last executing test programs:

9.800180346s ago: executing program 4 (id=4906):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
lsm_set_self_attr(0x0, &(0x7f0000000240)=ANY=[], 0x20, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c", 0x7}], 0x1}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x7, 0x4, 0xcc, 0x4}]})
sendmsg$nl_route_sched(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x9}}}, 0x24}}, 0x0)
recvmmsg(r5, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xfffffffa}, {{0x0, 0x0, 0x0}, 0x8}], 0x3, 0x2, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f00000000c0), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000f40)=ANY=[@ANYBLOB="850000005f0000003d0a000000000000630a00ff0000000095000000000000003cb61ea78be018d646ddfba75f3693c794759aa4e82bfa48b193952cf637d4596402f29abb31ff2ae4f752547c146ce3eff92d017eda25cc304233b9334d35df00a0728b9c61a6ea303195bc8b52f18f20e3f7bdfaadbe1bf4f4f495"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0)
sendmsg$inet(r2, 0x0, 0x0)

9.682183742s ago: executing program 4 (id=4907):
userfaultfd(0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
syz_usb_connect(0x5, 0x4a, &(0x7f0000000180)=ANY=[], 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xfffffffffffffde7, &(0x7f0000000200)=ANY=[@ANYBLOB="0600ee00"])
r1 = eventfd(0x401)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x840)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, &(0x7f00000005c0)=""/79, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20002)
connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2083, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)

8.031116334s ago: executing program 3 (id=4912):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000002c0)={0x4, &(0x7f0000000040)=[{0x3, 0x71, 0x4, 0x1000}, {0x6, 0x0, 0x6, 0x7f}, {0x1ff, 0x8, 0x4, 0x3}, {0x3, 0x2, 0x3, 0x800}]}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x20)
symlinkat(&(0x7f0000000200)='./file0\x00', r4, &(0x7f0000000140)='./file0\x00')
openat(r4, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4)
ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000180)={0x8000000000000001, 0x8, 0x4, 0x0, 0x0, [{{r0}, 0x3}, {{r2}, 0x6}, {{r4}, 0x61ce}, {{r1}, 0xfb}]})
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b0322940000000000001c00128009000100626f6e6400faffff0b00028008000200372ab620203ba6e311552a1b48e0d294492e", @ANYRES32=0x0, @ANYBLOB="14003500626f6e643000"/20], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008090)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
timer_create(0x3, 0x0, &(0x7f0000000100)=<r5=>0x0)
timer_settime(r5, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x9}}, 0x0)
timer_settime(r5, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000200))
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000051c7055b020000000000010902240001002410040904000f0503000295090500ff0028938c5d09058103000001000d"], 0x0)
recvmmsg(r0, &(0x7f0000000f80)=[{{&(0x7f00000006c0)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000300)=""/200, 0xc8}, {&(0x7f0000004a00)=""/4108, 0x100c}, {&(0x7f0000000540)=""/86, 0x56}], 0x3, &(0x7f0000000600)=""/75, 0x4b}, 0x8}, {{&(0x7f0000001080)=@in6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @loopback}}, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000780)=""/55, 0x37}, 0xfc8b}, {{&(0x7f00000007c0)=@ax25={{0x3, @netrom}, [@bcast, @netrom, @rose, @null, @rose, @null, @rose, @netrom]}, 0xfffffffffffffe79, &(0x7f0000000a00)=[{&(0x7f0000003a00)=""/4096, 0x1000}, {&(0x7f0000000840)=""/213, 0xd5}, {&(0x7f0000000940)=""/153, 0x99}, {&(0x7f0000000a80)=""/187, 0xbb}], 0x4}, 0x8}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000b40)=""/172, 0xac}, {&(0x7f0000001100)=""/194, 0xc2}, {&(0x7f0000000d00)=""/196, 0xc4}, {&(0x7f0000000480)=""/136, 0x7b}, {&(0x7f0000000400)=""/118, 0x76}], 0x5}, 0x4b2}], 0x4, 0x0, 0x0)

6.881417801s ago: executing program 1 (id=4914):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x31c, 0x30, 0x800, 0x71bd2a, 0x25dfdbff, {}, [{0x308, 0x1, [@m_gact={0x170, 0x17, 0x0, 0x0, {{0x9}, {0x64, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x1ae8, 0x5}}, @TCA_GACT_PARMS={0x18, 0x2, {0x65d6, 0x1, 0x8, 0x7, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x12c5, 0x20000005}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x8, 0x0, 0xbd1c, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x583, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xaeb, 0x20000000}}]}, {0xe1, 0x6, "0f617356f0a663079abe295a350af32575b7576a2846e5b3b3d9b048dc90bac2c3b40552dc14f7774371c98d6e2763d4fda783e36f45e224474cc6a0e6a530d841c87c70bbf3448d6187a58197fa3ffb0b318a51ba59415ac311a355fe1d08f8de9966d8ba89a56bfbc37c6af7d37dcdeb618f98f29bf3b05a23cefbbf51193614c08c162352d9eaad342b2f307dd8babd71ab8a1c4f80bbbbccc8ce4d369a33f9c6fc16198b2cfa20bc906e08c92c0642310e03f00a0ed12baa1df64f1bf0502f23ff4d6a5e05aa81fa19a9b88c32227231211d5d298a3c63d5549b1a"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x30, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_bpf={0xb0, 0x10, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x79, 0x6, "bd3a5376a2440c64d6314cc7f446e251aa486d1931d16d2a624d085a1be90b436fdedf917b760ef37b4272893313d629bb02bcd42142bb0469eba6b0eddd9bc3612d9b46c64f145f45c89cb5bb716f4a44dc897bd951f9775a35dd8303b774f0c02924dc414d297ae96eb8e36c2dfb53b25733fc0f"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_simple={0xb4, 0x2, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x2, 0x2, 0x141, 0x7f}}, @TCA_DEF_PARMS={0x18, 0x2, {0x19, 0x2, 0x6, 0x50, 0x5}}, @TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x101, 0x1, 0x7, 0x187e, 0x8}}]}, {0x35, 0x6, "644cfabbe56834b72d4965b0f9c601f7e7e0a903f719e150808ef459921b7b7a784878285ded9060f2020ae3e0393a0927"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x31c}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040800)
r0 = socket(0x10, 0x803, 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x244, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0)
r1 = io_uring_setup(0x4ba, &(0x7f00000001c0)={0x0, 0xc988, 0x2, 0x3, 0x315})
r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000dc0), 0x103041)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r5, 0x29, 0x1, 0x0, &(0x7f00000004c0))
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={<r6=>0x0, 0x61}, &(0x7f0000000100)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000300)={r6, 0x3}, 0xc)
ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000380))
dup3(r3, r1, 0x80000)
rseq(&(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x3, 0xfffffffffffffff6, 0x100000001, 0xffffffffffffffff}, 0x2}, 0x20, 0x1, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

6.802124281s ago: executing program 2 (id=4915):
r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r1}, &(0x7f0000000180)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r5, 0x29, 0xcf, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0})
io_uring_enter(r2, 0x2def, 0x4000, 0x0, 0x0, 0x0)
r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
preadv2(r6, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x4, 0x1)

6.540464645s ago: executing program 4 (id=4916):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000280)={0x2, 0x5, 0x0, 0x5, '\x00', 0x45})
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000300)=""/105, &(0x7f00000001c0)=0x69)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x2c}}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000000)={{0x0, 0x1, 0x0, 0x0, 0x1}})
r4 = openat$kvm(0x0, &(0x7f0000000080), 0x80200, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0104000000000002200000000000006869416b6c6d6e6f706e3856df2139fc729e30e1a91ef9e451bf133b30a476fa63e9c74f183ea6ab649ee70086d0b83136486a37f16cba502f24d3f721a769e96b9a86b716742048e602aba105e99be3949ea444b48ef39ba2883d87dcccde67d93b"], 0x18, 0xfffffffffffffffb)
r6 = eventfd2(0x0, 0x0)
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x0, r6})
r7 = socket$unix(0x1, 0x1, 0x0)
sendmmsg$unix(r7, &(0x7f0000005800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004a80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x811}}], 0x1, 0x0)
ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000180)={0x0, 0x0, 0x8, r6, 0x10})
close(0x3)
r8 = gettid()
rt_sigqueueinfo(r8, 0x21, &(0x7f00000002c0)={0xb, 0x4})
ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff})
recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00)

6.107845662s ago: executing program 2 (id=4917):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
lsm_set_self_attr(0x0, &(0x7f0000000240)=ANY=[], 0x20, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c", 0x7}], 0x1}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x7, 0x4, 0xcc, 0x4}]})
sendmsg$nl_route_sched(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x9}}}, 0x24}}, 0x0)
recvmmsg(r5, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xfffffffa}, {{0x0, 0x0, 0x0}, 0x8}], 0x3, 0x2, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f00000000c0), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000f40)=ANY=[@ANYBLOB="850000005f0000003d0a000000000000630a00ff0000000095000000000000003cb61ea78be018d646ddfba75f3693c794759aa4e82bfa48b193952cf637d4596402f29abb31ff2ae4f752547c146ce3eff92d017eda25cc304233b9334d35df00a0728b9c61a6ea303195bc8b52f18f20e3f7bdfaadbe1bf4f4f495"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0)
sendmsg$inet(r2, 0x0, 0x0)

5.99872568s ago: executing program 2 (id=4918):
r0 = accept$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x50000, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_buf(r2, 0x0, 0x10, &(0x7f00000006c0)="170000000200020000ffbe8c5ee17688a20000000000000afdff023004ec00055e00bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac40000004f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000002400062068f5ee50ce5af9b1c568302ffff020331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b6182523ded2aa084cd36276a3afff010000000100"/184, 0xb8)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7090000ffffffff0000000000000007020000f8ffffffb703000008000000b7040000000000008561312a577800000082000000950000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
timer_create(0x2, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200"], 0x48)
r4 = syz_open_dev$evdev(0x0, 0x1, 0x0)
syz_usb_disconnect(r4)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r6, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000000)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x101, 0x0, 0xb49, 0x5, 0x1, 0x0, 0xb}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x8895)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x3, 0x0, 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00')
preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x8, 0x8d3a)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0x7, 0x1, 0x4, 0x2, 0x1, 0x1, 0xff, 0x5, 0x0, 0x0, 0x10, 0xa, 0x2, 0xd, 0x5}})

5.100199647s ago: executing program 4 (id=4920):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x101480, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0, r0}, 0x68)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0)
close(r5)
ioctl$KVM_CHECK_EXTENSION(r6, 0xae01, 0x1)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000040)={0x0, 0x399000, 0x8})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000080)={0x1000, 0x100000, 0x8})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000006d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006d00)={0x20, 0x0, 0x4, {0x0, 0x4}}, 0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r7=>0x0})
sendmsg$can_raw(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r7}, 0x10, &(0x7f0000000140)={&(0x7f0000000180)=@can={{0x0, 0x0, 0x1}, 0xfe, 0x0, 0x4, 0x0, "9000"}, 0x10}, 0x2}, 0x810)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
read$FUSE(r8, &(0x7f0000006340)={0x2020, 0x0, <r9=>0x0}, 0x2020)
write$FUSE_INIT(r8, &(0x7f0000002200)={0x50, 0x0, r9, {0x7, 0x27, 0x4, 0xffffffff913cd9b9, 0x0, 0xfc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50)
read$FUSE(r8, &(0x7f0000000100)={0x2020}, 0x2020)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)

4.906823236s ago: executing program 1 (id=4921):
ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x80045518, 0x0) (async)
r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x1)
landlock_restrict_self(r0, 0x1) (async)
symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00')
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0xa69, &(0x7f0000000240)='\x00')
r1 = syz_io_uring_setup(0xc17, &(0x7f0000000140)={0x0, 0x3ae7, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xffffbffc, 0x0, 0x4) (async)
r4 = socket(0x2a, 0x2, 0x80053c)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x40010002}) (async, rerun: 64)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async)
recvmmsg(r5, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000fc0)=""/225, 0xe1}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/234, 0xea}, {&(0x7f0000002b00)=""/152, 0x98}], 0x4}, 0x80000000}], 0x4, 0x20, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv6_newaddr={0x5c, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8}, @IFA_ADDRESS={0x14, 0x1, @local}, @IFA_LOCAL={0x28, 0x2, @remote}, @IFA_CACHEINFO={0x14}]}, 0x5c}}, 0x0) (async, rerun: 64)
io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) (async, rerun: 64)
r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r7, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001b4"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r7, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64)
syz_usb_control_io(r7, 0x0, 0x0) (rerun: 64)
r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r5)
sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="000426bd7000fcdbdf2502060000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000011)
r9 = syz_usb_connect$cdc_ncm(0x1, 0x94, &(0x7f00000004c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x2, 0x1, 0x9, 0x0, 0xf1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "f2cd0b6a"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x1ff, 0x3, 0xffff}, {0x6, 0x24, 0x1a, 0xffeb}, [@mbim_extended={0x8, 0x24, 0x1c, 0x3, 0xd2, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x1}, @obex={0x5, 0x24, 0x15, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x60, 0x81, 0xff, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x79, 0x8b, 0xe0}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x2, 0x7, 0x2}}}}}}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x250, 0x17, 0x4, 0xc, 0x10, 0x5}, 0x68, &(0x7f0000000640)={0x5, 0xf, 0x68, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x6, 0xa2, 0x7f}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "ffff6a89dfe6b1c739db9409d0821c06"}, @ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x7, 0xf000, 0x0, [0xff00c0, 0x3fcf, 0xc0, 0x7e30, 0xf0]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "8af16cb21ed99353dfa83ffde15c3e50"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0xe, 0x4, 0x7f}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x7, 0x7, 0x4}]}, 0x5, [{0x32, &(0x7f0000000440)=@string={0x32, 0x3, "c06558a1a5ce2af627cc83b4a80428e90eb584f1f664aec6ce0823746fd2826a4c4e8f054e7e5ba6c26c6a0e416ea29f"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x438}}, {0x66, &(0x7f00000006c0)=@string={0x66, 0x3, "2f7ff3f4cfff01af9e912c44ec1e140b8d41d8eed26d535013eb39247ea9bfce7c3435b35056eda8c456d3950d01852c13eab327b1e7fd89ff793cf5e85aeefa5592bc93dccb7f710504d9f9a672690818126e7324477c15a8f04b147dd2f05faf6575fa"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x44b}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x401}}]})
syz_usb_control_io$cdc_ncm(r9, &(0x7f00000008c0)={0x14, &(0x7f0000000840)={0x0, 0xf, 0x36, {0x36, 0x9, "5f547bcbe23b15965e57a9221a0782643fe15b3ff3a836022fe04557c9bbe04f42b66501dec9bd35209ca4d62ca96feb765a198b"}}, &(0x7f0000000880)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)={0x40, 0x15, 0xef, "4c126f3dcd3b4f2f9846fe02d2916cbe964c059f6d18a23fcabea89f02a20ccfd90dc8723257478f5bd578a705b6caad1b3a5f3af59e90f41958b84ac454582ee8744accd8998e7acaf2aa3500a2e58b83200dd8412669b5cc7f312a9e332bf6991be74a4a1799c7385a3724eefaecd2f10459d979787ced3f99b4d6f32c3aa51f537d077a70bf39f058407affb5b03d10308e41cb7fdc8fe3c0aa6dab459d22e3f08f2a161d2a7f856a50ada2d6fc6b51bda1be9c052e624012facc4a82d9428618c944e3f2bcb41471bc8ce4bc286f2c5b5b706667424bc9a020f9a38261afdc65e1f261cce25f707ea499dc6ecb"}, &(0x7f0000000a00)={0x0, 0xa, 0x1}, &(0x7f0000000a40)={0x0, 0x8, 0x1, 0xf9}, &(0x7f0000000a80)={0x20, 0x80, 0x1c, {0x5, 0xffff, 0x2, 0x9, 0x40, 0x2, 0x800, 0xe27, 0xbb, 0x6, 0x9, 0x3}}, &(0x7f0000000ac0)={0x20, 0x85, 0x4}, &(0x7f0000000b00)={0x20, 0x83, 0x2}, &(0x7f0000000b40)={0x20, 0x87, 0x2, 0x82}, &(0x7f0000000b80)={0x20, 0x89, 0x2, 0x1}}) (async)
syz_usb_control_io(r7, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$inet_tcp(0x2, 0x1, 0x0) (async)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)

4.781974964s ago: executing program 3 (id=4922):
pipe(0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0)
io_setup(0x409, &(0x7f0000000600)=<r0=>0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0))
r1 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002)
io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}])

4.679927697s ago: executing program 0 (id=4923):
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x110, r0, 0x8000000)
syz_io_uring_setup(0x4c27, &(0x7f0000000380)={0x0, 0xfd95, 0x8, 0x1, 0x71, 0x0, r0}, &(0x7f0000000400), &(0x7f0000000440)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_UNLINKAT={0x24, 0x63, 0x0, r0, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x200, 0x1})
sendmsg$alg(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)="076e686324529ad97bbd1adc4060ac33af355dcc920f2a9363ca2e6870e3fc66891363444a70b69e11e7a06bc24d1e6d402434fe11da7501ed30af8ff2836f4c6fbc20f3b467e0dda7a56f4501e37ded19dee34e7d6f9c7cb7b16138734af40c9312f0c0fe5ad8cab41e41f9", 0x6c}, {&(0x7f00000001c0)="e14ec0020c7b9665ec0dcc637dc42f6d2e387652a86b9d1671b23fb42ce6fa408e9e9c46632593b34e80094c52e8cdc5c9469b6698d6cc9bed6ddbba19f88935ecda3becb9a6ad6a78fc67474c09c33dda7bb82e1308eec5a0ebdab4d8b9368333aed6547a7703cfa5b8cf3e7a9704e4d6462f9c4b6d4ee8f46752f42e540c956630dd129cec0d14ac44be4351c61acd283e62c3fb4cd6a5d11034f31800c45f664af6bbe31cdab7e765ffbf6a299c691d7d69e32e7739d83591d61abb2b2329a54d8b431ca747b45710cbccea29", 0xce}, {&(0x7f0000000100)="009f2bc3afc7037ac64942a07b055ab516d1c43a6334e1b43fe6f64e", 0x1c}], 0x3, &(0x7f00000002c0)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x60, 0x80}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000000180)=0x50)

4.525587635s ago: executing program 0 (id=4924):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x99f}, 0x1c)
connect$inet6(r0, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @private2}, 0x1c)
pipe(0x0)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.self_freezing\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e24, 0x3, @local, 0x7}, 0x1c)

4.513044372s ago: executing program 3 (id=4925):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x109142, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r6, 0xc0045009, &(0x7f0000000100)=0x4)
syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r4, 0x0, 0x0}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x4, 0x9, 0x0, 0xf7, 0x48, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x700, 0x8000, 0x3, 0x3}})
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
r9 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r9, 0x6, 0x1e, 0x0, &(0x7f0000002000))
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x100})
ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1})
syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f00000005c0)="0f01c90f0f6a07a066b99b03000066b88efb000066ba000000000f30650f01c2670f32c4c3e544e38ebad104b8b800ef65660f3801eb36d993c1310fda4329", 0x3f}], 0x1, 0x11, 0x0, 0x0)

4.337806506s ago: executing program 0 (id=4926):
userfaultfd(0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
syz_usb_connect(0x5, 0x4a, &(0x7f0000000180)=ANY=[], 0x0)
syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xfffffffffffffde7, &(0x7f0000000200)=ANY=[@ANYBLOB="0600ee00"])
r1 = eventfd(0x401)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x840)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, &(0x7f00000005c0)=""/79, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20002)
connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2083, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)

4.2701336s ago: executing program 1 (id=4927):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06030000e8160000010902240001000064000904340102d469e70009058acf9b"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e"], 0xf8)

2.952963204s ago: executing program 4 (id=4928):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
lsm_set_self_attr(0x0, &(0x7f0000000240)=ANY=[], 0x20, 0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @local, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c", 0x7}], 0x1}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x7, 0x4, 0xcc, 0x4}]})
sendmsg$nl_route_sched(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x9}}}, 0x24}}, 0x0)
recvmmsg(r5, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xfffffffa}, {{0x0, 0x0, 0x0}, 0x8}], 0x3, 0x2, 0x0)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f00000000c0), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000f40)=ANY=[@ANYBLOB="850000005f0000003d0a000000000000630a00ff0000000095000000000000003cb61ea78be018d646ddfba75f3693c794759aa4e82bfa48b193952cf637d4596402f29abb31ff2ae4f752547c146ce3eff92d017eda25cc304233b9334d35df00a0728b9c61a6ea303195bc8b52f18f20e3f7bdfaadbe1bf4f4f495"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0)
sendmsg$inet(r2, 0x0, 0x0)

2.82795714s ago: executing program 2 (id=4929):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x2, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10, &(0x7f0000000180)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})
unlink(&(0x7f0000000040)='./file0/file0\x00')
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x48100, 0x48)
read$FUSE(r2, &(0x7f000000a280)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f0000008280)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x0, 0x20000, 0x1, 0x502, 0x0, 0xffff6957, {0x0, 0x2, 0x1, 0x0, 0x8000000000000000, 0x0, 0x5, 0x0, 0x0, 0x2000, 0x0, 0x0, 0xee01, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
syz_open_dev$dri(&(0x7f0000000480), 0xd21, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={&(0x7f0000000040), 0x0, 0x0, 0x0, 0xb44}, 0x38)
setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
syz_fuse_handle_req(r4, &(0x7f0000006300)="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", 0x2000, &(0x7f0000000380)={&(0x7f0000000080)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x28, 0x0, 0x10000000, 0x0, 0x0, 0x3, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.658942925s ago: executing program 3 (id=4930):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x842, 0x0)
r2 = socket$kcm(0x2, 0x3, 0x2)
sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r1, @ANYBLOB="ac141410e00000010000000028000000000000000000000007"], 0x48}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3)
sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x60, r4, 0x10, 0x70bd28, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5e7c}}, {@nsim={{0xe}, {0xfffffe19, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24004855}, 0x20000090)
sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000840)={0x120, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x120}, 0x1, 0x0, 0x0, 0x8800}, 0x4044085)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000000c0)={<r5=>0x0, 0x4, 0x4, 0x80, 0x7, 0x7fff}, &(0x7f0000000240)=0x14)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x3, 0x300)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000001040500000000000000000007"], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x2000004)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=<r7=>0x0, &(0x7f0000000000)=<r8=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345})
io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000001680)={r5, 0x1000, "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"}, &(0x7f0000000280)=0x1008)

2.625589692s ago: executing program 4 (id=4931):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x3, @local, 'macvtap0\x00'}}, 0x1e)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0x1000fff, r1, 0x0, 0xa0028000}, 0x86)
syz_emit_ethernet(0x14, &(0x7f0000001500)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa8c635aa772f37902"], 0x0)

2.171016692s ago: executing program 1 (id=4932):
fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x181040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r2], 0x20)

1.760040552s ago: executing program 1 (id=4933):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
fsopen(0x0, 0x0)
fchdir(0xffffffffffffffff)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
ftruncate(r3, 0x2007ffb)
sendfile(r3, r3, 0x0, 0x1000000201005)
ftruncate(r3, 0x30)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
dup(r4)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r6, 0x0)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060001"], 0x30}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.495818527s ago: executing program 1 (id=4934):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8000000007fff, 0x4, &(0x7f0000000040))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1)
ioctl$vim2m_VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0xd, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3})
ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x300, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0x0, 0x1, {0x0}})
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0x5, {0x1ff, 0x9000000, 0x7fffffff, 0xef6, 0x2, 0x3}})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000000c0)=0xffff)
getsockname$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14)

1.131001683s ago: executing program 2 (id=4935):
pipe(0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0)
io_setup(0x409, &(0x7f0000000600)=<r0=>0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0))
r1 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x101002)
io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}])

979.436618ms ago: executing program 3 (id=4936):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x99f}, 0x1c)
connect$inet6(r0, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @private2}, 0x1c)
pipe(0x0)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.self_freezing\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e24, 0x3, @local, 0x7}, 0x1c)

909.991241ms ago: executing program 0 (id=4937):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffff7}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) (fail_nth: 22)

744.767589ms ago: executing program 2 (id=4938):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x101480, 0x0)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0xc1105511, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x8010, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0, r0}, 0x68)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0)
close(r5)
ioctl$KVM_CHECK_EXTENSION(r6, 0xae01, 0x1)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000040)={0x0, 0x399000, 0x8})
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000080)={0x1000, 0x100000, 0x8})
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000006d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006d00)={0x20, 0x0, 0x4, {0x0, 0x4}}, 0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r7=>0x0})
sendmsg$can_raw(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r7}, 0x10, &(0x7f0000000140)={&(0x7f0000000180)=@can={{0x0, 0x0, 0x1}, 0xfe, 0x0, 0x4, 0x0, "9000"}, 0x10}, 0x2}, 0x810)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
read$FUSE(r8, &(0x7f0000006340)={0x2020, 0x0, <r9=>0x0}, 0x2020)
write$FUSE_INIT(r8, &(0x7f0000002200)={0x50, 0x0, r9, {0x7, 0x27, 0x4, 0xffffffff913cd9b9, 0x0, 0xfc9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50)
read$FUSE(r8, &(0x7f0000000100)={0x2020}, 0x2020)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)

284.514774ms ago: executing program 0 (id=4939):
syz_emit_ethernet(0x6a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500005c0000000000119078000000000000000000004e20001f907803000000000000006d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8ddec71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364cfb5f108bb43e8caddf25aa3cd6c72b5786767b6781f3b5553ef75b5f4467fd8da4e5926cafaaee5a0bd582b2da9ca1df569e9c9ca31dfe98fce4317e345f36ef98a3c57d7681e86bd1dd403c0a50bc3b57813f7ac8a9fe0112b9180643f54e2e91ae3ca05391a0107940c08172dce8358493aa59bdf5f8cfe6e904f7bf2f1723f0d25580f6878514f7264f8ba3dfb555031abd6d250c380a9816d59e2ab8307a3fa7be18e4fb22ee0277821bcabad8d1c22f42f2f9da1108ef94293f7d475227d3679d9d361a4258e08d75f7c3a6f0c6b5edea65fdeed89fad0134414924dd90b42872d5da9cfcfcad79a78eb3c36035b9dadea72443d72a594a246568"], 0x0)
ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000000)="8a33683825a234efb0ca6ea4f71dc9eb4c4475810a")
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0xc, &(0x7f0000000100)=0x3e60, 0x48)
sendmsg$netlink(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="240000001e00290700000000000000000c000000"], 0x24}], 0x1}, 0x0)
r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcca)
semget$private(0x0, 0x3, 0xf0)
write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c46000000800000000000000000030006000000000000000000380000000000000000191bda000020002126"], 0x69)
close(r1)
setsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f0000000080)=0x1, 0x4)

170.146872ms ago: executing program 0 (id=4940):
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
ppoll(&(0x7f0000000100)=[{r0, 0xa0}], 0x1, 0x0, 0x0, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x109100, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000340)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfff}}, './file0\x00'})
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0xa1, 0x48000000, 0x0, 0x0, 0x0})

0s ago: executing program 3 (id=4941):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x4, 0x1, 0x0, 0x3, 0x4005, 0xfffffffffffffffc}, {0x0, 0x3}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x32}, 0xa, @in=@local, 0x0, 0x4, 0x0, 0x0, 0x8}}, 0xe8)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
r4 = eventfd(0xc)
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4})
ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000080)={0x0, r4})
r5 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5865, 0x10, 0x2, 0x24d}, &(0x7f00000006c0)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1})
io_uring_enter(r5, 0x100847c0, 0x0, 0x1, 0x0, 0x0)
openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x40000)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0)
recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r10 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10)
connect$inet(r10, &(0x7f0000000540)={0x2, 0x2, @multicast2}, 0x10)
sendmmsg$inet(r10, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94)

kernel console output (not intermixed with test programs):

1220] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[ 1323.466410][ T1220] usb 5-1: USB disconnect, device number 62
[ 1323.525223][T17556] udevd[17556]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1324.231897][T21445] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4448'.
[ 1324.398007][T21448] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4449'.
[ 1325.391758][T19752] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[ 1325.554993][T19752] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1325.565475][T19752] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[ 1325.574664][T19752] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1325.588386][T19752] usb 5-1: config 0 descriptor??
[ 1325.671222][T15343] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[ 1325.821519][T15343] usb 4-1: Using ep0 maxpacket: 16
[ 1325.849601][T15343] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1325.881822][T15343] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1325.993681][T15343] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1326.012928][T15343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1326.021665][T15343] usb 4-1: Product: syz
[ 1326.025863][T15343] usb 4-1: Manufacturer: syz
[ 1326.031364][T15343] usb 4-1: SerialNumber: syz
[ 1326.249944][T15343] usb 4-1: 0:2 : does not exist
[ 1326.256400][T15343] usb 4-1: unit 7 not found!
[ 1326.326764][T15343] usb 4-1: USB disconnect, device number 47
[ 1326.440633][T17556] udevd[17556]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1327.618232][T21491] FAULT_INJECTION: forcing a failure.
[ 1327.618232][T21491] name failslab, interval 1, probability 0, space 0, times 0
[ 1327.650781][T21491] CPU: 1 UID: 0 PID: 21491 Comm: syz.1.4461 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) 
[ 1327.650816][T21491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1327.650829][T21491] Call Trace:
[ 1327.650838][T21491]  <TASK>
[ 1327.650848][T21491]  dump_stack_lvl+0x189/0x250
[ 1327.650884][T21491]  ? __pfx____ratelimit+0x10/0x10
[ 1327.650919][T21491]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1327.650949][T21491]  ? __pfx__printk+0x10/0x10
[ 1327.650979][T21491]  ? __pfx___might_resched+0x10/0x10
[ 1327.651014][T21491]  should_fail_ex+0x414/0x560
[ 1327.651047][T21491]  should_failslab+0xa8/0x100
[ 1327.651082][T21491]  __kmalloc_noprof+0xcb/0x4f0
[ 1327.651109][T21491]  ? apply_wqattrs_prepare+0xf6/0xe00
[ 1327.651142][T21491]  apply_wqattrs_prepare+0xf6/0xe00
[ 1327.651168][T21491]  ? __pfx_pcpu_memcg_post_alloc_hook+0x10/0x10
[ 1327.651199][T21491]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1327.651235][T21491]  ? pcpu_alloc_noprof+0xfdb/0x16b0
[ 1327.651275][T21491]  apply_workqueue_attrs_locked+0x65/0x240
[ 1327.651304][T21491]  __alloc_workqueue+0x10c5/0x1b70
[ 1327.651348][T21491]  alloc_workqueue+0xd4/0x210
[ 1327.651372][T21491]  ? net_generic+0x1e/0x240
[ 1327.651392][T21491]  ? net_generic+0x1e/0x240
[ 1327.651411][T21491]  ? __pfx_alloc_workqueue+0x10/0x10
[ 1327.651446][T21491]  ? net_generic+0x1e/0x240
[ 1327.651466][T21491]  ? net_generic+0x1e/0x240
[ 1327.651493][T21491]  bond_init+0xd4/0x860
[ 1327.651527][T21491]  ? register_netdevice+0x58b/0x1ae0
[ 1327.651552][T21491]  ? __pfx_bond_init+0x10/0x10
[ 1327.651577][T21491]  ? __kasan_kmalloc+0x93/0xb0
[ 1327.651617][T21491]  register_netdevice+0x6bc/0x1ae0
[ 1327.651653][T21491]  ? __kvmalloc_node_noprof+0x338/0x600
[ 1327.651682][T21491]  ? alloc_netdev_mqs+0xc9e/0x11e0
[ 1327.651705][T21491]  ? __pfx_register_netdevice+0x10/0x10
[ 1327.651731][T21491]  ? validate_linkmsg+0x765/0x950
[ 1327.651768][T21491]  bond_newlink+0x60/0xb0
[ 1327.651788][T21491]  ? __pfx_bond_newlink+0x10/0x10
[ 1327.651809][T21491]  rtnl_newlink_create+0x310/0xb00
[ 1327.651846][T21491]  ? __pfx_aa_get_newest_label+0x10/0x10
[ 1327.651875][T21491]  ? __pfx_rtnl_newlink_create+0x10/0x10
[ 1327.651911][T21491]  ? rtnl_newlink+0x8db/0x1c70
[ 1327.651940][T21491]  ? __pfx___mutex_lock+0x10/0x10
[ 1327.651976][T21491]  ? ns_capable+0x8a/0xf0
[ 1327.652009][T21491]  rtnl_newlink+0x16d6/0x1c70
[ 1327.652040][T21491]  ? netlink_sendmsg+0x805/0xb30
[ 1327.652076][T21491]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1327.652132][T21491]  ? kasan_quarantine_put+0xdd/0x220
[ 1327.652156][T21491]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1327.652186][T21491]  ? nlmon_xmit+0xb0/0x100
[ 1327.652213][T21491]  ? kmem_cache_free+0x18f/0x400
[ 1327.652251][T21491]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1327.652279][T21491]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1327.652303][T21491]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1327.652330][T21491]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1327.652363][T21491]  ? __dev_queue_xmit+0x27e/0x3a70
[ 1327.652404][T21491]  ? __lock_acquire+0xab9/0xd20
[ 1327.652460][T21491]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1327.652488][T21491]  rtnetlink_rcv_msg+0x7cf/0xb70
[ 1327.652521][T21491]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[ 1327.652549][T21491]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1327.652574][T21491]  ? ref_tracker_free+0x63a/0x7d0
[ 1327.652599][T21491]  ? __copy_skb_header+0xa7/0x550
[ 1327.652623][T21491]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1327.652663][T21491]  netlink_rcv_skb+0x205/0x470
[ 1327.652696][T21491]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1327.652726][T21491]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1327.652773][T21491]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1327.652802][T21491]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1327.652839][T21491]  netlink_unicast+0x758/0x8d0
[ 1327.652881][T21491]  netlink_sendmsg+0x805/0xb30
[ 1327.652922][T21491]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1327.652946][T21491]  ? aa_sock_msg_perm+0x94/0x160
[ 1327.652974][T21491]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1327.652998][T21491]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1327.653020][T21491]  __sock_sendmsg+0x219/0x270
[ 1327.653050][T21491]  ____sys_sendmsg+0x505/0x830
[ 1327.653080][T21491]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1327.653113][T21491]  ? import_iovec+0x74/0xa0
[ 1327.653141][T21491]  ___sys_sendmsg+0x21f/0x2a0
[ 1327.653165][T21491]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1327.653232][T21491]  ? __fget_files+0x2a/0x420
[ 1327.653260][T21491]  ? __fget_files+0x3a0/0x420
[ 1327.653303][T21491]  __x64_sys_sendmsg+0x19b/0x260
[ 1327.653328][T21491]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1327.653371][T21491]  ? __pfx_ksys_write+0x10/0x10
[ 1327.653395][T21491]  ? rcu_is_watching+0x15/0xb0
[ 1327.653430][T21491]  ? do_syscall_64+0xbe/0x3b0
[ 1327.653461][T21491]  do_syscall_64+0xfa/0x3b0
[ 1327.653484][T21491]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1327.653508][T21491]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1327.653528][T21491]  ? clear_bhb_loop+0x60/0xb0
[ 1327.653555][T21491]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1327.653575][T21491] RIP: 0033:0x7f7b5c18e969
[ 1327.653596][T21491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1327.653614][T21491] RSP: 002b:00007f7b5d06a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1327.653638][T21491] RAX: ffffffffffffffda RBX: 00007f7b5c3b5fa0 RCX: 00007f7b5c18e969
[ 1327.653654][T21491] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003
[ 1327.653668][T21491] RBP: 00007f7b5d06a090 R08: 0000000000000000 R09: 0000000000000000
[ 1327.653682][T21491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1327.653695][T21491] R13: 0000000000000000 R14: 00007f7b5c3b5fa0 R15: 00007f7b5c4dfa28
[ 1327.653731][T21491]  </TASK>
[ 1328.199776][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1328.998248][   T30] audit: type=1326 audit(1748514002.791:2065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21500 comm="syz.2.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35278e969 code=0x7ffc0000
[ 1329.147303][   T30] audit: type=1326 audit(1748514002.821:2066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21500 comm="syz.2.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35278e969 code=0x7ffc0000
[ 1329.170137][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1329.235380][T21507] input: syz0 as /devices/virtual/input/input122
[ 1329.377886][T21507] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4464'.
[ 1329.381922][   T30] audit: type=1326 audit(1748514002.821:2067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21500 comm="syz.2.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7ff35278e969 code=0x7ffc0000
[ 1329.612574][   T30] audit: type=1326 audit(1748514002.821:2068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21500 comm="syz.2.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35278e969 code=0x7ffc0000
[ 1329.682189][   T30] audit: type=1326 audit(1748514002.821:2069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21500 comm="syz.2.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35278e969 code=0x7ffc0000
[ 1329.734418][T19732] usb 5-1: USB disconnect, device number 63
[ 1329.777542][   T30] audit: type=1326 audit(1748514002.821:2070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21500 comm="syz.2.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff35278e969 code=0x7ffc0000
[ 1330.053975][   T30] audit: type=1326 audit(1748514002.821:2071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21500 comm="syz.2.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35278e969 code=0x7ffc0000
[ 1330.126933][   T30] audit: type=1326 audit(1748514002.841:2072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21500 comm="syz.2.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff35278e969 code=0x7ffc0000
[ 1330.152012][   T30] audit: type=1326 audit(1748514002.841:2073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21500 comm="syz.2.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35278e969 code=0x7ffc0000
[ 1330.181343][   T30] audit: type=1326 audit(1748514002.851:2074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21500 comm="syz.2.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff35278e969 code=0x7ffc0000
[ 1331.510897][T21522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4465'.
[ 1333.581707][T21523] Bluetooth: hci1: command 0x0406 tx timeout
[ 1334.316377][T21531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1334.355723][T21531] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1334.432995][T21531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1334.441574][T19750] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[ 1334.469785][T21531] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1334.521240][T15343] usb 5-1: new high-speed USB device number 64 using dummy_hcd
[ 1334.693452][T15343] usb 5-1: config 1 has an invalid descriptor of length 221, skipping remainder of the config
[ 1334.720988][T15343] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1334.774410][T15343] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1334.789084][T15343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1334.810153][T15343] usb 5-1: SerialNumber: syz
[ 1335.028432][T21533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1335.058594][T21533] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1335.148706][T15343] usb 5-1: 0:2 : does not exist
[ 1335.166339][T15343] usb 5-1: unit 5 not found!
[ 1335.189953][T15343] usb 5-1: USB disconnect, device number 64
[ 1335.352262][T17556] udevd[17556]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1335.682089][T19752] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[ 1335.853719][T19752] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1335.857976][T21565] input: syz0 as /devices/virtual/input/input124
[ 1335.881260][T19752] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[ 1335.884380][   T30] kauditd_printk_skb: 7 callbacks suppressed
[ 1335.884399][   T30] audit: type=1326 audit(1748514009.681:2082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21561 comm="syz.1.4477" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b5c18e969 code=0x0
[ 1335.914008][T19752] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1335.990233][T21568] netlink: 4416 bytes leftover after parsing attributes in process `syz.4.4478'.
[ 1336.029624][T19752] usb 4-1: config 0 descriptor??
[ 1338.336297][T19732] usb 4-1: USB disconnect, device number 48
[ 1338.791386][T19732] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[ 1338.973171][T19732] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1338.991016][T19732] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1339.003668][T19732] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1339.024625][T19732] usb 4-1: SerialNumber: syz
[ 1339.040456][T19732] usb 4-1: bad CDC descriptors
[ 1339.247021][T11324] Bluetooth: hci5: unexpected event for opcode 0x2040
[ 1339.247883][T19732] usb 4-1: USB disconnect, device number 49
[ 1340.161330][T19732] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[ 1340.185604][T21602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1340.195220][T21602] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1340.260928][T21602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1340.272370][T21602] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1340.311458][T19752] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[ 1340.351204][T19732] usb 4-1: Using ep0 maxpacket: 16
[ 1340.358129][T19732] usb 4-1: config 1 has an invalid descriptor of length 159, skipping remainder of the config
[ 1340.368785][T19732] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1340.381399][T19732] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1340.390682][T19732] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1340.399100][T19732] usb 4-1: Product: syz
[ 1340.403834][T19732] usb 4-1: Manufacturer: syz
[ 1340.409171][T19732] usb 4-1: SerialNumber: syz
[ 1340.622454][T19732] usb 4-1: 0:2 : does not exist
[ 1340.638405][T19732] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[ 1340.663111][T19732] usb 4-1: USB disconnect, device number 50
[ 1340.701413][T17556] udevd[17556]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1340.959889][T21611] input: syz0 as /devices/virtual/input/input125
[ 1340.975894][   T30] audit: type=1326 audit(1748514014.771:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21609 comm="syz.1.4490" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b5c18e969 code=0x0
[ 1343.402369][T21645] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4501'.
[ 1343.411252][ T5891] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[ 1343.591377][ T5891] usb 4-1: Using ep0 maxpacket: 32
[ 1343.618708][ T5891] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[ 1343.640816][ T5891] usb 4-1: config 0 has no interface number 0
[ 1343.655012][ T5891] usb 4-1: config 0 interface 12 has no altsetting 0
[ 1343.680107][ T5891] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1343.699432][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1343.708841][T21642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1343.723585][T21642] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1343.739680][ T5891] usb 4-1: Product: syz
[ 1343.747940][ T5891] usb 4-1: Manufacturer: syz
[ 1343.759092][ T5891] usb 4-1: SerialNumber: syz
[ 1343.790409][ T5891] usb 4-1: config 0 descriptor??
[ 1343.820982][T21642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1343.836619][T19752] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[ 1343.857237][T21642] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1344.631244][ T5891] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: 20 failed: -71
[ 1345.003726][ T5891] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[ 1345.036031][ T5891] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1345.063923][ T5891] f81534 4-1:0.12: probe with driver f81534 failed with error -71
[ 1345.110892][ T5891] usb 4-1: USB disconnect, device number 51
[ 1346.191211][   T30] audit: type=1800 audit(1748514019.941:2084): pid=21671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4506" name="bus" dev="ramfs" ino=97894 res=0 errno=0
[ 1346.891321][T19750] usb 4-1: new full-speed USB device number 52 using dummy_hcd
[ 1347.002845][   T30] audit: type=1326 audit(1748514020.801:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21690 comm="syz.2.4512" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff35278e969 code=0x0
[ 1347.048805][T19750] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1347.092446][T19750] usb 4-1: not running at top speed; connect to a high speed hub
[ 1347.145500][T19750] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1347.192934][T19750] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1056, setting to 1023
[ 1347.269097][T19750] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1347.338903][T19750] usb 4-1: Dual-Role OTG device on HNP port
[ 1347.346945][T19750] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1347.356486][T19750] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1347.387092][T19750] usb 4-1: Product: syz
[ 1347.411257][T19750] usb 4-1: Manufacturer: syz
[ 1347.416029][T19750] usb 4-1: SerialNumber: syz
[ 1347.731392][T19752] usb 5-1: new high-speed USB device number 66 using dummy_hcd
[ 1347.782413][T19750] usb 4-1: USB disconnect, device number 52
[ 1347.908115][T17556] udevd[17556]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1347.931691][T19752] usb 5-1: Using ep0 maxpacket: 16
[ 1347.971168][T19752] usb 5-1: config 1 has an invalid descriptor of length 230, skipping remainder of the config
[ 1348.011223][T19752] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1348.045492][T19752] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1348.081173][T19752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1348.101682][T19752] usb 5-1: Product: syz
[ 1348.113566][T19752] usb 5-1: Manufacturer: syz
[ 1348.118479][T19752] usb 5-1: SerialNumber: syz
[ 1348.407753][T19752] usb 5-1: 0:2 : does not exist
[ 1348.422581][T19752] usb 5-1: unit 6 not found!
[ 1348.480404][T19752] usb 5-1: USB disconnect, device number 66
[ 1348.576787][T17556] udevd[17556]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1348.771226][T19748] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[ 1348.921369][T19748] usb 2-1: Using ep0 maxpacket: 32
[ 1348.943517][T19748] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1348.957775][T21702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1348.980865][T19748] usb 2-1: config 0 has no interface number 0
[ 1348.991719][T21702] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1349.008202][T19748] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[ 1349.030831][T19748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1349.039448][T19748] usb 2-1: Product: syz
[ 1349.049308][T19748] usb 2-1: Manufacturer: syz
[ 1349.057064][T19748] usb 2-1: SerialNumber: syz
[ 1349.074767][T19748] usb 2-1: config 0 descriptor??
[ 1349.078146][T21702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1349.089920][T21702] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1349.117057][T19748] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1349.136662][T19748] usb 2-1: selecting invalid altsetting 1
[ 1349.143126][T19748] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1349.161674][T19748] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1349.181780][T19748] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1349.200924][T19748] usb 2-1: media controller created
[ 1349.253407][T19748] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1349.301319][T21710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1349.314606][T21710] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1349.351761][T19748] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[ 1349.379352][T19748] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1349.411264][T19748] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 1349.529680][T19748] usb 2-1: USB disconnect, device number 17
[ 1349.667781][T21725] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4524'.
[ 1349.691122][   T30] audit: type=1800 audit(1748514023.481:2086): pid=21726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4523" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0
[ 1350.251258][T19752] usb 5-1: new full-speed USB device number 67 using dummy_hcd
[ 1350.432688][T19752] usb 5-1: no configurations
[ 1350.445753][T19752] usb 5-1: can't read configurations, error -22
[ 1350.602365][T19752] usb 5-1: new full-speed USB device number 68 using dummy_hcd
[ 1350.807935][T19752] usb 5-1: no configurations
[ 1350.813192][T19752] usb 5-1: can't read configurations, error -22
[ 1350.829721][T19752] usb usb5-port1: attempt power cycle
[ 1350.880592][   T30] audit: type=1326 audit(1748514024.671:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21746 comm="syz.0.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463d38e969 code=0x7fc00000
[ 1351.181694][T19752] usb 5-1: new full-speed USB device number 69 using dummy_hcd
[ 1351.212836][T19752] usb 5-1: no configurations
[ 1351.217680][T19752] usb 5-1: can't read configurations, error -22
[ 1351.312466][T21752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4533'.
[ 1351.356384][T21752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4533'.
[ 1351.366315][T19752] usb 5-1: new full-speed USB device number 70 using dummy_hcd
[ 1351.402858][T19752] usb 5-1: no configurations
[ 1351.407790][T19752] usb 5-1: can't read configurations, error -22
[ 1351.417202][T19752] usb usb5-port1: unable to enumerate USB device
[ 1351.678185][   T30] audit: type=1326 audit(1748514025.471:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21746 comm="syz.0.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f463d385927 code=0x7fc00000
[ 1351.734842][   T30] audit: type=1326 audit(1748514025.471:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21746 comm="syz.0.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f463d32ab39 code=0x7fc00000
[ 1351.783553][   T30] audit: type=1326 audit(1748514025.471:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21746 comm="syz.0.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f463d32abff code=0x7fc00000
[ 1351.828008][   T30] audit: type=1326 audit(1748514025.471:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21746 comm="syz.0.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f463d38e969 code=0x7fc00000
[ 1351.868543][T21757] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4535'.
[ 1352.808046][T21766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1352.817235][T21766] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1352.886556][T21767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1352.903896][T21767] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1352.965416][T19752] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[ 1354.412699][T21788] FAULT_INJECTION: forcing a failure.
[ 1354.412699][T21788] name failslab, interval 1, probability 0, space 0, times 0
[ 1354.599286][T21788] CPU: 0 UID: 0 PID: 21788 Comm: syz.1.4543 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) 
[ 1354.599319][T21788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1354.599332][T21788] Call Trace:
[ 1354.599341][T21788]  <TASK>
[ 1354.599350][T21788]  dump_stack_lvl+0x189/0x250
[ 1354.599385][T21788]  ? __pfx____ratelimit+0x10/0x10
[ 1354.599410][T21788]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1354.599439][T21788]  ? __pfx__printk+0x10/0x10
[ 1354.599464][T21788]  ? __pfx___might_resched+0x10/0x10
[ 1354.599490][T21788]  ? fs_reclaim_acquire+0x7d/0x100
[ 1354.599517][T21788]  should_fail_ex+0x414/0x560
[ 1354.599546][T21788]  should_failslab+0xa8/0x100
[ 1354.599576][T21788]  __kmalloc_noprof+0xcb/0x4f0
[ 1354.599601][T21788]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[ 1354.599632][T21788]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[ 1354.599664][T21788]  genl_family_rcv_msg_doit+0xb8/0x300
[ 1354.599696][T21788]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1354.599723][T21788]  ? rcu_is_watching+0x15/0xb0
[ 1354.599752][T21788]  ? apparmor_capable+0x137/0x1b0
[ 1354.599784][T21788]  ? bpf_lsm_capable+0x9/0x20
[ 1354.599812][T21788]  ? security_capable+0x7e/0x2e0
[ 1354.599845][T21788]  genl_rcv_msg+0x60e/0x790
[ 1354.599877][T21788]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1354.599897][T21788]  ? ref_tracker_free+0x63a/0x7d0
[ 1354.599923][T21788]  ? __pfx_mptcp_pm_nl_set_limits_doit+0x10/0x10
[ 1354.599950][T21788]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1354.599991][T21788]  netlink_rcv_skb+0x205/0x470
[ 1354.600022][T21788]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1354.600048][T21788]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1354.600096][T21788]  ? down_read+0x1ad/0x2e0
[ 1354.600126][T21788]  genl_rcv+0x28/0x40
[ 1354.600157][T21788]  netlink_unicast+0x758/0x8d0
[ 1354.600196][T21788]  netlink_sendmsg+0x805/0xb30
[ 1354.600225][T21788]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1354.600250][T21788]  ? aa_sock_msg_perm+0x94/0x160
[ 1354.600275][T21788]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1354.600298][T21788]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1354.600318][T21788]  __sock_sendmsg+0x219/0x270
[ 1354.600347][T21788]  ____sys_sendmsg+0x505/0x830
[ 1354.600373][T21788]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1354.600403][T21788]  ? import_iovec+0x74/0xa0
[ 1354.600426][T21788]  ___sys_sendmsg+0x21f/0x2a0
[ 1354.600449][T21788]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1354.600511][T21788]  ? __fget_files+0x2a/0x420
[ 1354.600540][T21788]  ? __fget_files+0x3a0/0x420
[ 1354.600580][T21788]  __x64_sys_sendmsg+0x19b/0x260
[ 1354.600604][T21788]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1354.600635][T21788]  ? __pfx_ksys_write+0x10/0x10
[ 1354.600658][T21788]  ? rcu_is_watching+0x15/0xb0
[ 1354.600691][T21788]  ? do_syscall_64+0xbe/0x3b0
[ 1354.600720][T21788]  do_syscall_64+0xfa/0x3b0
[ 1354.600742][T21788]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1354.600766][T21788]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1354.600788][T21788]  ? clear_bhb_loop+0x60/0xb0
[ 1354.600813][T21788]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1354.600833][T21788] RIP: 0033:0x7f7b5c18e969
[ 1354.600853][T21788] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1354.600871][T21788] RSP: 002b:00007f7b5d06a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1354.600893][T21788] RAX: ffffffffffffffda RBX: 00007f7b5c3b5fa0 RCX: 00007f7b5c18e969
[ 1354.600909][T21788] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003
[ 1354.600923][T21788] RBP: 00007f7b5d06a090 R08: 0000000000000000 R09: 0000000000000000
[ 1354.600937][T21788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1354.600950][T21788] R13: 0000000000000000 R14: 00007f7b5c3b5fa0 R15: 00007f7b5c4dfa28
[ 1354.600985][T21788]  </TASK>
[ 1355.229025][T21797] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4546'.
[ 1355.501309][T19752] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[ 1355.651245][T19752] usb 4-1: Using ep0 maxpacket: 32
[ 1355.661783][T19752] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[ 1355.675600][T19752] usb 4-1: config 0 has no interface number 0
[ 1355.684610][T19752] usb 4-1: config 0 interface 12 has no altsetting 0
[ 1355.701573][T19752] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1355.710995][T19752] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1355.727382][T19752] usb 4-1: Product: syz
[ 1355.734612][T19752] usb 4-1: Manufacturer: syz
[ 1355.739420][T19752] usb 4-1: SerialNumber: syz
[ 1355.751361][T19752] usb 4-1: config 0 descriptor??
[ 1355.851239][ T5891] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[ 1356.403081][ T5891] usb 2-1: config 0 has no interfaces?
[ 1356.414564][ T5891] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1356.432093][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1356.440334][ T5891] usb 2-1: Product: syz
[ 1356.454001][ T5891] usb 2-1: Manufacturer: syz
[ 1356.458993][ T5891] usb 2-1: SerialNumber: syz
[ 1356.470359][ T5891] usb 2-1: config 0 descriptor??
[ 1356.929336][T19752] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: 20 failed: -71
[ 1356.956641][T19752] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[ 1356.973962][T19752] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1356.999742][T19752] f81534 4-1:0.12: probe with driver f81534 failed with error -71
[ 1357.032178][T19752] usb 4-1: USB disconnect, device number 53
[ 1357.687764][T21831] netlink: 'syz.4.4555': attribute type 1 has an invalid length.
[ 1358.085910][T21835] bond0: option all_slaves_active: invalid value (2)
[ 1358.428166][T21836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1358.460550][T21836] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1358.532695][T21839] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4558'.
[ 1358.541662][T19752] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[ 1358.572908][T21829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1358.582934][T21829] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1358.609310][T19748] usb 2-1: USB disconnect, device number 19
[ 1359.041578][ T5891] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[ 1359.051980][T19748] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[ 1359.201166][T19748] usb 2-1: Using ep0 maxpacket: 32
[ 1359.206306][ T5891] usb 5-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30
[ 1359.225433][T19748] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1359.237908][ T5891] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84
[ 1359.255505][ T5891] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 240, setting to 64
[ 1359.262091][T19748] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1359.272407][ T5891] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101
[ 1359.289901][T19748] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1359.310653][ T5891] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[ 1359.329460][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1359.345764][T19748] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1359.386000][T19748] usb 2-1: config 0 descriptor??
[ 1359.408607][T19748] hub 2-1:0.0: USB hub found
[ 1359.433504][T21849] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1359.561582][T21843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1359.578509][T21843] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1359.588848][T21843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1359.599158][T21843] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1359.610849][T21841] netlink: 'syz.1.4559': attribute type 12 has an invalid length.
[ 1359.624097][T21843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1359.633907][T19748] hub 2-1:0.0: 1 port detected
[ 1359.670432][T21843] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1359.694514][T21843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1359.717352][T21843] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1359.739612][T21843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1359.749748][T21843] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1359.774004][ T5891] ath6kl: Failed to submit usb control message: -71
[ 1359.788063][ T5891] ath6kl: unable to send the bmi data to the device: -71
[ 1359.803618][ T5891] ath6kl: Unable to send get target info: -71
[ 1359.811649][ T5891] ath6kl: Failed to init ath6kl core: -71
[ 1360.174977][ T5891] ath6kl_usb 5-1:4.0: probe with driver ath6kl_usb failed with error -71
[ 1360.253581][ T5891] usb 5-1: USB disconnect, device number 71
[ 1360.328242][T19748] hub 2-1:0.0: activate --> -90
[ 1360.602256][T21841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1360.642103][T21841] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1360.733615][T21860] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4559'.
[ 1361.741999][T19748] hub 2-1:0.0: hub_ext_port_status failed (err = -32)
[ 1361.806361][T21867] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4567'.
[ 1361.928232][T21872] FAULT_INJECTION: forcing a failure.
[ 1361.928232][T21872] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1361.942167][T21872] CPU: 1 UID: 0 PID: 21872 Comm: syz.1.4568 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) 
[ 1361.942193][T21872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1361.942204][T21872] Call Trace:
[ 1361.942211][T21872]  <TASK>
[ 1361.942218][T21872]  dump_stack_lvl+0x189/0x250
[ 1361.942248][T21872]  ? __pfx____ratelimit+0x10/0x10
[ 1361.942269][T21872]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1361.942293][T21872]  ? __pfx__printk+0x10/0x10
[ 1361.942311][T21872]  ? __might_fault+0xb0/0x130
[ 1361.942343][T21872]  should_fail_ex+0x414/0x560
[ 1361.942369][T21872]  _copy_from_user+0x2d/0xb0
[ 1361.942387][T21872]  ___sys_sendmsg+0x158/0x2a0
[ 1361.942406][T21872]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1361.942453][T21872]  ? __fget_files+0x2a/0x420
[ 1361.942475][T21872]  ? __fget_files+0x3a0/0x420
[ 1361.942508][T21872]  __x64_sys_sendmsg+0x19b/0x260
[ 1361.942526][T21872]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1361.942551][T21872]  ? __pfx_ksys_write+0x10/0x10
[ 1361.942570][T21872]  ? rcu_is_watching+0x15/0xb0
[ 1361.942597][T21872]  ? do_syscall_64+0xbe/0x3b0
[ 1361.942646][T21872]  do_syscall_64+0xfa/0x3b0
[ 1361.942666][T21872]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1361.942684][T21872]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1361.942701][T21872]  ? clear_bhb_loop+0x60/0xb0
[ 1361.942721][T21872]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1361.942736][T21872] RIP: 0033:0x7f7b5c18e969
[ 1361.942760][T21872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1361.942775][T21872] RSP: 002b:00007f7b5d06a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1361.942794][T21872] RAX: ffffffffffffffda RBX: 00007f7b5c3b5fa0 RCX: 00007f7b5c18e969
[ 1361.942807][T21872] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005
[ 1361.942818][T21872] RBP: 00007f7b5d06a090 R08: 0000000000000000 R09: 0000000000000000
[ 1361.942828][T21872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1361.942838][T21872] R13: 0000000000000000 R14: 00007f7b5c3b5fa0 R15: 00007f7b5c4dfa28
[ 1361.942863][T21872]  </TASK>
[ 1362.159235][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1362.175190][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1362.181712][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1362.195402][T19748] usb 2-1: USB disconnect, device number 20
[ 1362.335138][T21876] syzkaller1: entered promiscuous mode
[ 1362.341333][T21876] syzkaller1: entered allmulticast mode
[ 1362.474875][T21878] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4570'.
[ 1362.524985][T21880] input: syz0 as /devices/virtual/input/input126
[ 1362.539400][T21880] input: failed to attach handler leds to device input126, error: -6
[ 1363.684055][T21884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1363.792662][T21884] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1363.949916][T21884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1363.962129][T21884] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1364.173524][T21904] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1364.181129][T21904] IPv6: NLM_F_CREATE should be set when creating new route
[ 1364.531260][ T5891] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[ 1364.712843][ T5891] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1364.735278][ T5891] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1364.755700][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1364.786766][ T5891] usb 2-1: config 0 descriptor??
[ 1365.013289][T21915] input: syz0 as /devices/virtual/input/input127
[ 1365.054951][   T30] audit: type=1326 audit(1748514038.851:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21913 comm="syz.0.4582" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f463d38e969 code=0x0
[ 1365.163143][T21911] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4581'.
[ 1365.237805][ T5891] keytouch 0003:0926:3333.0038: fixing up Keytouch IEC report descriptor
[ 1365.315229][ T5891] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0038/input/input128
[ 1365.624561][ T5891] keytouch 0003:0926:3333.0038: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[ 1365.758244][ T5891] usb 2-1: USB disconnect, device number 21
[ 1365.953171][T21919] fido_id[21919]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[ 1366.579601][T21939] batadv_slave_0: entered promiscuous mode
[ 1366.611827][T21939] team0: entered promiscuous mode
[ 1366.651205][T19737] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[ 1366.728668][T21940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4589'.
[ 1366.787332][T19737] usb 4-1: device descriptor read/64, error -71
[ 1366.811558][T21940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4589'.
[ 1366.832713][T21940] netlink: 'syz.4.4589': attribute type 12 has an invalid length.
[ 1367.031411][T19748] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[ 1367.051446][T19737] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[ 1367.161237][T19748] usb 5-1: device descriptor read/64, error -71
[ 1367.201258][T19737] usb 4-1: device descriptor read/64, error -71
[ 1367.301307][T19752] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[ 1367.312060][T19737] usb usb4-port1: attempt power cycle
[ 1367.411288][T19748] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[ 1367.472687][T19752] usb 2-1: config 0 interface 0 has no altsetting 0
[ 1367.510163][T19752] usb 2-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice=ff.f4
[ 1367.531432][T19752] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1367.542279][T19752] usb 2-1: Product: syz
[ 1367.546539][T19752] usb 2-1: Manufacturer: syz
[ 1367.558737][T19752] usb 2-1: config 0 descriptor??
[ 1367.564460][T19748] usb 5-1: device descriptor read/64, error -71
[ 1367.662592][T19737] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[ 1367.681882][T19748] usb usb5-port1: attempt power cycle
[ 1367.688012][T19737] usb 4-1: device descriptor read/8, error -71
[ 1367.826427][T21951] netlink: 'syz.2.4593': attribute type 1 has an invalid length.
[ 1367.941268][T19737] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[ 1367.962042][T19737] usb 4-1: device descriptor read/8, error -71
[ 1367.989213][T19752] uclogic 0003:28BD:0075.0039: interface is invalid, ignoring
[ 1368.041537][T19748] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[ 1368.072583][T19737] usb usb4-port1: unable to enumerate USB device
[ 1368.072987][T19748] usb 5-1: device descriptor read/8, error -71
[ 1368.189975][T21937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1368.199868][T21937] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1368.212442][T21937] m920x_read = error: -19
[ 1368.321268][T19748] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[ 1368.342270][T19748] usb 5-1: device descriptor read/8, error -71
[ 1368.451795][T19748] usb usb5-port1: unable to enumerate USB device
[ 1368.782024][T19748] usb 2-1: USB disconnect, device number 22
[ 1369.211448][T19748] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[ 1369.361233][T19748] usb 2-1: Using ep0 maxpacket: 8
[ 1369.367959][T19748] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1369.379909][T19748] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[ 1369.389202][T19748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1369.397646][T19748] usb 2-1: Product: syz
[ 1369.411175][T19748] usb 2-1: Manufacturer: syz
[ 1369.415976][T19748] usb 2-1: SerialNumber: syz
[ 1369.423789][T19748] usb 2-1: config 0 descriptor??
[ 1369.697847][T21941] team0: left promiscuous mode
[ 1369.713579][T21941] batadv_slave_0: left promiscuous mode
[ 1370.415949][T19748] usb 2-1: USB disconnect, device number 23
[ 1370.793789][T19748] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[ 1370.955854][T19748] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1370.991199][T19748] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1371.025475][T19748] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1371.041969][T19748] usb 2-1: config 0 descriptor??
[ 1371.250615][T21978] Cannot find del_set index 2 as target
[ 1371.275865][T21978] netlink: 'syz.2.4602': attribute type 11 has an invalid length.
[ 1371.289598][T21978] Cannot find del_set index 2 as target
[ 1371.301836][T21979] netlink: 'syz.2.4602': attribute type 11 has an invalid length.
[ 1371.497705][T19748] keytouch 0003:0926:3333.003A: fixing up Keytouch IEC report descriptor
[ 1371.530828][T19748] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.003A/input/input129
[ 1371.878982][T19748] keytouch 0003:0926:3333.003A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[ 1372.082746][T19748] usb 2-1: USB disconnect, device number 24
[ 1372.225395][T21987] fido_id[21987]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[ 1372.902831][T21993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4606'.
[ 1373.001577][T19748] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[ 1373.171805][T19748] usb 2-1: device descriptor read/64, error -71
[ 1373.443416][T19748] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[ 1373.591246][T19748] usb 2-1: device descriptor read/64, error -71
[ 1373.701554][T19752] usb 5-1: new full-speed USB device number 76 using dummy_hcd
[ 1373.709619][T19748] usb usb2-port1: attempt power cycle
[ 1373.879126][T19752] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1373.891011][T19752] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[ 1373.934959][T19752] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[ 1373.964164][T19752] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[ 1373.980369][T19752] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1374.004729][T19752] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[ 1374.019142][T19752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[ 1374.028076][T19752] usb 5-1: Product: syz
[ 1374.037001][T19752] usb 5-1: Manufacturer: syz
[ 1374.042042][T19752] usb 5-1: SerialNumber: syz
[ 1374.057433][T19752] usb 5-1: config 0 descriptor??
[ 1374.062824][T19748] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[ 1374.102082][T19748] usb 2-1: device descriptor read/8, error -71
[ 1374.290042][T19752] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000
[ 1374.297159][T19752] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[ 1374.351218][T19748] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[ 1374.375936][T19748] usb 2-1: device descriptor read/8, error -71
[ 1374.504618][T19748] usb usb2-port1: unable to enumerate USB device
[ 1374.511348][T19752] radio-si470x 5-1:0.0: software version 0, hardware version 0
[ 1374.526084][T19752] radio-si470x 5-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[ 1374.538970][T19752] radio-si470x 5-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[ 1374.721168][T19752] radio-si470x 5-1:0.0: submitting int urb failed (-90)
[ 1375.315839][T22015] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4614'.
[ 1375.325203][T22015] erspan0: entered allmulticast mode
[ 1375.330744][T22015] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4614'.
[ 1375.341270][T22002] net_ratelimit: 10 callbacks suppressed
[ 1375.341290][T22002] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1375.681302][T19748] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[ 1375.761568][T19752] radio-si470x 5-1:0.0: si470x_set_report: usb_control_msg returned -71
[ 1375.781310][T19752] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -71
[ 1375.797480][T19752] usb 5-1: USB disconnect, device number 76
[ 1375.831304][T19748] usb 4-1: Using ep0 maxpacket: 8
[ 1375.846397][T19748] usb 4-1: config 0 has an invalid interface number: 52 but max is 0
[ 1375.855449][T19748] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1375.867234][T19748] usb 4-1: config 0 has no interface number 0
[ 1375.873751][T19748] usb 4-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1375.887500][T19748] usb 4-1: config 0 interface 52 has no altsetting 0
[ 1375.896453][T19748] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[ 1375.907494][T19748] usb 4-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[ 1375.918668][T19748] usb 4-1: Manufacturer: syz
[ 1375.932115][T19748] usb 4-1: config 0 descriptor??
[ 1376.358035][T19748] usb 4-1: USB disconnect, device number 59
[ 1376.804646][T22037] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4619'.
[ 1376.837662][T22037] ip6t_REJECT: TCP_RESET illegal for non-tcp
[ 1377.461457][T19737] usb 4-1: new full-speed USB device number 60 using dummy_hcd
[ 1377.653667][T19737] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 1377.711155][T19737] usb 4-1: not running at top speed; connect to a high speed hub
[ 1377.731209][T19748] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[ 1377.763587][T19737] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1377.789818][T19737] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1056, setting to 1023
[ 1377.810138][T19737] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[ 1377.873271][T19737] usb 4-1: Dual-Role OTG device on HNP port
[ 1377.899947][T19737] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1377.911207][T19748] usb 2-1: Using ep0 maxpacket: 16
[ 1377.917994][T19748] usb 2-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config
[ 1377.928903][T19748] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1377.952550][T19737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1377.979526][T19737] usb 4-1: Product: syz
[ 1377.986331][T19748] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1377.986610][T19737] usb 4-1: Manufacturer: syz
[ 1378.020175][T19748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1378.038771][T19737] usb 4-1: SerialNumber: syz
[ 1378.056519][T19748] usb 2-1: Product: syz
[ 1378.079565][T19748] usb 2-1: Manufacturer: syz
[ 1378.094642][T19748] usb 2-1: SerialNumber: syz
[ 1378.290228][T19737] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor
[ 1378.331291][T19737] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[ 1378.381924][T19748] usb 2-1: 0:2 : does not exist
[ 1378.409672][T19737] usb 4-1: USB disconnect, device number 60
[ 1378.509124][T19748] usb 2-1: USB disconnect, device number 29
[ 1378.652647][T17556] udevd[17556]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[ 1378.671820][ T5891] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[ 1378.848764][T22057] snd_dummy snd_dummy.0: control 2:0:-129:syz0:1 is already present
[ 1378.865672][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1378.877983][ T5891] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1378.887245][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1378.905264][ T5891] usb 5-1: config 0 descriptor??
[ 1379.324318][ T5891] keytouch 0003:0926:3333.003B: fixing up Keytouch IEC report descriptor
[ 1379.336530][ T5891] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.003B/input/input130
[ 1379.437116][ T5891] keytouch 0003:0926:3333.003B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[ 1379.931726][T19752] usb 5-1: USB disconnect, device number 77
[ 1380.997903][T22095] PM: Enabling pm_trace changes system date and time during resume.
[ 1380.997903][T22095] PM: Correct system time has to be restored manually after resume.
[ 1381.039554][T22095] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4642'.
[ 1381.881808][ T1220] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[ 1381.952226][T22097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1382.018328][T22097] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1382.152585][T22091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1382.211245][T22091] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1382.291910][ T1220] usb 5-1: device descriptor read/all, error -71
[ 1382.368251][T22100] snd_dummy snd_dummy.0: control 2:0:-129:syz0:1 is already present
[ 1382.578788][T22102] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1382.619449][T22104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4645'.
[ 1383.381225][T19748] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[ 1383.634319][T19752] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[ 1383.870423][T19748] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1384.025343][T19748] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[ 1384.126147][T19748] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1384.227305][T19752] usb 4-1: config 0 interface 0 has no altsetting 0
[ 1384.314106][T19752] usb 4-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice=ff.f4
[ 1384.333631][T19748] usb 2-1: config 0 descriptor??
[ 1384.357848][T19752] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1384.383196][T19752] usb 4-1: Product: syz
[ 1384.408809][T19752] usb 4-1: Manufacturer: syz
[ 1384.423407][T19752] usb 4-1: config 0 descriptor??
[ 1384.882683][T19752] uclogic 0003:28BD:0075.003C: interface is invalid, ignoring
[ 1385.083106][T22109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1385.126606][T22109] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1385.154646][T22109] m920x_read = error: -19
[ 1385.412296][ T5891] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[ 1385.571266][ T5891] usb 5-1: Using ep0 maxpacket: 8
[ 1385.581025][ T5891] usb 5-1: config 0 has an invalid interface number: 52 but max is 0
[ 1385.594570][ T5891] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1385.606634][ T5891] usb 5-1: config 0 has no interface number 0
[ 1385.614772][ T5891] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0
[ 1385.632488][ T5891] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1385.777460][T19737] usb 4-1: USB disconnect, device number 61
[ 1385.867252][ T5891] usb 5-1: config 0 interface 52 has no altsetting 0
[ 1385.894151][ T5891] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[ 1385.912042][ T5891] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[ 1385.920299][ T5891] usb 5-1: Manufacturer: syz
[ 1385.940489][ T5891] usb 5-1: config 0 descriptor??
[ 1386.336410][T19752] usb 2-1: USB disconnect, device number 30
[ 1386.392320][ T5891] usb 5-1: USB disconnect, device number 80
[ 1386.844741][T22148] snd_dummy snd_dummy.0: control 2:0:-129:syz0:1 is already present
[ 1387.563504][T22153] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[ 1387.883340][T22151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1387.898037][T22151] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1387.967653][T22151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1387.971434][T22163] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4664'.
[ 1387.976809][T22151] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1388.001339][T19752] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[ 1388.434378][T22175] input: syz0 as /devices/virtual/input/input131
[ 1388.458292][   T30] audit: type=1326 audit(1748514062.251:2093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22172 comm="syz.2.4668" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff35278e969 code=0x0
[ 1388.461768][T19748] usb 4-1: new high-speed USB device number 62 using dummy_hcd
[ 1388.663282][T19748] usb 4-1: config 0 has an invalid interface number: 50 but max is 0
[ 1388.672870][T19748] usb 4-1: config 0 has no interface number 0
[ 1388.685744][T19748] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1388.707953][T19748] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[ 1388.718215][T19748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1388.729396][T19748] usb 4-1: Product: syz
[ 1388.734108][T19748] usb 4-1: Manufacturer: syz
[ 1388.738866][T19748] usb 4-1: SerialNumber: syz
[ 1388.769158][T19748] usb 4-1: config 0 descriptor??
[ 1388.790839][T19748] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0
[ 1389.008064][T19737] usb 4-1: USB disconnect, device number 62
[ 1389.016210][T19737] yurex 4-1:0.50: USB YUREX #0 now disconnected
[ 1389.037995][T22186] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[ 1389.433756][T22194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4673'.
[ 1389.445609][T22194] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4673'.
[ 1389.498832][T22194] bridge0: entered promiscuous mode
[ 1389.537163][T19752] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[ 1389.966652][T19752] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1389.977993][T19752] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1389.990609][T19752] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1390.008294][T19752] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1390.030863][T19752] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1390.071176][T19752] usb 2-1: config 0 descriptor??
[ 1390.421647][T19748] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[ 1390.538004][T19752] plantronics 0003:047F:FFFF.003D: No inputs registered, leaving
[ 1390.592442][T19752] plantronics 0003:047F:FFFF.003D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[ 1390.620862][T19748] usb 4-1: config 0 has no interfaces?
[ 1390.648295][T19748] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1390.702432][T19748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1390.813538][T19748] usb 4-1: Product: syz
[ 1390.817908][T19748] usb 4-1: Manufacturer: syz
[ 1390.830588][T19748] usb 4-1: SerialNumber: syz
[ 1390.848397][T19748] usb 4-1: config 0 descriptor??
[ 1390.940162][T22204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4676'.
[ 1391.581563][T19748] usb 5-1: new full-speed USB device number 82 using dummy_hcd
[ 1391.721273][T19748] usb 5-1: device descriptor read/64, error -71
[ 1391.977954][T19748] usb 5-1: new full-speed USB device number 83 using dummy_hcd
[ 1392.131234][T19748] usb 5-1: device descriptor read/64, error -71
[ 1392.242019][T19748] usb usb5-port1: attempt power cycle
[ 1392.586622][T19748] usb 5-1: new full-speed USB device number 84 using dummy_hcd
[ 1392.616371][T19748] usb 5-1: device descriptor read/8, error -71
[ 1392.861554][T19737] usb 2-1: reset high-speed USB device number 31 using dummy_hcd
[ 1392.891192][T19748] usb 5-1: new full-speed USB device number 85 using dummy_hcd
[ 1392.921977][T19748] usb 5-1: device descriptor read/8, error -71
[ 1393.012130][T19737] usb 2-1: device firmware changed
[ 1393.019196][T19752] usb 2-1: USB disconnect, device number 31
[ 1393.033847][T19748] usb usb5-port1: unable to enumerate USB device
[ 1393.171281][T19752] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[ 1393.325321][T19752] usb 2-1: config 0 has no interfaces?
[ 1393.334190][T19752] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1393.346464][T19752] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1393.355010][T19752] usb 2-1: Product: syz
[ 1393.359313][T19752] usb 2-1: Manufacturer: syz
[ 1393.364367][T19752] usb 2-1: SerialNumber: syz
[ 1393.371623][T19752] usb 2-1: config 0 descriptor??
[ 1393.590772][T19752] usb 2-1: USB disconnect, device number 32
[ 1394.024627][T19752] usb 4-1: USB disconnect, device number 63
[ 1394.469764][T19752] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[ 1394.557613][T22232] fuse: Bad value for 'fd'
[ 1394.651984][T19752] usb 2-1: Using ep0 maxpacket: 8
[ 1394.669789][T19752] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1394.683479][T19752] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[ 1394.709118][T19752] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1394.776565][T19752] usb 2-1: Product: syz
[ 1394.785131][T19752] usb 2-1: Manufacturer: syz
[ 1394.794942][T19752] usb 2-1: SerialNumber: syz
[ 1394.813158][T19752] usb 2-1: config 0 descriptor??
[ 1394.884250][T22235] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1395.632178][T19737] usb 2-1: USB disconnect, device number 33
[ 1396.617366][T22261] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4693'.
[ 1396.640067][T22261] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1396.660964][T22261] batadv_slave_0: entered promiscuous mode
[ 1397.525345][T22271] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1397.811300][T19752] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[ 1397.962775][T19752] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[ 1398.007491][T19752] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1398.336618][T19752] usb 5-1: config 0 descriptor??
[ 1398.364847][T19752] gspca_main: cpia1-2.14.0 probing 0813:0001
[ 1398.780528][T22285] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1398.781120][T19752] gspca_cpia1: usb_control_msg 03, error -32
[ 1398.796352][T22284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1399.046942][T22284] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1399.361694][T19752] gspca_cpia1: usb_control_msg 03, error -71
[ 1399.399314][T19752] gspca_cpia1: usb_control_msg 01, error -71
[ 1399.422719][T19752] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0)
[ 1399.459985][T19752] usb 5-1: USB disconnect, device number 86
[ 1399.481261][T19737] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[ 1399.842368][T19737] usb 4-1: config 0 has no interfaces?
[ 1399.873862][T19737] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1399.901180][T19737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1399.923009][T19737] usb 4-1: Product: syz
[ 1399.927253][T19737] usb 4-1: Manufacturer: syz
[ 1399.991147][T19737] usb 4-1: SerialNumber: syz
[ 1400.011386][T19752] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[ 1400.022823][T19737] usb 4-1: config 0 descriptor??
[ 1400.166649][T19752] usb 5-1: Using ep0 maxpacket: 32
[ 1400.186789][T19752] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[ 1400.195996][T19752] usb 5-1: config 0 has no interface number 0
[ 1400.204127][T19752] usb 5-1: config 0 interface 12 has no altsetting 0
[ 1400.214390][T19752] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1400.226423][T19752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1400.236596][T19752] usb 5-1: Product: syz
[ 1400.240876][T19752] usb 5-1: Manufacturer: syz
[ 1400.255646][T19752] usb 5-1: SerialNumber: syz
[ 1400.288904][T19752] usb 5-1: config 0 descriptor??
[ 1401.113269][    C1] raw-gadget.3 gadget.4: ignoring, device is not running
[ 1401.120876][    C1] raw-gadget.3 gadget.4: ignoring, device is not running
[ 1401.128763][    C1] raw-gadget.3 gadget.4: ignoring, device is not running
[ 1401.136483][    C1] raw-gadget.3 gadget.4: ignoring, device is not running
[ 1401.144104][    C1] raw-gadget.3 gadget.4: ignoring, device is not running
[ 1401.151914][    C1] raw-gadget.3 gadget.4: ignoring, device is not running
[ 1401.159445][    C1] raw-gadget.3 gadget.4: ignoring, device is not running
[ 1401.167038][T19752] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -32
[ 1401.174688][T19752] f81534 5-1:0.12: f81534_find_config_idx: read failed: -32
[ 1401.183172][T19752] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -32
[ 1401.199727][T19752] f81534 5-1:0.12: probe with driver f81534 failed with error -32
[ 1401.226637][T19752] usb 5-1: USB disconnect, device number 87
[ 1401.331374][T19750] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[ 1401.495999][T19750] usb 2-1: config 0 has no interfaces?
[ 1401.505580][T19750] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1401.520870][T19750] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1401.539014][T19750] usb 2-1: Product: syz
[ 1401.543695][T19750] usb 2-1: Manufacturer: syz
[ 1401.548732][T19750] usb 2-1: SerialNumber: syz
[ 1401.558129][T19750] usb 2-1: config 0 descriptor??
[ 1402.355484][T19750] usb 4-1: USB disconnect, device number 64
[ 1402.661217][T19737] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[ 1402.871679][T19737] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1402.890188][T19737] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[ 1402.935484][T19737] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1402.979998][T19737] usb 5-1: config 0 descriptor??
[ 1403.956237][ T5891] usb 2-1: USB disconnect, device number 34
[ 1404.021199][T15343] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[ 1404.242924][T15343] usb 4-1: Using ep0 maxpacket: 16
[ 1404.259516][T15343] usb 4-1: config 1 has an invalid descriptor of length 199, skipping remainder of the config
[ 1404.304667][T15343] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1404.388049][T15343] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1404.428229][T15343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1404.450533][T15343] usb 4-1: Product: syz
[ 1404.481754][T15343] usb 4-1: Manufacturer: syz
[ 1404.486440][T15343] usb 4-1: SerialNumber: syz
[ 1404.910142][T22337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4716'.
[ 1404.949819][T15343] usb 4-1: 0:2 : does not exist
[ 1404.977584][T15343] usb 4-1: USB disconnect, device number 65
[ 1405.002024][T22337] netlink: 596 bytes leftover after parsing attributes in process `syz.0.4716'.
[ 1405.421336][ T1220] usb 5-1: USB disconnect, device number 88
[ 1405.991388][T22352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4722'.
[ 1406.179001][T22356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4723'.
[ 1406.208550][T22357] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4723'.
[ 1409.081378][ T5891] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[ 1409.242348][ T5891] usb 5-1: Using ep0 maxpacket: 16
[ 1409.250236][ T5891] usb 5-1: config 1 has an invalid descriptor of length 157, skipping remainder of the config
[ 1409.268774][ T5891] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1409.329533][ T5891] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1409.339664][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1409.348514][ T5891] usb 5-1: Product: syz
[ 1409.395348][ T5891] usb 5-1: Manufacturer: syz
[ 1409.411322][ T5891] usb 5-1: SerialNumber: syz
[ 1409.704858][ T5891] usb 5-1: 0:2 : does not exist
[ 1409.939407][ T5891] usb 5-1: USB disconnect, device number 89
[ 1410.263035][T17556] udevd[17556]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1412.211641][ T5891] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[ 1412.361866][ T5891] usb 2-1: Using ep0 maxpacket: 8
[ 1412.408428][ T5891] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[ 1412.444414][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1412.524613][ T5891] pvrusb2: Hardware description: Terratec Grabster AV400
[ 1412.546166][ T5891] pvrusb2: **********
[ 1412.559683][ T5891] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[ 1412.631029][ T5891] pvrusb2: Important functionality might not be entirely working.
[ 1412.651397][ T1220] usb 5-1: new high-speed USB device number 90 using dummy_hcd
[ 1412.668203][ T5891] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[ 1412.752725][ T5891] pvrusb2: **********
[ 1412.765703][ T2346] pvrusb2: Invalid write control endpoint
[ 1412.841201][ T1220] usb 5-1: device descriptor read/64, error -71
[ 1412.866156][ T2346] pvrusb2: Invalid write control endpoint
[ 1412.895846][ T2346] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[ 1412.930335][ T2346] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[ 1412.948921][ T2346] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[ 1412.962636][ T2346] pvrusb2: Device being rendered inoperable
[ 1412.968732][ T2346] cx25840 3-0044: Unable to detect h/w, assuming cx23887
[ 1412.976385][ T2346] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[ 1412.989352][ T2346] pvrusb2: Attached sub-driver cx25840
[ 1412.995744][T22423] netlink: 'syz.1.4740': attribute type 2 has an invalid length.
[ 1413.006222][T19737] usb 2-1: USB disconnect, device number 35
[ 1413.019776][ T2346] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[ 1413.034354][ T2346] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[ 1413.057628][T22439] FAULT_INJECTION: forcing a failure.
[ 1413.057628][T22439] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1413.094284][ T1220] usb 5-1: new high-speed USB device number 91 using dummy_hcd
[ 1413.127003][T22439] CPU: 1 UID: 0 PID: 22439 Comm: syz.2.4747 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) 
[ 1413.127036][T22439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1413.127050][T22439] Call Trace:
[ 1413.127059][T22439]  <TASK>
[ 1413.127068][T22439]  dump_stack_lvl+0x189/0x250
[ 1413.127103][T22439]  ? __pfx____ratelimit+0x10/0x10
[ 1413.127128][T22439]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1413.127157][T22439]  ? __pfx__printk+0x10/0x10
[ 1413.127190][T22439]  should_fail_ex+0x414/0x560
[ 1413.127223][T22439]  _copy_to_user+0x31/0xb0
[ 1413.127244][T22439]  simple_read_from_buffer+0xe1/0x170
[ 1413.127274][T22439]  proc_fail_nth_read+0x1df/0x250
[ 1413.127298][T22439]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1413.127322][T22439]  ? rw_verify_area+0x258/0x650
[ 1413.127347][T22439]  ? iommufd_get_hw_info+0xdc/0x9c0
[ 1413.127371][T22439]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1413.127394][T22439]  vfs_read+0x200/0x980
[ 1413.127427][T22439]  ? __pfx_vfs_read+0x10/0x10
[ 1413.127455][T22439]  ? iommufd_fops_ioctl+0x446/0x520
[ 1413.127480][T22439]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[ 1413.127514][T22439]  ksys_read+0x145/0x250
[ 1413.127542][T22439]  ? __pfx_ksys_read+0x10/0x10
[ 1413.127572][T22439]  ? do_syscall_64+0xbe/0x3b0
[ 1413.127600][T22439]  do_syscall_64+0xfa/0x3b0
[ 1413.127621][T22439]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1413.127656][T22439]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1413.127677][T22439]  ? clear_bhb_loop+0x60/0xb0
[ 1413.127702][T22439]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1413.127722][T22439] RIP: 0033:0x7ff35278d37c
[ 1413.127742][T22439] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1413.127760][T22439] RSP: 002b:00007ff35356c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1413.127784][T22439] RAX: ffffffffffffffda RBX: 00007ff3529b5fa0 RCX: 00007ff35278d37c
[ 1413.127799][T22439] RDX: 000000000000000f RSI: 00007ff35356c0a0 RDI: 0000000000000004
[ 1413.127812][T22439] RBP: 00007ff35356c090 R08: 0000000000000000 R09: 0000000000000000
[ 1413.127825][T22439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1413.127837][T22439] R13: 0000000000000000 R14: 00007ff3529b5fa0 R15: 00007ff352adfa28
[ 1413.127870][T22439]  </TASK>
[ 1413.356388][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1413.431359][ T1220] usb 5-1: device descriptor read/64, error -71
[ 1413.541526][ T1220] usb usb5-port1: attempt power cycle
[ 1413.761163][T19737] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[ 1414.041385][ T1220] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[ 1414.074577][ T1220] usb 5-1: device descriptor read/8, error -71
[ 1414.125791][T19737] usb 4-1: config 2 interface 0 altsetting 178 endpoint 0xA has invalid maxpacket 57464, setting to 64
[ 1414.137244][T19737] usb 4-1: config 2 interface 0 has no altsetting 0
[ 1414.149821][T19737] usb 4-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47
[ 1414.165272][T19737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1414.174606][T19737] usb 4-1: Product: syz
[ 1414.179107][T19737] usb 4-1: Manufacturer: syz
[ 1414.184294][T19737] usb 4-1: SerialNumber: syz
[ 1414.341235][ T1220] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[ 1414.362126][ T1220] usb 5-1: device descriptor read/8, error -71
[ 1414.400722][T22432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1414.411339][T19750] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[ 1414.412362][T22432] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1414.481688][ T1220] usb usb5-port1: unable to enumerate USB device
[ 1414.513674][T22432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1414.525455][T22432] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1414.601394][T19750] usb 2-1: Using ep0 maxpacket: 16
[ 1414.663317][T19750] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[ 1414.679227][T19750] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1414.698912][T19750] usb 2-1: Product: syz
[ 1414.709075][T19750] usb 2-1: Manufacturer: syz
[ 1414.724067][T19750] usb 2-1: SerialNumber: syz
[ 1414.745643][T19737] ims_pcu 4-1:2.0: probe with driver ims_pcu failed with error -22
[ 1414.768289][T19750] r8152-cfgselector 2-1: Unknown version 0x0000
[ 1414.780521][T19750] r8152-cfgselector 2-1: config 0 descriptor??
[ 1414.808914][T19737] usb 4-1: USB disconnect, device number 66
[ 1415.062556][T19750] r8152-cfgselector 2-1: Unknown version 0x0020
[ 1415.069033][T19750] r8152-cfgselector 2-1: bad CDC descriptors
[ 1415.267571][T22451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1415.289026][T22451] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1415.347899][T22451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1415.390401][T22451] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1415.544065][T19737] r8152-cfgselector 2-1: USB disconnect, device number 36
[ 1416.068795][T19750] usb 4-1: new low-speed USB device number 67 using dummy_hcd
[ 1416.235087][T19750] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1416.246448][T19750] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1416.279198][T19750] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1416.303192][T19750] usb 4-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00
[ 1416.312762][T19750] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1416.336623][T19750] usb 4-1: config 0 descriptor??
[ 1416.341166][T19737] usb 2-1: new low-speed USB device number 37 using dummy_hcd
[ 1416.366251][T19750] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input133
[ 1416.503165][T19737] usb 2-1: config index 0 descriptor too short (expected 6427, got 27)
[ 1416.514765][T19737] usb 2-1: config 0 has an invalid interface number: 21 but max is 0
[ 1416.523720][T19737] usb 2-1: config 0 has no interface number 0
[ 1416.530391][T19737] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[ 1416.541409][T19737] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4
[ 1416.551104][T19737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1416.564276][ T5187] bcm5974 4-1:0.0: could not read from device
[ 1416.576051][T19737] usb 2-1: config 0 descriptor??
[ 1416.590773][T22477] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[ 1416.609158][ T5187] bcm5974 4-1:0.0: could not read from device
[ 1416.615842][T19750] usb 4-1: USB disconnect, device number 67
[ 1416.762212][T17556] udevd[17556]: Error opening device "/dev/input/event4": No such file or directory
[ 1416.811398][T17556] udevd[17556]: Unable to EVIOCGABS device "/dev/input/event4"
[ 1416.931975][T17556] udevd[17556]: Unable to EVIOCGABS device "/dev/input/event4"
[ 1416.961364][T17556] udevd[17556]: Unable to EVIOCGABS device "/dev/input/event4"
[ 1416.989842][T17556] udevd[17556]: Unable to EVIOCGABS device "/dev/input/event4"
[ 1416.989865][T22477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4760'.
[ 1417.049786][T22477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1417.119531][T22477] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1417.464418][T22488] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4763'.
[ 1417.501171][T19750] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[ 1417.557058][T19737] input: USB Keyspan Remote 06cd:0202 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input134
[ 1417.632465][T19750] usb 5-1: device descriptor read/64, error -71
[ 1417.764631][T15343] usb 2-1: USB disconnect, device number 37
[ 1417.764768][    C0] keyspan_remote 2-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19
[ 1417.891193][T19750] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[ 1418.031330][T19750] usb 5-1: device descriptor read/64, error -71
[ 1418.145416][T19750] usb usb5-port1: attempt power cycle
[ 1418.575487][T19750] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[ 1418.649120][T19750] usb 5-1: device descriptor read/8, error -71
[ 1418.981748][T19750] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[ 1419.612016][T19750] usb 5-1: device descriptor read/8, error -71
[ 1419.731720][T19750] usb usb5-port1: unable to enumerate USB device
[ 1421.042163][T22506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1421.057972][T22506] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1421.151265][T22505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1421.160167][T22505] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1421.168321][T19752] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[ 1422.513953][T19752] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[ 1422.687536][T19752] usb 5-1: Using ep0 maxpacket: 16
[ 1422.703554][T19752] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1422.714844][T19752] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1422.739030][T19752] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1422.748512][T19752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1422.757979][T19752] usb 5-1: Product: syz
[ 1422.762970][T19752] usb 5-1: Manufacturer: syz
[ 1422.767707][T19752] usb 5-1: SerialNumber: syz
[ 1422.987302][T19752] usb 5-1: 0:2 : does not exist
[ 1422.996757][T19752] usb 5-1: unit 15 not found!
[ 1423.029244][T19752] usb 5-1: USB disconnect, device number 99
[ 1423.090398][T17556] udevd[17556]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1423.442877][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.449318][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 1423.601969][T22502] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1423.629383][T22502] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1423.824430][T22526] input: syz0 as /devices/virtual/input/input135
[ 1423.845005][   T30] audit: type=1326 audit(1748514097.641:2094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22522 comm="syz.1.4774" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b5c18e969 code=0x0
[ 1424.232716][T19737] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[ 1424.403178][T19737] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[ 1424.412608][T19737] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1424.481886][T19737] usb 4-1: config 220 has no interface number 2
[ 1424.488503][T19737] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 1424.505194][T19737] usb 4-1: config 220 interface 0 has no altsetting 0
[ 1424.513120][T19737] usb 4-1: config 220 interface 76 has no altsetting 0
[ 1424.523730][T19737] usb 4-1: config 220 interface 1 has no altsetting 0
[ 1424.637020][T19737] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1424.685201][T19737] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1424.704081][T19737] usb 4-1: Product: syz
[ 1424.711679][T19737] usb 4-1: Manufacturer: syz
[ 1424.716344][T19737] usb 4-1: SerialNumber: syz
[ 1424.881186][T19750] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[ 1425.130469][T19737] usb 4-1: selecting invalid altsetting 0
[ 1425.162154][T19737] usb 4-1: Found UVC 7.01 device syz (8086:0b07)
[ 1425.162910][T19750] usb 5-1: config 0 interface 0 has no altsetting 0
[ 1425.196625][T19737] usb 4-1: No valid video chain found.
[ 1425.203981][T19750] usb 5-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice=ff.f4
[ 1425.221311][T19750] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 1425.223724][T19737] usb 4-1: selecting invalid altsetting 0
[ 1425.250216][T19750] usb 5-1: Product: syz
[ 1425.260337][T19750] usb 5-1: Manufacturer: syz
[ 1425.265514][T19737] usbtest 4-1:220.1: probe with driver usbtest failed with error -22
[ 1425.282422][T19750] usb 5-1: config 0 descriptor??
[ 1425.311519][T19737] usb 4-1: USB disconnect, device number 68
[ 1425.704977][T19750] uclogic 0003:28BD:0075.003E: interface is invalid, ignoring
[ 1425.833602][T22541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1425.844987][T22541] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1425.912019][T19737] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[ 1425.964758][T22516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1425.981785][T22516] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1426.020391][T22541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1426.037719][T22541] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1426.048026][T22550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4782'.
[ 1426.078811][ T1220] usb 5-1: USB disconnect, device number 100
[ 1427.243187][T22571] FAULT_INJECTION: forcing a failure.
[ 1427.243187][T22571] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1427.295397][T22571] CPU: 0 UID: 0 PID: 22571 Comm: syz.1.4789 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) 
[ 1427.295431][T22571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1427.295444][T22571] Call Trace:
[ 1427.295453][T22571]  <TASK>
[ 1427.295463][T22571]  dump_stack_lvl+0x189/0x250
[ 1427.295501][T22571]  ? __pfx____ratelimit+0x10/0x10
[ 1427.295541][T22571]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1427.295571][T22571]  ? __pfx__printk+0x10/0x10
[ 1427.295607][T22571]  should_fail_ex+0x414/0x560
[ 1427.295639][T22571]  _copy_to_user+0x31/0xb0
[ 1427.295664][T22571]  simple_read_from_buffer+0xe1/0x170
[ 1427.295698][T22571]  proc_fail_nth_read+0x1df/0x250
[ 1427.295723][T22571]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1427.295747][T22571]  ? rw_verify_area+0x258/0x650
[ 1427.295771][T22571]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1427.295793][T22571]  vfs_read+0x200/0x980
[ 1427.295825][T22571]  ? __pfx___mutex_lock+0x10/0x10
[ 1427.295852][T22571]  ? __pfx_vfs_read+0x10/0x10
[ 1427.295879][T22571]  ? __fget_files+0x2a/0x420
[ 1427.295913][T22571]  ? __fget_files+0x3a0/0x420
[ 1427.295941][T22571]  ? __fget_files+0x2a/0x420
[ 1427.295980][T22571]  ksys_read+0x145/0x250
[ 1427.296009][T22571]  ? __pfx_ksys_read+0x10/0x10
[ 1427.296041][T22571]  ? do_syscall_64+0xbe/0x3b0
[ 1427.296071][T22571]  do_syscall_64+0xfa/0x3b0
[ 1427.296095][T22571]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1427.296119][T22571]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1427.296140][T22571]  ? clear_bhb_loop+0x60/0xb0
[ 1427.296165][T22571]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1427.296185][T22571] RIP: 0033:0x7f7b5c18d37c
[ 1427.296205][T22571] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1427.296223][T22571] RSP: 002b:00007f7b5d06a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1427.296246][T22571] RAX: ffffffffffffffda RBX: 00007f7b5c3b5fa0 RCX: 00007f7b5c18d37c
[ 1427.296261][T22571] RDX: 000000000000000f RSI: 00007f7b5d06a0a0 RDI: 0000000000000004
[ 1427.296274][T22571] RBP: 00007f7b5d06a090 R08: 0000000000000000 R09: 0000000000000000
[ 1427.296288][T22571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1427.296300][T22571] R13: 0000000000000000 R14: 00007f7b5c3b5fa0 R15: 00007f7b5c4dfa28
[ 1427.296334][T22571]  </TASK>
[ 1427.529494][T19750] usb 5-1: new high-speed USB device number 101 using dummy_hcd
[ 1427.851421][T19750] usb 5-1: Using ep0 maxpacket: 32
[ 1427.861951][T19750] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[ 1427.871239][T19750] usb 5-1: config 0 has no interface number 0
[ 1427.885531][T19750] usb 5-1: config 0 interface 12 has no altsetting 0
[ 1427.917286][T19750] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1427.943698][T19750] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1428.152507][T19750] usb 5-1: Product: syz
[ 1428.156788][T19750] usb 5-1: Manufacturer: syz
[ 1428.165605][T19750] usb 5-1: SerialNumber: syz
[ 1428.283286][T19750] usb 5-1: config 0 descriptor??
[ 1428.976725][    C1] raw-gadget.0 gadget.4: ignoring, device is not running
[ 1428.985210][    C1] raw-gadget.0 gadget.4: ignoring, device is not running
[ 1428.993418][    C1] raw-gadget.0 gadget.4: ignoring, device is not running
[ 1429.001280][    C1] raw-gadget.0 gadget.4: ignoring, device is not running
[ 1429.009504][    C1] raw-gadget.0 gadget.4: ignoring, device is not running
[ 1429.018968][    C1] raw-gadget.0 gadget.4: ignoring, device is not running
[ 1429.027177][    C1] raw-gadget.0 gadget.4: ignoring, device is not running
[ 1429.034888][T19750] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -32
[ 1429.042496][T19750] f81534 5-1:0.12: f81534_find_config_idx: read failed: -32
[ 1429.049839][T19750] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -32
[ 1429.138765][T19750] f81534 5-1:0.12: probe with driver f81534 failed with error -32
[ 1429.161397][T19750] usb 5-1: USB disconnect, device number 101
[ 1429.234908][T17556] udevd[17556]: setting mode of /dev/bus/usb/005/101 to 020664 failed: No such file or directory
[ 1429.253246][T17556] udevd[17556]: setting owner of /dev/bus/usb/005/101 to uid=0, gid=0 failed: No such file or directory
[ 1429.961324][T22606] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7)
[ 1429.967915][T22606] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[ 1429.981173][T22606] vhci_hcd vhci_hcd.0: Device attached
[ 1430.158001][T22607] vhci_hcd: connection closed
[ 1430.173191][   T12] vhci_hcd: stop threads
[ 1430.183042][T19737] vhci_hcd: vhci_device speed not set
[ 1430.209563][   T12] vhci_hcd: release socket
[ 1430.214972][   T12] vhci_hcd: disconnect device
[ 1430.261360][T19737] usb 37-1: new full-speed USB device number 3 using vhci_hcd
[ 1430.271164][T19737] usb 37-1: enqueue for inactive port 0
[ 1430.431387][T19737] vhci_hcd: vhci_device speed not set
[ 1430.881161][ T1220] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[ 1431.063811][ T1220] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1431.101731][ T1220] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[ 1431.159649][ T1220] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1431.186921][ T1220] usb 5-1: config 0 descriptor??
[ 1431.381901][T22617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1431.457167][T22617] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1431.506833][T19750] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[ 1431.560398][T22617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1431.584278][T22617] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1431.659973][T22633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4806'.
[ 1431.689673][T22633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4806'.
[ 1431.707206][T22633] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4806'.
[ 1431.756118][T22633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4806'.
[ 1432.073512][T22643] ptrace attach of "./syz-executor exec"[15671] was attempted by "./syz-executor exec"[22643]
[ 1432.383031][T22645] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4809'.
[ 1432.577679][T22648] snd_dummy snd_dummy.0: control 2:0:-129:syz0:1 is already present
[ 1433.473329][T19750] usb 5-1: USB disconnect, device number 102
[ 1433.764680][T22654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4813'.
[ 1433.808597][T22654] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4813'.
[ 1433.919210][T22658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4812'.
[ 1433.981250][T19752] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[ 1434.172843][T19752] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 1434.191400][T19752] usb 2-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1434.241266][T19752] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1434.250472][T19752] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1434.353377][T19752] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[ 1434.555583][T22651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1434.585217][T19752] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2
[ 1434.621462][T22651] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1435.090939][T22679] snd_dummy snd_dummy.0: control 2:0:-129:syz0:1 is already present
[ 1436.012258][T19752] usb 4-1: new high-speed USB device number 69 using dummy_hcd
[ 1436.048584][T22678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1436.060191][T22678] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1436.067426][T19750] usb 2-1: USB disconnect, device number 40
[ 1436.139241][T22678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1436.160186][T22678] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1436.171176][T19737] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[ 1436.194102][T19752] usb 4-1: config 0 has no interfaces?
[ 1436.200196][T22687] vivid-002: =================  START STATUS  =================
[ 1436.209684][T22687] vivid-002: Radio HW Seek Mode: Bounded
[ 1436.218348][T22687] vivid-002: Radio Programmable HW Seek: false
[ 1436.226766][T19752] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1436.238217][T22687] vivid-002: RDS Rx I/O Mode: Block I/O
[ 1436.243977][T19752] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1436.253845][T22687] vivid-002: Generate RBDS Instead of RDS: false
[ 1436.260291][T22687] vivid-002: RDS Reception: true
[ 1436.265555][T19752] usb 4-1: Product: syz
[ 1436.269753][T19752] usb 4-1: Manufacturer: syz
[ 1436.275394][T19752] usb 4-1: SerialNumber: syz
[ 1436.281664][T22687] vivid-002: RDS Program Type: 0 inactive
[ 1436.291229][T22687] vivid-002: RDS PS Name:  inactive
[ 1436.296520][T22687] vivid-002: RDS Radio Text:  inactive
[ 1436.302790][T19752] usb 4-1: config 0 descriptor??
[ 1436.308117][T22687] vivid-002: RDS Traffic Announcement: false inactive
[ 1436.317510][T22687] vivid-002: RDS Traffic Program: false inactive
[ 1436.324457][T22687] vivid-002: RDS Music: false inactive
[ 1436.330101][T22687] vivid-002: ==================  END STATUS  ==================
[ 1436.774828][T22700] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4829'.
[ 1436.955782][T22702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4830'.
[ 1436.968496][T22702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4830'.
[ 1437.078140][T19752] usb 4-1: USB disconnect, device number 69
[ 1437.551147][T19737] usb 5-1: new full-speed USB device number 104 using dummy_hcd
[ 1437.782100][T19737] usb 5-1: config 0 has no interfaces?
[ 1437.790794][T19737] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[ 1437.803019][T19737] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1437.812987][T19737] usb 5-1: Product: syz
[ 1437.817245][T19737] usb 5-1: Manufacturer: syz
[ 1437.831423][T19737] usb 5-1: SerialNumber: syz
[ 1437.839505][T19737] usb 5-1: config 0 descriptor??
[ 1437.941155][ T1220] usb 4-1: new high-speed USB device number 70 using dummy_hcd
[ 1438.048885][T22706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1438.064404][T22706] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1438.091641][T22712] snd_dummy snd_dummy.0: control 2:0:-129:syz0:1 is already present
[ 1438.108336][ T1220] usb 4-1: config 0 has no interfaces?
[ 1438.125897][ T1220] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1438.137672][ T1220] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1438.146194][ T1220] usb 4-1: Product: syz
[ 1438.150379][ T1220] usb 4-1: Manufacturer: syz
[ 1438.163164][T19750] usb 5-1: USB disconnect, device number 104
[ 1438.169616][ T1220] usb 4-1: SerialNumber: syz
[ 1438.187848][ T1220] usb 4-1: config 0 descriptor??
[ 1438.998772][T22725] FAULT_INJECTION: forcing a failure.
[ 1438.998772][T22725] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1439.021679][T22725] CPU: 1 UID: 0 PID: 22725 Comm: syz.2.4839 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) 
[ 1439.021701][T22725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1439.021711][T22725] Call Trace:
[ 1439.021718][T22725]  <TASK>
[ 1439.021724][T22725]  dump_stack_lvl+0x189/0x250
[ 1439.021749][T22725]  ? __pfx____ratelimit+0x10/0x10
[ 1439.021764][T22725]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1439.021782][T22725]  ? __pfx__printk+0x10/0x10
[ 1439.021796][T22725]  ? __might_fault+0xb0/0x130
[ 1439.021819][T22725]  should_fail_ex+0x414/0x560
[ 1439.021838][T22725]  _copy_from_user+0x2d/0xb0
[ 1439.021852][T22725]  ___sys_recvmsg+0x12e/0x510
[ 1439.021869][T22725]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1439.021896][T22725]  ? __pfx_set_normalized_timespec64+0x10/0x10
[ 1439.021918][T22725]  do_recvmmsg+0x307/0x770
[ 1439.021936][T22725]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1439.021956][T22725]  ? _copy_from_user+0x94/0xb0
[ 1439.021977][T22725]  __x64_sys_recvmmsg+0x1af/0x240
[ 1439.021992][T22725]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1439.022003][T22725]  ? rcu_is_watching+0x15/0xb0
[ 1439.022023][T22725]  ? do_syscall_64+0xbe/0x3b0
[ 1439.022040][T22725]  do_syscall_64+0xfa/0x3b0
[ 1439.022054][T22725]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1439.022068][T22725]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1439.022080][T22725]  ? clear_bhb_loop+0x60/0xb0
[ 1439.022095][T22725]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1439.022107][T22725] RIP: 0033:0x7ff35278e969
[ 1439.022119][T22725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1439.022131][T22725] RSP: 002b:00007ff35356c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1439.022146][T22725] RAX: ffffffffffffffda RBX: 00007ff3529b5fa0 RCX: 00007ff35278e969
[ 1439.022155][T22725] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003
[ 1439.022163][T22725] RBP: 00007ff35356c090 R08: 0000200000003700 R09: 0000000000000000
[ 1439.022171][T22725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1439.022179][T22725] R13: 0000000000000000 R14: 00007ff3529b5fa0 R15: 00007ff352adfa28
[ 1439.022197][T22725]  </TASK>
[ 1439.246076][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1440.312461][T19737] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[ 1440.312470][T19752] usb 5-1: new high-speed USB device number 105 using dummy_hcd
[ 1440.471551][T19752] usb 5-1: Using ep0 maxpacket: 32
[ 1440.479766][T19752] usb 5-1: config 1 interface 0 has no altsetting 0
[ 1440.487824][T19737] usb 2-1: config 0 has no interfaces?
[ 1440.489342][T19752] usb 5-1: New USB device found, idVendor=056a, idProduct=0301, bcdDevice= 0.40
[ 1440.507246][T19752] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1440.519220][T19752] usb 5-1: Product: ȊࣃӲ㙣돫ᣐ螎ޏ⟪䚷䣬㜷ὂ뽎ᮿ῕R乳걄㷖隮᫕ꠍᇜP닳Ⴌ㤆땂汚㘭胒䥌溢ꊉ㋡⋎ᐩ찻맳䆒텟ꝕ赇蠆듔࿁廡靱Ⱁ挕⊗ᚌ猰딘ޓ垵᪽ࣷ㒥図䣻恾ꭀ㋦촧ᝐ㑌䦫ꌧ⭄趁缑弅㈑氲瑨绉麑∂䢹
[ 1440.544997][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1440.562910][T19737] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1440.581490][T19737] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1440.596478][T19737] usb 2-1: Product: syz
[ 1440.600932][T19737] usb 2-1: Manufacturer: syz
[ 1440.607180][T19737] usb 2-1: SerialNumber: syz
[ 1440.622177][T19752] usb 5-1: Manufacturer: 椓⇗茽ꚋ㗬掲㑉뽴州侏윶祯蓷풕㎓ፏ릗ⲩ㽴ﴴ┴ꇦԛ朗漬펤㷥粯댴৞鄯ꅐ콙
[ 1440.627183][T19737] usb 2-1: config 0 descriptor??
[ 1440.639600][T19750] usb 4-1: USB disconnect, device number 70
[ 1440.656755][T19752] usb 5-1: SerialNumber: ᆦ甋恡툑饑䃍鱧찷隿Ǩゾ抠玳ᮘﺭ鮅灚ﻳ瘏儼툇嬍诌䈸ꆟ㯳쀫렆뺌䰧켚훃썤ຬ鸿⌾ꝧꆁ▰㭶㖄⾠뛬䳿婕雇ꍺ襻䈛ﱞ㭽伒黼Ž퉻ꨤﰃ㚑ꍟၘᏃ⣳팇꼖㗂䁞杸䜨텂ҙ婱瓰涞눸턲ન獀咦㮡㩹滓ꘇ姮쿽傥ﮀᴞ쪔慶凌⣃嶏ᡝ⛇᪳츥놧㕬♪칋蒐
[ 1440.690871][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1440.819134][T22747] FAULT_INJECTION: forcing a failure.
[ 1440.819134][T22747] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1440.832753][T22747] CPU: 0 UID: 0 PID: 22747 Comm: syz.0.4847 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) 
[ 1440.832783][T22747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1440.832797][T22747] Call Trace:
[ 1440.832806][T22747]  <TASK>
[ 1440.832815][T22747]  dump_stack_lvl+0x189/0x250
[ 1440.832846][T22747]  ? __pfx____ratelimit+0x10/0x10
[ 1440.832866][T22747]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1440.832890][T22747]  ? __pfx__printk+0x10/0x10
[ 1440.832908][T22747]  ? __might_fault+0xb0/0x130
[ 1440.832946][T22747]  should_fail_ex+0x414/0x560
[ 1440.832972][T22747]  _copy_from_user+0x2d/0xb0
[ 1440.832990][T22747]  __sys_bind+0x199/0x3e0
[ 1440.833015][T22747]  ? __pfx___sys_bind+0x10/0x10
[ 1440.833047][T22747]  ? __pfx_ksys_write+0x10/0x10
[ 1440.833077][T22747]  __x64_sys_bind+0x7a/0x90
[ 1440.833102][T22747]  do_syscall_64+0xfa/0x3b0
[ 1440.833122][T22747]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1440.833141][T22747]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1440.833157][T22747]  ? clear_bhb_loop+0x60/0xb0
[ 1440.833177][T22747]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1440.833193][T22747] RIP: 0033:0x7f463d38e969
[ 1440.833210][T22747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1440.833228][T22747] RSP: 002b:00007f463e16d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[ 1440.833247][T22747] RAX: ffffffffffffffda RBX: 00007f463d5b5fa0 RCX: 00007f463d38e969
[ 1440.833259][T22747] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000006
[ 1440.833270][T22747] RBP: 00007f463e16d090 R08: 0000000000000000 R09: 0000000000000000
[ 1440.833281][T22747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1440.833291][T22747] R13: 0000000000000000 R14: 00007f463d5b5fa0 R15: 00007f463d6dfa28
[ 1440.833317][T22747]  </TASK>
[ 1441.043346][T22737] sctp: [Deprecated]: syz.4.4844 (pid 22737) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1441.043346][T22737] Use struct sctp_sack_info instead
[ 1441.157237][T19752] usbhid 5-1:1.0: can't add hid device: -71
[ 1441.166250][T19752] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[ 1441.186994][T19752] usb 5-1: USB disconnect, device number 105
[ 1441.259384][T22756] snd_dummy snd_dummy.0: control 2:0:-129:syz0:1 is already present
[ 1441.607203][T19752] usb 2-1: USB disconnect, device number 41
[ 1441.964522][T22766] FAULT_INJECTION: forcing a failure.
[ 1441.964522][T22766] name failslab, interval 1, probability 0, space 0, times 0
[ 1441.977651][T22766] CPU: 1 UID: 0 PID: 22766 Comm: syz.3.4853 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) 
[ 1441.977670][T22766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1441.977678][T22766] Call Trace:
[ 1441.977685][T22766]  <TASK>
[ 1441.977691][T22766]  dump_stack_lvl+0x189/0x250
[ 1441.977714][T22766]  ? __pfx____ratelimit+0x10/0x10
[ 1441.977730][T22766]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1441.977749][T22766]  ? __pfx__printk+0x10/0x10
[ 1441.977763][T22766]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1441.977782][T22766]  should_fail_ex+0x414/0x560
[ 1441.977800][T22766]  should_failslab+0xa8/0x100
[ 1441.977819][T22766]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[ 1441.977842][T22766]  ? __alloc_skb+0x112/0x2d0
[ 1441.977863][T22766]  ? tipc_own_addr+0x45/0x2a0
[ 1441.977881][T22766]  __alloc_skb+0x112/0x2d0
[ 1441.977900][T22766]  tipc_msg_create+0x51/0x4d0
[ 1441.977919][T22766]  tipc_group_create_event+0x1d8/0x640
[ 1441.977941][T22766]  ? __pfx_tipc_group_create_event+0x10/0x10
[ 1441.977972][T22766]  tipc_sk_proto_rcv+0x235/0x1730
[ 1441.977991][T22766]  ? __lock_acquire+0xab9/0xd20
[ 1441.978010][T22766]  ? __pfx_tipc_sk_proto_rcv+0x10/0x10
[ 1441.978027][T22766]  ? tipc_sk_filtering+0x13c/0x510
[ 1441.978041][T22766]  tipc_sk_filter_rcv+0x2e7b/0x30b0
[ 1441.978057][T22766]  ? __lock_acquire+0xab9/0xd20
[ 1441.978090][T22766]  ? __lock_acquire+0xab9/0xd20
[ 1441.978105][T22766]  ? __pfx_tipc_sk_filter_rcv+0x10/0x10
[ 1441.978119][T22766]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1441.978147][T22766]  tipc_sk_rcv+0x8a5/0x2ba0
[ 1441.978170][T22766]  ? __lock_acquire+0xab9/0xd20
[ 1441.978200][T22766]  ? __pfx_tipc_sk_rcv+0x10/0x10
[ 1441.978230][T22766]  ? __raw_spin_lock_init+0x45/0x100
[ 1441.978244][T22766]  tipc_node_xmit+0x1c9/0xe90
[ 1441.978264][T22766]  ? __pfx_tipc_node_xmit+0x10/0x10
[ 1441.978279][T22766]  ? kasan_save_track+0x4f/0x80
[ 1441.978292][T22766]  ? kasan_save_track+0x3e/0x80
[ 1441.978306][T22766]  ? kasan_save_free_info+0x46/0x50
[ 1441.978317][T22766]  ? __kasan_slab_free+0x62/0x70
[ 1441.978331][T22766]  ? kfree+0x18e/0x440
[ 1441.978345][T22766]  ? tipc_group_delete+0x3ac/0x480
[ 1441.978360][T22766]  ? tipc_sk_leave+0x138/0x4e0
[ 1441.978371][T22766]  ? tipc_release+0x5fc/0x2160
[ 1441.978381][T22766]  ? sock_close+0xc0/0x240
[ 1441.978393][T22766]  ? __fput+0x44c/0xa70
[ 1441.978404][T22766]  ? task_work_run+0x1d1/0x260
[ 1441.978416][T22766]  ? exit_to_user_mode_loop+0xec/0x110
[ 1441.978430][T22766]  ? do_syscall_64+0x2bd/0x3b0
[ 1441.978444][T22766]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1441.978472][T22766]  tipc_node_distr_xmit+0x2a0/0x3b0
[ 1441.978500][T22766]  ? __pfx_tipc_node_distr_xmit+0x10/0x10
[ 1441.978526][T22766]  ? tipc_group_delete+0x3ac/0x480
[ 1441.978542][T22766]  ? kfree+0x18e/0x440
[ 1441.978556][T22766]  ? tipc_group_proto_xmit+0x278/0x790
[ 1441.978574][T22766]  tipc_group_delete+0x3e4/0x480
[ 1441.978594][T22766]  ? kasan_save_stack+0x3e/0x60
[ 1441.978609][T22766]  ? __pfx_tipc_group_delete+0x10/0x10
[ 1441.978633][T22766]  ? tipc_group_self+0x26/0x1c0
[ 1441.978650][T22766]  tipc_sk_leave+0x138/0x4e0
[ 1441.978670][T22766]  ? __pfx_tipc_sk_leave+0x10/0x10
[ 1441.978686][T22766]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1441.978715][T22766]  tipc_release+0x5fc/0x2160
[ 1441.978742][T22766]  ? __pfx_tipc_release+0x10/0x10
[ 1441.978756][T22766]  ? down_write+0x162/0x1f0
[ 1441.978775][T22766]  ? __pfx_down_write+0x10/0x10
[ 1441.978789][T22766]  ? do_raw_spin_lock+0x121/0x290
[ 1441.978803][T22766]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1441.978819][T22766]  sock_close+0xc0/0x240
[ 1441.978833][T22766]  ? __pfx_sock_close+0x10/0x10
[ 1441.978850][T22766]  __fput+0x44c/0xa70
[ 1441.978869][T22766]  task_work_run+0x1d1/0x260
[ 1441.978885][T22766]  ? __pfx_task_work_run+0x10/0x10
[ 1441.978901][T22766]  ? exit_to_user_mode_loop+0x40/0x110
[ 1441.978919][T22766]  exit_to_user_mode_loop+0xec/0x110
[ 1441.978935][T22766]  do_syscall_64+0x2bd/0x3b0
[ 1441.978949][T22766]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1441.978964][T22766]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1441.978975][T22766]  ? clear_bhb_loop+0x60/0xb0
[ 1441.978990][T22766]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1441.979002][T22766] RIP: 0033:0x7fd8ca58e969
[ 1441.979015][T22766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1441.979026][T22766] RSP: 002b:00007fd8cb444038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 1441.979044][T22766] RAX: 0000000000000000 RBX: 00007fd8ca7b5fa0 RCX: 00007fd8ca58e969
[ 1441.979053][T22766] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000003
[ 1441.979060][T22766] RBP: 00007fd8cb444090 R08: 0000000000000000 R09: 0000000000000000
[ 1441.979068][T22766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1441.979075][T22766] R13: 0000000000000000 R14: 00007fd8ca7b5fa0 R15: 00007fd8ca8dfa28
[ 1441.979093][T22766]  </TASK>
[ 1442.452549][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1442.986084][ T1220] usb 5-1: new high-speed USB device number 106 using dummy_hcd
[ 1443.076428][T22782] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4861'.
[ 1443.232308][ T1220] usb 5-1: Using ep0 maxpacket: 32
[ 1443.246457][ T1220] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[ 1443.332912][ T1220] usb 5-1: config 0 has no interface number 0
[ 1443.339254][ T1220] usb 5-1: config 0 interface 12 has no altsetting 0
[ 1443.420422][T19750] usb 4-1: new high-speed USB device number 71 using dummy_hcd
[ 1443.504401][ T1220] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1443.516708][ T1220] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1443.525278][ T1220] usb 5-1: Product: syz
[ 1443.545537][ T1220] usb 5-1: Manufacturer: syz
[ 1443.621127][ T1220] usb 5-1: SerialNumber: syz
[ 1443.651369][T19750] usb 4-1: Using ep0 maxpacket: 32
[ 1443.654198][ T1220] usb 5-1: config 0 descriptor??
[ 1443.679620][T19750] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[ 1443.694043][T19750] usb 4-1: config 0 has no interface number 0
[ 1443.703401][T19750] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[ 1443.713375][T19750] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1443.717548][T22793] snd_dummy snd_dummy.0: control 2:0:-129:syz0:1 is already present
[ 1443.721878][T19750] usb 4-1: Product: syz
[ 1443.734709][T19750] usb 4-1: Manufacturer: syz
[ 1443.740294][T19750] usb 4-1: SerialNumber: syz
[ 1443.826985][T19750] usb 4-1: config 0 descriptor??
[ 1443.965417][T19750] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[ 1444.027601][T19750] usb 4-1: selecting invalid altsetting 1
[ 1444.047834][T19750] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[ 1444.267999][T19750] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1444.268419][T22782] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4861'.
[ 1444.307404][T19750] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[ 1444.326146][T19750] usb 4-1: media controller created
[ 1444.340070][T22782] input: syz0 as /devices/virtual/input/input136
[ 1444.448413][T19750] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1444.592864][T19750] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[ 1444.610694][T19750] zl10353_read_register: readreg error (reg=127, ret==-71)
[ 1444.622940][ T1220] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71
[ 1444.630702][ T1220] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71
[ 1444.648680][ T1220] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 1444.670047][T19750] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[ 1444.706160][ T1220] f81534 5-1:0.12: probe with driver f81534 failed with error -71
[ 1444.722560][T22802] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4867'.
[ 1444.750088][ T1220] usb 5-1: USB disconnect, device number 106
[ 1444.782660][T22802] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1444.885590][T19750] usb 4-1: USB disconnect, device number 71
[ 1445.446460][T22818] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4871'.
[ 1446.246649][T22831] snd_dummy snd_dummy.0: control 2:0:-129:syz0:1 is already present
[ 1448.238595][T22863] FAULT_INJECTION: forcing a failure.
[ 1448.238595][T22863] name failslab, interval 1, probability 0, space 0, times 0
[ 1448.258911][T22863] CPU: 1 UID: 0 PID: 22863 Comm: syz.0.4888 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) 
[ 1448.258943][T22863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1448.258954][T22863] Call Trace:
[ 1448.258961][T22863]  <TASK>
[ 1448.258971][T22863]  dump_stack_lvl+0x189/0x250
[ 1448.259010][T22863]  ? __pfx____ratelimit+0x10/0x10
[ 1448.259035][T22863]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1448.259065][T22863]  ? __pfx__printk+0x10/0x10
[ 1448.259094][T22863]  ? __pfx___might_resched+0x10/0x10
[ 1448.259121][T22863]  ? fs_reclaim_acquire+0x7d/0x100
[ 1448.259148][T22863]  should_fail_ex+0x414/0x560
[ 1448.259179][T22863]  should_failslab+0xa8/0x100
[ 1448.259210][T22863]  __kmalloc_noprof+0xcb/0x4f0
[ 1448.259237][T22863]  ? drm_atomic_state_init+0x9c/0x310
[ 1448.259263][T22863]  drm_atomic_state_init+0x9c/0x310
[ 1448.259286][T22863]  drm_atomic_state_alloc+0xbc/0x100
[ 1448.259307][T22863]  drm_mode_atomic_ioctl+0x437/0xcb0
[ 1448.259349][T22863]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[ 1448.259399][T22863]  ? do_raw_spin_unlock+0x122/0x240
[ 1448.259424][T22863]  ? _raw_spin_unlock+0x28/0x50
[ 1448.259456][T22863]  ? drm_is_current_master+0x19f/0x200
[ 1448.259484][T22863]  drm_ioctl_kernel+0x2cf/0x390
[ 1448.259512][T22863]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[ 1448.259535][T22863]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[ 1448.259572][T22863]  drm_ioctl+0x67f/0xb10
[ 1448.259602][T22863]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[ 1448.259631][T22863]  ? __pfx_drm_ioctl+0x10/0x10
[ 1448.259673][T22863]  ? __fget_files+0x2a/0x420
[ 1448.259702][T22863]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1448.259730][T22863]  ? __pfx_drm_ioctl+0x10/0x10
[ 1448.259755][T22863]  __se_sys_ioctl+0xf9/0x170
[ 1448.259783][T22863]  do_syscall_64+0xfa/0x3b0
[ 1448.259807][T22863]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1448.259829][T22863]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1448.259849][T22863]  ? clear_bhb_loop+0x60/0xb0
[ 1448.259874][T22863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1448.259894][T22863] RIP: 0033:0x7f463d38e969
[ 1448.259914][T22863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1448.259932][T22863] RSP: 002b:00007f463e16d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1448.259955][T22863] RAX: ffffffffffffffda RBX: 00007f463d5b5fa0 RCX: 00007f463d38e969
[ 1448.259971][T22863] RDX: 0000200000000380 RSI: 00000000c03864bc RDI: 0000000000000003
[ 1448.259985][T22863] RBP: 00007f463e16d090 R08: 0000000000000000 R09: 0000000000000000
[ 1448.259997][T22863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1448.260009][T22863] R13: 0000000000000000 R14: 00007f463d5b5fa0 R15: 00007f463d6dfa28
[ 1448.260036][T22863]  </TASK>
[ 1448.311333][T19737] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[ 1448.314252][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1448.543965][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1448.641403][T19737] usb 2-1: device descriptor read/64, error -71
[ 1448.881411][T19737] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[ 1448.991538][T19752] usb 4-1: new full-speed USB device number 72 using dummy_hcd
[ 1449.022831][T19737] usb 2-1: device descriptor read/64, error -71
[ 1449.131761][T19737] usb usb2-port1: attempt power cycle
[ 1449.137917][ T1220] usb 5-1: new high-speed USB device number 107 using dummy_hcd
[ 1449.163017][T19752] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[ 1449.175477][T19752] usb 4-1: config 0 has no interface number 0
[ 1449.187614][T19752] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[ 1449.200094][T19752] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1449.209732][T19752] usb 4-1: Product: syz
[ 1449.217106][T19752] usb 4-1: Manufacturer: syz
[ 1449.222407][T19752] usb 4-1: SerialNumber: syz
[ 1449.238103][T19752] usb 4-1: config 0 descriptor??
[ 1449.337679][ T1220] usb 5-1: config 0 has no interfaces?
[ 1449.414817][ T1220] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1449.446698][ T1220] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1449.491153][T19737] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[ 1449.504961][ T1220] usb 5-1: Product: syz
[ 1449.509278][ T1220] usb 5-1: Manufacturer: syz
[ 1449.514336][ T1220] usb 5-1: SerialNumber: syz
[ 1449.522478][ T1220] usb 5-1: config 0 descriptor??
[ 1449.531912][T19737] usb 2-1: device descriptor read/8, error -71
[ 1449.776078][T19737] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[ 1449.835111][T19737] usb 2-1: device descriptor read/8, error -71
[ 1449.967323][T19737] usb usb2-port1: unable to enumerate USB device
[ 1450.219684][T22883] ptrace attach of "./syz-executor exec"[17507] was attempted by "./syz-executor exec"[22883]
[ 1450.492120][T19752] usb 4-1: Firmware version (0.0) predates our first public release.
[ 1450.524924][T19752] usb 4-1: Please update to version 0.2 or newer
[ 1450.606267][T19752] usb 4-1: USB disconnect, device number 72
[ 1451.348308][T22890] vxcan1: entered promiscuous mode
[ 1451.841345][T19737] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[ 1452.149973][T19737] usb 2-1: Using ep0 maxpacket: 8
[ 1452.567885][T19732] usb 5-1: USB disconnect, device number 107
[ 1452.627430][T22910] vlan3: entered allmulticast mode
[ 1452.701423][T19737] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[ 1452.709593][T19737] usb 2-1: config 0 has no interface number 0
[ 1452.770062][T19737] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1452.797210][T19737] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 1452.940543][T19737] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1452.998915][T19737] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 1453.047816][T19737] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 1453.092761][T19737] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1453.139292][T19737] usb 2-1: config 0 descriptor??
[ 1453.239438][T19737] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 1453.371252][ T5891] usb 5-1: new high-speed USB device number 108 using dummy_hcd
[ 1453.692214][ T5891] usb 5-1: device descriptor read/64, error -71
[ 1453.955491][ T5891] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[ 1454.111460][ T5891] usb 5-1: device descriptor read/64, error -71
[ 1454.241863][ T5891] usb usb5-port1: attempt power cycle
[ 1454.601226][ T5891] usb 5-1: new high-speed USB device number 110 using dummy_hcd
[ 1454.631954][ T5891] usb 5-1: device descriptor read/8, error -71
[ 1454.675446][T22930] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4912'.
[ 1454.871195][ T5891] usb 5-1: new high-speed USB device number 111 using dummy_hcd
[ 1454.892173][ T5891] usb 5-1: device descriptor read/8, error -71
[ 1454.991268][T19752] usb 4-1: new high-speed USB device number 73 using dummy_hcd
[ 1455.005393][ T5891] usb usb5-port1: unable to enumerate USB device
[ 1455.121195][T19752] usb 4-1: device descriptor read/64, error -71
[ 1455.371354][T19752] usb 4-1: new high-speed USB device number 74 using dummy_hcd
[ 1455.501946][T19752] usb 4-1: device descriptor read/64, error -71
[ 1455.621865][T19752] usb usb4-port1: attempt power cycle
[ 1455.629284][ T5891] usb 2-1: USB disconnect, device number 46
[ 1455.645569][ T5891] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[ 1455.961332][T19752] usb 4-1: new high-speed USB device number 75 using dummy_hcd
[ 1455.988129][T19752] usb 4-1: device descriptor read/8, error -71
[ 1456.121582][ T5891] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[ 1456.231133][T19752] usb 4-1: new high-speed USB device number 76 using dummy_hcd
[ 1456.252020][T19752] usb 4-1: device descriptor read/8, error -71
[ 1456.351679][ T5891] usb 2-1: Using ep0 maxpacket: 16
[ 1456.361504][T19752] usb usb4-port1: unable to enumerate USB device
[ 1456.362682][ T5891] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 1456.423794][ T5891] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[ 1456.433710][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1456.468679][ T5891] usb 2-1: config 0 descriptor??
[ 1456.534072][ T5891] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input137
[ 1456.832432][ T5891] bcm5974 2-1:0.0: could not read from device
[ 1456.853216][ T5187] bcm5974 2-1:0.0: could not read from device
[ 1456.868584][ T5891] input: failed to attach handler mousedev to device input137, error: -5
[ 1456.883427][ T5187] bcm5974 2-1:0.0: could not read from device
[ 1456.904064][ T5891] usb 2-1: USB disconnect, device number 47
[ 1456.910418][ T5187] bcm5974 2-1:0.0: could not read from device
[ 1458.510278][T22977] macsec0: left promiscuous mode
[ 1458.841543][T19750] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[ 1459.013517][T19750] usb 2-1: Using ep0 maxpacket: 8
[ 1459.060372][T19750] usb 2-1: config 0 has an invalid interface number: 52 but max is 0
[ 1459.082496][T19750] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1459.211480][T19750] usb 2-1: config 0 has no interface number 0
[ 1459.226794][T19750] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7
[ 1459.239658][T19750] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1459.380291][T19750] usb 2-1: config 0 interface 52 has no altsetting 0
[ 1459.411607][T19750] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00
[ 1459.441349][T19750] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0
[ 1459.469872][T19750] usb 2-1: Manufacturer: syz
[ 1459.504436][T19750] usb 2-1: config 0 descriptor??
[ 1459.776953][T19750] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input138
[ 1459.927946][T19750] usb 2-1: USB disconnect, device number 48
[ 1459.934074][    C1] synaptics_usb 2-1:0.52: synusb_irq - usb_submit_urb failed with result: -19
[ 1461.832944][T23009] FAULT_INJECTION: forcing a failure.
[ 1461.832944][T23009] name failslab, interval 1, probability 0, space 0, times 0
[ 1461.866307][T23009] CPU: 1 UID: 0 PID: 23009 Comm: syz.0.4937 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) 
[ 1461.866343][T23009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1461.866356][T23009] Call Trace:
[ 1461.866372][T23009]  <TASK>
[ 1461.866382][T23009]  dump_stack_lvl+0x189/0x250
[ 1461.866419][T23009]  ? __pfx____ratelimit+0x10/0x10
[ 1461.866445][T23009]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1461.866476][T23009]  ? __pfx__printk+0x10/0x10
[ 1461.866506][T23009]  ? __pfx___might_resched+0x10/0x10
[ 1461.866534][T23009]  ? fs_reclaim_acquire+0x7d/0x100
[ 1461.866559][T23009]  should_fail_ex+0x414/0x560
[ 1461.866591][T23009]  ? nf_hook_entries_grow+0x27c/0x710
[ 1461.866617][T23009]  should_failslab+0xa8/0x100
[ 1461.866646][T23009]  __kvmalloc_node_noprof+0x168/0x600
[ 1461.866675][T23009]  ? nf_hook_entries_grow+0x27c/0x710
[ 1461.866708][T23009]  nf_hook_entries_grow+0x27c/0x710
[ 1461.866752][T23009]  __nf_register_net_hook+0x2c9/0x930
[ 1461.866787][T23009]  ? nf_register_net_hook+0xc8/0x190
[ 1461.866819][T23009]  nf_register_net_hook+0xb2/0x190
[ 1461.866851][T23009]  nf_register_net_hooks+0x44/0x1b0
[ 1461.866883][T23009]  nf_ct_netns_do_get+0x3bf/0x5a0
[ 1461.866912][T23009]  ? nf_ct_iterate_cleanup_net+0x9f/0xd0
[ 1461.866936][T23009]  ? __pfx_nf_ct_netns_do_get+0x10/0x10
[ 1461.866962][T23009]  ? nf_ct_netns_do_get+0x4da/0x5a0
[ 1461.866995][T23009]  ? __pfx_nf_ct_netns_do_get+0x10/0x10
[ 1461.867036][T23009]  nf_ct_netns_inet_get+0x1f/0x150
[ 1461.867069][T23009]  nf_ct_netns_get+0x5b/0xb0
[ 1461.867099][T23009]  nft_connlimit_do_init+0x1de/0x2e0
[ 1461.867135][T23009]  nft_set_elem_expr_alloc+0x1d8/0x590
[ 1461.867166][T23009]  ? __pfx_nft_set_elem_expr_alloc+0x10/0x10
[ 1461.867211][T23009]  ? nft_rhash_init+0x2b3/0x3a0
[ 1461.867242][T23009]  ? __pfx_nft_rhash_init+0x10/0x10
[ 1461.867272][T23009]  ? __pfx_nft_rhash_key+0x10/0x10
[ 1461.867298][T23009]  ? __pfx_nft_rhash_obj+0x10/0x10
[ 1461.867325][T23009]  ? __pfx_nft_rhash_cmp+0x10/0x10
[ 1461.867349][T23009]  nft_set_expr_alloc+0x68/0x760
[ 1461.867382][T23009]  ? kfree+0x18e/0x440
[ 1461.867414][T23009]  nf_tables_newset+0x1c47/0x2530
[ 1461.867453][T23009]  ? __pfx_nf_tables_newset+0x10/0x10
[ 1461.867502][T23009]  ? __nla_parse+0x40/0x60
[ 1461.867536][T23009]  nfnetlink_rcv+0x1132/0x2520
[ 1461.867601][T23009]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1461.867646][T23009]  ? ref_tracker_free+0x63a/0x7d0
[ 1461.867710][T23009]  ? __netlink_deliver_tap+0x807/0x850
[ 1461.867752][T23009]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1461.867781][T23009]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1461.867818][T23009]  netlink_unicast+0x758/0x8d0
[ 1461.867860][T23009]  netlink_sendmsg+0x805/0xb30
[ 1461.867891][T23009]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1461.867915][T23009]  ? aa_sock_msg_perm+0x94/0x160
[ 1461.867942][T23009]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1461.867966][T23009]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1461.867986][T23009]  __sock_sendmsg+0x219/0x270
[ 1461.868017][T23009]  ____sys_sendmsg+0x505/0x830
[ 1461.868046][T23009]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1461.868079][T23009]  ? import_iovec+0x74/0xa0
[ 1461.868105][T23009]  ___sys_sendmsg+0x21f/0x2a0
[ 1461.868130][T23009]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1461.868196][T23009]  ? __fget_files+0x2a/0x420
[ 1461.868224][T23009]  ? __fget_files+0x3a0/0x420
[ 1461.868265][T23009]  __x64_sys_sendmsg+0x19b/0x260
[ 1461.868290][T23009]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1461.868323][T23009]  ? __pfx_ksys_write+0x10/0x10
[ 1461.868345][T23009]  ? rcu_is_watching+0x15/0xb0
[ 1461.868388][T23009]  ? do_syscall_64+0xbe/0x3b0
[ 1461.868418][T23009]  do_syscall_64+0xfa/0x3b0
[ 1461.868441][T23009]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1461.868464][T23009]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1461.868484][T23009]  ? clear_bhb_loop+0x60/0xb0
[ 1461.868509][T23009]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1461.868528][T23009] RIP: 0033:0x7f463d38e969
[ 1461.868548][T23009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1461.868566][T23009] RSP: 002b:00007f463e16d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1461.868590][T23009] RAX: ffffffffffffffda RBX: 00007f463d5b5fa0 RCX: 00007f463d38e969
[ 1461.868605][T23009] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1461.868618][T23009] RBP: 00007f463e16d090 R08: 0000000000000000 R09: 0000000000000000
[ 1461.868631][T23009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1461.868644][T23009] R13: 0000000000000000 R14: 00007f463d5b5fa0 R15: 00007f463d6dfa28
[ 1461.868680][T23009]  </TASK>
[ 1462.311638][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1463.113821][T23023] ==================================================================
[ 1463.122067][T23023] BUG: KASAN: vmalloc-out-of-bounds in tpg_fill_plane_buffer+0x1b9b/0x5ec0
[ 1463.130801][T23023] Write of size 2560 at addr ffffc9000f05a6bc by task vivid-000-vid-c/23023
[ 1463.139503][T23023] 
[ 1463.141861][T23023] CPU: 1 UID: 0 PID: 23023 Comm: vivid-000-vid-c Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) 
[ 1463.141888][T23023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1463.141901][T23023] Call Trace:
[ 1463.141910][T23023]  <TASK>
[ 1463.141920][T23023]  dump_stack_lvl+0x189/0x250
[ 1463.141956][T23023]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1463.141986][T23023]  ? __pfx__printk+0x10/0x10
[ 1463.142008][T23023]  ? __pfx__printk+0x10/0x10
[ 1463.142027][T23023]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[ 1463.142051][T23023]  ? __virt_addr_valid+0xdc/0x5c0
[ 1463.142072][T23023]  print_report+0xd2/0x2b0
[ 1463.142096][T23023]  ? tpg_fill_plane_buffer+0x1b9b/0x5ec0
[ 1463.142123][T23023]  kasan_report+0x118/0x150
[ 1463.142152][T23023]  ? tpg_fill_plane_buffer+0x1b9b/0x5ec0
[ 1463.142181][T23023]  kasan_check_range+0x2b0/0x2c0
[ 1463.142208][T23023]  ? tpg_fill_plane_buffer+0x1b9b/0x5ec0
[ 1463.142259][T23023]  __asan_memcpy+0x40/0x70
[ 1463.142281][T23023]  tpg_fill_plane_buffer+0x1b9b/0x5ec0
[ 1463.142339][T23023]  vivid_thread_vid_cap_tick+0xfff/0x5fd0
[ 1463.142375][T23023]  ? __free_object+0x4d4/0x6c0
[ 1463.142412][T23023]  ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10
[ 1463.142455][T23023]  vivid_thread_vid_cap+0x8d8/0x10d0
[ 1463.142492][T23023]  ? __pfx_vivid_thread_vid_cap+0x10/0x10
[ 1463.142522][T23023]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1463.142544][T23023]  ? __kthread_parkme+0x7b/0x200
[ 1463.142573][T23023]  ? __kthread_parkme+0x1a1/0x200
[ 1463.142605][T23023]  kthread+0x70e/0x8a0
[ 1463.142627][T23023]  ? __pfx_vivid_thread_vid_cap+0x10/0x10
[ 1463.142651][T23023]  ? __pfx_kthread+0x10/0x10
[ 1463.142672][T23023]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1463.142701][T23023]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1463.142723][T23023]  ? __pfx_kthread+0x10/0x10
[ 1463.142744][T23023]  ret_from_fork+0x3fc/0x770
[ 1463.142771][T23023]  ? __pfx_ret_from_fork+0x10/0x10
[ 1463.142799][T23023]  ? __switch_to_asm+0x39/0x70
[ 1463.142819][T23023]  ? __switch_to_asm+0x33/0x70
[ 1463.142837][T23023]  ? __pfx_kthread+0x10/0x10
[ 1463.142858][T23023]  ret_from_fork_asm+0x1a/0x30
[ 1463.142886][T23023]  </TASK>
[ 1463.142895][T23023] 
[ 1463.350381][T23023] The buggy address belongs to the virtual mapping at
[ 1463.350381][T23023]  [ffffc9000f059000, ffffc9000f05c000) created by:
[ 1463.350381][T23023]  vb2_vmalloc_alloc+0xef/0x340
[ 1463.368573][T23023] 
[ 1463.371000][T23023] The buggy address belongs to the physical page:
[ 1463.377426][T23023] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x5 pfn:0x2853e
[ 1463.386240][T23023] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 1463.393634][T23023] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000
[ 1463.402334][T23023] raw: 0000000000000005 0000000000000000 00000001ffffffff 0000000000000000
[ 1463.411025][T23023] page dumped because: kasan: bad access detected
[ 1463.417535][T23023] page_owner tracks the page as allocated
[ 1463.423254][T23023] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 23004, tgid 23003 (syz.1.4934), ts 1462496526619, free_ts 1462496480909
[ 1463.442885][T23023]  post_alloc_hook+0x240/0x2a0
[ 1463.447771][T23023]  get_page_from_freelist+0x21e0/0x22c0
[ 1463.453350][T23023]  __alloc_frozen_pages_noprof+0x181/0x370
[ 1463.459184][T23023]  alloc_pages_mpol+0x232/0x4a0
[ 1463.464059][T23023]  alloc_pages_noprof+0xa9/0x190
[ 1463.469216][T23023]  __vmalloc_node_range_noprof+0x97d/0x1340
[ 1463.475304][T23023]  vmalloc_user_noprof+0xad/0xf0
[ 1463.480249][T23023]  vb2_vmalloc_alloc+0xef/0x340
[ 1463.485123][T23023]  __vb2_queue_alloc+0x9c2/0x15a0
[ 1463.490170][T23023]  vb2_core_reqbufs+0xc31/0x1420
[ 1463.495121][T23023]  vb2_ioctl_reqbufs+0x4c0/0x830
[ 1463.500069][T23023]  __video_do_ioctl+0xc9b/0xdb0
[ 1463.504934][T23023]  video_usercopy+0x86e/0x14f0
[ 1463.509808][T23023]  v4l2_ioctl+0x18a/0x1e0
[ 1463.514148][T23023]  __se_sys_ioctl+0xf9/0x170
[ 1463.518830][T23023]  do_syscall_64+0xfa/0x3b0
[ 1463.523344][T23023] page last free pid 23004 tgid 23003 stack trace:
[ 1463.529845][T23023]  __free_frozen_pages+0xc6e/0xe50
[ 1463.535222][T23023]  kasan_populate_vmalloc+0x118/0x1a0
[ 1463.540616][T23023]  alloc_vmap_area+0x1e2b/0x24c0
[ 1463.545567][T23023]  __get_vm_area_node+0x1f8/0x300
[ 1463.550633][T23023]  __vmalloc_node_range_noprof+0x301/0x1340
[ 1463.556542][T23023]  vmalloc_user_noprof+0xad/0xf0
[ 1463.561665][T23023]  vb2_vmalloc_alloc+0xef/0x340
[ 1463.566647][T23023]  __vb2_queue_alloc+0x9c2/0x15a0
[ 1463.571774][T23023]  vb2_core_reqbufs+0xc31/0x1420
[ 1463.576722][T23023]  vb2_ioctl_reqbufs+0x4c0/0x830
[ 1463.581670][T23023]  __video_do_ioctl+0xc9b/0xdb0
[ 1463.586535][T23023]  video_usercopy+0x86e/0x14f0
[ 1463.591383][T23023]  v4l2_ioctl+0x18a/0x1e0
[ 1463.595764][T23023]  __se_sys_ioctl+0xf9/0x170
[ 1463.600377][T23023]  do_syscall_64+0xfa/0x3b0
[ 1463.604977][T23023]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1463.610974][T23023] 
[ 1463.613316][T23023] Memory state around the buggy address:
[ 1463.618953][T23023]  ffffc9000f05af00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1463.627024][T23023]  ffffc9000f05af80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 1463.635091][T23023] >ffffc9000f05b000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 1463.643261][T23023]                    ^
[ 1463.647351][T23023]  ffffc9000f05b080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 1463.655436][T23023]  ffffc9000f05b100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8
[ 1463.663674][T23023] ==================================================================
[ 1463.671818][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1463.812642][T23023] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1463.820259][T23023] CPU: 1 UID: 0 PID: 23023 Comm: vivid-000-vid-c Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) 
[ 1463.832538][T23023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 1463.842703][T23023] Call Trace:
[ 1463.846169][T23023]  <TASK>
[ 1463.849110][T23023]  dump_stack_lvl+0x99/0x250
[ 1463.853821][T23023]  ? __asan_memcpy+0x40/0x70
[ 1463.858422][T23023]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1463.863645][T23023]  ? __pfx__printk+0x10/0x10
[ 1463.868334][T23023]  panic+0x2db/0x790
[ 1463.872251][T23023]  ? __pfx_panic+0x10/0x10
[ 1463.876766][T23023]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[ 1463.882757][T23023]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1463.889177][T23023]  ? print_memory_metadata+0x314/0x400
[ 1463.894738][T23023]  ? tpg_fill_plane_buffer+0x1b9b/0x5ec0
[ 1463.900467][T23023]  check_panic_on_warn+0x89/0xb0
[ 1463.905766][T23023]  ? tpg_fill_plane_buffer+0x1b9b/0x5ec0
[ 1463.911504][T23023]  end_report+0x78/0x160
[ 1463.915974][T23023]  kasan_report+0x129/0x150
[ 1463.921208][T23023]  ? tpg_fill_plane_buffer+0x1b9b/0x5ec0
[ 1463.926952][T23023]  kasan_check_range+0x2b0/0x2c0
[ 1463.931909][T23023]  ? tpg_fill_plane_buffer+0x1b9b/0x5ec0
[ 1463.937641][T23023]  __asan_memcpy+0x40/0x70
[ 1463.942067][T23023]  tpg_fill_plane_buffer+0x1b9b/0x5ec0
[ 1463.947691][T23023]  vivid_thread_vid_cap_tick+0xfff/0x5fd0
[ 1463.953519][T23023]  ? __free_object+0x4d4/0x6c0
[ 1463.958327][T23023]  ? __pfx_vivid_thread_vid_cap_tick+0x10/0x10
[ 1463.964786][T23023]  vivid_thread_vid_cap+0x8d8/0x10d0
[ 1463.970184][T23023]  ? __pfx_vivid_thread_vid_cap+0x10/0x10
[ 1463.976010][T23023]  ? __pfx_autoremove_wake_function+0x10/0x10
[ 1463.982091][T23023]  ? __kthread_parkme+0x7b/0x200
[ 1463.987045][T23023]  ? __kthread_parkme+0x1a1/0x200
[ 1463.992265][T23023]  kthread+0x70e/0x8a0
[ 1463.996351][T23023]  ? __pfx_vivid_thread_vid_cap+0x10/0x10
[ 1464.002176][T23023]  ? __pfx_kthread+0x10/0x10
[ 1464.006792][T23023]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1464.012011][T23023]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1464.017222][T23023]  ? __pfx_kthread+0x10/0x10
[ 1464.021911][T23023]  ret_from_fork+0x3fc/0x770
[ 1464.026630][T23023]  ? __pfx_ret_from_fork+0x10/0x10
[ 1464.031753][T23023]  ? __switch_to_asm+0x39/0x70
[ 1464.036575][T23023]  ? __switch_to_asm+0x33/0x70
[ 1464.041452][T23023]  ? __pfx_kthread+0x10/0x10
[ 1464.046079][T23023]  ret_from_fork_asm+0x1a/0x30
[ 1464.050868][T23023]  </TASK>
[ 1464.054353][T23023] Kernel Offset: disabled
[ 1464.058708][T23023] Rebooting in 86400 seconds..