[  388.838459][T10001]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  388.838479][T10001] RIP: 0023:0xf7fd7539
[  388.838492][T10001] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  388.838506][T10001] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  388.838524][T10001] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800003c0
[  388.838535][T10001] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  388.838544][T10001] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  388.838553][T10001] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  388.838561][T10001] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  388.838586][T10001]  </TASK>
[  389.254898][  T977] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[  389.379027][  T977] usb 5-1: device descriptor read/8, error -71
[  389.521343][T10010] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1118'.
[  389.627347][  T977] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[  389.654875][ T2005] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[  389.664513][  T977] usb 5-1: device descriptor read/8, error -71
[  389.828738][  T977] usb usb5-port1: unable to enumerate USB device
[  389.834391][ T2005] usb 1-1: Using ep0 maxpacket: 16
[  389.843637][ T2005] usb 1-1: no configurations
[  389.848481][ T2005] usb 1-1: can't read configurations, error -22
[  390.095492][ T5916] usb 3-1: new full-speed USB device number 78 using dummy_hcd
[  390.104368][ T2005] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[  390.258212][ T5916] usb 3-1: config 0 has an invalid interface number: 90 but max is 0
[  390.274428][ T2005] usb 1-1: Using ep0 maxpacket: 16
[  390.286317][ T5916] usb 3-1: config 0 has no interface number 0
[  390.287924][ T2005] usb 1-1: no configurations
[  390.298928][ T2005] usb 1-1: can't read configurations, error -22
[  390.313590][ T2005] usb usb1-port1: attempt power cycle
[  390.317352][ T5916] usb 3-1: config 0 interface 90 altsetting 0 endpoint 0x85 has invalid maxpacket 512, setting to 64
[  390.356308][ T5916] usb 3-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=3a.fa
[  390.368655][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  390.378961][ T5916] usb 3-1: Product: syz
[  390.383249][ T5916] usb 3-1: Manufacturer: syz
[  390.392837][ T5916] usb 3-1: SerialNumber: syz
[  390.408189][ T5916] usb 3-1: config 0 descriptor??
[  390.420658][T10017] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  390.631346][ T5916] powermate: Expected payload of 3--6 bytes, found 64 bytes!
[  390.652710][ T5916] input: Griffin PowerMate as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.90/input/input23
[  390.664784][ T2005] usb 1-1: new high-speed USB device number 70 using dummy_hcd
[  390.670645][    C0] powermate: config urb returned -71
[  390.678282][    C0] powermate: config urb returned -71
[  390.683900][    C0] powermate: config urb returned -71
[  390.693869][    C0] powermate: config urb returned -71
[  390.706921][ T2005] usb 1-1: Using ep0 maxpacket: 16
[  390.724729][ T5916] usb 3-1: USB disconnect, device number 78
[  390.727059][ T2005] usb 1-1: no configurations
[  390.730685][    C0] powermate 3-1:0.90: powermate_irq - usb_submit_urb failed with result: -19
[  390.744319][ T2005] usb 1-1: can't read configurations, error -22
[  390.924483][ T2005] usb 1-1: new high-speed USB device number 71 using dummy_hcd
[  390.997214][ T2005] usb 1-1: Using ep0 maxpacket: 16
[  391.053657][ T2005] usb 1-1: no configurations
[  391.094361][ T2005] usb 1-1: can't read configurations, error -22
[  391.141747][ T2005] usb usb1-port1: unable to enumerate USB device
[  391.337233][T10054] netlink: 9280 bytes leftover after parsing attributes in process `syz.4.1122'.
[  391.777710][T10065] FAULT_INJECTION: forcing a failure.
[  391.777710][T10065] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  391.794933][T10065] CPU: 0 UID: 0 PID: 10065 Comm: syz.4.1126 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) 
[  391.794962][T10065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  391.794974][T10065] Call Trace:
[  391.794983][T10065]  <TASK>
[  391.794991][T10065]  dump_stack_lvl+0x189/0x250
[  391.795039][T10065]  ? __pfx____ratelimit+0x10/0x10
[  391.795068][T10065]  ? __pfx_dump_stack_lvl+0x10/0x10
[  391.795088][T10065]  ? __pfx__printk+0x10/0x10
[  391.795111][T10065]  ? __might_fault+0xb0/0x130
[  391.795143][T10065]  should_fail_ex+0x414/0x560
[  391.795186][T10065]  _copy_from_user+0x2d/0xb0
[  391.795209][T10065]  get_compat_msghdr+0xad/0x4a0
[  391.795241][T10065]  ? __pfx_get_compat_msghdr+0x10/0x10
[  391.795275][T10065]  ___sys_sendmsg+0x193/0x2a0
[  391.795302][T10065]  ? __pfx____sys_sendmsg+0x10/0x10
[  391.795357][T10065]  ? __fget_files+0x2a/0x420
[  391.795379][T10065]  ? __fget_files+0x3a0/0x420
[  391.795410][T10065]  __sys_sendmsg+0x164/0x220
[  391.795482][T10065]  ? __pfx___sys_sendmsg+0x10/0x10
[  391.795531][T10065]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  391.795550][T10065]  ? lockdep_hardirqs_on+0x9c/0x150
[  391.795566][T10065]  __do_fast_syscall_32+0xb6/0x2b0
[  391.795589][T10065]  do_fast_syscall_32+0x34/0x80
[  391.795604][T10065]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  391.795623][T10065] RIP: 0023:0xf70ee539
[  391.795640][T10065] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  391.795654][T10065] RSP: 002b:00000000f50de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  391.795673][T10065] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000000
[  391.795685][T10065] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  391.795695][T10065] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  391.795705][T10065] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  391.795715][T10065] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  391.795741][T10065]  </TASK>
[  392.268299][T10071] netlink: 'syz.2.1125': attribute type 10 has an invalid length.
[  392.276414][T10071] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1125'.
[  392.756487][T10081] ptrace attach of "./syz-executor exec"[5864] was attempted by "./syz-executor exec"[10081]
[  393.447025][  T977] usb 1-1: new low-speed USB device number 72 using dummy_hcd
[  393.515352][ T5916] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[  393.812894][  T977] usb 1-1: config 0 has an invalid interface number: 55 but max is 0
[  393.821214][  T977] usb 1-1: config 0 has no interface number 0
[  393.835008][  T977] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  393.850046][  T977] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  393.872318][  T977] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  393.894523][ T5916] usb 4-1: Using ep0 maxpacket: 32
[  393.916849][ T5916] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  393.931185][  T977] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  393.964820][ T5916] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  393.998601][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.036154][  T977] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[  394.051810][ T5916] usb 4-1: Product: syz
[  394.067988][ T5916] usb 4-1: Manufacturer: syz
[  394.096946][ T5916] usb 4-1: SerialNumber: syz
[  394.101627][  T977] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  394.139740][ T5916] usb 4-1: config 0 descriptor??
[  394.159378][ T5916] usb 4-1: bad CDC descriptors
[  394.169103][  T977] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  394.195187][ T5916] usb 4-1: unsupported MDLM descriptors
[  394.207721][  T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  394.250046][T10094] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.1134'.
[  394.260935][  T977] usb 1-1: config 0 descriptor??
[  394.264539][T10093] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1133'.
[  394.268348][T10077] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  394.292439][T10077] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  394.376308][  T977] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  394.393969][T10081] dns_resolver: Unsupported server list version (0)
[  394.494568][   T10] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  394.688398][   T10] usb 2-1: Using ep0 maxpacket: 8
[  394.707282][T10077] ldusb 1-1:0.55: Write buffer overflow, 1 bytes dropped
[  394.717238][   T10] usb 2-1: config 6 has an invalid interface number: 2 but max is 0
[  394.725880][   T10] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  394.736126][   T10] usb 2-1: config 6 has no interface number 0
[  394.785759][   T10] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  394.815646][ T5932] usb 1-1: USB disconnect, device number 72
[  394.820225][   T10] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  394.846262][   T10] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  395.065946][   T10] usb 2-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  395.072223][ T5932] ldusb 1-1:0.55: LD USB Device #0 now disconnected
[  395.164588][  T977] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[  395.183289][   T10] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91
[  395.195360][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.207687][   T10] usb 2-1: Product: syz
[  395.212094][   T10] usb 2-1: Manufacturer: syz
[  395.218467][   T10] usb 2-1: SerialNumber: syz
[  395.238665][   T10] hso 2-1:6.2: Failed to find BULK IN ep
[  395.450651][  T977] usb 3-1: Using ep0 maxpacket: 32
[  395.625688][  T977] usb 3-1: config 0 has an invalid interface number: 123 but max is 0
[  395.656018][  T977] usb 3-1: config 0 has no interface number 0
[  395.668185][   T10] usb 2-1: USB disconnect, device number 55
[  395.687366][  T977] usb 3-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=d0.68
[  395.703276][ T5844] usb 4-1: USB disconnect, device number 69
[  395.707241][  T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.727880][  T977] usb 3-1: Product: syz
[  395.732071][  T977] usb 3-1: Manufacturer: syz
[  395.744593][  T977] usb 3-1: SerialNumber: syz
[  395.762086][  T977] usb 3-1: config 0 descriptor??
[  395.792895][  T977] gspca_main: sn9c2028-2.14.0 probing 0c45:8001
[  395.989497][T10105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  396.006721][T10105] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  396.069647][T10105] openvswitch: netlink: ct_state flags 7fffffff unsupported
[  396.110980][  T977] gspca_sn9c2028: read1 error -71
[  396.130672][  T977] gspca_sn9c2028: read1 error -71
[  396.141387][  T977] gspca_sn9c2028: read1 error -71
[  396.150724][  T977] sn9c2028 3-1:0.123: probe with driver sn9c2028 failed with error -71
[  396.184151][  T977] usb 3-1: USB disconnect, device number 79
[  397.044658][ T5932] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  397.196355][ T5932] usb 2-1: config 26 has an invalid interface number: 142 but max is 0
[  397.213893][ T5932] usb 2-1: config 26 has no interface number 0
[  397.240461][ T5932] usb 2-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=a4.f4
[  397.297506][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  397.356282][ T5932] gspca_main: touptek-2.14.0 probing 0547:6801
[  397.576114][T10119] binder: 10118:10119 ioctl 5514 0 returned -22
[  397.582825][T10119] binder: 10118:10119 ioctl 541c 800000c0 returned -22
[  397.655334][T10119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  397.664146][T10119] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  397.693851][ T5932] usb 2-1: USB disconnect, device number 56
[  397.764545][T10143] syzkaller1: entered promiscuous mode
[  397.783933][T10143] syzkaller1: entered allmulticast mode
[  397.800985][T10147] FAULT_INJECTION: forcing a failure.
[  397.800985][T10147] name failslab, interval 1, probability 0, space 0, times 0
[  397.844357][T10147] CPU: 1 UID: 0 PID: 10147 Comm: syz.4.1149 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) 
[  397.844383][T10147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  397.844392][T10147] Call Trace:
[  397.844397][T10147]  <TASK>
[  397.844403][T10147]  dump_stack_lvl+0x189/0x250
[  397.844423][T10147]  ? __pfx____ratelimit+0x10/0x10
[  397.844440][T10147]  ? __pfx_dump_stack_lvl+0x10/0x10
[  397.844451][T10147]  ? __pfx__printk+0x10/0x10
[  397.844467][T10147]  ? ref_tracker_alloc+0x318/0x460
[  397.844480][T10147]  should_fail_ex+0x414/0x560
[  397.844497][T10147]  should_failslab+0xa8/0x100
[  397.844514][T10147]  kmem_cache_alloc_noprof+0x73/0x3c0
[  397.844526][T10147]  ? skb_clone+0x212/0x3a0
[  397.844543][T10147]  skb_clone+0x212/0x3a0
[  397.844561][T10147]  __netlink_deliver_tap+0x404/0x850
[  397.844582][T10147]  ? netlink_deliver_tap+0x2e/0x1b0
[  397.844594][T10147]  netlink_deliver_tap+0x19c/0x1b0
[  397.844606][T10147]  netlink_unicast+0x72f/0x8d0
[  397.844622][T10147]  netlink_sendmsg+0x805/0xb30
[  397.844638][T10147]  ? __pfx_netlink_sendmsg+0x10/0x10
[  397.844651][T10147]  ? __import_iovec+0x5d4/0x7f0
[  397.844662][T10147]  ? aa_sock_msg_perm+0x94/0x160
[  397.844678][T10147]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  397.844689][T10147]  ? __pfx_netlink_sendmsg+0x10/0x10
[  397.844701][T10147]  __sock_sendmsg+0x219/0x270
[  397.844714][T10147]  ____sys_sendmsg+0x505/0x830
[  397.844731][T10147]  ? __pfx_____sys_sendmsg+0x10/0x10
[  397.844764][T10147]  ___sys_sendmsg+0x21f/0x2a0
[  397.844778][T10147]  ? __pfx____sys_sendmsg+0x10/0x10
[  397.844814][T10147]  ? __fget_files+0x2a/0x420
[  397.844827][T10147]  ? __fget_files+0x3a0/0x420
[  397.844845][T10147]  __sys_sendmsg+0x164/0x220
[  397.844858][T10147]  ? __pfx___sys_sendmsg+0x10/0x10
[  397.844877][T10147]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  397.844889][T10147]  ? lockdep_hardirqs_on+0x9c/0x150
[  397.844900][T10147]  __do_fast_syscall_32+0xb6/0x2b0
[  397.844911][T10147]  ? lockdep_hardirqs_on+0x9c/0x150
[  397.844922][T10147]  do_fast_syscall_32+0x34/0x80
[  397.844931][T10147]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  397.844944][T10147] RIP: 0023:0xf70ee539
[  397.844955][T10147] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  397.844963][T10147] RSP: 002b:00000000f50bd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  397.844975][T10147] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000180
[  397.844983][T10147] RDX: 00000000000040c0 RSI: 0000000000000000 RDI: 0000000000000000
[  397.844989][T10147] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  397.844995][T10147] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  397.845000][T10147] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  397.845015][T10147]  </TASK>
[  397.845068][T10147] netlink: 'syz.4.1149': attribute type 13 has an invalid length.
[  397.969906][T10153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1150'.
[  397.971832][ T5923] usb 1-1: new full-speed USB device number 73 using dummy_hcd
[  398.039046][T10152] xt_connbytes: Forcing CT accounting to be enabled
[  398.175818][T10152] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  398.203097][T10147] gretap0: refused to change device tx_queue_len
[  398.210517][T10147] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  398.227581][T10153] FAULT_INJECTION: forcing a failure.
[  398.227581][T10153] name failslab, interval 1, probability 0, space 0, times 0
[  398.245685][T10153] CPU: 0 UID: 0 PID: 10153 Comm: syz.2.1150 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) 
[  398.245713][T10153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  398.245724][T10153] Call Trace:
[  398.245732][T10153]  <TASK>
[  398.245740][T10153]  dump_stack_lvl+0x189/0x250
[  398.245769][T10153]  ? __pfx____ratelimit+0x10/0x10
[  398.245797][T10153]  ? __pfx_dump_stack_lvl+0x10/0x10
[  398.245817][T10153]  ? __pfx__printk+0x10/0x10
[  398.245846][T10153]  ? __pfx___might_resched+0x10/0x10
[  398.245866][T10153]  ? fs_reclaim_acquire+0x7d/0x100
[  398.245895][T10153]  should_fail_ex+0x414/0x560
[  398.245925][T10153]  ? alloc_netdev_mqs+0x8e5/0x11e0
[  398.245950][T10153]  should_failslab+0xa8/0x100
[  398.245976][T10153]  __kvmalloc_node_noprof+0x161/0x5f0
[  398.245998][T10153]  ? alloc_netdev_mqs+0x8e5/0x11e0
[  398.246028][T10153]  alloc_netdev_mqs+0x8e5/0x11e0
[  398.246060][T10153]  rtnl_create_link+0x31f/0xd10
[  398.246107][T10153]  rtnl_newlink_create+0x25c/0xb00
[  398.246134][T10153]  ? __mutex_lock+0x51b/0xe80
[  398.246166][T10153]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  398.246185][T10153]  ? rtnl_newlink+0x8db/0x1c70
[  398.246207][T10153]  ? __pfx___mutex_lock+0x10/0x10
[  398.246233][T10153]  ? ns_capable+0x8a/0xf0
[  398.246257][T10153]  rtnl_newlink+0x16d6/0x1c70
[  398.246278][T10153]  ? netlink_sendmsg+0x805/0xb30
[  398.246313][T10153]  ? __pfx_rtnl_newlink+0x10/0x10
[  398.246356][T10153]  ? kasan_quarantine_put+0xdd/0x220
[  398.246375][T10153]  ? lockdep_hardirqs_on+0x9c/0x150
[  398.246398][T10153]  ? nlmon_xmit+0xb0/0x100
[  398.246418][T10153]  ? kmem_cache_free+0x18f/0x400
[  398.246446][T10153]  ? __local_bh_enable_ip+0x12d/0x1c0
[  398.246468][T10153]  ? lockdep_hardirqs_on+0x9c/0x150
[  398.246486][T10153]  ? __local_bh_enable_ip+0x12d/0x1c0
[  398.246505][T10153]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  398.246537][T10153]  ? __dev_queue_xmit+0x27e/0x3a70
[  398.246576][T10153]  ? __lock_acquire+0xab9/0xd20
[  398.246626][T10153]  ? __pfx_rtnl_newlink+0x10/0x10
[  398.246644][T10153]  rtnetlink_rcv_msg+0x7cc/0xb70
[  398.246668][T10153]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  398.246686][T10153]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  398.246703][T10153]  ? ref_tracker_free+0x63a/0x7d0
[  398.246718][T10153]  ? __copy_skb_header+0xa7/0x550
[  398.246743][T10153]  ? __pfx_ref_tracker_free+0x10/0x10
[  398.246759][T10153]  ? __skb_clone+0x63/0x7a0
[  398.246789][T10153]  netlink_rcv_skb+0x205/0x470
[  398.246816][T10153]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  398.246837][T10153]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  398.246872][T10153]  ? netlink_deliver_tap+0x2e/0x1b0
[  398.246892][T10153]  ? netlink_deliver_tap+0x2e/0x1b0
[  398.246919][T10153]  netlink_unicast+0x758/0x8d0
[  398.246950][T10153]  netlink_sendmsg+0x805/0xb30
[  398.246981][T10153]  ? __pfx_netlink_sendmsg+0x10/0x10
[  398.247006][T10153]  ? aa_sock_msg_perm+0x94/0x160
[  398.247034][T10153]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  398.247051][T10153]  ? __pfx_netlink_sendmsg+0x10/0x10
[  398.247073][T10153]  __sock_sendmsg+0x219/0x270
[  398.247095][T10153]  sock_sendmsg+0x158/0x230
[  398.247114][T10153]  ? __pfx_sock_sendmsg+0x10/0x10
[  398.247146][T10153]  ? __asan_memset+0x22/0x50
[  398.247163][T10153]  ? iov_iter_bvec+0xb8/0x180
[  398.247188][T10153]  splice_to_socket+0x8ff/0xf10
[  398.247238][T10153]  ? __pfx_splice_to_socket+0x10/0x10
[  398.247257][T10153]  ? aa_file_perm+0x3e7/0xed0
[  398.247300][T10153]  ? get_pid_task+0x20/0x1f0
[  398.247347][T10153]  ? bpf_lsm_file_permission+0x9/0x20
[  398.247367][T10153]  ? security_file_permission+0x75/0x290
[  398.247393][T10153]  ? rw_verify_area+0x258/0x650
[  398.247416][T10153]  ? __pfx_splice_to_socket+0x10/0x10
[  398.247435][T10153]  do_splice+0xc79/0x1660
[  398.247482][T10153]  ? __pfx_do_splice+0x10/0x10
[  398.247508][T10153]  __se_sys_splice+0x2e1/0x460
[  398.247541][T10153]  ? __pfx___se_sys_splice+0x10/0x10
[  398.247563][T10153]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  398.247580][T10153]  ? __ia32_sys_splice+0x21/0xf0
[  398.247605][T10153]  __do_fast_syscall_32+0xb6/0x2b0
[  398.247625][T10153]  ? lockdep_hardirqs_on+0x9c/0x150
[  398.247646][T10153]  do_fast_syscall_32+0x34/0x80
[  398.247664][T10153]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  398.247686][T10153] RIP: 0023:0xf705e539
[  398.247703][T10153] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  398.247718][T10153] RSP: 002b:00000000f500c55c EFLAGS: 00000206 ORIG_RAX: 0000000000000139
[  398.247738][T10153] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000
[  398.247750][T10153] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 000000000004ffe6
[  398.247761][T10153] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  398.247771][T10153] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  398.247782][T10153] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  398.247810][T10153]  </TASK>
[  398.936514][ T5923] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 4
[  398.957269][ T5923] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  398.957326][ T5923] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  398.971348][ T5923] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  398.971383][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.971404][ T5923] usb 1-1: Product: syz
[  398.971418][ T5923] usb 1-1: Manufacturer: syz
[  398.971433][ T5923] usb 1-1: SerialNumber: syz
[  399.065386][T10161] fuse: Unknown parameter 'default_permis'
[  399.144789][ T5844] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  399.244558][  T977] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[  399.304512][ T5844] usb 2-1: Using ep0 maxpacket: 8
[  399.311788][ T5844] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  399.321307][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  399.332369][ T5844] usb 2-1: config 0 descriptor??
[  399.374822][  T977] usb 3-1: device descriptor read/64, error -71
[  399.412271][ T5923] usb 1-1: 2:1 : format type 0 is detected, processed as PCM
[  399.423462][ T5923] usb 1-1: 2:1: cannot set freq 9338507 to ep 0x82
[  399.464067][ T5923] usb 1-1: USB disconnect, device number 73
[  399.542566][ T5844] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  399.565160][ T5844] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0
[  399.583215][ T5844] asix 2-1:0.0: probe with driver asix failed with error -32
[  399.636081][  T977] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[  399.774735][  T977] usb 3-1: device descriptor read/64, error -71
[  399.921127][  T977] usb usb3-port1: attempt power cycle
[  399.939539][   T10] usb 2-1: USB disconnect, device number 57
[  399.971655][T10168] syz.3.1155 (10168): /proc/10167/oom_adj is deprecated, please use /proc/10167/oom_score_adj instead.
[  400.213655][T10179] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1158'.
[  400.285369][  T977] usb 3-1: new high-speed USB device number 82 using dummy_hcd
[  400.294518][T10182] xt_connbytes: Forcing CT accounting to be enabled
[  400.301269][T10182] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  400.348865][T10179] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  400.358840][  T977] usb 3-1: device descriptor read/8, error -71
[  400.614419][  T977] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[  400.675417][  T977] usb 3-1: device descriptor read/8, error -71
[  400.724051][T10196] netlink: 'syz.1.1161': attribute type 10 has an invalid length.
[  400.734615][T10196] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1161'.
[  400.788852][  T977] usb usb3-port1: unable to enumerate USB device
[  401.935019][ T5844] usb 5-1: new full-speed USB device number 55 using dummy_hcd
[  402.348016][ T5844] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  402.369127][ T5844] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0
[  402.381241][ T5844] usb 5-1: config 0 interface 0 has no altsetting 0
[  402.589961][ T5844] usb 5-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[  402.660561][ T5844] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  402.692681][ T5844] usb 5-1: config 0 descriptor??
[  403.136124][T10233] binder: 10232:10233 ioctl c0306201 800003c0 returned -22
[  403.155229][T10233] binder: 10232:10233 ioctl c0306201 800001c0 returned -22
[  403.764599][    T9] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[  403.998082][    T9] usb 3-1: device descriptor read/64, error -71
[  404.090019][ T5844] usbhid 5-1:0.0: can't add hid device: -71
[  404.136936][ T5844] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  404.204502][ T5844] usb 5-1: USB disconnect, device number 55
[  404.244385][    T9] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[  404.441132][    T9] usb 3-1: device descriptor read/64, error -71
[  404.562203][    T9] usb usb3-port1: attempt power cycle
[  404.963072][T10270] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1182'.
[  405.654697][    T9] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[  405.685227][    T9] usb 3-1: device descriptor read/8, error -71
[  406.004521][    T9] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[  406.065209][    T9] usb 3-1: device descriptor read/8, error -71
[  406.175146][    T9] usb usb3-port1: unable to enumerate USB device
[  406.665801][    T9] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  406.822062][T10302] netlink: 1180 bytes leftover after parsing attributes in process `syz.3.1195'.
[  406.836772][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  406.848066][    T9] usb 2-1: New USB device found, idVendor=05a4, idProduct=8003, bcdDevice= 0.00
[  406.857589][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  406.871460][    T9] usb 2-1: config 0 descriptor??
[  406.894545][ T5923] usb 1-1: new high-speed USB device number 74 using dummy_hcd
[  407.054659][ T5923] usb 1-1: Using ep0 maxpacket: 32
[  407.065905][ T5923] usb 1-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  407.080525][ T5923] usb 1-1: config 1 interface 0 has no altsetting 0
[  407.089795][ T5923] usb 1-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.40
[  407.099442][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.107571][ T5923] usb 1-1: Product: ф
[  407.112153][ T5923] usb 1-1: Manufacturer: 毷뒍ཋ瞪䍷밐薄飁䃈籨᝵ᒮ讍㑜隤熔힇绅棶槲使탄䡞⽶碓餥ꨃ哷唷烯寮涊䖓遅໮ꠙαﳵꕼ恋鐼淊峔ḝ궝樱ᥨ녑鄽蚞䆦皠꨸슓Ὂ뜥ᮌ㬡᨞ￌ瞠ꐣ례ﱞ㣠・䪩仇ط眩ᆈ췴ု뾨饤퐄ॗ鬶趫퐛裏떗ꀽꟻ患è摶䁛ᖢ둔佞膥厙߶ꘔ鸐歷
[  407.174485][  T977] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[  407.198254][ T5923] usb 1-1: SerialNumber: 僣詪㕌᧬㹀右挵Ḙ닿敕뾞쀔߹杒䃚ó瀴뉨羵㫁摹쉠湉监ꕔ䕉仓聈㾃埉棒橃쮃膴씞ࡺ쮻⮌⦸⨌戝䍝嵴옷ꥻ曮俥쉻෕蒒䩜
[  407.307863][    T9] ortek 0003:05A4:8003.0012: unknown main item tag 0x0
[  407.324505][    T9] ortek 0003:05A4:8003.0012: unknown main item tag 0x0
[  407.331864][    T9] ortek 0003:05A4:8003.0012: unknown main item tag 0x0
[  407.343990][    T9] ortek 0003:05A4:8003.0012: unknown main item tag 0x0
[  407.351416][  T977] usb 4-1: device descriptor read/64, error -71
[  407.362511][    T9] ortek 0003:05A4:8003.0012: unknown main item tag 0x0
[  407.374964][    T9] ortek 0003:05A4:8003.0012: hidraw0: USB HID v0.00 Device [HID 05a4:8003] on usb-dummy_hcd.1-1/input0
[  407.534979][    T9] usb 2-1: USB disconnect, device number 58
[  407.548731][T10309] fido_id[10309]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[  407.646976][  T977] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[  407.707061][ T5923] usbhid 1-1:1.0: can't add hid device: -71
[  407.723514][ T5923] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  407.766802][ T5923] usb 1-1: USB disconnect, device number 74
[  407.796675][  T977] usb 4-1: device descriptor read/64, error -71
[  407.859673][T10314] lo: entered allmulticast mode
[  407.867482][T10314] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  407.924400][  T977] usb usb4-port1: attempt power cycle
[  408.018609][T10316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1198'.
[  408.276457][  T977] usb 4-1: new high-speed USB device number 72 using dummy_hcd
[  408.327806][  T977] usb 4-1: device descriptor read/8, error -71
[  408.547626][ T5923] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  408.594496][  T977] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[  408.615780][  T977] usb 4-1: device descriptor read/8, error -71
[  408.634733][    T9] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  408.696313][ T5923] usb 5-1: device descriptor read/64, error -71
[  408.726482][  T977] usb usb4-port1: unable to enumerate USB device
[  408.784521][    T9] usb 2-1: Using ep0 maxpacket: 8
[  408.793664][    T9] usb 2-1: config 162 has an invalid interface number: 251 but max is 1
[  408.810547][    T9] usb 2-1: config 162 has an invalid interface number: 209 but max is 1
[  408.819942][    T9] usb 2-1: config 162 has no interface number 0
[  408.829762][    T9] usb 2-1: config 162 has no interface number 1
[  408.872533][    T9] usb 2-1: config 162 interface 251 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  408.904516][    T9] usb 2-1: config 162 interface 209 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  408.915728][    T9] usb 2-1: config 162 interface 209 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[  408.927916][    T9] usb 2-1: config 162 interface 209 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[  408.949643][    T9] usb 2-1: config 162 interface 209 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[  408.954441][ T5923] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  409.100217][    T9] usb 2-1: config 162 interface 209 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[  409.116967][    T9] usb 2-1: config 162 interface 251 has no altsetting 0
[  409.126920][    T9] usb 2-1: config 162 interface 209 has no altsetting 0
[  409.170932][    T9] usb 2-1: New USB device found, idVendor=1608, idProduct=0010, bcdDevice=4f.88
[  409.187431][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.204445][    T9] usb 2-1: Product: syz
[  409.210512][    T9] usb 2-1: Manufacturer: syz
[  409.218186][    T9] usb 2-1: SerialNumber: syz
[  409.244475][ T5923] usb 5-1: device descriptor read/64, error -71
[  409.354730][ T5923] usb usb5-port1: attempt power cycle
[  409.510851][    T9] io_edgeport 2-1:162.251: required endpoints missing
[  409.747996][ T5923] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[  409.960098][    T9] io_edgeport 2-1:162.209: Edgeport 2 port adapter converter detected
[  409.974391][ T5923] usb 5-1: device descriptor read/8, error -71
[  410.205681][    T9] usb 2-1: у  detected
[  410.334424][ T5923] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[  410.376387][ T5923] usb 5-1: device descriptor read/8, error -71
[  410.410120][    T9] usb 2-1: Edgeport 2 port adapter converter now attached to ttyUSB0
[  410.443676][    T9] usb 2-1: Edgeport 2 port adapter converter now attached to ttyUSB1
[  410.487051][ T5923] usb usb5-port1: unable to enumerate USB device
[  410.657762][    T9] usb 2-1: USB disconnect, device number 59
[  410.657877][    C0] usb 2-1: edge_interrupt_callback - Error -19 submitting control urb
[  410.692489][    T9] edgeport_2 ttyUSB0: Edgeport 2 port adapter converter now disconnected from ttyUSB0
[  410.726798][    T9] edgeport_2 ttyUSB1: Edgeport 2 port adapter converter now disconnected from ttyUSB1
[  410.744742][    T9] io_edgeport 2-1:162.209: device disconnected
[  411.219810][T10357] fuse: Bad value for 'fd'
[  411.232516][T10357] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1214'.
[  411.241731][T10357] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1214'.
[  411.250821][T10357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1214'.
[  411.279339][T10357] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1214'.
[  411.288756][T10357] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1214'.
[  411.438695][    C0] vxcan1: j1939_tp_rxtimer: 0xffff888055f02c00: rx timeout, send abort
[  411.449507][    C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888055f02c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  411.634623][ T5923] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  411.811281][ T5923] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  411.824169][ T5923] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  411.844054][ T5923] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  411.854066][ T5923] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  411.862791][ T5923] usb 2-1: SerialNumber: syz
[  411.988214][    C1] vxcan1: j1939_tp_rxtimer: 0xffff888056fe3c00: rx timeout, send abort
[  411.996941][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888056fe3c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  412.181065][ T5923] usb 2-1: 0:2 : does not exist
[  412.196832][ T5923] usb 2-1: USB disconnect, device number 60
[  412.370788][ T5945] udevd[5945]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  412.864208][T10378] input: syz0 as /devices/virtual/input/input25
[  413.321974][T10386] fuse: Unknown parameter '�'
[  413.484421][    T9] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[  413.818743][    T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  413.841331][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.854613][    T9] usb 5-1: Product: syz
[  413.858823][    T9] usb 5-1: Manufacturer: syz
[  413.886533][    T9] usb 5-1: SerialNumber: syz
[  413.911585][    T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  413.983921][  T977] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  414.124762][ T2005] usb 3-1: new full-speed USB device number 88 using dummy_hcd
[  414.367690][ T2005] usb 3-1: config 0 has an invalid interface number: 81 but max is 0
[  414.374472][    T9] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  414.386209][ T2005] usb 3-1: config 0 has no interface number 0
[  414.392598][ T2005] usb 3-1: config 0 interface 81 has no altsetting 0
[  414.421630][ T2005] usb 3-1: New USB device found, idVendor=a168, idProduct=0615, bcdDevice=91.bf
[  414.450449][ T2005] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  414.464671][ T2005] usb 3-1: Product: syz
[  414.468888][ T2005] usb 3-1: Manufacturer: syz
[  414.473526][ T2005] usb 3-1: SerialNumber: syz
[  414.505789][ T2005] usb 3-1: config 0 descriptor??
[  414.526779][ T2005] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0615
[  414.536907][    T9] usb 2-1: Using ep0 maxpacket: 8
[  414.566862][    T9] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  414.589052][    T9] usb 2-1: config 179 has no interface number 0
[  414.605940][    T9] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  414.621893][    T9] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  414.640545][    T9] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[  414.653766][    T9] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[  414.754612][    T9] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  414.774773][    T9] usb 2-1: config 179 interface 65 has no altsetting 0
[  414.781815][    T9] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  414.793320][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.799076][T10397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  414.815245][T10397] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  414.877521][    T9] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input26
[  414.880705][T10404] syzkaller0: entered promiscuous mode
[  414.897481][T10404] syzkaller0: entered allmulticast mode
[  414.948688][ T5202] input input26: unable to receive magic message: -110
[  414.977406][ T5202] input input26: unable to receive magic message: -32
[  414.984949][T10404] syzkaller0: mtu greater than device maximum
[  415.008586][ T5202] input input26: unable to receive magic message: -32
[  415.024640][  T977] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  415.038160][ T2005] gspca_sn9c20x: Write register 1000 failed -110
[  415.044961][ T5976] input input26: unable to receive magic message: -32
[  415.052171][ T2005] gspca_sn9c20x: Device initialization failed
[  415.052477][  T977] ath9k_htc: Failed to initialize the device
[  415.060471][ T2005] gspca_sn9c20x 3-1:0.81: probe with driver gspca_sn9c20x failed with error -110
[  415.079429][T10402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1227'.
[  415.099641][ T5202] input input26: unable to receive magic message: -32
[  415.132387][ T5202] input input26: unable to receive magic message: -32
[  415.156579][  T977] usb 5-1: ath9k_htc: USB layer deinitialized
[  415.330297][ T2005] usb 2-1: USB disconnect, device number 61
[  415.330346][    C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  415.653653][    T9] usb 5-1: USB disconnect, device number 60
[  416.274673][ T2005] usb 2-1: new full-speed USB device number 62 using dummy_hcd
[  416.435596][ T2005] usb 2-1: device descriptor read/64, error -71
[  416.694527][ T2005] usb 2-1: new full-speed USB device number 63 using dummy_hcd
[  416.797506][ T5923] usb 3-1: USB disconnect, device number 88
[  416.864532][ T2005] usb 2-1: device descriptor read/64, error -71
[  416.979678][ T2005] usb usb2-port1: attempt power cycle
[  417.464428][ T2005] usb 2-1: new full-speed USB device number 64 using dummy_hcd
[  417.486169][ T2005] usb 2-1: device descriptor read/8, error -71
[  417.776640][ T2005] usb 2-1: new full-speed USB device number 65 using dummy_hcd
[  417.808829][ T2005] usb 2-1: device descriptor read/8, error -71
[  417.934815][ T2005] usb usb2-port1: unable to enumerate USB device
[  417.974587][  T977] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[  418.124850][  T977] usb 4-1: Using ep0 maxpacket: 32
[  418.141141][  T977] usb 4-1: config 33 has an invalid interface number: 147 but max is 8
[  418.149869][  T977] usb 4-1: config 33 has an invalid descriptor of length 0, skipping remainder of the config
[  418.162272][  T977] usb 4-1: config 33 has 1 interface, different from the descriptor's value: 9
[  418.180217][  T977] usb 4-1: config 33 has no interface number 0
[  418.196413][  T977] usb 4-1: string descriptor 0 read error: -71
[  418.202807][  T977] usb 4-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.40
[  418.212145][  T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  418.222485][  T977] usb 4-1: rejected 1 configuration due to insufficient available bus power
[  418.231567][  T977] usb 4-1: no configuration chosen from 1 choice
[  418.242341][  T977] usb 4-1: USB disconnect, device number 74
[  418.414354][    T9] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[  418.574352][    T9] usb 5-1: Using ep0 maxpacket: 32
[  418.582641][    T9] usb 5-1: config 0 has an invalid interface number: 35 but max is 0
[  418.591307][    T9] usb 5-1: config 0 has no interface number 0
[  418.601416][    T9] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  418.610793][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  418.619225][    T9] usb 5-1: Product: syz
[  418.624732][    T9] usb 5-1: Manufacturer: syz
[  418.629375][    T9] usb 5-1: SerialNumber: syz
[  418.638307][    T9] usb 5-1: config 0 descriptor??
[  418.862021][    T9] radio-si470x 5-1:0.35: this is not a si470x device.
[  418.909221][    T9] radio-raremono 5-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  419.078547][T10468] fuse: Unknown parameter 'fd���A�'
[  419.085224][  T977] usb 4-1: new full-speed USB device number 75 using dummy_hcd
[  419.112421][    T9] radio-raremono 5-1:0.35: V4L2 device registered as radio48
[  419.256719][  T977] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  419.265043][  T977] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  419.277673][  T977] usb 4-1: config 0 has no interface number 0
[  419.286336][  T977] usb 4-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  419.295685][  T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.304159][  T977] usb 4-1: Product: syz
[  419.309310][  T977] usb 4-1: Manufacturer: syz
[  419.314037][  T977] usb 4-1: SerialNumber: syz
[  419.321915][  T977] usb 4-1: config 0 descriptor??
[  419.326024][T10460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  419.343433][T10460] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  419.344045][  T977] cx231xx 4-1:0.1: New device syz syz @ 12 Mbps (0572:58a5) with 1 interfaces
[  419.361763][  T977] cx231xx 4-1:0.1: Not found matching IAD interface
[  419.415275][ T5941] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  419.564386][ T5941] usb 2-1: Using ep0 maxpacket: 32
[  419.577392][ T5941] usb 2-1: config 0 has an invalid interface number: 85 but max is 0
[  419.591343][ T5941] usb 2-1: config 0 has no interface number 0
[  419.602315][ T5941] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  419.617755][ T5941] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[  419.629100][ T5941] usb 2-1: config 0 interface 85 has no altsetting 0
[  419.639687][ T5941] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  419.649506][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.668874][ T5941] usb 2-1: Product: syz
[  419.693075][ T5941] usb 2-1: Manufacturer: syz
[  419.713137][ T5941] usb 2-1: SerialNumber: syz
[  419.763042][T10477] x_tables: duplicate underflow at hook 2
[  419.853831][ T5941] usb 2-1: config 0 descriptor??
[  420.078204][ T5941] appletouch 2-1:0.85: Failed to read mode from device.
[  420.105660][ T5941] appletouch 2-1:0.85: probe with driver appletouch failed with error -5
[  420.143894][ T5941] usb 2-1: USB disconnect, device number 66
[  420.662752][T10487] loop6: detected capacity change from 0 to 7
[  420.676621][ T5945] Dev loop6: unable to read RDB block 7
[  420.682413][ T5945]  loop6: AHDI p1
[  420.686682][ T5945] loop6: partition table partially beyond EOD, truncated
[  420.698006][T10487] Dev loop6: unable to read RDB block 7
[  420.705889][T10487]  loop6: AHDI p1
[  420.709663][T10487] loop6: partition table partially beyond EOD, truncated
[  420.764135][ T5941] hid-generic 0000:0003:0000.0013: item fetching failed at offset 0/2
[  420.783499][ T5941] hid-generic 0000:0003:0000.0013: probe with driver hid-generic failed with error -22
[  421.240357][    T9] usb 5-1: USB disconnect, device number 61
[  421.247461][    T9] radio-raremono 5-1:0.35: Thanko's Raremono disconnected
[  421.410620][T10496] FAULT_INJECTION: forcing a failure.
[  421.410620][T10496] name failslab, interval 1, probability 0, space 0, times 0
[  421.427011][T10496] CPU: 0 UID: 0 PID: 10496 Comm: syz.4.1252 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) 
[  421.427040][T10496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  421.427050][T10496] Call Trace:
[  421.427058][T10496]  <TASK>
[  421.427066][T10496]  dump_stack_lvl+0x189/0x250
[  421.427095][T10496]  ? __pfx____ratelimit+0x10/0x10
[  421.427124][T10496]  ? __pfx_dump_stack_lvl+0x10/0x10
[  421.427143][T10496]  ? __pfx__printk+0x10/0x10
[  421.427172][T10496]  ? __pfx___might_resched+0x10/0x10
[  421.427212][T10496]  should_fail_ex+0x414/0x560
[  421.427244][T10496]  should_failslab+0xa8/0x100
[  421.427270][T10496]  __kmalloc_cache_node_noprof+0x73/0x3d0
[  421.427294][T10496]  ? __get_vm_area_node+0x13f/0x300
[  421.427320][T10496]  __get_vm_area_node+0x13f/0x300
[  421.427346][T10496]  __vmalloc_node_range_noprof+0x301/0x12f0
[  421.427368][T10496]  ? bpf_prog_alloc_no_stats+0x4a/0x4e0
[  421.427416][T10496]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  421.427437][T10496]  ? __might_fault+0xb0/0x130
[  421.427459][T10496]  ? _parse_integer_limit+0x1ae/0x1f0
[  421.427490][T10496]  ? bpf_prog_alloc_no_stats+0x4a/0x4e0
[  421.427505][T10496]  __vmalloc_noprof+0xb1/0xf0
[  421.427525][T10496]  ? bpf_prog_alloc_no_stats+0x4a/0x4e0
[  421.427545][T10496]  bpf_prog_alloc_no_stats+0x4a/0x4e0
[  421.427569][T10496]  bpf_prog_alloc+0x3c/0x1a0
[  421.427593][T10496]  bpf_prog_load+0x735/0x1930
[  421.427624][T10496]  ? __pfx_bpf_prog_load+0x10/0x10
[  421.427662][T10496]  ? bpf_lsm_bpf+0x9/0x20
[  421.427681][T10496]  ? security_bpf+0x7e/0x300
[  421.427707][T10496]  __sys_bpf+0x5f1/0x860
[  421.427726][T10496]  ? __pfx___sys_bpf+0x10/0x10
[  421.427761][T10496]  ? ksys_write+0x22a/0x250
[  421.427790][T10496]  __ia32_sys_bpf+0x7c/0x90
[  421.427815][T10496]  __do_fast_syscall_32+0xb6/0x2b0
[  421.427833][T10496]  ? lockdep_hardirqs_on+0x9c/0x150
[  421.427856][T10496]  do_fast_syscall_32+0x34/0x80
[  421.427877][T10496]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  421.427899][T10496] RIP: 0023:0xf70ee539
[  421.427914][T10496] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  421.427929][T10496] RSP: 002b:00000000f50de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000165
[  421.427949][T10496] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000400
[  421.427961][T10496] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000
[  421.427972][T10496] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  421.427982][T10496] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  421.427993][T10496] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  421.428019][T10496]  </TASK>
[  421.428471][T10496] syz.4.1252: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1
[  421.769425][T10496] CPU: 1 UID: 0 PID: 10496 Comm: syz.4.1252 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) 
[  421.769445][T10496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  421.769452][T10496] Call Trace:
[  421.769458][T10496]  <TASK>
[  421.769464][T10496]  dump_stack_lvl+0x189/0x250
[  421.769487][T10496]  ? __pfx_dump_stack_lvl+0x10/0x10
[  421.769499][T10496]  ? __pfx__printk+0x10/0x10
[  421.769512][T10496]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  421.769529][T10496]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  421.769552][T10496]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  421.769566][T10496]  warn_alloc+0x214/0x310
[  421.769584][T10496]  ? __pfx_warn_alloc+0x10/0x10
[  421.769597][T10496]  ? __get_vm_area_node+0x13f/0x300
[  421.769612][T10496]  ? __get_vm_area_node+0x2b5/0x300
[  421.769627][T10496]  __vmalloc_node_range_noprof+0x326/0x12f0
[  421.769654][T10496]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  421.769665][T10496]  ? __might_fault+0xb0/0x130
[  421.769677][T10496]  ? _parse_integer_limit+0x1ae/0x1f0
[  421.769696][T10496]  ? bpf_prog_alloc_no_stats+0x4a/0x4e0
[  421.769708][T10496]  __vmalloc_noprof+0xb1/0xf0
[  421.769725][T10496]  ? bpf_prog_alloc_no_stats+0x4a/0x4e0
[  421.769736][T10496]  bpf_prog_alloc_no_stats+0x4a/0x4e0
[  421.769749][T10496]  bpf_prog_alloc+0x3c/0x1a0
[  421.769761][T10496]  bpf_prog_load+0x735/0x1930
[  421.769777][T10496]  ? __pfx_bpf_prog_load+0x10/0x10
[  421.769798][T10496]  ? bpf_lsm_bpf+0x9/0x20
[  421.769810][T10496]  ? security_bpf+0x7e/0x300
[  421.769825][T10496]  __sys_bpf+0x5f1/0x860
[  421.769835][T10496]  ? __pfx___sys_bpf+0x10/0x10
[  421.769851][T10496]  ? ksys_write+0x22a/0x250
[  421.769869][T10496]  __ia32_sys_bpf+0x7c/0x90
[  421.769883][T10496]  __do_fast_syscall_32+0xb6/0x2b0
[  421.769896][T10496]  ? lockdep_hardirqs_on+0x9c/0x150
[  421.769911][T10496]  do_fast_syscall_32+0x34/0x80
[  421.769921][T10496]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  421.769934][T10496] RIP: 0023:0xf70ee539
[  421.769944][T10496] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  421.769952][T10496] RSP: 002b:00000000f50de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000165
[  421.769965][T10496] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000400
[  421.769972][T10496] RDX: 0000000000000094 RSI: 0000000000000000 RDI: 0000000000000000
[  421.769978][T10496] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  421.769983][T10496] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  421.769989][T10496] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  421.770003][T10496]  </TASK>
[  421.770081][T10496] Mem-Info:
[  422.300846][T10496] active_anon:6452 inactive_anon:0 isolated_anon:0
[  422.300846][T10496]  active_file:14114 inactive_file:39964 isolated_file:0
[  422.300846][T10496]  unevictable:768 dirty:146 writeback:0
[  422.300846][T10496]  slab_reclaimable:10315 slab_unreclaimable:107872
[  422.300846][T10496]  mapped:33335 shmem:1381 pagetables:1319
[  422.300846][T10496]  sec_pagetables:0 bounce:0
[  422.300846][T10496]  kernel_misc_reclaimable:0
[  422.300846][T10496]  free:1294428 free_pcp:17082 free_cma:0
[  422.392298][  T977] usb 4-1: USB disconnect, device number 75
[  422.491052][T10496] Node 0 active_anon:26032kB inactive_anon:0kB active_file:56456kB inactive_file:159652kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133340kB dirty:636kB writeback:0kB shmem:3988kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12840kB pagetables:5152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  422.524450][    C1] vkms_vblank_simulate: vblank timer overrun
[  422.575492][T10496] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  422.756938][T10496] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  422.878400][T10496] lowmem_reserve[]: 0 2498 2500 2500 2500
[  422.912442][T10496] Node 0 DMA32 free:1271296kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27088kB inactive_anon:0kB active_file:56456kB inactive_file:158060kB unevictable:1536kB writepending:636kB present:3129332kB managed:2558392kB mlocked:0kB bounce:0kB free_pcp:39936kB local_pcp:19256kB free_cma:0kB
[  422.954452][T10496] lowmem_reserve[]: 0 0 1 1 1
[  422.959478][T10496] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1592kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB
[  422.988312][    C1] vkms_vblank_simulate: vblank timer overrun
[  423.084531][T10496] lowmem_reserve[]: 0 0 0 0 0
[  423.110819][T10496] Node 1 Normal free:3891184kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:28320kB local_pcp:16640kB free_cma:0kB
[  423.160573][  T977] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[  423.230087][T10496] lowmem_reserve[]: 0 0 0 0 0
[  423.235244][T10496] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  423.271248][T10496] Node 0 DMA32: 1280*4kB (UM) 371*8kB (UM) 248*16kB (UME) 558*32kB (UME) 268*64kB (UME) 34*128kB (UM) 21*256kB (UM) 13*512kB (UME) 10*1024kB (UM) 6*2048kB (M) 290*4096kB (UM) = 1273816kB
[  423.311633][T10496] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  423.331384][T10496] Node 1 Normal: 212*4kB (UE) 60*8kB (UME) 40*16kB (UME) 98*32kB (UME) 32*64kB (UME) 8*128kB (UME) 4*256kB (UM) 2*512kB (M) 2*1024kB (UM) 0*2048kB 947*4096kB (M) = 3891184kB
[  423.351024][  T977] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  423.351059][  T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  423.351086][  T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  423.351110][  T977] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  423.351148][  T977] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  423.351168][  T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  423.369954][  T977] usb 3-1: config 0 descriptor??
[  423.420931][T10496] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  423.442829][T10516] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  423.530859][T10496] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  423.551113][T10496] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  423.571495][T10496] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  423.574453][    T9] usb 2-1: new full-speed USB device number 67 using dummy_hcd
[  423.594432][T10496] 55453 total pagecache pages
[  423.601828][T10496] 0 pages in swap cache
[  423.619006][T10496] Free swap  = 124996kB
[  423.627933][T10496] Total swap = 124996kB
[  423.634301][T10496] 2097051 pages RAM
[  423.638129][T10496] 0 pages HighMem/MovableOnly
[  423.651685][T10496] 425411 pages reserved
[  423.673386][T10496] 0 pages cma reserved
[  423.748130][    T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 4
[  423.781414][    T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  423.815899][    T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  423.836211][    T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  423.845695][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.856007][    T9] usb 2-1: Product: syz
[  423.860337][    T9] usb 2-1: Manufacturer: syz
[  423.873282][    T9] usb 2-1: SerialNumber: syz
[  423.886881][  T977] plantronics 0003:047F:FFFF.0014: reserved main item tag 0xd
[  423.914836][ T5932] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[  423.939181][  T977] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  424.770185][ T5932] usb 4-1: Using ep0 maxpacket: 32
[  424.789053][ T5932] usb 4-1: config 0 has an invalid interface number: 35 but max is 0
[  424.807814][ T5932] usb 4-1: config 0 has no interface number 0
[  424.825990][  T977] usb 3-1: USB disconnect, device number 89
[  424.851986][ T5932] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  424.888744][    T9] usb 2-1: 2:1 : format type 0 is detected, processed as PCM
[  424.895484][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.916500][    T9] usb 2-1: 2:1: cannot set freq 9338507 to ep 0x82
[  424.932381][ T5932] usb 4-1: Product: syz
[  424.953017][ T5932] usb 4-1: Manufacturer: syz
[  424.967457][ T5932] usb 4-1: SerialNumber: syz
[  424.981633][T10532] fido_id[10532]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  425.000988][ T5932] usb 4-1: config 0 descriptor??
[  425.034593][    T9] usb 2-1: USB disconnect, device number 67
[  425.219768][ T5932] radio-si470x 4-1:0.35: this is not a si470x device.
[  425.277025][ T5932] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  425.484707][ T5932] radio-raremono 4-1:0.35: V4L2 device registered as radio48
[  425.661291][T10542] bond0: (slave team0): Releasing backup interface
[  425.683700][T10544] fuse: Unknown parameter 'rmotmode'
[  425.706288][T10542] bridge_slave_0: left allmulticast mode
[  425.736187][T10527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  425.744887][T10542] bridge_slave_0: left promiscuous mode
[  425.753419][T10542] bridge0: port 1(bridge_slave_0) entered disabled state
[  425.791130][T10527] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  425.804945][ T5932] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[  426.054451][    T9] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  426.063696][T10542] bridge_slave_1: left allmulticast mode
[  426.074376][T10542] bridge_slave_1: left promiscuous mode
[  426.082382][T10542] bridge0: port 2(bridge_slave_1) entered disabled state
[  426.090990][ T5932] usb 3-1: Using ep0 maxpacket: 32
[  426.104102][T10542] bond0: (slave bond_slave_0): Releasing backup interface
[  426.106776][ T5932] usb 3-1: config 0 has an invalid interface number: 35 but max is 0
[  426.124324][ T5932] usb 3-1: config 0 has no interface number 0
[  426.135087][T10542] bond0: (slave bond_slave_1): Releasing backup interface
[  426.137280][ T5932] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  426.154342][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  426.170404][ T5932] usb 3-1: Product: syz
[  426.175037][ T5932] usb 3-1: Manufacturer: syz
[  426.179973][T10551] x_tables: duplicate underflow at hook 2
[  426.180484][ T5932] usb 3-1: SerialNumber: syz
[  426.211788][T10542] team0: Port device team_slave_0 removed
[  426.212150][ T5932] usb 3-1: config 0 descriptor??
[  426.232714][T10542] team0: Port device team_slave_1 removed
[  426.239119][    T9] usb 2-1: Using ep0 maxpacket: 16
[  426.249926][    T9] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  426.259316][T10542] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  426.267166][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  426.278321][T10542] batman_adv: batadv0: Removing interface: batadv_slave_0
[  426.288124][T10542] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  426.303014][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  426.315270][T10542] batman_adv: batadv0: Removing interface: batadv_slave_1
[  426.322578][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 62
[  426.343147][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  426.360787][T10542] team0: Port device batadv1 removed
[  426.377339][T10542] veth3: left allmulticast mode
[  426.382245][T10542] veth3: left promiscuous mode
[  426.387840][T10542] bridge1: port 1(veth3) entered disabled state
[  426.395332][    T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  426.405721][    T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  426.413736][    T9] usb 2-1: Manufacturer: syz
[  426.432214][    T9] usb 2-1: config 0 descriptor??
[  426.438310][ T5932] radio-si470x 3-1:0.35: this is not a si470x device.
[  426.486605][ T5932] radio-raremono 3-1:0.35: Thanko's Raremono connected: (10C4:818A)
[  426.642258][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1267'.
[  426.694218][ T5932] videodev: could not get a free minor
[  426.700946][ T5932] radio-raremono 3-1:0.35: could not register video device
[  426.711229][ T5932] radio-raremono 3-1:0.35: probe with driver radio-raremono failed with error -23
[  426.734417][    T9] rc_core: IR keymap rc-hauppauge not found
[  426.740977][    T9] Registered IR keymap rc-empty
[  426.753515][    T9] mceusb 2-1:0.0: Error: mce write urb status = -71
[  426.777806][    T9] mceusb 2-1:0.0: Error: mce write urb status = -71
[  426.824017][    T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  426.849782][    T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input29
[  426.883275][    T9] mceusb 2-1:0.0: Error: mce write urb status = -71
[  426.902863][T10537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  426.925307][T10556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1268'.
[  426.934334][    T9] mceusb 2-1:0.0: Error: mce write urb status = -71
[  426.941643][T10537] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  426.988648][    T9] mceusb 2-1:0.0: Error: mce write urb status = -71
[  427.019501][    T9] mceusb 2-1:0.0: Error: mce write urb status = -71
[  427.047867][    T9] mceusb 2-1:0.0: Error: mce write urb status = -71
[  427.081707][    T9] mceusb 2-1:0.0: Error: mce write urb status = -71
[  427.119187][    T9] mceusb 2-1:0.0: Error: mce write urb status = -71
[  427.155206][    T9] mceusb 2-1:0.0: Error: mce write urb status = -71
[  427.196585][T10537] x_tables: duplicate underflow at hook 2
[  427.202723][    T9] mceusb 2-1:0.0: Error: mce write urb status = -71
[  427.219483][ T5941] usb 3-1: USB disconnect, device number 90
[  427.228497][    T9] mceusb 2-1:0.0: Error: mce write urb status = -71
[  427.271756][    T9] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  427.280119][ T5932] usb 4-1: USB disconnect, device number 76
[  427.281403][ T5932] radio-raremono 4-1:0.35: Thanko's Raremono disconnected
[  427.294001][    T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  427.515597][T10567] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1272'.
[  427.764592][ T5941] usb 4-1: new high-speed USB device number 77 using dummy_hcd
[  427.854531][    T9] usb 5-1: new full-speed USB device number 62 using dummy_hcd
[  427.966608][ T5941] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  427.978454][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  427.990171][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  428.002171][ T5941] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  428.015533][ T5941] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  428.025772][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.034465][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  428.045682][    T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  428.055921][ T5941] usb 4-1: config 0 descriptor??
[  428.060956][  T977] usb 3-1: new full-speed USB device number 91 using dummy_hcd
[  428.075115][T10566] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  428.084596][    T9] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  428.094084][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  428.109281][    T9] usb 5-1: config 0 descriptor??
[  428.120685][    T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  428.127466][    T9] dvb-usb: bulk message failed: -22 (3/0)
[  428.136778][    T9] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  428.147776][    T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  428.155422][    T9] usb 5-1: media controller created
[  428.162134][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  428.182315][    T9] dvb-usb: bulk message failed: -22 (6/0)
[  428.191431][    T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  428.202741][    T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input30
[  428.218831][    T9] dvb-usb: schedule remote query interval to 150 msecs.
[  428.230424][    T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  428.242308][  T977] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 4
[  428.258566][  T977] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  428.268789][  T977] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  428.283955][  T977] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  428.293144][  T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  428.304206][  T977] usb 3-1: Product: syz
[  428.311161][  T977] usb 3-1: Manufacturer: syz
[  428.320382][  T977] usb 3-1: SerialNumber: syz
[  428.384721][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  428.390538][    T9] dvb-usb: error while querying for an remote control event.
[  428.463315][ T5844] usb 5-1: USB disconnect, device number 62
[  428.500098][ T5844] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  428.524043][ T5941] plantronics 0003:047F:FFFF.0015: reserved main item tag 0xd
[  428.553515][ T5941] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  428.664285][ T5941] usb 2-1: USB disconnect, device number 68
[  428.759988][  T977] usb 3-1: 2:1 : format type 0 is detected, processed as PCM
[  428.785945][    T9] usb 4-1: USB disconnect, device number 77
[  428.807669][  T977] usb 3-1: 2:1: cannot set freq 9338507 to ep 0x82
[  428.910307][  T977] usb 3-1: USB disconnect, device number 91
[  428.948489][ T5902] udevd[5902]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  429.177546][T10582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1278'.
[  429.378852][T10584] FAULT_INJECTION: forcing a failure.
[  429.378852][T10584] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  429.463409][T10584] CPU: 1 UID: 0 PID: 10584 Comm: syz.4.1279 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) 
[  429.463439][T10584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  429.463449][T10584] Call Trace:
[  429.463458][T10584]  <TASK>
[  429.463478][T10584]  dump_stack_lvl+0x189/0x250
[  429.463508][T10584]  ? __pfx____ratelimit+0x10/0x10
[  429.463537][T10584]  ? __pfx_dump_stack_lvl+0x10/0x10
[  429.463557][T10584]  ? __pfx__printk+0x10/0x10
[  429.463579][T10584]  ? __might_fault+0xb0/0x130
[  429.463612][T10584]  should_fail_ex+0x414/0x560
[  429.463644][T10584]  _copy_from_iter+0x575/0x16f0
[  429.463678][T10584]  ? __pfx__copy_from_iter+0x10/0x10
[  429.463697][T10584]  ? __local_bh_enable_ip+0x12d/0x1c0
[  429.463717][T10584]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  429.463738][T10584]  ? skb_put+0x11b/0x210
[  429.463763][T10584]  j1939_sk_sendmsg+0x810/0x1350
[  429.463818][T10584]  ? __pfx_j1939_sk_sendmsg+0x10/0x10
[  429.463840][T10584]  ? __import_iovec+0x40e/0x7f0
[  429.463857][T10584]  ? aa_sock_msg_perm+0x94/0x160
[  429.463884][T10584]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  429.463901][T10584]  ? __pfx_j1939_sk_sendmsg+0x10/0x10
[  429.463923][T10584]  __sock_sendmsg+0x219/0x270
[  429.463945][T10584]  ____sys_sendmsg+0x52d/0x830
[  429.463972][T10584]  ? __pfx_____sys_sendmsg+0x10/0x10
[  429.464007][T10584]  ___sys_sendmsg+0x21f/0x2a0
[  429.464030][T10584]  ? __pfx____sys_sendmsg+0x10/0x10
[  429.464087][T10584]  ? __fget_files+0x2a/0x420
[  429.464110][T10584]  ? __fget_files+0x3a0/0x420
[  429.464141][T10584]  __sys_sendmmsg+0x28e/0x430
[  429.464168][T10584]  ? __pfx___sys_sendmmsg+0x10/0x10
[  429.464198][T10584]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  429.464234][T10584]  ? ksys_write+0x22a/0x250
[  429.464261][T10584]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[  429.464286][T10584]  __do_fast_syscall_32+0xb6/0x2b0
[  429.464304][T10584]  ? lockdep_hardirqs_on+0x9c/0x150
[  429.464323][T10584]  do_fast_syscall_32+0x34/0x80
[  429.464340][T10584]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  429.464361][T10584] RIP: 0023:0xf70ee539
[  429.464375][T10584] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  429.464388][T10584] RSP: 002b:00000000f50de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000159
[  429.464406][T10584] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800008c0
[  429.464415][T10584] RDX: 0000000000000002 RSI: 00000000000000f5 RDI: 0000000000000000
[  429.464425][T10584] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  429.464436][T10584] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  429.464446][T10584] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  429.464470][T10584]  </TASK>
[  430.474469][   T10] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[  430.700081][T10610] fuse: Bad value for 'fd'
[  430.804455][ T5932] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[  430.824777][   T10] usb 3-1: Using ep0 maxpacket: 8
[  430.852432][   T10] usb 3-1: config 162 has an invalid interface number: 166 but max is 0
[  430.870988][   T10] usb 3-1: config 162 has no interface number 0
[  430.883163][   T10] usb 3-1: config 162 interface 166 has no altsetting 0
[  430.909568][   T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=d3.ea
[  430.923893][T10614] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1289'.
[  430.937851][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  430.965674][   T10] usb 3-1: Product: syz
[  430.974577][ T5932] usb 5-1: Using ep0 maxpacket: 16
[  430.984963][ T5932] usb 5-1: config 1 interface 0 altsetting 64 bulk endpoint 0x82 has invalid maxpacket 32
[  430.998587][ T5932] usb 5-1: config 1 interface 0 altsetting 64 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  431.033512][   T10] usb 3-1: Manufacturer: syz
[  431.040472][ T5932] usb 5-1: config 1 interface 0 has no altsetting 0
[  431.059620][ T5932] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  431.072115][ T5932] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  431.086737][ T5932] usb 5-1: Product: ꌞ됍痘笈셯宅絟콃仼鑿뗑瘾쪄恊塭䤿聀ꒌ㬺켈蹬폿慇澣䞴ԇ译໇斃卂芧砸扜疯拳ㄈⓂ峘룴秢ᜥ芼淋ꂂ甔又뗅榎늷徸㝠⧘⬟鷂垄ꄄ⥎뽶ׂ㜈鄠㉥掺罂㵝亴㒩鏱侹門淍湗搎钘恪⌓廈쟯츓㺀誛
[  431.125864][   T10] usb 3-1: SerialNumber: syz
[  431.131769][ T5932] usb 5-1: Manufacturer: 䣆礽餣Ղ俀瓼
[  431.138196][ T5932] usb 5-1: SerialNumber: syz
[  431.149155][T10603] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  431.156630][T10603] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  431.414542][ T5844] usb 4-1: new full-speed USB device number 78 using dummy_hcd
[  431.587196][ T5844] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  431.610717][ T5932] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22
[  431.624882][ T5844] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  431.654875][ T5932] usb 5-1: USB disconnect, device number 63
[  431.666184][ T5844] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  431.705921][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  431.738947][ T5844] usb 4-1: config 0 descriptor??
[  431.763788][ T5844] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  431.770737][ T5844] dvb-usb: bulk message failed: -22 (3/0)
[  431.793808][ T5844] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  431.842833][ T5844] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  431.858351][ T5844] usb 4-1: media controller created
[  431.871352][ T5844] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  431.897566][ T5844] dvb-usb: bulk message failed: -22 (6/0)
[  431.913156][ T5844] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  431.931773][ T5844] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input32
[  431.976155][ T5844] dvb-usb: schedule remote query interval to 150 msecs.
[  432.204333][ T5844] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  432.395022][ T5844] dvb-usb: bulk message failed: -22 (1/0)
[  432.400953][ T5844] dvb-usb: error while querying for an remote control event.
[  432.622718][   T10] appledisplay 3-1:162.166: Error while getting initial brightness: -71
[  432.803222][   T10] appledisplay 3-1:162.166: probe with driver appledisplay failed with error -71
[  432.819881][ T5844] usb 4-1: USB disconnect, device number 78
[  432.955079][   T10] usb 3-1: USB disconnect, device number 92
[  433.077786][ T5844] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  433.382948][T10642] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1297'.
[  433.924363][ T5844] usb 4-1: new full-speed USB device number 79 using dummy_hcd
[  434.092173][ T5844] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  434.154722][ T5844] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  434.164046][ T5844] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  434.175475][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  434.244381][ T5844] usb 4-1: config 0 descriptor??
[  434.341661][ T5844] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  434.448888][ T5844] dvb-usb: bulk message failed: -22 (3/0)
[  434.491318][ T5844] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  434.534164][T10658] FAULT_INJECTION: forcing a failure.
[  434.534164][T10658] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  434.632642][ T5844] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  434.642801][ T5844] usb 4-1: media controller created
[  434.650390][ T5844] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  434.659218][T10658] CPU: 0 UID: 0 PID: 10658 Comm: syz.4.1304 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) 
[  434.659242][T10658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  434.659253][T10658] Call Trace:
[  434.659261][T10658]  <TASK>
[  434.659268][T10658]  dump_stack_lvl+0x189/0x250
[  434.659297][T10658]  ? __pfx____ratelimit+0x10/0x10
[  434.659323][T10658]  ? __pfx_dump_stack_lvl+0x10/0x10
[  434.659340][T10658]  ? __pfx__printk+0x10/0x10
[  434.659364][T10658]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  434.659396][T10658]  should_fail_ex+0x414/0x560
[  434.659426][T10658]  _copy_from_user+0x2d/0xb0
[  434.659449][T10658]  sg_io+0x29f/0x8a0
[  434.659482][T10658]  scsi_ioctl+0x1399/0x1fb0
[  434.659510][T10658]  ? __pfx_scsi_ioctl+0x10/0x10
[  434.659571][T10658]  ? __pfx___might_resched+0x10/0x10
[  434.659597][T10658]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  434.659628][T10658]  ? scsi_block_when_processing_errors+0x390/0x470
[  434.659652][T10658]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  434.659674][T10658]  ? __pfx_scsi_block_when_processing_errors+0x10/0x10
[  434.659718][T10658]  sg_ioctl+0x1886/0x2230
[  434.659750][T10658]  ? __pfx_sg_ioctl+0x10/0x10
[  434.659771][T10658]  ? __fget_files+0x2a/0x420
[  434.659799][T10658]  ? __fget_files+0x3a0/0x420
[  434.659818][T10658]  ? __fget_files+0x2a/0x420
[  434.659843][T10658]  ? bpf_lsm_file_ioctl_compat+0x9/0x20
[  434.659866][T10658]  __ia32_compat_sys_ioctl+0x540/0x840
[  434.659889][T10658]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  434.659908][T10658]  ? __fget_files+0x3a0/0x420
[  434.659935][T10658]  ? fput+0xa0/0xd0
[  434.659951][T10658]  ? ksys_write+0x22a/0x250
[  434.659977][T10658]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  434.659996][T10658]  ? lockdep_hardirqs_on+0x9c/0x150
[  434.660013][T10658]  __do_fast_syscall_32+0xb6/0x2b0
[  434.660044][T10658]  ? lockdep_hardirqs_on+0x9c/0x150
[  434.660062][T10658]  do_fast_syscall_32+0x34/0x80
[  434.660079][T10658]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  434.660101][T10658] RIP: 0023:0xf70ee539
[  434.660116][T10658] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  434.660129][T10658] RSP: 002b:00000000f50de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  434.660147][T10658] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000000005393
[  434.660156][T10658] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000
[  434.660165][T10658] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  434.660174][T10658] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  434.660183][T10658] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  434.660205][T10658]  </TASK>
[  434.663435][ T5844] dvb-usb: bulk message failed: -22 (6/0)
[  434.984812][ T5844] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  434.999042][ T5844] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input34
[  435.135779][ T5844] dvb-usb: schedule remote query interval to 150 msecs.
[  435.148441][ T5844] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  435.342014][ T5844] dvb-usb: bulk message failed: -22 (1/0)
[  435.354394][ T5844] dvb-usb: error while querying for an remote control event.
[  435.544439][ T5932] dvb-usb: bulk message failed: -22 (1/0)
[  435.550224][ T5932] dvb-usb: error while querying for an remote control event.
[  435.724354][ T5932] dvb-usb: bulk message failed: -22 (1/0)
[  435.819235][ T5932] dvb-usb: error while querying for an remote control event.
[  435.835678][   T10] usb 4-1: USB disconnect, device number 79
[  435.902151][   T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  436.136320][  T977] usb 3-1: new full-speed USB device number 93 using dummy_hcd
[  436.324396][ T5941] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  436.333994][  T977] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  436.345033][  T977] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  436.353959][  T977] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  436.492837][  T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  436.549276][ T5941] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  436.597388][ T5941] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  436.621563][  T977] usb 3-1: config 0 descriptor??
[  436.643168][ T5941] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  436.661509][  T977] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  436.688725][  T977] dvb-usb: bulk message failed: -22 (3/0)
[  436.702199][ T5941] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  436.721383][  T977] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  436.746966][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  436.806214][  T977] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  436.856902][  T977] usb 3-1: media controller created
[  436.864551][ T5844] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  436.899612][ T5941] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  436.910299][  T977] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  436.938567][ T5941] usb 2-1: invalid MIDI out EP 0
[  436.956088][  T977] dvb-usb: bulk message failed: -22 (6/0)
[  437.051850][  T977] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  437.108880][ T5844] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  437.118655][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  437.127174][ T5844] usb 5-1: Product: syz
[  437.131545][ T5844] usb 5-1: Manufacturer: syz
[  437.136313][ T5844] usb 5-1: SerialNumber: syz
[  437.235582][ T5844] usb 5-1: config 0 descriptor??
[  437.418544][  T977] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input36
[  437.546827][ T5944] udevd[5944]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  437.567937][  T977] dvb-usb: schedule remote query interval to 150 msecs.
[  437.580014][  T977] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  437.597411][ T5941] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22
[  437.734435][    T9] dvb-usb: bulk message failed: -22 (1/0)
[  437.738249][ T5844] cx82310_eth 5-1:0.0: probe with driver cx82310_eth failed with error -22
[  437.740442][    T9] dvb-usb: error while querying for an remote control event.
[  437.794492][ T5941] usb 3-1: USB disconnect, device number 93
[  437.822185][ T5844] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19!
[  437.863517][ T5844] usb 5-1: USB disconnect, device number 64
[  437.883916][ T5941] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  438.674397][ T5844] usb 4-1: new high-speed USB device number 80 using dummy_hcd
[  438.764520][ T5941] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[  438.824457][ T5844] usb 4-1: device descriptor read/64, error -71
[  438.934468][ T5941] usb 3-1: Using ep0 maxpacket: 16
[  438.943419][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  438.959608][ T5941] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  438.972221][ T5941] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  438.989164][ T5941] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  438.999231][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  439.012171][ T5941] usb 3-1: config 0 descriptor??
[  439.094655][ T5844] usb 4-1: new high-speed USB device number 81 using dummy_hcd
[  439.234882][ T5844] usb 4-1: device descriptor read/64, error -71
[  439.345051][ T5844] usb usb4-port1: attempt power cycle
[  439.380965][ T2005] usb 2-1: USB disconnect, device number 69
[  439.428553][ T5941] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0
[  439.479942][ T5941] microsoft 0003:045E:07DA.0016: ignoring exceeding usage max
[  439.506282][ T5941] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0
[  439.560335][ T5941] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0
[  439.584865][ T5941] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0
[  439.595583][ T5941] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0
[  439.607990][ T5941] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0
[  439.624735][ T5941] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0
[  439.639014][ T5941] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0
[  439.648415][ T5941] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0
[  439.657810][ T5941] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0
[  439.676048][ T5941] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0
[  439.695830][ T5941] ==================================================================
[  439.703935][ T5941] BUG: KASAN: slab-out-of-bounds in mon_bin_event+0x1211/0x2250
[  439.711592][ T5941] Read of size 1024 at addr ffff8880255eb441 by task kworker/0:6/5941
[  439.719736][ T5941] 
[  439.722072][ T5941] CPU: 0 UID: 0 PID: 5941 Comm: kworker/0:6 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) 
[  439.722098][ T5941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  439.722113][ T5941] Workqueue: usb_hub_wq hub_event
[  439.722144][ T5941] Call Trace:
[  439.722153][ T5941]  <TASK>
[  439.722162][ T5941]  dump_stack_lvl+0x189/0x250
[  439.722190][ T5941]  ? __virt_addr_valid+0x1c8/0x5c0
[  439.722215][ T5941]  ? rcu_is_watching+0x15/0xb0
[  439.722238][ T5941]  ? __kasan_check_byte+0x12/0x40
[  439.722262][ T5941]  ? __pfx_dump_stack_lvl+0x10/0x10
[  439.722282][ T5941]  ? rcu_is_watching+0x15/0xb0
[  439.722303][ T5941]  ? lock_release+0x4b/0x3e0
[  439.722323][ T5941]  ? __virt_addr_valid+0x1c8/0x5c0
[  439.722345][ T5941]  ? __virt_addr_valid+0x4a5/0x5c0
[  439.722368][ T5941]  print_report+0xd2/0x2b0
[  439.722386][ T5941]  ? mon_bin_event+0x1211/0x2250
[  439.722411][ T5941]  kasan_report+0x118/0x150
[  439.722433][ T5941]  ? mon_bin_event+0x1211/0x2250
[  439.722460][ T5941]  kasan_check_range+0x2b0/0x2c0
[  439.722482][ T5941]  ? mon_bin_event+0x1211/0x2250
[  439.722507][ T5941]  __asan_memcpy+0x29/0x70
[  439.722526][ T5941]  mon_bin_event+0x1211/0x2250
[  439.722560][ T5941]  ? __pfx_mon_bin_event+0x10/0x10
[  439.722584][ T5941]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  439.722610][ T5941]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  439.722633][ T5941]  ? __driver_probe_device+0x18c/0x2f0
[  439.722658][ T5941]  ? __device_attach_driver+0x2ce/0x530
[  439.722681][ T5941]  ? bus_for_each_drv+0x251/0x2e0
[  439.722699][ T5941]  ? __device_attach+0x2b8/0x400
[  439.722729][ T5941]  ? bus_probe_device+0x185/0x260
[  439.722748][ T5941]  ? hid_add_device+0x398/0x540
[  439.722774][ T5941]  ? __pfx_mon_bin_submit+0x10/0x10
[  439.722801][ T5941]  mon_submit+0x196/0x210
[  439.722824][ T5941]  usb_hcd_submit_urb+0x11a/0x1aa0
[  439.722855][ T5941]  usb_start_wait_urb+0x114/0x4c0
[  439.722884][ T5941]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  439.722911][ T5941]  usb_control_msg+0x232/0x3e0
[  439.722933][ T5941]  usbhid_raw_request+0x3cd/0x4e0
[  439.722964][ T5941]  __hid_request+0x1c1/0x370
[  439.722986][ T5941]  hidinput_connect+0x218a/0x3030
[  439.723021][ T5941]  hid_connect+0x499/0x1980
[  439.723046][ T5941]  ? usbhid_start+0x1a92/0x24b0
[  439.723070][ T5941]  ? __pfx_hid_connect+0x10/0x10
[  439.723097][ T5941]  hid_hw_start+0xa8/0x120
[  439.723118][ T5941]  ms_probe+0x180/0x430
[  439.723144][ T5941]  hid_device_probe+0x3a0/0x710
[  439.723168][ T5941]  ? driver_sysfs_add+0x1fe/0x210
[  439.723190][ T5941]  ? __pfx_hid_device_probe+0x10/0x10
[  439.723211][ T5941]  really_probe+0x26a/0x9a0
[  439.723237][ T5941]  __driver_probe_device+0x18c/0x2f0
[  439.723262][ T5941]  driver_probe_device+0x4f/0x430
[  439.723287][ T5941]  __device_attach_driver+0x2ce/0x530
[  439.723312][ T5941]  bus_for_each_drv+0x251/0x2e0
[  439.723331][ T5941]  ? __pfx___device_attach_driver+0x10/0x10
[  439.723355][ T5941]  ? __pfx_bus_for_each_drv+0x10/0x10
[  439.723373][ T5941]  ? __lock_acquire+0xab9/0xd20
[  439.723395][ T5941]  __device_attach+0x2b8/0x400
[  439.723416][ T5941]  ? __pfx___device_attach+0x10/0x10
[  439.723438][ T5941]  ? do_raw_spin_unlock+0x122/0x240
[  439.723464][ T5941]  bus_probe_device+0x185/0x260
[  439.723484][ T5941]  device_add+0x7b6/0xb50
[  439.723508][ T5941]  hid_add_device+0x398/0x540
[  439.723531][ T5941]  usbhid_probe+0xe13/0x12a0
[  439.723560][ T5941]  usb_probe_interface+0x641/0xbc0
[  439.723587][ T5941]  ? __pfx_usb_probe_interface+0x10/0x10
[  439.723608][ T5941]  really_probe+0x26a/0x9a0
[  439.723634][ T5941]  __driver_probe_device+0x18c/0x2f0
[  439.723658][ T5941]  driver_probe_device+0x4f/0x430
[  439.723682][ T5941]  __device_attach_driver+0x2ce/0x530
[  439.723708][ T5941]  bus_for_each_drv+0x251/0x2e0
[  439.723727][ T5941]  ? __pfx___device_attach_driver+0x10/0x10
[  439.723751][ T5941]  ? __pfx_bus_for_each_drv+0x10/0x10
[  439.723775][ T5941]  __device_attach+0x2b8/0x400
[  439.723798][ T5941]  ? __pfx___device_attach+0x10/0x10
[  439.723821][ T5941]  ? do_raw_spin_unlock+0x122/0x240
[  439.723847][ T5941]  bus_probe_device+0x185/0x260
[  439.723873][ T5941]  device_add+0x7b6/0xb50
[  439.723895][ T5941]  usb_set_configuration+0x1a87/0x20e0
[  439.723929][ T5941]  usb_generic_driver_probe+0x8d/0x150
[  439.723950][ T5941]  usb_probe_device+0x1c4/0x390
[  439.723972][ T5941]  ? __pfx_usb_probe_device+0x10/0x10
[  439.723991][ T5941]  really_probe+0x26a/0x9a0
[  439.724017][ T5941]  __driver_probe_device+0x18c/0x2f0
[  439.724040][ T5941]  driver_probe_device+0x4f/0x430
[  439.724065][ T5941]  __device_attach_driver+0x2ce/0x530
[  439.724088][ T5941]  bus_for_each_drv+0x251/0x2e0
[  439.724106][ T5941]  ? __pfx___device_attach_driver+0x10/0x10
[  439.724128][ T5941]  ? __pfx_bus_for_each_drv+0x10/0x10
[  439.724149][ T5941]  __device_attach+0x2b8/0x400
[  439.724172][ T5941]  ? __pfx___device_attach+0x10/0x10
[  439.724196][ T5941]  ? do_raw_spin_unlock+0x122/0x240
[  439.724221][ T5941]  bus_probe_device+0x185/0x260
[  439.724239][ T5941]  device_add+0x7b6/0xb50
[  439.724259][ T5941]  usb_new_device+0xa39/0x16c0
[  439.724282][ T5941]  ? __pfx_usb_new_device+0x10/0x10
[  439.724299][ T5941]  ? _raw_spin_unlock_irq+0x23/0x50
[  439.724324][ T5941]  ? lockdep_hardirqs_on+0x9c/0x150
[  439.724342][ T5941]  hub_event+0x2941/0x4a00
[  439.724383][ T5941]  ? __pfx_hub_event+0x10/0x10
[  439.724401][ T5941]  ? process_scheduled_works+0x9ef/0x17b0
[  439.724425][ T5941]  ? _raw_spin_unlock_irq+0x23/0x50
[  439.724447][ T5941]  ? process_scheduled_works+0x9ef/0x17b0
[  439.724466][ T5941]  ? process_scheduled_works+0x9ef/0x17b0
[  439.724487][ T5941]  process_scheduled_works+0xade/0x17b0
[  439.724517][ T5941]  ? __pfx_process_scheduled_works+0x10/0x10
[  439.724543][ T5941]  worker_thread+0x8a0/0xda0
[  439.724564][ T5941]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  439.724592][ T5941]  ? __kthread_parkme+0x7b/0x200
[  439.724617][ T5941]  kthread+0x70e/0x8a0
[  439.724641][ T5941]  ? __pfx_worker_thread+0x10/0x10
[  439.724660][ T5941]  ? __pfx_kthread+0x10/0x10
[  439.724683][ T5941]  ? _raw_spin_unlock_irq+0x23/0x50
[  439.724707][ T5941]  ? lockdep_hardirqs_on+0x9c/0x150
[  439.724723][ T5941]  ? __pfx_kthread+0x10/0x10
[  439.724745][ T5941]  ret_from_fork+0x3fc/0x770
[  439.724765][ T5941]  ? __pfx_ret_from_fork+0x10/0x10
[  439.724785][ T5941]  ? __switch_to_asm+0x39/0x70
[  439.724807][ T5941]  ? __switch_to_asm+0x33/0x70
[  439.724827][ T5941]  ? __pfx_kthread+0x10/0x10
[  439.724849][ T5941]  ret_from_fork_asm+0x1a/0x30
[  439.724886][ T5941]  </TASK>
[  439.724893][ T5941] 
[  440.337133][ T5941] Allocated by task 5941:
[  440.341449][ T5941]  kasan_save_track+0x3e/0x80
[  440.346122][ T5941]  __kasan_kmalloc+0x93/0xb0
[  440.350701][ T5941]  __kmalloc_noprof+0x27a/0x4f0
[  440.355542][ T5941]  __hid_request+0x94/0x370
[  440.360038][ T5941]  hidinput_connect+0x218a/0x3030
[  440.365067][ T5941]  hid_connect+0x499/0x1980
[  440.369558][ T5941]  hid_hw_start+0xa8/0x120
[  440.373964][ T5941]  ms_probe+0x180/0x430
[  440.378110][ T5941]  hid_device_probe+0x3a0/0x710
[  440.382949][ T5941]  really_probe+0x26a/0x9a0
[  440.387448][ T5941]  __driver_probe_device+0x18c/0x2f0
[  440.392722][ T5941]  driver_probe_device+0x4f/0x430
[  440.397735][ T5941]  __device_attach_driver+0x2ce/0x530
[  440.403098][ T5941]  bus_for_each_drv+0x251/0x2e0
[  440.407943][ T5941]  __device_attach+0x2b8/0x400
[  440.412707][ T5941]  bus_probe_device+0x185/0x260
[  440.417545][ T5941]  device_add+0x7b6/0xb50
[  440.421864][ T5941]  hid_add_device+0x398/0x540
[  440.426532][ T5941]  usbhid_probe+0xe13/0x12a0
[  440.431115][ T5941]  usb_probe_interface+0x641/0xbc0
[  440.436221][ T5941]  really_probe+0x26a/0x9a0
[  440.440716][ T5941]  __driver_probe_device+0x18c/0x2f0
[  440.445990][ T5941]  driver_probe_device+0x4f/0x430
[  440.451004][ T5941]  __device_attach_driver+0x2ce/0x530
[  440.456365][ T5941]  bus_for_each_drv+0x251/0x2e0
[  440.461204][ T5941]  __device_attach+0x2b8/0x400
[  440.465960][ T5941]  bus_probe_device+0x185/0x260
[  440.470794][ T5941]  device_add+0x7b6/0xb50
[  440.475114][ T5941]  usb_set_configuration+0x1a87/0x20e0
[  440.480560][ T5941]  usb_generic_driver_probe+0x8d/0x150
[  440.486008][ T5941]  usb_probe_device+0x1c4/0x390
[  440.490848][ T5941]  really_probe+0x26a/0x9a0
[  440.495344][ T5941]  __driver_probe_device+0x18c/0x2f0
[  440.500620][ T5941]  driver_probe_device+0x4f/0x430
[  440.505637][ T5941]  __device_attach_driver+0x2ce/0x530
[  440.511022][ T5941]  bus_for_each_drv+0x251/0x2e0
[  440.515864][ T5941]  __device_attach+0x2b8/0x400
[  440.520617][ T5941]  bus_probe_device+0x185/0x260
[  440.525455][ T5941]  device_add+0x7b6/0xb50
[  440.529774][ T5941]  usb_new_device+0xa39/0x16c0
[  440.534528][ T5941]  hub_event+0x2941/0x4a00
[  440.538934][ T5941]  process_scheduled_works+0xade/0x17b0
[  440.544470][ T5941]  worker_thread+0x8a0/0xda0
[  440.549051][ T5941]  kthread+0x70e/0x8a0
[  440.553112][ T5941]  ret_from_fork+0x3fc/0x770
[  440.557689][ T5941]  ret_from_fork_asm+0x1a/0x30
[  440.562476][ T5941] 
[  440.564789][ T5941] The buggy address belongs to the object at ffff8880255eb440
[  440.564789][ T5941]  which belongs to the cache kmalloc-8 of size 8
[  440.578483][ T5941] The buggy address is located 1 bytes inside of
[  440.578483][ T5941]  allocated 7-byte region [ffff8880255eb440, ffff8880255eb447)
[  440.592265][ T5941] 
[  440.594577][ T5941] The buggy address belongs to the physical page:
[  440.601048][ T5941] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x255eb
[  440.609808][ T5941] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  440.616906][ T5941] page_type: f5(slab)
[  440.620885][ T5941] raw: 00fff00000000000 ffff88801a441500 dead000000000122 0000000000000000
[  440.629458][ T5941] raw: 0000000000000000 0000000080800080 00000000f5000000 0000000000000000
[  440.638036][ T5941] page dumped because: kasan: bad access detected
[  440.644486][ T5941] page_owner tracks the page as allocated
[  440.650189][ T5941] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5863, tgid 5863 (syz-executor), ts 439685042665, free_ts 439685022561
[  440.669634][ T5941]  post_alloc_hook+0x240/0x2a0
[  440.674412][ T5941]  get_page_from_freelist+0x21e4/0x22c0
[  440.679954][ T5941]  __alloc_frozen_pages_noprof+0x181/0x370
[  440.685752][ T5941]  alloc_pages_mpol+0x232/0x4a0
[  440.690594][ T5941]  allocate_slab+0x8a/0x3b0
[  440.695086][ T5941]  ___slab_alloc+0xbfc/0x1480
[  440.699754][ T5941]  __kmalloc_node_noprof+0x2fd/0x4e0
[  440.705034][ T5941]  __vmalloc_node_range_noprof+0x5a9/0x12f0
[  440.710918][ T5941]  vzalloc_noprof+0xb2/0xf0
[  440.715413][ T5941]  alloc_counters+0xd3/0x6d0
[  440.719995][ T5941]  compat_copy_entries_to_user+0xa4/0x500
[  440.725709][ T5941]  do_ipt_get_ctl+0xba1/0x1180
[  440.730458][ T5941]  nf_getsockopt+0x26e/0x290
[  440.735045][ T5941]  ip_getsockopt+0x1c4/0x220
[  440.739625][ T5941]  do_sock_getsockopt+0x35d/0x650
[  440.744640][ T5941]  __sys_getsockopt+0x128/0x1d0
[  440.749482][ T5941] page last free pid 5863 tgid 5863 stack trace:
[  440.755796][ T5941]  __free_frozen_pages+0xc71/0xe70
[  440.760902][ T5941]  kasan_populate_vmalloc+0x18a/0x1a0
[  440.766265][ T5941]  alloc_vmap_area+0xd51/0x1490
[  440.771103][ T5941]  __get_vm_area_node+0x1f8/0x300
[  440.776116][ T5941]  __vmalloc_node_range_noprof+0x301/0x12f0
[  440.782000][ T5941]  vzalloc_noprof+0xb2/0xf0
[  440.786495][ T5941]  alloc_counters+0xd3/0x6d0
[  440.791076][ T5941]  compat_copy_entries_to_user+0xa4/0x500
[  440.796789][ T5941]  do_ipt_get_ctl+0xba1/0x1180
[  440.801543][ T5941]  nf_getsockopt+0x26e/0x290
[  440.806127][ T5941]  ip_getsockopt+0x1c4/0x220
[  440.810707][ T5941]  do_sock_getsockopt+0x35d/0x650
[  440.815741][ T5941]  __sys_getsockopt+0x128/0x1d0
[  440.820605][ T5941]  __ia32_compat_sys_socketcall+0x824/0x9c0
[  440.826512][ T5941]  __do_fast_syscall_32+0xb6/0x2b0
[  440.831645][ T5941]  do_fast_syscall_32+0x34/0x80
[  440.836504][ T5941] 
[  440.838817][ T5941] Memory state around the buggy address:
[  440.844431][ T5941]  ffff8880255eb300: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
[  440.852496][ T5941]  ffff8880255eb380: fa fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc
[  440.860557][ T5941] >ffff8880255eb400: fa fc fc fc 00 fc fc fc 07 fc fc fc 00 fc fc fc
[  440.868606][ T5941]                                            ^
[  440.874756][ T5941]  ffff8880255eb480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  440.882833][ T5941]  ffff8880255eb500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  440.890891][ T5941] ==================================================================
[  440.899048][ T5941] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  440.906246][ T5941] CPU: 0 UID: 0 PID: 5941 Comm: kworker/0:6 Not tainted 6.16.0-rc4-syzkaller-00319-g05df91921da6 #0 PREEMPT(full) 
[  440.918302][ T5941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  440.928353][ T5941] Workqueue: usb_hub_wq hub_event
[  440.933384][ T5941] Call Trace:
[  440.936654][ T5941]  <TASK>
[  440.939578][ T5941]  dump_stack_lvl+0x99/0x250
[  440.944171][ T5941]  ? __asan_memcpy+0x40/0x70
[  440.948754][ T5941]  ? __pfx_dump_stack_lvl+0x10/0x10
[  440.953945][ T5941]  ? __pfx__printk+0x10/0x10
[  440.958532][ T5941]  panic+0x2db/0x790
[  440.962424][ T5941]  ? __pfx_panic+0x10/0x10
[  440.966835][ T5941]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  440.972724][ T5941]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  440.979044][ T5941]  ? print_memory_metadata+0x314/0x400
[  440.984495][ T5941]  ? mon_bin_event+0x1211/0x2250
[  440.989433][ T5941]  check_panic_on_warn+0x89/0xb0
[  440.994376][ T5941]  ? mon_bin_event+0x1211/0x2250
[  440.999308][ T5941]  end_report+0x78/0x160
[  441.003546][ T5941]  kasan_report+0x129/0x150
[  441.008042][ T5941]  ? mon_bin_event+0x1211/0x2250
[  441.012975][ T5941]  kasan_check_range+0x2b0/0x2c0
[  441.017911][ T5941]  ? mon_bin_event+0x1211/0x2250
[  441.022846][ T5941]  __asan_memcpy+0x29/0x70
[  441.027254][ T5941]  mon_bin_event+0x1211/0x2250
[  441.032021][ T5941]  ? __pfx_mon_bin_event+0x10/0x10
[  441.037123][ T5941]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  441.042491][ T5941]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  441.048376][ T5941]  ? __driver_probe_device+0x18c/0x2f0
[  441.053830][ T5941]  ? __device_attach_driver+0x2ce/0x530
[  441.059370][ T5941]  ? bus_for_each_drv+0x251/0x2e0
[  441.064384][ T5941]  ? __device_attach+0x2b8/0x400
[  441.069312][ T5941]  ? bus_probe_device+0x185/0x260
[  441.074324][ T5941]  ? hid_add_device+0x398/0x540
[  441.079169][ T5941]  ? __pfx_mon_bin_submit+0x10/0x10
[  441.084361][ T5941]  mon_submit+0x196/0x210
[  441.088685][ T5941]  usb_hcd_submit_urb+0x11a/0x1aa0
[  441.093797][ T5941]  usb_start_wait_urb+0x114/0x4c0
[  441.098812][ T5941]  ? __pfx_usb_start_wait_urb+0x10/0x10
[  441.104355][ T5941]  usb_control_msg+0x232/0x3e0
[  441.109110][ T5941]  usbhid_raw_request+0x3cd/0x4e0
[  441.114132][ T5941]  __hid_request+0x1c1/0x370
[  441.118713][ T5941]  hidinput_connect+0x218a/0x3030
[  441.123747][ T5941]  hid_connect+0x499/0x1980
[  441.128247][ T5941]  ? usbhid_start+0x1a92/0x24b0
[  441.133095][ T5941]  ? __pfx_hid_connect+0x10/0x10
[  441.138028][ T5941]  hid_hw_start+0xa8/0x120
[  441.142436][ T5941]  ms_probe+0x180/0x430
[  441.146587][ T5941]  hid_device_probe+0x3a0/0x710
[  441.151429][ T5941]  ? driver_sysfs_add+0x1fe/0x210
[  441.156450][ T5941]  ? __pfx_hid_device_probe+0x10/0x10
[  441.161813][ T5941]  really_probe+0x26a/0x9a0
[  441.166313][ T5941]  __driver_probe_device+0x18c/0x2f0
[  441.171648][ T5941]  driver_probe_device+0x4f/0x430
[  441.176668][ T5941]  __device_attach_driver+0x2ce/0x530
[  441.182038][ T5941]  bus_for_each_drv+0x251/0x2e0
[  441.186878][ T5941]  ? __pfx___device_attach_driver+0x10/0x10
[  441.192762][ T5941]  ? __pfx_bus_for_each_drv+0x10/0x10
[  441.198207][ T5941]  ? __lock_acquire+0xab9/0xd20
[  441.203056][ T5941]  __device_attach+0x2b8/0x400
[  441.207816][ T5941]  ? __pfx___device_attach+0x10/0x10
[  441.213116][ T5941]  ? do_raw_spin_unlock+0x122/0x240
[  441.218427][ T5941]  bus_probe_device+0x185/0x260
[  441.223302][ T5941]  device_add+0x7b6/0xb50
[  441.227645][ T5941]  hid_add_device+0x398/0x540
[  441.232326][ T5941]  usbhid_probe+0xe13/0x12a0
[  441.236928][ T5941]  usb_probe_interface+0x641/0xbc0
[  441.242072][ T5941]  ? __pfx_usb_probe_interface+0x10/0x10
[  441.247716][ T5941]  really_probe+0x26a/0x9a0
[  441.252234][ T5941]  __driver_probe_device+0x18c/0x2f0
[  441.257541][ T5941]  driver_probe_device+0x4f/0x430
[  441.262576][ T5941]  __device_attach_driver+0x2ce/0x530
[  441.267951][ T5941]  bus_for_each_drv+0x251/0x2e0
[  441.272806][ T5941]  ? __pfx___device_attach_driver+0x10/0x10
[  441.278704][ T5941]  ? __pfx_bus_for_each_drv+0x10/0x10
[  441.284085][ T5941]  __device_attach+0x2b8/0x400
[  441.288877][ T5941]  ? __pfx___device_attach+0x10/0x10
[  441.294180][ T5941]  ? do_raw_spin_unlock+0x122/0x240
[  441.299380][ T5941]  bus_probe_device+0x185/0x260
[  441.304238][ T5941]  device_add+0x7b6/0xb50
[  441.308578][ T5941]  usb_set_configuration+0x1a87/0x20e0
[  441.314053][ T5941]  usb_generic_driver_probe+0x8d/0x150
[  441.319517][ T5941]  usb_probe_device+0x1c4/0x390
[  441.324364][ T5941]  ? __pfx_usb_probe_device+0x10/0x10
[  441.329729][ T5941]  really_probe+0x26a/0x9a0
[  441.334237][ T5941]  __driver_probe_device+0x18c/0x2f0
[  441.339520][ T5941]  driver_probe_device+0x4f/0x430
[  441.344538][ T5941]  __device_attach_driver+0x2ce/0x530
[  441.349911][ T5941]  bus_for_each_drv+0x251/0x2e0
[  441.354758][ T5941]  ? __pfx___device_attach_driver+0x10/0x10
[  441.360647][ T5941]  ? __pfx_bus_for_each_drv+0x10/0x10
[  441.366015][ T5941]  __device_attach+0x2b8/0x400
[  441.370774][ T5941]  ? __pfx___device_attach+0x10/0x10
[  441.376054][ T5941]  ? do_raw_spin_unlock+0x122/0x240
[  441.381248][ T5941]  bus_probe_device+0x185/0x260
[  441.386089][ T5941]  device_add+0x7b6/0xb50
[  441.390413][ T5941]  usb_new_device+0xa39/0x16c0
[  441.395173][ T5941]  ? __pfx_usb_new_device+0x10/0x10
[  441.400361][ T5941]  ? _raw_spin_unlock_irq+0x23/0x50
[  441.405557][ T5941]  ? lockdep_hardirqs_on+0x9c/0x150
[  441.410750][ T5941]  hub_event+0x2941/0x4a00
[  441.415173][ T5941]  ? __pfx_hub_event+0x10/0x10
[  441.419924][ T5941]  ? process_scheduled_works+0x9ef/0x17b0
[  441.425638][ T5941]  ? _raw_spin_unlock_irq+0x23/0x50
[  441.430831][ T5941]  ? process_scheduled_works+0x9ef/0x17b0
[  441.436538][ T5941]  ? process_scheduled_works+0x9ef/0x17b0
[  441.442248][ T5941]  process_scheduled_works+0xade/0x17b0
[  441.447794][ T5941]  ? __pfx_process_scheduled_works+0x10/0x10
[  441.453767][ T5941]  worker_thread+0x8a0/0xda0
[  441.458351][ T5941]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  441.464770][ T5941]  ? __kthread_parkme+0x7b/0x200
[  441.469703][ T5941]  kthread+0x70e/0x8a0
[  441.473774][ T5941]  ? __pfx_worker_thread+0x10/0x10
[  441.478885][ T5941]  ? __pfx_kthread+0x10/0x10
[  441.483471][ T5941]  ? _raw_spin_unlock_irq+0x23/0x50
[  441.488662][ T5941]  ? lockdep_hardirqs_on+0x9c/0x150
[  441.493845][ T5941]  ? __pfx_kthread+0x10/0x10
[  441.498426][ T5941]  ret_from_fork+0x3fc/0x770
[  441.503016][ T5941]  ? __pfx_ret_from_fork+0x10/0x10
[  441.508124][ T5941]  ? __switch_to_asm+0x39/0x70
[  441.512883][ T5941]  ? __switch_to_asm+0x33/0x70
[  441.517639][ T5941]  ? __pfx_kthread+0x10/0x10
[  441.522221][ T5941]  ret_from_fork_asm+0x1a/0x30
[  441.526985][ T5941]  </TASK>
[  441.530363][ T5941] Kernel Offset: disabled
[  441.534695][ T5941] Rebooting in 86400 seconds..