last executing test programs:

7.067275159s ago: executing program 1 (id=2372):
r0 = socket$packet(0x11, 0x3, 0x300)
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=<r1=>0x0)
timer_settime(0x0, 0x0, &(0x7f0000000c40)={{}, {0x77359400}}, 0x0)
timer_gettime(r1, &(0x7f00000005c0))
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0x11, &(0x7f0000002140)=0x7ff, 0x4)
r3 = socket(0x10, 0x80002, 0x0)
r4 = timerfd_create(0x2, 0x0)
timerfd_gettime(r4, &(0x7f0000000140))
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000))
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000880)={0x3, {{0x2, 0x4e23, @multicast2}}, 0x1, 0x3, [{{0x2, 0x4e24, @local}}, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e22, @multicast2}}]}, 0x20c)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
getsockname$packet(r7, &(0x7f0000000240)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x84000)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000900)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, 0x12a13, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}]}}}]}, 0x3c}}, 0x20004000)
recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0xc3ffffff}, 0x300}], 0x1, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'geneve0\x00', <r9=>0x0})
sendto$packet(r0, &(0x7f0000000000)="2e0064000200fb07c131ac1f030000008100", 0x12, 0x0, &(0x7f0000000140)={0x11, 0x8100, r9, 0x1, 0x0, 0x6, @random="d917ebb2d61e"}, 0x14)

6.832722664s ago: executing program 1 (id=2375):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0)
r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x8c36, 0x3c00, 0x2, 0xbfdffffa}, &(0x7f0000000000)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0)
write$P9_RSTATu(r0, &(0x7f00000004c0)={0x232, 0x7d, 0x0, {{0x500, 0xf1, 0x401, 0x50003e8, {}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0xffffffffffffffff}}, 0x232)

6.688876103s ago: executing program 0 (id=2376):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r2=>0x0})
setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000300)=0x1, 0x4)
bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048001)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0x5, 0xffeb}, {0x1, 0x7}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x1500, 0x4012}, 0x850)

6.68726445s ago: executing program 0 (id=2377):
r0 = io_uring_setup(0x28fe, &(0x7f0000000080)={0x0, 0x0, 0x1000})
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
connect(r1, &(0x7f0000000080)=@un=@abs, 0x80)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x11, &(0x7f00000002c0), 0x2)
r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x10000)
ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000040)={0x400, 0x7, 0x0, 0x7, 0x1})
r3 = syz_io_uring_setup(0xe41, &(0x7f0000000140)={0x0, 0x2119, 0x4, 0x0, 0x2f4, 0x0, r0}, &(0x7f0000000240)=<r4=>0x0, &(0x7f0000001780)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000001740)=@IORING_OP_SHUTDOWN={0x22, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0)

6.505306524s ago: executing program 0 (id=2379):
r0 = socket(0x1e, 0x1, 0x0)
connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(r0, &(0x7f0000000400), 0x2000011a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = userfaultfd(0x1)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0))
sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x1000000, 0x0, 0x0}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005c1000/0x2000)=nil, 0x400000, 0x3, 0x2})
syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0)
add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f0000000080)="ae", 0xfffff, 0xffffffffffffffff)
syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)={0x54, 0x2, 0x6, 0x201, 0x0, 0xf0ffffff, {0xc, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x54}}, 0x440c4)

6.090695097s ago: executing program 1 (id=2381):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x801, 0x0)
r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x20000000003, 0x88000)
ioctl$VIDIOC_G_EXT_CTRLS(r1, 0x402c582b, &(0x7f0000000280)={0xa10000, 0x1, 0x100a, 0xffffffffffffffff, 0x0, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xb62ca000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
syncfs(r0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)=0xc)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10012, 0xffffffffffffffff, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0)
syz_open_dev$usbfs(0x0, 0x800000001fe, 0x82)
syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="00038500000085030c0083"]}, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000ea20000000060000000000000000000000daef4dff0ba1dd8113be9e3b7ec42f156003000000000000004dcb3edd289cecc13196ffcb2b11116802d2b3bfaf2429512ebadde207b6c07ddf645a7850bbe30ccb2eaae17e96305b2fc1006d69af6639e9ce5cc23e1452fc905c5ec86a6e143b3cbd32c57799388302f2260214ad878251c0815be4695c78efc35fa0789827cc1d291546a905122df83767a20b97e24d333347077118afe1eea201234ba80f5c1d95", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x21, 0x5, 0x0, 0x20, 0x80, 0x3, 0x10, 0x7, 0x2, 0x31, 0x2, 0xb, 0x81, 0x4}, 0xe)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478e"])
r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYRESHEX=r2], 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000001c0)={[0x9387, 0x4, 0x0, 0x0, 0x10003, 0x0, 0x401200cc4, 0xffffffff80000001, 0x800000000004, 0x0, 0x0, 0xf0, 0x2, 0x0, 0x6a, 0x7], 0xeeee8000, 0x2011c4})
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x30, 0x10, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, 0x0, {}, {}, {0xfff1, 0x3}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x4}]}, 0x30}}, 0x8048045)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000433feeac00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000100)={0x7, 0x100000, 0x2, r0, 0x8})

5.276401902s ago: executing program 4 (id=2383):
r0 = syz_io_uring_setup(0xbc3, &(0x7f00000008c0)={0x0, 0x1064, 0x80, 0x4, 0x1af}, &(0x7f0000000040)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x0, 0x4800, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x4080)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {<r4=>0x0, 0xee00}}, './file0\x00'})
r5 = creat(&(0x7f00000001c0)='./file0\x00', 0x8)
close(r5)
read$FUSE(r5, &(0x7f000000c400)={0x2020, 0x0, 0x0, <r6=>0x0, <r7=>0x0}, 0x2020)
syz_fuse_handle_req(r5, &(0x7f000000a3c0)="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", 0x2000, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x78, 0x0, 0x400, {0x410000006, 0x50, 0x0, {0x0, 0x4000000, 0x10000000, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x8001, 0x0, r6, r7, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r8, &(0x7f00000041c0)={0x2020, 0x0, 0x0, <r9=>0x0}, 0x2020)
syz_fuse_handle_req(r8, &(0x7f0000006280)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c71329afd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7463e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda451852e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa248000000f858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd6510100000000000080931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xfffffffffffffffe, {0x3, 0x0, 0x0, 0x5, 0x0, 0xfffffffe, {0x0, 0x0, 0x2000000024, 0x8000000000000001, 0x80000000000, 0xa, 0x10, 0x4, 0x0, 0x8000, 0x0, r9}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$P9_RSTATu(r3, &(0x7f0000000180)={0x54, 0x7d, 0x2, {{0x0, 0x3e, 0x7f, 0x1ff, {0x30, 0x0, 0x7}, 0x0, 0x4, 0x6, 0x4, 0x1, '\x00', 0x8, '+},{}/,$', 0x1, '\x00', 0x1, '\x00'}, 0x1, '\x00', r4, r7, r9}}, 0x54)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f00000025c0)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43d2293abd6156c2a5c6f56fae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8b79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb", 0x205}], 0x1}, 0x0)
r12 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r12, 0x84, 0x1, &(0x7f0000000180)={0x0, 0x4, 0x1, 0x3, 0x0, 0x8}, &(0x7f00000001c0)=0x14)
recvmsg$unix(r11, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100)

5.27548113s ago: executing program 2 (id=2384):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a44000000090a030400000000000000000700000008000a40000000000900020073797ae4e9a8abacd1abff0073797a300f000000400000000d080003400000011a140000001000010000000000000000000084000a000000", @ANYRES8=r0, @ANYRES64=r0, @ANYBLOB="1227b90552b2eee63cee6bf0ee581665196b0e9b329a4bed381a1a7f5184cc13b58927cdf0a5ec6b6a8789a1bb8f6b01b8209ff792725f0867ce9504af7438caa176f59c427d32e9b79cf87d4eeb5a5eaa6a570639e97d5480a04d5b30453004795926ae6cf434f6222296f319ddf56d8a7801c7a6d9148dfe9e10fc20e1b9a2d62d456dca14df7b618d4e8110", @ANYRES64=r0, @ANYRES64=r0, @ANYRES8=r0, @ANYRES8=r0], 0x6c}}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
bind$can_raw(0xffffffffffffffff, &(0x7f0000000100), 0x10) (async)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000100), 0x10)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
ioctl$BTRFS_IOC_DEFRAG_RANGE(r5, 0x8927, &(0x7f0000000000)={0xfffffffffffffffb, 0xd93a}) (async)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r5, 0x8927, &(0x7f0000000000)={0xfffffffffffffffb, 0xd93a})
ioctl$SOUND_MIXER_READ_RECMASK(r4, 0x80044dfd, &(0x7f0000000040)) (async)
ioctl$SOUND_MIXER_READ_RECMASK(r4, 0x80044dfd, &(0x7f0000000040))
syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x101400) (async)
r6 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x101400)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r6, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="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", 0x1000}) (async)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r6, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)="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", 0x1000, <r7=>0x0})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r6, 0xc01064ac, &(0x7f0000000000)={r7, 0x1000, &(0x7f0000002a80)=""/4096})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff)
close(r8)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000006c0)={'bridge_slave_0\x00', 0x400})
socket$alg(0x26, 0x5, 0x0) (async)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0x58)
r10 = dup(r9)
setsockopt$SO_BINDTODEVICE_wg(r10, 0x1, 0x19, 0x0, 0x0) (async)
setsockopt$SO_BINDTODEVICE_wg(r10, 0x1, 0x19, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0)

4.709951806s ago: executing program 2 (id=2385):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000240), 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2c}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x9a}, @empty=0x97ff}, "001863714ab99043"}}}}}, 0x0)

3.480563872s ago: executing program 2 (id=2386):
r0 = openat$fb0(0xffffff9c, &(0x7f0000000040), 0x20000, 0x0)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = dup(r2)
write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c)
setsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f0000001240)=0x6, 0x4)
accept4$tipc(r3, &(0x7f00000000c0)=@name, &(0x7f0000000100)=0x10, 0x80800)
getsockopt$inet_tcp_int(r1, 0x6, 0x6, 0x0, &(0x7f0000001080))
ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000140)={0x140, 0x360, 0x40, 0x30, 0x0, 0x3, 0x18, 0x0, {0xdb9, 0x9}, {0x3, 0x10, 0x1}, {0x7, 0x8}, {0xfe, 0xec}, 0x4, 0x2, 0x7, 0xfffffffc, 0x1, 0x3, 0x9, 0x2, 0x6, 0x8, 0x5, 0x1a, 0x8, 0x4, 0x2, 0x1})

3.480300399s ago: executing program 2 (id=2387):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000)
recvmmsg$unix(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001d40)=""/4087, 0xff7}], 0x1}}], 0x1, 0x12040, 0x0) (fail_nth: 4)

3.479823054s ago: executing program 2 (id=2388):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_io_uring_setup(0x499f, 0x0, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6(0xa, 0x80003, 0x6)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x40000)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r4, &(0x7f0000000340)="1e", 0x1, 0x6000001, &(0x7f0000000400)={0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x1c)
shutdown(r4, 0x1)
setsockopt(r4, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
r6 = accept4(r5, 0x0, 0x0, 0x80000)
recvmsg$can_raw(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/243, 0x1f}, {&(0x7f0000000300)=""/115, 0x73}], 0x2}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000240)=[@mss, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp], 0x6)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7)

3.478481528s ago: executing program 4 (id=2389):
set_mempolicy(0x1, 0x0, 0x7582)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0))
openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12014101afb4f2102505a0a4f12b010203010902240001fe"], 0x0) (fail_nth: 46)

3.374671041s ago: executing program 1 (id=2390):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) (async, rerun: 32)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async, rerun: 32)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) (async)
setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0xb, 0x4) (async)
chdir(&(0x7f0000000000)='./cgroup\x00') (async, rerun: 32)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) (async, rerun: 32)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0xa}}, 0x20) (async)
ioctl$SNDCTL_DSP_GETODELAY(r2, 0x80045017, 0x0) (async)
lseek(r2, 0x1, 0x0) (async)
setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000180)={@private=0xa010101, @multicast2}, 0xc) (async)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) (async)
getdents(r1, 0x0, 0x58)
r3 = open_tree(r1, &(0x7f00000001c0)='./file0\x00', 0x89901)
r4 = syz_clone(0x1000, &(0x7f0000002700)="0847dfa5cd8d109da0b0c9841cab2e5442806b02df86540ecf3e66a751effbe3b12b8fde81306f94829135e82c178bdd8697461d2336a95704239421861829eedb7ee93bc36f60f564b667e1c8051e330c44df4e2d7663bb5cb1ecdaf361e182ea750185f6a6c50df848639f7e86a41b1dd019a11d5430", 0x77, &(0x7f0000002780), &(0x7f00000027c0), &(0x7f0000002c40)="6f7ea19221bd35e8d034152c64f6e08d78bda8c8114c1bea8eeb72ec614baa76e33d3a7aba737d97a96ac969e2303d4874650e85a267f24d838dcc2b2b8c2f7d140e7bc01ae0200ce12a74fec8316d9190970838ab5317d359f1ddca307684049dbf9e609f6b92c85a7b6e8715e9672f123568e86476c758fb3c0560645bfec7472976c53c06b3203545fa551304a6403c374982de86c7f58c37d1ccb5e958ef84")
move_pages(r4, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000180)=[0x1f], 0x0, 0x0) (async, rerun: 32)
move_mount(0xffffffffffffff9c, 0x0, r3, 0x0, 0x154) (async, rerun: 32)
recvmmsg(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000047c0)=""/61, 0x3d}, 0x1}, {{&(0x7f0000000340)=@nfc, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/158, 0x9e}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/4098, 0x1002}, {&(0x7f0000002540)=""/166, 0xa6}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000002600)=""/234, 0xea}, {&(0x7f0000002b40)=""/247, 0xf7}, {&(0x7f0000002800)=""/88, 0x58}], 0x8, &(0x7f0000002880)}, 0x3}, {{&(0x7f00000028c0)=@hci, 0x80, &(0x7f0000002a00)=[{&(0x7f0000002940)=""/133, 0x85}], 0x1, &(0x7f0000002a40)=""/112, 0x70}, 0x142c}], 0x3, 0x45833af92e4b39bf, 0x0) (async)
socket$inet6(0xa, 0x80000, 0x1)

3.330077576s ago: executing program 0 (id=2391):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x6}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]})
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

3.222170697s ago: executing program 1 (id=2392):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, 0x0, 0x0)
accept4(r3, 0x0, 0x0, 0x0)
r4 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
memfd_secret(0x0)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00"], 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
r7 = fsopen(&(0x7f0000000040)='afs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfb/:', 0x0)
r8 = fsopen(&(0x7f0000000040)='afs\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%.,:', 0x0)
write$binfmt_format(r4, &(0x7f0000000100)='-1\x00', 0x2)
syz_io_uring_setup(0x7f60, 0x0, &(0x7f0000000140), &(0x7f0000000200))
close_range(r4, 0xffffffffffffffff, 0x0)
close(r2)
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x2, 0xfffffffd}}, 0x2e)

3.154575859s ago: executing program 3 (id=2393):
chdir(&(0x7f0000000540)='./cgroup\x00')
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224"], 0x0)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc25c4110, &(0x7f0000000100)={0x4, [[0x6266, 0x9, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4b79f124], [0x800, 0x2, 0x7aa, 0xfffffffa, 0xa7, 0x1, 0x0, 0x2], [0xffffffff, 0x0, 0x2, 0x0, 0xffffffff, 0x800, 0x0, 0xa582]], '\x00', [{0x0, 0xc278}, {0x0, 0x1, 0x0, 0x1}, {0xfffffc00, 0x0, 0x0, 0x1}, {0x100, 0xfffffffc}, {}, {0x0, 0x6}, {0x0, 0x20000000}, {}, {0x0, 0x2}, {0x0, 0x2700}, {0x1, 0x700}, {0x7ef2}], '\x00', 0x6b0})
unshare(0x6020480)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000001700)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x64, 0x0, 0xb, 0x88, 0x0, @private=0xa0100fe, @broadcast, {[@timestamp_prespec={0x44, 0x4, 0x51}]}}, "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"}}, 0xfce)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
read$FUSE(r3, &(0x7f00000079c0)={0x2020}, 0x2020)
unshare(0x68040200)
mmap(&(0x7f00006e3000/0x1000)=nil, 0x1000, 0x2000003, 0x40010, r2, 0xfffff000)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x101001)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f00000006c0)={0x0, 0x56, &(0x7f0000003b00), 0x0, 0x0, 0x0, 0x0, 0x2000000000000583})
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c4f990000000000000000000035e5e51321c1aad5e200000000000000000000384c496b0d49db0400000000000000fe85"], 0x1c}}, 0x44044)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x20, &(0x7f0000000700)=ANY=[@ANYBLOB="180000723258e6371583fd7ac8c495d61346fa166300000000000000001e0b00000000110200", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000b70900000000000055090100000000009500000000000000852000000300000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0f0000850000000600000018310000020000000000000000000000950000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0xfffffffffffffffe, 0x41000, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0)
r8 = accept4(r7, 0x0, 0x0, 0x80800)
sendmsg$alg(r8, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000)
recvmmsg$unix(r8, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001d40)=""/4087, 0xff7}], 0x1}}], 0x1, 0x12040, 0x0)

2.456418981s ago: executing program 0 (id=2394):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x5, 0x800)
r2 = dup(r1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad88402000002400128009000100626f6e6400000000140013c005000d000200000d000e000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x404c804}, 0x4000)
ioctl$TCSETS(r3, 0x8926, 0x0)
r5 = syz_io_uring_setup(0xa39, &(0x7f00000000c0)={0x0, 0xfdc8, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000180)=<r6=>0x0, &(0x7f0000000340)=<r7=>0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f00000005c0)=0xe4)
ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000600))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_enter(r5, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev, 0x8}], 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, &(0x7f0000000580), 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000050000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000000, 0x10, r9, 0x68758000)
connect$unix(r8, &(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e)
recvmsg(r8, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc0045543, &(0x7f0000000180)=0xf)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000630109000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002c00), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r10, 0xc058534b, &(0x7f0000002c40)={0x0, 0x8, 0x8, 0xbb6, 0x0, 0x7f})

2.324688455s ago: executing program 4 (id=2395):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) (async)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000080), 0x12) (async)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async, rerun: 64)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) (async, rerun: 64)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) (async, rerun: 64)
sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x14}}, 0x1c, 0x0, 0x0, &(0x7f0000004540)=[@hopopts={{0x18, 0x29, 0x36, {0x1}}}], 0x18}, 0x40) (async)
r5 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000940)=<r6=>0xffffffffffffffff)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0x7c80, 0x0)
r7 = epoll_create(0x47f)
ioctl$F2FS_IOC_MOVE_RANGE(r7, 0x541b, 0x0) (async, rerun: 32)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (rerun: 32)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async)
syz_open_dev$vim2m(0x0, 0x7, 0x2) (async)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) (async, rerun: 64)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async, rerun: 32)
r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) (rerun: 32)
ioctl$SG_IO(r8, 0x2285, &(0x7f0000000240)={0x53, 0xfffffffffffffffc, 0x6, 0x3, @buffer={0x0, 0x0, 0x0}, &(0x7f00000003c0)="5d3b9dc8fc57", 0x0, 0x90f, 0x12, 0x2, 0x0})
recvmmsg(0xffffffffffffffff, &(0x7f0000002980)=[{{&(0x7f00000000c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000140)=""/194, 0xc2}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/170, 0xaa}], 0x3, &(0x7f0000001300)=""/151, 0x97}, 0x3}, {{&(0x7f00000013c0)=@ethernet={0x0, @multicast}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001440)=""/86, 0x56}, {&(0x7f00000014c0)=""/5, 0x5}, {&(0x7f0000001500)=""/109, 0x6d}, {&(0x7f0000001580)=""/192, 0xc0}, {&(0x7f0000001640)=""/121, 0x79}], 0x5, &(0x7f0000001700)=""/121, 0x79}, 0x3}, {{&(0x7f0000001780)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001800)=""/211, 0xd3}, {&(0x7f0000001900)=""/211, 0xd3}, {&(0x7f0000001a00)=""/78, 0x4e}, {&(0x7f0000001a80)=""/140, 0x8c}, {&(0x7f0000001b40)=""/164, 0xa4}, {&(0x7f0000001c00)=""/248, 0xf8}, {&(0x7f0000001d00)=""/27, 0x1b}], 0x7, &(0x7f0000001d80)=""/230, 0xe6}, 0x7}, {{&(0x7f0000001e80)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f00000021c0), 0x0, &(0x7f0000002200)=""/116, 0x74}, 0x100}, {{&(0x7f0000002280)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000002300)=""/2, 0x2}, {&(0x7f0000002340)=""/21, 0x15}, {&(0x7f0000002380)=""/45, 0x2d}], 0x3}, 0x6}, {{&(0x7f0000002400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000002c40)=[{&(0x7f0000002480)=""/251, 0xfb}, {&(0x7f0000002580)=""/148, 0x94}, {&(0x7f0000002640)=""/250, 0xfa}, {&(0x7f0000002c00)=""/28, 0x1c}], 0x4, &(0x7f0000002780)=""/40, 0x28}}, {{&(0x7f00000027c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000002900)=[{&(0x7f0000002840)=""/14, 0xe}, {&(0x7f0000002880)=""/90, 0x5a}], 0x2, &(0x7f0000002940)=""/17, 0x11}, 0x8}], 0x7, 0x40002042, &(0x7f0000002a80)={0x77359400}) (async)
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r9, 0x3ba0, &(0x7f0000002ac0)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}) (async, rerun: 64)
ioctl$IOMMU_VFIO_IOAS$GET(r9, 0x3b88, &(0x7f0000002b40)={0xc, <r11=>0x0}) (rerun: 64)
ioctl$IOMMU_HWPT_ALLOC$TEST(r9, 0x3b89, &(0x7f0000002bc0)={0x28, 0x2, r10, r11, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000002b80)})
write$cgroup_int(r9, &(0x7f0000000000)=0x40000000800801cf, 0xfffffe19)

2.016431023s ago: executing program 4 (id=2396):
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x80101, 0x0)
r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee1, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0xe0ff)

1.464664338s ago: executing program 2 (id=2397):
socket$tipc(0x1e, 0x2, 0x0)
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6cb, 0x81a7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, &(0x7f0000000100)={0x14, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
r8 = socket$inet(0x2, 0x6, 0x0)
setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, 0x0, 0x0)
bind$inet(r8, 0x0, 0x0)
r9 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4)
syz_emit_ethernet(0xe6, &(0x7f0000000380)=ANY=[], 0x0)
io_uring_enter(r4, 0x3516, 0x77e, 0x0, 0x0, 0x1200)

1.384527591s ago: executing program 0 (id=2398):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10)
syz_open_dev$ptys(0xc, 0x3, 0x1)
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x1, 0x803, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r3}]}, 0x40}, 0x1, 0x8}, 0x0)
r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x20, 0x0, 0x0, @local, @dev={0xfe, 0x80, '\x00', 0x2e}, {[@dstopts={0x0, 0x2, '\x00', [@calipso={0x7, 0x8, {0x3, 0x0, 0x7, 0x4}}, @ra={0x5, 0x2, 0x2fa9}, @enc_lim={0x4, 0x1, 0x5}]}]}}}}}, 0x0)
r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000100)='devices.list\x00', 0x275a, 0x0)
write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0)
syz_usb_ep_write(r4, 0x81, 0x1, &(0x7f00000004c0)='P')
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) (async)
syz_open_dev$ptys(0xc, 0x3, 0x1) (async)
syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x1, 0x803, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3, r3}]}, 0x40}, 0x1, 0x8}, 0x0) (async)
syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) (async)
syz_usb_control_io(r4, 0x0, 0x0) (async)
syz_usb_control_io(r4, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
syz_emit_ethernet(0x56, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x20, 0x0, 0x0, @local, @dev={0xfe, 0x80, '\x00', 0x2e}, {[@dstopts={0x0, 0x2, '\x00', [@calipso={0x7, 0x8, {0x3, 0x0, 0x7, 0x4}}, @ra={0x5, 0x2, 0x2fa9}, @enc_lim={0x4, 0x1, 0x5}]}]}}}}}, 0x0) (async)
openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) (async)
openat$cgroup_ro(r5, &(0x7f0000000100)='devices.list\x00', 0x275a, 0x0) (async)
write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[], 0x118) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) (async)
syz_usb_ep_write(r4, 0x81, 0x1, &(0x7f00000004c0)='P') (async)

1.0427666s ago: executing program 3 (id=2399):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x141841, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000040)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x84, 0x0, @rand_addr=0x8, @local}, {{0x49, 0x600, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x4, 0x0, 0x1c}, {"7302ae64596acd1b0c85f79e959ba407dfe2680a9f3a5624b94b05eb30a8db4c40"}}}}}, 0x57)

711.959959ms ago: executing program 3 (id=2400):
r0 = socket$inet6(0xa, 0x80002, 0x88)
sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000100)={0x2, 0x4e1c, @local}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x38, 0x0, 0x7, {[@cipso={0x86, 0x29, 0x0, [{0x6, 0xa, "663141351607e341"}, {0x2, 0xa, "46ab4176819e35fe"}, {0x7, 0x2}, {0x6, 0xd, "ac1a68c4becc97468a4637"}]}]}}}], 0x38}, 0xfffffffd}], 0x2, 0x0)

476.98272ms ago: executing program 4 (id=2401):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r0, &(0x7f0000007bc0)=[{{&(0x7f00000061c0)={0xa, 0x4e22, 0xb5, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000006340)=ANY=[@ANYBLOB="10000000290064000b00000006110ef90e"], 0x20}}], 0x1, 0x4004800)

388.775444ms ago: executing program 3 (id=2402):
unshare(0x400)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x8000003d)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$EVIOCGMASK(r1, 0x80015b12, 0x0)
fcntl$setsig(r1, 0xa, 0x33)

322.03435ms ago: executing program 4 (id=2403):
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x1b)

143.567885ms ago: executing program 1 (id=2404):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, 0x0, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x7000000)
connect$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2a8}, 0x1, 0x0, 0x0, 0x4}, 0x0)
getsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_SET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x20, r8, 0x1, 0x80, 0x25dfdbfe, {0xf, 0x0, 0x2d}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2805}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r9, 0x1, 0x2e, 0x0, 0x0)
connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c)
recvmmsg(r9, 0x0, 0x0, 0x40010002, 0x0)

142.384333ms ago: executing program 3 (id=2405):
r0 = socket(0x840000000002, 0x3, 0xfa)
sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10, 0x0}}, {{&(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10, 0x0}, 0xeffd}], 0x2, 0x8804)

0s ago: executing program 3 (id=2406):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075a, 0x81}}]}, 0xc4}}, 0x2c000010)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b4000000150001000000000081000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xb4}, 0x1, 0x0, 0x0, 0x810}, 0x0)

kernel console output (not intermixed with test programs):

304][T12959] tpg RGB range: 0/1
[  499.254979][T12959] vivid-000: ==================  END STATUS  ==================
[  499.484187][ T5933] usb 3-1: Using ep0 maxpacket: 16
[  499.532168][ T5933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  499.581341][ T5933] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  499.590698][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  499.600032][ T5933] usb 3-1: Product: syz
[  499.626085][ T5933] usb 3-1: Manufacturer: syz
[  499.643022][ T5933] usb 3-1: SerialNumber: syz
[  499.686807][ T5933] usb 3-1: config 0 descriptor??
[  499.725156][ T5933] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  499.765276][ T5852] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[  499.924198][ T5852] usb 1-1: Using ep0 maxpacket: 32
[  499.935311][ T5852] usb 1-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30
[  499.948725][   T64] usb 3-1: Failed to submit usb control message: -71
[  499.950010][ T5933] usb 3-1: USB disconnect, device number 72
[  499.980996][ T5852] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  500.009215][   T64] usb 3-1: unable to send the bmi data to the device: -71
[  500.030522][ T5852] usb 1-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  500.057622][   T64] usb 3-1: unable to get target info from device
[  500.069815][   T64] usb 3-1: could not get target info (-71)
[  500.079035][   T64] usb 3-1: could not probe fw (-71)
[  500.124338][ T5852] usb 1-1: config 0 interface 0 has no altsetting 0
[  500.131157][T12976] batadv_slave_1: entered allmulticast mode
[  500.158664][T12974] batadv_slave_1: left allmulticast mode
[  500.179563][ T5852] usb 1-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00
[  500.241907][ T5852] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  500.281712][ T5852] usb 1-1: config 0 descriptor??
[  500.615704][T12986] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2050'.
[  500.726230][ T5852] usbhid 1-1:0.0: can't add hid device: -71
[  500.734585][ T5933] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[  500.749001][ T5852] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  500.766062][ T5852] usb 1-1: USB disconnect, device number 81
[  500.914191][ T5933] usb 2-1: Using ep0 maxpacket: 16
[  500.921114][ T5933] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  500.933300][ T5933] usb 2-1: config 0 has no interface number 0
[  500.955972][ T5933] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  500.972243][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  500.981174][ T5933] usb 2-1: Product: syz
[  500.985552][ T5933] usb 2-1: Manufacturer: syz
[  500.990222][ T5933] usb 2-1: SerialNumber: syz
[  500.999755][ T5933] usb 2-1: config 0 descriptor??
[  501.011228][ T5933] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  501.014599][T11524] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[  501.194387][T11524] usb 5-1: Using ep0 maxpacket: 8
[  501.211993][T11524] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  501.248046][T11524] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  501.297622][T11524] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00
[  501.328832][T11524] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  501.369331][T11524] usb 5-1: config 0 descriptor??
[  501.380049][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  501.380119][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  501.765228][ T5852] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  501.894308][ T5926] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[  501.907389][ T5852] usb 3-1: device descriptor read/64, error -71
[  502.044718][ T5926] usb 1-1: Using ep0 maxpacket: 16
[  502.066338][   T30] kauditd_printk_skb: 16 callbacks suppressed
[  502.066354][   T30] audit: type=1326 audit(1752421563.683:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13008 comm="syz.3.2057" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6539 code=0x7ffc0000
[  502.106266][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  502.119399][ T5926] usb 1-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  502.128818][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  502.136999][   T30] audit: type=1326 audit(1752421563.683:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13008 comm="syz.3.2057" exe="/root/syz-executor" sig=0 arch=40000003 syscall=300 compat=1 ip=0xf7fd6539 code=0x7ffc0000
[  502.161272][ T5852] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[  502.170504][ T5926] usb 1-1: config 0 descriptor??
[  502.234390][   T30] audit: type=1326 audit(1752421563.683:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13008 comm="syz.3.2057" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6539 code=0x7ffc0000
[  502.308306][   T30] audit: type=1326 audit(1752421563.683:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13008 comm="syz.3.2057" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd6539 code=0x7ffc0000
[  502.332704][ T5852] usb 3-1: device descriptor read/64, error -71
[  502.347324][   T30] audit: type=1326 audit(1752421563.683:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13008 comm="syz.3.2057" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6539 code=0x7ffc0000
[  502.370393][   T30] audit: type=1326 audit(1752421563.683:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13008 comm="syz.3.2057" exe="/root/syz-executor" sig=0 arch=40000003 syscall=41 compat=1 ip=0xf7fd6539 code=0x7ffc0000
[  502.394905][T12998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  502.424831][T12998] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  502.445787][ T5852] usb usb3-port1: attempt power cycle
[  502.454043][   T30] audit: type=1326 audit(1752421563.683:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13008 comm="syz.3.2057" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6539 code=0x7ffc0000
[  502.506008][ T5933] gspca_spca1528: reg_w err -71
[  502.511004][ T5933] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71
[  502.541460][ T5926] apple 0003:05AC:024B.002D: item fetching failed at offset 2/69
[  502.560204][   T30] audit: type=1326 audit(1752421563.683:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13008 comm="syz.3.2057" exe="/root/syz-executor" sig=0 arch=40000003 syscall=219 compat=1 ip=0xf7fd6539 code=0x7ffc0000
[  502.585969][ T5926] apple 0003:05AC:024B.002D: parse failed
[  502.593068][ T5933] usb 2-1: USB disconnect, device number 83
[  502.606384][ T5926] apple 0003:05AC:024B.002D: probe with driver apple failed with error -22
[  502.619212][   T30] audit: type=1326 audit(1752421564.173:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13008 comm="syz.3.2057" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6539 code=0x7ffc0000
[  502.664650][   T30] audit: type=1326 audit(1752421564.173:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13008 comm="syz.3.2057" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6539 code=0x7ffc0000
[  502.751607][ T5926] usb 1-1: USB disconnect, device number 82
[  502.824671][ T5852] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[  502.855100][ T5852] usb 3-1: device descriptor read/8, error -71
[  503.094318][ T5852] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[  503.136624][ T5852] usb 3-1: device descriptor read/8, error -71
[  503.264839][ T5852] usb usb3-port1: unable to enumerate USB device
[  503.314223][ T5926] usb 4-1: new high-speed USB device number 88 using dummy_hcd
[  503.319623][T13026] netlink: 37 bytes leftover after parsing attributes in process `syz.1.2062'.
[  503.427707][T13028] fuse: Bad value for 'fd'
[  503.500101][ T5926] usb 4-1: config 0 has no interfaces?
[  503.508782][ T5926] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  503.535109][ T5926] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  503.543405][ T5926] usb 4-1: Manufacturer: syz
[  503.552165][ T5926] usb 4-1: config 0 descriptor??
[  503.574452][ T5912] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[  503.617648][T11524] usbhid 5-1:0.0: can't add hid device: -71
[  503.652227][T11524] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  503.716880][T11524] usb 5-1: USB disconnect, device number 64
[  503.785869][ T5912] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  503.834829][ T5912] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  503.879345][ T5912] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  503.914480][ T5912] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  503.938571][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  503.958591][ T5912] usb 2-1: Product: syz
[  503.969135][ T5912] usb 2-1: Manufacturer: syz
[  503.979289][ T5912] usb 2-1: SerialNumber: syz
[  504.001175][ T5912] hub 2-1:1.0: bad descriptor, ignoring hub
[  504.031568][ T5912] hub 2-1:1.0: probe with driver hub failed with error -5
[  504.294917][ T5852] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[  504.477805][ T5852] usb 5-1: Using ep0 maxpacket: 32
[  504.598659][T13041] ÿÿÿÿ: renamed from bridge_slave_0
[  504.606580][T13039] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2067'.
[  504.996829][   T10] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[  505.006104][T13048] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2070'.
[  505.056011][ T5912] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 84 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  505.204343][   T10] usb 3-1: Using ep0 maxpacket: 32
[  505.215345][   T10] usb 3-1: config 0 has an invalid interface number: 109 but max is 0
[  505.232327][   T10] usb 3-1: config 0 has no interface number 0
[  505.251423][   T10] usb 3-1: config 0 has an invalid interface number: 109 but max is 0
[  505.275553][   T10] usb 3-1: config 0 has no interface number 0
[  505.300702][   T10] usb 3-1: config 0 has an invalid interface number: 109 but max is 0
[  505.331353][   T10] usb 3-1: config 0 has no interface number 0
[  505.362759][   T10] usb 3-1: config 0 has an invalid interface number: 109 but max is 0
[  505.379609][   T10] usb 3-1: config 0 has no interface number 0
[  505.408521][   T10] usb 3-1: config 0 has an invalid interface number: 109 but max is 0
[  505.451929][   T10] usb 3-1: config 0 has no interface number 0
[  505.471782][   T10] usb 3-1: config 0 has an invalid interface number: 109 but max is 0
[  505.492073][   T10] usb 3-1: config 0 has no interface number 0
[  505.513992][   T10] usb 3-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=72.1d
[  505.547191][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  505.596696][   T10] usb 3-1: Product: syz
[  505.697963][   T10] usb 3-1: Manufacturer: syz
[  505.755815][T13026] usb 2-1: reset high-speed USB device number 84 using dummy_hcd
[  505.845678][   T10] usb 3-1: SerialNumber: syz
[  505.866814][   T10] usb 3-1: config 0 descriptor??
[  505.924416][T13026] usb 2-1: device descriptor read/64, error -71
[  506.140895][T13043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  506.194314][T13026] usb 2-1: reset high-speed USB device number 84 using dummy_hcd
[  506.204686][T13043] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  506.255878][   T10] mdc800 3-1:0.109: probe fails -> wrong Number of Configuration
[  506.308586][   T10] usb 3-1: USB disconnect, device number 77
[  506.344416][T13026] usb 2-1: device descriptor read/64, error -71
[  506.596555][T13026] usb 2-1: reset high-speed USB device number 84 using dummy_hcd
[  506.858198][ T5933] usb 4-1: USB disconnect, device number 88
[  507.443025][T13065] vcan0: tx drop: invalid da for name 0xfffffe0000000000
[  507.716980][   T30] kauditd_printk_skb: 1 callbacks suppressed
[  507.716997][   T30] audit: type=1326 audit(1752421569.333:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13071 comm="syz.0.2078" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f83539 code=0x0
[  507.833713][ T5852] usb 5-1: unable to get BOS descriptor or descriptor too short
[  507.855193][ T5933] usb 4-1: new high-speed USB device number 89 using dummy_hcd
[  507.866817][ T5852] usb 5-1: unable to read config index 0 descriptor/start: -71
[  507.904720][ T5852] usb 5-1: can't read configurations, error -71
[  508.034307][ T5933] usb 4-1: Using ep0 maxpacket: 8
[  508.050695][ T5933] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  508.075775][ T5933] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8
[  508.103441][ T5933] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[  508.140365][ T5933] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  508.167608][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  508.189394][ T5933] usb 4-1: Product: Ъ
[  508.199555][ T5933] usb 4-1: Manufacturer: ʵ⭹녉檣悅僕鱵椔⟟쳎�뢔簺콹듒�諹풸헶垓ꥨ통�몮ꃳ铞尺�﫪艖
[  508.228835][ T5933] usb 4-1: SerialNumber: �疨숷也ᘠ葃ᲄ�
[  508.500899][T13067] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  508.510954][T13067] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  508.659627][ T5933] cdc_ncm 4-1:1.0: bind() failure
[  508.729827][   T30] audit: type=1326 audit(1752421570.343:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13079 comm="syz.4.2079" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000
[  508.744254][ T5933] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71
[  508.766506][ T5933] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71
[  508.797877][ T5933] usbtest 4-1:1.1: probe with driver usbtest failed with error -71
[  508.817995][   T30] audit: type=1326 audit(1752421570.343:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13079 comm="syz.4.2079" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000
[  508.849837][   T30] audit: type=1326 audit(1752421570.343:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13079 comm="syz.4.2079" exe="/root/syz-executor" sig=0 arch=40000003 syscall=331 compat=1 ip=0xf70be539 code=0x7ffc0000
[  508.889219][ T5933] usb 4-1: USB disconnect, device number 89
[  508.909739][   T30] audit: type=1326 audit(1752421570.343:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13079 comm="syz.4.2079" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000
[  508.938689][   T30] audit: type=1326 audit(1752421570.343:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13079 comm="syz.4.2079" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000
[  508.969357][   T30] audit: type=1326 audit(1752421570.383:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13079 comm="syz.4.2079" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70be539 code=0x7ffc0000
[  509.005186][   T30] audit: type=1326 audit(1752421570.383:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13079 comm="syz.4.2079" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000
[  509.035626][ T5848] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[  509.060270][   T30] audit: type=1326 audit(1752421570.383:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13079 comm="syz.4.2079" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70be539 code=0x7ffc0000
[  509.166829][   T30] audit: type=1326 audit(1752421570.393:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13079 comm="syz.4.2079" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf70be539 code=0x7ffc0000
[  509.285085][T13093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2084'.
[  509.311443][T13093] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2084'.
[  509.361256][ T5848] usb 1-1: no configurations
[  509.389236][ T5848] usb 1-1: can't read configurations, error -22
[  509.624692][ T5848] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[  509.844744][ T5848] usb 1-1: no configurations
[  509.854576][ T5848] usb 1-1: can't read configurations, error -22
[  509.870898][ T5848] usb usb1-port1: attempt power cycle
[  510.214415][ T5848] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[  510.235435][ T5848] usb 1-1: no configurations
[  510.240135][ T5848] usb 1-1: can't read configurations, error -22
[  510.404329][ T5848] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[  510.426012][ T5848] usb 1-1: no configurations
[  510.430856][ T5848] usb 1-1: can't read configurations, error -22
[  510.437751][ T5848] usb usb1-port1: unable to enumerate USB device
[  511.261032][T13111] FAULT_INJECTION: forcing a failure.
[  511.261032][T13111] name failslab, interval 1, probability 0, space 0, times 0
[  511.275484][T13111] CPU: 0 UID: 0 PID: 13111 Comm: syz.2.2090 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  511.275517][T13111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  511.275528][T13111] Call Trace:
[  511.275537][T13111]  <TASK>
[  511.275546][T13111]  dump_stack_lvl+0x189/0x250
[  511.275578][T13111]  ? __pfx____ratelimit+0x10/0x10
[  511.275604][T13111]  ? __pfx_dump_stack_lvl+0x10/0x10
[  511.275625][T13111]  ? __pfx__printk+0x10/0x10
[  511.275653][T13111]  ? __pfx___might_resched+0x10/0x10
[  511.275672][T13111]  should_fail_ex+0x414/0x560
[  511.275696][T13111]  should_failslab+0xa8/0x100
[  511.275715][T13111]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  511.275735][T13111]  ? __alloc_skb+0x112/0x2d0
[  511.275757][T13111]  __alloc_skb+0x112/0x2d0
[  511.275776][T13111]  netlink_sendmsg+0x5c6/0xb30
[  511.275800][T13111]  ? __pfx_netlink_sendmsg+0x10/0x10
[  511.275820][T13111]  ? __import_iovec+0x5d4/0x7f0
[  511.275834][T13111]  ? aa_sock_msg_perm+0x94/0x160
[  511.275855][T13111]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  511.275879][T13111]  ? __pfx_netlink_sendmsg+0x10/0x10
[  511.275897][T13111]  __sock_sendmsg+0x219/0x270
[  511.275913][T13111]  ____sys_sendmsg+0x505/0x830
[  511.275935][T13111]  ? __pfx_____sys_sendmsg+0x10/0x10
[  511.275964][T13111]  ___sys_sendmsg+0x21f/0x2a0
[  511.275983][T13111]  ? __pfx____sys_sendmsg+0x10/0x10
[  511.276031][T13111]  ? __fget_files+0x2a/0x420
[  511.276049][T13111]  ? __fget_files+0x3a0/0x420
[  511.276074][T13111]  __sys_sendmsg+0x164/0x220
[  511.276094][T13111]  ? __pfx___sys_sendmsg+0x10/0x10
[  511.276122][T13111]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  511.276136][T13111]  ? lockdep_hardirqs_on+0x9c/0x150
[  511.276162][T13111]  __do_fast_syscall_32+0xb6/0x2b0
[  511.276177][T13111]  ? lockdep_hardirqs_on+0x9c/0x150
[  511.276199][T13111]  do_fast_syscall_32+0x34/0x80
[  511.276213][T13111]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  511.276230][T13111] RIP: 0023:0xf7f84539
[  511.276242][T13111] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  511.276254][T13111] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  511.276270][T13111] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000680
[  511.276280][T13111] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000
[  511.276292][T13111] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  511.276301][T13111] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  511.276309][T13111] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  511.276329][T13111]  </TASK>
[  511.571199][T13112] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2089'.
[  511.706425][T13026] usb 2-1: device descriptor read/8, error -110
[  511.966023][T13026] usb 2-1: reset high-speed USB device number 84 using dummy_hcd
[  512.026631][T13026] usb 2-1: device descriptor read/8, error -32
[  512.164830][ T5912] usb 2-1: USB disconnect, device number 84
[  512.204645][ T5912] usblp0: removed
[  512.237628][ T5960] usb 3-1: new full-speed USB device number 78 using dummy_hcd
[  512.354579][ T5912] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[  512.421214][ T5960] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  512.478215][ T5960] usb 3-1: config 0 has no interfaces?
[  512.504086][ T5960] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  512.544712][ T5960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  512.560283][T13141] netlink: 'syz.1.2098': attribute type 10 has an invalid length.
[  512.586363][ T5960] usb 3-1: config 0 descriptor??
[  512.738774][   T36] tipc: Subscription rejected, illegal request
[  512.853260][ T5960] usb 3-1: USB disconnect, device number 78
[  512.877310][   T30] kauditd_printk_skb: 30 callbacks suppressed
[  512.877325][   T30] audit: type=1326 audit(1752421574.493:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13144 comm="syz.0.2099" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f83539 code=0x0
[  514.285592][ T5960] usb 1-1: new high-speed USB device number 87 using dummy_hcd
[  514.477417][ T5960] usb 1-1: no configurations
[  514.504577][ T5960] usb 1-1: can't read configurations, error -22
[  514.616455][   T30] audit: type=1326 audit(1752421576.233:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13168 comm="syz.1.2105" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf707e539 code=0x0
[  514.744430][ T5960] usb 1-1: new high-speed USB device number 88 using dummy_hcd
[  514.915008][ T5960] usb 1-1: no configurations
[  514.923408][ T5960] usb 1-1: can't read configurations, error -22
[  514.932739][ T5960] usb usb1-port1: attempt power cycle
[  515.019925][T13176] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  515.042384][T13175] tipc: Disabling bearer <eth:syzkaller0>
[  515.294344][ T5960] usb 1-1: new high-speed USB device number 89 using dummy_hcd
[  515.317573][ T5960] usb 1-1: no configurations
[  515.330697][ T5960] usb 1-1: can't read configurations, error -22
[  515.474322][ T5960] usb 1-1: new high-speed USB device number 90 using dummy_hcd
[  515.495787][ T5960] usb 1-1: no configurations
[  515.500433][ T5960] usb 1-1: can't read configurations, error -22
[  515.508224][ T5960] usb usb1-port1: unable to enumerate USB device
[  515.524553][ T5848] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[  515.594239][ T5912] usb 2-1: new full-speed USB device number 86 using dummy_hcd
[  515.703892][ T5848] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[  515.725569][ T5848] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  515.747974][ T5848] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  515.756515][ T5912] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  515.762065][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  515.780824][ T5848] usb 3-1: SerialNumber: syz
[  515.780990][ T5912] usb 2-1: config 0 has no interfaces?
[  515.801963][T13191] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2114'.
[  515.817277][ T5912] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  515.834416][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  515.845448][ T5912] usb 2-1: config 0 descriptor??
[  516.062107][  T923] usb 2-1: USB disconnect, device number 86
[  516.104758][ T5912] usb 5-1: new full-speed USB device number 67 using dummy_hcd
[  516.124548][T13197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2110'.
[  516.234226][ T5912] usb 5-1: device descriptor read/64, error -71
[  516.474235][ T5912] usb 5-1: new full-speed USB device number 68 using dummy_hcd
[  516.604286][ T5912] usb 5-1: device descriptor read/64, error -71
[  516.716301][ T5912] usb usb5-port1: attempt power cycle
[  517.065145][ T5912] usb 5-1: new full-speed USB device number 69 using dummy_hcd
[  517.107014][ T5912] usb 5-1: device descriptor read/8, error -71
[  517.290029][T13207] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2118'.
[  517.301678][T13207] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2118'.
[  517.344222][ T5912] usb 5-1: new full-speed USB device number 70 using dummy_hcd
[  517.385604][ T5912] usb 5-1: device descriptor read/8, error -71
[  517.494768][ T5912] usb usb5-port1: unable to enumerate USB device
[  517.505260][ T5933] usb 1-1: new high-speed USB device number 91 using dummy_hcd
[  517.676367][ T5933] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[  517.700792][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  517.716169][ T5933] usb 1-1: config 0 descriptor??
[  517.962158][ T5933] kaweth 1-1:0.0: Firmware present in device.
[  518.011965][ T5933] kaweth 1-1:0.0: Error reading configuration (-71), no net device created
[  518.046299][ T5933] kaweth 1-1:0.0: probe with driver kaweth failed with error -5
[  518.095088][ T5933] usb 1-1: USB disconnect, device number 91
[  518.145594][T13224] FAULT_INJECTION: forcing a failure.
[  518.145594][T13224] name failslab, interval 1, probability 0, space 0, times 0
[  518.159294][T13224] CPU: 1 UID: 0 PID: 13224 Comm: syz.1.2124 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  518.159324][T13224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  518.159336][T13224] Call Trace:
[  518.159345][T13224]  <TASK>
[  518.159353][T13224]  dump_stack_lvl+0x189/0x250
[  518.159379][T13224]  ? __pfx____ratelimit+0x10/0x10
[  518.159406][T13224]  ? __pfx_dump_stack_lvl+0x10/0x10
[  518.159426][T13224]  ? __pfx__printk+0x10/0x10
[  518.159453][T13224]  ? __pfx___might_resched+0x10/0x10
[  518.159474][T13224]  ? fs_reclaim_acquire+0x7d/0x100
[  518.159501][T13224]  should_fail_ex+0x414/0x560
[  518.159531][T13224]  should_failslab+0xa8/0x100
[  518.159556][T13224]  __kmalloc_noprof+0xcb/0x4f0
[  518.159576][T13224]  ? tomoyo_encode+0x28b/0x550
[  518.159598][T13224]  tomoyo_encode+0x28b/0x550
[  518.159622][T13224]  tomoyo_realpath_from_path+0x58d/0x5d0
[  518.159651][T13224]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  518.159674][T13224]  tomoyo_path_number_perm+0x1e8/0x5a0
[  518.159700][T13224]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  518.159741][T13224]  ? __lock_acquire+0xab9/0xd20
[  518.159781][T13224]  ? __fget_files+0x2a/0x420
[  518.159807][T13224]  ? __fget_files+0x3a0/0x420
[  518.159828][T13224]  ? __fget_files+0x2a/0x420
[  518.159853][T13224]  security_file_ioctl_compat+0xcb/0x2d0
[  518.159879][T13224]  __ia32_compat_sys_ioctl+0x128/0x840
[  518.159903][T13224]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  518.159922][T13224]  ? __fget_files+0x3a0/0x420
[  518.159950][T13224]  ? fput+0xa0/0xd0
[  518.159989][T13224]  ? ksys_write+0x22a/0x250
[  518.160018][T13224]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  518.160037][T13224]  ? lockdep_hardirqs_on+0x9c/0x150
[  518.160065][T13224]  __do_fast_syscall_32+0xb6/0x2b0
[  518.160084][T13224]  ? lockdep_hardirqs_on+0x9c/0x150
[  518.160113][T13224]  do_fast_syscall_32+0x34/0x80
[  518.160132][T13224]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  518.160152][T13224] RIP: 0023:0xf707e539
[  518.160168][T13224] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  518.160183][T13224] RSP: 002b:00000000f506e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  518.160202][T13224] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0cc5616
[  518.160216][T13224] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000
[  518.160227][T13224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  518.160238][T13224] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  518.160249][T13224] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  518.160277][T13224]  </TASK>
[  518.160319][T13224] ERROR: Out of memory at tomoyo_realpath_from_path.
[  518.464715][ T5848] usb 3-1: 0:2 : does not exist
[  518.491618][ T5848] usb 3-1: USB disconnect, device number 79
[  518.577374][ T5999] udevd[5999]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  518.836525][T13237] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2129'.
[  518.864825][ T5848] usb 3-1: new full-speed USB device number 80 using dummy_hcd
[  518.937048][ T5933] usb 1-1: new high-speed USB device number 92 using dummy_hcd
[  519.058575][ T5848] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  519.084656][ T5848] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[  519.118825][ T5848] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  519.147131][ T5933] usb 1-1: no configurations
[  519.161895][ T5933] usb 1-1: can't read configurations, error -22
[  519.176873][ T5848] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  519.258538][ T5848] usb 3-1: config 0 descriptor??
[  519.355076][ T5933] usb 1-1: new high-speed USB device number 93 using dummy_hcd
[  519.473653][T13250] loop2: detected capacity change from 0 to 7
[  519.496864][T13250] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting.
[  519.549315][T13250] ldm_validate_privheads(): Cannot find PRIVHEAD 1.
[  519.595078][  T923] usb 3-1: USB disconnect, device number 80
[  519.601650][ T5933] usb 1-1: no configurations
[  519.607223][T13250] Dev loop2: unable to read RDB block 7
[  519.615778][ T5933] usb 1-1: can't read configurations, error -22
[  519.628570][T13250]  loop2: AHDI p2 p3
[  519.635604][ T5933] usb usb1-port1: attempt power cycle
[  519.650001][T13250] loop2: partition table partially beyond EOD, truncated
[  519.672854][T13250] loop2: p3 start 335544320 is beyond EOD, truncated
[  519.741767][T13252] ptrace attach of "./syz-executor exec"[5866] was attempted by "./syz-executor exec"[13252]
[  519.912684][T13256] netlink: 'syz.1.2134': attribute type 21 has an invalid length.
[  520.073846][ T5933] usb 1-1: new high-speed USB device number 94 using dummy_hcd
[  520.138272][ T5933] usb 1-1: no configurations
[  520.142876][ T5933] usb 1-1: can't read configurations, error -22
[  520.284640][ T5933] usb 1-1: new high-speed USB device number 95 using dummy_hcd
[  520.345758][ T5933] usb 1-1: no configurations
[  520.350392][ T5933] usb 1-1: can't read configurations, error -22
[  520.387541][ T5933] usb usb1-port1: unable to enumerate USB device
[  520.664416][  T923] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[  520.867238][  T923] usb 3-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[  520.902537][  T923] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  520.918488][  T923] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  520.937894][  T923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  520.967729][  T923] usb 3-1: SerialNumber: syz
[  521.071208][T13288] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2141'.
[  521.334200][ T5912] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[  521.365258][T13294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2136'.
[  521.491007][T13296] FAULT_INJECTION: forcing a failure.
[  521.491007][T13296] name failslab, interval 1, probability 0, space 0, times 0
[  521.508968][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  521.519534][T13296] CPU: 1 UID: 0 PID: 13296 Comm: syz.3.2143 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  521.519560][T13296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  521.519572][T13296] Call Trace:
[  521.519588][T13296]  <TASK>
[  521.519596][T13296]  dump_stack_lvl+0x189/0x250
[  521.519623][T13296]  ? __pfx____ratelimit+0x10/0x10
[  521.519653][T13296]  ? __pfx_dump_stack_lvl+0x10/0x10
[  521.519674][T13296]  ? __pfx__printk+0x10/0x10
[  521.519704][T13296]  ? __pfx___might_resched+0x10/0x10
[  521.519724][T13296]  ? fs_reclaim_acquire+0x7d/0x100
[  521.519752][T13296]  should_fail_ex+0x414/0x560
[  521.519788][T13296]  should_failslab+0xa8/0x100
[  521.519813][T13296]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  521.519835][T13296]  ? __alloc_skb+0x112/0x2d0
[  521.519860][T13296]  __alloc_skb+0x112/0x2d0
[  521.519885][T13296]  netlink_ack+0x146/0xa50
[  521.519904][T13296]  ? __pfx_genl_rcv_msg+0x10/0x10
[  521.519927][T13296]  ? ref_tracker_free+0x63a/0x7d0
[  521.519955][T13296]  ? __pfx_ref_tracker_free+0x10/0x10
[  521.519991][T13296]  netlink_rcv_skb+0x28c/0x470
[  521.520014][T13296]  ? __pfx_genl_rcv_msg+0x10/0x10
[  521.520041][T13296]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  521.520080][T13296]  ? down_read+0x1ad/0x2e0
[  521.520108][T13296]  genl_rcv+0x28/0x40
[  521.520131][T13296]  netlink_unicast+0x759/0x8e0
[  521.520163][T13296]  netlink_sendmsg+0x805/0xb30
[  521.520194][T13296]  ? __pfx_netlink_sendmsg+0x10/0x10
[  521.520218][T13296]  ? __import_iovec+0x5d4/0x7f0
[  521.520237][T13296]  ? aa_sock_msg_perm+0x94/0x160
[  521.520265][T13296]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  521.520290][T13296]  ? __pfx_netlink_sendmsg+0x10/0x10
[  521.520313][T13296]  __sock_sendmsg+0x219/0x270
[  521.520334][T13296]  ____sys_sendmsg+0x505/0x830
[  521.520363][T13296]  ? __pfx_____sys_sendmsg+0x10/0x10
[  521.520402][T13296]  ___sys_sendmsg+0x21f/0x2a0
[  521.520427][T13296]  ? __pfx____sys_sendmsg+0x10/0x10
[  521.520486][T13296]  ? __fget_files+0x2a/0x420
[  521.520514][T13296]  ? __fget_files+0x3a0/0x420
[  521.520547][T13296]  __sys_sendmsg+0x164/0x220
[  521.520572][T13296]  ? __pfx___sys_sendmsg+0x10/0x10
[  521.520610][T13296]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  521.520629][T13296]  ? lockdep_hardirqs_on+0x9c/0x150
[  521.520657][T13296]  __do_fast_syscall_32+0xb6/0x2b0
[  521.520677][T13296]  ? lockdep_hardirqs_on+0x9c/0x150
[  521.520706][T13296]  do_fast_syscall_32+0x34/0x80
[  521.520725][T13296]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  521.520746][T13296] RIP: 0023:0xf7fd6539
[  521.520762][T13296] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  521.520783][T13296] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  521.520803][T13296] RAX: ffffffffffffffda RBX: 000000000000000c RCX: 0000000080000000
[  521.520816][T13296] RDX: 000000000000c000 RSI: 0000000000000000 RDI: 0000000000000000
[  521.520827][T13296] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  521.520838][T13296] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  521.520849][T13296] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  521.520877][T13296]  </TASK>
[  521.521896][ T5912] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  521.973216][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  522.022561][ T5912] usb 5-1: config 0 descriptor??
[  522.369963][T13309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2149'.
[  522.424311][ T5848] usb 4-1: new full-speed USB device number 90 using dummy_hcd
[  522.475245][ T5912] lenovo 0003:17EF:6047.002E: item fetching failed at offset 2/5
[  522.483669][ T5912] lenovo 0003:17EF:6047.002E: hid_parse failed
[  522.501857][ T5912] lenovo 0003:17EF:6047.002E: probe with driver lenovo failed with error -22
[  522.524384][ T5933] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[  522.581674][ T5848] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  522.593571][ T5848] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[  522.602744][ T5848] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  522.612734][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  522.623960][ T5848] usb 4-1: config 0 descriptor??
[  522.664255][ T5933] usb 2-1: device descriptor read/64, error -71
[  522.855969][ T5912] usb 4-1: USB disconnect, device number 90
[  522.914663][ T5933] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[  523.064210][ T5933] usb 2-1: device descriptor read/64, error -71
[  523.174543][ T5933] usb usb2-port1: attempt power cycle
[  523.304573][  T923] usb 3-1: 0:2 : does not exist
[  523.343465][  T923] usb 3-1: USB disconnect, device number 81
[  523.366909][ T5848] usb 1-1: new high-speed USB device number 96 using dummy_hcd
[  523.514600][ T5933] usb 2-1: new high-speed USB device number 89 using dummy_hcd
[  523.548058][ T5848] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  523.574980][ T5848] usb 1-1: config 0 has no interfaces?
[  523.583369][ T5848] usb 1-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=4d.67
[  523.592681][ T5848] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  523.600895][ T5848] usb 1-1: Product: syz
[  523.605351][ T5848] usb 1-1: Manufacturer: syz
[  523.610132][ T5848] usb 1-1: SerialNumber: syz
[  523.617257][ T5848] usb 1-1: config 0 descriptor??
[  523.628646][ T5933] usb 2-1: device descriptor read/8, error -71
[  523.848009][   T30] audit: type=1326 audit(1752421585.463:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13339 comm="syz.3.2158" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6539 code=0x7ffc0000
[  523.915612][   T30] audit: type=1326 audit(1752421585.463:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13339 comm="syz.3.2158" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6539 code=0x7ffc0000
[  523.915613][ T5933] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[  523.915663][   T30] audit: type=1326 audit(1752421585.463:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13339 comm="syz.3.2158" exe="/root/syz-executor" sig=0 arch=40000003 syscall=103 compat=1 ip=0xf7fd6539 code=0x7ffc0000
[  523.937665][    C0] vkms_vblank_simulate: vblank timer overrun
[  523.985080][ T5933] usb 2-1: device descriptor read/8, error -71
[  524.095274][ T5848] usb 5-1: USB disconnect, device number 71
[  524.107439][   T30] audit: type=1326 audit(1752421585.613:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13339 comm="syz.3.2158" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6539 code=0x7ffc0000
[  524.132376][   T30] audit: type=1326 audit(1752421585.613:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13339 comm="syz.3.2158" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6539 code=0x7ffc0000
[  524.154383][    C0] vkms_vblank_simulate: vblank timer overrun
[  524.161326][   T30] audit: type=1326 audit(1752421585.703:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13339 comm="syz.3.2158" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd6539 code=0x7ffc0000
[  524.183818][   T30] audit: type=1326 audit(1752421585.703:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13339 comm="syz.3.2158" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6539 code=0x7ffc0000
[  524.205821][    C0] vkms_vblank_simulate: vblank timer overrun
[  524.212293][ T5933] usb usb2-port1: unable to enumerate USB device
[  524.274915][   T30] audit: type=1326 audit(1752421585.703:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13339 comm="syz.3.2158" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6539 code=0x7ffc0000
[  524.299753][   T30] audit: type=1326 audit(1752421585.713:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13339 comm="syz.3.2158" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fd6539 code=0x7ffc0000
[  524.321735][    C0] vkms_vblank_simulate: vblank timer overrun
[  524.328182][   T30] audit: type=1326 audit(1752421585.713:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13339 comm="syz.3.2158" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6539 code=0x7ffc0000
[  524.804226][ T5848] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[  524.983419][ T5848] usb 5-1: Using ep0 maxpacket: 32
[  525.005378][ T5848] usb 5-1: config index 0 descriptor too short (expected 156, got 27)
[  525.061410][ T5848] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  525.102333][ T5848] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  525.154086][ T5848] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  525.188575][T13357] FAULT_INJECTION: forcing a failure.
[  525.188575][T13357] name failslab, interval 1, probability 0, space 0, times 0
[  525.206935][T13357] CPU: 0 UID: 0 PID: 13357 Comm: syz.3.2162 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  525.206960][T13357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  525.206971][T13357] Call Trace:
[  525.206978][T13357]  <TASK>
[  525.206986][T13357]  dump_stack_lvl+0x189/0x250
[  525.207012][T13357]  ? __pfx____ratelimit+0x10/0x10
[  525.207039][T13357]  ? __pfx_dump_stack_lvl+0x10/0x10
[  525.207058][T13357]  ? __pfx__printk+0x10/0x10
[  525.207086][T13357]  ? __pfx___might_resched+0x10/0x10
[  525.207105][T13357]  ? fs_reclaim_acquire+0x7d/0x100
[  525.207133][T13357]  should_fail_ex+0x414/0x560
[  525.207167][T13357]  should_failslab+0xa8/0x100
[  525.207191][T13357]  kmem_cache_alloc_noprof+0x73/0x3c0
[  525.207218][T13357]  ? __kernfs_new_node+0xd7/0x7e0
[  525.207247][T13357]  __kernfs_new_node+0xd7/0x7e0
[  525.207269][T13357]  ? __lock_acquire+0xab9/0xd20
[  525.207295][T13357]  ? __pfx___kernfs_new_node+0x10/0x10
[  525.207319][T13357]  ? kernfs_root+0x1c/0x230
[  525.207348][T13357]  ? kernfs_root+0x1c/0x230
[  525.207369][T13357]  ? kernfs_root+0x1c/0x230
[  525.207389][T13357]  ? kernfs_root+0x1c/0x230
[  525.207417][T13357]  kernfs_new_node+0x102/0x210
[  525.207445][T13357]  __kernfs_create_file+0x4b/0x2e0
[  525.207468][T13357]  sysfs_add_file_mode_ns+0x238/0x300
[  525.207497][T13357]  sysfs_merge_group+0x177/0x310
[  525.207524][T13357]  ? __pfx_sysfs_merge_group+0x10/0x10
[  525.207549][T13357]  ? kobject_put+0x43f/0x480
[  525.207574][T13357]  dpm_sysfs_add+0xd2/0x270
[  525.207601][T13357]  device_add+0x4d8/0xb50
[  525.207628][T13357]  device_create+0x25b/0x2f0
[  525.207653][T13357]  ? format_decode+0x5ee/0xe30
[  525.207674][T13357]  ? string+0x279/0x2b0
[  525.207692][T13357]  ? widen_string+0x3b/0x2a0
[  525.207714][T13357]  ? __pfx_device_create+0x10/0x10
[  525.207751][T13357]  bdi_register_va+0x9c/0x740
[  525.207781][T13357]  super_setup_bdi_name+0xe6/0x200
[  525.207801][T13357]  ? fuse_dev_install+0x8d/0x1a0
[  525.207830][T13357]  ? __pfx_super_setup_bdi_name+0x10/0x10
[  525.207857][T13357]  ? do_raw_spin_unlock+0x122/0x240
[  525.207885][T13357]  fuse_fill_super_common+0x64a/0x1150
[  525.207918][T13357]  ? __pfx_fuse_fill_super_common+0x10/0x10
[  525.207942][T13357]  ? __init_swait_queue_head+0xa9/0x150
[  525.207969][T13357]  ? shrinker_register+0x16b/0x230
[  525.207997][T13357]  ? sget_fc+0x962/0xa40
[  525.208017][T13357]  fuse_fill_super+0x176/0x1f0
[  525.208040][T13357]  ? __pfx_fuse_fill_super+0x10/0x10
[  525.208064][T13357]  get_tree_nodev+0xb8/0x150
[  525.208086][T13357]  fuse_get_tree+0x2eb/0x4e0
[  525.208114][T13357]  vfs_get_tree+0x92/0x2b0
[  525.208138][T13357]  do_new_mount+0x24a/0xa40
[  525.208170][T13357]  __se_sys_mount+0x317/0x410
[  525.208205][T13357]  ? __pfx___se_sys_mount+0x10/0x10
[  525.208226][T13357]  ? arch_syscall_is_vdso_sigreturn+0x175/0x1a0
[  525.208255][T13357]  ? syscall_user_dispatch+0x4f/0x90
[  525.208273][T13357]  ? __ia32_sys_mount+0x20/0xc0
[  525.208296][T13357]  __do_fast_syscall_32+0xb6/0x2b0
[  525.208314][T13357]  ? lockdep_hardirqs_on+0x9c/0x150
[  525.208341][T13357]  do_fast_syscall_32+0x34/0x80
[  525.208358][T13357]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  525.208378][T13357] RIP: 0023:0xf7fd6539
[  525.208394][T13357] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  525.208409][T13357] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000015
[  525.208428][T13357] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000080000000
[  525.208440][T13357] RDX: 0000000080002100 RSI: 0000000000000000 RDI: 0000000080002140
[  525.208451][T13357] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  525.208462][T13357] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  525.208473][T13357] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  525.208499][T13357]  </TASK>
[  525.210040][ T5848] usb 5-1: config 0 interface 0 has no altsetting 0
[  525.778898][ T5848] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  525.788247][ T5848] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  525.796762][ T5848] usb 5-1: Product: syz
[  525.801431][ T5848] usb 5-1: Manufacturer: syz
[  525.806500][ T5848] usb 5-1: SerialNumber: syz
[  525.825481][ T5848] usb 5-1: config 0 descriptor??
[  525.844481][ T5848] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  525.860397][ T5848] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  526.123671][ T5848] usb 1-1: USB disconnect, device number 96
[  526.314325][ T5912] usb 3-1: new full-speed USB device number 82 using dummy_hcd
[  526.474235][ T5933] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[  526.491275][ T5912] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  526.515410][ T5912] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[  526.538566][ T5912] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  526.561233][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  526.598043][ T5912] usb 3-1: config 0 descriptor??
[  526.685007][ T5933] usb 2-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[  526.696828][ T5933] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  526.708838][ T5933] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  526.720272][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  526.730441][ T5933] usb 2-1: SerialNumber: syz
[  526.751059][ T5848] usb 5-1: USB disconnect, device number 72
[  526.770382][ T5848] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  526.888105][ T5960] usb 3-1: USB disconnect, device number 82
[  527.115195][T13378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2166'.
[  527.599106][T13393] IPVS: length: 26 != 8
[  527.628907][T13394] IPVS: length: 26 != 8
[  528.534349][ T5912] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[  528.704596][ T5912] usb 5-1: Using ep0 maxpacket: 8
[  528.720873][ T5912] usb 5-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=54.48
[  528.753898][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  528.806021][ T5912] usb 5-1: config 0 descriptor??
[  528.894968][ T5913] usb 4-1: new high-speed USB device number 91 using dummy_hcd
[  529.055875][ T5913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  529.183161][ T5933] usb 2-1: 0:2 : does not exist
[  529.197621][ T5912] usb 5-1: USB disconnect, device number 73
[  529.207426][ T5913] usb 4-1: config 0 has no interfaces?
[  529.238679][ T5913] usb 4-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=4d.67
[  529.260122][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.272981][ T5913] usb 4-1: Product: syz
[  529.277208][ T5913] usb 4-1: Manufacturer: syz
[  529.281818][ T5913] usb 4-1: SerialNumber: syz
[  529.296542][ T5913] usb 4-1: config 0 descriptor??
[  529.344681][ T5933] usb 2-1: USB disconnect, device number 91
[  529.392291][ T5999] udevd[5999]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  530.034408][ T5912] usb 1-1: new full-speed USB device number 97 using dummy_hcd
[  530.117279][ T5960] usb 4-1: USB disconnect, device number 91
[  530.227351][ T5912] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  530.359285][ T5912] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[  530.382125][ T5912] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  530.432165][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  530.464397][ T5912] usb 1-1: config 0 descriptor??
[  530.672709][T13441] syz.3.2187 (13441): drop_caches: 2
[  530.700010][ T5960] usb 1-1: USB disconnect, device number 97
[  530.706506][T13441] syz.3.2187 (13441): drop_caches: 2
[  531.204462][T13454] loop2: detected capacity change from 0 to 7
[  531.232711][T13454] Dev loop2: unable to read RDB block 7
[  531.274930][T13454]  loop2: unable to read partition table
[  531.304646][T13454] loop2: partition table beyond EOD, truncated
[  531.343511][T13454] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  531.612349][T13468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2195'.
[  531.623100][T13468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2195'.
[  531.633256][T13468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2195'.
[  531.654254][ T5960] usb 4-1: new high-speed USB device number 92 using dummy_hcd
[  531.805859][ T5960] usb 4-1: Using ep0 maxpacket: 16
[  531.831803][ T5960] usb 4-1: config 222 has an invalid interface number: 31 but max is 0
[  531.861124][ T5960] usb 4-1: config 222 has no interface number 0
[  531.879155][ T5960] usb 4-1: config 222 interface 31 altsetting 11 endpoint 0xE has an invalid bInterval 255, changing to 11
[  531.898553][T13476] netlink: 284 bytes leftover after parsing attributes in process `syz.1.2198'.
[  531.910749][ T5960] usb 4-1: config 222 interface 31 altsetting 11 endpoint 0xE has invalid maxpacket 59391, setting to 1024
[  531.965286][ T5960] usb 4-1: config 222 interface 31 has no altsetting 0
[  531.981096][ T5960] usb 4-1: New USB device found, idVendor=0f11, idProduct=2030, bcdDevice=a9.fd
[  531.990558][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  531.999386][ T5960] usb 4-1: Product: syz
[  532.004405][ T5960] usb 4-1: Manufacturer: syz
[  532.009086][ T5960] usb 4-1: SerialNumber: syz
[  532.027661][T13462] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  532.075173][T13479] xt_CT: No such helper "snmp"
[  532.185550][ T5913] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[  532.280196][ T5960] ldusb 4-1:222.31: LD USB Device #0 now attached to major 180 minor 0
[  532.327143][ T5960] usb 4-1: USB disconnect, device number 92
[  532.347990][ T5960] ldusb 4-1:222.31: LD USB Device #0 now disconnected
[  532.397131][ T5913] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  532.467426][ T5913] usb 3-1: config 0 has no interfaces?
[  532.497889][ T5913] usb 3-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=4d.67
[  532.564849][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  532.703158][ T5913] usb 3-1: Product: syz
[  532.739794][ T5913] usb 3-1: Manufacturer: syz
[  532.765146][ T5913] usb 3-1: SerialNumber: syz
[  532.813940][ T5913] usb 3-1: config 0 descriptor??
[  533.132854][T13501] FAULT_INJECTION: forcing a failure.
[  533.132854][T13501] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  533.160005][T13501] CPU: 0 UID: 0 PID: 13501 Comm: syz.3.2205 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  533.160031][T13501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  533.160042][T13501] Call Trace:
[  533.160049][T13501]  <TASK>
[  533.160057][T13501]  dump_stack_lvl+0x189/0x250
[  533.160082][T13501]  ? __pfx____ratelimit+0x10/0x10
[  533.160108][T13501]  ? __pfx_dump_stack_lvl+0x10/0x10
[  533.160128][T13501]  ? __pfx__printk+0x10/0x10
[  533.160153][T13501]  ? __might_fault+0xb0/0x130
[  533.160185][T13501]  should_fail_ex+0x414/0x560
[  533.160215][T13501]  _copy_from_user+0x2d/0xb0
[  533.160237][T13501]  v4l2_compat_get_array_args+0x24b/0xaf0
[  533.160273][T13501]  ? __pfx_v4l2_compat_get_array_args+0x10/0x10
[  533.160321][T13501]  ? __kasan_kmalloc_large+0x85/0xa0
[  533.160346][T13501]  ? rcu_is_watching+0x15/0xb0
[  533.160367][T13501]  ? video_usercopy+0xaa9/0x14f0
[  533.160387][T13501]  ? video_usercopy+0xaa9/0x14f0
[  533.160406][T13501]  ? rcu_is_watching+0x15/0xb0
[  533.160425][T13501]  ? video_usercopy+0xaa9/0x14f0
[  533.160444][T13501]  ? trace_kmalloc+0x1f/0xd0
[  533.160462][T13501]  ? __kvmalloc_node_noprof+0x331/0x5f0
[  533.160491][T13501]  video_usercopy+0xb5c/0x14f0
[  533.160522][T13501]  ? __pfx___video_do_ioctl+0x10/0x10
[  533.160543][T13501]  ? __pfx_video_usercopy+0x10/0x10
[  533.160583][T13501]  ? __fget_files+0x2a/0x420
[  533.160609][T13501]  v4l2_ioctl+0x18a/0x1e0
[  533.160634][T13501]  v4l2_compat_ioctl32+0x1d4/0x260
[  533.160664][T13501]  __ia32_compat_sys_ioctl+0x540/0x840
[  533.160687][T13501]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  533.160707][T13501]  ? __fget_files+0x3a0/0x420
[  533.160744][T13501]  ? fput+0xa0/0xd0
[  533.160769][T13501]  ? ksys_write+0x22a/0x250
[  533.160793][T13501]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  533.160812][T13501]  ? lockdep_hardirqs_on+0x9c/0x150
[  533.160840][T13501]  __do_fast_syscall_32+0xb6/0x2b0
[  533.160859][T13501]  ? lockdep_hardirqs_on+0x9c/0x150
[  533.160888][T13501]  do_fast_syscall_32+0x34/0x80
[  533.160906][T13501]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  533.160927][T13501] RIP: 0023:0xf7fd6539
[  533.160944][T13501] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  533.160960][T13501] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  533.160979][T13501] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0185647
[  533.160993][T13501] RDX: 0000000080000340 RSI: 0000000000000000 RDI: 0000000000000000
[  533.161004][T13501] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  533.161015][T13501] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  533.161026][T13501] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  533.161054][T13501]  </TASK>
[  533.587971][ T5913] usb 2-1: new full-speed USB device number 92 using dummy_hcd
[  533.764824][ T5913] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  533.775946][ T5913] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[  533.794476][ T5913] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  533.803984][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  533.870020][ T5913] usb 2-1: config 0 descriptor??
[  533.907833][ T5852] usb 3-1: USB disconnect, device number 83
[  534.034504][ T5933] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[  534.122942][ T5912] usb 2-1: USB disconnect, device number 92
[  534.264252][ T5933] usb 5-1: Using ep0 maxpacket: 8
[  534.277341][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  534.288588][ T5933] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  534.304243][ T5933] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00
[  534.313473][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  534.328185][ T5933] usb 5-1: config 0 descriptor??
[  534.494377][ T5852] usb 3-1: new full-speed USB device number 84 using dummy_hcd
[  534.666168][ T5852] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  534.684634][ T5852] usb 3-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  534.717901][ T5852] usb 3-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  534.766373][ T5852] usb 3-1: config 1 interface 0 has no altsetting 0
[  534.794003][ T5852] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.40
[  534.810872][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  534.872599][ T5852] usb 3-1: Product: syz
[  534.909965][ T5852] usb 3-1: Manufacturer: syz
[  534.941908][ T5852] usb 3-1: SerialNumber: syz
[  535.131736][T13515] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  535.408790][T13530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2213'.
[  535.468835][T13530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2213'.
[  535.561787][ T5852] usbhid 3-1:1.0: can't add hid device: -71
[  535.596946][ T5852] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  535.657362][ T5852] usb 3-1: USB disconnect, device number 84
[  536.729739][T13564] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2219'.
[  536.895624][ T5933] usbhid 5-1:0.0: can't add hid device: -71
[  536.895695][ T5933] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  536.897659][ T5933] usb 5-1: USB disconnect, device number 74
[  537.164445][ T5852] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[  537.365872][ T5852] usb 3-1: Using ep0 maxpacket: 32
[  537.380021][ T5852] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 17, changing to 8
[  537.395033][ T5852] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18251, setting to 1024
[  537.409755][ T5852] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  537.424637][ T5913] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[  537.463168][ T5852] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  537.483623][ T5852] usb 3-1: Product: syz
[  537.508182][ T5852] usb 3-1: Manufacturer: syz
[  537.527776][T13567] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  537.546353][ T5852] hub 3-1:4.0: USB hub found
[  537.547319][ T5912] usb 1-1: new full-speed USB device number 98 using dummy_hcd
[  537.644451][ T5913] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  537.674260][ T5913] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  537.705486][ T5913] usb 2-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=4d.67
[  537.717891][ T5912] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  537.731103][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  537.741035][T13581] FAULT_INJECTION: forcing a failure.
[  537.741035][T13581] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  537.755565][ T5912] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[  537.764623][ T5913] usb 2-1: Product: syz
[  537.769237][ T5913] usb 2-1: Manufacturer: syz
[  537.773849][ T5913] usb 2-1: SerialNumber: syz
[  537.779592][ T5912] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  537.788885][T13581] CPU: 0 UID: 0 PID: 13581 Comm: syz.3.2224 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  537.788910][T13581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  537.788921][T13581] Call Trace:
[  537.788929][T13581]  <TASK>
[  537.788938][T13581]  dump_stack_lvl+0x189/0x250
[  537.788964][T13581]  ? __pfx____ratelimit+0x10/0x10
[  537.788998][T13581]  ? __pfx_dump_stack_lvl+0x10/0x10
[  537.789019][T13581]  ? __pfx__printk+0x10/0x10
[  537.789044][T13581]  ? fs_reclaim_acquire+0x7d/0x100
[  537.789076][T13581]  should_fail_ex+0x414/0x560
[  537.789106][T13581]  prepare_alloc_pages+0x213/0x610
[  537.789137][T13581]  __alloc_frozen_pages_noprof+0x123/0x370
[  537.789166][T13581]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  537.789212][T13581]  alloc_pages_mpol+0x232/0x4a0
[  537.789238][T13581]  alloc_pages_noprof+0xa9/0x190
[  537.789262][T13581]  get_zeroed_page_noprof+0x1a/0x90
[  537.789287][T13581]  mon_bin_ioctl+0x5df/0xd70
[  537.789320][T13581]  ? __pfx_mon_bin_ioctl+0x10/0x10
[  537.789359][T13581]  mon_bin_compat_ioctl+0x1c1/0x3e0
[  537.789382][T13581]  ? __fget_files+0x2a/0x420
[  537.789405][T13581]  ? __pfx_mon_bin_compat_ioctl+0x10/0x10
[  537.789430][T13581]  ? __fget_files+0x3a0/0x420
[  537.789450][T13581]  ? __fget_files+0x2a/0x420
[  537.789475][T13581]  ? bpf_lsm_file_ioctl_compat+0x9/0x20
[  537.789498][T13581]  __ia32_compat_sys_ioctl+0x540/0x840
[  537.789522][T13581]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  537.789542][T13581]  ? __fget_files+0x3a0/0x420
[  537.789570][T13581]  ? fput+0xa0/0xd0
[  537.789595][T13581]  ? ksys_write+0x22a/0x250
[  537.789622][T13581]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  537.789642][T13581]  ? lockdep_hardirqs_on+0x9c/0x150
[  537.789670][T13581]  __do_fast_syscall_32+0xb6/0x2b0
[  537.789689][T13581]  ? lockdep_hardirqs_on+0x9c/0x150
[  537.789717][T13581]  do_fast_syscall_32+0x34/0x80
[  537.789736][T13581]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  537.789756][T13581] RIP: 0023:0xf7fd6539
[  537.789772][T13581] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  537.789788][T13581] RSP: 002b:00000000f50d555c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  537.789808][T13581] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000009204
[  537.789821][T13581] RDX: 00000000000ccd1a RSI: 0000000000000000 RDI: 0000000000000000
[  537.789832][T13581] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  537.789843][T13581] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  537.789854][T13581] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  537.789882][T13581]  </TASK>
[  538.060151][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  538.079770][ T5852] hub 3-1:4.0: 2 ports detected
[  538.080966][ T5912] usb 1-1: config 0 descriptor??
[  538.113286][ T5913] usb 2-1: config 0 descriptor??
[  538.172124][T13583] xt_TPROXY: Can be used only with -p tcp or -p udp
[  538.240105][T13586] loop6: detected capacity change from 0 to 2560
[  538.251986][ T6044] Buffer I/O error on dev loop6, logical block 0, async page read
[  538.262288][ T6044] Buffer I/O error on dev loop6, logical block 0, async page read
[  538.270422][ T6044] Buffer I/O error on dev loop6, logical block 0, async page read
[  538.283753][ T6044] Buffer I/O error on dev loop6, logical block 0, async page read
[  538.327540][ T5913] usb 1-1: USB disconnect, device number 98
[  538.340348][ T6044] Buffer I/O error on dev loop6, logical block 0, async page read
[  538.386957][ T6044] Buffer I/O error on dev loop6, logical block 0, async page read
[  538.440980][ T6044] Buffer I/O error on dev loop6, logical block 0, async page read
[  538.450466][ T6044] Buffer I/O error on dev loop6, logical block 0, async page read
[  538.459564][ T6044] ldm_validate_partition_table(): Disk read failed.
[  538.467932][ T6044] Buffer I/O error on dev loop6, logical block 0, async page read
[  538.477995][ T6044] Buffer I/O error on dev loop6, logical block 0, async page read
[  538.486606][ T6044] Dev loop6: unable to read RDB block 0
[  538.498416][ T6044]  loop6: unable to read partition table
[  538.512480][ T5852] hub 3-1:4.0: hub_hub_status failed (err = -71)
[  538.539355][ T5852] hub 3-1:4.0: config failed, can't get hub status (err -71)
[  538.545887][T13586] ldm_validate_partition_table(): Disk read failed.
[  538.568421][T13586] Dev loop6: unable to read RDB block 0
[  538.576524][ T5852] usb 3-1: USB disconnect, device number 85
[  538.583122][T13586]  loop6: unable to read partition table
[  538.598049][T13586] loop_reread_partitions: partition scan of loop6 (3Ÿ¾‚³˜) failed (rc=-5)
[  538.673382][   T30] kauditd_printk_skb: 8 callbacks suppressed
[  538.673399][   T30] audit: type=1326 audit(1752421600.283:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13589 comm="syz.3.2226" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd6539 code=0x0
[  538.913389][ T5852] usb 2-1: USB disconnect, device number 93
[  539.164277][ T5913] usb 1-1: new high-speed USB device number 99 using dummy_hcd
[  539.249351][T13611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2228'.
[  539.280330][T13611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2228'.
[  539.335433][T13611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2228'.
[  539.345612][T13611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2228'.
[  539.359203][T13611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2228'.
[  539.369019][T13611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2228'.
[  539.378703][T13611] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2228'.
[  539.390744][T13613] netlink: 'syz.2.2232': attribute type 30 has an invalid length.
[  539.395692][ T5913] usb 1-1: Using ep0 maxpacket: 32
[  539.461087][ T5913] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=4d.52
[  539.490248][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  539.580713][ T5913] usb 1-1: Product: syz
[  539.610739][ T5913] usb 1-1: Manufacturer: syz
[  539.680472][ T5913] usb 1-1: SerialNumber: syz
[  539.710071][ T5913] usb 1-1: config 0 descriptor??
[  539.774526][T13620] syz_tun: entered allmulticast mode
[  539.815750][ T5913] usb_ehset_test 1-1:0.0: probe with driver usb_ehset_test failed with error -32
[  539.853113][T13624] netlink: 'syz.2.2235': attribute type 1 has an invalid length.
[  540.048854][T13624] bond5: entered promiscuous mode
[  540.071763][T13624] 8021q: adding VLAN 0 to HW filter on device bond5
[  540.124647][T13625] bond1: (slave dummy0): Releasing active interface
[  540.132059][T13625] dummy0: left promiscuous mode
[  540.154992][T13625] bond5: (slave dummy0): making interface the new active one
[  540.163537][T13625] dummy0: entered promiscuous mode
[  540.170918][T13625] bond5: (slave dummy0): Enslaving as an active interface with an up link
[  540.189039][T13619] syz_tun: left allmulticast mode
[  540.293539][T13629] vivid-002: disconnect
[  540.305469][T13629] netlink: 'syz.3.2236': attribute type 1 has an invalid length.
[  540.317533][T13628] vivid-002: reconnect
[  540.331389][ T5852] usb 1-1: USB disconnect, device number 99
[  541.314224][   T10] usb 1-1: new full-speed USB device number 100 using dummy_hcd
[  541.554186][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  541.608282][   T10] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  541.671222][   T10] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  541.773761][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  541.816155][   T10] usb 1-1: config 0 descriptor??
[  541.856853][   T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  541.863524][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  541.929646][   T10] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  541.954280][ T5848] usb 4-1: new high-speed USB device number 93 using dummy_hcd
[  541.972854][   T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  542.020562][   T10] usb 1-1: media controller created
[  542.041487][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  542.070239][   T30] audit: type=1326 audit(1752421603.683:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13669 comm="syz.2.2246" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000
[  542.115420][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  542.174746][   T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  542.178291][T13643] dvb-usb: bulk message failed: -22 (2/0)
[  542.213454][ T5848] usb 4-1: config 0 has no interfaces?
[  542.245010][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input83
[  542.266972][   T30] audit: type=1326 audit(1752421603.683:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13669 comm="syz.2.2246" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000
[  542.290444][   T10] dvb-usb: schedule remote query interval to 150 msecs.
[  542.404494][   T30] audit: type=1326 audit(1752421603.733:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13669 comm="syz.2.2246" exe="/root/syz-executor" sig=0 arch=40000003 syscall=47 compat=1 ip=0xf7f84539 code=0x7ffc0000
[  542.430277][   T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  542.531018][   T30] audit: type=1326 audit(1752421603.733:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13669 comm="syz.2.2246" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000
[  542.575583][ T5848] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  542.595476][   T10] usb 1-1: USB disconnect, device number 100
[  542.627319][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  542.639629][T13680] __nla_validate_parse: 44 callbacks suppressed
[  542.639641][T13680] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.2249'.
[  542.658678][ T5848] usb 4-1: Product: syz
[  542.662957][   T30] audit: type=1326 audit(1752421603.733:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13669 comm="syz.2.2246" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000
[  542.685306][ T5848] usb 4-1: Manufacturer: syz
[  542.698426][ T5848] usb 4-1: SerialNumber: syz
[  542.704010][T13680] openvswitch: netlink: Flow actions attr not present in new flow.
[  542.723273][ T5848] usb 4-1: config 0 descriptor??
[  542.753509][   T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  542.774495][   T30] audit: type=1326 audit(1752421603.733:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13669 comm="syz.2.2246" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f84539 code=0x7ffc0000
[  542.797373][   T30] audit: type=1326 audit(1752421603.733:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13669 comm="syz.2.2246" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000
[  542.834263][   T30] audit: type=1326 audit(1752421603.733:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13669 comm="syz.2.2246" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f84539 code=0x7ffc0000
[  543.035000][   T30] audit: type=1326 audit(1752421603.743:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13669 comm="syz.2.2246" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f84539 code=0x7ffc0000
[  544.202191][T13693] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  544.210500][   T30] kauditd_printk_skb: 21 callbacks suppressed
[  544.210516][   T30] audit: type=1326 audit(1752421605.823:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13705 comm="syz.0.2255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83539 code=0x7ffc0000
[  544.243952][   T30] audit: type=1326 audit(1752421605.853:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13705 comm="syz.0.2255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83539 code=0x7ffc0000
[  544.270887][   T30] audit: type=1326 audit(1752421605.853:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13705 comm="syz.0.2255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf7f83539 code=0x7ffc0000
[  544.296689][T13693] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  544.303288][   T30] audit: type=1326 audit(1752421605.853:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13705 comm="syz.0.2255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83539 code=0x7ffc0000
[  544.329339][T13693] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  544.329468][   T30] audit: type=1326 audit(1752421605.853:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13705 comm="syz.0.2255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83539 code=0x7ffc0000
[  544.349050][T13693] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  544.364284][T13693] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  544.568633][   T30] audit: type=1326 audit(1752421605.853:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13705 comm="syz.0.2255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=362 compat=1 ip=0xf7f83539 code=0x7ffc0000
[  544.755218][   T30] audit: type=1326 audit(1752421605.853:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13705 comm="syz.0.2255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83539 code=0x7ffc0000
[  544.886540][   T30] audit: type=1326 audit(1752421605.853:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13705 comm="syz.0.2255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83539 code=0x7ffc0000
[  544.940740][T13728] tipc: Can't bind to reserved service type 1
[  545.003234][   T30] audit: type=1326 audit(1752421605.853:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13705 comm="syz.0.2255" exe="/root/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf7f83539 code=0x7ffc0000
[  545.414532][   T10] usb 3-1: new full-speed USB device number 86 using dummy_hcd
[  545.618577][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  545.634293][   T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  545.681743][   T10] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  545.693890][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  545.694556][T10936] Bluetooth: hci0: command 0x0c1a tx timeout
[  545.846973][T13738] FAULT_INJECTION: forcing a failure.
[  545.846973][T13738] name failslab, interval 1, probability 0, space 0, times 0
[  545.855314][   T10] usb 3-1: config 0 descriptor??
[  545.860666][T13738] CPU: 1 UID: 0 PID: 13738 Comm: syz.0.2263 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  545.860690][T13738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  545.860701][T13738] Call Trace:
[  545.860709][T13738]  <TASK>
[  545.860718][T13738]  dump_stack_lvl+0x189/0x250
[  545.860742][T13738]  ? __pfx____ratelimit+0x10/0x10
[  545.860769][T13738]  ? __pfx_dump_stack_lvl+0x10/0x10
[  545.860790][T13738]  ? __pfx__printk+0x10/0x10
[  545.860815][T13738]  ? __lock_acquire+0xab9/0xd20
[  545.860844][T13738]  should_fail_ex+0x414/0x560
[  545.860872][T13738]  should_failslab+0xa8/0x100
[  545.860896][T13738]  kmem_cache_alloc_noprof+0x73/0x3c0
[  545.860916][T13738]  ? sctp_get_port_local+0x6bb/0x1610
[  545.860944][T13738]  sctp_get_port_local+0x6bb/0x1610
[  545.860978][T13738]  ? __pfx_sctp_get_port_local+0x10/0x10
[  545.861004][T13738]  ? sctp_bind_addr_match+0x28b/0x2b0
[  545.861028][T13738]  sctp_do_bind+0x4ea/0x940
[  545.861062][T13738]  sctp_connect_new_asoc+0x25c/0x690
[  545.861087][T13738]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  545.861107][T13738]  ? __local_bh_enable_ip+0x12d/0x1c0
[  545.861133][T13738]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  545.861151][T13738]  ? security_sctp_bind_connect+0x7e/0x2e0
[  545.861185][T13738]  sctp_sendmsg+0x155c/0x2810
[  545.861219][T13738]  ? __pfx_sctp_sendmsg+0x10/0x10
[  545.861243][T13738]  ? aa_sk_perm+0x81e/0x950
[  545.861272][T13738]  ? __pfx_aa_sk_perm+0x10/0x10
[  545.861297][T13738]  ? sock_rps_record_flow+0x19/0x410
[  545.861318][T13738]  ? inet_sendmsg+0x2f4/0x370
[  545.861340][T13738]  __sock_sendmsg+0x19c/0x270
[  545.861361][T13738]  __sys_sendto+0x3bd/0x520
[  545.861384][T13738]  ? __pfx___sys_sendto+0x10/0x10
[  545.861401][T13738]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  545.861432][T13738]  ? __fget_files+0x3a0/0x420
[  545.861466][T13738]  ? ksys_write+0x22a/0x250
[  545.861495][T13738]  __ia32_sys_sendto+0xdd/0x100
[  545.861519][T13738]  __do_fast_syscall_32+0xb6/0x2b0
[  545.861538][T13738]  ? lockdep_hardirqs_on+0x9c/0x150
[  545.861567][T13738]  do_fast_syscall_32+0x34/0x80
[  545.861584][T13738]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  545.861605][T13738] RIP: 0023:0xf7f83539
[  545.861621][T13738] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  545.861636][T13738] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000171
[  545.861656][T13738] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000540
[  545.861669][T13738] RDX: 0000000000000001 RSI: 0000000008004810 RDI: 0000000080000280
[  545.861681][T13738] RBP: 0000000000000010 R08: 0000000000000000 R09: 0000000000000000
[  545.861692][T13738] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  545.861703][T13738] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  545.861729][T13738]  </TASK>
[  546.187482][   T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  546.194365][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  546.214882][   T10] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  546.225292][   T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  546.240270][   T10] usb 3-1: media controller created
[  546.247725][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  546.279682][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  546.334307][T10936] Bluetooth: hci1: command 0x0c1a tx timeout
[  546.363862][   T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  546.409654][  T923] usb 4-1: USB disconnect, device number 93
[  546.419120][T10936] Bluetooth: hci2: command 0x0c1a tx timeout
[  546.425360][T10936] Bluetooth: hci4: command 0x0405 tx timeout
[  546.433408][T10936] Bluetooth: hci3: command 0x0c1a tx timeout
[  546.479541][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input84
[  546.611408][   T10] dvb-usb: schedule remote query interval to 150 msecs.
[  546.683321][   T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  546.746261][   T10] usb 3-1: USB disconnect, device number 86
[  547.004491][ T5912] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[  547.012452][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[  547.120047][   T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  547.176389][T13758] FAULT_INJECTION: forcing a failure.
[  547.176389][T13758] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  547.204200][ T5912] usb 5-1: device descriptor read/64, error -32
[  547.240502][T13758] CPU: 1 UID: 0 PID: 13758 Comm: syz.3.2268 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  547.240528][T13758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  547.240539][T13758] Call Trace:
[  547.240548][T13758]  <TASK>
[  547.240557][T13758]  dump_stack_lvl+0x189/0x250
[  547.240584][T13758]  ? __pfx____ratelimit+0x10/0x10
[  547.240610][T13758]  ? __pfx_dump_stack_lvl+0x10/0x10
[  547.240630][T13758]  ? __pfx__printk+0x10/0x10
[  547.240666][T13758]  should_fail_ex+0x414/0x560
[  547.240695][T13758]  _copy_to_user+0x31/0xb0
[  547.240717][T13758]  __se_sys_move_pages+0x1421/0x16e0
[  547.240760][T13758]  ? __pfx___se_sys_move_pages+0x10/0x10
[  547.240812][T13758]  ? fput+0xa0/0xd0
[  547.240835][T13758]  ? ksys_write+0x22a/0x250
[  547.240861][T13758]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  547.240879][T13758]  ? __ia32_sys_move_pages+0x21/0xf0
[  547.240907][T13758]  __do_fast_syscall_32+0xb6/0x2b0
[  547.240927][T13758]  ? lockdep_hardirqs_on+0x9c/0x150
[  547.240956][T13758]  do_fast_syscall_32+0x34/0x80
[  547.240975][T13758]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  547.240996][T13758] RIP: 0023:0xf7fd6539
[  547.241012][T13758] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  547.241027][T13758] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 000000000000013d
[  547.241046][T13758] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000001efe
[  547.241058][T13758] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000080000040
[  547.241069][T13758] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  547.241080][T13758] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  547.241090][T13758] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  547.241115][T13758]  </TASK>
[  547.924585][ T5912] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[  548.157319][ T5912] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  548.187924][ T5912] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  548.214957][ T5912] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  548.235855][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  548.244018][ T5912] usb 5-1: Product: syz
[  548.258630][ T5912] usb 5-1: Manufacturer: syz
[  548.263317][ T5912] usb 5-1: SerialNumber: syz
[  548.331116][ T5912] usb 5-1: config 0 descriptor??
[  548.381930][T13777] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2273'.
[  548.421008][T13779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2276'.
[  548.864229][ T5912] usb 4-1: new high-speed USB device number 94 using dummy_hcd
[  548.994233][   T10] usb 3-1: new full-speed USB device number 87 using dummy_hcd
[  549.055754][ T5912] usb 4-1: Using ep0 maxpacket: 16
[  549.080590][ T5912] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  549.134192][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  549.180579][ T5912] usb 4-1: config 0 descriptor??
[  549.188118][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  549.241447][   T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  549.257576][ T5912] gspca_main: sonixj-2.14.0 probing 0471:0327
[  549.283798][   T10] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  549.342219][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  549.371311][   T10] usb 3-1: config 0 descriptor??
[  549.452163][   T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  549.463705][   T10] dvb-usb: bulk message failed: -22 (3/0)
[  549.492020][   T10] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  549.536620][   T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  549.563477][   T10] usb 3-1: media controller created
[  549.607154][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  549.682507][   T10] dvb-usb: bulk message failed: -22 (6/0)
[  549.718906][   T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  549.755245][   T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input85
[  549.803664][   T10] dvb-usb: schedule remote query interval to 150 msecs.
[  549.841321][   T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  549.861212][  T923] usb 5-1: USB disconnect, device number 76
[  549.886522][   T10] usb 3-1: USB disconnect, device number 87
[  550.088153][   T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  550.104209][ T5912] gspca_sonixj: i2c_w8 err -71
[  550.127039][ T5912] sonixj 4-1:0.0: probe with driver sonixj failed with error -71
[  550.150119][ T5912] usb 4-1: USB disconnect, device number 94
[  550.188121][T13799] input: syz0 as /devices/virtual/input/input86
[  550.242175][T13799] input: failed to attach handler leds to device input86, error: -6
[  550.384392][  T923] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[  550.576427][  T923] usb 5-1: Using ep0 maxpacket: 8
[  550.608868][T13807] loop2: detected capacity change from 0 to 7
[  550.622020][  T923] usb 5-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a
[  550.651100][T13807] Dev loop2: unable to read RDB block 7
[  550.661088][  T923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  550.703046][T13807]  loop2: unable to read partition table
[  550.720526][  T923] usb 5-1: Product: syz
[  550.731643][T13807] loop2: partition table beyond EOD, truncated
[  550.757270][  T923] usb 5-1: Manufacturer: syz
[  550.774168][T13807] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  550.789015][  T923] usb 5-1: SerialNumber: syz
[  550.830400][  T923] usb 5-1: config 0 descriptor??
[  550.898590][  T923] gspca_main: sn9c2028-2.14.0 probing 0458:7003
[  551.095945][  T923] gspca_sn9c2028: read1 error -32
[  551.123339][  T923] gspca_sn9c2028: read1 error -32
[  551.402385][   T10] usb 5-1: USB disconnect, device number 77
[  551.426088][ T5912] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[  551.546014][T13827] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check.
[  551.646686][ T5912] usb 2-1: Using ep0 maxpacket: 8
[  551.671283][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  551.705262][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  551.737998][ T5912] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  551.772718][ T5912] usb 2-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00
[  551.794251][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  551.816554][ T5912] usb 2-1: config 0 descriptor??
[  552.014998][   T10] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[  552.174432][   T10] usb 3-1: Using ep0 maxpacket: 32
[  552.190708][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  552.204331][  T923] usb 5-1: new full-speed USB device number 78 using dummy_hcd
[  552.225366][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  552.244526][ T5852] usb 4-1: new high-speed USB device number 95 using dummy_hcd
[  552.259204][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  552.291657][   T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  552.300888][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  552.315058][   T10] usb 3-1: config 0 descriptor??
[  552.402534][  T923] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  552.416439][ T5852] usb 4-1: Using ep0 maxpacket: 32
[  552.429547][  T923] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  552.442775][ T5852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  552.454305][  T923] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  552.463445][ T5852] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  552.473342][  T923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  552.484229][ T5852] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  552.505887][  T923] usb 5-1: config 0 descriptor??
[  552.519771][ T5852] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  552.534740][  T923] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  552.547660][  T923] dvb-usb: bulk message failed: -22 (3/0)
[  552.553601][ T5852] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  552.571152][  T923] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  552.595099][ T5852] usb 4-1: config 0 descriptor??
[  552.613816][  T923] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  552.641014][  T923] usb 5-1: media controller created
[  552.653184][  T923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  552.683465][  T923] dvb-usb: bulk message failed: -22 (6/0)
[  552.694784][  T923] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  552.713638][  T923] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input87
[  552.773352][  T923] dvb-usb: schedule remote query interval to 150 msecs.
[  552.793187][  T923] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  552.823860][  T923] usb 5-1: USB disconnect, device number 78
[  552.838223][   T10] hid (null): unknown global tag 0xe
[  552.890072][  T923] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  552.909836][   T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.002F/input/input88
[  553.060998][   T10] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.002F/input/input89
[  553.132133][ T5852] hid (null): unknown global tag 0xe
[  553.184883][   T10] kye 0003:0458:5011.002F: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0
[  553.192341][ T5852] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0030/input/input90
[  553.336243][ T5852] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0030/input/input91
[  553.501981][T13852] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  553.582298][ T5852] kye 0003:0458:5011.0030: input,hiddev1,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0
[  554.108704][    C0] kye 0003:0458:5011.002F: usb_submit_urb(ctrl) failed: -1
[  554.142036][ T5852] usb 3-1: USB disconnect, device number 88
[  554.206917][ T5933] usb 4-1: USB disconnect, device number 95
[  554.373082][ T5912] usbhid 2-1:0.0: can't add hid device: -71
[  554.418903][ T5912] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  554.519142][ T5912] usb 2-1: USB disconnect, device number 94
[  554.914031][   T30] audit: type=1326 audit(1752421616.523:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13866 comm="syz.0.2302" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83539 code=0x7ffc0000
[  554.937740][   T30] audit: type=1326 audit(1752421616.523:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13866 comm="syz.0.2302" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83539 code=0x7ffc0000
[  554.975064][T13868] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2302'.
[  554.997062][   T30] audit: type=1326 audit(1752421616.583:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13866 comm="syz.0.2302" exe="/root/syz-executor" sig=0 arch=40000003 syscall=152 compat=1 ip=0xf7f83539 code=0x7ffc0000
[  555.021561][   T30] audit: type=1326 audit(1752421616.583:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13866 comm="syz.0.2302" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83539 code=0x7ffc0000
[  555.062881][   T30] audit: type=1326 audit(1752421616.593:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13866 comm="syz.0.2302" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83539 code=0x7ffc0000
[  555.114051][   T30] audit: type=1326 audit(1752421616.593:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13866 comm="syz.0.2302" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f83539 code=0x7ffc0000
[  555.159946][T13874] bond3: (slave dummy0): Releasing active interface
[  555.168469][T13877] netlink: 'syz.3.2303': attribute type 10 has an invalid length.
[  555.184395][   T30] audit: type=1326 audit(1752421616.663:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13866 comm="syz.0.2302" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83539 code=0x7ffc0000
[  555.244736][   T30] audit: type=1326 audit(1752421616.663:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13866 comm="syz.0.2302" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83539 code=0x7ffc0000
[  555.269624][T13874] dummy0: left promiscuous mode
[  555.327057][T13874] ÿÿÿÿ: left allmulticast mode
[  555.339972][T13874] ÿÿÿÿ: left promiscuous mode
[  555.358778][T13874] bridge0: port 1(ÿÿÿÿ) entered disabled state
[  555.396476][T13874] bridge_slave_1: left promiscuous mode
[  555.418513][T13874] bridge0: port 2(bridge_slave_1) entered disabled state
[  555.453399][T13874] bond0: (slave bond_slave_0): Releasing backup interface
[  555.491135][T13874] bond0: (slave bond_slave_1): Releasing backup interface
[  555.554221][ T5852] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[  555.570590][T13874] team0: Port device team_slave_0 removed
[  555.617037][T13874] team0: Port device team_slave_1 removed
[  555.632424][T13874] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  555.651158][T13874] batman_adv: batadv0: Removing interface: batadv_slave_0
[  555.672370][T13874] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  555.691851][T13874] batman_adv: batadv0: Removing interface: batadv_slave_1
[  555.723145][T13874] bond2: (slave gretap1): Releasing active interface
[  555.736001][ T5852] usb 3-1: Using ep0 maxpacket: 32
[  555.747381][ T5852] usb 3-1: config 61 has an invalid descriptor of length 34, skipping remainder of the config
[  555.758557][ T5852] usb 3-1: config 61 has 0 interfaces, different from the descriptor's value: 1
[  555.771534][T13877] team0: Device bond0 is up. Set it down before adding it as a team port
[  555.789232][ T5852] usb 3-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00
[  555.809299][ T5852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  556.224689][ T5933] usb 1-1: new full-speed USB device number 101 using dummy_hcd
[  556.396984][ T5933] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  556.408955][ T5933] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  556.418973][ T5933] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  556.428619][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  556.448438][ T5933] usb 1-1: config 0 descriptor??
[  556.455359][ T5960] usb 3-1: USB disconnect, device number 89
[  556.486377][ T5933] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  556.512800][ T5933] dvb-usb: bulk message failed: -22 (3/0)
[  556.555803][ T5933] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  556.605780][ T5933] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  556.626933][ T5933] usb 1-1: media controller created
[  556.645991][ T5933] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  556.668310][ T5933] dvb-usb: bulk message failed: -22 (6/0)
[  556.674412][ T5933] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  556.692877][T13942] dvb-usb: bulk message failed: -22 (2/0)
[  556.711261][ T5933] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input92
[  556.725806][T13954] FAULT_INJECTION: forcing a failure.
[  556.725806][T13954] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  556.769188][ T5933] dvb-usb: schedule remote query interval to 150 msecs.
[  556.790938][ T5933] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  556.803273][ T5933] usb 1-1: USB disconnect, device number 101
[  556.856411][ T5933] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  556.876849][T13954] CPU: 0 UID: 0 PID: 13954 Comm: syz.1.2310 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  556.876876][T13954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  556.876887][T13954] Call Trace:
[  556.876895][T13954]  <TASK>
[  556.876904][T13954]  dump_stack_lvl+0x189/0x250
[  556.876930][T13954]  ? __pfx____ratelimit+0x10/0x10
[  556.876955][T13954]  ? __pfx_dump_stack_lvl+0x10/0x10
[  556.876971][T13954]  ? __pfx__printk+0x10/0x10
[  556.876991][T13954]  ? __pfx_migrate_enable+0x10/0x10
[  556.877014][T13954]  should_fail_ex+0x414/0x560
[  556.877038][T13954]  _copy_to_user+0x31/0xb0
[  556.877057][T13954]  generic_map_lookup_batch+0x8e8/0xcc0
[  556.877088][T13954]  ? __pfx_generic_map_lookup_batch+0x10/0x10
[  556.877106][T13954]  ? __fget_files+0x2a/0x420
[  556.877128][T13954]  ? __pfx_generic_map_lookup_batch+0x10/0x10
[  556.877146][T13954]  bpf_map_do_batch+0x25b/0x5f0
[  556.877161][T13954]  ? security_bpf+0x7e/0x300
[  556.877181][T13954]  __sys_bpf+0x70c/0x860
[  556.877196][T13954]  ? __pfx___sys_bpf+0x10/0x10
[  556.877225][T13954]  ? ksys_write+0x22a/0x250
[  556.877249][T13954]  __ia32_sys_bpf+0x7c/0x90
[  556.877269][T13954]  __do_fast_syscall_32+0xb6/0x2b0
[  556.877285][T13954]  ? lockdep_hardirqs_on+0x9c/0x150
[  556.877343][T13954]  do_fast_syscall_32+0x34/0x80
[  556.877357][T13954]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  556.877375][T13954] RIP: 0023:0xf707e539
[  556.877388][T13954] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  556.877400][T13954] RSP: 002b:00000000f506e55c EFLAGS: 00000206 ORIG_RAX: 0000000000000165
[  556.877415][T13954] RAX: ffffffffffffffda RBX: 0000000000000018 RCX: 00000000800003c0
[  556.877426][T13954] RDX: 0000000000000038 RSI: 0000000000000000 RDI: 0000000000000000
[  556.877434][T13954] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  556.877442][T13954] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  556.877451][T13954] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  556.877471][T13954]  </TASK>
[  557.451966][T13969] FAULT_INJECTION: forcing a failure.
[  557.451966][T13969] name failslab, interval 1, probability 0, space 0, times 0
[  557.541902][T13969] CPU: 0 UID: 0 PID: 13969 Comm: syz.4.2315 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  557.541929][T13969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  557.541940][T13969] Call Trace:
[  557.541948][T13969]  <TASK>
[  557.541957][T13969]  dump_stack_lvl+0x189/0x250
[  557.541984][T13969]  ? __pfx____ratelimit+0x10/0x10
[  557.542017][T13969]  ? __pfx_dump_stack_lvl+0x10/0x10
[  557.542032][T13969]  ? __pfx__printk+0x10/0x10
[  557.542054][T13969]  should_fail_ex+0x414/0x560
[  557.542073][T13969]  should_failslab+0xa8/0x100
[  557.542087][T13969]  __kmalloc_cache_noprof+0x70/0x3d0
[  557.542100][T13969]  ? sctp_add_bind_addr+0x8c/0x370
[  557.542115][T13969]  sctp_add_bind_addr+0x8c/0x370
[  557.542128][T13969]  sctp_copy_local_addr_list+0x30b/0x4e0
[  557.542141][T13969]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  557.542152][T13969]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  557.542164][T13969]  ? sctp_v6_is_any+0x64/0x80
[  557.542177][T13969]  ? sctp_copy_one_addr+0x93/0x360
[  557.542190][T13969]  sctp_bind_addr_copy+0xb3/0x3c0
[  557.542201][T13969]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  557.542218][T13969]  sctp_connect_new_asoc+0x2e0/0x690
[  557.542234][T13969]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  557.542246][T13969]  ? __local_bh_enable_ip+0x12d/0x1c0
[  557.542264][T13969]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  557.542275][T13969]  ? security_sctp_bind_connect+0x7e/0x2e0
[  557.542290][T13969]  sctp_sendmsg+0x155c/0x2810
[  557.542310][T13969]  ? __pfx_sctp_sendmsg+0x10/0x10
[  557.542324][T13969]  ? aa_sk_perm+0x81e/0x950
[  557.542341][T13969]  ? __pfx_aa_sk_perm+0x10/0x10
[  557.542357][T13969]  ? sock_rps_record_flow+0x19/0x410
[  557.542370][T13969]  ? inet_sendmsg+0x2f4/0x370
[  557.542382][T13969]  __sock_sendmsg+0x19c/0x270
[  557.542397][T13969]  ____sys_sendmsg+0x505/0x830
[  557.542425][T13969]  ? __pfx_____sys_sendmsg+0x10/0x10
[  557.542456][T13969]  ___sys_sendmsg+0x21f/0x2a0
[  557.542472][T13969]  ? __pfx____sys_sendmsg+0x10/0x10
[  557.542504][T13969]  ? __fget_files+0x2a/0x420
[  557.542518][T13969]  ? __fget_files+0x3a0/0x420
[  557.542537][T13969]  __sys_sendmsg+0x164/0x220
[  557.542551][T13969]  ? __pfx___sys_sendmsg+0x10/0x10
[  557.542572][T13969]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  557.542583][T13969]  ? lockdep_hardirqs_on+0x9c/0x150
[  557.542600][T13969]  __do_fast_syscall_32+0xb6/0x2b0
[  557.542610][T13969]  ? lockdep_hardirqs_on+0x9c/0x150
[  557.542628][T13969]  do_fast_syscall_32+0x34/0x80
[  557.542638][T13969]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  557.542651][T13969] RIP: 0023:0xf70be539
[  557.542661][T13969] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  557.542670][T13969] RSP: 002b:00000000f50ae55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  557.542681][T13969] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0
[  557.542689][T13969] RDX: 000000002600c055 RSI: 0000000000000000 RDI: 0000000000000000
[  557.542695][T13969] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  557.542701][T13969] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  557.542707][T13969] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  557.542722][T13969]  </TASK>
[  558.168130][T13973] FAULT_INJECTION: forcing a failure.
[  558.168130][T13973] name failslab, interval 1, probability 0, space 0, times 0
[  558.284243][T13973] CPU: 0 UID: 0 PID: 13973 Comm: syz.0.2317 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  558.284270][T13973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  558.284282][T13973] Call Trace:
[  558.284290][T13973]  <TASK>
[  558.284298][T13973]  dump_stack_lvl+0x189/0x250
[  558.284324][T13973]  ? __pfx____ratelimit+0x10/0x10
[  558.284349][T13973]  ? __pfx_dump_stack_lvl+0x10/0x10
[  558.284370][T13973]  ? __pfx__printk+0x10/0x10
[  558.284396][T13973]  ? __pfx___might_resched+0x10/0x10
[  558.284416][T13973]  ? fs_reclaim_acquire+0x7d/0x100
[  558.284438][T13973]  should_fail_ex+0x414/0x560
[  558.284456][T13973]  should_failslab+0xa8/0x100
[  558.284471][T13973]  __kmalloc_noprof+0xcb/0x4f0
[  558.284483][T13973]  ? kfree+0x4d/0x440
[  558.284492][T13973]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  558.284505][T13973]  tomoyo_realpath_from_path+0xe3/0x5d0
[  558.284516][T13973]  ? tomoyo_domain+0xd9/0x130
[  558.284529][T13973]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  558.284543][T13973]  tomoyo_path_number_perm+0x1e8/0x5a0
[  558.284559][T13973]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  558.284582][T13973]  ? __lock_acquire+0xab9/0xd20
[  558.284603][T13973]  ? __fget_files+0x2a/0x420
[  558.284620][T13973]  ? __fget_files+0x3a0/0x420
[  558.284632][T13973]  ? __fget_files+0x2a/0x420
[  558.284647][T13973]  security_file_ioctl_compat+0xcb/0x2d0
[  558.284662][T13973]  __ia32_compat_sys_ioctl+0x128/0x840
[  558.284676][T13973]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  558.284687][T13973]  ? __fget_files+0x3a0/0x420
[  558.284704][T13973]  ? fput+0xa0/0xd0
[  558.284719][T13973]  ? ksys_write+0x22a/0x250
[  558.284735][T13973]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  558.284746][T13973]  ? lockdep_hardirqs_on+0x9c/0x150
[  558.284763][T13973]  __do_fast_syscall_32+0xb6/0x2b0
[  558.284773][T13973]  ? lockdep_hardirqs_on+0x9c/0x150
[  558.284791][T13973]  do_fast_syscall_32+0x34/0x80
[  558.284801][T13973]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  558.284813][T13973] RIP: 0023:0xf7f83539
[  558.284824][T13973] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  558.284833][T13973] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  558.284849][T13973] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000ae80
[  558.284856][T13973] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  558.284862][T13973] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  558.284868][T13973] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  558.284875][T13973] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  558.284890][T13973]  </TASK>
[  558.284913][T13973] ERROR: Out of memory at tomoyo_realpath_from_path.
[  558.489619][T13984] FAULT_INJECTION: forcing a failure.
[  558.489619][T13984] name failslab, interval 1, probability 0, space 0, times 0
[  558.681130][T13984] CPU: 1 UID: 0 PID: 13984 Comm: syz.2.2320 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  558.681157][T13984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  558.681169][T13984] Call Trace:
[  558.681177][T13984]  <TASK>
[  558.681186][T13984]  dump_stack_lvl+0x189/0x250
[  558.681212][T13984]  ? __pfx____ratelimit+0x10/0x10
[  558.681239][T13984]  ? __pfx_dump_stack_lvl+0x10/0x10
[  558.681260][T13984]  ? __pfx__printk+0x10/0x10
[  558.681289][T13984]  ? __pfx___might_resched+0x10/0x10
[  558.681315][T13984]  should_fail_ex+0x414/0x560
[  558.681345][T13984]  should_failslab+0xa8/0x100
[  558.681368][T13984]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  558.681391][T13984]  ? __alloc_skb+0x112/0x2d0
[  558.681416][T13984]  __alloc_skb+0x112/0x2d0
[  558.681440][T13984]  netlink_sendmsg+0x5c6/0xb30
[  558.681472][T13984]  ? __pfx_netlink_sendmsg+0x10/0x10
[  558.681497][T13984]  ? __import_iovec+0x5d4/0x7f0
[  558.681515][T13984]  ? aa_sock_msg_perm+0x94/0x160
[  558.681543][T13984]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  558.681568][T13984]  ? __pfx_netlink_sendmsg+0x10/0x10
[  558.681590][T13984]  __sock_sendmsg+0x219/0x270
[  558.681611][T13984]  ____sys_sendmsg+0x505/0x830
[  558.681640][T13984]  ? __pfx_____sys_sendmsg+0x10/0x10
[  558.681680][T13984]  ___sys_sendmsg+0x21f/0x2a0
[  558.681704][T13984]  ? __pfx____sys_sendmsg+0x10/0x10
[  558.681764][T13984]  ? __fget_files+0x2a/0x420
[  558.681786][T13984]  ? __fget_files+0x3a0/0x420
[  558.681819][T13984]  __sys_sendmsg+0x164/0x220
[  558.681844][T13984]  ? __pfx___sys_sendmsg+0x10/0x10
[  558.681882][T13984]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  558.681907][T13984]  ? lockdep_hardirqs_on+0x9c/0x150
[  558.681934][T13984]  __do_fast_syscall_32+0xb6/0x2b0
[  558.681953][T13984]  ? lockdep_hardirqs_on+0x9c/0x150
[  558.681982][T13984]  do_fast_syscall_32+0x34/0x80
[  558.682000][T13984]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  558.682020][T13984] RIP: 0023:0xf7f84539
[  558.682036][T13984] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  558.682051][T13984] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[  558.682071][T13984] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000680
[  558.682085][T13984] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000
[  558.682096][T13984] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  558.682107][T13984] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  558.682118][T13984] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  558.682145][T13984]  </TASK>
[  559.257373][T14007] program syz.0.2328 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  559.844453][ T5852] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[  560.004803][ T5852] usb 2-1: device descriptor read/64, error -71
[  560.079391][T14019] sg_write: data in/out 512/2 bytes for SCSI command 0xb7-- guessing data in;
[  560.079391][T14019]    program syz.3.2324 not setting count and/or reply_len properly
[  560.247653][T14014] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  560.262793][T14014] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  560.272930][T14014] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  560.281782][T14014] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  560.288303][T14014] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  560.334204][ T5852] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[  560.484272][ T5852] usb 2-1: device descriptor read/64, error -71
[  560.596521][ T5852] usb usb2-port1: attempt power cycle
[  560.954675][ T5852] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[  560.989153][ T5852] usb 2-1: device descriptor read/8, error -71
[  561.244384][ T5852] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[  561.265306][ T5852] usb 2-1: device descriptor read/8, error -71
[  561.375154][ T5852] usb usb2-port1: unable to enumerate USB device
[  561.434589][  T923] usb 5-1: new full-speed USB device number 79 using dummy_hcd
[  561.636922][  T923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  561.657623][  T923] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[  561.690248][  T923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  561.730739][  T923] usb 5-1: config 0 descriptor??
[  561.953602][  T923] usbhid 5-1:0.0: can't add hid device: -71
[  561.968768][  T923] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  561.986350][  T923] usb 5-1: USB disconnect, device number 79
[  562.334268][T10936] Bluetooth: hci3: command 0x0c1a tx timeout
[  562.340379][   T51] Bluetooth: hci2: command 0x0c1a tx timeout
[  562.340405][ T5847] Bluetooth: hci1: command 0x0c1a tx timeout
[  562.346824][   T51] Bluetooth: hci4: command 0x0405 tx timeout
[  562.356040][ T5847] Bluetooth: hci0: command 0x0c1a tx timeout
[  562.537104][T14052] netlink: 'syz.2.2342': attribute type 83 has an invalid length.
[  563.047041][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[  563.053358][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  564.314230][  T923] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[  564.514611][ T5912] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[  564.526433][  T923] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config
[  564.562379][  T923] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  564.586811][  T923] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  564.600397][  T923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  564.623841][  T923] usb 5-1: SerialNumber: syz
[  564.657675][ T5912] usb 2-1: device descriptor read/64, error -71
[  564.698823][T14094] netlink: 'syz.3.2351': attribute type 9 has an invalid length.
[  564.895357][ T5912] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[  564.957363][T14083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2346'.
[  565.044238][ T5912] usb 2-1: device descriptor read/64, error -71
[  565.154451][ T5912] usb usb2-port1: attempt power cycle
[  565.394255][ T5852] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[  565.494393][ T5912] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[  565.524983][ T5912] usb 2-1: device descriptor read/8, error -71
[  565.557321][ T5852] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  565.567929][ T5852] usb 3-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c
[  565.578826][ T5852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  565.591956][ T5852] usb 3-1: config 0 descriptor??
[  565.604627][ T5852] usb 3-1: bad CDC descriptors
[  565.774367][ T5912] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[  565.816486][ T5912] usb 2-1: device descriptor read/8, error -71
[  565.893028][ T5852] usb 3-1: USB disconnect, device number 90
[  565.924422][ T5912] usb usb2-port1: unable to enumerate USB device
[  566.022762][T14127] netlink: 112 bytes leftover after parsing attributes in process `syz.3.2360'.
[  566.991720][  T923] usb 5-1: 0:2 : does not exist
[  567.044334][  T923] usb 5-1: USB disconnect, device number 80
[  567.115793][ T5999] udevd[5999]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  567.564237][  T923] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[  567.760576][  T923] usb 5-1: config 0 has no interfaces?
[  567.784374][  T923] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  567.813437][  T923] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  567.823346][  T923] usb 5-1: Manufacturer: syz
[  567.845359][  T923] usb 5-1: config 0 descriptor??
[  567.945627][T14150] xt_SECMARK: invalid mode: 0
[  568.119395][T14152] mmap: syz.0.2367 (14152): VmData 37384192 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data.
[  568.373150][T14156] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  568.463501][T14158] ip6tnl1: entered promiscuous mode
[  568.530636][T14158] ip6tnl1: entered allmulticast mode
[  568.547594][T14158] team0: Device ip6tnl1 is up. Set it down before adding it as a team port
[  568.859970][T14167] netlink: 'syz.0.2373': attribute type 10 has an invalid length.
[  569.377546][T14179] netlink: 'syz.3.2378': attribute type 10 has an invalid length.
[  569.393529][T14179] team0: Device bond0 is up. Set it down before adding it as a team port
[  569.664755][   T43] tipc: Subscription rejected, illegal request
[  569.930552][ T5912] usb 4-1: new low-speed USB device number 96 using dummy_hcd
[  570.104229][ T5912] usb 4-1: Invalid ep0 maxpacket: 32
[  570.132913][   T10] usb 5-1: USB disconnect, device number 81
[  570.228026][T14190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2382'.
[  570.246461][ T5912] usb 4-1: new low-speed USB device number 97 using dummy_hcd
[  570.335481][T14190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2382'.
[  570.347405][T14190] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2382'.
[  570.401368][T14190] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2382'.
[  570.424372][ T5912] usb 4-1: Invalid ep0 maxpacket: 32
[  570.433859][ T5912] usb usb4-port1: attempt power cycle
[  570.784305][ T5912] usb 4-1: new low-speed USB device number 98 using dummy_hcd
[  570.862131][ T5912] usb 4-1: Invalid ep0 maxpacket: 32
[  570.997757][ T5912] usb 4-1: new low-speed USB device number 99 using dummy_hcd
[  571.025000][ T5912] usb 4-1: Invalid ep0 maxpacket: 32
[  571.032680][ T5912] usb usb4-port1: unable to enumerate USB device
[  571.548185][T14207] FAULT_INJECTION: forcing a failure.
[  571.548185][T14207] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  571.561542][T14207] CPU: 0 UID: 0 PID: 14207 Comm: syz.2.2387 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  571.561567][T14207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  571.561578][T14207] Call Trace:
[  571.561587][T14207]  <TASK>
[  571.561596][T14207]  dump_stack_lvl+0x189/0x250
[  571.561624][T14207]  ? __pfx____ratelimit+0x10/0x10
[  571.561651][T14207]  ? __pfx_dump_stack_lvl+0x10/0x10
[  571.561672][T14207]  ? __pfx__printk+0x10/0x10
[  571.561707][T14207]  should_fail_ex+0x414/0x560
[  571.561738][T14207]  _copy_to_user+0x31/0xb0
[  571.561762][T14207]  simple_read_from_buffer+0xe1/0x170
[  571.561790][T14207]  proc_fail_nth_read+0x1df/0x250
[  571.561818][T14207]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  571.561846][T14207]  ? rw_verify_area+0x258/0x650
[  571.561872][T14207]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  571.561897][T14207]  vfs_read+0x200/0x980
[  571.561923][T14207]  ? __pfx___mutex_lock+0x10/0x10
[  571.561942][T14207]  ? __pfx_vfs_read+0x10/0x10
[  571.561964][T14207]  ? __fget_files+0x2a/0x420
[  571.561992][T14207]  ? __fget_files+0x3a0/0x420
[  571.562014][T14207]  ? __fget_files+0x2a/0x420
[  571.562046][T14207]  ksys_read+0x145/0x250
[  571.562070][T14207]  ? __pfx_ksys_read+0x10/0x10
[  571.562092][T14207]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  571.562111][T14207]  ? lockdep_hardirqs_on+0x9c/0x150
[  571.562139][T14207]  __do_fast_syscall_32+0xb6/0x2b0
[  571.562157][T14207]  ? lockdep_hardirqs_on+0x9c/0x150
[  571.562175][T14207]  do_fast_syscall_32+0x34/0x80
[  571.562185][T14207]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  571.562198][T14207] RIP: 0023:0xf7f84539
[  571.562209][T14207] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  571.562218][T14207] RSP: 002b:00000000f50a6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[  571.562233][T14207] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f50a6620
[  571.562245][T14207] RDX: 000000000000000f RSI: 00000000f7413ff4 RDI: 0000000000000000
[  571.562256][T14207] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  571.562266][T14207] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  571.562277][T14207] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  571.562304][T14207]  </TASK>
[  571.890281][T14209] FAULT_INJECTION: forcing a failure.
[  571.890281][T14209] name failslab, interval 1, probability 0, space 0, times 0
[  571.934255][T14209] CPU: 0 UID: 0 PID: 14209 Comm: syz.4.2389 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  571.934288][T14209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  571.934300][T14209] Call Trace:
[  571.934308][T14209]  <TASK>
[  571.934317][T14209]  dump_stack_lvl+0x189/0x250
[  571.934344][T14209]  ? __pfx____ratelimit+0x10/0x10
[  571.934371][T14209]  ? __pfx_dump_stack_lvl+0x10/0x10
[  571.934392][T14209]  ? __pfx__printk+0x10/0x10
[  571.934421][T14209]  ? __pfx___might_resched+0x10/0x10
[  571.934446][T14209]  should_fail_ex+0x414/0x560
[  571.934476][T14209]  should_failslab+0xa8/0x100
[  571.934501][T14209]  __kmalloc_cache_noprof+0x70/0x3d0
[  571.934521][T14209]  ? kobject_uevent_env+0x27c/0x8c0
[  571.934550][T14209]  kobject_uevent_env+0x27c/0x8c0
[  571.934570][T14209]  ? bus_add_driver+0x49a/0x640
[  571.934597][T14209]  driver_register+0x2d4/0x320
[  571.934624][T14209]  usb_gadget_register_driver_owner+0xf9/0x270
[  571.934651][T14209]  raw_ioctl+0x149a/0x3c90
[  571.934675][T14209]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  571.934700][T14209]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  571.934723][T14209]  ? tomoyo_path_number_perm+0x4e2/0x5a0
[  571.934745][T14209]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  571.934768][T14209]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  571.934791][T14209]  ? __pfx_raw_ioctl+0x10/0x10
[  571.934815][T14209]  ? page_table_check_set+0x18d/0x730
[  571.934846][T14209]  ? __lock_acquire+0xab9/0xd20
[  571.934884][T14209]  ? __fget_files+0x2a/0x420
[  571.934916][T14209]  ? __fget_files+0x3a0/0x420
[  571.934937][T14209]  ? __fget_files+0x2a/0x420
[  571.934962][T14209]  ? bpf_lsm_file_ioctl_compat+0x9/0x20
[  571.934985][T14209]  __ia32_compat_sys_ioctl+0x540/0x840
[  571.935008][T14209]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[  571.935026][T14209]  ? count_memcg_event_mm+0x21/0x260
[  571.935058][T14209]  ? exc_page_fault+0x76/0xf0
[  571.935091][T14209]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[  571.935110][T14209]  ? lockdep_hardirqs_on+0x9c/0x150
[  571.935137][T14209]  __do_fast_syscall_32+0xb6/0x2b0
[  571.935156][T14209]  ? lockdep_hardirqs_on+0x9c/0x150
[  571.935189][T14209]  do_fast_syscall_32+0x34/0x80
[  571.935208][T14209]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[  571.935228][T14209] RIP: 0023:0xf70be539
[  571.935244][T14209] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  571.935260][T14209] RSP: 002b:00000000f50ac484 EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[  571.935280][T14209] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000005501
[  571.935293][T14209] RDX: 0000000000000000 RSI: 00000000f7423ff4 RDI: 00000000f50ac4e8
[  571.935305][T14209] RBP: 00000000f7423ff4 R08: 0000000000000000 R09: 0000000000000000
[  571.935316][T14209] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  571.935327][T14209] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  571.935354][T14209]  </TASK>
[  572.364368][T11524] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[  572.536249][T11524] usb 5-1: Using ep0 maxpacket: 16
[  572.543111][T11524] usb 5-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config
[  572.554313][T11524] usb 5-1: config 254 has 0 interfaces, different from the descriptor's value: 1
[  572.567223][   T30] audit: type=1326 audit(1752421634.113:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14212 comm="syz.0.2391" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f83539 code=0x0
[  572.590561][T11524] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1
[  572.603819][T11524] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  572.625753][T11524] usb 5-1: Product: syz
[  572.633820][T11524] usb 5-1: Manufacturer: syz
[  572.639036][T11524] usb 5-1: SerialNumber: syz
[  572.886292][   T10] usb 5-1: USB disconnect, device number 82
[  572.984266][ T5852] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[  573.054842][  T923] usb 4-1: new high-speed USB device number 100 using dummy_hcd
[  573.197176][ T5852] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  573.211793][ T5852] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[  573.222401][  T923] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  573.238437][ T5852] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  573.247888][  T923] usb 4-1: config 0 has no interfaces?
[  573.253466][  T923] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  573.263697][ T5852] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  573.273319][  T923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  573.317266][  T923] usb 4-1: config 0 descriptor??
[  573.502041][T14224] kAFS: unable to lookup cell '(,c¾û/'
[  573.509016][T14224] kAFS: unable to lookup cell '.,'
[  573.539443][T14226] syzkaller1: entered promiscuous mode
[  573.545544][T14226] syzkaller1: entered allmulticast mode
[  573.675091][T14236] netlink: 'syz.3.2393': attribute type 2 has an invalid length.
[  574.509700][   T10] usb 4-1: USB disconnect, device number 100
[  574.926891][T11524] usb 1-1: new high-speed USB device number 102 using dummy_hcd
[  575.084223][T11524] usb 1-1: Using ep0 maxpacket: 16
[  575.108150][T11524] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  575.124276][ T5852] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[  575.195094][T11524] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  575.204543][T11524] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  575.249388][T11524] usb 1-1: config 0 descriptor??
[  575.296335][ T5852] usb 3-1: Using ep0 maxpacket: 8
[  575.373977][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  575.430226][ T5852] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  575.506058][ T5852] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00
[  575.556249][ T5852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  575.583672][   T10] usb 2-1: USB disconnect, device number 103
[  575.665119][ T5852] usb 3-1: config 0 descriptor??
[  575.702237][T11524] mcp2221 0003:04D8:00DD.0031: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0
[  575.896239][    C0] ==================================================================
[  575.904332][    C0] BUG: KASAN: slab-out-of-bounds in mcp2221_raw_event+0xfcd/0x1190
[  575.912256][    C0] Read of size 1 at addr ffff88804584ffff by task swapper/0/0
[  575.919711][    C0] 
[  575.922046][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  575.922076][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  575.922093][    C0] Call Trace:
[  575.922104][    C0]  <IRQ>
[  575.922110][    C0]  dump_stack_lvl+0x189/0x250
[  575.922128][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  575.922144][    C0]  ? rcu_is_watching+0x15/0xb0
[  575.922158][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  575.922186][    C0]  ? rcu_is_watching+0x15/0xb0
[  575.922213][    C0]  ? lock_release+0x4b/0x3e0
[  575.922235][    C0]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  575.922261][    C0]  ? __virt_addr_valid+0x1c8/0x5c0
[  575.922275][    C0]  ? __virt_addr_valid+0x4a5/0x5c0
[  575.922289][    C0]  print_report+0xca/0x230
[  575.922300][    C0]  ? mcp2221_raw_event+0xfcd/0x1190
[  575.922319][    C0]  kasan_report+0x118/0x150
[  575.922350][    C0]  ? mcp2221_raw_event+0xfcd/0x1190
[  575.922384][    C0]  mcp2221_raw_event+0xfcd/0x1190
[  575.922407][    C0]  ? down_trylock+0x50/0xb0
[  575.922419][    C0]  hid_input_report+0x40a/0x520
[  575.922434][    C0]  ? __pfx_mcp2221_raw_event+0x10/0x10
[  575.922450][    C0]  hid_irq_in+0x47e/0x6d0
[  575.922473][    C0]  __usb_hcd_giveback_urb+0x417/0x690
[  575.922504][    C0]  ? usb_hcd_unlink_urb_from_ep+0x2c/0x110
[  575.922540][    C0]  ? __pfx___usb_hcd_giveback_urb+0x10/0x10
[  575.922562][    C0]  ? usb_hcd_giveback_urb+0x10e/0x420
[  575.922576][    C0]  dummy_timer+0x862/0x4550
[  575.922604][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  575.922631][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  575.922659][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  575.922686][    C0]  __hrtimer_run_queues+0x529/0xc60
[  575.922707][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  575.922720][    C0]  ? read_tsc+0x9/0x20
[  575.922730][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  575.922745][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  575.922764][    C0]  handle_softirqs+0x286/0x870
[  575.922791][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  575.922819][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  575.922844][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  575.922862][    C0]  __irq_exit_rcu+0xca/0x1f0
[  575.922874][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  575.922888][    C0]  irq_exit_rcu+0x9/0x30
[  575.922900][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  575.922932][    C0]  </IRQ>
[  575.922940][    C0]  <TASK>
[  575.922950][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  575.922975][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  575.922999][    C0] Code: d3 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 ed 18 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  575.923010][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2
[  575.923022][    C0] RAX: e9c745d93bc8d300 RBX: ffffffff81976a48 RCX: e9c745d93bc8d300
[  575.923031][    C0] RDX: 0000000000000001 RSI: ffffffff8d998d5c RDI: ffffffff8be29d80
[  575.923040][    C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb
[  575.923050][    C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa1f5f0
[  575.923067][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50
[  575.923086][    C0]  ? do_idle+0x1e8/0x510
[  575.923116][    C0]  default_idle+0x13/0x20
[  575.923139][    C0]  default_idle_call+0x74/0xb0
[  575.923151][    C0]  do_idle+0x1e8/0x510
[  575.923165][    C0]  ? __pfx_do_idle+0x10/0x10
[  575.923187][    C0]  cpu_startup_entry+0x44/0x60
[  575.923204][    C0]  rest_init+0x2de/0x300
[  575.923230][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[  575.923257][    C0]  start_kernel+0x47d/0x500
[  575.923287][    C0]  x86_64_start_reservations+0x24/0x30
[  575.923300][    C0]  x86_64_start_kernel+0x143/0x1c0
[  575.923311][    C0]  common_startup_64+0x13e/0x147
[  575.923330][    C0]  </TASK>
[  575.923335][    C0] 
[  576.290837][    C0] Allocated by task 6044:
[  576.295158][    C0]  kasan_save_track+0x3e/0x80
[  576.299841][    C0]  __kasan_kmalloc+0x93/0xb0
[  576.304423][    C0]  __kmalloc_noprof+0x27a/0x4f0
[  576.309268][    C0]  tomoyo_realpath_from_path+0xe3/0x5d0
[  576.314796][    C0]  tomoyo_check_open_permission+0x1c1/0x3b0
[  576.320694][    C0]  security_file_open+0xb1/0x270
[  576.325622][    C0]  do_dentry_open+0x35e/0x1970
[  576.330743][    C0]  vfs_open+0x3b/0x340
[  576.334896][    C0]  path_openat+0x2ee5/0x3830
[  576.339501][    C0]  do_filp_open+0x1fa/0x410
[  576.344001][    C0]  do_sys_openat2+0x121/0x1c0
[  576.348690][    C0]  __x64_sys_openat+0x138/0x170
[  576.353536][    C0]  do_syscall_64+0xfa/0x3b0
[  576.358040][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.363943][    C0] 
[  576.366262][    C0] Freed by task 6044:
[  576.370246][    C0]  kasan_save_track+0x3e/0x80
[  576.374918][    C0]  kasan_save_free_info+0x46/0x50
[  576.379942][    C0]  __kasan_slab_free+0x62/0x70
[  576.384695][    C0]  kfree+0x18e/0x440
[  576.388594][    C0]  tomoyo_realpath_from_path+0x598/0x5d0
[  576.394208][    C0]  tomoyo_check_open_permission+0x1c1/0x3b0
[  576.400101][    C0]  security_file_open+0xb1/0x270
[  576.405044][    C0]  do_dentry_open+0x35e/0x1970
[  576.409797][    C0]  vfs_open+0x3b/0x340
[  576.413851][    C0]  path_openat+0x2ee5/0x3830
[  576.418426][    C0]  do_filp_open+0x1fa/0x410
[  576.423027][    C0]  do_sys_openat2+0x121/0x1c0
[  576.427716][    C0]  __x64_sys_openat+0x138/0x170
[  576.432570][    C0]  do_syscall_64+0xfa/0x3b0
[  576.437063][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.442953][    C0] 
[  576.445267][    C0] The buggy address belongs to the object at ffff88804584e000
[  576.445267][    C0]  which belongs to the cache kmalloc-4k of size 4096
[  576.459326][    C0] The buggy address is located 4095 bytes to the right of
[  576.459326][    C0]  allocated 4096-byte region [ffff88804584e000, ffff88804584f000)
[  576.474153][    C0] 
[  576.476475][    C0] The buggy address belongs to the physical page:
[  576.483054][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x45848
[  576.491797][    C0] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  576.500272][    C0] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  576.507807][    C0] page_type: f5(slab)
[  576.511787][    C0] raw: 00fff00000000040 ffff88801a442140 dead000000000122 0000000000000000
[  576.520369][    C0] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  576.528960][    C0] head: 00fff00000000040 ffff88801a442140 dead000000000122 0000000000000000
[  576.537638][    C0] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000
[  576.546312][    C0] head: 00fff00000000003 ffffea0001161201 00000000ffffffff 00000000ffffffff
[  576.554992][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  576.563648][    C0] page dumped because: kasan: bad access detected
[  576.570074][    C0] page_owner tracks the page as allocated
[  576.575838][    C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6044, tgid 6044 (udevd), ts 566047296802, free_ts 565850037394
[  576.595976][    C0]  post_alloc_hook+0x240/0x2a0
[  576.600742][    C0]  get_page_from_freelist+0x21e4/0x22c0
[  576.606296][    C0]  __alloc_frozen_pages_noprof+0x181/0x370
[  576.612135][    C0]  alloc_pages_mpol+0x232/0x4a0
[  576.616985][    C0]  allocate_slab+0x8a/0x3b0
[  576.621508][    C0]  ___slab_alloc+0xbfc/0x1480
[  576.626181][    C0]  __kmalloc_noprof+0x305/0x4f0
[  576.631046][    C0]  tomoyo_realpath_from_path+0xe3/0x5d0
[  576.636614][    C0]  tomoyo_check_open_permission+0x1c1/0x3b0
[  576.642531][    C0]  security_file_open+0xb1/0x270
[  576.647491][    C0]  do_dentry_open+0x35e/0x1970
[  576.652255][    C0]  vfs_open+0x3b/0x340
[  576.656343][    C0]  path_openat+0x2ee5/0x3830
[  576.660941][    C0]  do_filp_open+0x1fa/0x410
[  576.665440][    C0]  do_sys_openat2+0x121/0x1c0
[  576.670215][    C0]  __x64_sys_openat+0x138/0x170
[  576.675140][    C0] page last free pid 14121 tgid 14121 stack trace:
[  576.681644][    C0]  __free_frozen_pages+0xc71/0xe70
[  576.686780][    C0]  __put_partials+0x161/0x1c0
[  576.691456][    C0]  put_cpu_partial+0x17c/0x250
[  576.696244][    C0]  __slab_free+0x2f7/0x400
[  576.700680][    C0]  qlist_free_all+0x97/0x140
[  576.705280][    C0]  kasan_quarantine_reduce+0x148/0x160
[  576.710742][    C0]  __kasan_slab_alloc+0x22/0x80
[  576.715604][    C0]  __kmalloc_noprof+0x224/0x4f0
[  576.720464][    C0]  tomoyo_realpath_from_path+0xe3/0x5d0
[  576.726098][    C0]  tomoyo_path_perm+0x213/0x4b0
[  576.730953][    C0]  security_inode_getattr+0x12f/0x330
[  576.736314][    C0]  __x64_sys_newfstat+0xfc/0x200
[  576.741263][    C0]  do_syscall_64+0xfa/0x3b0
[  576.745769][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  576.751656][    C0] 
[  576.753975][    C0] Memory state around the buggy address:
[  576.759605][    C0]  ffff88804584fe80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  576.767675][    C0]  ffff88804584ff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  576.775721][    C0] >ffff88804584ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  576.783777][    C0]                                                                 ^
[  576.791760][    C0]  ffff888045850000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  576.799820][    C0]  ffff888045850080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  576.807876][    C0] ==================================================================
[  576.815963][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  576.823182][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc5-syzkaller-00266-g3f31a806a62e #0 PREEMPT(full) 
[  576.835484][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  576.845550][    C0] Call Trace:
[  576.848846][    C0]  <IRQ>
[  576.851707][    C0]  dump_stack_lvl+0x99/0x250
[  576.856307][    C0]  ? __asan_memcpy+0x40/0x70
[  576.860916][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  576.866121][    C0]  ? __pfx__printk+0x10/0x10
[  576.870717][    C0]  panic+0x2db/0x790
[  576.874598][    C0]  ? __pfx_panic+0x10/0x10
[  576.879022][    C0]  ? do_raw_spin_unlock+0x122/0x240
[  576.884265][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  576.890165][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  576.896495][    C0]  ? mcp2221_raw_event+0xfcd/0x1190
[  576.901704][    C0]  check_panic_on_warn+0x89/0xb0
[  576.906654][    C0]  ? mcp2221_raw_event+0xfcd/0x1190
[  576.911872][    C0]  end_report+0x78/0x160
[  576.916112][    C0]  kasan_report+0x129/0x150
[  576.920633][    C0]  ? mcp2221_raw_event+0xfcd/0x1190
[  576.925825][    C0]  mcp2221_raw_event+0xfcd/0x1190
[  576.930843][    C0]  ? down_trylock+0x50/0xb0
[  576.935337][    C0]  hid_input_report+0x40a/0x520
[  576.940184][    C0]  ? __pfx_mcp2221_raw_event+0x10/0x10
[  576.945644][    C0]  hid_irq_in+0x47e/0x6d0
[  576.949975][    C0]  __usb_hcd_giveback_urb+0x417/0x690
[  576.955332][    C0]  ? usb_hcd_unlink_urb_from_ep+0x2c/0x110
[  576.961157][    C0]  ? __pfx___usb_hcd_giveback_urb+0x10/0x10
[  576.967056][    C0]  ? usb_hcd_giveback_urb+0x10e/0x420
[  576.972458][    C0]  dummy_timer+0x862/0x4550
[  576.976967][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  576.981921][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  576.986840][    C0]  ? __pfx_dummy_timer+0x10/0x10
[  576.991778][    C0]  __hrtimer_run_queues+0x529/0xc60
[  576.997002][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  577.002711][    C0]  ? read_tsc+0x9/0x20
[  577.006797][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  577.012605][    C0]  hrtimer_run_softirq+0x187/0x2b0
[  577.017722][    C0]  handle_softirqs+0x286/0x870
[  577.022503][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  577.027279][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  577.032558][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  577.037781][    C0]  __irq_exit_rcu+0xca/0x1f0
[  577.042388][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  577.047601][    C0]  irq_exit_rcu+0x9/0x30
[  577.051849][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  577.057518][    C0]  </IRQ>
[  577.060449][    C0]  <TASK>
[  577.063386][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  577.069393][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  577.075114][    C0] Code: d3 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 ed 18 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  577.094727][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2
[  577.100787][    C0] RAX: e9c745d93bc8d300 RBX: ffffffff81976a48 RCX: e9c745d93bc8d300
[  577.108745][    C0] RDX: 0000000000000001 RSI: ffffffff8d998d5c RDI: ffffffff8be29d80
[  577.116725][    C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb
[  577.124709][    C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa1f5f0
[  577.132682][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50
[  577.140655][    C0]  ? do_idle+0x1e8/0x510
[  577.144902][    C0]  default_idle+0x13/0x20
[  577.149232][    C0]  default_idle_call+0x74/0xb0
[  577.153979][    C0]  do_idle+0x1e8/0x510
[  577.158035][    C0]  ? __pfx_do_idle+0x10/0x10
[  577.162651][    C0]  cpu_startup_entry+0x44/0x60
[  577.167434][    C0]  rest_init+0x2de/0x300
[  577.171675][    C0]  ? __pfx_x86_late_time_init+0x10/0x10
[  577.177230][    C0]  start_kernel+0x47d/0x500
[  577.181753][    C0]  x86_64_start_reservations+0x24/0x30
[  577.187226][    C0]  x86_64_start_kernel+0x143/0x1c0
[  577.192341][    C0]  common_startup_64+0x13e/0x147
[  577.197317][    C0]  </TASK>
[  577.200591][    C0] Kernel Offset: disabled
[  577.204907][    C0] Rebooting in 86400 seconds..